background image

Prestige 660W/HW Series Compact Guide 

35

 

Table 7 Rule Summary

 

LABEL DESCRIPTION 

The following read-only fields summarize the rules you have created that apply to traffic 
traveling in the selected packet direction. The firewall rules that you configure 
(summarized below) take priority over the general firewall action settings above. 

No. 

This is your firewall rule number. The ordering of your rules is 
important as rules are applied in turn. The 

Move 

field below allows 

you to reorder your rules. 

Source IP 

This drop-down list box displays the source addresses or ranges of 
addresses to which this firewall rule applies. Please note that a 
blank source or destination address is equivalent to 

Any

Destination IP 

This drop-down list box displays the destination addresses or 
ranges of addresses to which this firewall rule applies. Please note 
that a blank source or destination address is equivalent to 

Any

Service 

This drop-down list box displays the services to which this firewall 
rule applies. Please note that a blank service type is equivalent to 

Any

.  

Action 

This is the specified action for that rule, either 

Block

 or 

Forward

Note that 

Block

 means the firewall silently discards the packet.

 

Log 

This field shows you if a log is created for packets that match the 
rule (

Match

), don't match the rule (

Not Match

), both (

Both

) or no 

log is created (

None

).

 

Rules Reorder 

You may reorder your rules using this function. Select the rule you 
want to move. The ordering of your rules is important as rules are 
applied in turn. 

To Rule 
Number 

Select the number you want to move the rule to. 

Move Click 

Move

 to move the rule. 

Follow these directions to create a new rule. 

Step 1. 

In the 

Summary

 screen, click a rule’s index number. The 

Edit Rule

 screen 

opens. 

Step 2. 

In the 

Available Services

 text box, select the services you want. Customize 

ports for services not predefined by the Prestige by clicking the 

Edit 

Summary of Contents for Prestige 660W Series

Page 1: ...Prestige 660W HW Series ADSL 2 2 Gateway with 802 11g Wireless Compact Guide Version 3 40 May 2004...

Page 2: ...ows 2000 NT XP 14 4 3 Checking Updating Your Computer s IP Address 15 4 4 Testing the Connection to the Prestige 15 5 Configuring Your Prestige 17 5 1 Accessing Your Prestige Via Web Configurator 17 5...

Page 3: ...s Compact Guide 3 6 5 Configuring SUA Server 30 6 6 Firewall Overview 32 6 7 Enabling the Firewall 33 6 8 Procedure for Configuring Firewall Rules 33 6 9 Configuring Source and Destination Addresses 3...

Page 4: ...MATION Your device s WAN IP Address if given __________________ DNS Server IP Address if given Primary __________________ Secondary _________________ Virtual Path Identifier VPI ____________ Virtual C...

Page 5: ...Connect to a computer external hub using an Ethernet cable POWER Connect to a power source using the power adaptor for your region see your User s Guide After you ve made the connections connect the...

Page 6: ...ults password is 1234 LAN IP address 192 168 1 1 etc see your User s Guide for details 2 2 The Front Panel LEDs Figure 2 P660HW Front Panel Refer to the following table for more detailed LED descripti...

Page 7: ...a LAN 1 to LAN 4 Off The LAN is not connected On The Prestige is ready but is not sending receiving data through the wireless LAN Blinking The Prestige is sending receiving data through the wireless L...

Page 8: ...ION Green On The Prestige is receiving power PWR Off The Prestige is not receiving power On The Prestige is functioning properly Green Blinking The Prestige is rebooting Red On Power to the Prestige i...

Page 9: ...s ready but is not sending receiving data On The Prestige is ready but is not sending receiving data through the wireless LAN Blinking The Prestige is sending receiving data through the wireless LAN W...

Page 10: ...Prestige automatically detects and configures your Internet connection This may take about two minutes Step 3 If you have a PPPoE or PPPoA connection type a screen displays prompting you to enter you...

Page 11: ...o 192 168 1 254 range with a subnet mask of 255 255 255 0 This is necessary to ensure that your computer can communicate with your Prestige Your computer must have an Ethernet card and TCP IP installe...

Page 12: ...t your network adapter s TCP IP entry and click Properties 4 Click the IP Address tab If your IP address is dynamic select Obtain an IP address automatically If you have a static IP address select Spe...

Page 13: ...information select Enable DNS and type the information in the fields below you may not need to fill them all in 6 Click the Gateway tab If you do not know your gateway s IP address remove previously i...

Page 14: ...anel 2 In Windows XP click Network Connections In Windows 2000 NT click Network and Dial up Connections 3 Right click Local Area Connection and then click Properties 4 Select Internet Protocol TCP IP...

Page 15: ...r Computer s IP Address 1 In the computer click Start All Programs Accessories and then Command Prompt 2 In the Command Prompt window type ipconfig and then press ENTER to verify that your computer s...

Page 16: ...of data Reply from 192 168 1 1 bytes 32 time 10ms TTL 254 Reply from 192 168 1 1 bytes 32 time 10ms TTL 254 Reply from 192 168 1 1 bytes 32 time 10ms TTL 254 Reply from 192 168 1 1 bytes 32 time 10ms...

Page 17: ...er 192 168 1 1 as the web site address Figure 4 Entering Prestige LAN IP Address in Internet Explorer Step 2 An Enter Network Password window displays Enter the user name admin is the default password...

Page 18: ...urator Site Map Screen The Prestige automatically times out after five minutes of inactivity Simply log back into the Prestige if this happens to you 5 2 Common Screen Command Buttons The following ta...

Page 19: ...ult if your ISP allows multiple computers to share an Internet account Otherwise select Bridge Select the encapsulation type your ISP uses from the Encapsulation drop down list box Choices vary depend...

Page 20: ...connection up all the time and specify an idle time out period in seconds in the Max Idle Timeout field Select Nailed Up Connection when you want your connection up all the time The Prestige will try...

Page 21: ...he ENET ENCAP Gateway field enter the gateway IP address given by your ISP Refer to Figure 8 for other field descriptions Figure 11 Internet Connection with PPPoA Refer to Figure 8 for field descripti...

Page 22: ...the LAN information on the Prestige click Change LAN Configurations Otherwise click Save Settings to save the configuration and skip the following step Figure 12 Wizard Screen 3 Step 5 If you want to...

Page 23: ...default gateway and DNS servers to computer systems that support the DHCP client Select Off to disable DHCP server When DHCP server is used set the following items Specify the first of the contiguous...

Page 24: ...ser and navigate to www zyxel com Internet access is just the beginning Refer to the User s Guide for more detailed information on the complete range of Prestige features If you cannot access the Inte...

Page 25: ...ss various services the Internet email printer services etc on the wired network without additional expensive network cabling infrastructure In effect a wireless LAN environment provides you the freed...

Page 26: ...e ESSID through passive scanning Channel ID The radio frequency used by IEEE 802 11b wireless devices is called a channel Select a channel from the drop down list box RTS CTS Threshold Select this opt...

Page 27: ...bit WEP then enter 29 ASCII characters or 58 hexadecimal characters 0 9 A F You must configure all four keys but only one key can be activated at any one time The default key is key 1 The wireless cl...

Page 28: ...lter LABEL DESCRIPTION Active Select Yes from the drop down list box to enable MAC address filtering Action Define the filter action for the list of MAC addresses in the MAC Address table Select Deny...

Page 29: ...nerated and distributed by the authentication server It includes a per packet key mixing function a Message Integrity Check MIC named Michael an extended initialization vector IV with sequencing rules...

Page 30: ...resses 5 Server This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world 6 5 Configuring SUA Server An SUA server set is a list of insi...

Page 31: ...End Port field To forward a series of ports type the start port number here and the end port number in the End Port field End Port No Type a port number in this field To forward only one port type th...

Page 32: ...y of your network The Prestige also has packet filtering capabilities When activated the firewall allows all traffic to the Internet that originates from the LAN and blocks all traffic to the LAN that...

Page 33: ...en Enable or activate the firewall by selecting the Enable Firewall check box as seen in the following screen Figure 20 Enabling the Firewall 6 8 Procedure for Configuring Firewall Rules From the main...

Page 34: ...ON The default action for packets not matching following rules Should packets that do not match the following rules be blocked or forwarded Make your choice from the drop down list box Note that block...

Page 35: ...t a blank source or destination address is equivalent to Any Service This drop down list box displays the services to which this firewall rule applies Please note that a blank service type is equivale...

Page 36: ...prehensive list of port numbers and services visit the IANA Internet Assigned Number Authority web site Step 3 Configure the Source Address and Destination Address for the rule Figure 22 Creating Edit...

Page 37: ...ed Services box on the right then click Edit Available Service Click this button to go to the list of available services Action for Matched Packets Should packets that match this rule be blocked or fo...

Page 38: ...TION Address Type Do you want your rule to apply to packets with a particular single IP address a range of IP addresses e g 192 168 1 10 to 192 169 1 50 a subnet or any IP address Select an option fro...

Page 39: ...Prestige and your LAN computers Verify that the IP address subnet mask of the Prestige and the LAN computers are in the same IP address range Cannot ping any computer on the WLAN Make sure the WLAN L...

Page 40: ...Prestige 660W HW Series Compact Guide 40...

Reviews: