Document Outline

• User’s Guide
  • About This User's Guide
  • Document Conventions
  • Safety Warnings
  • Contents Overview
  • Table of Contents
  • List of Figures
  • List of Tables
• Introduction
  • Introducing the ZyXEL Device
    • 1.1 Overview
    • 1.2 Ways to Manage the ZyXEL Device
    • 1.3 Good Habits for Managing the ZyXEL Device
    • 1.4 Applications for the ZyXEL Device
      • 1.4.1 Internet Access
      • 1.4.2 Making Calls via Internet Telephony Service Provider
      • 1.4.3 Make Peer-to-peer Calls
      • 1.4.4 Firewall for Secure Broadband Internet Access
      • 1.4.5 LAN to LAN Application
    • 1.5 LEDs
    • 1.6 The RESET Button
      • 1.6.1 Using The Reset Button
  • Introducing the Web Configurator
    • 2.1 Web Configurator Overview
      • 2.1.1 Accessing the Web Configurator
    • 2.2 Login Types
      • 2.2.1 User Access
      • 2.2.2 Administrator Access
    • 2.3 Web Configurator Main Screen
      • 2.3.1 Title Bar
      • 2.3.2 Navigation Panel
      • 2.3.3 Main Window
      • 2.3.4 Status Bar
• Wizards and Status
  • Internet and Wireless Setup Wizard
    • 3.1 Introduction
    • 3.2 Internet Access Wizard Setup
      • 3.2.1 Manual Configuration
    • 3.3 Wireless Connection Wizard Setup
      • 3.3.1 Manually Assign a WPA-PSK Key
      • 3.3.2 Manually Assign a WEP Key
  • VoIP Wizard
    • 4.1 Introduction
    • 4.2 VoIP Wizard Setup
  • Bandwidth Management Wizard
    • 5.1 Introduction
    • 5.2 Bandwidth Management Wizard Setup
  • Status Screens
    • 6.1 Status Screen
    • 6.2 Any IP Table
    • 6.3 WLAN Status
    • 6.4 Packet Statistics
    • 6.5 VoIP Statistics
    • 6.6 LED Status
• Network
  • WAN Setup
    • 7.1 WAN Overview
      • 7.1.1 Encapsulation
      • 7.1.2 Multiplexing
      • 7.1.3 VPI and VCI
      • 7.1.4 IP Address Assignment
      • 7.1.5 Nailed-Up Connection (PPP)
      • 7.1.6 NAT
    • 7.2 Metric
    • 7.3 Traffic Shaping
      • 7.3.1 ATM Traffic Classes
    • 7.4 Zero Configuration Internet Access
    • 7.5 Internet Access Setup
      • 7.5.1 Advanced Internet Access Setup
    • 7.6 WAN More Connections
    • 7.7 More Connections Edit
    • 7.8 More Connections Edit Advanced
    • 7.9 Traffic Redirect
    • 7.10 WAN Backup Setup
  • LAN Setup
    • 8.1 LAN Overview
      • 8.1.1 LANs, WANs and the ZyXEL Device
      • 8.1.2 DHCP Setup
    • 8.2 DNS Server Addresses
    • 8.3 LAN TCP/IP
      • 8.3.1 IP Address and Subnet Mask
      • 8.3.2 RIP Setup
      • 8.3.3 Multicast
      • 8.3.4 Any IP
    • 8.4 Configuring LAN IP
      • 8.4.1 Configuring Advanced LAN Setup
    • 8.5 DHCP Setup
    • 8.6 LAN Client List
    • 8.7 LAN IP Alias
  • Wireless LAN
    • 9.1 Wireless Network Overview
    • 9.2 Wireless Security Overview
      • 9.2.1 SSID
      • 9.2.2 MAC Address Filter
      • 9.2.3 User Authentication
      • 9.2.4 Encryption
      • 9.2.5 One-Touch Intelligent Security Technology (OTIST)
    • 9.3 Wireless Performance Overview
      • 9.3.1 Quality of Service (QoS)
      • 9.3.2 Wireless Distribution System (WDS)
    • 9.4 Additional Wireless Terms
    • 9.5 General WLAN Screen
      • 9.5.1 No Security
      • 9.5.2 WEP Encryption Screen
      • 9.5.3 WPA(2)-PSK
      • 9.5.4 WPA(2) Authentication Screen
      • 9.5.5 Wireless LAN Advanced Setup
    • 9.6 OTIST Screen
      • 9.6.1 Notes on OTIST
    • 9.7 MAC Filter
    • 9.8 Association List
    • 9.9 QoS Screen
      • 9.9.1 Application Priority Configuration
    • 9.10 WDS Screen
      • 9.10.1 Static WEP
      • 9.10.2 WPA-PSK
      • 9.10.3 WPA2-PSK
  • Network Address Translation (NAT) Screens
    • 10.1 NAT General Overview
      • 10.1.1 NAT Definitions
      • 10.1.2 What NAT Does
      • 10.1.3 How NAT Works
      • 10.1.4 NAT Application
      • 10.1.5 NAT Mapping Types
    • 10.2 SUA (Single User Account) Versus NAT
    • 10.3 NAT General Setup
    • 10.4 Port Forwarding
      • 10.4.1 Default Server IP Address
      • 10.4.2 Port Forwarding: Services and Port Numbers
      • 10.4.3 Configuring Servers Behind Port Forwarding (Example)
    • 10.5 Configuring Port Forwarding
      • 10.5.1 Port Forwarding Rule Edit
    • 10.6 Address Mapping
      • 10.6.1 Address Mapping Rule Edit
• VoIP
  • Voice
    • 11.1 Introduction to VoIP
    • 11.2 SIP
      • 11.2.1 SIP Identities
      • 11.2.2 SIP Servers
      • 11.2.3 RTP
      • 11.2.4 Pulse Code Modulation
      • 11.2.5 SIP Call Progression
      • 11.2.6 SIP Call Progression Through Proxies
      • 11.2.7 Voice Coding
      • 11.2.8 PSTN Call Setup Signaling
      • 11.2.9 MWI (Message Waiting Indication)
      • 11.2.10 Custom Tones (IVR)
    • 11.3 Quality of Service (QoS)
      • 11.3.1 Type Of Service (ToS)
      • 11.3.2 DiffServ
      • 11.3.3 VLAN
    • 11.4 SIP Settings Screen
    • 11.5 Advanced SIP Setup Screen
    • 11.6 SIP QoS Screen
    • 11.7 Phone
      • 11.7.1 PSTN Line
      • 11.7.2 ISDN Line
      • 11.7.3 Voice Activity Detection/Silence Suppression
      • 11.7.4 Comfort Noise Generation
      • 11.7.5 Echo Cancellation
    • 11.8 Analog Phone
      • 11.8.1 PHONE Port Call Types
      • 11.8.2 Configuring the Analog Phone Screen
    • 11.9 Advanced Analog Phone Setup Screen
    • 11.10 ISDN Phone
      • 11.10.1 ISDN Phone Port Call Types
      • 11.10.2 Configuring the ISDN Phone Screen
    • 11.11 Common Phone Settings Screen
    • 11.12 Ext. Table
    • 11.13 Advanced Ext. Table Setup Screen
    • 11.14 Phone Services Overview
      • 11.14.1 The Flash Key
      • 11.14.2 Europe Type Supplementary Phone Services
      • 11.14.3 USA Type Supplementary Services
    • 11.15 Phone Region Screen
    • 11.16 Speed Dial
    • 11.17 Incoming Call Policy Screen
    • 11.18 Distinctive Ring Screen
    • 11.19 SIP Prefix Screen
    • 11.20 PSTN Line
    • 11.21 PSTN Line Screen
    • 11.22 ISDN Line Screen
    • 11.23 Fixed Line Numbers
      • 11.23.1 Multiple Subscriber Numbers
      • 11.23.2 Receiving Analog Calls With Digital Phones
      • 11.23.3 Configuring the Fixed Line Numbers Screen
  • VoIP Trunking
    • 12.1 VoIP Trunking Overview
    • 12.2 VoIP Trunking and Security
      • 12.2.1 Auto Attendant and Authentication
      • 12.2.2 Peer Call Authentication
    • 12.3 Call Rules
    • 12.4 VoIP Trunking Scenarios
      • 12.4.1 VoIP Phone To PSTN Phone
      • 12.4.2 PSTN Phone To VoIP Phone
      • 12.4.3 PSTN Phone To PSTN Phone via VoIP
    • 12.5 Trunking General Screen
    • 12.6 Trunking Peer Call Screen
    • 12.7 Trunking Call Rule Screen
    • 12.8 VoIP Trunking Example: VoIP to PSTN
      • 12.8.1 Background Information
      • 12.8.2 Configuration Details: Outgoing
      • 12.8.3 Configuration Details: Incoming
      • 12.8.4 Call Progression
    • 12.9 VoIP Trunking Example: PSTN to PSTN via VoIP
      • 12.9.1 Background Information
      • 12.9.2 Configuration Details: Outgoing
      • 12.9.3 Configuration Details: Incoming
      • 12.9.4 Call Progression
  • Phone Usage
    • 13.1 Dialing a Telephone Number
    • 13.2 Using Speed Dial to Dial a Telephone Number
    • 13.3 Internal Calls
      • 13.3.1 Phone Book
      • 13.3.2 Call Transfer
      • 13.3.3 Call Forwarding
      • 13.3.4 Follow Me
      • 13.3.5 Call Pickup
    • 13.4 Checking the Device’s IP Address
    • 13.5 Auto Firmware Upgrade
• Security
  • Firewalls
    • 14.1 Firewall Overview
    • 14.2 Types of Firewalls
      • 14.2.1 Packet Filtering Firewalls
      • 14.2.2 Application-level Firewalls
      • 14.2.3 Stateful Inspection Firewalls
    • 14.3 Introduction to ZyXEL’s Firewall
      • 14.3.1 Denial of Service Attacks
    • 14.4 Denial of Service
      • 14.4.1 Basics
      • 14.4.2 Types of DoS Attacks
    • 14.5 Stateful Inspection
      • 14.5.1 Stateful Inspection Process
      • 14.5.2 Stateful Inspection on Your ZyXEL Device
      • 14.5.3 TCP Security
      • 14.5.4 UDP/ICMP Security
      • 14.5.5 Upper Layer Protocols
    • 14.6 Guidelines for Enhancing Security with Your Firewall
      • 14.6.1 Security In General
    • 14.7 Packet Filtering Vs Firewall
      • 14.7.1 Packet Filtering:
      • 14.7.2 Firewall
  • Firewall Configuration
    • 15.1 Access Methods
    • 15.2 General Firewall Policy Overview
    • 15.3 Rule Logic Overview
      • 15.3.1 Rule Checklist
      • 15.3.2 Security Ramifications
      • 15.3.3 Key Fields For Configuring Rules
    • 15.4 Connection Direction
      • 15.4.1 LAN to WAN Rules
      • 15.4.2 Alerts
    • 15.5 General Firewall Policy
    • 15.6 Firewall Rules Summary
      • 15.6.1 Configuring Firewall Rules
      • 15.6.2 Customized Services
      • 15.6.3 Configuring a Customized Service
    • 15.7 Example Firewall Rule
    • 15.8 DoS Thresholds
      • 15.8.1 Threshold Values
      • 15.8.2 Half-Open Sessions
      • 15.8.3 Configuring Firewall Thresholds
    • 15.9 Firewall Commands
  • Content Filtering
    • 16.1 Content Filtering Overview
    • 16.2 Configuring Keyword Blocking
    • 16.3 Configuring the Schedule
    • 16.4 Configuring Trusted Computers
  • Introduction to IPSec
    • 17.1 VPN Overview
      • 17.1.1 IPSec
      • 17.1.2 Security Association
      • 17.1.3 Other Terminology
      • 17.1.4 VPN Applications
    • 17.2 IPSec Architecture
      • 17.2.1 IPSec Algorithms
      • 17.2.2 Key Management
    • 17.3 Encapsulation
      • 17.3.1 Transport Mode
      • 17.3.2 Tunnel Mode
    • 17.4 IPSec and NAT
  • VPN Screens
    • 18.1 VPN/IPSec Overview
    • 18.2 IPSec Algorithms
      • 18.2.1 AH (Authentication Header) Protocol
      • 18.2.2 ESP (Encapsulating Security Payload) Protocol
    • 18.3 My IP Address
    • 18.4 Secure Gateway Address
      • 18.4.1 Dynamic Secure Gateway Address
    • 18.5 VPN Setup Screen
    • 18.6 Keep Alive
    • 18.7 VPN, NAT, and NAT Traversal
    • 18.8 Remote DNS Server
    • 18.9 ID Type and Content
      • 18.9.1 ID Type and Content Examples
    • 18.10 Pre-Shared Key
    • 18.11 Editing VPN Policies
    • 18.12 IKE Phases
      • 18.12.1 Negotiation Mode
      • 18.12.2 Diffie-Hellman (DH) Key Groups
      • 18.12.3 Perfect Forward Secrecy (PFS)
    • 18.13 Configuring Advanced IKE Settings
    • 18.14 Manual Key Setup
      • 18.14.1 Security Parameter Index (SPI)
    • 18.15 Configuring Manual Key
    • 18.16 Viewing SA Monitor
    • 18.17 Configuring Global Setting
    • 18.18 Telecommuter VPN/IPSec Examples
      • 18.18.1 Telecommuters Sharing One VPN Rule Example
      • 18.18.2 Telecommuters Using Unique VPN Rules Example
    • 18.19 VPN and Remote Management
  • Certificates
    • 19.1 Certificates Overview
      • 19.1.1 Advantages of Certificates
    • 19.2 Self-signed Certificates
    • 19.3 Configuration Summary
    • 19.4 My Certificates
    • 19.5 My Certificate Import
      • 19.5.1 Certificate File Formats
    • 19.6 My Certificate Create
    • 19.7 My Certificate Details
    • 19.8 Trusted CAs
    • 19.9 Trusted CA Import
    • 19.10 Trusted CA Details
    • 19.11 Trusted Remote Hosts
    • 19.12 Verifying a Trusted Remote Host’s Certificate
      • 19.12.1 Trusted Remote Host Certificate Fingerprints
    • 19.13 Trusted Remote Hosts Import
    • 19.14 Trusted Remote Host Certificate Details
    • 19.15 Directory Servers
    • 19.16 Directory Server Add and Edit
• Advanced
  • Static Route
    • 20.1 Static Route
    • 20.2 Configuring Static Route
      • 20.2.1 Static Route Edit
  • Bandwidth Management
    • 21.1 Bandwidth Management Overview
    • 21.2 Application-based Bandwidth Management
    • 21.3 Auto Classifier
    • 21.4 Subnet-based Bandwidth Management
    • 21.5 Application and Subnet-based Bandwidth Management
      • 21.5.1 Bandwidth Management Priorities
    • 21.6 Configuring Bandwidth Management (General)
    • 21.7 Bandwidth Management Rule Setup
      • 21.7.1 Rule Configuration
    • 21.8 Bandwidth Monitor
  • Dynamic DNS Setup
    • 22.1 Dynamic DNS Overview
      • 22.1.1 DYNDNS Wildcard
    • 22.2 Configuring Dynamic DNS
  • Remote Management Configuration
    • 23.1 Remote Management Overview
      • 23.1.1 Remote Management Limitations
      • 23.1.2 Remote Management and NAT
      • 23.1.3 System Timeout
    • 23.2 Introduction to HTTPS
    • 23.3 HTTP
    • 23.4 Telnet
    • 23.5 Configuring Telnet
    • 23.6 Configuring FTP
    • 23.7 SNMP
      • 23.7.1 Supported MIBs
      • 23.7.2 SNMP Traps
      • 23.7.3 Configuring SNMP
    • 23.8 Configuring DNS
    • 23.9 Configuring ICMP
    • 23.10 SSH
    • 23.11 How SSH Works
    • 23.12 SSH Implementation on the ZyXEL Device
      • 23.12.1 Requirements for Using SSH
    • 23.13 Configuring SSH
    • 23.14 Secure Telnet Using SSH Examples
      • 23.14.1 Example 1: Microsoft Windows
      • 23.14.2 Example 2: Linux
    • 23.15 Secure FTP Using SSH Example
  • Universal Plug-and-Play (UPnP)
    • 24.1 Introducing Universal Plug and Play
      • 24.1.1 How do I know if I'm using UPnP?
      • 24.1.2 NAT Traversal
      • 24.1.3 Cautions with UPnP
    • 24.2 UPnP and ZyXEL
      • 24.2.1 Configuring UPnP
    • 24.3 Installing UPnP in Windows Example
    • 24.4 Using UPnP in Windows XP Example
• Maintenance and Troubleshooting
  • System
    • 25.1 General Setup and System Name
      • 25.1.1 General Setup
    • 25.2 Time Setting
  • Call History
    • 26.1 Call History Overview
    • 26.2 Viewing the Call History Summary
    • 26.3 Viewing Call History
    • 26.4 Configuring Call History Settings
  • Logs
    • 27.1 Logs Overview
      • 27.1.1 Alerts and Logs
    • 27.2 Viewing the Logs
    • 27.3 Configuring Log Settings
    • 27.4 SMTP Error Messages
      • 27.4.1 Example E-mail Log
    • 27.5 Log Descriptions
  • Troubleshooting
    • 28.1 Power, Hardware Connections, and LEDs
    • 28.2 ZyXEL Device Access and Login
    • 28.3 Internet Access
    • 28.4 Phone Calls and VoIP
  • Tools
    • 29.1 Introduction
    • 29.2 Filename Conventions
    • 29.3 File Maintenance Over WAN
    • 29.4 Firmware Upgrade Screen
    • 29.5 Backup and Restore
      • 29.5.1 Backup Configuration
      • 29.5.2 Restore Configuration
      • 29.5.3 Reset to Factory Defaults
    • 29.6 Restart
    • 29.7 Using FTP or TFTP to Back Up Configuration
      • 29.7.1 Using the FTP Commands to Back Up Configuration
      • 29.7.2 FTP Command Configuration Backup Example
      • 29.7.3 Configuration Backup Using GUI-based FTP Clients
      • 29.7.4 Backup Configuration Using TFTP
      • 29.7.5 TFTP Command Configuration Backup Example
      • 29.7.6 Configuration Backup Using GUI-based TFTP Clients
    • 29.8 Using FTP or TFTP to Restore Configuration
      • 29.8.1 Restore Using FTP Session Example
    • 29.9 FTP and TFTP Firmware and Configuration File Uploads
      • 29.9.1 FTP File Upload Command from the DOS Prompt Example
      • 29.9.2 FTP Session Example of Firmware File Upload
      • 29.9.3 TFTP File Upload
      • 29.9.4 TFTP Upload Command Example
  • Diagnostic
    • 30.1 General Diagnostic
    • 30.2 DSL Line Diagnostic
  • Product Specifications
    • 31.1 Hardware Specifications
    • 31.2 Firmware Specifications
    • 31.3 Voice Specifications
    • 31.4 Wireless Features (Wireless Devices Only)
      • 31.4.1 IEEE 802.11g Wireless LAN
    • 31.5 Power Adaptor Specifications
• Appendices and Index
  • Setting up Your Computer’s IP Address
  • Pop-up Windows, JavaScripts and Java Permissions
  • IP Addresses and Subnetting
  • Wireless LANs
  • Services
  • Legal Information
  • Customer Support
  • Index