Document Outline

• User’s Guide
  • About This User's Guide
  • Document Conventions
  • Safety Warnings
  • Contents Overview
  • Table of Contents
  • List of Figures
  • List of Tables
• Introduction
  • Introducing the ZyXEL Device
    • 1.1 Overview
    • 1.2 Ways to Manage the ZyXEL Device
    • 1.3 Good Habits for Managing the ZyXEL Device
    • 1.4 Applications for the ZyXEL Device
      • 1.4.1 Internet Access
      • 1.4.2 Making Calls via Internet Telephony Service Provider
      • 1.4.3 Make Peer-to-peer Calls
      • 1.4.4 Firewall for Secure Broadband Internet Access
      • 1.4.5 LAN to LAN Application
    • 1.5 LEDs
    • 1.6 The RESET Button
      • 1.6.1 Using The Reset Button
  • Introducing the Web Configurator
    • 2.1 Web Configurator Overview
      • 2.1.1 Accessing the Web Configurator
    • 2.2 Web Configurator Main Screen
      • 2.2.1 Title Bar
      • 2.2.2 Navigation Panel
      • 2.2.3 Main Window
      • 2.2.4 Status Bar
• Wizard
  • Internet and Wireless Setup Wizard
    • 3.1 Introduction
    • 3.2 Internet Access Wizard Setup
      • 3.2.1 Manual Configuration
    • 3.3 Wireless Connection Wizard Setup
      • 3.3.1 Manually Assign a WPA key
      • 3.3.2 Manually Assign a WEP Key
  • VoIP Wizard And Example
    • 4.1 Introduction
    • 4.2 VoIP Wizard Setup
  • Bandwidth Management Wizard
    • 5.1 Introduction
    • 5.2 Bandwidth Management Wizard Setup
• Advanced
  • Status Screens
    • 6.1 Status Screen
    • 6.2 Any IP Table
    • 6.3 WLAN Status (“W” models only)
    • 6.4 Packet Statistics
    • 6.5 VoIP Statistics
  • WAN Setup
    • 7.1 WAN Overview
      • 7.1.1 Encapsulation
      • 7.1.2 Multiplexing
      • 7.1.3 VPI and VCI
      • 7.1.4 IP Address Assignment
      • 7.1.5 Nailed-Up Connection (PPP)
      • 7.1.6 NAT
    • 7.2 Metric
    • 7.3 Traffic Shaping
      • 7.3.1 ATM Traffic Classes
    • 7.4 Zero Configuration Internet Access
    • 7.5 Internet Access Setup
      • 7.5.1 Advanced Internet Access Setup
    • 7.6 WAN More Connections
    • 7.7 Traffic Redirect
    • 7.8 WAN Backup Setup
  • LAN Setup
    • 8.1 LAN Overview
      • 8.1.1 LANs, WANs and the ZyXEL Device
      • 8.1.2 DHCP Setup
    • 8.2 DNS Server Addresses
    • 8.3 LAN TCP/IP
      • 8.3.1 IP Address and Subnet Mask
      • 8.3.2 RIP Setup
      • 8.3.3 Multicast
      • 8.3.4 Any IP
    • 8.4 Configuring LAN IP
      • 8.4.1 Configuring Advanced LAN Setup
    • 8.5 DHCP Setup
    • 8.6 LAN Client List
    • 8.7 LAN IP Alias
  • Wireless LAN
    • 9.1 Wireless Network Overview
    • 9.2 Wireless Security Overview
      • 9.2.1 SSID
      • 9.2.2 MAC Address Filter
      • 9.2.3 User Authentication
      • 9.2.4 Encryption
      • 9.2.5 One-Touch Intelligent Security Technology (OTIST)
    • 9.3 Wireless Performance Overview
      • 9.3.1 Quality of Service (QoS)
    • 9.4 Additional Wireless Terms
    • 9.5 General WLAN Screen
      • 9.5.1 No Security
      • 9.5.2 WEP Encryption Screen
      • 9.5.3 WPA(2)-PSK
      • 9.5.4 WPA(2) Authentication Screen
      • 9.5.5 Wireless LAN Advanced Setup
    • 9.6 OTIST Screen
      • 9.6.1 Notes on OTIST
    • 9.7 MAC Filter
    • 9.8 QoS Screen
      • 9.8.1 Application Priority Configuration
  • Network Address Translation (NAT) Screens
    • 10.1 NAT General Overview
      • 10.1.1 NAT Definitions
      • 10.1.2 What NAT Does
      • 10.1.3 How NAT Works
      • 10.1.4 NAT Application
      • 10.1.5 NAT Mapping Types
    • 10.2 SUA (Single User Account) Versus NAT
    • 10.3 NAT General Setup
    • 10.4 Port Forwarding
      • 10.4.1 Default Server IP Address
      • 10.4.2 Port Forwarding: Services and Port Numbers
      • 10.4.3 Configuring Servers Behind Port Forwarding (Example)
    • 10.5 Configuring Port Forwarding
      • 10.5.1 Port Forwarding Rule Edit
    • 10.6 Address Mapping
      • 10.6.1 Address Mapping Rule Edit
      • 10.6.2 SIP ALG
  • Voice
    • 11.1 Introduction to VoIP
    • 11.2 SIP
      • 11.2.1 SIP Identities
      • 11.2.2 SIP Call Progression
      • 11.2.3 SIP Servers
      • 11.2.4 RTP
      • 11.2.5 Pulse Code Modulation
      • 11.2.6 Voice Coding
      • 11.2.7 PSTN Call Setup Signaling
      • 11.2.8 MWI (Message Waiting Indication)
      • 11.2.9 Custom Tones (IVR)
    • 11.3 Quality of Service (QoS)
      • 11.3.1 Type of Service (ToS)
      • 11.3.2 DiffServ
      • 11.3.3 VLAN Tagging
    • 11.4 SIP Settings Screen
    • 11.5 Advanced SIP Setup Screen
    • 11.6 SIP QoS Screen
    • 11.7 Phone
      • 11.7.1 Voice Activity Detection/Silence Suppression
      • 11.7.2 Comfort Noise Generation
      • 11.7.3 Echo Cancellation
    • 11.8 Analog Phone Screen
    • 11.9 Advanced Analog Phone Setup Screen
    • 11.10 Common Phone Settings Screen
    • 11.11 Phone Services Overview
      • 11.11.1 The Flash Key
      • 11.11.2 Europe Type Supplementary Phone Services
      • 11.11.3 USA Type Supplementary Services
    • 11.12 Phone Region Screen
    • 11.13 Speed Dial
    • 11.14 Incoming Call Policy Screen
    • 11.15 Distinctive Ring Screen
    • 11.16 PSTN Line (“L” models only)
    • 11.17 PSTN Line Screen (“L” models only)
  • VoIP Trunking
    • 12.1 VoIP Trunking Overview
    • 12.2 VoIP Trunking and Security
      • 12.2.1 Auto Attendant and Authentication
      • 12.2.2 Peer Call Authentication
    • 12.3 Call Rules
    • 12.4 VoIP Trunking Scenarios
      • 12.4.1 VoIP Phone To PSTN Phone
      • 12.4.2 PSTN Phone To VoIP Phone
      • 12.4.3 PSTN Phone To PSTN Phone via VoIP
    • 12.5 Trunking General Screen
    • 12.6 Trunking Peer Call Screen
    • 12.7 Trunking Call Rule Screen
    • 12.8 VoIP Trunking Example: VoIP to PSTN
      • 12.8.1 Background Information
      • 12.8.2 Configuration Details: Outgoing
      • 12.8.3 Configuration Details: Incoming
      • 12.8.4 Call Progression
    • 12.9 VoIP Trunking Example: PSTN to PSTN via VoIP
      • 12.9.1 Background Information
      • 12.9.2 Configuration Details: Outgoing
      • 12.9.3 Configuration Details: Incoming
      • 12.9.4 Call Progression
  • Phone Usage
    • 13.1 Dialing a Telephone Number
    • 13.2 Using Speed Dial to Dial a Telephone Number
    • 13.3 Internal Calls
    • 13.4 Using Call Park and Pickup
    • 13.5 Checking the ZyXEL Device’s IP Address
    • 13.6 Auto Provisioning and Auto Firmware Upgrade
    • 13.7 Phone Functions Summary
  • Firewalls
    • 14.1 Firewall Overview
    • 14.2 Types of Firewalls
      • 14.2.1 Packet Filtering Firewalls
      • 14.2.2 Application-level Firewalls
      • 14.2.3 Stateful Inspection Firewalls
    • 14.3 Introduction to ZyXEL’s Firewall
      • 14.3.1 Denial of Service Attacks
    • 14.4 Denial of Service
      • 14.4.1 Basics
      • 14.4.2 Types of DoS Attacks
    • 14.5 Stateful Inspection
      • 14.5.1 Stateful Inspection Process
      • 14.5.2 Stateful Inspection on Your ZyXEL Device
      • 14.5.3 TCP Security
      • 14.5.4 UDP/ICMP Security
      • 14.5.5 Upper Layer Protocols
    • 14.6 Guidelines for Enhancing Security with Your Firewall
      • 14.6.1 Security In General
    • 14.7 Packet Filtering Vs Firewall
      • 14.7.1 Packet Filtering:
      • 14.7.2 Firewall
  • Firewall Configuration
    • 15.1 Access Methods
    • 15.2 General Firewall Policy Overview
    • 15.3 Rule Logic Overview
      • 15.3.1 Rule Checklist
      • 15.3.2 Security Ramifications
      • 15.3.3 Key Fields For Configuring Rules
    • 15.4 Connection Direction
      • 15.4.1 LAN to WAN Rules
      • 15.4.2 Alerts
    • 15.5 General Firewall Policy
    • 15.6 Firewall Rules Summary
      • 15.6.1 Configuring Firewall Rules
      • 15.6.2 Customized Services
      • 15.6.3 Configuring A Customized Service
    • 15.7 Example Firewall Rule
    • 15.8 DoS Thresholds
      • 15.8.1 Threshold Values
      • 15.8.2 Half-Open Sessions
      • 15.8.3 Configuring Firewall Thresholds
    • 15.9 Firewall Commands
  • Content Filtering
    • 16.1 Content Filtering Overview
    • 16.2 Configuring Keyword Blocking
    • 16.3 Configuring the Schedule
    • 16.4 Configuring Trusted Computers
  • Introduction to IPSec
    • 17.1 VPN Overview
      • 17.1.1 IPSec
      • 17.1.2 Security Association
      • 17.1.3 Other Terminology
      • 17.1.4 VPN Applications
    • 17.2 IPSec Architecture
      • 17.2.1 IPSec Algorithms
      • 17.2.2 Key Management
    • 17.3 Encapsulation
      • 17.3.1 Transport Mode
      • 17.3.2 Tunnel Mode
    • 17.4 IPSec and NAT
  • VPN Screens
    • 18.1 VPN/IPSec Overview
    • 18.2 IPSec Algorithms
      • 18.2.1 AH (Authentication Header) Protocol
      • 18.2.2 ESP (Encapsulating Security Payload) Protocol
    • 18.3 My IP Address
    • 18.4 Secure Gateway Address
      • 18.4.1 Dynamic Secure Gateway Address
    • 18.5 VPN Setup Screen
    • 18.6 Keep Alive
    • 18.7 VPN, NAT, and NAT Traversal
    • 18.8 Remote DNS Server
    • 18.9 ID Type and Content
      • 18.9.1 ID Type and Content Examples
    • 18.10 Pre-Shared Key
    • 18.11 Editing VPN Policies
    • 18.12 IKE Phases
      • 18.12.1 Negotiation Mode
      • 18.12.2 Diffie-Hellman (DH) Key Groups
      • 18.12.3 Perfect Forward Secrecy (PFS)
    • 18.13 Configuring Advanced IKE Settings
    • 18.14 Manual Key Setup
      • 18.14.1 Security Parameter Index (SPI)
    • 18.15 Configuring Manual Key
    • 18.16 Viewing SA Monitor
    • 18.17 Configuring Global Setting
    • 18.18 Telecommuter VPN/IPSec Examples
      • 18.18.1 Telecommuters Sharing One VPN Rule Example
      • 18.18.2 Telecommuters Using Unique VPN Rules Example
    • 18.19 VPN and Remote Management
  • Certificates
    • 19.1 Certificates Overview
      • 19.1.1 Advantages of Certificates
    • 19.2 Self-signed Certificates
    • 19.3 Configuration Summary
    • 19.4 My Certificates
    • 19.5 My Certificate Import
      • 19.5.1 Certificate File Formats
    • 19.6 My Certificate Create
    • 19.7 My Certificate Details
    • 19.8 Trusted CAs
    • 19.9 Trusted CA Import
    • 19.10 Trusted CA Details
    • 19.11 Trusted Remote Hosts
    • 19.12 Verifying a Trusted Remote Host’s Certificate
      • 19.12.1 Trusted Remote Host Certificate Fingerprints
    • 19.13 Trusted Remote Hosts Import
    • 19.14 Trusted Remote Host Certificate Details
    • 19.15 Directory Servers
    • 19.16 Directory Server Add and Edit
  • Static Route
    • 20.1 Static Route
    • 20.2 Configuring Static Route
      • 20.2.1 Static Route Edit
  • Bandwidth Management
    • 21.1 Bandwidth Management Overview
    • 21.2 Application-based Bandwidth Management
    • 21.3 Auto Classifier
    • 21.4 Subnet-based Bandwidth Management
    • 21.5 Application and Subnet-based Bandwidth Management
      • 21.5.1 Bandwidth Management Priorities
    • 21.6 Configuring Bandwidth Management (General)
    • 21.7 Bandwidth Management Rule Setup
      • 21.7.1 Rule Configuration
    • 21.8 Bandwidth Monitor
  • Dynamic DNS Setup
    • 22.1 Dynamic DNS Overview
      • 22.1.1 DYNDNS Wildcard
    • 22.2 Configuring Dynamic DNS
  • Remote Management Configuration
    • 23.1 Remote Management Overview
      • 23.1.1 Remote Management Limitations
      • 23.1.2 Remote Management and NAT
      • 23.1.3 System Timeout
    • 23.2 WWW
    • 23.3 Telnet
    • 23.4 Configuring Telnet
    • 23.5 Configuring FTP
    • 23.6 SNMP
      • 23.6.1 Supported MIBs
      • 23.6.2 SNMP Traps
      • 23.6.3 Configuring SNMP
    • 23.7 Configuring DNS
    • 23.8 Configuring ICMP
  • Universal Plug-and-Play (UPnP)
    • 24.1 Introducing Universal Plug and Play
      • 24.1.1 How do I know if I'm using UPnP?
      • 24.1.2 NAT Traversal
      • 24.1.3 Cautions with UPnP
    • 24.2 UPnP and ZyXEL
      • 24.2.1 Configuring UPnP
    • 24.3 Installing UPnP in Windows Example
    • 24.4 Using UPnP in Windows XP Example
• Maintenance and Troubleshooting
  • System
    • 25.1 General Setup and System Name
      • 25.1.1 General Setup
    • 25.2 Time Setting
  • Logs
    • 26.1 Logs Overview
      • 26.1.1 Alerts and Logs
    • 26.2 Viewing the Logs
    • 26.3 Configuring Log Settings
    • 26.4 SMTP Error Messages
      • 26.4.1 Example E-mail Log
    • 26.5 Log Descriptions
  • Tools
    • 27.1 Introduction
    • 27.2 Filename Conventions
    • 27.3 File Maintenance Over WAN
    • 27.4 Firmware Upgrade Screen
    • 27.5 Backup and Restore
      • 27.5.1 Backup Configuration
      • 27.5.2 Restore Configuration
      • 27.5.3 Reset to Factory Defaults
    • 27.6 Restart
    • 27.7 Using FTP or TFTP to Back Up Configuration
      • 27.7.1 Using the FTP Commands to Back Up Configuration
      • 27.7.2 FTP Command Configuration Backup Example
      • 27.7.3 Configuration Backup Using GUI-based FTP Clients
      • 27.7.4 Backup Configuration Using TFTP
      • 27.7.5 TFTP Command Configuration Backup Example
      • 27.7.6 Configuration Backup Using GUI-based TFTP Clients
    • 27.8 Using FTP or TFTP to Restore Configuration
      • 27.8.1 Restore Using FTP Session Example
    • 27.9 FTP and TFTP Firmware and Configuration File Uploads
      • 27.9.1 FTP File Upload Command from the DOS Prompt Example
      • 27.9.2 FTP Session Example of Firmware File Upload
      • 27.9.3 TFTP File Upload
      • 27.9.4 TFTP Upload Command Example
  • Diagnostic
    • 28.1 General Diagnostic
    • 28.2 DSL Line Diagnostic
  • Troubleshooting
    • 29.1 Power, Hardware Connections, and LEDs
    • 29.2 ZyXEL Device Access and Login
    • 29.3 Internet Access
    • 29.4 Phone Calls and VoIP
    • 29.5 Problems With Multiple SIP Accounts
      • 29.5.1 Outgoing Calls
      • 29.5.2 Incoming Calls
• Appendices and Index
  • Product Specifications
  • Setting up Your Computer’s IP Address
  • Pop-up Windows, JavaScripts and Java Permissions
  • IP Addresses and Subnetting
  • Wireless LANs
  • Services
  • Command Interpreter
  • Internal SPTGEN
  • Legal Information
  • Customer Support
  • Index