Document Outline

• P-2602HWNLI
• User’s Guide
• Copyright
• Certifications
• Safety Warnings
• ZyXEL Limited Warranty
• Customer Support
• Table of Contents
• List of Figures
• List of Tables
• Preface
• Getting To Know the ZyXEL Device
  • 1.2 Features
  • 1.3 Applications
    • 1.3.1 Internet Access
      • 1.3.1.1 Internet Single User Account
    • 1.3.2 Making Calls via Internet Telephony Service Provider
    • 1.3.3 Make Peer-to-peer Calls
    • 1.3.4 Firewall for Secure Broadband Internet Access
    • 1.3.5 LAN to LAN Application
    • 1.3.6 Lights
  • 1.4 Splitters and Microfilters
    • 1.4.1 Connecting a POTS Splitter
    • 1.4.2 Telephone Microfilters
• Introducing the Web Configurator
  • 2.1 Web Configurator Overview
    • 2.1.1 Accessing the Web Configurator
    • 2.1.2 The RESET Button
      • 2.1.2.1 Using The Reset Button
  • 2.2 Web Configurator Main Screen
    • 2.2.1 Title Bar
    • 2.2.2 Navigation Panel
    • 2.2.3 Main Window
    • 2.2.4 Status Bar
• Internet and Wireless Setup Wizard
  • 3.1 Introduction
  • 3.2 Internet Access Wizard Setup
    • 3.2.1 Manual Configuration
  • 3.3 Wireless Connection Wizard Setup
• VoIP Wizard
  • 4.1 Introduction
  • 4.2 VOIP Wizard Setup
• Bandwidth Management Wizard
  • 5.1 Introduction
  • 5.2 Predefined Media Bandwidth Management Services
  • 5.3 Bandwidth Management Wizard Setup
• WAN Setup
  • 6.1.1 Encapsulation
    • 6.1.1.1 ENET ENCAP
    • 6.1.1.2 PPP over Ethernet
    • 6.1.1.3 PPPoA
    • 6.1.1.4 RFC 1483
  • 6.1.2 Multiplexing
    • 6.1.2.1 VC-based Multiplexing
    • 6.1.2.2 LLC-based Multiplexing
  • 6.1.3 VPI and VCI
  • 6.1.4 IP Address Assignment
    • 6.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation
    • 6.1.4.2 IP Assignment with RFC 1483 Encapsulation
    • 6.1.4.3 IP Assignment with ENET ENCAP Encapsulation
  • 6.1.5 Nailed-Up Connection (PPP)
  • 6.2 PPPoE Encapsulation
  • 6.3 Metric
  • 6.4 Traffic Shaping
    • 6.4.1 ATM Traffic Classes
      • 6.4.1.1 Constant Bit Rate (CBR)
      • 6.4.1.2 Variable Bit Rate (VBR)
      • 6.4.1.3 Unspecified Bit Rate (UBR)
  • 6.5 Zero Configuration Internet Access
• Status Screens
  • 7.2 Client List
    • 7.4.1 Bandwidth Status
• LAN Setup
  • 8.1.1 LANs, WANs and the ZyXEL Device
  • 8.1.2 DHCP Setup
    • 8.1.2.1 IP Pool Setup
  • 8.1.3 DNS Server Address
  • 8.1.4 DNS Server Address Assignment
  • 8.2 LAN TCP/IP
    • 8.2.1 IP Address and Subnet Mask
      • 8.2.1.1 Private IP Addresses
    • 8.2.2 RIP Setup
    • 8.2.3 Multicast
    • 8.2.4 Any IP
      • 8.2.4.1 How Any IP Works
• Wireless LAN
  • 9.1 Wireless Network Overview
  • 9.2 Wireless Security Overview
    • 9.2.1 SSID
    • 9.2.2 MAC Address Filter
    • 9.2.3 User Authentication
    • 9.2.4 Encryption
    • 9.2.5 One-Touch Intelligent Security Technology (OTIST)
  • 9.3 Wireless Performance Overview
    • 9.3.1 Quality of Service (QoS)
    • 9.4.2 WPA-PSK/WPA2-PSK
    • 9.4.3 WPA/WPA2
    • 9.5.1 Enabling OTIST
      • 9.5.1.1 AP
      • 9.5.1.2 Wireless Client
    • 9.5.2 Starting OTIST
    • 9.5.3 Notes on OTIST
    • 9.7.1 WMM QoS Example
    • 9.7.2 WMM QoS Priorities
    • 9.7.3 Services
    • 9.8.1 ToS (Type of Service) and WMM QoS
• Network Address Translation (NAT) Screens
  • 10.1.1 NAT Definitions
  • 10.1.2 What NAT Does
  • 10.1.3 How NAT Works
  • 10.1.4 NAT Application
  • 10.1.5 NAT Mapping Types
  • 10.2 SUA (Single User Account) Versus NAT
  • 10.4 Port Forwarding
    • 10.4.1 Default Server IP Address
    • 10.4.2 Port Forwarding: Services and Port Numbers
    • 10.4.3 Configuring Servers Behind Port Forwarding (Example)
• Voice
  • 11.1 Introduction to VoIP
  • 11.2 SIP
    • 11.2.1 SIP Identities
      • 11.2.1.1 SIP Number
      • 11.2.1.2 SIP Service Domain
    • 11.2.2 SIP Call Progression
    • 11.2.3 SIP Servers
      • 11.2.3.1 SIP User Agent
      • 11.2.3.2 SIP Proxy Server
      • 11.2.3.3 SIP Redirect Server
      • 11.2.3.4 SIP Register Server
    • 11.3.1 RTP
  • 11.4 SIP ALG
  • 11.5 Voice Coding
  • 11.6 PSTN Call Setup Signaling
  • 11.7 MWI (Message Waiting Indication)
  • 11.8 Custom Tones (IVR)
    • 11.8.0.1 Recording Custom Tones
    • 11.8.0.2 Listening to Custom Tones
    • 11.8.0.3 Deleting Custom Tones
    • 11.10.1 Type Of Service (ToS)
    • 11.10.2 VLAN
  • 11.11 Phone
  • 11.12 PSTN Line
  • 11.13 ISDN Line
    • 11.13.1 Voice Activity Detection/Silence Suppression
    • 11.13.2 Comfort Noise Generation
    • 11.13.3 Echo Cancellation
  • 11.18 Supplementary Phone Services Overview (PSTN)
    • 11.18.1 The Flash Key
    • 11.18.2 Europe Type Supplementary Phone Services
      • 11.18.2.1 European Call Hold
      • 11.18.2.2 European Call Waiting
      • 11.18.2.3 European Call Transfer
      • 11.18.2.4 European Three-Way Conference
      • 11.18.2.5 European Call Return
    • 11.18.3 USA Type Supplementary Services
      • 11.18.3.1 USA Call Hold
      • 11.18.3.2 USA Call Waiting
      • 11.18.3.3 USA Call Transfer
      • 11.18.3.4 USA Three-Way Conference
      • 11.18.3.5 USA Call Return
  • 11.19 Supplementary Phone Services Overview (ISDN)
    • 11.21.1 Peer-to-Peer Calls
  • 11.22 Speed Dial Screen
• Phone Usage
  • 12.1 Dialing a Telephone Number
  • 12.2 Using Speed Dial to Dial a Telephone Number
  • 12.3 Internal Calls
  • 12.4 Checking the Device’s IP Address
  • 12.5 Auto Firmware Upgrade
• Firewalls
  • 13.2 Types of Firewalls
    • 13.2.1 Packet Filtering Firewalls
    • 13.2.2 Application-level Firewalls
    • 13.2.3 Stateful Inspection Firewalls
  • 13.3 Introduction to ZyXEL’s Firewall
    • 13.3.1 Denial of Service Attacks
  • 13.4 Denial of Service
    • 13.4.1 Basics
    • 13.4.2 Types of DoS Attacks
      • 13.4.2.1 ICMP Vulnerability
      • 13.4.2.2 Illegal Commands (NetBIOS and SMTP)
      • 13.4.2.3 Traceroute
  • 13.5 Stateful Inspection
    • 13.5.1 Stateful Inspection Process
    • 13.5.2 Stateful Inspection on Your ZyXEL Device
    • 13.5.3 TCP Security
    • 13.5.4 UDP/ICMP Security
    • 13.5.5 Upper Layer Protocols
  • 13.6 Guidelines for Enhancing Security with Your Firewall
    • 13.6.1 Security In General
• Firewall Configuration
  • 14.1 Access Methods
  • 14.2 Firewall Policies Overview
  • 14.3 Rule Logic Overview
    • 14.3.1 Rule Checklist
    • 14.3.2 Security Ramifications
    • 14.3.3 Key Fields For Configuring Rules
      • 14.3.3.1 Action
      • 14.3.3.2 Service
      • 14.3.3.3 Source Address
      • 14.3.3.4 Destination Address
  • 14.4 Connection Direction
    • 14.4.1 LAN to WAN Rules
    • 14.4.2 Alerts
  • 14.5 Triangle Route
    • 14.5.1 The “Triangle Route” Problem
    • 14.5.2 Solving the “Triangle Route” Problem
  • 14.8 Example Firewall Rule
  • 14.9 Predefined Services
    • 14.10.1 Threshold Values
    • 14.10.2 Half-Open Sessions
      • 14.10.2.1 TCP Maximum Incomplete and Blocking Time
• Content Filtering
  • 15.1 Content Filtering Overview
• Introduction to IPSec
  • 16.1 VPN Overview
    • 16.1.1 IPSec
    • 16.1.2 Security Association
    • 16.1.3 Other Terminology
      • 16.1.3.1 Encryption
      • 16.1.3.2 Data Confidentiality
      • 16.1.3.3 Data Integrity
      • 16.1.3.4 Data Origin Authentication
    • 16.1.4 VPN Applications
  • 16.2 IPSec Architecture
    • 16.2.1 IPSec Algorithms
    • 16.2.2 Key Management
  • 16.3 Encapsulation
    • 16.3.1 Transport Mode
    • 16.3.2 Tunnel Mode
  • 16.4 IPSec and NAT
• VPN Screens
  • 17.1 VPN/IPSec Overview
  • 17.2 IPSec Algorithms
    • 17.2.1 AH (Authentication Header) Protocol
    • 17.2.2 ESP (Encapsulating Security Payload) Protocol
  • 17.3 My IP Address
  • 17.4 Secure Gateway Address
    • 17.4.1 Dynamic Secure Gateway Address
  • 17.6 Keep Alive
  • 17.7 VPN, NAT, and NAT Traversal
  • 17.8 Remote DNS Server
  • 17.9 ID Type and Content
    • 17.9.1 ID Type and Content Examples
  • 17.10 Pre-Shared Key
  • 17.12 IKE Phases
    • 17.12.1 Negotiation Mode
    • 17.12.2 Diffie-Hellman (DH) Key Groups
    • 17.12.3 Perfect Forward Secrecy (PFS)
  • 17.14 Manual Key Setup
    • 17.14.1 Security Parameter Index (SPI)
  • 17.18 Telecommuter VPN/IPSec Examples
    • 17.18.1 Telecommuters Sharing One VPN Rule Example
    • 17.18.2 Telecommuters Using Unique VPN Rules Example
  • 17.19 VPN and Remote Management
• Static Route
  • 18.1 Static Route
• Bandwidth Management
  • 19.2 Application-based Bandwidth Management
  • 19.3 Subnet-based Bandwidth Management
  • 19.4 Application and Subnet-based Bandwidth Management
  • 19.5 Scheduler
    • 19.5.1 Priority-based Scheduler
    • 19.5.2 Fairness-based Scheduler
  • 19.6 Maximize Bandwidth Usage
    • 19.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic
    • 19.6.2 Maximize Bandwidth Usage Example
      • 19.6.2.1 Priority-based Allotment of Unused and Unallocated Bandwidth
      • 19.6.2.2 Fairness-based Allotment of Unused and Unallocated Bandwidth
    • 19.6.3 Bandwidth Management Priorities
  • 19.7 Over Allotment of Bandwidth
• Dynamic DNS Setup
  • 20.1.1 DYNDNS Wildcard
• Remote Management Configuration
  • 21.1.1 Remote Management Limitations
  • 21.1.2 Remote Management and NAT
  • 21.1.3 System Timeout
  • 21.3 Telnet
  • 21.6 SNMP
    • 21.6.1 Supported MIBs
    • 21.6.2 SNMP Traps
• Universal Plug-and-Play (UPnP)
  • 22.1.1 How do I know if I'm using UPnP?
  • 22.1.2 NAT Traversal
  • 22.1.3 Cautions with UPnP
  • 22.2 UPnP and ZyXEL
  • 22.3 Installing UPnP in Windows Example
  • 22.4 Using UPnP in Windows XP Example
• System
  • 23.1 General Setup and System Name
• Logs
  • 24.1.1 Alerts and Logs
  • 24.4 SMTP Error Messages
    • 24.4.1 Example E-mail Log
  • 24.5 Log Descriptions
• Tools
  • 25.1 Introduction
  • 25.2 Filename Conventions
  • 25.3 File Maintenance Over WAN
    • 25.5.1 Backup Configuration
    • 25.5.2 Restore Configuration
  • 25.7 Using FTP or TFTP to Back Up Configuration
    • 25.7.1 Using the FTP Commands to Back Up Configuration
    • 25.7.2 FTP Command Configuration Backup Example
    • 25.7.3 Configuration Backup Using GUI-based FTP Clients
    • 25.7.4 Backup Configuration Using TFTP
    • 25.7.5 TFTP Command Configuration Backup Example
    • 25.7.6 Configuration Backup Using GUI-based TFTP Clients
  • 25.8 Using FTP or TFTP to Restore Configuration
    • 25.8.1 Restore Using FTP Session Example
  • 25.9 FTP and TFTP Firmware and Configuration File Uploads
    • 25.9.1 FTP File Upload Command from the DOS Prompt Example
    • 25.9.2 FTP Session Example of Firmware File Upload
    • 25.9.3 TFTP File Upload
    • 25.9.4 TFTP Upload Command Example
• Diagnostic
• Troubleshooting
  • 27.1 Problems Starting Up the ZyXEL Device
  • 27.2 Problems with the LAN
  • 27.3 Problems with the WAN
  • 27.4 Problems Accessing the ZyXEL Device
    • 27.4.1 Pop-up Windows, JavaScripts and Java Permissions
      • 27.4.1.1 Internet Explorer Pop-up Blockers
      • 27.4.1.2 JavaScripts
      • 27.4.1.3 Java Permissions
  • 27.5 Telephone Problems
• Product Specifications
  • Power Adapter Specifications
• Setting up Your Computer’s IP Address
  • Windows 95/98/Me
    • Configuring
    • Verifying Settings
  • Windows 2000/NT/XP
    • Verifying Settings
  • Macintosh OS 8/9
    • Verifying Settings
  • Macintosh OS X
    • Verifying Settings
• IP Subnetting
  • IP Addressing
  • IP Classes
  • Subnet Masks
  • Subnetting
  • Example: Two Subnets
  • Example: Four Subnets
  • Example Eight Subnets
  • Subnetting With Class A and Class B Networks.
• About ADSL
  • Introduction to DSL
  • ADSL Overview
  • Advantages of ADSL
• Virtual Circuit Topology
• Wireless LANs
  • Wireless LAN Topologies
    • Ad-hoc Wireless LAN Configuration
    • BSS
    • ESS
  • Channel
  • RTS/CTS
  • Fragmentation Threshold
  • Preamble Type
  • IEEE 802.11g Wireless LAN
  • Wireless Security Overview
  • IEEE 802.1x
  • RADIUS
    • Types of RADIUS Messages
  • Types of Authentication
    • EAP-MD5 (Message-Digest Algorithm 5)
    • EAP-TLS (Transport Layer Security)
    • EAP-TTLS (Tunneled Transport Layer Service)
    • PEAP (Protected EAP)
    • LEAP
  • Dynamic WEP Key Exchange
  • WPA and WPA2
    • Encryption
    • User Authentication
    • Wireless Client WPA Supplicants
    • WPA(2) with RADIUS Application Example
    • 27.5.1 WPA(2)-PSK Application Example
  • Security Parameters Summary
• Common Services
• Internal SPTGEN
  • Internal SPTGEN Overview
  • The Configuration Text File Format
    • Internal SPTGEN File Modification - Important Points to Remember
  • Internal SPTGEN FTP Download Example
  • Internal SPTGEN FTP Upload Example
  • Example Internal SPTGEN Menus
  • Command Examples
• Commands
  • Accessing the Command Interpreter
  • Command Syntax
  • Command Usage
  • Filtering
    • The Filter Structure of the ZyXEL Device
    • Packet Filtering Vs. Firewall
    • Filter Commands
  • WAN Call Schedules
• Index
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • J
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • Z