Document Outline

• User's Guide
  • About This User's Guide
  • Document Conventions
  • Safety Warnings
  • Contents Overview
  • Table of Contents
  • List of Figures
  • List of Tables
• Introduction
  • Getting to Know Your ZyXEL Device
    • 1.1 Overview
    • 1.2 Applications for the ZyXEL Device
    • 1.2.1 3G WAN Application
    • 1.2.2 Secure Broadband Internet Access via Cable or DSL Modem
    • 1.3 Ways to Manage the ZyXEL Device
    • 1.4 Configuring Your ZyXEL Device’s Security Features
    • 1.4.1 Control Access to Your Device
    • 1.4.2 Wireless Security
    • 1.4.3 Firewall
    • 1.4.4 NAT
    • 1.4.5 UPnP
    • 1.5 Maintaining Your ZyXEL Device
    • 1.5.1 Front Panel Lights
  • Introducing the Web Configurator
    • 2.1 Web Configurator Overview
    • 2.2 Accessing the ZyXEL Device Web Configurator
    • 2.3 Resetting the ZyXEL Device
    • 2.3.1 Procedure To Use The Reset Button
    • 2.3.2 Uploading a Configuration File Via Console Port
    • 2.4 Navigating the ZyXEL Device Web Configurator
    • 2.4.1 Title Bar
    • 2.4.2 Main Window
      • 2.4.3 HOME Screen
    • 2.4.4 Navigation Panel
      • 2.4.5 Port Statistics
      • 2.4.6 Show Statistics: Line Chart
      • 2.4.7 DHCP Table Screen
  • Wizard Setup
    • 3.1 Wizard Setup Overview
    • 3.2 Internet Access
    • 3.2.1 ISP Parameters
      • 3.2.2 Internet Access Wizard Setup Complete
  • Tutorials
    • 4.1 DMZ Overview
    • 4.2 DMZ Setup Example
    • 4.2.1 Basic Setup
    • 4.2.2 Advanced Setup
    • 4.3 Firewall Rule Setup
    • 4.4 Setting Up a VoIP Phone with H.323
    • 4.5 Using NAT with Multiple Public IP Addresses
    • 4.5.1 Example Parameters and Scenario
    • 4.5.2 Configuring the WAN Connection with a Static IP Address
    • 4.5.3 Public IP Address Mapping
    • 4.5.4 Forwarding Traffic from the WAN to a Local Computer
    • 4.5.5 Allow WAN-to-LAN Traffic through the Firewall
    • 4.5.6 Testing the Connections
    • 4.6 Using NAT with Multiple Game Players
• Network
  • LAN Screens
    • 5.1 LAN, WAN and the ZyXEL Device
    • 5.2 IP Address and Subnet Mask
    • 5.2.1 Private IP Addresses
    • 5.3 DHCP
    • 5.3.1 IP Pool Setup
    • 5.4 RIP Setup
    • 5.5 Multicast
    • 5.6 WINS
    • 5.7 LAN
    • 5.8 LAN Static DHCP
    • 5.9 LAN IP Alias
    • 5.10 LAN Port Roles
  • WAN Screens
    • 6.1 WAN Overview
    • 6.2 Multiple WAN
    • 6.3 TCP/IP Priority (Metric)
    • 6.4 WAN General
    • 6.5 WAN IP Address Assignment
    • 6.6 DNS Server Address Assignment
    • 6.7 WAN MAC Address
    • 6.8 WAN 1
    • 6.8.1 WAN Ethernet Encapsulation
    • 6.8.2 PPPoE Encapsulation
    • 6.8.3 PPTP Encapsulation
    • 6.9 3G (WAN 2)
    • 6.10 Traffic Redirect
    • 6.11 Configuring Traffic Redirect
  • DMZ Screens
    • 7.1 DMZ
    • 7.2 Configuring DMZ
    • 7.3 DMZ Static DHCP
    • 7.4 DMZ IP Alias
    • 7.5 DMZ Public IP Address Example
    • 7.6 DMZ Private and Public IP Address Example
    • 7.7 DMZ Port Roles
• Wireless
  • Wi-Fi
    • 8.1 Wi-Fi Introduction
    • 8.2 Wireless Security Overview
    • 8.2.1 SSID
    • 8.2.2 MAC Address Filter
    • 8.2.3 User Authentication
    • 8.2.4 Encryption
    • 8.2.5 Additional Installation Requirements for Using 802.1x
    • 8.3 Wireless Card
      • 8.3.1 SSID Profile
    • 8.4 Configuring Wireless Security
    • 8.4.1 No Security
    • 8.4.2 Static WEP
    • 8.4.3 IEEE 802.1x Only
    • 8.4.4 IEEE 802.1x + Static WEP
    • 8.4.5 WPA, WPA2, WPA2-MIX
    • 8.4.6 WPA-PSK, WPA2-PSK, WPA2-PSK-MIX
    • 8.5 MAC Filter
• Security
  • Firewall
    • 9.1 Firewall Overview
    • 9.2 Packet Direction Matrix
    • 9.3 Packet Direction Examples
    • 9.4 Security Considerations
    • 9.5 Firewall Rules Example
    • 9.6 Asymmetrical Routes
    • 9.6.1 Asymmetrical Routes and IP Alias
    • 9.7 Firewall Default Rule
    • 9.8 Firewall Rule Summary
      • 9.8.1 Firewall Edit Rule
    • 9.9 Anti-Probing
    • 9.10 Firewall Thresholds
    • 9.10.1 Threshold Values
    • 9.11 Threshold Screen
    • 9.12 Service
      • 9.12.1 Firewall Edit Custom Service
    • 9.13 My Service Firewall Rule Example
  • Authentication Server
    • 10.1 Authentication Server Overview
    • 10.2 Local User Database
    • 10.3 RADIUS
  • Certificates
    • 11.1 Certificates Overview
    • 11.1.1 Advantages of Certificates
    • 11.2 Self-signed Certificates
    • 11.3 Verifying a Certificate
    • 11.3.1 Checking the Fingerprint of a Certificate on Your Computer
    • 11.4 Configuration Summary
    • 11.5 My Certificates
    • 11.6 My Certificate Details
    • 11.7 My Certificate Export
    • 11.7.1 Certificate File Export Formats
    • 11.8 My Certificate Import
    • 11.8.1 Certificate File Formats
    • 11.9 My Certificate Create
    • 11.10 Trusted CAs
    • 11.11 Trusted CA Details
    • 11.12 Trusted CA Import
    • 11.13 Trusted Remote Hosts
    • 11.14 Trusted Remote Hosts Import
    • 11.15 Trusted Remote Host Certificate Details
    • 11.16 Directory Servers
    • 11.17 Directory Server Add or Edit
• Advanced
  • Network Address Translation (NAT)
    • 12.1 NAT Overview
    • 12.1.1 NAT Definitions
    • 12.1.2 What NAT Does
    • 12.1.3 How NAT Works
    • 12.1.4 NAT Application
    • 12.1.5 Port Restricted Cone NAT
    • 12.1.6 NAT Mapping Types
    • 12.2 Using NAT
    • 12.2.1 SUA (Single User Account) Versus NAT
    • 12.3 NAT Overview Screen
    • 12.4 NAT Address Mapping
    • 12.4.1 What NAT Does
      • 12.4.2 NAT Address Mapping Edit
    • 12.5 Port Forwarding
    • 12.5.1 Default Server IP Address
    • 12.5.2 Port Forwarding: Services and Port Numbers
    • 12.5.3 Configuring Servers Behind Port Forwarding (Example)
    • 12.5.4 NAT and Multiple WAN
    • 12.5.5 Port Translation
    • 12.6 Port Forwarding Screen
    • 12.7 Port Triggering
  • Static Route
    • 13.1 IP Static Route
    • 13.2 IP Static Route
      • 13.2.1 IP Static Route Edit
  • DNS
    • 14.1 DNS Overview
    • 14.2 DNS Server Address Assignment
    • 14.3 DNS Servers
    • 14.4 Address Record
    • 14.4.1 DNS Wildcard
    • 14.5 Name Server Record
    • 14.5.1 Private DNS Server
    • 14.6 System Screen
      • 14.6.1 Adding an Address Record
      • 14.6.2 Inserting a Name Server Record
    • 14.7 DNS Cache
    • 14.8 Configure DNS Cache
    • 14.9 Configuring DNS DHCP
    • 14.10 Dynamic DNS
    • 14.10.1 DYNDNS Wildcard
    • 14.10.2 High Availability
    • 14.11 Configuring Dynamic DNS
  • Remote Management
    • 15.1 Remote Management Overview
    • 15.1.1 Remote Management Limitations
    • 15.1.2 System Timeout
    • 15.2 WWW (HTTP and HTTPS)
    • 15.3 WWW
    • 15.4 HTTPS Example
    • 15.4.1 Internet Explorer Warning Messages
    • 15.4.2 Netscape Navigator Warning Messages
    • 15.4.3 Avoiding the Browser Warning Messages
    • 15.4.4 Login Screen
    • 15.5 SSH
    • 15.6 How SSH Works
    • 15.7 SSH Implementation on the ZyXEL Device
    • 15.7.1 Requirements for Using SSH
    • 15.8 Configuring SSH
    • 15.9 Secure Telnet Using SSH Examples
    • 15.9.1 Example 1: Microsoft Windows
    • 15.9.2 Example 2: Linux
    • 15.10 Secure FTP Using SSH Example
    • 15.11 Telnet
    • 15.12 Configuring TELNET
    • 15.13 FTP
    • 15.14 SNMP
    • 15.14.1 Supported MIBs
    • 15.14.2 SNMP Traps
    • 15.14.3 REMOTE MANAGEMENT: SNMP
    • 15.15 DNS
    • 15.16 Introducing Vantage CNM
    • 15.17 Configuring CNM
    • 15.17.1 Additional Configuration for Vantage CNM
  • UPnP
    • 16.1 Universal Plug and Play Overview
    • 16.1.1 How Do I Know If I'm Using UPnP?
    • 16.1.2 NAT Traversal
    • 16.1.3 Cautions with UPnP
    • 16.1.4 UPnP and ZyXEL
    • 16.2 Configuring UPnP
    • 16.3 Displaying UPnP Port Mapping
    • 16.4 Installing UPnP in Windows Example
    • 16.4.1 Installing UPnP in Windows Me
    • 16.4.2 Installing UPnP in Windows XP
    • 16.5 Using UPnP in Windows XP Example
    • 16.5.1 Auto-discover Your UPnP-enabled Network Device
    • 16.5.2 Web Configurator Easy Access
  • Custom Application
    • 17.1 Custom Application
    • 17.2 Custom Application Configuration
  • ALG Screen
    • 18.1 ALG Introduction
    • 18.1.1 ALG and NAT
    • 18.1.2 ALG and the Firewall
    • 18.1.3 ALG and Multiple WAN
    • 18.2 FTP
    • 18.3 H.323
    • 18.4 RTP
    • 18.4.1 H.323 ALG Details
    • 18.5 SIP
    • 18.5.1 STUN
    • 18.5.2 SIP ALG Details
    • 18.5.3 SIP Signaling Session Timeout
    • 18.5.4 SIP Audio Session Timeout
    • 18.6 ALG Screen
• Logs and Maintenance
  • Logs Screens
    • 19.1 Configuring View Log
    • 19.2 Log Description Example
    • 19.2.1 About the Certificate Not Trusted Log
    • 19.3 Configuring Log Settings
    • 19.4 Configuring Reports
    • 19.4.1 Viewing Web Site Hits
    • 19.4.2 Viewing Host IP Address
    • 19.4.3 Viewing Protocol/Port
    • 19.4.4 System Reports Specifications
    • 19.5 Log Descriptions
    • 19.6 Syslog Logs
  • Maintenance
    • 20.1 Maintenance Overview
    • 20.2 General Setup and System Name
      • 20.2.1 General Setup
    • 20.3 Configuring Password
    • 20.4 Time and Date
    • 20.5 Pre-defined NTP Time Server Pools
    • 20.5.1 Resetting the Time
    • 20.5.2 Time Server Synchronization
    • 20.6 F/W Upload Screen
    • 20.7 Backup and Restore
    • 20.7.1 Backup Configuration
    • 20.7.2 Restore Configuration
    • 20.7.3 Back to Factory Defaults
    • 20.8 Restart Screen
• Troubleshooting and Specifications
  • Troubleshooting
    • 21.1 Power, Hardware Connections, and LEDs
    • 21.2 ZyXEL Device Access and Login
    • 21.3 Internet Access
    • 21.4 3G Connection
  • Product Specifications
    • 22.1 General ZyXEL Device Specifications
    • 22.2 Wall-mounting Instructions
    • 22.3 Power Adaptor Specifications
• Appendices and Index
  • Pop-up Windows, JavaScripts and Java Permissions
  • Setting up Your Computer’s IP Address
  • IP Addresses and Subnetting
  • Common Services
  • Wireless LANs
  • Importing Certificates
  • Legal Information
  • Customer Support
  • Index