ZyXEL Communications P-660HWP-D1, User Manual

Page: 240 / 374

Chapter 17 Remote Management Configuration
P-660HWP-D1 User’s Guide
240
Figure 137 Remote Management: ICMP
The following table describes the labels in this screen.
17.9 TR-069
TR-069 is a DSL Forum standard that defines how CPE (Customer Premise Equipment), for
example your P-660HWP-D1, can be managed over the WAN by an Auto Configuration
Server (ACS) such as ZyXEL’s CNM Access. TR-069 is based on sending RPCs (Remote
Procedure Call) between an ACS and a client device. RPCs are sent in XML (Extensible
Markup Language) format over HTTP or HTTPS.
An administrator can use CNM Access to remotely set up the ZyXEL device, modify settings,
perform firmware upgrades as well as monitor and diagnose the ZyXEL device. All you have
to do is enable the device to be managed by CNM Access and specify the CNM Access IP
address or domain name and username and password.
Table 104 Remote Management: ICMP
LABEL DESCRIPTION
ICMP Internet Control Message Protocol is a message control and error-reporting
protocol between a host server and a gateway to the Internet. ICMP uses Internet
Protocol (IP) datagrams, but the messages are processed by the TCP/IP software
and directly apparent to the application user.
Respond to Ping
on
The P-660HWP-D1 will not respond to any incoming Ping requests when Disable
is selected. Select LAN to reply to incoming LAN Ping requests. Select WAN to
reply to incoming WAN Ping requests. Otherwise select LAN & WAN to reply to
both incoming LAN and WAN Ping requests.
Do not respond to
requests for
unauthorized
services
Select this option to prevent hackers from finding the P-660HWP-D1 by probing for
unused ports. If you select this option, the P-660HWP-D1 will not respond to port
request(s) for unused ports, thus leaving the unused ports and the P-660HWP-D1
unseen. By default this option is not selected and the P-660HWP-D1 will reply with
an ICMP Port Unreachable packet for a port probe on its unused UDP ports, and a
TCP Reset packet for a port probe on its unused TCP ports.
Note that the probing packets must first traverse the P-660HWP-D1's firewall
mechanism before reaching this anti-probing mechanism. Therefore if the firewall
mechanism blocks a probing packet, the P-660HWP-D1 reacts based on the
corresponding firewall policy to send a TCP reset packet for a blocked TCP packet
or an ICMP port-unreachable packet for a blocked UDP packets or just drop the
packets without sending a response packet.
Apply Click Apply to save your customized settings and exit this screen.
Cancel Click Cancel to begin configuring this screen afresh.