ZyXEL Communications P-2602HWLNI manuel d'utilisation

www .zyxel.com P-2602HWLNI Series 802.1 1g Wireless ADSL2+ 4-Port V oIP IAD User ’ s Guide V ersion 3.40 9/2007 Edition 2 DEFAULT LOGIN IP Address http://192.168.1 . 1 Administrator Name admin Administrator Password admin User Name user User Password 1234[...]

[...]

About This User's Guide P-2602HWLNI User’s Guide 3 About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator . Y ou should have at least a basic knowledge of TCP/IP networking concepts and topology . Related Document ation • Quick Start Guide The Quic[...]

Document Conventions P-2602HWLNI User’s Guide 4 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide. 1 W arnings tell you about things that could harm you or your device. " Notes tell you other important informati on (for example, other things you may need to configure or helpful tip s[...]

Document Conventions P-2602HWLNI User’s Guide 5 Icons Used in Figures Figures in this User ’ s Guide may use the followi ng generic icons. The ZyXEL Device icon is not an exact representation of your device. ZyXEL Device Computer Notebook computer Server DSLAM Firewall T elephon e Switch Router[...]

Safety Warnings P-2602HWLNI User’s Guide 6 Safety Warnings 1 For your safety , be sure to read and follow all warni ng notices and instructions. • Do NOT use this product near water , for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. • Do NOT store thin gs on the devi[...]

Safety Warnings P-2602HWLNI User’s Guide 7[...]

Safety Warnings P-2602HWLNI User’s Guide 8[...]

Contents Overview P-2602HWLNI User’s Guide 9 Contents Overview Introduction .......................................... ........................................................................ .......... 39 Introducing the ZyXEL Device ............... ................ ............. ................ ............. ................ ......... .4 1 Int[...]

Contents Overview P-2602HWLNI User’s Guide 10 Maintenance and T roubleshooting ............................................................................... ...... 373 System ............ ............. ............. ................ ............. ............. ................ ............. ........... ............. 3 75 Call History ..........[...]

Table of Contents P-2602HWLNI User’s Guide 11 Table of Contents About This User's Guide ........................................................................... ............................... 3 Document Conventions.................................................................. ......................................... .4 Safety Warnin[...]

Table of Contents P-2602HWLNI User’s Guide 12 2.3.1 T i tle Bar ........ ................ ............. ............. ............. ................ ............. ............. ...... ....... 53 2.3.2 Navigation Panel .......................... ....... ...... ............. ............. ............. ................ .......... 53 2.3.3 Main Wind[...]

Table of Contents P-2602HWLNI User’s Guide 13 7.1.1 Encapsulation ......... ................ ............. ............. ................ ............. ............. .............. 101 7.1.2 Multiplexing .. ............. ............. ................ ............. ............. ................ ............. ......... .. 102 7.1.3 VPI and VCI . [...]

Table of Contents P-2602HWLNI User’s Guide 14 9.2.5 One-T ouch Intelligen t Security T echnology (OTIST) .............. ............. ............. ........ 132 9.3 Wireless Performance Overview ........... ................. ............. ................ ............. ................ . 132 9.3.1 Quality of Service (QoS) .. ................ ....[...]

Table of Contents P-2602HWLNI User’s Guide 15 Chapter 1 1 V oice ............................................ .............................................................................. ............. 169 1 1.1 Introduction to V oIP .............. ............. ................ ............. ................ ............. ................ .....[...]

Table of Contents P-2602HWLNI User’s Guide 16 1 1.17 Incoming Call Policy Screen .......... ................ ................. ............ ................. ............ ..... 200 1 1.18 Distinctive Ring Screen ... ............. ................ ............. ................ ............. ................ ....... .2 0 2 1 1.19 SIP Prefix Screen[...]

Table of Contents P-2602HWLNI User’s Guide 17 13.3.3 Call Forwarding .......... .... ............ ............. ............. ................ ............. ............. ........ 22 8 13.3.4 Follow Me ............. ............. ............. ................ ............. ................ ............. ............. .2 2 8 13.3.5 Call Pickup ..[...]

Table of Contents P-2602HWLNI User’s Guide 18 15.4.1 LAN to W AN Rules ......... ............ .......... ....... ............. ............ ................. ............ ..... 248 15.4.2 Alerts ....................... ............. ............. ................ ............. ................ ............. ...... ..... 248 15.5 General Firewall [...]

Table of Contents P-2602HWLNI User’s Guide 19 18.4 Secure Gateway Ad dres s ........... ................ ............. ............. ............. ................ ............. . 276 18.4.1 Dynamic Secure Gatewa y Address .................. ................ ............. ............. ........... 277 18.5 VPN Setup Screen .............. ........[...]

Table of Contents P-2602HWLNI User’s Guide 20 19.14 T rusted Remote Host Certif icate Details ................... ............. ................ ............. ........ 319 19.15 Directory Servers ......... ............. ................ ............. ................ ............. ................ ....... .... 322 19.16 Directory Server Add and E[...]

Table of Contents P-2602HWLNI User’s Guide 21 23.6 Configuring FTP ................. ................ ............. ................. ............ ................. ............. .... 348 23.7 SNMP ............ ................ ............. ............. ................ ............. ............. ................ ..... ......... 349 23.7.1 Sup[...]

Table of Contents P-2602HWLNI User’s Guide 22 26.4 Configuring Call History Se ttings .. ............. ............. ................ ............. ............. .............. 384 Chapter 27 Logs ................................. .................................................................................... ..... ............ 387 27.1 Logs[...]

Table of Contents P-2602HWLNI User’s Guide 23 29.9.4 TFTP Upload Command Ex ample .......... ................. ............ .......................... ........ 418 Chapter 30 Diagnostic .................................. .................................................................................. ......... 419 30.1 General Diagnostic .... .[...]

Table of Contents P-2602HWLNI User’s Guide 24[...]

List of Figures P-2602HWLNI User’s Guide 25 List of Figures Figure 1 Internet Access Applic ation ..... ................ ............. ............. ................ ............. ............. . ............ 43 Figure 2 Internet T elephony Servic e Provider Application ............ ............. ................ ............. ................ 44[...]

List of Figure s P-2602HWLNI User’s Guide 26 Figure 39 Select a Mode ....................... ................ ............. ................ ............. ................ ...... .............. ... 83 Figure 40 Wizard: We lc ome ..... ............. ............. ............. ............. ................ ............. ............. .. .........[...]

List of Figures P-2602HWLNI User’s Guide 27 Figure 82 Wireless LAN: QoS ............ ............. ............. ............. ................ ............. ............. ...... ........... 146 Figure 83 Application Priority Configuration .... ...... ................ ............. ............. ............. ................ . ....... 147 Figure[...]

List of Figure s P-2602HWLNI User’s Guide 28 Figure 125 V oIP > T runking > Call Rule ............. ............. ............. ............. ................ ............. ....... ....... 218 Figure 126 V oIP to PSTN Example ................. ... .......... ............. ................ ............. ............. .......... ....... 219 F[...]

List of Figures P-2602HWLNI User’s Guide 29 Figure 168 T elecommuters Using Unique VPN Rules Example ...... ............. ................ ............. ........... 2 99 Figure 169 Certificate Configuration O verview ................ ............. ................ ............. ................ ....... .... 302 Figure 170 My Certificates .... ...[...]

List of Figure s P-2602HWLNI User’s Guide 30 Figure 21 1 Add/Remove Pr ograms: Windows Setup: Communic ation ........... ................ ................ ..... 363 Figure 212 Add/Remove Programs: Windows Setup: Communicati on: Components .. ............. ........... 364 Figure 213 Network Connections .......... ................ ............. ...[...]

List of Figures P-2602HWLNI User’s Guide 31 Figure 254 Windows XP: Control Panel: Network Conn ections: Properties ....... ............. ................ ..... 440 Figure 255 Windows XP: Local Area Connection Prop erties ............. ................ ............. ............. ........ 440 Figure 256 Windows XP: Advanced TCP/ IP Settings ......[...]

List of Figure s P-2602HWLNI User’s Guide 32[...]

List of Tables P-2602HWLNI User’s Guide 33 List of Tables T able 1 Models Covered ............. ................. ............ ................. ............. ................ ............. .. ................. 41 T able 2 LEDs ..................... ............. ............. ................ ............. ................ ............. ........[...]

List of Tables P-2602HWLNI User’s Guide 34 T able 39 Wireless: WP A(2)-PSK ................. ................................................................ ............... ........ . 137 T able 40 Wireless: WP A(2) ............. ................ ............. ................ ............. ................ ............. ......... ..... 138 T ab[...]

List of Tables P-2602HWLNI User’s Guide 35 T able 82 V oIP > Trunking > General ........ ............. ................ ............. ................ ............. ............ ......... 2 15 T able 83 V oIP > Trunking > Peer Call ... ................ ............. ................ ............. ................ ............ ........[...]

List of Tables P-2602HWLNI User’s Guide 36 T able 125 Trusted Remote Host Details ......................... ................ ................ ............. ................ .. ...... 321 T able 126 Directory Serv ers ........................ ............ ................. ................ ............. ................ ......... ..... 323 T able [...]

List of Tables P-2602HWLNI User’s Guide 37 T able 168 ICMP Notes ................ ................. ............ ................. ............. ................ .............. ........... ..... 397 T able 169 Syslog Logs ......................... ................ ............. ................ ............. ................ ..... ...............[...]

List of Tables P-2602HWLNI User’s Guide 38[...]

39 P ART I Introduction Introducing the ZyXEL Device (41) Introducing the W eb Configurator (4 9)[...]

40[...]

P-2602HWLNI User’s Guide 41 C HAPTER 1 Introducing the ZyXEL Device This chapter introduces the main applications and features of the ZyXEL Device. It also introduces the ways yo u can manage the ZyXEL Device. 1.1 Overview The ZyXEL Device is an Integrated Access Devi ce (IAD) that combines an ADSL2+ router with V oice over IP (V oIP) co mmunicat[...]

Chapter 1 Introducing the ZyXEL Device P-2602HWLNI User’s Guide 42 The P-2602HW NLI-D3A works over IS DN (Integrated Services Digital Network). The P-2602HWNLI-D7A works over T -ISDN (UR-2). " Only use firmware for your ZyXEL Device’ s specific model. Refer to the label on the bottom of your ZyXEL Device. The web browser-based Graphical Us[...]

Chapter 1 Introducing the ZyXEL Device P-2602HWLNI User’s Guide 43 1.4 Applications for the ZyXEL Device Here are some example uses for wh ich the ZyXEL Device is well suited. 1.4.1 Internet Access Y our device is the ideal high-speed Internet ac cess solution. It supports the TCP/IP protocol, which the Internet uses exclusively . It is co mpatib[...]

Chapter 1 Introducing the ZyXEL Device P-2602HWLNI User’s Guide 44 Figure 2 Internet T elephony Service Provider Application 1.4.3 Make Peer-to-peer Calls Y ou can call directly to someone’ s IP address without using a SIP proxy server . Peer-to-peer calls are also called “Point to Point” or “IP-to -IP” ca lls. Y ou must know the peer ?[...]

Chapter 1 Introducing the ZyXEL Device P-2602HWLNI User’s Guide 45 Figure 4 Firewall Application 1.4.5 LAN to LAN Application Y ou can use your device to connect two geogra phically dispersed networks over the ADSL line. A typical LAN-to-LAN app lication is shown as follows. Figure 5 LAN-to-LAN Applic ation[...]

Chapter 1 Introducing the ZyXEL Device P-2602HWLNI User’s Guide 46 1.5 LEDs Figure 6 LEDs The following table describes your device’ s LEDs. T able 2 LEDs LED COLOR STATUS DESCRIPTION POWER Green On Y our device is receiving power and fun ctioning properl y . Blinking Y our device is rebooting and performing a se lf-test. Red On Y our device is[...]

Chapter 1 Introducing the ZyXEL Device P-2602HWLNI User’s Guide 47 Refer to the Quick S tart Guide for in formation on hard ware connections. 1.6 The RESET Button Y ou can use the RESET button at the back of the device to turn the wireless LAN off or on. Y ou can also use it to activate OTIST in order to assign your wireless security settings to [...]

Chapter 1 Introducing the ZyXEL Device P-2602HWLNI User’s Guide 48 T o activate OTIST in order to assign your wirel ess security se ttings to wireless clients , press the RESET button for five second s and release it. The WLAN LED should flash while the device uses OTIST to send wireless settings to OTIST clients.(“W” models only) T o set the[...]

P-2602HWLNI User’s Guide 49 C HAPTER 2 Introducing the Web Configurator This chapter describes how to access and navigate the web configurator . 2.1 W eb Configurator Overview The web configur ator is an HTML-based mana geme nt interface that allows easy device setup and management via Interne t browser . Use In ternet Explorer 6.0 and later or N[...]

Chapter 2 Introducing the Web Configur ator P-2602HWLNI User’s Guide 50 Figure 7 Password Screen 2.2 Login T ypes There are two login types; “user” and “admini strator”. When you choose user acce ss, you can make basic configuratio n changes only . Adva nced features are not available. When you choose administrator access, a ll features a[...]

Chapter 2 Introducing the Web Configurator P-2602HWLNI User’s Guide 51 " If you do not change the password, the following screen appears every time you log in with the default password. Figure 8 Change Password Screen 4 Click Apply in the Replace Certificate screen to create a certificate using your ZyXEL Device’ s MAC address that will be[...]

Chapter 2 Introducing the Web Configur ator P-2602HWLNI User’s Guide 52 " For security reasons, the ZyXEL Device automatically logs you out if you do not use the web configurator for five minutes (default). If this happens, log in again. Figure 10 Wizard or Advanced Screen 2.3 W eb Configurator Main Screen Figure 1 1 Main Screen As illustrat[...]

Chapter 2 Introducing the Web Configurator P-2602HWLNI User’s Guide 53 • A - title bar • B - navigation panel • C - main window • D - status bar 2.3.1 T i tle Bar The title bar allows you to cha nge the language and provides some icons in the upper right corner . The icons provide th e following functions. 2.3.2 Navigation Panel Use the m[...]

Chapter 2 Introducing the Web Configur ator P-2602HWLNI User’s Guide 54 Wireless LAN General Use this screen to configure the wireless LAN settings and WLAN authentication/security settings. OTIST Use this screen to assign your wire less security settings to wireless clients. MAC Filter Use this screen to configure the ZyXEL Device to give exclus[...]

Chapter 2 Introducing the Web Configurator P-2602HWLNI User’s Guide 55 Firewall General Use this screen to activate/deac tivate the firewall and the default action to take on network traffic g oing in specific directions. Rules This screen shows a summary of the firewall rules, and allows you to edit/ add a firewall rule. Threshold Use this scree[...]

Chapter 2 Introducing the Web Configur ator P-2602HWLNI User’s Guide 56 Remote MGMT HTTP Use this screen to configure through wh ich interface(s) and from which IP address(es) users can use HTTP and HTTPS to manage the ZyXEL Device. T elnet Use this screen to configure through wh ich interface(s) and from which IP address(es) users can use T elne[...]

Chapter 2 Introducing the Web Configurator P-2602HWLNI User’s Guide 57 2.3.2.1 A vailable Features for User and Administrator The following table lists the features respective ly availa ble for user and administrator access. An “O” indicates that a featur e is available in this mode. T able 5 Available Features LINK FEATURE USER ADMINISTRATOR[...]

Chapter 2 Introducing the Web Configur ator P-2602HWLNI User’s Guide 58 Fixed Line Numbers Fixed Line Numbers O O Tr u n k i n g General O Peer Call O Call Rule O Secur ity Firewall General O O Rules O Threshold O Content Filter Keyword O Schedule O Tr u s t e d O VPN Setup O Monitor O VPN Global Setting O Certifica tes My Certificates O T rusted[...]

Chapter 2 Introducing the Web Configurator P-2602HWLNI User’s Guide 59 2.3.3 Main Window The main window displays informa tion and configuration fields. It is discussed in the rest of this document. Right after you log in, the St a t u s sc reen is displayed. See Chapter 6 on page 87 for more information about the St a t u s screen. 2.3.4 St atu [...]

Chapter 2 Introducing the Web Configur ator P-2602HWLNI User’s Guide 60[...]

61 P ART II W izards and S t atus Internet and W ireless Setup W izard (63) V oIP W izard (77) Bandwidth Management W izard (83) S tatus Screens (87)[...]

62[...]

P-2602HWLNI User’s Guide 63 C HAPTER 3 Internet and Wireless Setup Wizard This chapter provides informatio n on the W izard Setup screens for Internet access in the web configurator . 3.1 Introduction Use the wizard setup sc reens to configure your system for Internet access with the information given to you by your ISP . " See the advanced [...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2602HWLNI User’s Guide 64 Figure 12 Select a Mode 2 Click INTERNET/WIRELESS SETUP to configure the system for Internet access and wireless connection. Figure 13 Wizard Welcome 3 Y our ZyXEL device attempts to detect your DSL co nnection and your connection type. 3a The following scree n appears if [...]

Chapter 3 Internet and Wireless Setup Wizard P-2602HWLNI User’s Guide 65 Figure 14 Auto Detection: No DSL Connection 3b The following screen displays if a PPPoE or PPPoA connection is detected. Enter your Internet account information (user name, password and/or service name) exactly as provided by your ISP . Then click Next and see Section 3.3 on[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2602HWLNI User’s Guide 66 Figure 16 Auto Detection: Failed 3.2.1 Manual Configuration 1 If the ZyXEL Device fails to detect your DS L connection type but the physical line is connected, enter your Internet access informa tion in the wizard screen exactly as your service provider gave it to you. Lea[...]

Chapter 3 Internet and Wireless Setup Wizard P-2602HWLNI User’s Guide 67 Figure 17 Internet Access Wizard Setup: ISP Parameters The following table describes the fields in this screen. 2 The next wizard screen varies depending on what mode and encapsulation type you use. All screens shown are with routing mo de. Configure the fields and click Nex[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2602HWLNI User’s Guide 68 Figure 18 Internet Connection with PPPoE The following table describes the fields in this screen. Figure 19 Internet Connection with RFC 1483 T able 7 Internet Connection with PPPoE LABEL DESCRIPTION User Name Enter the user na me exactly as your ISP assigned. If assigned [...]

Chapter 3 Internet and Wireless Setup Wizard P-2602HWLNI User’s Guide 69 The following table describes the fields in this screen. Figure 20 Internet Connection with ENET ENCAP The following table describes the fields in this screen. T able 8 Internet Connect i on with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select Rou[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2602HWLNI User’s Guide 70 Figure 21 Internet Connection with PPPoA The following table describes the fields in this screen. • If the user name and/or password you ente red for PPPoE or PPPoA connection are not correct, the screen disp lays as shown next. Click Back to Username and Password setup [...]

Chapter 3 Internet and Wireless Setup Wizard P-2602HWLNI User’s Guide 71 Figure 22 Connection T est Failed-1 • If the following screen displays, check if your account is activated or click Restart the Internet/Wir eless Setup Wizard to verify your In ternet access settings. Figure 23 Connection T est Failed-2. 3.3 Wireless Connection Wizard Set[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2602HWLNI User’s Guide 72 Figure 24 Connection T est Successful 2 Use this screen to activate the wireless LAN and OTIST . Click Next to continue. Figure 25 Wireless LAN Setup Wizard 1 The following table describes the labels in this screen. Ta b l e 1 1 Wireless LAN Setup Wizard 1 LABEL DESCRIPTIO[...]

Chapter 3 Internet and Wireless Setup Wizard P-2602HWLNI User’s Guide 73 3 Configure your wireless settin gs in this screen. Click Next . Figure 26 Wireless LAN The following table describes the labels in this screen. " The wireless stations and ZyXEL Device must use the same SSID, channel ID and WEP encryption key (if WEP is enabled), WP A-[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2602HWLNI User’s Guide 74 3.3.1 Manually Assign a WP A-PSK Key Choose Manually assign a WP A-PSK key in the W ireless LAN setup screen to set up a Pre- Shar ed Key . Figure 27 Manually Assign a WP A-PSK Key The following table describes the labels in this screen. 3.3.2 Manually Assign a WEP Key Cho[...]

Chapter 3 Internet and Wireless Setup Wizard P-2602HWLNI User’s Guide 75 The following table describes the labels in this screen. 5 Click Apply to complete your wireless LAN settings. Figure 29 Wireless LAN Setup 3 6 Use the read-only summary table to check whet her what you have confi gured is correct. Click Finish to complete and save the wizar[...]

Chapter 3 Intern et and Wireless Setup Wi zard P-2602HWLNI User’s Guide 76 Figure 30 Internet Access and WLAN Wizard Se tup Complete 7 Launch your web browser and navigate to www .zyxel.com. Internet access is just the beginning. Refer to the rest of this guide for more detailed inform ation on the complete range of ZyXEL Device features. If you [...]

P-2602HWLNI User’s Guide 77 C HAPTER 4 VoIP Wizard This chapter shows you how to config ure and register your SIP account(s). 4.1 Introduction The ZyXEL Device has V oice over IP (V oIP) co mmunication capabilities that allow you to use a traditional analog or ISDN telephone to make Internet calls. T his s ection describes how you can set up your[...]

Chapter 4 VoIP Wizard P-2602HWLNI User’s Guide 78 " Make sure you have a successful Internet conn ection before you run the V oIP wizard. T o test your Internet connecti on, you can open your web browser and go to any web page (for exam ple, http://www .zyxel.com). " Y ou must have a SIP account befo re you setup the V oIP wizard. 1 Aft[...]

Chapter 4 V oIP Wizard P-2602HWLNI User’s Guide 79 Figure 33 Wizard: Welcome 3 Select the SIP server profile of your V oIP service provider , either SIP Profile 1 or SIP Profile 2 , and click Apply . If your V oIP service provider i s not in the list, select None and click Apply . Figure 34 SIP Server Prof ile Selection 4 Fill in the fields with [...]

Chapter 4 VoIP Wizard P-2602HWLNI User’s Guide 80 Figure 35 V oIP Wizard Configurat ion The following table describes the labels in this screen. 5 When the SIP registration test screen displays , your ZyXEL Device attempts to register your SIP account with your V oIP se rvice provider . W ait until it finishes. T able 15 VoIP Wizard Configuration[...]

Chapter 4 V oIP Wizard P-2602HWLNI User’s Guide 81 Figure 36 SIP Registration T est 6 The following screen displays if SIP accou nt registration fails. Check whether yo u can access the Internet. If you have a succes sful Internet connection, click Register Again . Or click Back and check the information you entered in SIP acc ount sett ings is c[...]

Chapter 4 VoIP Wizard P-2602HWLNI User’s Guide 82 Y ou can also use your V oIP service provid er ’ s dialing plan to call regular phone numbers. Y ou dial a prefix number, pro vided to you by your V oIP service provi der, followed by a regular phon e number . " T o find out more informatio n about configuri ng your V oIP features and makin[...]

P-2602HWLNI User’s Guide 83 C HAPTER 5 Bandwidth Management Wizard This chapter shows you how to configure basic bandwidth management using the wizard screens. 5.1 Introduction Bandwidth management allows y o u to control the amount of b andwidth going out through the ZyXEL Device’ s W AN port and p rioritize the distribution of the bandwid th [...]

Chapter 5 Bandwid th Management Wizard P-2602HWLNI User’s Guide 84 Figure 40 Wizard: Welcome 3 Select Active to allocate ba ndwidth to pa ckets ba sed on the packet size. Figure 41 Bandwidt h Management Wizard: General Information The following fields describe the label in this screen. 4 Follow the on-screen in structions and click Finish to comp[...]

Chapter 5 Bandwidth Manage ment Wizard P-2602HWLNI User’s Guide 85 Figure 42 Bandwid th Management Wizard: Complete[...]

Chapter 5 Bandwid th Management Wizard P-2602HWLNI User’s Guide 86[...]

P-2602HWLNI User’s Guide 87 C HAPTER 6 Status Screens Use the St a t u s screens to look at the current status of the device, system resources, inte rfaces (LAN and W AN), and SIP ac counts. Y ou can also register and unregister SIP accounts. The St a t u s screen also provides detailed informatio n from Any IP and DHCP an d statistics from V oIP[...]

Chapter 6 Sta tus Screens P-2602HWLNI User’s Guide 88 Figure 43 S tatus Screen Each field is described in the following table. T able 17 Status Screen LABEL DESCRIPTION Refresh Interval Enter how often you want the ZyXEL Device to u pdate this screen. Apply Click this to update this screen immediatel y . Device Information Host Name This field di[...]

Chapter 6 Status Screens P-2602HWLNI User’s Guide 89 MAC Address This is the MAC (Media Access Cont rol) or Ethernet ad dress unique to your ZyXEL Device. ZyNOS Firmware Ve r s i o n This field displays the current version of the firmware inside the device. It also shows the date the firmware versi on was cr eated. Click this to go to the screen [...]

Chapter 6 Sta tus Screens P-2602HWLNI User’s Guide 90 Current Date/ Ti m e This field displays the current d ate and time in the Z yXEL Device. Y ou can change this in Maintenance > S y stem > Time Setting . System Mode This di splays whether the Zy XEL Devi ce is fu nctioning as a ro uter or a bridge. CPU Usage This field displays what per[...]

Chapter 6 Status Screens P-2602HWLNI User’s Guide 91 6.2 Any IP T able Click S tatus > AnyIP T able to access this screen. Use this screen to view the IP addres s and MAC address of each computer that is using the ZyXEL Device but is in a different subnet than the ZyXEL Device. Figure 44 Any IP T able Each field is described in the following t[...]

Chapter 6 Sta tus Screens P-2602HWLNI User’s Guide 92 6.3 WLAN S t atus Click St a t u s > W L A N St a t u s to access this screen. Use this screen to view the wireless stations that are currently ass ociated to the ZyXEL Device. Figure 45 WLAN S t atus The following table describes the labels in this screen. 6.4 Packet S t atistics Click S t[...]

Chapter 6 Status Screens P-2602HWLNI User’s Guide 93 Figure 46 Packet S tatistics The following table describes th e fields in this screen. T able 20 Packet S tatistics LABEL DESCRIPTION System Monitor System up T ime Thi s is the elapsed time the system has been up. Current Date/T ime This field displays your ZyXEL Device’s present date and ti[...]

Chapter 6 Sta tus Screens P-2602HWLNI User’s Guide 94 6.5 V oIP St atistics Click St a t u s > V o I P St a t i s t i c s to access this screen. Figure 47 V oIP S tatistics Each field is described in the following table. Interface This field displays either Ethernet (LAN ports) or Wireless (WLAN port). S tatus For the LAN ports, this field dis[...]

Chapter 6 Status Screens P-2602HWLNI User’s Guide 95 Registration This field displays the current regi stration status of the SIP account. Y o u can change thi s in the Stat us screen. Registered - The SIP account is registered with a SIP server . Register Fail - The last time the ZyXEL Device tried to register the SIP account with the SIP server[...]

Chapter 6 Sta tus Screens P-2602HWLNI User’s Guide 96 6.6 LED S t atus Use this screen to view the current status of e ach of the ZyXEL Device’a ports. Click St a t u s > LED S tatus to access this screen. Figure 48 LED S tatus Each field is described in the following table. Poll Interval(s) Enter how often you want the Z yXEL Device to upda[...]

Chapter 6 Status Screens P-2602HWLNI User’s Guide 97 Internet Green The ZyXEL Device has a successful Internet connection. This field displays the current IP address of the ZyXEL Device in the WA N . Off The ZyXEL Device does not have a successful Internet connection. This field displays the default IP addre ss of the ZyXEL Device in the WAN. Pho[...]

Chapter 6 Sta tus Screens P-2602HWLNI User’s Guide 98[...]

99 P ART III Network WA N S e t u p ( 1 0 1 ) LAN Setup (1 17) W ireless LAN (129) Network Address T ranslation (NA T) Screens (155)[...]

100[...]

P-2602HWLNI User’s Guide 101 C HAPTER 7 WAN Setup This chapter describes how to configure W AN settings. 7.1 W AN Overview A W AN (Wide Area Network) is an outside conn ection to another network or the Internet. 7.1.1 Encap sulation Be sure to use the encapsulat ion method required by your ISP . The ZyXEL Device su pports the following methods. 7[...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 102 7.1.1.3 PPPoA PPPoA stands for Point to Point Protocol over A TM Adaptation Layer 5 (AAL5). A PPPoA connection functions like a dial -up Internet connection. The ZyXEL Device encapsulates the PPP session based on RF C1483 and sends it through an A TM PVC (Permanent V irtual Circuit) to the Internet[...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 103 7.1.4.1 IP Assignment with PPPoA or PPPoE Encap sulation If you have a dynamic IP , then the IP Address and ENET ENCAP Gateway fields are not applicable (N/A). If you have a static IP , then you only need to fill in the IP Addr e ss field and not the ENET ENCAP Gateway field. 7.1.4.2 IP Assignment [...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 104 For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric of "2" and dial-backup route has a metric of "3", then the normal route acts as the primary default route. If the normal rout e fails to connect to the Intern et, the ZyXEL[...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 105 7.3.1 A TM T raffic Classes These are the basic A TM traffic classes define d by the A TM Forum Traf fic Ma nagement 4.0 Specification. 7.3.1.1 Const ant Bit Rate (CBR) Constant Bit Rate (CBR) provides fixed bandwidth that is always available even if no data is being sent. CBR traffic is genera lly[...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 106 7.5 Internet Access Setup Use this screen to change your ZyXEL Device’ s W AN remote node settings. Click Network > W AN > Inter net Access Setup . The screen differs by the encapsulation you select. See Section 7.1 on page 1 01 for more information. Figure 50 Internet Access Setup (PPPoE) [...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 107 Multiplexing Select the method of multiplexin g used by your ISP from the drop-down list. Choices ar e VC or LL C . Virtual Circuit ID VPI (Virtual Path Identifier) and VCI (V irtual Channel Identifier) define a virtual circuit. Refer to the appendix for more information. VPI The valid rang e for t[...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 108 7.5.1 Advanced Internet Access Setup Use this screen to edit your ZyXEL Devi ce's advanced W AN settings. Click the Advanced Setup button in the Inter net Access Setup screen. The sc reen appears as shown. Figure 51 Advanced Internet Access Setup The following table describes the labels in thi[...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 109 7.6 W AN More Connections The ZyXEL Device allows you to configure more than one Internet access connection. T o configure additional Internet access connections click Network > W AN > More Connections . The screen differs by the encapsulation you select. AT M Q o S A TM QoS T ype Select CBR [...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 11 0 Figure 52 W AN More Connections The following table describes the labels in this screen. 7.7 More Connections Edit Click the edit icon in the More Connections screen to configure a node. T able 25 Advanced Internet Access Setup LABEL DESCRIPTION # This is an index number indicating the number of t[...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 111 Figure 53 More Connections Edit The following table describes the labels in this screen. T able 26 More Connections Edit LABEL DESCRIPTION General Active Select the check box to activate or clear the check box to deactivate this node. Name Enter a unique, descriptive name of up to 20 characters for[...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 11 2 Service Name (PPPoE only) T ype the name of your PPPoE service here. Multiplexing Select the method of multi plexing used by your ISP from the drop-do wn list. Choices are VC or LLC . By prior agreement, a protocol is assigned a specific virtual cir cuit, for example, VC1 will carry IP . If you se[...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 11 3 7.8 More Connections Edit Advanced Click the Advanced button in the More Connections Ed it sc reen to display the following screen. Figure 54 More Connections Edit Advanced The following table describes the labels in this screen. T able 27 More Connections Edit Advanced LABEL DESCRIPTION RIP &[...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 11 4 7.9 T raffic Redirect T raffic redirect forwards traf fic to a backup gate way when the ZyXEL Device cannot connect to the Internet. An example is shown in the figure below . Figure 55 T raffic Redirect Example The following network topology allows you to avoid triangle route security issues when [...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 11 5 Figure 57 W AN Backup Setup The following table describes the labels in this screen. T able 28 W AN Backup Setup LABEL DESCRIPTION Backup T ype Select the method that the ZyXEL Device uses to check the DSL connection. Select DSL Link to have the ZyXEL Device check if the connection to the DSLAM is[...]

Chapter 7 WAN Setup P-2602HWLNI User’s Guide 11 6 T raffic Redirect T raffic redirect forwards traffic to a backup gateway wh en the ZyXEL Device canno t connect to the Internet. Active T raffic Redirect Select this check box to have the ZyXEL Device use traffic redirect if the normal W AN conne ction goes down. Note: If you activate traf fic red[...]

P-2602HWLNI User’s Guide 11 7 C HAPTER 8 LAN Setup This chapter describes how to configure LAN settings. 8.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached. A LAN is a computer network lim ited to the immediate area, usually the same building or floor of a building. The LAN screen s [...]

Chapter 8 LAN Setup P-2602HWLNI User’s Guide 11 8 8.1.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server . Y ou ca n configure the ZyXEL Device as a DHCP server or disable it. When configured as a server , the ZyXEL Device provides the [...]

Chapter 8 LAN Setup P-2602HWLNI User’s Guide 11 9 Where you obtain your netwo rk number depends on your particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. If the ISP did not expl icitly give you an IP network [...]

Chapter 8 LAN Setup P-2602HWLNI User’s Guide 120 8.3.2 RIP Setup RIP (Routing Information Protocol) allows a ro uter to e xchange rou ting information with other routers. The RIP Direction field controls the sending an d receiving of RIP pa ckets. When set to: • Both - the ZyXEL Device will broadcast its routin g table periodically an d incorpo[...]

Chapter 8 LAN Setup P-2602HWLNI User’s Guide 121 8.3.4 Any IP T raditionally , you must set the IP addresses an d the subnet masks of a computer and the ZyXEL Device to be in the same subnet to allo w the computer to access the Internet (through the ZyXEL Device). In cases where your computer is required to use a static IP address in another netw[...]

Chapter 8 LAN Setup P-2602HWLNI User’s Guide 122 The following lists out the steps taken, when a co mputer tries to access the Internet for the first time through the ZyXEL Device. 1 When a computer (which is in a different su bnet) first attempts to access the Internet, it sends packets to its defa ult gateway (which is not the ZyXEL Device) by [...]

Chapter 8 LAN Setup P-2602HWLNI User’s Guide 123 8.4.1 Configuring Advanced LAN Setup Use this screen to edit your ZyXEL Device's RIP , multicast, any IP an d W indows Networking settings. Click the Advanced Setup button in the LAN IP scree n. The screen appears as shown. Figure 61 Advanced LAN Setup The following table describes the labels [...]

Chapter 8 LAN Setup P-2602HWLNI User’s Guide 124 8.5 DHCP Setup Click Network > D HCP Setup to open this screen. Use this screen to configure the DNS server information that the ZyXEL Device sends to the DHCP client devi ces on the LAN. Figure 62 DHCP Setup The following table describes the labels in this screen. Allow between LAN and W AN Sel[...]

Chapter 8 LAN Setup P-2602HWLNI User’s Guide 125 8.6 LAN Client List This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pairs of hexadec imal ch[...]

Chapter 8 LAN Setup P-2602HWLNI User’s Guide 126 Figure 63 LAN Client List The following table describes the labels in this screen. 8.7 LAN IP Alias IP alias allows you to partition a physical network into dif fer ent logical networks over the same Ethernet interface. The ZyXEL Device s upports three logical LA N interfaces via its single physica[...]

Chapter 8 LAN Setup P-2602HWLNI User’s Guide 127 When you use IP alias, you can also configur e firewall rules to control access between the LAN's logical networ ks (subnets ). " Make sure that the subnets of t he logical networ ks do not overlap. The following figure shows a LAN divided into subnets A, B, and C. Figure 64 Physical Netw[...]

Chapter 8 LAN Setup P-2602HWLNI User’s Guide 128 The following table describes the labels in this screen. T able 33 LAN IP Alias LABEL DESCRIPTION IP Alias 1, 2 Sele ct the check box to confi gure another LAN network for the ZyXEL Device. IP Address Enter the IP address of your ZyXEL Device in dotted decimal notation. Alternatively , click the ri[...]

P-2602HWLNI User’s Guide 129 C HAPTER 9 Wireless LAN This chapter discusses how to configure the wire less network settings in your ZyXEL Device. See the appendices for more detailed information ab out wireless networks. 9.1 Wireless Network Overview The following figure provides an exampl e of a wireless network. Figure 66 Example of a Wireless [...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 130 Like radio stations or television channels, e ach wireless network uses a s pecific channel, or frequency , to send and receive information. • Every device in the same wireless networ k must use security compatible with the AP . Security stops unauthorized devices from using the wireless netwo[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 131 Unauthorized wireless devices can still see the information that is sent in the wireless network, even if they cannot use the wireless network. Furthermore, there are ways for unauthorized wireless users to get a valid user name and p assword. Then, they can use that user name and password to us[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 132 9.2.5 One-T ouch Intelligent S ecurity T echnology (OTIST) W ith ZyXEL ’ s OTIST , you set up the SSID an d th e encryption (WEP or WP A-PSK) on the ZyXEL Device. Then, the ZyXEL Device transfer s them to the devices in the wireless networks. As a result, you do not have to set up the SSID and[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 133 9.4 Additional Wireless T erms The following table describes wireless networ k terms and acronyms used in the ZyXEL Device’ s W eb Configura tor . 9.5 General WLAN Screen " If you are configuring t he ZyXEL Device from a co mputer connected to the wireless LAN and you change th e ZyXEL De[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 134 Figure 68 Wireless LAN: General The following table describes the labels in this screen. 9.5.1 No Security Select No Security to allow wireless stations to commun icate with the access points without any data encryption. T able 36 Wireless LAN: General LABEL DESCRIPTION Active Wireless LAN Click[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 135 " If you do not enable any wi reless security on your Zy XEL Device, your network is accessible to any wireless network ing device that is within range. Figure 69 Wireless: No Security The following table describes the labels in this screen. 9.5.2 WEP Encryption Screen Select S tatic WEP fr[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 136 Figure 70 Wireless: S tatic WEP Encryption The following table describes the wireless LAN security labels in this screen. 9.5.3 WP A(2)-PSK In order to configure and enable WP A(2)-PSK authentication; click Network > Wir eless LAN to display the Ge neral screen. Select WP A-PSK or WP A2-PSK f[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 137 Figure 71 Wireless: WP A(2)-PSK The following table describes the wireless LAN security labels in this screen. T able 39 Wireless: WPA(2)-PSK LABEL DESCRIPTION Security Mode Choo se WP A-PSK or WP A2-PSK from the drop-down list box. WP A Compatible This field is only avail able for WP A2-PSK. Se[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 138 9.5.4 WP A(2) Auth entication Screen In order to configure and enable WP A Authentication; click the Wir eless LAN link under Network to display the Wir e less screen. Select WP A or WP A2 from the Security Mode list. Figure 72 Wirele ss: WP A(2) The following table describes the wireless LAN se[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 139 9.5.5 Wireless LAN Advanced Setup T o configure advanced wi reless settings, click the Advanced Setup button in the General screen. The screen appears as shown. Figure 73 Wireless LAN: Advanced WP A Group Key Update T imer The WP A Group Key Update T imer is the rate at which the AP (if using WP[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 140 The following table describes the labels in this screen. 9.6 OTIST Screen Use this screen to set up and start OTIST on th e ZyXEL Device in your wireless network. T o open this screen, click Network > Wir eles s LAN > OTIST . " Ensure that your network’s SSID is fe wer than 23 chara[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 141 Figure 74 Network > Wireless LAN > OTIST The following table describes the labels in this screen. Before you click St a r t , you should enable OTIST on all the OTIST -enabled devices in the wireless network. For most devices, follow these steps. 1 Start the ZyXEL utility 2 Click the Adapt[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 142 Figure 75 Example: Wireless Client OTIST Screen T o start OTIST in the device, click St a r t in this screen. " Y ou must click Sta r t in the ZyXEL Device and in the wireless device(s) within three minutes of each othe r . Y ou can start OTIST in the wireless devices and the ZyXEL Device i[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 143 Figure 78 OTIST : In Progress on the Wireless Device These screens close when the tra nsfer is complete. 9.6.1 Notes on OTIST 1 If you enable OTIST in a wireless device, you see this screen each time you start the utility . Click Ye s to search for an OTIST -ena ble d AP (in other word s, the Zy[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 144 Figure 80 MAC Addres s Filter The following table describes the labels in this screen. T able 43 MAC Address Filter LABEL DESCRIPTION Active MAC Filter Select the check box to en able MAC address filtering. Filter Action Define the filter action for the list of MAC addresses in the MAC Address t[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 145 9.8 Association List Use this screen to view details of the wireless stations that are current ly associated with the ZyXEL Device. Y ou can also block individual wireless stations from acc essing the network through the ZyXEL Device. Click Network > Wi reless LAN > Association List to dis[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 146 Figure 82 Wireless LAN: QoS The following table describes the fields in this screen. T able 45 Wireless LAN: QoS LABEL DESCRIPTION QoS Setup Enable WMM QoS Select the check box to enable WMM QoS on the ZyXEL Device. WMM QoS Policy Select Default to have the ZyXEL Device automatically give a serv[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 147 9.9.1 Application Pr iority Configuration Use this screen to edit a WMM QoS appli cation entry . Click the edit icon under Modify . The following screen displays. Figure 83 Application Priority Configuration See Appendix E on page 4 75 for a list of commonly-used ser vices and destination ports.[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 148 9.10 WDS Screen Use this screen to set up your WDS (W ireles s Distribution System) li nks between the ZyXEL Device and other wireless A Ps. Y ou ne ed to kn ow the MAC address of the peer device. Once the security settings of peer sides match one an other , the connection be tween devices is ma[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 149 Figure 84 Wireless LAN > WDS The following table describes the fields in this screen. 9.10.1 S tatic WEP Choose St a t i c W E P from the Security Mode list. T able 47 Wireless LAN > WDS LABEL DESCRIPTION Remote Bridge MAC Address # This is the index numb er of the individual WDS link. Act[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 150 Figure 85 Wireless LAN > WDS > S tatic WEP The following table describes the labels in this screen. 9.10.2 WP A-PSK The WP A-PSK Pre-Shared Key standard uses TKIP (T emporal Key Integrity Protocol) encryption. When you choose this, the Pre-Shared Key you ent er must have the following form[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 151 Figure 86 Example: WDS Link using WP A-PSK with TKIP • AP-1 , AP-2 and AP-3 share the same common key “01234567891 23456”. • The transmission key “222 22222” of AP-1 is exactly the same as the reception key “22222222” of AP-2 . • The transmission key “333 33333” of AP-2 is [...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 152 The following table describes the labels in this screen. 9.10.3 WP A2-PSK Choose WP A2-PSK from the Security Mode list. Figure 88 Wireless LAN > WDS > WP A2-PSK T able 49 Wireless LAN > WDS > WPA-PSK LABEL DESCRIPTION Security Mode Choo se WP A-PSK from the drop-down list box. Pre-Sh[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 153 The following table describes the labels in this screen. T able 50 Wireless LAN > WDS > WPA2-PSK LABEL DESCRIPTION Security Mode Choo se WP A-PSK from the drop-down list box. Pre-Shared Key The Pre-Shared key (PSK) is used to encry pt data. All the wireless APs (including the ZyXEL Device)[...]

Chapter 9 Wireless LAN P-2602HWLNI User’s Guide 154[...]

P-2602HWLNI User’s Guide 155 C HAPTER 10 Network Address Translation (NAT) Screens This chapter discusses how to configure NA T on the ZyXEL Device. 10.1 NA T General Overview NA T (Netw ork Address T rans lation - NA T , RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, u[...]

Chapter 10 Network Address Translation (NAT) Screens P-2602HWLNI User’s Guide 156 10.1.2 What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side. When the resp onse comes back, NA[...]

Chapter 10 Network Address Translation (NAT) Screens P-2602HWLNI User’s Guide 157 Figure 90 NA T Application With IP Alias 10.1.5 NA T Mapping T ypes NA T suppo rts five types of IP/port mapping. They are: • One to One : In One-to-One mode, the ZyXEL Devi ce maps one local IP address to one global IP address. • Many to One : In Many-to-One mo[...]

Chapter 10 Network Address Translation (NAT) Screens P-2602HWLNI User’s Guide 158 The following table summarizes these types. 10.2 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server . The ZyXEL Device also supports Full Feature [...]

Chapter 10 Network Address Translation (NAT) Screens P-2602HWLNI User’s Guide 159 Figure 91 NA T General The following table describes the labels in this screen. 10.4 Port Forwarding A port forwarding set is a list of inside (behind NA T on the LAN) servers, for example, web or FTP , that you can make visible to the outsid e world even though NA [...]

Chapter 10 Network Address Translation (NAT) Screens P-2602HWLNI User’s Guide 160 Many residential broadband ISP accounts do no t allow you to run any server processes (such as a W eb or FTP server) from your location. Y our ISP may periodically check for servers and may suspend your account if it discovers any active services at yo ur location. [...]

Chapter 10 Network Address Translation (NAT) Screens P-2602HWLNI User’s Guide 161 10.5 Configuring Port Forwarding " If you do not assign a Default Server IP address, the Zy XEL Device discards all packet s received for ports that are not specified here or in the remote management setup. Click Network > NA T > Port Forwarding to open t[...]

Chapter 10 Network Address Translation (NAT) Screens P-2602HWLNI User’s Guide 162 10.5.1 Port Forwarding Rule Edit Use this screen to edit a port forwarding rule. Cl ick the rule’ s edit icon in the Port Forwarding screen to display the screen show n next. Figure 94 Port Forwarding Rule Setup The following table describes th e fields in this sc[...]

Chapter 10 Network Address Translation (NAT) Screens P-2602HWLNI User’s Guide 163 10.6 Address Mapping " The Address Mapping screen is available only when you select Full Feature in the NA T > General screen. Ordering your rules is important because the Zy XEL Device applies the rules in the order that you specify . When a rule matches th[...]

Chapter 10 Network Address Translation (NAT) Screens P-2602HWLNI User’s Guide 164 10.6.1 Address Mapping Rule Edit T o edit an address mapping rule, click the rule’ s edit icon in the Address Mapping screen to display the screen shown next. Global S tart IP This is the starting Inside Global IP Addr ess (IGA). Enter 0.0. 0.0 here if you have a [...]

Chapter 10 Network Address Translation (NAT) Screens P-2602HWLNI User’s Guide 165 Figure 96 Edit Address Mapping Rule The following table describes th e fields in this screen. T able 57 Edit Address Mapping Rule LABEL DESCRIPTION Ty p e Ch oose the port mapping type from one of th e following. One-to-One : One-to-One mode maps one local IP addres[...]

Chapter 10 Network Address Translation (NAT) Screens P-2602HWLNI User’s Guide 166[...]

167 P ART IV Vo I P Vo i c e ( 1 6 9 ) V oIP T runking (21 1) Phone Usage (227)[...]

168[...]

P-2602HWLNI User’s Guide 169 C HAPTER 11 Voice This chapter provides background informatio n on V oIP and SIP and explains how to configu re your device’ s voice settings. 1 1 .1 Introduction to V oIP V oIP is the sending of voice signals over Inte rnet Protocol. This allows you to make phone calls and send faxes over the In ternet at a fractio[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 170 1 1.2.1.2 SIP Service Domain The SIP service domain of the V oIP service provid er is the domain name in a S IP URI. For example, if the SIP address is 1 122334455@V oIP-provider .com , then “V oIP-provider .com” is the SIP service domain. 1 1.2.2 SIP Servers SIP is a client-server pro tocol. A SI[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 171 Figure 98 SIP Proxy Server 1 1.2.2.3 SIP Redirect Server A SIP redirect server accepts SIP requests, translates the destination address to an IP address and sends the translated IP address back to th e device that sent the request. Then the client device that originally sent the re quest can send requ[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 172 Figure 99 SIP Redirect Server 1 1.2.2.4 SIP Register Server A SIP register server maintains a database of SIP identity-to-IP address (or domain name) mapping. The register server checks your u ser name and password when you register . 1 1.2.2.5 SIP Registration Each ZyXEL Device is an individual SIP U[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 173 1 1.2.3 RTP When you make a V o IP call using SIP , the R TP (Real time T ransport Pr otocol) is used to handle voice data transfer . See RFC 1889 for details on R TP . 1 1.2.4 Pulse Code Modulation Pulse Code Modulation (PCM) me asures analog signal amplitudes at regular time int e rvals and converts[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 174 The following figure shows the SIP and session traffic flow between the user agents ( UA 1 and UA 2 ) and the proxy servers (this ex ample show s two proxy servers, PROXY 1 and PROXY 2 ). Figure 100 SIP Call Through Proxy Servers The following table shows the SIP call progression. 1 User Agent 1 sends[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 175 5 User Agent 2 sends an OK re sponse to Proxy 2 after the call is answered. This is also relayed back to User Agent 1 via Pr oxy 1 . 6 User Agent 1 and User Agent 2 exchange R TP packets containing vo ice data directly , without involving the proxies. 7 When User Agent 2 hangs up, he sends a BYE reque[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 176 1 1.2.10 Custom T ones (IVR) IVR (Interactive V oice Response) is a feature that allows you to use your telephone to interact with the ZyXEL Device. The ZyXEL Device allo ws you to record custom tones for the Caller Ringing T one and On Hold T one functions. The same recordin gs apply to both the call[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 177 1 1.3.1 T ype Of Service (T oS) Network traffic can be classified by setting the T o S (T ype Of Service) values at the data source (for example, at the ZyXEL Device) so a server can decide the best method of delivery , that is the least cost, fastest route and so on. 1 1.3.2 DiffServ DiffServ is a cl[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 178 1 1 .4 SIP Settings Screen The ZyXEL Device uses a SIP account to make outgoi ng V oIP calls and check if an incoming call’ s destination number matches your SIP account’ s SIP number . In order to make or receive a V oIP call, you need to enab le and configure a SIP account, and map it to a phone[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 179 1 1 .5 Advanced SIP Setup Screen Click V oIP > SIP > SIP Settings to open the SIP Settings screen. Select a SIP account and click Advanced Setup to open the Advanced SIP Setup screen. Use this screen to maintain advanced settings for each SIP account. Active SIP Account Select this if you want t[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 180 Figure 103 V o IP > SIP Settings > Advanced Each field is described in the following table. T able 62 VoIP > SIP Settings > Advanced LABEL DESCRIPTION SIP Account This field displ ays the SIP account you see in this screen. SIP Server Settings[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 181 URL T ype Select whether or not to include th e SIP service domain name when the ZyXEL Device sends the SIP number . SIP - include the SIP service domai n name. TEL - do not include the SIP service domain name. Expirat ion Duration Enter the number of seconds yo ur SIP acc ount is registered w ith the[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 182 1 1 .6 SIP QoS Screen Use this screen to maintain T o S and VLAN se ttings for the ZyXEL De vice. T o access this screen, click V oIP > SIP > QoS . Enable Select this if your V oIP service provi der has a SIP ou tbound server to handle voice calls. This allows the ZyXEL Device to work with any t[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 183 Figure 104 SIP > QoS Each field is described in the following table. 1 1 .7 Phone Y ou can configure the volume, ec ho cancellation and V A D settings for each individual phone port on the ZyXEL Device. Y ou can also select which SIP account to use fo r making outgoing calls. 1 1.7.1 PSTN Line W it[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 184 Y ou can also use the PSTN Line screen to specify phone number s that should always use the regular phone servi c e (without having to dial a prefix number). Do this for emergency numbers (like those for co ntacting police, fire or emergency medical services). 1 1.7.2 ISDN Line W ith an ISDN line you [...]

Chapter 11 Voice P-2602HWLNI User’s Guide 185 • Internet phone calls (V oice over IP or V oIP). These calls are made and received using the Internet connection on your ZyXEL Device. Y ou need to configure a SIP account (see Section 1 1.4 on page 178 ) before making In ternet phone calls. • Analog phone calls. These calls are made an d receive[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 186 Figure 105 Phone > Analog Phon e Each field is described in the following table. T able 64 Phone > Analog Phone LABEL DESCRIPTION Phone Port Settings Select the PHONE port you wa nt to see in thi s scre en. If you change this field , the screen automatically refreshes. Outgoing Call Use Use this[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 187 1 1 .9 Advanced Analog Phone Setup Screen Use this screen to edit advanced settings for eac h phone port. T o access this screen, click Advanced Setup in V oIP > Phone > Analog Phone . SIP1 ~ SIP10 Y ou must configure a SIP account in the Vo I P > SIP screen befo re you can receive V oIP phon[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 188 Figure 106 Phone > Analog Phon e > Advanced Each field is described in the following table. T able 65 Phone > Analog Phone > Advanced LABEL DESCRIPTION Analog Phone This field displays the numb er of the an alog phone you are currently configuring. Vo i c e Vo l u m e Control S peaking V o[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 189 1 1 .10 ISDN Phone This screen allows you to conf igure the outgoing and incoming call settings for ISDN phones connected to the ZyXEL Device via the ISDN P HONE port. At the time of writing, the ZyXEL Device can connect up to eight ISD N phones to the ISDN PHONE port. An ISDN phone can have more than[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 190 1 1.10.2 Configuring the ISDN Phone Screen Use the ISDN Phone screen to do the following. • Configure which SIP account ISDN ph ones use to make V oIP calls. • Configure which SIP accoun t ISDN phones use for incoming calls. • Configure whether ISDN phones can receive PSTN calls. Click V oIP >[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 191 1 1 .1 1 Common Phone Settings Screen Use this screen to activate and deactivate imme diate dialing and set up call fallback. T o acce ss this screen, click V oIP > Phone > Common . Figure 108 Phone > Common Each field is described in the following table. 1 1 .12 Ext. T able Y ou can assign e[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 192 For the PHONE 1 and PHONE 2 ports, an extension number is composed of a group number and a sub number . If group number is not enable d, the extension number is simply the sub number . Y ou can assign a group number to the two pho ne ports. When you dial a group number , all phones belongin g to that [...]

Chapter 11 Voice P-2602HWLNI User’s Guide 193 Each field is described in the following table. 1 1 .13 Advanced Ext. T able Setup Screen Y ou can create call-forwarding rules for internal calls. T o access this screen, click Advanced in a phone extension entry in the V oIP > Phone > Ext. T able screen. T able 68 VoIP > Phone > Ext. Tab[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 194 Figure 1 10 V oIP > Phone > Ext. T able > Advanced Each field is described in the following table. 1 1 .14 Phone Services Overview Supplementary services such as call hold, call waiting, call transfer , etc. are generally available from your V oIP service provi der . Th e ZyXEL Device support[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 195 • Internal Calls (see Section 13.3 on page 227 ) • Call Park and Pickup • Do not Disturb " T o take full advant age of the supplem entary phone services available through the ZyXEL Device's phone ports, you may need to s ubscribe to the services from your V oIP service provider . 1 1.1[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 196 If you have anothe r call, press the flash key an d then “ 2” to switch back and forth between caller A and B by putting either one on hold. Press the flash key and then “0” to disconnect th e call presently on hold and keep the current call on line. Press the flash key and then “1” to dis[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 197 After pressing the flash key , if you do not issue the sub-command before the default sub- command timeout (2 seconds) expires or issue an invalid sub-command, the current operation will be aborted. 1 1.14.3.1 USA Call Hold Call hold allows you to put a call ( A ) o n hold by pressing the flash key . [...]

Chapter 11 Voice P-2602HWLNI User’s Guide 198 7 If you want to separate the activated th ree-way conference into two individual connections again, press the fl ash key . This time the party B is on-line and party A is on hold. 1 1 .15 Phone Region Screen Use this screen to maintain settings that de pend on which region of the world the ZyXEL Devi[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 199 In peer-to-peer calls, you call another V oIP device directly without going through a V oIP Service provider ’ s SIP server . Select Non-Proxy (Use IP or URL) in the Ty p e column and enter the callee’ s IP address or domain name . The ZyXEL Device sends SIP INVITE requests to the peer V oIP devic[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 200 1 1 .17 Incoming Call Policy Screen Use this screen to maintain rules for handlin g inco ming calls. Y ou can block, redirect, or accept them. T o a ccess this screen, click V oIP > Phone Book > Incoming Call Policy . Figure 1 13 Phone Book > Incoming Call Policy Name This fiel d displays the[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 201 Y ou can create two sets of c all-forwarding rules. Each one is stored in a call-forwarding table. Each field is described in the following table. T able 74 Phone Book > Incoming Call Policy LABEL DESCRIPTION T able Number Select the call-forwardi ng table you want to see in this screen. If you cha[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 202 1 1 .18 Distinctive Ring Screen This screen lets you specify ring types for ca lls from particular numbers. The ring types vary by ring duration and stop rin g duration (the time gap between the ring s). Any standard phone is compatible with this feature. When an incoming call comes in, the ZyXEL Devi[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 203 Figure 1 14 Phone Book > Distinctive Ring Each field is described in the following table. T able 75 Phone Book > Distinctive Ring LABEL DESCRIPTION Active Select this if you want to activate the distinctive ring feature. Y ou al so have to enable individual entries. T est the Rin g Use the drop [...]

Chapter 11 Voice P-2602HWLNI User’s Guide 204 1 1 .19 SIP Prefix Screen The SIP prefix screen allows you to set up numbers you dial on your phone to specify which SIP account you want to u s e for a call. If you di al only the phone number (no prefix number) the ZyXEL Device uses default SI P settings to make the call. Click V oIP > Phone Book[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 205 Figure 1 15 Phone Book > SIP Prefix Each field is described in the following table. T able 76 Phone Book > SIP Prefix LABEL DESCRIPTION SIP Selection by Prefix # Select the index number of the rule you want to edit.. Prefix Enter the prefix number (1 ~ 8 digits). Th is is the number you dial bef[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 206 1 1 .20 PSTN Line W ith the PSTN line you can make and receive regular PSTN ph one calls. Use a prefix number to make a regular call. Whe n the device does not have po wer , you can m ake regular calls without dialing a prefix n u mber . 1 When the ZyXEL Device does not have power , only the phone con[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 207 Each field is described in the following table. 1 1 .22 ISDN Line Screen Use this screen to set up the ISDN line you u se to make regular phone calls. T o access this screen, click V oIP > ISDN Line . Figure 1 17 ISDN Line > General Each field is described in the following table. T able 77 PSTN [...]

Chapter 11 Voice P-2602HWLNI User’s Guide 208 1 1 .23 Fixed Line Numbers Configure the Fixed Line Numbers screen to: • Use your analog phone(s) to make and rece ive calls over the ISDN line, using Multi ple Subscriber Numbers (MSNs). See Section 1 1.23.1 on page 208 . The MSNs you enter here are used in the Vo I P > Phone > Analog Phone s[...]

Chapter 11 Voice P-2602HWLNI User’s Guide 209 • They configure their MSN mappings in the ZyXEL Devic e’ s Vo I P > Fixed Line Numbers screen. Carol maps MSN1 to “333” and David map s MSN2 to “222”. • They then config ure the Vo I P > Pho ne > Analog Phone sc reen so that the PHONE 1 port uses the ISDN line and MSN1 to make [...]

Chapter 11 Voice P-2602HWLNI User’s Guide 210 Figure 1 18 V oIP > Fixed Line Numbers Screen The following table describes the labels in this screen. T able 79 VoIP > Fixed Line Numbers Screen LABEL DESCRIPTION PSTN Number Configure this fi eld if you want to allow your ISDN phone (conne cted to the ZyXEL Device’s ISDN PHONE port) to recei[...]

P-2602HWLNI User’s Guide 21 1 C HAPTER 12 VoIP Trunking Use these screens to configure V oIP trun king on your ZyXEL Device. 12.1 V oIP T runking Overview V oIP trunking connects an IP network (like th e Internet) and the Pub lic Switched T elephone Network (PSTN). PSTN includes the world’ s ci rcuit-switched telephone network which is composed[...]

Chapter 12 VoIP Tru nking P-2602HWLNI User’s Guide 212 Other settings controlled by the au to attendant include a time lim it to decide whether you want to forward a call from the ZyXEL Device or ca ll the phone directly connected to the ZyXE L Device. When you call into your ZyXEL Device you can request to forward a call to another phone number [...]

Chapter 12 VoIP Tr unking P-2602HWLNI User’s Guide 213 12.3 Call Rules Call rules automate the forwarding of calls, first to a remote peer device and then to PSTN phones. This is used when you make frequent calls to several PSTN numbers in the same geographic ar ea that start with the same numbers (for example an area code). If there is a remote [...]

Chapter 12 VoIP Tru nking P-2602HWLNI User’s Guide 214 Figure 121 PSTN Phone T o V oIP Phone 12.4.3 PSTN Phone T o PSTN Phone via V o IP A PSTN phone A ma kes a call to the ZyXEL De vice B . B connects to a peer device C and C forwards the call to a PSTN phone D . Figure 122 PSTN Phone T o PSTN Phone via V oIP 12.5 T runking General Screen Use th[...]

Chapter 12 VoIP Tr unking P-2602HWLNI User’s Guide 215 Each field is described in the following table. 12.6 T runking Peer Call Screen Use this screen to set up outgoing authentica tion accounts for forwardi ng calls through peer devices and incoming authenti cation accounts for forwarding calls from peer devices. T o access this screen, click V [...]

Chapter 12 VoIP Tru nking P-2602HWLNI User’s Guide 216 Figure 124 V oIP > Trunki ng > Peer Call Each field is described in the following table. T able 83 VoIP > Trunking > Peer Call LABEL DESCRIPTION Outgoing Authentication Y ou need to set up accounts for the peer devic es you use in V oIP trunking. This is the IP address of the remo[...]

Chapter 12 VoIP Tr unking P-2602HWLNI User’s Guide 217 12.7 T runking Call Rule Screen Use this screen to set up rules that determ ine which peer V oIP de vice your call will be forwarded to. T o acce ss this screen, click V oIP > T runking > Call Rule . Password Enter the corresponding password for the username you entered. The remo te pee[...]

Chapter 12 VoIP Tru nking P-2602HWLNI User’s Guide 218 Figure 125 V o IP > T runking > Call Rule Each field is described in the following table. T able 84 VoIP > Trunking > Call Rule LABEL DESCRIPTION # This is a read-only index number of the call rules. Pattern A Pattern is used w hen you call your ZyXEL Device from a PSTN phone and [...]

Chapter 12 VoIP Tr unking P-2602HWLNI User’s Guide 219 12.8 V oIP T runking Example: V oIP to PSTN This example shows how to configure V oIP to PSTN trunking to save on long distance calls. 12.8.1 Background Information A company has its headquarters in city A and a br anch office in city B. The headquarters often needs to call salespeople employ[...]

Chapter 12 VoIP Tru nking P-2602HWLNI User’s Guide 220 Figure 127 V oIP to PSTN Example - S peed Dial Screen 2 An outgoing authentication acco unt needs to be configure d. Th is account consists of the IP address and port number of the branch office ZyXEL Device as well as the username and password for authentication. This userna me and password [...]

Chapter 12 VoIP Tr unking P-2602HWLNI User’s Guide 221 Figure 129 V oIP to PSTN Example - Incoming Authenticatio n 12.8.4 Call Progression The advantage of this kind of V oIP trunking is that once all the configur ation is completed, the caller just has to dial a speed dial entry from a phone connected to their ZyXEL Device and the peer devices t[...]

Chapter 12 VoIP Tru nking P-2602HWLNI User’s Guide 222 12.9.1 Background Information A company has its headquarters in one cit y and a branch office in another . The sales manager ( A ) from headquarters often needs to call sale speople ( D ) employed at the branch office. The sales manager often works away from the headqu arters office and the s[...]

Chapter 12 VoIP Tr unking P-2602HWLNI User’s Guide 223 Figure 131 PSTN to PSTN Example: General Configuration 2 An outgoing authentication acco unt needs to be configure d. Th is account consists of the IP address and port number of the branch office ZyXEL Device as well as the username and password for authentication. This userna me and password[...]

Chapter 12 VoIP Tru nking P-2602HWLNI User’s Guide 224 Figure 133 PSTN to PSTN Example - Call Rule 12.9.3 Configurati on Det ails: Incoming The branch office ZyXEL Device needs to have an incoming authentication account configured. This consists of a username and p ass word. This account must matc h the username and password of the outgoing authe[...]

Chapter 12 VoIP Tr unking P-2602HWLNI User’s Guide 225 T able 86 PSTN to PSTN: VoIP Trunking Call Progression MANAGER HEADQUARTERS BRANCH OFFICE SALES1 The manager dials the PSTN number of th e headquarters’ ZyXEL Device. ( 222-222-2222 ) The ZyXEL Device receives the call a nd sends a ringback alert tone to indicate to th e ca ller that V oIP [...]

Chapter 12 VoIP Tru nking P-2602HWLNI User’s Guide 226[...]

P-2602HWLNI User’s Guide 227 C HAPTER 13 Phone Usage This chapter describes how to use a phone conn ected to your ZyXEL Device for basic tasks. 13.1 Dialing a T elephone Number The PHONE LED turns green when your SIP account is registered. Dial a SIP number like “12345” on your phone’ s keypad. Use speed dial entries (see Section 1 1.16 on [...]

Chapter 13 Phone Usage P-2602HWLNI User’s Guide 228 • Follow Me • Call Pickup " T o use these supplementary functions for internal call s, you have to configure the V oIP > Phone > Ext. T able first. 13.3.1 Phone Book Y ou can assign each phone connected to the ZyXEL Device an extension number and make internal calls between these [...]

Chapter 13 Phone Usage P-2602HWLNI User’s Guide 229 • Remote setting (when you are at another place): When you hear the dial tone, dial “*04” followed by yo ur extension number . When you do no t need the follow me function, dial “#04” followed by your extensio n number to cancel this rule. 13.3.5 Call Pickup When an incoming internal c[...]

Chapter 13 Phone Usage P-2602HWLNI User’s Guide 230[...]

231 P ART V Security Firewalls (233) Firewall Configuration (245) Content Filtering (265) Introduction to IPSec (269) VPN Screens (275) Certificates (301)[...]

232[...]

P-2602HWLNI User’s Guide 233 C HAPTER 14 Firewalls This chapter gives some back ground information on firewa lls and introduces the ZyXEL Device firewall. 14.1 Firewall Overview Originally , the term “firewall” referred to a construction techni que designed to prevent the spread of fire from one room to another . The ne tworking term “firew[...]

Chapter 14 Firewalls P-2602HWLNI User’s Guide 234 14.2.2 Application-level Firewalls Application-level firewalls restrict access by serv ing as proxies for e xternal servers. Since they use programs written for specific Internet servic es, such as HTTP, FTP and tel net, they can evaluate network packets for valid ap plication-sp ecific data. Appl[...]

Chapter 14 Firewalls P-2602HWLNI User’s Guide 235 14.3.1 Denial of Service Att acks Figure 135 Firewall Application 14.4 Denial of Service Denials of Service (DoS) attacks are aimed at devices and networks w ith a connection to the Internet. Their goal is not to st eal in formation, but to disable a device or ne twork so users no longer have acce[...]

Chapter 14 Firewalls P-2602HWLNI User’s Guide 236 14.4.2 T ypes of DoS Att acks There are four types of DoS attacks: 1 Those that exploit bugs in a TCP/IP implementation. 2 Those that exploit weaknesses in the TCP/IP specification. 3 Brute-force attacks that flood a network with useless data. 4 IP Spoofing. 5 " Ping of Death " and "[...]

Chapter 14 Firewalls P-2602HWLNI User’s Guide 237 Figure 137 SYN Flood •I n a LAND Attack , hackers flood SYN packets into the network with a spoofed source IP address of the targeted system . This makes it appear as if the host computer sent the packets to itself, making the sy stem unavaila ble while the target system tries to respond to itse[...]

Chapter 14 Firewalls P-2602HWLNI User’s Guide 238 14.4.2.1 ICMP V ulnerability ICMP is an error -reporting protocol that works in concert with IP . The following ICMP types trigger an alert: 14.4.2.2 Illegal Commands (NetBIOS and SMTP) The only legal NetBIOS commands are the following - all others are illegal. All SMTP commands are illegal except[...]

Chapter 14 Firewalls P-2602HWLNI User’s Guide 239 are allowed in. The ZyXEL Device uses stateful packet inspection to protect the private LAN from hackers and vandals on the Internet. By de fault, the ZyXEL Device’ s stateful inspection allows all communications to the Internet that or iginate from the LAN, and blocks all traffic to the LAN tha[...]

Chapter 14 Firewalls P-2602HWLNI User’s Guide 240 6 Later , an inbound packet reac hes the interface . This packet is part of the connection previously established with the outbound packet. The inbound packet is ev aluated against the inbound access list, and is permitted because of the temporary access list entry previously crea ted. 7 The packe[...]

Chapter 14 Firewalls P-2602HWLNI User’s Guide 241 If an initiation packet originates on the LAN, this means that someone is trying to make a connection from the LAN to the In ternet. Assuming that this is an acceptable part of the security policy (as is the case w ith the default policy), the connection will be allowed. A cache entry is added whi[...]

Chapter 14 Firewalls P-2602HWLNI User’s Guide 242 14.6 Guidelines for Enhancing Security with Y our Firewall • Change the default pa ssword. • Limit who can telnet into your router . • Don't enable any local service (such as SN MP or NTP) that you don't use. An y enabled service could present a potential security risk. A determine[...]

Chapter 14 Firewalls P-2602HWLNI User’s Guide 243 • Always shred confidential inform ation, particularly about your computer , before throwing it away . Some hackers dig through the trash of companies or indivi duals for information that might help them in an attack. 14.7 Packet Filtering Vs Firewall Below are some comparisons be tween the ZyXE[...]

Chapter 14 Firewalls P-2602HWLNI User’s Guide 244 • T o selectively bloc k/allow inbound or outbound traffic between inside host/networks and outside host/networks. Remember that filters can not distinguish traf fic originating from an inside host or an ou tside host by IP address. • The firewall performs better than filtering if you need to [...]

P-2602HWLNI User’s Guide 245 C HAPTER 15 Firewall Configuration This chapter shows you how to enable and configure t he ZyXEL Device firewall. 15.1 Access Methods The web configurator is, by far , the most co mprehensive firewall configuration tool your ZyXEL Device has to offer . For this rea son, it is recommended that you co nfigure your firew[...]

Chapter 15 Firewa ll Configuration P-2602HWLNI User’s Guide 246 Y ou may define additional rules and sets or modify existing ones but please exercise extreme caution in doing so. " If you configure firewall rules without a good underst anding of how they work, you might inadvertently introduce securi ty risks to the fire wall and to the prot[...]

Chapter 15 Firewall Configu ration P-2602HWLNI User’s Guide 247 2 Does this rule stop LAN us ers from accessing critical reso urces on the Internet? For example, if IRC is blocke d, are th ere us ers that require this service? 3 Is it possible to modify the rule to be more specific? For ex ample, if IRC is blocked for all users, will a rule that [...]

Chapter 15 Firewa ll Configuration P-2602HWLNI User’s Guide 248 15.4.1 LAN to W AN Rules The default rule for LAN to W AN traf fic is that all users on the LAN are allowed non- restricted access to the W AN. When you config ure a LAN to W AN rule, you in essence want to limit some or all users from accessing cer tain services on the W A N. W AN t[...]

Chapter 15 Firewall Configu ration P-2602HWLNI User’s Guide 249 The following table describes the labels in this screen. 15.6 Firewall Rules Summary " The ordering of your rules is very important as rules are applied in turn. Refer to Section 14.1 on page 233 for more information. Click Security > Firewall > Rules to bring up the follo[...]

Chapter 15 Firewa ll Configuration P-2602HWLNI User’s Guide 250 Figure 141 Firewall Rules The following table describes the labels in this screen. T able 92 Firewall Rules LABEL DESCRIPTION Firewall Rules S torage S pace in Use This read-only bar shows how much of the ZyXEL Device's memory for recording firewall rules it is currently using. [...]

Chapter 15 Firewall Configu ration P-2602HWLNI User’s Guide 251 15.6.1 Configuring Firewall Rules Refer to Section 14.1 on page 233 for more information. In the Rules screen, select an index number and click Add or click a rule’ s Edit icon to display this screen and refe r to the following table for information on the l a bels. Modify Click th[...]

Chapter 15 Firewa ll Configuration P-2602HWLNI User’s Guide 252 Figure 142 Firewall: Edit Rule The following table describes the labels in this screen. T able 93 Firewall: Edit Rule LABEL DESCRIPTION Activ e Select this option to enable th is firewall rule. Action for Matched Packet Use the drop-down list box to select whether to discard ( Drop )[...]

Chapter 15 Firewall Configu ration P-2602HWLNI User’s Guide 253 Source/Destination Address Address T ype Do you want your rule to apply to packets with a p a rticular (single) IP , a range of IP addresses (for instance, 192.168.1.10 to 192.169.1.50), a subnet or a ny IP address? Select an option from the d rop-down list box that incl udes: Single[...]

Chapter 15 Firewa ll Configuration P-2602HWLNI User’s Guide 254 15.6.2 Customized Services Configure customized services and port number s not predefined by the ZyXEL Device. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. See Appendix E on page 475 for some examples. Click the E[...]

Chapter 15 Firewall Configu ration P-2602HWLNI User’s Guide 255 Figure 144 Firewall: Configure Customized Services The following table describes the labels in this screen. 15.7 Example Firewall Rule The following Internet firewa ll rule example allows a hypot hetical “MyService” connection from the Internet. 1 Click Security > Fir ew all &[...]

Chapter 15 Firewa ll Configuration P-2602HWLNI User’s Guide 256 Figure 145 Firewall Example: Rules 3 In the Rules screen, select the index number after that you want to add the rule. For example, if you select “6”, your new rule b ecomes number 7 and the previous rule 7 (if there is one) becomes rule 8. 4 Click Add to display the firewall rul[...]

Chapter 15 Firewall Configu ration P-2602HWLNI User’s Guide 257 Figure 147 Firewall Example: Edit Ru le: Destination Address 9 Use the Add >> and Remove buttons between A vailable Services and Selected Services list boxes to configure it as follows. Click Apply when you are done. " Custom services show up with an “*” before their n[...]

Chapter 15 Firewa ll Configuration P-2602HWLNI User’s Guide 258 Figure 148 Firewall Example: Edit Rule : Select Customized Services On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following. Rule 1 allows a “MyService” connection from the W AN to IP addresses 10.0.0.10 through 1[...]

Chapter 15 Firewall Configu ration P-2602HWLNI User’s Guide 259 Figure 149 Firewall Example: Rules: MyService 15.8 DoS Thresholds For DoS attacks, the ZyXEL Device uses threshol ds to determine when to drop sessions that do not become fully established. These thresholds ap ply globally to all sessions. Y ou can use the default threshold v alues, [...]

Chapter 15 Firewa ll Configuration P-2602HWLNI User’s Guide 260 15.8.2 Half-Open Sessions An unusually high number of half-open sessions (either an absolute number or measured as the arrival rate) could indicate that a Denial of Service a ttack is occurring. For TCP , "half- open" means that the session has not reached the establis hed [...]

Chapter 15 Firewall Configu ration P-2602HWLNI User’s Guide 261 Figure 150 Firewall: Threshold The following table describes the labels in this screen. T able 96 Firewall: Threshold LABEL DESCRIPTION DEF AUL T V ALUES Denial of Service Thresholds One Minute Low T his is the rate of new half-open sessions that causes the firewall to stop deleting [...]

Chapter 15 Firewa ll Configuration P-2602HWLNI User’s Guide 262 15.9 Firewall Commands The following describes the fi rewall command s . See the Comm and Interpreter appendix for information on the command structure. Each of these commands mu st be preceded by sys firewall when you use them. For example, type sys firewall active yes to turn on th[...]

Chapter 15 Firewall Configu ration P-2602HWLNI User’s Guide 263 disp Displays the firewall log type and count. clear Clears the firewall log count. pktdump Dumps the last 64 bytes of p a ckets that the firewall has dropped. dynamicrule display Displays the firewall ’s dynamic rules. tcprst rst T urns TCP reset sending on/off. rst113 T urns TCP [...]

Chapter 15 Firewa ll Configuration P-2602HWLNI User’s Guide 264[...]

P-2602HWLNI User’s Guide 265 C HAPTER 16 Content Filtering This chapter covers how to configure content filtering. 16.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering gives you the ab ility to block web sites that contain key words (that you[...]

Chapter 16 Content Filtering P-2602HWLNI User’s Guide 266 The following table describes the labels in this screen. 16.3 Configuring the Schedule Use this screen to set the days and times for the ZyXEL Device to pe rform content filtering. Click Security > Content Filter > Schedule . The screen appears as shown. Figure 152 Content Filter: Sc[...]

Chapter 16 Con tent Filter ing P-2602HWLNI User’s Guide 267 The following table describes the labels in this screen. 16.4 Configuring T rusted Computers Use this screen to exclude a range of users on the LAN from content f iltering on your ZyXEL Device. Click Security > Content Filter > Tr u s t e d . The sc reen appears as shown. Figure 15[...]

Chapter 16 Content Filtering P-2602HWLNI User’s Guide 268[...]

P-2602HWLNI User’s Guide 269 C HAPTER 17 Introduction to IPSec This chapter introduces the basics of IPSec VPNs. 17.1 VPN Overview A VPN (V irtual Private Network) provides sec ure communications between sites without the expense of leased site-to-site lines. A secure VP N is a combination of tunneling, encryption, authentication, access control [...]

Chapter 17 Introduction to IPSec P-2602HWLNI User’s Guide 270 Figure 154 Encryption an d Decryption 17.1.3.2 Dat a Confidentiality The IPSec sender can encrypt packets befo re transmitting them across a network. 17.1.3.3 Dat a Integrity The IPSec receiver can validate packets sent by the IPSec sender to ensure that the data has not been altered d[...]

Chapter 17 Introdu ction to IPSec P-2602HWLNI User’s Guide 271 Figure 155 IPSec Architecture 17.2.1 IPSec Algorithms The ESP (Encapsulating Security Payload) Protocol (RFC 2406 ) and AH (Authentication Header) protocol (RFC 2402 ) describe the packe t formats and the default standards for packet structure (including implemen tation algorithms). T[...]

Chapter 17 Introduction to IPSec P-2602HWLNI User’s Guide 272 Figure 156 T ransport and T unnel Mode IPSec Encap sulation 17.3.1 T ransport Mode Tr a n s p o r t mode is used to protect upper layer p rot ocols and only affects the data in the IP packet. In Tr a n s p o r t mode, the IP packet contains the security protocol ( AH or ESP ) located a[...]

Chapter 17 Introdu ction to IPSec P-2602HWLNI User’s Guide 273 A NA T device in between the IPSec endpoints w ill rewrite either the source or destination address with one of it s own choosing. The VPN device at the receiving end wil l verify the integrity of the incoming packet by computing its own hash value, and complain that the hash value ap[...]

Chapter 17 Introduction to IPSec P-2602HWLNI User’s Guide 274[...]

P-2602HWLNI User’s Guide 275 C HAPTER 18 VPN Screens This chapter introduces the VPN screens. See Chapter 27 on page 387 for information on viewing logs and th e appendix for IPSec log descriptions. 18.1 VPN/IPSec Overview Use the screens documented in this chapter to configure rules for VPN connections and manage VPN connections. 18.2 IPSec Algo[...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 276 18.3 My IP Address My IP Address is the W AN IP address of th e ZyX EL Device. The ZyXEL Device has to rebuild the VPN tunnel if My IP Address changes after setup. The following applies if this field is configured as 0.0.0.0 : • The ZyXEL Device uses the current ZyXEL Device W AN IP address (s[...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 277 If the remote secure gateway has a static W AN IP address, enter it in the Secure Gateway Address field. Y ou may alternatively enter the remote secure gatewa y’ s domain name (if it has one) in the Secure Gateway A ddress field. Y ou can also enter a remote secure gateway’ s domain name in[...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 278 Figure 158 VPN Setup The following table describes the fields in this screen. T able 103 VPN Setup LABEL DESCRIPTION No. This is the VPN policy index number . Click a number to edit VPN policies. Activ e This field displays whether the VPN policy is acti ve or not. A Ye s signifies that this VPN[...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 279 18.6 Keep Alive When you initiate an IPSec tunnel with keep alive enabled, the ZyX EL Device automatically renegotiates the tunnel wh en the IPSec SA lifetime period expires (see Section 18.12 on page 288 for more on the IPSec SA lifetime). In ef fe ct, the IPSec tunnel becomes an “always on?[...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 280 NA T is not normally compatible with ESP in transport mode either, but the ZyXEL Device’ s NA T T raversal feature provides a way to handle this. NA T traversa l allows you to set up an IKE SA when there are NA T routers between the tw o IPSec routers. Figure 159 NA T Router Between IPSec Rout[...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 281 The following figure depicts an example wh ere three VPN tunnels are created from ZyXEL Device A; one to branch office 2, one to branch of fice 3 and anoth er to headquarters. In orde r to access computers that use private domain names on the he adquarters (HQ) n etwork, the ZyXEL Device at bra[...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 282 18.9.1 ID T ype and Content Examples T wo IPSec routers must have matching ID type and content configuration in order to set up a VPN tunnel. The two ZyXEL Devices in this example ca n complete negotiation and establish a VPN tunnel. T able 105 Local ID Type and Content Fields LOCAL ID TYPE= CON[...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 283 The two ZyXEL Devices in this example cann ot complete their negotiation because ZyXEL Device B’ s Local ID type is IP , but ZyXEL Device A ’ s Peer ID type is set to E-mail . An “ID mismatched” message displays in the IPSEC LOG . 18.10 Pre-Shared Key A pre-shared key identifies a commu[...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 284 Figure 161 Edit VPN Policies The following table describes the fields in this screen. T able 109 Edit VPN Policies LABEL DESCRIPTION IPSec Setup Activ e Select this check box to activate this VPN policy . This opti on determines whether a VPN rule is applied before a packet leaves the firewall. [...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 285 IPSec Key Mode Select IKE or Manual from the drop-down list box. IKE provides more protection so it is generally recommended. Manual is a useful op tion for troubleshooti ng if you have problems usi ng IKE key mana gement. Negotiation Mode Select Main or Aggressive from the drop -down list box.[...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 286 End / Subnet Mask When the Remote Addre ss T ype field is configured to Single , this field is N/A. When the Remote Address T ype field is configured to Range , enter the end (static) IP address, in a range of co mputers on the network behind the remote IPSec router . When the Re mote Address T [...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 287 Secure Gateway Address T ype the WAN IP address or the URL (up to 31 characters) of the IPSec router with which you're making the VPN connectio n. Set this field to 0.0.0.0 if the remote IPSec router has a dyna mic WAN IP address (the Key Managemen t field must be set to IKE ). In order to[...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 288 18.12 IKE Phases There are two phases to every IKE (Internet Key Exchange) ne gotiation – phase 1 (Authentication) and ph ase 2 (Key Exchange). A phase 1 exchange establishes an IKE SA a nd the second one uses that SA to negotiate SAs for IPSe c. Figure 162 T wo Phases to Set Up the IPSec SA I[...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 289 • Set the IPSec SA lifetime. This field allows you to determine ho w long the IPSec SA should stay up before it times out. The ZyXEL Device automatically renegotiates the IPSec SA if there is traffic when the IPS e c SA lifetime period expires. The ZyXEL Device also automatically renegotiates[...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 290 Figure 163 Advanced VPN Policies The following table describes the fields in this screen. T able 1 10 Advanced VPN Policies LABEL DESCRIPTION VPN - IKE Protoc ol Ente r 1 for ICMP , 6 for TCP , 17 for UDP , etc. 0 is th e default and signifies any protocol. Enable Repla y Detection As a VPN setu[...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 291 Pre-Shared Key T ype your pre-sha red key in this fi eld. A pre-shared key identi fies a communicating party during a phase 1 IKE negoti ation. It is called "pre-shared" because you have to share it with anot her party before you can communicate with them over a secure connection. T y[...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 292 18.14 Manual Key Setup Manual key managemen t is useful if you have pro blems with IKE key managemen t. 18.14.1 Security Parameter Index (SPI) An SPI is used to distinguish dif ferent SAs te rminating at the same de stination and using the same IPSec protocol. This data allows for the multiplexi[...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 293 Figure 164 VPN: Manual Key The following table describes the fields in this screen. Ta b l e 1 1 1 VPN: Manual Key LABEL DESCRIPTION IPSec Setup Activ e Select this check box to activate this VPN policy . Name T ype up to 32 characters to identify this VPN policy . Y ou may use any character , [...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 294 DNS Server (for IPSec VPN) If there is a private D NS server that se rvices the VPN, type its IP address here. The ZyXEL Device assigns this additional DNS server to the ZyXEL Device 's DHCP clients that have IP addresses in this IPSec rule's range of local addresses. A DNS server allo[...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 295 18.16 V iewing SA Monitor Click Security , VPN and Monitor to open the SA Monito r screen as shown. Use this scree n to display and ma nage active VPN conn ections. A Security Association (SA) is the group of se cu rity settings related to a specific VPN tunnel. This screen displays active VPN [...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 296 When there is outbound traffic but no inbound tr affic, the SA times out automatically after two minutes. A tunnel with no outb ound or inbound traffic is "idle" and does not timeo ut until the SA lifetime period expires. See Section 18. 6 on page 279 on keep alive to have the Zy XEL D[...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 297 18.17 Configuring Global Setting T o change your ZyXEL Devi ce’ s global settings, click VPN and then Global Setting . The screen appears as shown. Figure 166 VPN: Global Setting The following table describes the fields in this screen. 18.18 T elecommuter VPN/IPSec Examples The following exam[...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 298 Figure 167 T elecommuters Sharing One VPN Rule Example 18.18.2 T elecommuters Usin g Unique VPN Rules Example In this example the telecommuters (A, B and C in the figure) use IPSec routers with domain names that are mapped to their dynamic W AN IP addresse s (use Dynamic DNS to do this). W ith a[...]

Chapter 18 VP N Screens P-2602HWLNI User’s Guide 299 Figure 168 T e lecommuters Using Uniq ue VPN Rules Example T able 1 15 T elecommuters Using Uniq ue VPN Rules Example T ELECOMMUTERS HEADQUARTER S All T elecommuter Rule s: All Headqua rters Rules: My IP Address 0.0.0.0 My IP Address: bigcompanyhq.com Secure Gateway Ad dress: bigcompanyhq.com L[...]

Chapter 18 VPN Screens P-2602HWLNI User’s Guide 300 18.19 VPN and Remote Management If a VPN tunnel uses T elnet, FTP , WWW , then you should config ure remote management ( Remote Management ) to allow access for that service.[...]

P-2602HWLNI User’s Guide 301 C HAPTER 19 Certificates This chapter gives background in formation about public-key certificates and explains how to use them. 19.1 Certificates Overview The ZyXEL Device can use certificates (also ca lled digital IDs) to authenticate users. Certificates are based on public -private key pairs. A certificate contains [...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 302 Certification authorities maintain directory ser vers with databases of valid and revoked certificates. A directory of certificates that have been revoked before the scheduled exp iration is called a CRL (Certificate Revocation List ). The ZyXEL Device can check a peer ’ s certificate against[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 303 19.4 My Certificates Click Security > Certificates > My Certificates to open the My Certificates scree n. This is the ZyXEL Device’ s summary list of certificates and certification requests. Certificates display in black and certification requests display in gray . Figure 170 My Certifi[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 304 19.5 My Certificate Import Click Security > Certificates > My Certificates and then Im port to open the My Certificate Import screen. Follow the instructions in this sc reen to save an exis ting certificate to the ZyXEL Device. " Y ou can only import a cert ificate that matches a co [...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 305 " The certificate you impo rt replaces the corresponding request in the My Certificates screen. " Y ou must remove any spaces from th e certificate’s filename before you can import it. 19.5.1 Certificate File Format s The certification authority certific ate that yo u want to import[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 306 19.6 My Certificate Create Click Security > Certificates > My Certificates > Crea te to open the My Certificate Create screen. Use this screen to have the ZyXEL Device create a self-signed certificate, enroll a certificate with a certification authorit y or generate a certification req[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 307 Organizational Unit T ype up to 127 characters to identify the organizationa l unit or department to which the certificate owner belongs. Y ou may use any character , including spaces, but the ZyXEL Devi ce drops traili ng spaces. Organization T ype up to 127 characters to iden tify the company[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 308 After you click Apply in the My Certificate Create screen, you see a screen that tells you the ZyXEL Device is generating the self-signe d certificate or certification request. After the ZyXEL Device successfully enrolls a ce rtificate or generates a certification request or a self-signed certi[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 309 Figure 173 My Certificate Details[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 310 The following table describes the labels in this screen. T able 1 19 My Certificate Details LABEL DESCRIPTION Name This field displays the identifying name of this certificate. If you wan t to change the name, type up to 31 characters to ident ify this certificate. Y ou may use any character (n[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 31 1 19.8 T rusted CAs Click Security > Certificates > T rusted CAs to open the T rusted CAs screen. This screen displays a summary list of certificates of the certification authorities that you ha ve set the ZyXEL Device to accept as trusted. The ZyXEL De vice accepts any valid certifica te [...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 312 Figure 174 T rusted CAs The following table describes the labels in this screen. T able 120 T r usted CAs LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the ZyXEL Device’s PKI storage sp a ce that is currently in use. The bar turns from blue to red when the m[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 313 19.9 T rusted CA Import Click Security > Cer tificates > T rusted CAs to open the T rusted CAs screen and then click Import to open the T rusted CA Import screen. Follow the instructions in this screen to save a trusted certification authority’ s certificate to the ZyXEL Device. " [...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 314 19.10 T rusted CA Det ails Click Security > Certificates > T rusted CAs to open the T r usted CAs screen. Click the details icon to open the T rusted CA Details screen. Use this screen to view in-depth information about the certification authority’ s certif icate, change the certificate[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 315 The following table describes the labels in this screen. T able 122 T rus ted CA Details LABEL DESCRIPTION Name This field displays the id entifying name of this certi ficate. If you want to change the name, type up to 31 characters to i dentify this ke y cert ificate. Y ou may use any characte[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 316 19.1 1 T r usted Remote Host s Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen. This screen displays a list of the certificates of peers that you trust but which are not signed by one of the certification authorities on the T rusted CAs scree[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 317 Figure 177 T rusted Remote Hosts The following table describes the labels in this screen. T able 123 T rus ted Remote Hosts LABEL DESCRIPTION PKI S torage S pace in Use This bar displays the percentage of the Zy XEL Device’s PKI storage space that is currently in use. The bar turns from green[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 318 19.12 V erifying a T rusted Remote Host’ s Certificate Certificates issued by certific ation authorities have the certificat ion authority’ s signature for you to check. Self-sig ned certificates only have th e signature of the host itself. This means that you must be very careful when deci[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 319 19.13 T rusted Remote Host s Import Click Security > Certificates > T rusted Remote Hosts to open the T rusted Remote Hosts screen and then click Import to open the T rusted Remote Host Import screen. Follow the instructions in this screen to save a truste d host’ s certific ate to the [...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 320 Figure 181 T rusted Remote Host Details[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 321 The following table describes the labels in this screen. T able 125 T rus ted Remote Host Details LABEL DESCRIPTION Name This field displays the identifyin g name of this certificate. If you want to change the name, ty pe up to 31 characters to id entify this key certificate. Y ou may use any c[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 322 19.15 Directory Servers Click Security > Certificates > Dir ec tory Servers to open the Directory Servers screen. This screen display s a summary list of dire ctory servers (tha t contain lists of va lid and revoked certificates) that have been save d into the ZyXEL Device. If you decide [...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 323 Figure 182 Directory Servers The following table describes the labels in this screen. 19.16 Directory Server Add and Edit Click Security > Certificates > Dir ec tory Servers to open the Directory Servers screen. Click Add (or the details icon) to open the Direc tory Server Add screen. Use[...]

Chapter 19 Certificates P-2602HWLNI User’s Guide 324 Figure 183 Directory Server Ad d and Edit The following table describes the labels in this screen. T able 127 Directory Server Add and Edit LABEL DESCRIPTION Directory Service Setting Name T ype up to 31 ASCII characters (spa ces are not permitted) to identify this directory server . Access Pro[...]

325 P ART VI Advanced S tatic Route (327) Bandwidth Management (3 31) Dynamic DNS Setup (339) Remote Management Configurat ion (343) Universal Plug-and-P lay (UPnP) (361)[...]

326[...]

P-2602HWLNI User’s Guide 327 C HAPTER 20 Static Route This chapter shows you how to configure static routes for your ZyXEL Device. 20.1 S t atic Route Each remote node specifies only the network to which the gateway is di rectly connected, and the ZyXEL Device has no know ledge of the ne tworks beyond. For insta nce, the ZyXEL Device knows about [...]

Chapter 20 Static Rou te P-2602HWLNI User’s Guide 328 Figure 185 S tatic Route The following table describes the labels in this screen. 20.2.1 S tatic Route Edit Select a static route index numb er and click Edit . The screen shown next appears. Use this screen to configure the required information for a static route. T able 128 Static Route LABE[...]

Chapter 20 Static Route P-2602HWLNI User’s Guide 329 Figure 186 S tatic Route Edit The following table describes the labels in this screen. T able 129 Static Route Edit LABEL DESCRIPTION Activ e This field allows you to activa te/deactivate this static route. Route Name Enter th e name of the IP static route. Le ave this field blank to delete thi[...]

Chapter 20 Static Rou te P-2602HWLNI User’s Guide 330[...]

P-2602HWLNI User’s Guide 331 C HAPTER 21 Bandwidth Management This chapter contains information about configuri ng bandwidth management, editing rules and viewing the ZyXEL Device’ s bandwidth managem ent logs. 21.1 Bandwid th Management Overview ZyXEL ’ s Bandwidth Management allows you to specify bandwidth management rules based on applicat[...]

Chapter 21 Bandwid th Manageme nt P-2602HWLNI User’s Guide 332 A TC assigns priority based on packet size, since time-sensitive applications such as Internet telephony (V oice over IP or V oIP) tend to have smaller packet sizes than non-time sensitive applications such as FTP (File T ransfer Protoc ol). The following tabl e shows some common appl[...]

Chapter 21 Bandwidth Management P-2602HWLNI User’s Guide 333 21.5 Application and Subnet-based Bandwid th Management Y ou could also create bandwidth classes based on a combination of a subnet and an application. The following exam ple table shows bandwidth alloca tions for application specific traffic from separate LAN subnets. 21.5.1 Bandwid th[...]

Chapter 21 Bandwid th Manageme nt P-2602HWLNI User’s Guide 334 The following table describes the labels in this screen. 21.7 Bandwid th Management Rule Setup Y ou must use th e Bandwidth Management General screen to enable bandwidth management before you can configure rules. Click Advanced > Bandwidth MGMT > Rule Setup to open the following[...]

Chapter 21 Bandwidth Management P-2602HWLNI User’s Guide 335 21.7.1 Rule Configuration Click the Edit icon or User defined in the Servic e field to configure a bandwidth management rule. Use bandwidth rules to allocate specific amounts of bandwidth capacity (bandwidth budgets) to specific applications and/or subnets. Figure 190 Bandwidth Mana gem[...]

Chapter 21 Bandwid th Manageme nt P-2602HWLNI User’s Guide 336 The following table describes the labels in this screen. T able 136 Bandwidth Manage ment Rule Configuration LABEL DESCRIPTION Rule Configuration Rule Name Use the auto-generated na me or ente r a de scriptive name of up to 20 alphanumeric char acters, including spaces. BW Budget Spec[...]

Chapter 21 Bandwidth Management P-2602HWLNI User’s Guide 337 21.8 Bandwid th Monitor T o view the ZyXEL Device’ s bandwidth usage, click Advanced > Bandwidth MGMT > Monitor . The screen appears as shown. Select an interface from the drop-down list box to view the bandwidth usage of its bandwidt h rule s. The gray section of the bar repres[...]

Chapter 21 Bandwid th Manageme nt P-2602HWLNI User’s Guide 338[...]

P-2602HWLNI User’s Guide 339 C HAPTER 22 Dynamic DNS Setup This chapter discusses how to configure your ZyXEL Device to use Dynamic DNS. 22.1 Dynamic DNS Overview Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU-SeeMe, etc.). Y ou can also a[...]

Chapter 22 Dy namic DNS Se tup P-2602HWLNI User’s Guide 340 Figure 192 Dynamic DNS The following table describes th e fields in this screen. T able 137 Dynamic DNS LABEL DESCRIPTION Dynamic DNS Setup Active Dynamic DNS Select this check box to use dy namic DNS. Service Prov ider This is the name o f your Dynamic DN S service provider. Dynamic DNS[...]

Chapter 22 Dynamic DNS Setup P-2602HWLNI User’s Guide 341 Dynamic DNS server auto detect IP Address Select this option only when the re are one or more NA T routers between the ZyXEL Device and the DDNS server . Th is feature has the DDNS server a utomatically detect and use the IP address of the NA T router that has a public IP address. Note: Th[...]

Chapter 22 Dy namic DNS Se tup P-2602HWLNI User’s Guide 342[...]

P-2602HWLNI User’s Guide 343 C HAPTER 23 Remote Management Configuration This chapter provides information on config uring remote management. 23.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which ZyXEL Device interface (if any) from which computers. The following figure shows secure a[...]

Chapter 23 Remote Management Configuration P-2602HWLNI User’s Guide 344 " When you choose WA N only or LAN & W AN , you still need to configure a firewall rule to allow access. T o disable remote management of a service, select Disable in the corresponding Access S tatus field. Y ou may only have one remote management session running at [...]

Chapter 23 Remote Ma nagement Configuration P-2602HWLNI User’s Guide 345 23.2 Introduction to HTTPS HTTPS (HyperT ext T ransfer Protocol over Secure Socket Layer , or HTTP over SSL) is a web protocol that encrypts and decrypts web pages. Secure Socket Layer (SSL) is an application- level protocol that enables secure transactions of data by ensuri[...]

Chapter 23 Remote Management Configuration P-2602HWLNI User’s Guide 346 23.3 HTTP T o change your ZyXEL Device’ s W orld W ide W eb settings, click Advance d > Remote MGMT to display the HTTP screen. Figure 195 Remote Mana gement: HTTP The following table describes the labels in this screen. T able 138 Remote M anagemen t: HTTP LABEL DESCRIP[...]

Chapter 23 Remote Ma nagement Configuration P-2602HWLNI User’s Guide 347 23.4 T elnet Y ou can configure your ZyXEL Device for remote T elnet access as shown next. The administrator uses T elnet from a computer on a remote netw ork to access the ZyXEL Device. Figure 196 T e lnet Configuration on a TCP/IP Network 23.5 Configuring T elnet Click Adv[...]

Chapter 23 Remote Management Configuration P-2602HWLNI User’s Guide 348 Figure 197 Remote Mana gement: T elnet The following table describes the labels in this screen. 23.6 Configuring FTP Y ou can upload and download the ZyXEL Devi ce’ s firmware and c onfiguration files using FTP . Please se e Section 29.7 on page 413 for details. T o use thi[...]

Chapter 23 Remote Ma nagement Configuration P-2602HWLNI User’s Guide 349 Figure 198 Remote Mana gement: FTP The following table describes the labels in this screen. 23.7 SNMP Simple Network Management Protocol (SNM P) i s a protocol used for ex changing management information b e tween network devices. SNMP is a member of the TCP/IP protocol suit[...]

Chapter 23 Remote Management Configuration P-2602HWLNI User’s Guide 350 Figure 199 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent: agen ts and a manager . An agent is a management software module that resi des in a managed device (the ZyXEL Device). An agent translates the local manageme nt information fr[...]

Chapter 23 Remote Ma nagement Configuration P-2602HWLNI User’s Guide 351 23.7.2 SNMP T rap s The ZyXEL Device will send traps to the SNMP manager when any on e of the following events occurs: 23.7.3 Configuring SNMP T o change your ZyX EL Device’ s SNMP settings , click Advanced > Remote MGMT > SNMP . The screen appears as show n. Figure [...]

Chapter 23 Remote Management Configuration P-2602HWLNI User’s Guide 352 The following table describes the labels in this screen. 23.8 Configuring DNS Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to Chapter 8 on page 1 17 for background information. T o change your ZyXEL Device’ s DNS se[...]

Chapter 23 Remote Ma nagement Configuration P-2602HWLNI User’s Guide 353 Figure 201 Remote Mana gement: DNS The following table describes the labels in this screen. 23.9 Configuring ICMP T o change your ZyX EL Device’ s security settin gs, click Advanced > Remote MGMT > ICMP . The scre en appears as shown. If an outside user attempts to p[...]

Chapter 23 Remote Management Configuration P-2602HWLNI User’s Guide 354 Figure 202 Remote Mana gement: ICMP The following table describes the labels in this screen. 23.10 SSH Y ou can use SSH (Secure SHell) to secure ly access the ZyXEL Device’ s command line interface. Specify which interfaces allow SS H acces s and from which IP address the a[...]

Chapter 23 Remote Ma nagement Configuration P-2602HWLNI User’s Guide 355 Figure 203 SSH Communication Over the W A N Example 23.1 1 How SSH W orks The following table summarizes how a secure c onnection is establishe d between two re mote hosts. Figure 204 How SSH Works 1 Host Identification The SSH client sends a connection request to the SSH se[...]

Chapter 23 Remote Management Configuration P-2602HWLNI User’s Guide 356 23.12 SSH Implement ation on the ZyXEL Device Y our ZyXEL Device supports SSH version 1.5 using RSA authentication and three encryption methods (DES, 3DES and Blowfish). The SSH se rver is implemented on the ZyXEL Device for remote SMT management and file transfer on port 22.[...]

Chapter 23 Remote Ma nagement Configuration P-2602HWLNI User’s Guide 357 23.14 Secure T elnet Using SSH Examples This section shows two examples using a comm and interface and a graphical interface SSH client program to remotely a ccess the ZyXEL Device. The configuration and connection steps are similar for most SSH client programs. Refe r to yo[...]

Chapter 23 Remote Management Configuration P-2602HWLNI User’s Guide 358 Enter “ telnet 192.168.1.1 22 ” at a terminal prompt and press [ENTER] . The computer attempts to connect to port 22 on the ZyXEL Device (using the default IP address of 192.168.1 .1). A message displays indicating the SSH protocol version supported by the ZyXEL Device. F[...]

Chapter 23 Remote Ma nagement Configuration P-2602HWLNI User’s Guide 359 Figure 209 Secure FTP: Firmware Upload Example $ sftp -1 192.168.1.1 Connecting to 192.168.1.1... The authenticity of host '192.168.1. 1 (192.168.1.1)' can't be established. RSA1 key fingerprint is 21:6c:07:25:7e:f4:75:80:ec:af:bd:d4: 3d:80:53:d1. Are you sure[...]

Chapter 23 Remote Management Configuration P-2602HWLNI User’s Guide 360[...]

P-2602HWLNI User’s Guide 361 C HAPTER 24 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor . 24.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices. A UPnP device[...]

Chapter 24 Universal Plug-and-Play (UPnP) P-2602HWLNI User’s Guide 362 When a UPnP device joins a network, it announ ces its presence with a multicast mess age. For security reasons, the ZyXEL Device allows multicast messages on the LAN only . All UPnP-enabled devices may communicate freely with eac h other without additional configuration. Disab[...]

Chapter 24 Universal Plug-and-Play (UPnP) P-2602HWLNI User’s Guide 363 24.3 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me. 1 Click St a r t and Control Panel . Double-click Add/Remove Programs . [...]

Chapter 24 Universal Plug-and-Play (UPnP) P-2602HWLNI User’s Guide 364 Figure 212 Add/Remove Programs: Wind ows Setup: Communication: Component s 4 Click OK to go back to the Add/Remove Pr ograms Properties window and click Next . 5 Restart the computer when prompted. Inst alling UPnP in Windows XP Follow the steps below to install the UPnP in Wi[...]

Chapter 24 Universal Plug-and-Play (UPnP) P-2602HWLNI User’s Guide 365 Figure 214 Windows Optiona l Networking Component s Wizard 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 215 Networking Services 6 Click OK to go back to the W indows Optional Networking Component W izard window and click Next .[...]

Chapter 24 Universal Plug-and-Play (UPnP) P-2602HWLNI User’s Guide 366 24.4 Using UPnP in Windows XP Example This section shows yo u how to use the UPnP feature in W indows XP . Y ou must already have UPnP installed in W indows XP and UP nP activated on the ZyXEL Device. Make sure the computer is co nnected to a LAN port of the ZyXEL Device. T ur[...]

Chapter 24 Universal Plug-and-Play (UPnP) P-2602HWLNI User’s Guide 367 Figure 217 Internet Connection Properties 4 Y ou may edit or delete the port map pings or click Add to manually add port mappings.[...]

Chapter 24 Universal Plug-and-Play (UPnP) P-2602HWLNI User’s Guide 368 Figure 218 Internet Connection Properties: Adva nced Settings Figure 219 Internet Connection Proper ties: Adva nced Settings: Add 5 When the UP nP-enabled device is disconne cted from your computer , all port mappings will be deleted automatically . 6 Select Show icon in noti [...]

Chapter 24 Universal Plug-and-Play (UPnP) P-2602HWLNI User’s Guide 369 Figure 220 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet connection st atus. Figure 221 Internet Connection S tatus Web Configurator Eas y Access W ith UPnP , you can access the web-based configurator on the ZyXEL Device without finding out th[...]

Chapter 24 Universal Plug-and-Play (UPnP) P-2602HWLNI User’s Guide 370 Figure 222 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for y our ZyXEL Device an d select Invoke . The web co nfigurator login screen displays.[...]

Chapter 24 Universal Plug-and-Play (UPnP) P-2602HWLNI User’s Guide 371 Figure 223 Network Connections: My Network Places 6 Right-click on the icon for your ZyXEL Device and select Pr operties . A properties window displays with basic info rmation about the ZyXEL Device. Figure 224 Network Connections: My Networ k Places: Properties: Example[...]

Chapter 24 Universal Plug-and-Play (UPnP) P-2602HWLNI User’s Guide 372[...]

373 P ART VII Maintenance and T roubleshooting System (375) Call History (381) Logs (387) T roubleshooting (401) T ools (407) Diagnostic (419) Product Specification s (423)[...]

374[...]

P-2602HWLNI User’s Guide 375 C HAPTER 25 System Use this screen to configure the ZyXEL Device’ s time and date settings. 25.1 General Setup and System Name General Setup contains administrative and system-related information. System Name is for identification purposes. However , because some ISPs c heck this name you s hould enter your computer[...]

Chapter 25 System P-2602HWLNI User’s Guide 376 Figure 225 System General Setu p The following table describes the labels in this screen. T able 147 System Ge neral Setup LABEL DESCRIPTION General Setup System Name Choose a descriptive name for identificatio n pu rposes. It is recommended you enter your computer ’s “Computer name” in this fi[...]

Chapter 25 System P-2602HWLNI User’s Guide 377 25.2 T ime Setting T o change your ZyX EL Device’ s time and date, click Maintenance > System > Time Setting . The screen appears as shown. Use this screen to configure the ZyXEL Device’ s time based on your local time zone. Figure 226 System T ime Setting The following table describes the [...]

Chapter 25 System P-2602HWLNI User’s Guide 378 Manual Select this radio button to enter the time and da te manually . If you configu re a new time and date, T ime Zone and Daylight Saving at the sa me time, the new time and date you entered has priority and the Time Zone and Daylight Saving settings do not affect it. When you enter the time setti[...]

Chapter 25 System P-2602HWLNI User’s Guide 379 End Date Configure the day and time when Dayli ght Saving Time ends i f you selected Enable Daylight Saving . The o' clock field uses the 24 hour format. Here are a couple of examples: Daylight Saving T i me ends in the United S tates on the first Sunday of November . Each time zone in the Unite[...]

Chapter 25 System P-2602HWLNI User’s Guide 380[...]

P-2602HWLNI User’s Guide 381 C HAPTER 26 Call History This chapter contains information about configuring call history settings and viewing the ZyXEL Device’ s phone call records. 26.1 Call History Overview Call history chronicles incoming and outgoing PSTN and V oIP calls. Y ou can choose the frequency with which the ZyXEL Device saves details[...]

Chapter 26 Call History P-2602HWLNI User’s Guide 382 Figure 227 Call History > Summary The following table describes the fields in this screen. 26.3 V iewing Call History Use the Call History screen to see record s of incoming and outgoing PSTN/ISDN and V oIP calls. The information includes duration of phone calls, the packet statistics, local[...]

Chapter 26 Call History P-2602HWLNI User’s Guide 383 Figure 228 Call History > Call History The following table describes the fields in this screen. T able 150 Call History > Call History LABEL DESCRIPTION View Call History Select the type of call you want to view • All Call History • Missed Calls • Dialed Calls • Received Calls Sel[...]

Chapter 26 Call History P-2602HWLNI User’s Guide 384 26.4 Configuring Call History Settings Use the Call History Settings screen to configure where the ZyXEL Device is to send call history records, and the schedule for saving and sending th e records. T o change your ZyXEL Device ’ s call history settings, click Maintenance > Call History &g[...]

Chapter 26 Call History P-2602HWLNI User’s Guide 385 The following table describes th e fields in this screen. T able 151 Call History > Call History Settings LABEL DESCRIPTION E-mail Call History Settings Mail Server Enter the server name or the IP address of the mail se rver for the e-mai l addresses specified below . If this field is left b[...]

Chapter 26 Call History P-2602HWLNI User’s Guide 386 Apply Click Apply to save your custo mized settings and exit this screen. Cancel Click Cancel to return to the previously saved settings. T able 151 Call History > Call History Settings LABEL DESCRIPTION[...]

P-2602HWLNI User’s Guide 387 C HAPTER 27 Logs This chapter contains inform ation about configuring genera l log settings and viewing the ZyXEL Device’ s logs. 27.1 Logs Overview The web confi gurator allows you to choose which categories of events and/or alerts to have the ZyXEL Device log and then di splay the logs or have the Zy XEL Device se[...]

Chapter 27 Logs P-2602HWLNI User’s Guide 388 Figure 230 Vi ew Log The following table describes the fields in this screen. 27.3 Configuring Log Settings Use the Log Settings screen to configure to where the Zy XEL Device is to send logs; the schedule for when the ZyXEL Device is to send the logs and which logs and/or immediate alerts the ZyXEL De[...]

Chapter 27 Lo gs P-2602HWLNI User’s Guide 389 Figure 231 Log Settings The following table describes th e fields in this screen. T able 153 Log Settings LABEL DESCRIPTION E-mail Log Settings Mail Server Enter the server name or the IP address of the mail se rver for the e-mai l addresses specified below . If this field is left blank, logs and aler[...]

Chapter 27 Logs P-2602HWLNI User’s Guide 390 27.4 SMTP Error Messages If there are difficulties in sending e-mail the following error message appears. Send Alerts to Alerts are real-time notificat ions that are sent as soon as an event, such as a DoS attack, system error , or forbidden web access attempt occurs . Enter the E-mail address where th[...]

Chapter 27 Lo gs P-2602HWLNI User’s Guide 391 “SMTP action request failed. ret= ??". The “??"are described in the following table. 27.4.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edit the subje[...]

Chapter 27 Logs P-2602HWLNI User’s Guide 392 27.5 Log Descriptions This section provides descriptio ns of example log messages. T able 155 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router h as adjusted its time based on in formation from the time server . Time calibration failed The router fail ed to get i[...]

Chapter 27 Lo gs P-2602HWLNI User’s Guide 393 T able 156 System Error Logs LOG MESSAGE DESCRIPTION %s exceeds the max. number of session per host! This attempt to create a NA T session exceeds the maximum number of NA T session table entries allowed to be created per host. setNetBIOSFilter: calloc error The router fail ed to alloca te memory for [...]

Chapter 27 Logs P-2602HWLNI User’s Guide 394 For type and code details, see T ab le 168 on page 397 . Exceed MAX incomplete, sent TCP RST The router sent a TCP reset packet when the nu mber of incomplete connections (TCP and UDP) exceeded the user- configured threshold. (Incomplete count is for all TCP and UDP connections through the firewa ll.)N[...]

Chapter 27 Lo gs P-2602HWLNI User’s Guide 395 For type and code details, see T ab le 168 on page 397 . board %d line %d channel %d, call %d, %s C02 OutCall Connected %d %s The PPPoE, PPTP or dial -up call is connected. board %d line %d channel %d, call %d, %s C02 Call Terminated The PPPoE, PPTP or dial- up call was di sconnected. T able 162 PPP L[...]

Chapter 27 Logs P-2602HWLNI User’s Guide 396 ip spoofing - WAN [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The firewall detected an IP spoofing attack on the W A N port. ip spoofing - WAN ICMP (type:%d, code:%d) The firewall detected an ICMP IP spoofing attack on the W AN port. icmp echo : ICMP (type:%d, code:%d) The firewall dete cted an ICMP echo a[...]

Chapter 27 Lo gs P-2602HWLNI User’s Guide 397 User logout because of no authentication response from user. The router logge d out a user from which there was no authentication response. User logout because of idle timeout expired. The router l ogged out a user w hose idle ti meout period expired. User logout because of user request. A user logged[...]

Chapter 27 Logs P-2602HWLNI User’s Guide 398 0 A gateway may discard internet datagrams if it does not have th e buffer sp ace needed to queue the datagrams for output to the next network on th e route to the destination network. 5 Redirect 0 Redirect datagrams for the Netw ork 1 Redirect datagrams for the Host 2 Redirect datagrams for the T ype [...]

Chapter 27 Lo gs P-2602HWLNI User’s Guide 399 SIP UnRegistration Success by SIP:SIP Phone Number The listed SIP account’s registration was deleted from the SIP register server . SIP UnRegistration Fail by SIP:SIP Phone Number An attempt to delete the l isted SIP account’s registration from th e SIP register server failed. T able 171 RTP Logs [...]

Chapter 27 Logs P-2602HWLNI User’s Guide 400 The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to RFC 2408 for detail ed information on each type. T able 175 RFC-2408 ISAKMP Payload Types LOG DISPLA Y P A YLOAD TYPE SA Security Association PROP Proposal TRANS T ransform KE Key Exchange ID Identification C[...]

P-2602HWLNI User’s Guide 401 C HAPTER 28 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • Power , Hardware Connections, and LEDs • ZyXEL Device Access and Login • Internet Access • Phone Calls and V oIP 28.1 Power , Hardware Co[...]

Chapter 28 Trou bleshooting P-2602HWLNI User’s Guide 402 28.2 ZyXEL Device Access and Login V I forgot the IP address for the ZyXEL Device. 1 The default IP address is 192.168.1.1 . 2 If you changed the IP addre ss and have forgotten it, you might get the IP addre ss of the ZyXEL Device by looking up th e IP address of the default ga teway for yo[...]

Chapter 28 Trou bleshooting P-2602HWLNI User’s Guide 403 5 Reset the device to its factory defaults, an d try to access the ZyXEL Device with the default IP address. See Section 1.6 on page 47 . 6 If the problem continues, contact the network administrator or vendor , or try one of the advanced suggestio ns. Advanced Suggestions • T ry to acces[...]

Chapter 28 Trou bleshooting P-2602HWLNI User’s Guide 404 28.3 Internet Access V I cannot access the Internet. 1 Check the hardware connections , and make su re the LEDs are be having as expected. See the Quick S tart Guide and Section 1.5 on page 46 . 2 Make sure you entered your ISP account information correctly in the wizard. These fields are c[...]

Chapter 28 Trou bleshooting P-2602HWLNI User’s Guide 405 • Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowe ring the priority fo r some applications. 28.4 Phone Calls and V o IP V The telephone port won’t work or the telephone la cks a dial tone. Check the te[...]

Chapter 28 Trou bleshooting P-2602HWLNI User’s Guide 406[...]

P-2602HWLNI User’s Guide 407 C HAPTER 29 Tools This chapter explains how to upload new firm ware, manage configuration files and restart your ZyXEL Device. 1 Do not interrupt the fi le transfer process as this may PERMANENTL Y DAMAGE your ZyXEL Device. 29.1 Introduction Use the instructions in this chapter to change the device’ s configuration [...]

Chapter 29 Tools P-2602HWLNI User’s Guide 408 ZyNOS (ZyXEL Network Operating System someti mes referred to as the “ras” file) is the system firmware and has a “bin” filena me extension. Find this firmware at www .zyxel.com.W ith many FTP and TFTP clients, the filenames are similar to those seen next. ftp> put firmware.bin ras This is a[...]

Chapter 29 Tools P-2602HWLNI User’s Guide 409 29.4 Firmware Upgrade Screen Click Maintenance > T ools to open the Firmwar e screen. Follow the in structions in this screen to upload firmware to your ZyXEL Devi ce. The upload process uses HTTP (Hypertext T ransfer Protocol) and may take up to two minu tes. After a successful upload, the system [...]

Chapter 29 Tools P-2602HWLNI User’s Guide 410 Figure 234 Firmware Uplo ad In Progres s The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following ic on on your desktop. Figure 235 Network T e mporarily Disconnected After two minutes, log in again an d check you[...]

Chapter 29 Tools P-2602HWLNI User’s Guide 41 1 Figure 237 Configuration 29.5.1 Backup Configuration Backup Configuration allows you to back up (save) the ZyXE L Device’ s current configuration to a file on your co mputer . Once your ZyXEL Dev ice is configured and functionin g properly , it is highly recommended that you b ack up your configura[...]

Chapter 29 Tools P-2602HWLNI User’s Guide 412 Figure 238 Configuration Upload Successfu l The ZyXEL Device automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following ic on on your desktop. Figure 239 Network T e mporarily Disconnected If you uploaded the default co nfiguration [...]

Chapter 29 Tools P-2602HWLNI User’s Guide 413 Figure 242 Reset In Process Message Y ou can also press the RESET button on the rear panel to reset the factory defaults of your ZyXEL Device. Refer to Section 1.6 on p age 47 for more information on the RESET button. 29.6 Rest art System restart allows you t o reboot the Zy XEL Device without tu rnin[...]

Chapter 29 Tools P-2602HWLNI User’s Guide 414 computer and renames it “ config.rom ”. See earlier in this chapter for more information on filename con ventions. 7 Enter “ quit ” to exit the ftp prompt. 29.7.2 FTP Command Conf iguration Backup Example This figure gives an example of using FTP co mmands from the DOS comm and prompt to save [...]

Chapter 29 Tools P-2602HWLNI User’s Guide 415 1 Use telnet from your computer to connect to the ZyXEL Device and log in. B ecause TFTP does not have any security checks, th e ZyXEL Device records the IP address of the telnet client and accepts TFTP requests only from this address. 2 Enter command “ sys stdio 0 ” to disable the management idle[...]

Chapter 29 Tools P-2602HWLNI User’s Guide 416 29.8 Using FTP or TFTP to Restore Configuration This section shows you how to restore a previ ously saved configuration. Note that this function erases the current configuration before restoring a previous back up configuration; please do not attempt to restore unless you have a backup configuration f[...]

Chapter 29 Tools P-2602HWLNI User’s Guide 417 29.9.1 FTP File Upload Comman d from the DOS Prompt Example 1 Launch the FTP client on your computer . 2 Enter “open”, followed by a space and the IP address of your device. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is “1234”). 5 Enter “bin[...]

Chapter 29 Tools P-2602HWLNI User’s Guide 418 2 Enter the command “sys stdio 0” to disable the management idle timeout, so the TFTP transfer will not be interrupted . Enter “command sys stdio 5” to restore the five-minute management idle timeout (default) when the file transfer is complete. 3 Launch the TFTP client on your computer and co[...]

P-2602HWLNI User’s Guide 419 C HAPTER 30 Diagnostic These read-only screens display information to help you identify problems with the ZyXEL Device. 30.1 General Diagnostic Click Maintenance > Diagnostic to open the screen shown next. Figure 247 Diagnostic: General The following table describes the fields in this screen. 30.2 DSL Line Diagnost[...]

Chapter 30 Diagnostic P-2602HWLNI User’s Guide 420 Figure 248 Diagnostic: DSL Line The following table describes th e fields in this screen. T able 182 Diagnostic: DSL Line LABEL DESCRIPTION AT M S t a t u s Click th is button to view your DSL connection’s Asynchronous T ransfer Mode (A TM) statistics. A TM is a networking technology that provi[...]

Chapter 30 Diagnostic P-2602HWLNI User’s Guide 421 DSL Line S tatus Click this button to view statistics about the D SL connections. noise margin downstrea m is the signal to noise ratio for the downstream part of the connection (coming into the ZyXEL Devi ce from the ISP). It is measured in decibels. The higher the number the more signal and les[...]

Chapter 30 Diagnostic P-2602HWLNI User’s Guide 422[...]

P-2602HWLNI User’s Guide 423 C HAPTER 31 Product Specifications The following tables summarize the ZyXEL De vice’ s hardware and firmware features. 31.1 Hardware Sp ecifications 31.2 Firmware S pecifications T able 183 Hardware Specifications SPECIFICATION DESCRIPTION Dimensions (W x D x H) 16 8 x 37 x 248 mm Weight 390g Power S pecification 18[...]

Chapter 31 Product Specifications P-2602HWLNI User’s Guide 424 Device Management Use the web configurator to easi ly configure the rich range of features on the ZyXEL Device. Wireless Functionality Allow the IEEE 802.1 1b and /or IEEE 802.1 1g wireless clients to connect to the ZyXEL Device wirelessly . Enabl e wireless security (WEP , WP A(2), W[...]

Chapter 31 Product Specifications P-2602HWLNI User’s Guide 425 Zero Configuration Internet Access Once you connect and turn on the devic e, it automatically detects the Internet connection setting s (suc h as th e VCI/VPI numbers and the encapsulation method) from the ISP and makes the necessary configuration changes. In cases where additi onal a[...]

Chapter 31 Product Specifications P-2602HWLNI User’s Guide 426 ADSL St and ards Support IT U G .992.1 G .dmt (Annex B, U-R2) EOC specified in ITU-T G . 992.1 ADSL2 G .dm t.bis (G .992.3) ADSL2 G .l ite.bis (G .992.4) ADSL 2/2+ AnnexM ADSL2+ (G .992.5) Reach-Extended ADSL (RE ADSL) SRA (Seamless Rate Adaptation) Auto-negotiating rate ada ptation A[...]

Chapter 31 Product Specifications P-2602HWLNI User’s Guide 427 31.3 V o ice S p ecifications " T o take full advant age of the supplem entary phone services available through the ZyXEL Device's phone ports, you may need to s ubscribe to the services from your V oIP service provider . " Not all features are suppor ted by all service[...]

Chapter 31 Product Specifications P-2602HWLNI User’s Guide 428 Country Code Phone standards and settings differ from one country to another , so the setti ngs on your ZyXEL Device must be configured to match those of the country you are in. The coun try code feature allows you to do this by selectin g the country from a list rather tha n changing[...]

Chapter 31 Product Specifications P-2602HWLNI User’s Guide 429 31.4 Wireless Features (Wireless Devices Only) Multiple SIP Accounts Y ou can simultaneously use multiple voice (SIP) accounts and assign them to one or both telephone ports. Multiple Voice Channels Y our device can simultaneously handle multiple voice channel s (telephone calls). Add[...]

Chapter 31 Product Specifications P-2602HWLNI User’s Guide 430 31.4.1 IEEE 802.1 1g Wireless LAN IEEE 802.1 1g is fully compa tible wit h the IEEE 802.1 1b standard. This means an IEEE 802.1 1b radio card can interface directly with an IEEE 802.1 1g ac cess point (and vice versa) at 1 1 Mbps or lower depe nding on range. IEEE 802. 1 1g has severa[...]

Chapter 31 Product Specifications P-2602HWLNI User’s Guide 431 " Y our device may be prone to RF (Radio Frequency) interfer ence from other 2.4 GHz devices such as microwav e ovens, wireless phones, Bluetooth enabled devices, and other wireless LANs. 31.5 Power Adaptor Sp ecifications 5.5 / 1 1 CCK (Complementary Code Keying) 6/9/12/18/24/36[...]

Chapter 31 Product Specifications P-2602HWLNI User’s Guide 432[...]

433 P ART VIII Appendices and Index Setting up Y our Computer ’ s IP Address (435) Pop-up W indows, JavaScripts and Java Permissions (447) IP Addresses and Subnetting (453) W ireless LANs (461) Services (475) Legal Information (479) Customer Support (483) Index (489)[...]

434[...]

P-2602HWLNI User’s Guide 435 A PPENDIX A Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your c[...]

Appendix A Setting up Your Computer’s IP Address P-2602HWLNI User’s Guide 436 Figure 249 WIndows 95/98 /Me: Networ k: Configura tion Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks. If you need the adapter: [...]

Appendix A Setting up Your Computer’s IP Address P-2602HWLNI User’s Guide 437 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically . • If you have a static IP address, [...]

Appendix A Setting up Your Computer’s IP Address P-2602HWLNI User’s Guide 438 Figure 251 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r gateway’ s IP addr ess, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click A[...]

Appendix A Setting up Your Computer’s IP Address P-2602HWLNI User’s Guide 439 Figure 252 Windows XP: S tart Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 253 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

Appendix A Setting up Your Computer’s IP Address P-2602HWLNI User’s Guide 440 Figure 254 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and click Properties . Figure 255 Windows XP: Local Area Conne ction Properties 5 The Internet Protocol TCP/IP Properties win[...]

Appendix A Setting up Your Computer’s IP Address P-2602HWLNI User’s Guide 441 Figure 256 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP address, remove any previously installe d gateways in the IP Settin gs tab and click OK . Do one or more of the fo llowing if you want to configure additi onal IP addresses: ?[...]

Appendix A Setting up Your Computer’s IP Address P-2602HWLNI User’s Guide 442 If you have previously co nfigured DNS servers, click Advanced and then the DNS tab to order them. Figure 257 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click OK to close the Local Area C[...]

Appendix A Setting up Your Computer’s IP Address P-2602HWLNI User’s Guide 443 Figure 258 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 259 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list.[...]

Appendix A Setting up Your Computer’s IP Address P-2602HWLNI User’s Guide 444 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your ZyXEL Device in the Router addr[...]

Appendix A Setting up Your Computer’s IP Address P-2602HWLNI User’s Guide 445 Figure 261 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of[...]

Appendix A Setting up Your Computer’s IP Address P-2602HWLNI User’s Guide 446[...]

P-2602HWLNI User’s Guide 447 A PPENDIX B Pop-up Windows, JavaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-up windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). " Internet Explorer 6 screens are u sed here. Screens for other I[...]

Appendix B Po p-up Wind ows, JavaS cripts and Ja va Permission s P-2602HWLNI User’s Guide 448 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you may have ena bled. Figure 263 Internet Options: Privacy 3 Click Apply to save this setting. Enable pop-up Blockers with Exceptio[...]

Appendix B Pop-u p Windows, JavaScripts and Java Permissio ns P-2602HWLNI User’s Guide 449 Figure 264 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allowed sites [...]

Appendix B Po p-up Wind ows, JavaS cripts and Ja va Permission s P-2602HWLNI User’s Guide 450 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. JavaScript s If pages of the web configura tor do not display properly in Internet Explorer, check that JavaScripts are allowed. 1 In Internet Explorer , click T ools , In[...]

Appendix B Pop-u p Windows, JavaScripts and Java Permissio ns P-2602HWLNI User’s Guide 451 Figure 267 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , In ternet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions make sure th[...]

Appendix B Po p-up Wind ows, JavaS cripts and Ja va Permission s P-2602HWLNI User’s Guide 452 JA V A (Sun) 1 From Internet Explorer , click To o l s , In ternet Options and then the Adva nced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted. 3 Click OK to clos e the window . Figure 269 Java (Sun)[...]

P-2602HWLNI User’s Guide 453 A PPENDIX C IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.) ne eds an IP address to communicate across the network. These networking devices a re[...]

Appendix C IP Addresses a nd Subnetti ng P-2602HWLNI User’s Guide 454 Figure 270 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask. Subnet Masks A subnet mask is used to dete rmine which bits are part of th e network number , and which bits are part of the [...]

Appendix C IP Addresses and Subnetting P-2602HWLNI User’s Guide 455 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks. Network Size The size of the network number determines the maximum number of possible h[...]

Appendix C IP Addresses a nd Subnetti ng P-2602HWLNI User’s Guide 456 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the foll owing example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons. In this example, the company[...]

Appendix C IP Addresses and Subnetting P-2602HWLNI User’s Guide 457 Figure 272 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address). 192.168.1.[...]

Appendix C IP Addresses a nd Subnetti ng P-2602HWLNI User’s Guide 458 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 00 1, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet. T able 194 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST O CTET BIT VA L U E IP [...]

Appendix C IP Addresses and Subnetting P-2602HWLNI User’s Guide 459 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number . 5 128 129 158 15 9 6 160 161 190 19 1 7 192 193 222 22 3 8 224 225 2[...]

Appendix C IP Addresses a nd Subnetti ng P-2602HWLNI User’s Guide 460 Configuring IP Addresses Where you obtain your netwo rk number depends on your particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. If the IS[...]

P-2602HWLNI User’s Guide 461 A PPENDIX D W ireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a se t of computers with wireless adapters (A, B, C). An y time two or more wi[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 462 Figure 274 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wireless[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 463 Figure 275 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by wireless devices to transmit and receive data. Channels available depend on your g eographical area. Y ou may have a choice of channels (for your region) so you should use a channel different from an adjacent [...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 464 Figure 276 RTS/ CT S When station A sends data to the AP , it might not know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss of me ssages for[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 465 If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set then the R TS (Request T o Send)/CTS (Clear to Send) handshake will never occur as data frames will be fragmen ted before they reach R TS/CTS size. Preamble T ype Preamble is used to signal tha[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 466 W ireless security me thods available on the Prod uct Name [short] are da ta encryption, wireless client authentication, restricting access by de vice MAC address and hiding the Product Name [short] identity . The following figure shows th e relative effectiveness of th ese wireless security m[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 467 Determines the network services available to authenticated users once they are connected to the network. • Accounting Keeps track of the client’ s network activity . RADIUS is a simple package exchange in whic h your AP acts as a message rela y between the wireless client and the network R[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 468 For EAP-TLS authentication type, you must firs t hav e a wired connection to the network and obtain the certificate(s) from a certificate authorit y (CA). A certificate (als o called digital IDs) can be used to authenticate users and a CA issu es certificates and guar antees the identity of ea[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 469 Dynamic WEP Key Exchange The AP maps a unique ke y that is generated w ith the RADIUS server . This key expires when the wireless connection times out, disconnects or reauthentic ation times out. A new WEP key is generated each time r eauthentication is performed. If this feature is enabled, i[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 470 Encryption Both WP A and WP A2 improve data encryption by using T emporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IE EE 802.1x. WP A and WP A2 use Advanced Encryption S tandard (AES) in the Counter mode with Cipher block chaining Message authentication code Protocol (C[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 471 Wireless Client WP A Supp licant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A. At the time of writing, the most widely available supplicant is the WP A patch for W indows XP , Funk Software's Odyssey client[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 472 3 The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not sent over the network, but is derived from the PSK and the SSID. 4 The AP and wireless clients use the TKIP or AES encryption process, the PMK and information exchanged in a handshake to create tem[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 473 Antenna Overview An antenna couples RF signals onto air . A tran smitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air . The antenna also operates in reverse by capturing RF signals fro m the air . Positioning the antennas properly incr[...]

Appendix D Wireless LANs P-2602HWLNI User’s Guide 474 Positioning Antennas In general, antennas should be mounted as high as practically possible and free of obstructions. In point-to–point ap plication, position both antennas at the same height and in a direct line of si ght to each othe r to attain the best performance. For omni-directional a[...]

P-2602HWLNI User’s Guide 475 A PPENDIX E Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. • Name : This is a short, descrip tive name for the service. Y ou can use this one or create a different one, if you like. • Pro tocol : This is the type of IP protoc ol used by the service[...]

Appendix E Services P-2602HWLNI User’s Guide 476 H.323 TCP 1720 NetMeeting uses this protocol. HTTP TCP 80 Hyper T ext T ransfer Protoco l - a client/ server protocol for the world wide web. HTTPS TCP 443 HTTPS is a secure d http session often used in e-commerce. ICMP User-Defined 1 Internet Control Message Protocol is often used for diagnostic p[...]

Appendix E Services P-2602HWLNI User’s Guide 477 PPTP_TUNNEL (GRE) User-Defined 47 PPTP (Point-to-Point T unnel ing Protocol) enables secure tran sfer of data over public networks. This is the data channel. RCMD TCP 512 Remote Comman d Service. REAL_AUDIO TCP 7070 A streami ng audio service that enables real time sound over the we b. REXEC TCP 51[...]

Appendix E Services P-2602HWLNI User’s Guide 478 TFTP UDP 69 T r ivial File Transfer Protocol is an Internet file transfer protocol similar to FTP , but uses the UDP (User Datagram Protocol) rather than TCP (Transmission Control Protocol). VDOLIVE TCP UDP 7000 user- defined A videoconferencing solution. The UDP port number is spe cified in the ap[...]

P-2602HWLNI User’s Guide 479 A PPENDIX F Legal Information Copyright Copyright © 2006 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mechanical[...]

Appendix F L egal Information P-2602HWLNI User’s Guide 480 If this device does cause harmful inte rference to radio/television reception, which can be determined by turning th e device off and on, the user is enc ouraged to try to correct the interference by one or more of the following measures: 1 Reorient or relocate the receiving antenna. 2 In[...]

Appendix F Legal Information P-2602HWLNI User’s Guide 481 2 Select your product on the ZyXEL home pag e to go to that product's page. 3 Select the certification you wish to view from this page. ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip [...]

Appendix F L egal Information P-2602HWLNI User’s Guide 482[...]

P-2602HWLNI User’s Guide 483 A PPENDIX G Customer Support Please have the following information r eady when you contact customer support. Required Information • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps you took to solv e it. “+” i[...]

Appendix G Custo mer Support P-2602HWLNI User’s Guide 484 • Re g u l a r Ma i l : ZyXEL Communications, Czech s.r .o., Modranská 621, 143 01 Praha 4 - Modrany , Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk • T elephone: +45-39-55-07-00 • Fax: +45-39-55-07-07 • W eb: www .zyxel.dk • Re g[...]

Appendix G Custome r Support P-2602HWLNI User’s Guide 485 India • Support E-mail: support@zyxel.in • Sales E-mail: sales@zyxel.in • T elephone: +91-1 1-30888144 to +91 -11-308 88153 • Fax: +91-1 1-30888149, +91 -11-2 6810715 • W eb: http://www .zyxel.in • Re g u l a r Ma i l : India - ZyXEL T echnology Indi a Pvt Ltd. , I I - Fl o o r[...]

Appendix G Custo mer Support P-2602HWLNI User’s Guide 486 • Regular Mail: ZyXEL Communications Inc., 1 130 N. Miller St., Anaheim, CA 92806- 2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no • T elephone: +47-22-80-61-80 • Fax: +47-22-80-61-81 • W eb: www .zyxel.no • Re g u l a r M a i l: ZyXEL Co[...]

Appendix G Custome r Support P-2602HWLNI User’s Guide 487 Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • T elephone: +46-31-744-7700 • Fax: +46-31-744-7701 • W eb: www .zyxel.se • Re g u l ar M ai l : ZyXEL Communications A/S, Sjöporten 4, 41764 Götebor g, Sweden Thailand • Support E-mail: support@zyxel[...]

Appendix G Custo mer Support P-2602HWLNI User’s Guide 488[...]

Index P-2602HWLNI User’s Guide 489 Index A AAL5 426 ACK message 173 Address Resolution Protocol (ARP) 121 ADSL2 426 Advanced Encryption St andard See AES. AES 470 AH 271 AH protocol 275 ALG 429 alternative subnet mask notation 455 antenna 423 directional 473 gain 473 omni-directional 473 any IP 121 , 425 how it works 121 note 121 any IP setup 123[...]

Index P-2602HWLNI User’s Guide 490 importing 304 remote hosts 319 revoked 302 trusted CAs 31 1 , 313 verifying 318 Certification Authority (CA) 301 certifications 479 notices 480 viewing 480 change p assword at logi n 50 channel 463 interference 463 channel ID 134 checking the device’s IP address 229 Class of Service 177 client-server protocol [...]

Index P-2602HWLNI User’s Guide 491 emergency numbers 206 encap sulated routing li n k protocol (ENET ENCAP) 101 encap sulation 101 , 271 ENET ENCAP 101 PPP over Ethernet 101 PPPoA 102 RFC 1483 102 encapsulation security p ayload 275 encryption 269 , 470 ESP 271 ESP protocol 275 ESS 462 Europe type call servi ce mode 195 Extended Service Se t IDen[...]

Index P-2602HWLNI User’s Guide 492 IEEE 802.1 1i 430 IEEE 802.1Q VLAN 177 IGMP 120 IGMP proxy 426 IGMP v1 426 IGMP v2 426 IKE phases 288 importing certificates 304 importing trusted CAs 313 importing trusted remote hosts 319 Independent Basi c Service Set See IBSS 461 initialization vector (IV) 470 inside header 272 install UPnP 363 Windows Me 36[...]

Index P-2602HWLNI User’s Guide 493 multiple SIP accounts 429 multiple voice channels 429 multiplexing 102 LLC-based 102 VC-based 102 multiprotocol encapsulation 102 music on hold 428 my IP address 276 N nailed-up connectio n 103 NA T 11 9 , 160 , 460 address mapping rule 164 application 156 definitions 155 how it works 156 mapping types 157 what [...]

Index P-2602HWLNI User’s Guide 494 Q QoS 176 , 429 Quality of Service 176 , 429 quick dialing 429 Quick S tart Guide 49 R RADIUS 430 , 466 message types 467 messages 467 shared secret key 467 Reach-Extended ADSL 426 Real time T ransport Protocol 173 real-time e-mail alerts 426 recurity ramifications 246 region 428 registration product 481 reiniti[...]

Index P-2602HWLNI User’s Guide 495 SIP ALG 429 SIP ALG passthrough 42 6 SIP Application Layer Gateway 429 SIP authentication password 80 SIP authentication user ID 80 SIP call prog ression 173 SIP client 170 SIP identities 169 SIP INVITE request 173 , 174 SIP number 80 , 169 SIP OK response 175 SIP proxy server 170 SIP redirect server 171 SIP reg[...]

Index P-2602HWLNI User’s Guide 496 upper layer protocols 240 , 241 USA type call servi ce mode 196 using speed dial 227 V VA D 184 , 429 VBR (V ariable Bit Rate) 11 3 VBR-nRT 109 VBR-RT 10 9 Virtual Channel Identifier (VCI) 102 Virtual Circ uit (VC) 102 Virtual Local Area Network 177 Virtual Path Identifier (VPI) 102 Virtual Private Network 269 ,[...]