ZyXEL Communications ZyAIR G-2000 Plus, User Manual, Page: 40 / 430

ZyAIR G-2000 Plus User’s Guide
39 Chapter 1 Getting to Know Your ZyAIR
1.2.2.9 Firewall
The ZyAIR employs a stateful inspection firewall with DoS (Denial of Service) protection. By
default, when the firewall is activated, all incoming traffic from the WAN to the LAN is
blocked unless it is initiated from the LAN. The ZyAIR firewall supports TCP/UDP
inspection, DoS detection and prevention, real time alerts, reports and logs.
1.2.2.10 Brute-Force Password Guessing Protection
The ZyAIR has a special protection mechanism to discourage brute-force password guessing
attacks on the ZyAIR's management interfaces. You can specify a wait-time that must expire
before entering a fourth password after three incorrect passwords have been entered. Please
see the appendix for details about this feature.
1.2.2.11 Wireless LAN MAC Address Filtering
Your ZyAIR checks the MAC address of the wireless station against a list of allowed or
denied MAC addresses.
1.2.2.12 WEP Encryption
WEP (Wired Equivalent Privacy) encrypts data frames before transmitting over the wireless
network to help keep network communications private.
1.2.2.13 IEEE 802.1X Network Security
The ZyAIR supports the IEEE 802.1x standard to enhance user authentication. Use the built-in
user profile database to authenticate up to 32 users using MD5 encryption. Use an EAP-
compatible RADIUS (RFC2138, 2139 - Remote Authentication Dial In User Service) server
to authenticate a limitless number of users using EAP (Extensible Authentication Protocol).
EAP is an authentication protocol that supports multiple types of authentication.
1.2.2.14 Universal Plug and Play (UPnP)
Using the standard TCP/IP protocol, the ZyAIR and other UPnP-enabled devices can
dynamically join a network, obtain an IP address and convey its capabilities to other devices
on the network.
1.2.2.15 Dynamic DNS Support
With Dynamic DNS support, you can have a static hostname alias for a dynamic IP address,
allowing the host to be more easily accessible from various locations on the Internet. You must
register for this service.