Zyxel-communications G.SHDSL.bis 4-port Security Gateway P-793H User Manual

P-793HG.SHDSL.bis 4-port Security GatewayUser’s GuideVersion 3.40Edition 18/2006

P-793H User’s Guide10 Customer Support

P-793H User’s Guide100 Chapter 6 LAN SetupFigure 34 LAN > IPThe following table describes the fields in this screen. 6.3.1 Configuring Advanced

P-793H User’s GuideChapter 6 LAN Setup 101The following table describes the labels in this screen. 6.4 DHCP SetupUse this screen to configure the DN

P-793H User’s Guide102 Chapter 6 LAN SetupFigure 36 LAN > DHCP SetupThe following table describes the labels in this screen.Table 25 LAN > D

P-793H User’s GuideChapter 6 LAN Setup 1036.5 LAN Client ListThis table allows you to assign IP addresses on the LAN to specific individual computers

P-793H User’s Guide104 Chapter 6 LAN Setup6.6 LAN IP AliasIP alias allows you to partition a physical network into different logical networks over th

P-793H User’s GuideChapter 6 LAN Setup 105Figure 39 LAN > IP AliasThe following table describes the labels in this screen.Table 27 LAN > IP

P-793H User’s Guide106 Chapter 6 LAN Setup

P-793H User’s GuideChapter 7 Network Address Translation (NAT) Screens 107CHAPTER 7Network Address Translation(NAT) ScreensThis chapter discusses how

P-793H User’s Guide108 Chapter 7 Network Address Translation (NAT) Screens7.1.2 What NAT DoesIn the simplest form, NAT changes the source IP address

P-793H User’s GuideChapter 7 Network Address Translation (NAT) Screens 1097.1.4 NAT ApplicationThe following figure illustrates a possible NAT applic

P-793H User’s GuideTable of Contents 11Table of ContentsCopyright ...

P-793H User’s Guide110 Chapter 7 Network Address Translation (NAT) ScreensPort numbers do NOT change for One-to-One and Many-to-Many No Overload NAT m

P-793H User’s GuideChapter 7 Network Address Translation (NAT) Screens 111Figure 42 NAT > GeneralThe following table describes the labels in this

P-793H User’s Guide112 Chapter 7 Network Address Translation (NAT) ScreensYou may enter a single port number or a range of port numbers to be forwarde

P-793H User’s GuideChapter 7 Network Address Translation (NAT) Screens 1137.5 Configuring Port Forwarding Note: The Port Forwarding screen is availab

P-793H User’s Guide114 Chapter 7 Network Address Translation (NAT) Screens7.5.1 Port Forwarding Rule Edit Use this screen to edit a port forwarding r

P-793H User’s GuideChapter 7 Network Address Translation (NAT) Screens 1157.6 Address Mapping Note: The Address Mapping screen is available only when

P-793H User’s Guide116 Chapter 7 Network Address Translation (NAT) Screens7.6.1 Address Mapping Rule Edit Use this screen to edit an address mapping

P-793H User’s GuideChapter 7 Network Address Translation (NAT) Screens 117The following table describes the fields in this screen. Table 34 NAT >

P-793H User’s Guide118 Chapter 7 Network Address Translation (NAT) Screens

P-793H User’s GuideChapter 8 Firewalls 119CHAPTER 8FirewallsThis chapter gives some background information on firewalls and introduces the ZyXEL Devic

P-793H User’s Guide12 Table of Contents3.1.2 Screen 2 ...

P-793H User’s Guide120 Chapter 8 Firewalls8.2.2 Application-level FirewallsApplication-level firewalls restrict access by serving as proxies for exte

P-793H User’s GuideChapter 8 Firewalls 121• The LAN (Local Area Network) port attaches to a network of computers, which needs security from the outsid

P-793H User’s Guide122 Chapter 8 Firewalls8.4.2 Types of DoS AttacksThere are four types of DoS attacks: 1 Those that exploit bugs in a TCP/IP implem

P-793H User’s GuideChapter 8 Firewalls 123• SYN Attack floods a targeted system with a series of SYN packets. Each packet causes the targeted system t

P-793H User’s Guide124 Chapter 8 FirewallsFigure 51 Smurf Attack8.4.2.1 ICMP Vulnerability ICMP is an error-reporting protocol that works in concer

P-793H User’s GuideChapter 8 Firewalls 1258.4.2.3 TracerouteTraceroute is a utility used to determine the path a packet takes between two endpoints.

P-793H User’s Guide126 Chapter 8 FirewallsThe previous figure shows the ZyXEL Device’s default firewall rules in action as well as demonstrates how st

P-793H User’s GuideChapter 8 Firewalls 127• Allow certain types of traffic from the Internet to specific hosts on the LAN.• Allow access to a Web serv

P-793H User’s Guide128 Chapter 8 FirewallsA similar situation exists for ICMP, except that the ZyXEL Device is even more restrictive. Specifically, on

P-793H User’s GuideChapter 8 Firewalls 129• Encourage your company or organization to develop a comprehensive security plan. Good network administrati

P-793H User’s GuideTable of Contents 135.5.2 Configuring More Connections Advanced Setup ...845.6 Traffic Redirect

P-793H User’s Guide130 Chapter 8 Firewalls8.7.1.1 When To Use Filtering• To block/allow LAN packets by their MAC addresses.• To block/allow special I

P-793H User’s GuideChapter 9 Firewall Configuration 131CHAPTER 9Firewall ConfigurationThis chapter shows you how to enable and configure the ZyXEL Dev

P-793H User’s Guide132 Chapter 9 Firewall ConfigurationNote: If you configure firewall rules without a good understanding of how they work, you might

P-793H User’s GuideChapter 9 Firewall Configuration 1334 Does a rule that allows Internet users access to resources on the LAN create a security vulne

P-793H User’s Guide134 Chapter 9 Firewall Configuration9.4.1 LAN to WAN RulesThe default rule for LAN to WAN traffic is that all users on the LAN are

P-793H User’s GuideChapter 9 Firewall Configuration 135As a result, the ZyXEL Device resets the connection, as the connection has not been acknowledge

P-793H User’s Guide136 Chapter 9 Firewall Configuration9.6 General Firewall Policy Click Security > Firewall to display the following screen. Ac

P-793H User’s GuideChapter 9 Firewall Configuration 1379.7 Firewall Rules Summary Note: The ordering of your rules is very important as rules are app

P-793H User’s Guide138 Chapter 9 Firewall ConfigurationThe following table describes the labels in this screen. 9.7.1 Configuring Firewall Rules Re

P-793H User’s GuideChapter 9 Firewall Configuration 139Use this screen to create or edit a firewall rule. In the Rules screen, select an index number

P-793H User’s Guide14 Table of Contents7.6.1 Address Mapping Rule Edit ...116Chapter

P-793H User’s Guide140 Chapter 9 Firewall ConfigurationAction for Matched PacketUse the drop-down list box to select what the firewall is to do with p

P-793H User’s GuideChapter 9 Firewall Configuration 1419.7.2 Customized Services Configure customized services and port numbers not predefined by the

P-793H User’s Guide142 Chapter 9 Firewall ConfigurationRefer to Section 8.1 on page 119 for more information. Figure 60 Firewall > Rules > Add

P-793H User’s GuideChapter 9 Firewall Configuration 143Figure 61 Firewall Example: Rules3 In the Rules screen, select the index number after that yo

P-793H User’s Guide144 Chapter 9 Firewall ConfigurationFigure 63 Firewall Example: Edit Rule: Destination Address 9 Use the Add >> and Remove

P-793H User’s GuideChapter 9 Firewall Configuration 145Figure 64 Firewall Example: Edit Rule: Select Customized ServicesOn completing the configurat

P-793H User’s Guide146 Chapter 9 Firewall ConfigurationFigure 65 Firewall Example: Rules: MyService 9.9 Anti-Probing If an outside user attempts to

P-793H User’s GuideChapter 9 Firewall Configuration 147The following table describes the labels in this screen.9.10 DoS Thresholds For DoS attacks, t

P-793H User’s Guide148 Chapter 9 Firewall ConfigurationIf your network is slower than average for any of these factors (especially if you have servers

P-793H User’s GuideChapter 9 Firewall Configuration 1499.10.3 Configuring Firewall ThresholdsThe ZyXEL Device also sends alerts whenever TCP Maximum

P-793H User’s GuideTable of Contents 159.4 Connection Direction ...

P-793H User’s Guide150 Chapter 9 Firewall ConfigurationMaximum Incomplete HighType the number of existing half-open sessions that causes the firewall

P-793H User’s GuideChapter 10 Content Filtering 151CHAPTER 10Content FilteringThis chapter covers how to configure content filtering.10.1 Content Fil

P-793H User’s Guide152 Chapter 10 Content FilteringThe following table describes the labels in this screen. 10.3 Configuring the Schedule Use this sc

P-793H User’s GuideChapter 10 Content Filtering 153The following table describes the labels in this screen. 10.4 Configuring Trusted Computers Use th

P-793H User’s Guide154 Chapter 10 Content Filtering

P-793H User’s GuideChapter 11 IPSec VPN 155CHAPTER 11IPSec VPNThis chapter explains how to set up and maintain IPSec VPNs in the ZyXEL Device.11.1 IP

P-793H User’s Guide156 Chapter 11 IPSec VPNFigure 72 VPN: IKE SA and IPSec SA In this example, a computer in network A is exchanging data with a com

P-793H User’s GuideChapter 11 IPSec VPN 15711.1.1.2 IKE SA ProposalThe IKE SA proposal is used to identify the encryption algorithm, authentication a

P-793H User’s Guide158 Chapter 11 IPSec VPN11.1.1.4 AuthenticationBefore the ZyXEL Device and remote IPSec router establish an IKE SA, they have to v

P-793H User’s GuideChapter 11 IPSec VPN 159In the following example, the authentication fails, so they cannot establish an IKE SA.It is also possible

P-793H User’s Guide16 Table of Contents11.1.4.1 IPSec SA using Manual Keys ...16211.2 VPN Setup Scr

P-793H User’s Guide160 Chapter 11 IPSec VPNAggressive mode does not provide as much security as main mode because the identity of the ZyXEL Device and

P-793H User’s GuideChapter 11 IPSec VPN 161Note: An IPSec SA stays connected even if the underlying IKE SA is not available anymore.This section intro

P-793H User’s Guide162 Chapter 11 IPSec VPN• Inside header: The inside IP header contains the IP address of the computers behind the ZyXEL Device or r

P-793H User’s GuideChapter 11 IPSec VPN 163In IPSec SAs using manual keys, the ZyXEL Device and remote IPSec router do not establish an IKE SA. They o

P-793H User’s Guide164 Chapter 11 IPSec VPNFigure 78 VPN > SetupThe following table describes the fields in this screen.Table 50 VPN > Setup

P-793H User’s GuideChapter 11 IPSec VPN 16511.3 Editing VPN PoliciesSee Section 11.1 on page 155 for background information. Use this screen to edit

P-793H User’s Guide166 Chapter 11 IPSec VPNFigure 79 VPN > Setup > EditThe following table describes the fields in this screen.Table 51 VPN

P-793H User’s GuideChapter 11 IPSec VPN 167Name Type up to 32 characters to identify this VPN policy. You may use any character, including spaces, but

P-793H User’s Guide168 Chapter 11 IPSec VPNIP Address Start When the Remote Address Type field is configured to Single, enter a (static) IP address on

P-793H User’s GuideChapter 11 IPSec VPN 169Content The configuration of the peer content depends on the peer ID type.For IP, type the IP address of th

P-793H User’s GuideTable of Contents 1714.1.1 DYNDNS Wildcard ...19914.2

P-793H User’s Guide170 Chapter 11 IPSec VPN11.4 Configuring Advanced IKE SettingsSee Section 11.1 on page 155 for background information. Use this sc

P-793H User’s GuideChapter 11 IPSec VPN 171Figure 80 VPN > Setup > Edit > AdvancedThe following table describes the fields in this screen.T

P-793H User’s Guide172 Chapter 11 IPSec VPNPre-Shared Key Type the pre-shared key the IKE SA uses. The ZyXEL Device and remote IPSec router must use t

P-793H User’s GuideChapter 11 IPSec VPN 17311.5 Configuring Manual KeyYou only configure VPN Manual Key when you select Manual in the IPSec Key Mode

P-793H User’s Guide174 Chapter 11 IPSec VPNFigure 81 VPN > Setup > Edit > ManualThe following table describes the fields in this screen.Tab

P-793H User’s GuideChapter 11 IPSec VPN 175Local Local IP addresses must be static and correspond to the remote IPSec router's configured remote

P-793H User’s Guide176 Chapter 11 IPSec VPN11.6 Viewing SA MonitorClick Security, VPN and Monitor to open the SA Monitor screen as shown. Use this sc

P-793H User’s GuideChapter 11 IPSec VPN 177Figure 82 VPN > MonitorThe following table describes the fields in this screen.11.7 Configuring Globa

P-793H User’s Guide178 Chapter 11 IPSec VPNFigure 83 VPN > VPN Global SettingThe following table describes the fields in this screen.11.8 Teleco

P-793H User’s GuideChapter 11 IPSec VPN 179Figure 84 Telecommuters Sharing One VPN Rule Example11.8.2 Telecommuters Using Unique VPN Rules ExampleI

P-793H User’s Guide18 Table of Contents18.2 Viewing the Logs ...

P-793H User’s Guide180 Chapter 11 IPSec VPNFigure 85 Telecommuters Using Unique VPN Rules ExampleTable 57 Telecommuters Using Unique VPN Rules Exa

P-793H User’s GuideChapter 11 IPSec VPN 18111.9 VPN and Remote ManagementIf a VPN tunnel uses Telnet, FTP, WWW, then you should configure remote mana

P-793H User’s Guide182 Chapter 11 IPSec VPN

P-793H User’s GuideChapter 12 Static Route 183CHAPTER 12Static RouteThis chapter shows you how to configure static routes for your ZyXEL Device.12.1

P-793H User’s Guide184 Chapter 12 Static RouteFigure 87 Static Route > Static RouteThe following table describes the labels in this screen. 12.2.

P-793H User’s GuideChapter 12 Static Route 185Figure 88 Static Route > Static Route > EditThe following table describes the labels in this scr

P-793H User’s Guide186 Chapter 12 Static Route

P-793H User’s GuideChapter 13 Bandwidth Management 187CHAPTER 13Bandwidth ManagementThis chapter contains information about configuring bandwidth mana

P-793H User’s Guide188 Chapter 13 Bandwidth ManagementFigure 89 Subnet-based Bandwidth Management Example13.4 Application and Subnet-based Bandwidt

P-793H User’s GuideChapter 13 Bandwidth Management 18913.5.2 Fairness-based SchedulerThe ZyXEL Device divides bandwidth equally among bandwidth class

P-793H User’s GuideTable of Contents 19Chapter 25Internet Access Setup ...

P-793H User’s Guide190 Chapter 13 Bandwidth Management13.6.2 Maximize Bandwidth Usage ExampleHere is an example of a ZyXEL Device that has maximize b

P-793H User’s GuideChapter 13 Bandwidth Management 191• Research requires more bandwidth but only gets its budgeted 2048 kbps because all of the unbud

P-793H User’s Guide192 Chapter 13 Bandwidth Management13.6.4 Bandwidth Management PrioritiesThe following table describes the priorities that you can

P-793H User’s GuideChapter 13 Bandwidth Management 19313.8 Bandwidth Management Rule Setup See Section 13.1 on page 187 for background information.

P-793H User’s Guide194 Chapter 13 Bandwidth ManagementThe following table describes the labels in this screen. 13.8.1 Rule ConfigurationSee Section 1

P-793H User’s GuideChapter 13 Bandwidth Management 195Figure 92 Bandwidth MGMT > Rule Setup > Add/EditThe following table describes the labels

P-793H User’s Guide196 Chapter 13 Bandwidth ManagementService This field simplifies bandwidth class configuration by allowing you to select a predefin

P-793H User’s GuideChapter 13 Bandwidth Management 19713.9 Bandwidth Monitor See Section 13.1 on page 187 for background information. Use this screen

P-793H User’s Guide198 Chapter 13 Bandwidth Management

P-793H User’s GuideChapter 14 Dynamic DNS Setup 199CHAPTER 14Dynamic DNS SetupThis chapter discusses how to configure your ZyXEL Device to use Dynamic

P-793H User’s Guide20 Table of Contents30.2 Configuring a Filter Set ...

P-793H User’s Guide200 Chapter 14 Dynamic DNS SetupFigure 94 Dynamic DNS > Dynamic DNSThe following table describes the fields in this screen. Ta

P-793H User’s GuideChapter 14 Dynamic DNS Setup 201Dynamic DNS server auto detect IP AddressSelect this option only when there are one or more NAT rou

P-793H User’s Guide202 Chapter 14 Dynamic DNS Setup

P-793H User’s GuideChapter 15 Remote Management Configuration 203CHAPTER 15Remote ManagementConfigurationThis chapter provides information on configur

P-793H User’s Guide204 Chapter 15 Remote Management Configuration• The IP address in the Secured Client IP field does not match the client IP address.

P-793H User’s GuideChapter 15 Remote Management Configuration 20515.3 TelnetYou can configure your ZyXEL Device for remote Telnet access as shown nex

P-793H User’s Guide206 Chapter 15 Remote Management ConfigurationThe following table describes the labels in this screen.15.5 Configuring FTPYou can

P-793H User’s GuideChapter 15 Remote Management Configuration 20715.6 SNMPSimple Network Management Protocol (SNMP) is a protocol used for exchanging

P-793H User’s Guide208 Chapter 15 Remote Management ConfigurationAn agent is a management software module that resides in a managed device (the ZyXEL

P-793H User’s GuideChapter 15 Remote Management Configuration 20915.6.3 Configuring SNMPSee Section 15.1 on page 203 for background information. Use

P-793H User’s GuideTable of Contents 2134.4 Restore Configuration ...

P-793H User’s Guide210 Chapter 15 Remote Management Configuration15.7 Configuring DNS Use DNS (Domain Name System) to map a domain name to its corres

P-793H User’s GuideChapter 15 Remote Management Configuration 211The following table describes the labels in this screen.15.8 Configuring ICMP Use th

P-793H User’s Guide212 Chapter 15 Remote Management ConfigurationThe following table describes the labels in this screen.15.9 TR-069TR-069 is a proto

P-793H User’s GuideChapter 15 Remote Management Configuration 213Figure 103 Enabling TR-069 The following table gives a description of TR-069 comman

P-793H User’s Guide214 Chapter 15 Remote Management Configuration

P-793H User’s GuideChapter 16 Universal Plug-and-Play (UPnP) 215CHAPTER 16Universal Plug-and-Play (UPnP)This chapter introduces the UPnP feature in th

P-793H User’s Guide216 Chapter 16 Universal Plug-and-Play (UPnP)16.1.3 Cautions with UPnPThe automated nature of NAT traversal applications in establ

P-793H User’s GuideChapter 16 Universal Plug-and-Play (UPnP) 217The following table describes the fields in this screen.16.3 Installing UPnP in Windo

P-793H User’s Guide218 Chapter 16 Universal Plug-and-Play (UPnP)Figure 105 Add/Remove Programs: Windows Setup: Communication 3 In the Communications

P-793H User’s GuideChapter 16 Universal Plug-and-Play (UPnP) 219Installing UPnP in Windows XPFollow the steps below to install the UPnP in Windows XP.

P-793H User’s Guide22 Table of ContentsChapter 38Troubleshooting ...

P-793H User’s Guide220 Chapter 16 Universal Plug-and-Play (UPnP)Figure 109 Networking Services6 Click OK to go back to the Windows Optional Networki

P-793H User’s GuideChapter 16 Universal Plug-and-Play (UPnP) 221Figure 110 Network Connections3 In the Internet Connection Properties window, click

P-793H User’s Guide222 Chapter 16 Universal Plug-and-Play (UPnP)4 You may edit or delete the port mappings or click Add to manually add port mappings.

P-793H User’s GuideChapter 16 Universal Plug-and-Play (UPnP) 223Figure 115 Internet Connection StatusWeb Configurator Easy AccessWith UPnP, you can

P-793H User’s Guide224 Chapter 16 Universal Plug-and-Play (UPnP)Figure 116 Network Connections4 An icon with the description for each UPnP-enabled d

P-793H User’s GuideChapter 16 Universal Plug-and-Play (UPnP) 225Figure 117 Network Connections: My Network Places6 Right-click on the icon for your

P-793H User’s Guide226 Chapter 16 Universal Plug-and-Play (UPnP)

P-793H User’s GuideChapter 17 System 227CHAPTER 17SystemThis chapter explains how to configure the ZyXEL Device’s system name, domain name, password,

P-793H User’s Guide228 Chapter 17 SystemFigure 119 System > GeneralThe following table describes the labels in this screen.Table 80 System >

P-793H User’s GuideChapter 17 System 22917.2 Time Setting To change your ZyXEL Device’s time and date, click Maintenance > System > Time Settin

P-793H User’s GuideTable of Contents 23Appendix HFirewall Commands ...

P-793H User’s Guide230 Chapter 17 SystemThe following table describes the fields in this screen.Table 81 System > Time SettingLABEL DESCRIPTIONCu

P-793H User’s GuideChapter 17 System 231Start Date Configure the day and time when Daylight Saving Time starts if you selected Enable Daylight Saving.

P-793H User’s Guide232 Chapter 17 System

P-793H User’s GuideChapter 18 Logs 233CHAPTER 18LogsThis chapter contains information about configuring general log settings and viewing the ZyXEL Dev

P-793H User’s Guide234 Chapter 18 LogsFigure 121 Logs > View LogThe following table describes the fields in this screen. 18.3 Configuring Log Se

P-793H User’s GuideChapter 18 Logs 235Alerts are e-mailed as soon as they happen. Logs may be e-mailed as soon as the log is full. Selecting many aler

P-793H User’s Guide236 Chapter 18 LogsLog Schedule This drop-down menu is used to configure the frequency of log messages being sent as E-mail: DailyW

P-793H User’s GuideChapter 19 Tools 237CHAPTER 19ToolsThis chapter covers uploading new firmware, managing configuration and restarting your ZyXEL Dev

P-793H User’s Guide238 Chapter 19 ToolsNote: Do NOT turn off the ZyXEL Device while firmware upload is in progress!After you see the Firmware Upload i

P-793H User’s GuideChapter 19 Tools 239Figure 126 Error Message19.2 Configuration Use this screen to back up or restore the configuration of the Zy

P-793H User’s Guide24 Table of Contents

P-793H User’s Guide240 Chapter 19 ToolsNote: Do not turn off the device while configuration file upload is in progress.When the ZyXEL Device has finis

P-793H User’s GuideChapter 19 Tools 241Figure 130 Configuration Upload ErrorClick Return to go back to the previous screen.19.3 Restart System rest

P-793H User’s Guide242 Chapter 19 Tools

P-793H User’s GuideChapter 20 Diagnostic 243CHAPTER 20DiagnosticThese read-only screens display information to help you identify problems with the ZyX

P-793H User’s Guide244 Chapter 20 DiagnosticFigure 133 Diagnostic > DSL LineThe following table describes the fields in this screen.Table 87 Di

P-793H User’s GuideChapter 21 Introducing the SMT 245CHAPTER 21Introducing the SMTThe System Management Terminal (SMT) provides a text-based, menu-dri

P-793H User’s Guide246 Chapter 21 Introducing the SMTFigure 135 SMT Main MenuNote: There is an inactivity timeout, and the default value is ten minu

P-793H User’s GuideChapter 21 Introducing the SMT 247The following table gives you an overview of the various SMT menus.21 Filter and Firewall SetupUs

P-793H User’s Guide248 Chapter 21 Introducing the SMT21.3 Navigating the SMT InterfaceYou should be familiar with the following operations before you

P-793H User’s GuideChapter 21 Introducing the SMT 249Move to a “hidden” menuPress [SPACE BAR] to change No to Yes then press [ENTER].Fields beginning

P-793H User’s GuideList of Figures 25List of FiguresFigure 1 High-speed Internet Access with Your ZyXEL Device ...

P-793H User’s Guide250 Chapter 21 Introducing the SMT

P-793H User’s GuideChapter 22 General Setup 251CHAPTER 22General SetupUse this menu to set up device mode, dynamic DNS and administrative information.

P-793H User’s Guide252 Chapter 22 General Setup22.1.1 Configuring Dynamic DNSTo configure Dynamic DNS, set the ZyXEL Device to router mode in menu 1

P-793H User’s GuideChapter 22 General Setup 253Follow the instructions in the next table to configure Dynamic DNS parameters.Table 92 Menu 1.1: Conf

P-793H User’s Guide254 Chapter 22 General Setup

P-793H User’s GuideChapter 23 WAN Setup 255CHAPTER 23WAN SetupUse this menu to configure the DSL connection, traffic redirect, and dial-backup interfa

P-793H User’s Guide256 Chapter 23 WAN SetupTransfer Max Rate(Kbps)This field is enabled if Service Type is Server. Press [SPACE BAR] to set the maximu

P-793H User’s GuideChapter 23 WAN Setup 25723.2 Configuring Traffic RedirectFrom the main menu, in menu 2, select Yes in Traffic Redirect, and then

P-793H User’s Guide258 Chapter 23 WAN Setup23.4 Configuring Dial Backup in Menu 2From the main menu, enter 2 to open menu 2.Figure 140 Menu 2.2: Di

P-793H User’s GuideChapter 23 WAN Setup 259Figure 141 Menu 2.2.1: Advanced Dial Backup SetupThe following table describes fields in this menu.

P-793H User’s Guide26 List of FiguresFigure 39 LAN > IP Alias ...

P-793H User’s Guide260 Chapter 23 WAN Setup

P-793H User’s GuideChapter 24 LAN Setup 261CHAPTER 24LAN SetupUse this to apply LAN filters, configure LAN DHCP and TCP/IP settings, and to activate o

P-793H User’s Guide262 Chapter 24 LAN Setup24.3 TCP/IP and DHCP Setup MenuFrom the main menu, enter 3 to open Menu 3 - LAN Setup to configure TCP/IP

P-793H User’s GuideChapter 24 LAN Setup 263Primary DNS ServerSecondary DNS ServerThe ZyXEL Device passes a DNS (Domain Name System) server IP address

P-793H User’s Guide264 Chapter 24 LAN Setup24.4 LAN IP AliasUse menu 3.2 to configure the first network, and you use menu 3.2.1 to configure the othe

P-793H User’s GuideChapter 24 LAN Setup 26524.4.1 Port-based VLAN SetupYou use menu 3.6 to control whether or not the ZyXEL Device sends layer-2 traf

P-793H User’s Guide266 Chapter 24 LAN Setup

P-793H User’s GuideChapter 25 Internet Access Setup 267CHAPTER 25Internet Access SetupUse this menu to configure your Internet connection. Use informa

P-793H User’s Guide268 Chapter 25 Internet Access SetupVCI The valid range for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM

P-793H User’s GuideChapter 26 Remote Node Setup 269CHAPTER 26Remote Node SetupUse this menu to configure detailed remote node settings (for example, y

P-793H User’s GuideList of Figures 27Figure 82 VPN > Monitor ...

P-793H User’s Guide270 Chapter 26 Remote Node SetupFigure 149 Menu 11.1: Remote Node Profile (nodes 1-7)The following table describes the labels in

P-793H User’s GuideChapter 26 Remote Node Setup 271The following explains how to configure remote node 8 for the dial backup connection.Bridge If Rout

P-793H User’s Guide272 Chapter 26 Remote Node SetupFigure 150 Menu 11.1: Remote Node Profile (node 8)The following table describes the labels in thi

P-793H User’s GuideChapter 26 Remote Node Setup 27326.4 Remote Node Network Layer OptionsMove the cursor to the Edit IP/Bridge field in menu 11.1, th

P-793H User’s Guide274 Chapter 26 Remote Node SetupThe following table describes the fields in this menu.Table 102 Menu 11.3: Remote Node Network La

P-793H User’s GuideChapter 26 Remote Node Setup 27526.5 Remote Node FilterMove the cursor to the field Edit Filter Sets in menu 11.1, and then press

P-793H User’s Guide276 Chapter 26 Remote Node SetupFigure 152 Menu 11.5: Remote Node FilterThe following table describes the labels in this menu.26.

P-793H User’s GuideChapter 26 Remote Node Setup 277Figure 153 Menu 11.6: Remote Node ATM Layer OptionsThe following table describes the fields in th

P-793H User’s Guide278 Chapter 26 Remote Node Setup26.7 Advance Setup OptionsMove the cursor to the Edit Advance Options field in menu 11.1 (only for

P-793H User’s GuideChapter 27 Static Route Setup 279CHAPTER 27Static Route SetupUse this menu to configure IP and bridge (MAC) static routes.27.1 IP

P-793H User’s Guide28 List of FiguresFigure 125 Network Temporarily Disconnected ... 2

P-793H User’s Guide280 Chapter 27 Static Route Setup`The following table describes the fields in this screen.27.2 Bridge Static Route SetupEnter 3 fr

P-793H User’s GuideChapter 27 Static Route Setup 281Figure 158 Menu 12.3.1: Edit Bridge Static Route`The following table describes the fields in thi

P-793H User’s Guide282 Chapter 27 Static Route Setup

P-793H User’s GuideChapter 28 NAT Setup 283CHAPTER 28NAT SetupUse this menu to configure Network Address Translation (NAT) on the ZyXEL Device.28.1 U

P-793H User’s Guide284 Chapter 28 NAT SetupFigure 159 Menu 4: Applying NAT for Internet AccessThe following figure shows how you apply NAT to the re

P-793H User’s GuideChapter 28 NAT Setup 285The following table describes the fields in this menu.28.2 NAT SetupUse the address mapping sets menus and

P-793H User’s Guide286 Chapter 28 NAT SetupFigure 162 Menu 15.1: Address Mapping SetsSelect the address mapping set you want to modify. The fields i

P-793H User’s GuideChapter 28 NAT Setup 287Note: The Type, Local and Global Start/End IPs are configured in menu 15.1.1.1 (described later) and the va

P-793H User’s Guide288 Chapter 28 NAT SetupFigure 164 Menu 15.1.1.1: Address Mapping RuleThe following table describes the fields in this menu.28.3

P-793H User’s GuideChapter 28 NAT Setup 289Follow these steps to configure a server behind NAT:1 Enter 15 in the main menu to go to Menu 15 - NAT Setu

P-793H User’s GuideList of Figures 29Figure 168 Menu 4: Internet Access & NAT Example ... 29

P-793H User’s Guide290 Chapter 28 NAT SetupThe first entry is for the Default Server. The following table describes the labels in this menu.28.4 Gene

P-793H User’s GuideChapter 28 NAT Setup 291Figure 168 Menu 4: Internet Access & NAT ExampleFrom menu 4 shown above, simply choose the SUA Only o

P-793H User’s Guide292 Chapter 28 NAT SetupFigure 170 Menu 15.2: Specifying an Inside Server28.4.3 Example 3: Multiple Public IP Addresses With Ins

P-793H User’s GuideChapter 28 NAT Setup 293Figure 171 NAT Example 31 In this case you need to configure Address Mapping Set 1 from Menu 15.1 - Addre

P-793H User’s Guide294 Chapter 28 NAT SetupFigure 173 Example 3: Menu 15.1.1.1Figure 174 Example 3: Final Menu 15.1.1Now configure the IGA3 to map

P-793H User’s GuideChapter 28 NAT Setup 295Figure 175 Example 3: Menu 15.228.4.4 Example 4: NAT Unfriendly Application ProgramsSome applications do

P-793H User’s Guide296 Chapter 28 NAT SetupFigure 177 Example 4: Menu 15.1.1.1: Address Mapping RuleAfter you’ve configured your rule, you should be

P-793H User’s GuideChapter 29 Firewall Setup 297CHAPTER 29Firewall SetupUse this menu to activate or deactivate the firewall.29.1 Using ZyXEL Device

P-793H User’s Guide298 Chapter 29 Firewall SetupNote: Configure the firewall rules using the web configurator or CLI commands.

P-793H User’s GuideChapter 30 Filter Configuration 299CHAPTER 30Filter ConfigurationThis chapter shows you how to create and apply filters.30.1 Intro

P-793H User’s GuideCopyright 3CopyrightCopyright © 2006 by ZyXEL Communications Corporation.The contents of this publication may not be reproduced in

P-793H User’s Guide30 List of FiguresFigure 211 Successful Backup Confirmation Screen ... 333F

P-793H User’s Guide300 Chapter 30 Filter Configuration30.1.1 The Filter Structure of the ZyXEL DeviceA filter set consists of one or more filter rule

P-793H User’s GuideChapter 30 Filter Configuration 301Figure 182 Filter Rule Process You can apply up to four filter sets to a particular port to bl

P-793H User’s Guide302 Chapter 30 Filter Configuration1 Enter 21 in the main menu to open menu 21.Figure 183 Menu 21: Filter and Firewall Setup2 Ent

P-793H User’s GuideChapter 30 Filter Configuration 303Figure 185 Menu 21.1.1: Filter Rules SummaryThe following table describes the labels in this s

P-793H User’s Guide304 Chapter 30 Filter ConfigurationRefer to the next section for information on configuring the filter rules.30.2.1 Configuring a

P-793H User’s GuideChapter 30 Filter Configuration 305Figure 186 Menu 21.1.1.1: TCP/IP Filter RuleThe following table describes how to configure you

P-793H User’s Guide306 Chapter 30 Filter ConfigurationThe following figure illustrates the logic flow of an IP filter.Port # Comp Press [SPACE BAR] an

P-793H User’s GuideChapter 30 Filter Configuration 307Figure 187 Executing an IP Filter30.2.3 Configuring a Generic Filter RuleThis section shows y

P-793H User’s Guide308 Chapter 30 Filter ConfigurationFor generic rules, the ZyXEL Device treats a packet as a byte stream as opposed to an IP or IPX

P-793H User’s GuideChapter 30 Filter Configuration 30930.3 Example FilterLet’s look at an example to block outside users from accessing the ZyXEL Dev

P-793H User’s GuideList of Figures 31Figure 254 Red Hat 9.0: KDE: Ethernet Device: General ... 380Fig

P-793H User’s Guide310 Chapter 30 Filter ConfigurationFigure 190 Example Filter: Menu 21.1.3.1The port number for the telnet service (TCP protocol)

P-793H User’s GuideChapter 30 Filter Configuration 3112 Enter 1 or 2 to open Menu 11.x - Remote Node Profile.3 Go to the Edit Filter Sets field, press

P-793H User’s Guide312 Chapter 30 Filter Configuration30.6.1 Applying LAN FiltersLAN traffic filter sets may be useful to block certain packets, redu

P-793H User’s GuideChapter 31 SNMP Configuration 313CHAPTER 31SNMP ConfigurationUse this menu to configure SNMP. See Section 15.6 on page 207 for more

P-793H User’s Guide314 Chapter 31 SNMP Configuration

P-793H User’s GuideChapter 32 System Password 315CHAPTER 32System PasswordUse this menu to change your password. This is the same password used to acc

P-793H User’s Guide316 Chapter 32 System Password

P-793H User’s GuideChapter 33 System Information & Diagnosis 317CHAPTER 33System Information & DiagnosisThis chapter covers SMT menus 24.1 to

P-793H User’s Guide318 Chapter 33 System Information & DiagnosisFigure 198 Menu 24.1: System Maintenance - StatusThe following table describes t

P-793H User’s GuideChapter 33 System Information & Diagnosis 31933.3 System Information and Console Port SpeedThis section describes your system

P-793H User’s Guide32 List of Figures

P-793H User’s Guide320 Chapter 33 System Information & DiagnosisFigure 200 Menu 24.2.1: System Maintenance - InformationThe following table desc

P-793H User’s GuideChapter 33 System Information & Diagnosis 321Figure 201 Menu 24.2.2: System Maintenance: Change Console Port Speed33.4 Log a

P-793H User’s Guide322 Chapter 33 System Information & DiagnosisFigure 203 Examples of Error and Information Messages33.4.2 Syslog LoggingThe Z

P-793H User’s GuideChapter 33 System Information & Diagnosis 323Your ZyXEL Device sends five types of syslog messages. Some examples (not all ZyXE

P-793H User’s Guide324 Chapter 33 System Information & Diagnosis4 PPP log 5 Firewall logFilter log Message FormatSdcmdSyslogSend(SYSLOG_FILLOG, SY

P-793H User’s GuideChapter 33 System Information & Diagnosis 32533.5 DiagnosticThe diagnostic facility allows you to test the different aspects o

P-793H User’s Guide326 Chapter 33 System Information & Diagnosis

P-793H User’s GuideChapter 34 Firmware and Configuration File Maintenance 327CHAPTER 34Firmware and Configuration FileMaintenanceThis chapter tells yo

P-793H User’s Guide328 Chapter 34 Firmware and Configuration File MaintenanceThe following table is a summary. Please note that the internal filename

P-793H User’s GuideChapter 34 Firmware and Configuration File Maintenance 329Figure 206 Menu 24.5: Backup Configuration34.3.2 Using the FTP Command

P-793H User’s GuideList of Tables 33List of TablesTable 1 LEDs ...

P-793H User’s Guide330 Chapter 34 Firmware and Configuration File Maintenance34.3.4 GUI-based FTP ClientsThe following table describes some of the co

P-793H User’s GuideChapter 34 Firmware and Configuration File Maintenance 3312 Put the SMT in command interpreter (CI) mode by entering 8 in Menu 24 –

P-793H User’s Guide332 Chapter 34 Firmware and Configuration File MaintenanceRefer to Section 34.3.5 on page 330 to read about configurations that dis

P-793H User’s GuideChapter 34 Firmware and Configuration File Maintenance 333Figure 211 Successful Backup Confirmation Screen34.4 Restore Configura

P-793H User’s Guide334 Chapter 34 Firmware and Configuration File Maintenance2 Enter “open”, followed by a space and the IP address of your ZyXEL Devi

P-793H User’s GuideChapter 34 Firmware and Configuration File Maintenance 3353 Run the HyperTerminal program by clicking Transfer, then Send File as s

P-793H User’s Guide336 Chapter 34 Firmware and Configuration File MaintenanceFigure 218 Menu 24.7.1: System Maintenance - Upload System Firmware34.5

P-793H User’s GuideChapter 34 Firmware and Configuration File Maintenance 3374 Enter your password as requested (the default is “1234”).5 Enter “bin”

P-793H User’s Guide338 Chapter 34 Firmware and Configuration File Maintenance3 Enter the command “sys stdio 0” to disable the console timeout, so the

P-793H User’s GuideChapter 34 Firmware and Configuration File Maintenance 339Figure 221 Menu 24.7.1 As Seen Using the Console Port2 After the "

P-793H User’s Guide34 List of TablesTable 39 Firewall > Rules ...

P-793H User’s Guide340 Chapter 34 Firmware and Configuration File MaintenanceFigure 223 Menu 24.7.2 As Seen Using the Console Port 2 After the "

P-793H User’s GuideChapter 35 Menus 24.8 to 24.11 341CHAPTER 35Menus 24.8 to 24.11This chapter leads you through SMT menus 24.8 to 24.11.35.1 Command

P-793H User’s Guide342 Chapter 35 Menus 24.8 to 24.11For example,sys filter netbios config <type> <on|off>means that you must specify the

P-793H User’s GuideChapter 35 Menus 24.8 to 24.11 34335.2.1 Budget ManagementMenu 24.9.1 shows the budget management statistics for outgoing calls. E

P-793H User’s Guide344 Chapter 35 Menus 24.8 to 24.1135.3 Time and Date SettingThe ZyXEL Device’s Real Time Chip (RTC) keeps track of the time and da

P-793H User’s GuideChapter 35 Menus 24.8 to 24.11 345The following table describes the fields in this screen.Table 126 Menu 24.10: System Maintenanc

P-793H User’s Guide346 Chapter 35 Menus 24.8 to 24.1135.4 Remote ManagementTo disable remote management of a service, select Disable in the correspon

P-793H User’s GuideChapter 35 Menus 24.8 to 24.11 347The following table describes the fields in this screen.35.4.1 Remote Management LimitationsRemo

P-793H User’s Guide348 Chapter 35 Menus 24.8 to 24.11

P-793H User’s GuideChapter 36 IP Routing Policy Setup 349CHAPTER 36IP Routing Policy SetupUse this menu to look at and configure policy routes.36.1 P

P-793H User’s GuideList of Tables 35Table 82 Logs > View Log ...

P-793H User’s Guide350 Chapter 36 IP Routing Policy SetupIPPR follows the existing packet filtering facility of RAS in style and in implementation. 36

P-793H User’s GuideChapter 36 IP Routing Policy Setup 351Figure 233 Menu 25.1: IP Routing Policy SetupThe following table describes the labels in th

P-793H User’s Guide352 Chapter 36 IP Routing Policy Setup36.6 IP Routing PolicyUse this menu to configure policy routes. To open this menu, select Ed

P-793H User’s GuideChapter 36 IP Routing Policy Setup 35336.7 IP Policy Routing ExampleIf a network has both Internet and remote node connections, yo

P-793H User’s Guide354 Chapter 36 IP Routing Policy SetupFigure 235 IP Routing Policy Example To force Web packets coming from clients with IP addre

P-793H User’s GuideChapter 36 IP Routing Policy Setup 3554 Create another rule in menu 25.1 for this rule to route packets from any host (IP=0.0.0.0 m

P-793H User’s Guide356 Chapter 36 IP Routing Policy Setup

P-793H User’s GuideChapter 37 Schedule Setup 357CHAPTER 37Schedule SetupUse this menu to look at and configure the schedule sets in the ZyXEL Device.3

P-793H User’s Guide358 Chapter 37 Schedule SetupThe following table describes the labels in this menu.37.3 Schedule Set SetupThis menu is only applic

P-793H User’s GuideChapter 37 Schedule Setup 359The following table describes the labels in this menu.Table 132 Menu 26.1: Schedule Set SetupFIELD D

P-793H User’s Guide36 List of TablesTable 125 Menu 24.9.1 - Budget Management ... 343

P-793H User’s Guide360 Chapter 37 Schedule Setup

P-793H User’s GuideChapter 38 Troubleshooting 361CHAPTER 38TroubleshootingThis chapter covers potential problems and the corresponding remedies.38.1

P-793H User’s Guide362 Chapter 38 Troubleshooting38.3 Problems with the WANTable 135 Troubleshooting the WANPROBLEM CORRECTIVE ACTIONThe DSL LED is

P-793H User’s GuideChapter 38 Troubleshooting 36338.4 Problems Accessing the ZyXEL DeviceTable 136 Troubleshooting Accessing the ZyXEL DevicePROBLE

P-793H User’s Guide364 Chapter 38 Troubleshooting

P-793H User’s GuideAppendix A Product Specifications 365Appendix AProduct SpecificationsTable 137 DeviceDefault IP Address 192.168.1.1Default Subnet

P-793H User’s Guide366 Appendix A Product SpecificationsATM Support Multiple protocols over AAL5 (RFC1483)PPP over ATM (RFC 2364)PPP over Ethernet (R

P-793H User’s GuideAppendix B Wall-mounting Instructions 367APPENDIX BWall-mounting InstructionsDo the following to hang your ZyXEL Device on a wall.N

P-793H User’s Guide368 Appendix B Wall-mounting Instructions

P-793H User’s GuideAppendix C Setting up Your Computer’s IP Address 369Appendix CSetting up Your Computer’s IP AddressAll computers must have a 10M or

P-793H User’s GuideList of Tables 37Table 168 IKE Logs ...

P-793H User’s Guide370 Appendix C Setting up Your Computer’s IP AddressInstalling ComponentsThe Network window Configuration tab displays a list of in

P-793H User’s GuideAppendix C Setting up Your Computer’s IP Address 371Figure 242 Windows 95/98/Me: TCP/IP Properties: IP Address3 Click the DNS Con

P-793H User’s Guide372 Appendix C Setting up Your Computer’s IP Address• If you do not know your gateway’s IP address, remove previously installed gat

P-793H User’s GuideAppendix C Setting up Your Computer’s IP Address 3732 In the Control Panel, double-click Network Connections (Network and Dial-up C

P-793H User’s Guide374 Appendix C Setting up Your Computer’s IP AddressFigure 247 Windows XP: Local Area Connection Properties5 The Internet Protoco

P-793H User’s GuideAppendix C Setting up Your Computer’s IP Address 375Figure 248 Windows XP: Internet Protocol (TCP/IP) Properties6 If you do not

P-793H User’s Guide376 Appendix C Setting up Your Computer’s IP AddressFigure 249 Windows XP: Advanced TCP/IP Properties7 In the Internet Protocol T

P-793H User’s GuideAppendix C Setting up Your Computer’s IP Address 377Figure 250 Windows XP: Internet Protocol (TCP/IP) Properties8 Click OK to clo

P-793H User’s Guide378 Appendix C Setting up Your Computer’s IP AddressFigure 251 Macintosh OS X: Apple Menu2 Click Network in the icon bar. • Sel

P-793H User’s GuideAppendix C Setting up Your Computer’s IP Address 3796 Restart your computer (if prompted).Verifying SettingsCheck your TCP/IP prope

P-793H User’s Guide38 List of Tables

P-793H User’s Guide380 Appendix C Setting up Your Computer’s IP AddressFigure 254 Red Hat 9.0: KDE: Ethernet Device: General • If you have a dynamic

P-793H User’s GuideAppendix C Setting up Your Computer’s IP Address 381Figure 256 Red Hat 9.0: KDE: Network Configuration: Activate 7 After the netw

P-793H User’s Guide382 Appendix C Setting up Your Computer’s IP Address2 If you know your DNS server IP address(es), enter the DNS server information

P-793H User’s GuideAppendix D Pop-up Windows, JavaScripts and Java Permissions 383APPENDIX DPop-up Windows, JavaScripts and JavaPermissionsIn order to

P-793H User’s Guide384 Appendix D Pop-up Windows, JavaScripts and Java PermissionsFigure 263 Internet Options3 Click Apply to save this setting.Enab

P-793H User’s GuideAppendix D Pop-up Windows, JavaScripts and Java Permissions 385Figure 264 Internet Options3 Type the IP address of your device (t

P-793H User’s Guide386 Appendix D Pop-up Windows, JavaScripts and Java Permissions5 Click Close to return to the Privacy screen. 6 Click Apply to save

P-793H User’s GuideAppendix D Pop-up Windows, JavaScripts and Java Permissions 387Figure 267 Security Settings - Java ScriptingJava Permissions1 Fro

P-793H User’s Guide388 Appendix D Pop-up Windows, JavaScripts and Java PermissionsFigure 268 Security Settings - Java JAVA (Sun)1 From Internet Expl

P-793H User’s GuideAppendix E Services 389APPENDIX EServicesThe following table lists some commonly-used services and their associated protocols and p

P-793H User’s GuidePreface 39PrefaceCongratulations on your purchase of the P-793 G.SHDSL security gateway (“ZyXEL Device”). The ZyXEL Device has a 4-

P-793H User’s Guide390 Appendix E ServicesHTTP TCP 80 Hyper Text Transfer Protocol - a client/server protocol for the world wide web.HTTPS TCP 443 HTT

P-793H User’s GuideAppendix E Services 391RCMD TCP 512 Remote Command Service.REAL_AUDIO TCP 7070 A streaming audio service that enables real time sou

P-793H User’s Guide392 Appendix E ServicesTFTP UDP 69 Trivial File Transfer Protocol is an Internet file transfer protocol similar to FTP, but uses th

P-793H User’s GuideAppendix F IP Addresses and Subnetting 393Appendix FIP Addresses and SubnettingThis appendix introduces IP addresses, IP address cl

P-793H User’s Guide394 Appendix F IP Addresses and SubnettingThe following table shows the network number and host ID arrangement for classes A, B and

P-793H User’s GuideAppendix F IP Addresses and Subnetting 395Subnet MasksA subnet mask is used to determine which bits are part of the network number,

P-793H User’s Guide396 Appendix F IP Addresses and SubnettingThe first mask shown is the class “C” natural mask. Normally if no mask is specified it i

P-793H User’s GuideAppendix F IP Addresses and Subnetting 397The remaining 7 bits determine the number of hosts each subnet can have. Host IDs of all

P-793H User’s Guide398 Appendix F IP Addresses and SubnettingSubnet Mask (Binary) 11111111.11111111.11111111. 11000000Subnet Address: 192.168.1.0 Low

P-793H User’s GuideAppendix F IP Addresses and Subnetting 399Example Eight SubnetsSimilarly use a 27-bit mask to create 8 subnets (000, 001, 010, 011,

P-793H User’s Guide4 CertificationsCertificationsFederal Communications Commission (FCC) Interference StatementThe device complies with Part 15 of FCC

P-793H User’s Guide40 PrefacePlease go to http://www.zyxel.com for product news, firmware, updated documents, and other support materials.User Guide F

P-793H User’s Guide400 Appendix F IP Addresses and SubnettingThe following table is a summary for class “B” subnet planning. Table 153 Class B Subne

P-793H User’s GuideAppendix G Command Interpreter 401Appendix GCommand InterpreterThe following describes how to use the command interpreter. You can

P-793H User’s Guide402 Appendix G Command Interpreter

P-793H User’s GuideAppendix H Firewall Commands 403Appendix HFirewall CommandsThe following describes the firewall commands. Table 154 Firewall Comm

P-793H User’s Guide404 Appendix H Firewall Commandsconfig edit firewall e-mail return-addr <e-mail address>This command sets the source e-mail a

P-793H User’s GuideAppendix H Firewall Commands 405config edit firewall attack minute-low <0-255>This command sets the threshold of half-open se

P-793H User’s Guide406 Appendix H Firewall CommandsConfig edit firewall set <set #> log <yes | no>This command sets whether or not the ZyX

P-793H User’s GuideAppendix H Firewall Commands 407config edit firewall set <set #> rule <rule #> destaddr-subnet <ip address> <s

P-793H User’s Guide408 Appendix H Firewall Commands

P-793H User’s GuideAppendix I NetBIOS Filter Commands 409Appendix INetBIOS Filter CommandsThe following describes the NetBIOS packet filter commands.I

P-793H User’s GuideChapter 1 Getting To Know Your ZyXEL Device 41CHAPTER 1Getting To Know Your ZyXELDeviceThis chapter introduces the main features an

P-793H User’s Guide410 Appendix I NetBIOS Filter CommandsThe filter types and their default settings are as follows.NetBIOS Filter ConfigurationSyntax

P-793H User’s GuideAppendix J Log Descriptions 411Appendix JLog DescriptionsThis appendix provides descriptions of example log messages. Table 156 S

P-793H User’s Guide412 Appendix J Log Descriptions Successful HTTPS login Someone has logged on to the router's web configurator interface using

P-793H User’s GuideAppendix J Log Descriptions 413 Table 159 TCP Reset LogsLOG MESSAGE DESCRIPTIONUnder SYN flood attack, sent TCP RSTThe router se

P-793H User’s Guide414 Appendix J Log Descriptions Table 161 ICMP LogsLOG MESSAGE DESCRIPTIONFirewall default policy: ICMP <Packet Direction>

P-793H User’s GuideAppendix J Log Descriptions 415 ppp:LCP Closing The PPP connection’s Link Control Protocol stage is closing.ppp:IPCP Closing The P

P-793H User’s Guide416 Appendix J Log Descriptions Connecting to content filter server failThe connection to the external content filtering server fai

P-793H User’s GuideAppendix J Log Descriptions 417 Table 167 IPSec LogsLOG MESSAGE DESCRIPTIONDiscard REPLAY packet The router received and discard

P-793H User’s Guide418 Appendix J Log DescriptionsCannot resolve Secure Gateway Addr for rule <%d>The router couldn’t resolve the IP address fro

P-793H User’s GuideAppendix J Log Descriptions 419XAUTH fail! Username: <Username>The router was not able to use extended authentication to auth

P-793H User’s Guide42 Chapter 1 Getting To Know Your ZyXEL DeviceWhen the firewall is on, all incoming traffic from the Internet to the your network i

P-793H User’s Guide420 Appendix J Log Descriptions Rule [%d] phase 2 mismatch The listed rule’s IKE phase 2 did not match between the router and the p

P-793H User’s GuideAppendix J Log Descriptions 421 Rcvd data <size> too large! Max size allowed: <max size>The router received directory d

P-793H User’s Guide422 Appendix J Log Descriptions 26 Database method failed.27 Path was not verified.28 Maximum path length reached.Table 171 802.1

P-793H User’s GuideAppendix J Log Descriptions 423 Table 172 ACL Setting NotesPACKET DIRECTION DIRECTION DESCRIPTION(L to W) LAN to WAN ACL set for

P-793H User’s Guide424 Appendix J Log Descriptions The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the

P-793H User’s GuideAppendix J Log Descriptions 425Log CommandsThis section provides some general examples of how to use the log commands. The items th

P-793H User’s Guide426 Appendix J Log Descriptions• Use the sys logs category display command to show the log settings for all of the log categories.•

P-793H User’s GuideIndex 427IndexAactive protocol 161AH 161and encapsulation 161ESP 161address mapping 115AH 161and transport mode 162alert 233anti-pr

P-793H User’s Guide428 Indexbrute-force 122, 123IP spoofing 122LAN 122ping of death 122SYN flood 122teardrop 122threshold. See DoS threshold.types of

P-793H User’s GuideIndex 429negotiation mode 156peer identity 158pre-shared key 158proposal 157IKE SA. See also VPN.Internet Control Message Protocol.

P-793H User’s GuideChapter 1 Getting To Know Your ZyXEL Device 43Figure 3 LEDsThe following table describes the LEDs.Table 1 LEDsLED COLOR STATUS

P-793H User’s Guide430 Indexmany-to-one 109one-to-one 109outside 107port forwarding. See port forwarding.server 108, 109SUA. See SUA.types of mapping

P-793H User’s GuideIndex 431Ssafety warnings 5schedule set 357Select Mode screen 47Simple Network Management Protocol. See SNMP.Single User Account. S

P-793H User’s Guide432 IndexWWWremote management 204www.dyndns.org 199

P-793H User’s Guide44 Chapter 1 Getting To Know Your ZyXEL Device

P-793H User’s GuideChapter 2 Introducing the Web Configurator 45CHAPTER 2Introducing the WebConfiguratorThis chapter describes how to access and navig

P-793H User’s Guide46 Chapter 2 Introducing the Web ConfiguratorFigure 4 Login Screen6 If you entered the user password, the Status screen appears.

P-793H User’s GuideChapter 2 Introducing the Web Configurator 47Figure 6 Select a ModeNote: The management session automatically times out when the

P-793H User’s Guide48 Chapter 2 Introducing the Web ConfiguratorFigure 7 Web Configurator: Main Screen Note: Click the icon (located in the top ri

P-793H User’s GuideChapter 2 Introducing the Web Configurator 49LAN IP Use this screen to configure LAN TCP/IP settings and other advanced properties.

P-793H User’s GuideSafety Warnings 5Safety WarningsFor your safety, be sure to read and follow all warning notices and instructions.• Do NOT use this

P-793H User’s Guide50 Chapter 2 Introducing the Web Configurator2.4 Status Screen The following summarizes how to navigate the web configurator from

P-793H User’s GuideChapter 2 Introducing the Web Configurator 51Figure 8 StatusThe following table describes the labels shown in the Status screen.T

P-793H User’s Guide52 Chapter 2 Introducing the Web Configurator2.4.1 Status: Bandwidth StatusThis is the same screen discussed in Figure 93 on page

P-793H User’s GuideChapter 2 Introducing the Web Configurator 532.4.2 Status: Packet StatisticsClick the Packet Statistics hyperlink in the Status sc

P-793H User’s Guide54 Chapter 2 Introducing the Web Configurator2.4.3 Status: VPN StatusThis is the same screen discussed in Figure 82 on page 177.2.

P-793H User’s GuideChapter 3 Wizards 55CHAPTER 3WizardsUse these screens to configure Internet access or to configure basic bandwidth management.Note:

P-793H User’s Guide56 Chapter 3 Wizards3.1 Internet Setup WizardUse these screens to configure Internet access settings. To access this wizard, click

P-793H User’s GuideChapter 3 Wizards 573.1.2 Screen 2These screens let you enter the rest of the Internet settings, which depend on the encapsulation

P-793H User’s Guide58 Chapter 3 WizardsThis screen appears if your Internet connection uses PPPoE encapsulation.Figure 13 Internet Setup Wizard: ISP

P-793H User’s GuideChapter 3 Wizards 59This screen appears if your Internet connection uses RFC1483 encapsulation.Figure 14 Internet Setup Wizard: I

P-793H User’s Guide6 Safety WarningsThis product is recyclable. Dispose of it properly.

P-793H User’s Guide60 Chapter 3 WizardsFigure 15 Internet Setup Wizard: ISP Parameters (PPPoA)The following table describes the fields in this scree

P-793H User’s GuideChapter 3 Wizards 61Figure 16 Internet Setup Wizard: Summary Screen3 Use the read-only summary table to check whether what you h

P-793H User’s Guide62 Chapter 3 WizardsThe following table describes the services you can select.To access this wizard, open the web configurator (see

P-793H User’s GuideChapter 3 Wizards 633.2.1 Screen 1Activate bandwidth management and select to allocate bandwidth to packets based on the services.

P-793H User’s Guide64 Chapter 3 WizardsFigure 18 Bandwidth Management Wizard: ConfigurationThe following table describes the labels in this screen.3

P-793H User’s GuideChapter 3 Wizards 65Figure 19 Bandwidth Management Wizard: Complete

P-793H User’s Guide66 Chapter 3 Wizards

P-793H User’s GuideChapter 4 Point-to-point Configuration 67CHAPTER 4Point-to-point ConfigurationThis chapter introduces point-to-point connections.4.

P-793H User’s Guide68 Chapter 4 Point-to-point Configuration4.2 Point-to-point Connection ProcedureFollow these directions to set up a point-to-point

P-793H User’s GuideChapter 4 Point-to-point Configuration 695 In the Service Mode field, select the same type of connection you selected for the serve

P-793H User’s GuideZyXEL Limited Warranty 7ZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is free from an

P-793H User’s Guide70 Chapter 4 Point-to-point Configuration

P-793H User’s GuideChapter 5 WAN Setup 71CHAPTER 5WAN SetupThis chapter describes how to configure WAN settings.5.1 WAN Overview A WAN (Wide Area Net

P-793H User’s Guide72 Chapter 5 WAN SetupBy implementing PPPoE directly on the ZyXEL Device (rather than individual computers), the computers on the L

P-793H User’s GuideChapter 5 WAN Setup 735.1.4 IP Address AssignmentA static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the

P-793H User’s Guide74 Chapter 5 WAN Setup5.2 Metric The metric represents the "cost of transmission". A router determines the best route fo

P-793H User’s GuideChapter 5 WAN Setup 75Maximum Burst Size (MBS) is the maximum number of cells that can be sent at the PCR. After MBS is reached, ce

P-793H User’s Guide76 Chapter 5 WAN SetupThe VBR-nRT (non real-time Variable Bit Rate) type is used with bursty connections that do not require closel

P-793H User’s GuideChapter 5 WAN Setup 77Figure 23 WAN > Internet ConnectionThe following table describes the labels in this screen. Table 15 W

P-793H User’s Guide78 Chapter 5 WAN SetupUser Name (PPPoA and PPPoE only) Enter the user name exactly as your ISP assigned. If assigned a name in the

P-793H User’s GuideChapter 5 WAN Setup 795.4.1 Configuring Advanced Internet Connection Use this screen to edit your ZyXEL Device's advanced set

P-793H User’s Guide8 Customer SupportCustomer SupportPlease have the following information ready when you contact customer support.• Product model and

P-793H User’s Guide80 Chapter 5 WAN SetupThe following table describes the labels in this screen. Table 16 WAN > Internet Connection > Advance

P-793H User’s GuideChapter 5 WAN Setup 815.5 Configuring More ConnectionsThis section describes the protocol-independent parameters for a remote netw

P-793H User’s Guide82 Chapter 5 WAN SetupFigure 26 WAN > More Connections > EditThe following table describes the labels in this screen. Table

P-793H User’s GuideChapter 5 WAN Setup 83Password (PPPoA and PPPoE encapsulation only) Enter the password associated with the user name above.Service

P-793H User’s Guide84 Chapter 5 WAN Setup5.5.2 Configuring More Connections Advanced Setup Use this screen to edit your ZyXEL Device's advanced

P-793H User’s GuideChapter 5 WAN Setup 855.6 Traffic Redirect Traffic redirect forwards traffic to a backup gateway when the ZyXEL Device cannot conn

P-793H User’s Guide86 Chapter 5 WAN SetupFigure 29 Traffic Redirect LAN Setup5.7 Dial Backup InterfaceThe Dial Backup port can be used in reserve,

P-793H User’s GuideChapter 5 WAN Setup 87Figure 30 WAN > WAN Backup SetupThe following table describes the labels in this screen. Table 20 WAN

P-793H User’s Guide88 Chapter 5 WAN SetupRecovery Interval When the ZyXEL Device is using a lower priority connection (usually a WAN backup connectio

P-793H User’s GuideChapter 5 WAN Setup 895.8.1 Advanced Backup Setup Use this screen to change your ZyXEL Device’s advanced dial backup settings. Cli

P-793H User’s GuideCustomer Support 9+” is the (prefix) number you enter to make an international telephone [email protected] +47-22-80-61-8

P-793H User’s Guide90 Chapter 5 WAN SetupThe following table describes the labels in this screen. Table 21 WAN > WAN Backup Setup > Advanced S

P-793H User’s GuideChapter 5 WAN Setup 915.8.2 Advanced Modem Settings for Dial Backup Use this screen to change your ZyXEL Device’s modem settings f

P-793H User’s Guide92 Chapter 5 WAN SetupFigure 32 WAN > WAN Backup Setup > Advanced Setup > EditThe following table describes the labels i

P-793H User’s GuideChapter 5 WAN Setup 93Call Back Delay Enter a number of seconds for the ZyXEL Device to wait between dropping a callback request ca

P-793H User’s Guide94 Chapter 5 WAN Setup

P-793H User’s GuideChapter 6 LAN Setup 95CHAPTER 6LAN SetupThis chapter describes how to configure LAN settings.6.1 LAN Overview A Local Area Network

P-793H User’s Guide96 Chapter 6 LAN Setup6.1.2 DHCP SetupDHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients

P-793H User’s GuideChapter 6 LAN Setup 976.1.4 DNS Server Address AssignmentUse DNS (Domain Name System) to map a domain name to its corresponding IP

P-793H User’s Guide98 Chapter 6 LAN Setupare told otherwise. Let's say you select 192.168.1.0 as the network number; which covers 254 individual

P-793H User’s GuideChapter 6 LAN Setup 99• Out Only - the ZyXEL Device will send out RIP packets but will not accept any RIP packets received.• None -