Document Outline

• User’s Guide
• Copyright
• Certifications
• Safety Warnings
• ZyXEL Limited Warranty
• Customer Support
• Table of Contents
• List of Figures
• List of Tables
• Preface
• Getting To Know Your ZyXEL Device
  • 1.1 Overview
    • 1.1.1 High-speed Internet Access
    • 1.1.2 High-speed Point-to-point Connections
  • 1.2 LEDs
• Introducing the Web Configurator
  • 2.1 Web Configurator Overview
  • 2.2 Accessing the Web Configurator
  • 2.3 Navigating the Web Configurator
  • 2.4 Status Screen
    • 2.4.1 Status: Bandwidth Status
    • 2.4.2 Status: Packet Statistics
    • 2.4.3 Status: VPN Status
  • 2.5 Resetting the ZyXEL Device
    • 2.5.1 Using the Reset Button
• Wizards
  • 3.1 Internet Setup Wizard
    • 3.1.1 Screen 1
    • 3.1.2 Screen 2
    • 3.1.3 Screen 3
  • 3.2 Bandwidth Management Wizard
    • 3.2.1 Screen 1
    • 3.2.2 Screen 2
    • 3.2.3 Screen 3
• Point-to-point Configuration
  • 4.1 Point-to-point Connection Overview
  • 4.2 Point-to-point Connection Procedure
    • 4.2.1 Set up the Server
    • 4.2.2 Set up the Client
    • 4.2.3 Connect the ZyXEL Devices
• WAN Setup
  • 5.1 WAN Overview
    • 5.1.1 Encapsulation
      • 5.1.1.1 ENET ENCAP
      • 5.1.1.2 PPP over Ethernet
      • 5.1.1.3 PPPoA
      • 5.1.1.4 RFC 1483
    • 5.1.2 Multiplexing
      • 5.1.2.1 VC-based Multiplexing
      • 5.1.2.2 LLC-based Multiplexing
    • 5.1.3 VPI and VCI
    • 5.1.4 IP Address Assignment
      • 5.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation
      • 5.1.4.2 IP Assignment with RFC 1483 Encapsulation
      • 5.1.4.3 IP Assignment with ENET ENCAP Encapsulation
    • 5.1.5 Nailed-Up Connection (PPP)
    • 5.1.6 NAT
  • 5.2 Metric
  • 5.3 Traffic Shaping
    • 5.3.1 ATM Traffic Classes
      • 5.3.1.1 Constant Bit Rate (CBR)
      • 5.3.1.2 Variable Bit Rate (VBR)
      • 5.3.1.3 Unspecified Bit Rate (UBR)
  • 5.4 Internet Connection
    • 5.4.1 Configuring Advanced Internet Connection
  • 5.5 Configuring More Connections
    • 5.5.1 More Connections Edit
    • 5.5.2 Configuring More Connections Advanced Setup
  • 5.6 Traffic Redirect
  • 5.7 Dial Backup Interface
  • 5.8 Configuring WAN Backup Setup
    • 5.8.1 Advanced Backup Setup
    • 5.8.2 Advanced Modem Settings for Dial Backup
• LAN Setup
  • 6.1 LAN Overview
    • 6.1.1 LANs, WANs and the ZyXEL Device
    • 6.1.2 DHCP Setup
      • 6.1.2.1 IP Pool Setup
    • 6.1.3 DNS Server Address
    • 6.1.4 DNS Server Address Assignment
  • 6.2 LAN TCP/IP
    • 6.2.1 IP Address and Subnet Mask
      • 6.2.1.1 Private IP Addresses
    • 6.2.2 RIP Setup
    • 6.2.3 Multicast
  • 6.3 Configuring LAN IP
    • 6.3.1 Configuring Advanced LAN Setup
  • 6.4 DHCP Setup
  • 6.5 LAN Client List
  • 6.6 LAN IP Alias
• Network Address Translation (NAT) Screens
  • 7.1 NAT Overview
    • 7.1.1 NAT Definitions
    • 7.1.2 What NAT Does
    • 7.1.3 How NAT Works
    • 7.1.4 NAT Application
    • 7.1.5 NAT Mapping Types
  • 7.2 SUA (Single User Account) Versus NAT
  • 7.3 NAT General Setup
  • 7.4 Port Forwarding
    • 7.4.1 Default Server IP Address
    • 7.4.2 Port Forwarding: Services and Port Numbers
    • 7.4.3 Configuring Servers Behind Port Forwarding (Example)
  • 7.5 Configuring Port Forwarding
    • 7.5.1 Port Forwarding Rule Edit
  • 7.6 Address Mapping
    • 7.6.1 Address Mapping Rule Edit
• Firewalls
  • 8.1 Firewall Overview
  • 8.2 Types of Firewalls
    • 8.2.1 Packet Filtering Firewalls
    • 8.2.2 Application-level Firewalls
    • 8.2.3 Stateful Inspection Firewalls
  • 8.3 Introduction to ZyXEL’s Firewall
    • 8.3.1 Denial of Service Attacks
  • 8.4 Denial of Service
    • 8.4.1 Basics
    • 8.4.2 Types of DoS Attacks
      • 8.4.2.1 ICMP Vulnerability
      • 8.4.2.2 Illegal Commands (NetBIOS and SMTP)
      • 8.4.2.3 Traceroute
  • 8.5 Stateful Inspection
    • 8.5.1 Stateful Inspection Process
    • 8.5.2 Stateful Inspection and the ZyXEL Device
    • 8.5.3 TCP Security
    • 8.5.4 UDP/ICMP Security
    • 8.5.5 Upper Layer Protocols
  • 8.6 Guidelines for Enhancing Security with Your Firewall
    • 8.6.1 Security In General
  • 8.7 Packet Filtering vs. Firewall
    • 8.7.1 Packet Filtering
      • 8.7.1.1 When To Use Filtering
    • 8.7.2 Firewall
      • 8.7.2.1 When To Use The Firewall
• Firewall Configuration
  • 9.1 Access Methods
  • 9.2 Firewall Policies Overview
  • 9.3 Rule Logic Overview
    • 9.3.1 Rule Checklist
    • 9.3.2 Security Ramifications
    • 9.3.3 Key Fields For Configuring Rules
      • 9.3.3.1 Action
      • 9.3.3.2 Service
      • 9.3.3.3 Source Address
      • 9.3.3.4 Destination Address
  • 9.4 Connection Direction
    • 9.4.1 LAN to WAN Rules
    • 9.4.2 Alerts
  • 9.5 Triangle Route
    • 9.5.1 The “Triangle Route” Problem
    • 9.5.2 Solving the “Triangle Route” Problem
  • 9.6 General Firewall Policy
  • 9.7 Firewall Rules Summary
    • 9.7.1 Configuring Firewall Rules
    • 9.7.2 Customized Services
    • 9.7.3 Configuring A Customized Service
  • 9.8 Example Firewall Rule
  • 9.9 Anti-Probing
  • 9.10 DoS Thresholds
    • 9.10.1 Threshold Values
    • 9.10.2 Half-Open Sessions
      • 9.10.2.1 TCP Maximum Incomplete and Blocking Time
    • 9.10.3 Configuring Firewall Thresholds
• Content Filtering
  • 10.1 Content Filtering Overview
  • 10.2 Configuring Keyword Blocking
  • 10.3 Configuring the Schedule
  • 10.4 Configuring Trusted Computers
• IPSec VPN
  • 11.1 IPSec VPN Overview
    • 11.1.1 IKE SA Overview
      • 11.1.1.1 IP Addresses of the ZyXEL Device and Remote IPSec Router
      • 11.1.1.2 IKE SA Proposal
      • 11.1.1.3 Diffie-Hellman (DH) Key Exchange
      • 11.1.1.4 Authentication
    • 11.1.2 Additional Topics for IKE SA
      • 11.1.2.1 Negotiation Mode
      • 11.1.2.2 VPN, NAT and NAT Traversal
    • 11.1.3 IPSec SA Overview
      • 11.1.3.1 Local Network and Remote Network
      • 11.1.3.2 Active Protocol
      • 11.1.3.3 Encapsulation
      • 11.1.3.4 IPSec SA Proposal and Perfect Forward Secrecy
    • 11.1.4 Additional Topics for IPSec SA
      • 11.1.4.1 IPSec SA using Manual Keys
  • 11.2 VPN Setup Screen
  • 11.3 Editing VPN Policies
  • 11.4 Configuring Advanced IKE Settings
  • 11.5 Configuring Manual Key
  • 11.6 Viewing SA Monitor
  • 11.7 Configuring Global Setting
  • 11.8 Telecommuter VPN/IPSec Examples
    • 11.8.1 Telecommuters Sharing One VPN Rule Example
    • 11.8.2 Telecommuters Using Unique VPN Rules Example
  • 11.9 VPN and Remote Management
• Static Route
  • 12.1 Static Route
  • 12.2 Configuring Static Route
    • 12.2.1 Static Route Edit
• Bandwidth Management
  • 13.1 Bandwidth Management Overview
  • 13.2 Application-based Bandwidth Management
  • 13.3 Subnet-based Bandwidth Management
  • 13.4 Application and Subnet-based Bandwidth Management
  • 13.5 Scheduler
    • 13.5.1 Priority-based Scheduler
    • 13.5.2 Fairness-based Scheduler
  • 13.6 Maximize Bandwidth Usage
    • 13.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic
    • 13.6.2 Maximize Bandwidth Usage Example
      • 13.6.2.1 Priority-based Allotment of Unused and Unbudgeted Bandwidth
      • 13.6.2.2 Fairness-based Allotment of Unused and Unbudgeted Bandwidth
    • 13.6.3 Over Allotment of Bandwidth
    • 13.6.4 Bandwidth Management Priorities
  • 13.7 Configuring Summary
  • 13.8 Bandwidth Management Rule Setup
    • 13.8.1 Rule Configuration
  • 13.9 Bandwidth Monitor
• Dynamic DNS Setup
  • 14.1 Dynamic DNS Overview
    • 14.1.1 DYNDNS Wildcard
  • 14.2 Configuring Dynamic DNS
• Remote Management Configuration
  • 15.1 Remote Management Overview
    • 15.1.1 Remote Management Limitations
    • 15.1.2 Remote Management and NAT
    • 15.1.3 System Timeout
  • 15.2 WWW
  • 15.3 Telnet
  • 15.4 Configuring Telnet
  • 15.5 Configuring FTP
  • 15.6 SNMP
    • 15.6.1 Supported MIBs
    • 15.6.2 SNMP Traps
    • 15.6.3 Configuring SNMP
  • 15.7 Configuring DNS
  • 15.8 Configuring ICMP
  • 15.9 TR-069
• Universal Plug-and-Play (UPnP)
  • 16.1 Introducing Universal Plug and Play
    • 16.1.1 How do I know if I'm using UPnP?
    • 16.1.2 NAT Traversal
    • 16.1.3 Cautions with UPnP
  • 16.2 UPnP and ZyXEL
    • 16.2.1 Configuring UPnP
  • 16.3 Installing UPnP in Windows Example
  • 16.4 Using UPnP in Windows XP Example
• System
  • 17.1 General Setup
    • 17.1.1 General Setup and System Name
    • 17.1.2 General Setup
  • 17.2 Time Setting
• Logs
  • 18.1 Logs Overview
    • 18.1.1 Alerts and Logs
  • 18.2 Viewing the Logs
  • 18.3 Configuring Log Settings
• Tools
  • 19.1 Firmware Upgrade
  • 19.2 Configuration
  • 19.3 Restart
• Diagnostic
  • 20.1 General Diagnostic
  • 20.2 DSL Line Diagnostic
• Introducing the SMT
  • 21.1 Accessing the SMT
  • 21.2 SMT Menu Items
  • 21.3 Navigating the SMT Interface
• General Setup
  • 22.1 Configuring General Setup
    • 22.1.1 Configuring Dynamic DNS
• WAN Setup
  • 23.1 WAN Setup
  • 23.2 Configuring Traffic Redirect
  • 23.3 Dial Backup Interface
  • 23.4 Configuring Dial Backup in Menu 2
  • 23.5 Advanced Dial Backup Setup
• LAN Setup
  • 24.1 Accessing the LAN Menus
  • 24.2 LAN Port Filter Setup
  • 24.3 TCP/IP and DHCP Setup Menu
  • 24.4 LAN IP Alias
    • 24.4.1 Port-based VLAN Setup
• Internet Access Setup
  • 25.1 Internet Access Setup
• Remote Node Setup
  • 26.1 Introduction to Remote Node Setup
  • 26.2 Remote Node Setup
  • 26.3 Remote Node Profile
  • 26.4 Remote Node Network Layer Options
  • 26.5 Remote Node Filter
  • 26.6 Remote Node ATM Layer Options
  • 26.7 Advance Setup Options
• Static Route Setup
  • 27.1 IP Static Route Setup
  • 27.2 Bridge Static Route Setup
• NAT Setup
  • 28.1 Using NAT
    • 28.1.1 SUA (Single User Account) Versus NAT
    • 28.1.2 Applying NAT
  • 28.2 NAT Setup
    • 28.2.1 Address Mapping Sets
      • 28.2.1.1 User-Defined Address Mapping Sets
  • 28.3 Configuring a Server behind NAT
  • 28.4 General NAT Examples
    • 28.4.1 Internet Access Only
    • 28.4.2 Example 2: Internet Access with an Default Server
    • 28.4.3 Example 3: Multiple Public IP Addresses With Inside Servers
    • 28.4.4 Example 4: NAT Unfriendly Application Programs
• Firewall Setup
  • 29.1 Using ZyXEL Device SMT Menus
    • 29.1.1 Activating the Firewall
• Filter Configuration
  • 30.1 Introduction to Filters
    • 30.1.1 The Filter Structure of the ZyXEL Device
  • 30.2 Configuring a Filter Set
    • 30.2.1 Configuring a Filter Rule
    • 30.2.2 Configuring a TCP/IP Filter Rule
    • 30.2.3 Configuring a Generic Filter Rule
  • 30.3 Example Filter
  • 30.4 Filter Types and NAT
  • 30.5 Firewall Versus Filters
  • 30.6 Applying a Filter
    • 30.6.1 Applying LAN Filters
    • 30.6.2 Applying Remote Node Filters
• SNMP Configuration
  • 31.1 SNMP Configuration
• System Password
• System Information & Diagnosis
  • 33.1 Introduction to System Status
  • 33.2 System Status
  • 33.3 System Information and Console Port Speed
    • 33.3.1 System Information
    • 33.3.2 Console Port Speed
  • 33.4 Log and Trace
    • 33.4.1 Viewing Error Log
    • 33.4.2 Syslog Logging
  • 33.5 Diagnostic
• Firmware and Configuration File Maintenance
  • 34.1 Introduction
  • 34.2 Filename Conventions
  • 34.3 Backup Configuration
    • 34.3.1 Backup Configuration
    • 34.3.2 Using the FTP Command from the Command Line
    • 34.3.3 Example of FTP Commands from the Command Line
    • 34.3.4 GUI-based FTP Clients
    • 34.3.5 File Maintenance Over WAN
    • 34.3.6 Backup Configuration Using TFTP
    • 34.3.7 TFTP Command Example
    • 34.3.8 GUI-based TFTP Clients
    • 34.3.9 Backup Via Console Port
  • 34.4 Restore Configuration
    • 34.4.1 Restore Using FTP
    • 34.4.2 Restore Using FTP Session Example
    • 34.4.3 Restore Via Console Port
  • 34.5 Uploading Firmware and Configuration Files
    • 34.5.1 Firmware File Upload
    • 34.5.2 Configuration File Upload
    • 34.5.3 FTP File Upload Command from the DOS Prompt Example
    • 34.5.4 FTP Session Example of Firmware File Upload
    • 34.5.5 TFTP File Upload
    • 34.5.6 TFTP Upload Command Example
    • 34.5.7 Uploading Via Console Port
    • 34.5.8 Uploading Firmware File Via Console Port
    • 34.5.9 Example Xmodem Firmware Upload Using HyperTerminal
    • 34.5.10 Uploading Configuration File Via Console Port
    • 34.5.11 Example Xmodem Configuration Upload Using HyperTerminal
• Menus 24.8 to 24.11
  • 35.1 Command Interpreter Mode
    • 35.1.1 Command Syntax
    • 35.1.2 Command Usage
  • 35.2 Call Control Support
    • 35.2.1 Budget Management
  • 35.3 Time and Date Setting
  • 35.4 Remote Management
    • 35.4.1 Remote Management Limitations
• IP Routing Policy Setup
  • 36.1 Policy Route
  • 36.2 Benefits
  • 36.3 Routing Policy
  • 36.4 IP Routing Policy Setup
  • 36.5 IP Routing Policy Setup
  • 36.6 IP Routing Policy
  • 36.7 IP Policy Routing Example
• Schedule Setup
  • 37.1 Schedule Set Overview
  • 37.2 Schedule Setup
  • 37.3 Schedule Set Setup
• Troubleshooting
  • 38.1 Problems Starting Up the ZyXEL Device
  • 38.2 Problems with the LAN
  • 38.3 Problems with the WAN
  • 38.4 Problems Accessing the ZyXEL Device
• Product Specifications
• Wall-mounting Instructions
• Setting up Your Computer’s IP Address
  • Windows 95/98/Me
    • Installing Components
    • Configuring
    • Verifying Settings
  • Windows 2000/NT/XP
    • Verifying Settings
  • Macintosh OS X
    • Verifying Settings
  • Linux
    • Using the K Desktop Environment (KDE)
    • Using Configuration Files
    • Verifying Settings
• Pop-up Windows, JavaScripts and Java Permissions
  • Internet Explorer Pop-up Blockers
    • Disable pop-up Blockers
    • Enable pop-up Blockers with Exceptions
    • JavaScripts
  • Java Permissions
    • JAVA (Sun)
• Services
• IP Addresses and Subnetting
  • Introduction to IP Addresses
    • IP Address Classes and Hosts
    • IP Address Classes and Network ID
  • Subnet Masks
  • Subnetting
  • Example: Two Subnets
  • Example: Four Subnets
  • Example Eight Subnets
  • Subnetting With Class A and Class B Networks.
• Command Interpreter
  • Command Syntax
  • Command Usage
• Firewall Commands
• NetBIOS Filter Commands
  • Introduction
  • Display NetBIOS Filter Settings
  • NetBIOS Filter Configuration
• Log Descriptions
  • Log Commands
    • Configuring What You Want the ZyXEL Device to Log
    • Displaying Logs
  • Log Command Example
• Index
  • A
  • B
  • C
  • D
  • E
  • F
  • H
  • I
  • L
  • M
  • N
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W