ZyXEL Communications P-320W Скачать руководство пользователя страница 114

Страница: 114 / 215

P-320W User’s Guide

114

Chapter 9 Firewall

PING(ICMP:0)

Packet INternet Groper is a protocol that sends out ICMP echo requests

to test whether or not a remote host is reachable.

POP3(TCP:110)

Post Office Protocol version 3 lets a client computer get e-mail from a

POP3 server through a temporary connection (TCP/IP or other).

PPTP(TCP:1723)

Point-to-Point Tunneling Protocol enables secure transfer of data over

public networks. This is the control channel.

PPTP_TUNNEL(GRE:0)

Point-to-Point Tunneling Protocol enables secure transfer of data over

public networks. This is the data channel.

RCMD(TCP:512)

Remote Command Service.

REAL_AUDIO(TCP:7070)

A streaming audio service that enables real time sound over the web.

REXEC(TCP:514)

Remote Execution Daemon.

RLOGIN(TCP:513)

Remote Login.

RTELNET(TCP:107)

Remote Telnet.

RTSP(TCP/UDP:554)

The Real Time Streaming (media control) Protocol (RTSP) is a remote

control for multimedia on the Internet.

SFTP(TCP:115)

Simple File Transfer Protocol.

SMTP(TCP:25)

Simple Mail Transfer Protocol is the message-exchange standard for

the Internet. SMTP enables you to move messages from one e-mail

server to another.

SNMP(TCP/UDP:161)

Simple Network Management Program.

SNMP-TRAPS(TCP/

UDP:162)

Traps for use with the SNMP (RFC:1215).

SQL-NET(TCP:1521)

Structured Query Language is an interface to access data on many

different types of database systems, including mainframes, midrange

systems, UNIX systems and network servers.

SSH(TCP/UDP:22)

Secure Shell Remote Login Program.

STRM WORKS(UDP:1558)

Stream Works Protocol.

SYSLOG(UDP:514)

Syslog allows you to send system logs to a UNIX server.

TACACS(UDP:49)

Control System).

TELNET(TCP:23)

Telnet is the login and terminal emulation protocol common on the

Internet and in UNIX environments. It operates over TCP/IP networks.

Its primary function is to allow users to log into remote host systems.

TFTP(UDP:69)

Trivial File Transfer Protocol is an Internet file transfer protocol similar

to FTP, but uses the UDP (User Datagram Protocol) rather than TCP

(Transmission Control Protocol).

VDOLIVE(TCP:7000)

Another videoconferencing solution.

Table 48

Commonly Used Services

SERVICE

DESCRIPTION

Содержание P-320W

Страница 1: ...P 320W 802 11g Wireless Firewall Router User s Guide Version 1 00 11 2005 Edition 1...

Страница 2: ......

Страница 3: ...Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it convey...

Страница 4: ...e harmful interference to radio television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the followi...

Страница 5: ...ns Commission FCC Interference Statement 5 Certifications 1 Go to www zyxel com 2 Select your product from the drop down list box on the ZyXEL home page to go to that product s page 3 Select the certi...

Страница 6: ...y is damaged remove it from the power outlet Do NOT attempt to repair the power supply Contact your local vendor to order a new power supply Place connecting cables carefully so that no one will step...

Страница 7: ...n act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warra...

Страница 8: ...sales zyxel dk 45 39 55 07 07 FINLAND support zyxel fi 358 9 4780 8411 www zyxel fi ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finland sales zyxel fi 358 9 4780 8448 FRANCE info zyxel fr 33...

Страница 9: ...zyxel se 46 31 744 7700 www zyxel se ZyXEL Communications A S Sj porten 4 41764 G teborg Sweden sales zyxel se 46 31 744 7701 UKRAINE support ua zyxel com 380 44 247 69 78 www ua zyxel com ZyXEL Ukrai...

Страница 10: ...P 320W User s Guide 10 Customer Support...

Страница 11: ...Features 30 1 3 Applications for the Prestige 31 1 3 1 Secure Broadband Internet Access via Cable or DSL Modem 31 1 3 2 Wireless LAN Application 32 1 3 3 Front Panel LEDs 32 Chapter 2 Introducing the...

Страница 12: ...Wireless Security Overview 61 4 2 1 Encryption 61 4 2 2 Authentication 61 4 2 3 Restricted Access 62 4 2 4 Hide Prestige Identity 62 4 2 5 Using OTIST 62 4 3 Configuring Wireless LAN on the Prestige...

Страница 13: ...raffic Redirect 90 5 9 Traffic Redirect Screen 90 Chapter 6 LAN 93 6 1 LAN Overview 93 6 1 1 IP Pool Setup 93 6 1 2 System DNS Servers 93 6 2 LAN TCP IP 93 6 2 1 Factory LAN Defaults 93 6 2 2 IP Addre...

Страница 14: ...all 109 9 1 4 Guidelines For Enhancing Security With Your Firewall 110 9 2 General Firewall Screen 110 9 3 Services Screen 111 9 3 1 Services 113 Chapter 10 Static Route Screens 115 10 1 Static Route...

Страница 15: ...Dynamic DNS 136 13 3 1 DynDNS Wildcard 136 13 4 Dynamic DNS Screen 137 13 5 Time Setting Screen 137 Chapter 14 Logs 141 14 1 View Log 141 14 2 Log Settings 142 Chapter 15 Tools 145 15 1 Firmware Uplo...

Страница 16: ...ava Permissions 159 16 6 2 ActiveX Controls in Internet Explorer 161 Appendix A Product Specifications 163 Appendix B IP Subnetting 165 Appendix C Setting up Your Computer s IP Address 173 Appendix D...

Страница 17: ...ard STEP 2 Wireless LAN 48 Figure 16 Basic WEP Security 49 Figure 17 Extend WPA PSK Security 50 Figure 18 OTIST 51 Figure 19 Connection Wizard STEP 3 WAN Connection Type 52 Figure 20 Ethernet Connecti...

Страница 18: ...ort Forwarding 104 Figure 59 NAT Port Forwarding Rule Setup 105 Figure 60 Trigger Port Forwarding Process Example 107 Figure 61 NAT Trigger Port 108 Figure 62 Firewall General 110 Figure 63 Firewall S...

Страница 19: ...ure 101 Internet Options 155 Figure 102 Internet Options 156 Figure 103 Pop up Blocker Settings 157 Figure 104 Internet Options 158 Figure 105 Security Settings Java Scripting 159 Figure 106 Security...

Страница 20: ...0 DNS Settings in resolv conf 187 Figure 131 Red Hat 9 0 Restart Ethernet Card 188 Figure 132 Red Hat 9 0 Checking TCP IP Properties 188 Figure 133 Single Computer per Router Hardware Configuration 1...

Страница 21: ...ction Type 55 Table 16 Your IP Address 57 Table 17 Example of Network Properties for LAN Servers with Fixed IP Addresses 57 Table 18 WAN MAC Address 58 Table 19 ZyAIR Wireless Security Levels 63 Table...

Страница 22: ...UPnP 126 Table 56 System General 136 Table 57 Dynamic DNS 137 Table 58 Time Setting 138 Table 59 View Log 142 Table 60 Log Settings 143 Table 61 Maintenance Firmware Upload 145 Table 62 Maintenance R...

Страница 23: ...ble 81 Subnet 4 170 Table 82 Eight Subnets 170 Table 83 Class C Subnet Planning 170 Table 84 Class B Subnet Planning 171 Table 85 IEEE802 11g 199 Table 86 Comparison of EAP Authentication Types 205 Ta...

Страница 24: ...P 320W User s Guide 24...

Страница 25: ...nning right away They contain connection information and instructions on getting started Web Configurator Online Help Embedded web help for descriptions of individual screens and supplementary informa...

Страница 26: ...320W User s Guide 26 Preface e g is a shorthand for for instance and i e means that is or in other words Graphics Icons Key Prestige Computer Notebook computer Server DSLAM Firewall Modem Switch Route...

Страница 27: ...be Prestige features 1 2 1 Physical Features 10 100 Mbps Auto negotiating Ethernet Fast Ethernet Interface s This auto negotiation feature allows the Prestige to detect the speed of incoming transmiss...

Страница 28: ...ring leaving your network Time and Date The Prestige allows you to get the current time and date from an external server when you turn on your Prestige You can also set the time manually Universal Plu...

Страница 29: ...and version two SNMPv2 Network Address Translation NAT Network Address Translation NAT allows the translation of an Internet protocol address used within one network for example a private IP address u...

Страница 30: ...N The firmware of the Prestige can be upgraded via the LAN refer to Maintenance F W Upload Screen Embedded FTP and TFTP Servers The Prestige s embedded FTP and TFTP Servers enable fast firmware upgrad...

Страница 31: ...ettings WEP or WPA PSK to the ZyXEL wireless adapters that support OTIST and are within transmission range The ZyXEL wireless adapters must also have OTIST enabled Association List With the associatio...

Страница 32: ...ge area and use resources on the wired network Figure 2 Internet Access Application Example 1 3 3 Front Panel LEDs Figure 3 Front Panel The following table describes the LEDs Table 1 Front Panel LEDs...

Страница 33: ...ernet connection Blinking The Prestige is sending receiving data None Off The WAN connection is not ready or has failed WLAN Green On The Prestige is ready but is not sending receiving data through th...

Страница 34: ...P 320W User s Guide 34 Chapter 1 Getting to Know Your Prestige...

Страница 35: ...e web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScripts enabled by default Java permissio...

Страница 36: ...4 Login 5 Select your language click Apply Figure 5 Language Selection 6 You should see a screen asking you to change your password highly recommended as shown next Type a new password and retype it t...

Страница 37: ...tige If you forget your password or cannot access the web configurator you will need to use the RESET button at the back of the Prestige to reload the factory default configuration file This means tha...

Страница 38: ...ent wizard Click this icon to view copyright and a link for related product information Click this icon at any time to exit the web configurator Select a number of seconds or None from the drop down l...

Страница 39: ...wireless LAN Channel This shows the channel number which the Prestige uses over the wireless LAN Security Mode This shows the level of wireless security the Prestige is using System Status System Upti...

Страница 40: ...nd to always assign an IP address to a MAC address and host name NAT General Use this screen to enable NAT Port Forwarding Use this screen to configure servers behind the Prestige Trigger Port Use thi...

Страница 41: ...e s DHCP server Figure 9 Summary DHCP Table The following table describes the labels in this screen Table 5 Summary DHCP Table LABEL DESCRIPTION This is the index number of the host computer IP Addres...

Страница 42: ...s Association List LABEL DESCRIPTION This is the index number of an associated wireless station MAC Address This field displays the MAC address of an associated wireless station Association Time This...

Страница 43: ...r WLAN port TxPkts This is the number of transmitted packets on this port RxPkts This is the number of received packets on this port System Up Time This is the total time the Prestige has been on Poll...

Страница 44: ...P 320W User s Guide 44 Chapter 2 Introducing the Web Configurator...

Страница 45: ...cess the Internet Refer to your ISP Internet Service Provider checklist in the Quick Start Guide to know what to enter in each field Leave a field blank if you don t have that information 1 After you...

Страница 46: ...tart Settings and Control Panel and then double click System Click the Network Identification tab and then the Properties button Note the entry for the Computer name field and enter it as the System N...

Страница 47: ...be up to 30 alphanumeric characters long Spaces are not allowed but dashes and underscores _ are accepted Domain Name Type the domain name if you know it here If you leave this field blank the ISP may...

Страница 48: ...urity with a default Pre Shared Key and only if your wireless clients support WPA PSK If you choose this option skip directly to Section 3 3 3 on page 51 Choose None to have no wireless LAN security c...

Страница 49: ...ssphrase up to 32 printable characters and click Generate The Prestige automatically generates four different WEP keys Generate After you enter the passphrase click Generate to have the Prestige gener...

Страница 50: ...WEP key for data transmission If you chose 64 bit WEP then enter any 5 ASCII characters or 10 hexadecimal characters 0 9 A F If you chose 128 bit WEP then enter 13 ASCII characters or 26 hexadecimal c...

Страница 51: ...to do this Back Click Back to display the previous screen Next Click Next to proceed to the next screen Exit Click Exit to close the wizard screen without saving 3 3 3 OTIST The following screen allo...

Страница 52: ...me OTIST Setup Key on the Prestige and wireless clients Back Click Back to display the previous screen Next Click Next to proceed to the next screen Exit Click Exit to close the wizard screen without...

Страница 53: ...PPTP option for a dial up connection 3 4 1 Ethernet Connection Type Choose Ethernet when the WAN port is used as a regular Ethernet Figure 20 Ethernet Connection Type 3 4 2 PPPoE Connection Type Poin...

Страница 54: ...individual computers the computers on the LAN do not need PPPoE software installed since the Prestige does that part of the task Furthermore with NAT all of the LAN s computers will have Internet acc...

Страница 55: ...estige supports one PPTP server connection at any given time Figure 22 PPTP Connection Type The following table describes the fields in this screen Table 15 PPTP Connection Type LABEL DESCRIPTION ISP...

Страница 56: ...signed to you by your ISP if given Server IP Address Type the IP address of the PPTP server Connection ID Name Enter the connection ID or connection name in this field It must follow the c id and n na...

Страница 57: ...dia Access Control address The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 A0 C5 00 00 02 You can configure the WAN port s MAC address by...

Страница 58: ...onfigured the address will be copied to the rom file ZyNOS configuration file It will not change unless you change the setting or upload a different ROM file It is advisable to clone the MAC address f...

Страница 59: ...igure 25 Connection Wizard Complete Click Finish to complete the wizard setup and save your configuration Figure 26 Connection Wizard Congratulation Well done You have successfully set up your Prestig...

Страница 60: ...P 320W User s Guide 60 Chapter 3 Connection Wizard...

Страница 61: ...authentication restricting access by device MAC address and hiding the Prestige identity 4 2 1 Encryption Use WPA security if you have WPA aware wireless clients and a RADIUS server WPA has user auth...

Страница 62: ...nfigure the settings on the AP and then manually configure the exact same settings on each wireless client OTIST One Touch Intelligent Security Technology allows you to transfer your AP s SSID and WEP...

Страница 63: ...Wi Fi Protected Access WPA Note You must enable the same wireless security settings on the Prestige and on all wireless clients that you want to associate with it 4 4 General Wireless LAN Screen Note...

Страница 64: ...e the wireless settings of your computer to match the Prestige s new settings Hide SSID Select this check box to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through...

Страница 65: ...4 2 WEP Encryption WEP encryption scrambles the data transmitted between the wireless stations and the access points to keep network communications private It encrypts unicast and multicast communica...

Страница 66: ...enerate to have the Prestige generates four different WEP keys automatically Clear Click Clear to discard the passphrase you configured in the Passphrase field and the WEP key s generated automaticall...

Страница 67: ...AP and all wireless clients The Pre Shared Key PSK must consist of between 8 and 63 ASCII characters including spaces and symbols 2 The AP checks each wireless client s password and only allows it to...

Страница 68: ...llowing table describes the labels in this screen Table 23 Wireless WPA PSK LABEL DESCRIPTION Pre Shared Key The encryption mechanisms used for WPA and WPA PSK are the same The only difference between...

Страница 69: ...the pair wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients Figure 32 WPA with RADIUS App...

Страница 70: ...structs you to do so with additional information Shared Secret Enter a password up to 31 alphanumeric characters as the key to be shared between the external authentication server and the Prestige The...

Страница 71: ...the Wireless LAN link under Network to display the General screen Select 802 1x Dynamic WEP from the Security Mode list Figure 34 Wireless 802 1x and Dynamic WEP The following table describes the lab...

Страница 72: ...s MUST use the same Setup key 4 5 1 1 AP You can enable OTIST using the Reset button or the web configurator 4 5 1 1 1 Reset button If you use the Reset button the default 01234567 or previous saved...

Страница 73: ...en displays Figure 35 Wireless OTIST The following table describes the labels in this screen Table 26 Wireless OTIST LABEL DESCRIPTION Setup Key Type an OTIST Setup Key of exactly eight ASCII characte...

Страница 74: ...WPA PSK configured in the Wireless General screen and you run OTIST with Yes selected OTIST will not replace the WPA PSK Clear the checkbox in the OTIST screen If you want OTIST to automatically gener...

Страница 75: ...Figure 37 Security Key 2 This screen appears while OTIST settings are being transferred It closes when the transfer is complete Figure 38 OTIST in Progress AP Figure 39 OTIST in Progress Client In the...

Страница 76: ...gain or enter them manually in the wireless client s 5 If you configure OTIST to generate a WPA PSK key this key changes each time you run OTIST Therefore if a new wireless client joins your wireless...

Страница 77: ...ddresses not listed will be allowed to access the Prestige Select Allow to permit access to the Prestige MAC addresses not listed will be denied access to the Prestige Set This is the index number of...

Страница 78: ...ending preamble means more time for sending data All IEEE 802 11b compliant wireless adapters support long preamble but not all support short preamble Select Long preamble if you are unsure what pream...

Страница 79: ...s Guide Chapter 4 Wireless LAN 79 Apply Click Apply to save your changes back to the Prestige Reset Click Reset to reload the previous configuration for this screen Table 28 Wireless Advanced LABEL D...

Страница 80: ...P 320W User s Guide 80 Chapter 4 Wireless LAN...

Страница 81: ...n and your Internet access is through an ISP the ISP can provide you with the Internet addresses for your local networks On the other hand if you are part of a much larger organization you should cons...

Страница 82: ...DNS Server Address Assignment Use DNS Domain Name System to map a domain name to its corresponding IP address and vice versa for instance the IP address of www zyxel com is 204 217 0 2 The DNS server...

Страница 83: ...rt s MAC address by either using the factory default or cloning the MAC address from a computer on your LAN Once it is successfully configured the address will be copied to the rom file ZyNOS configur...

Страница 84: ...Toshiba authentication method or Telia Login The following fields do not appear with the Standard service type WAN IP Address Assignment Get automatically from ISP Select this option If your ISP did...

Страница 85: ...nting PPPoE directly on the Prestige rather than individual computers the computers on the LAN do not need PPPoE software installed since the Prestige does that part of the task Furthermore with NAT a...

Страница 86: ...r and ISP carrier as it requires no specific configuration of the broadband modem at the customer site By implementing PPPoE directly on the router rather than individual computers the computers on th...

Страница 87: ...IP address in this field if you selected Use Fixed IP Address Remote IP Address Enter the Remote IP Address if your ISP gave you one in this field Remote IP Subnet Mask Enter the Rmote IP subnet Mask...

Страница 88: ...er of data from a remote client to a private server creating a Virtual Private Network VPN using TCP IP based networks PPTP supports on demand multi protocol and virtual private networking over public...

Страница 89: ...Name Type your identification name for the PPTP server WAN IP Address Assignment Get automatically from ISP Select this option If your ISP did not assign you a fixed IP address This is the default sel...

Страница 90: ...y to save your changes back to the Prestige Reset Click Reset to begin configuring this screen afresh 5 8 Traffic Redirect Traffic redirect forwards WAN traffic to a backup gateway when the Prestige c...

Страница 91: ...using PPTP or PPPoE Encapsulation type 0 0 0 0 to configure the Prestige to check the PVC Permanent Virtual Circuit or PPTP tunnel Fail Tolerance Type the number of times your Prestige may attempt and...

Страница 92: ...P 320W User s Guide 92 Chapter 5 WAN...

Страница 93: ...uters for instance servers for mail FTP TFTP web etc that you may have 6 1 2 System DNS Servers Refer to the IP Address and Subnet Mask section in the Wizard Connection chapter 6 2 LAN TCP IP The Pres...

Страница 94: ...LABEL DESCRIPTION LAN TCP IP IP Address Type the IP address of your Prestige in dotted decimal notation 192 168 1 1 factory default IP Subnet Mask The subnet mask specifies the network number portion...

Страница 95: ...m a server You can configure the Prestige as a DHCP server or disable it When configured as a server the Prestige provides the TCP IP configuration for the clients If DHCP service is disabled you must...

Страница 96: ...omain Name System server IP address in the order you specify here to the DHCP clients The Prestige only passes this information to the LAN DHCP clients when you select the Enable DHCP Server check box...

Страница 97: ...to save your changes back to the Prestige Reset Click Reset to begin configuring this screen afresh 7 4 Client List Screen The DHCP table shows current DHCP client information including IP Address Hos...

Страница 98: ...e to your computer six pairs of hexadecimal notation A network interface card such as an Ethernet adapter has a hardwired address that is assigned at the factory This address follows an industry stand...

Страница 99: ...sts while the web servers on the Internet are the outside hosts Global local denotes the IP address of a host in a packet as the packet traverses a router For example the local address refers to the I...

Страница 100: ...web server and a telnet server on your local network and make them accessible to the outside world If you do not define any servers for Many to One and Many to Many Overload mapping NAT offers the add...

Страница 101: ...Ns logical LANs using IP Alias behind the Prestige can communicate with three distinct WAN networks More examples follow at the end of this chapter Figure 55 NAT Application With IP Alias 8 1 5 Defaul...

Страница 102: ...o specify a range of port numbers In addition to the servers for specified services NAT supports a default server A service request that does not have a server explicitly designated for it is forwarde...

Страница 103: ...ind NAT Example 8 2 General NAT Screen Click the NAT link under Network to open the General screen Figure 57 NAT General The following table describes the labels in this screen Table 42 NAT General LA...

Страница 104: ...y configured rules 1 to 6 in your current set and now you configure rule number 9 In the set summary screen the new rule will be rule 7 not 9 Now if you delete rule 4 rules 5 to 7 will be pushed up by...

Страница 105: ...forwarding of these ports to an inside server without having to delete the entry Name This field displays a name to identify this port forwarding rule Start Port This field displays a start port numbe...

Страница 106: ...forwarding port in NAT to forward a service coming in from the server on the WAN to the IP address of a computer on the client side LAN The problem is that port forwarding only forwards a service to a...

Страница 107: ...he Real Audio server until the connection is closed or times out The Prestige times out in three minutes with UDP User Datagram Protocol or two hours with TCP IP Transfer Control Protocol Internet Pro...

Страница 108: ...rt or range of ports to the client computer on the LAN that requested the service Start Port Type a port number or the starting port number in a range of port numbers End Port Type a port number or th...

Страница 109: ...ection Firewall Stateful inspection firewalls restrict access by screening data packets against defined access rules They make access control decisions based on IP address and protocol They also inspe...

Страница 110: ...b configurator 2 Think about access control before you connect to the network in any way including attaching a modem to the port 3 Limit who can access your router 4 Don t enable any local service suc...

Страница 111: ...rotects against Denial of Service DoS attacks when the firewall is activated Apply Click Apply to save the settings Reset Click Reset to start configuring this screen again 9 3 Services Screen Click t...

Страница 112: ...and or UDP Select from either TCP or UDP Port Number Enter the port number range that defines the service For example suppose you want to define the Gnutella service Select TCP type and enter a port...

Страница 113: ...to find out if a user is logged on FTP TCP 20 21 File Transfer Program a program to enable fast transfer of files including large files that may not be possible by e mail H 323 TCP 1720 NetMeeting us...

Страница 114: ...nsfer Protocol is the message exchange standard for the Internet SMTP enables you to move messages from one e mail server to another SNMP TCP UDP 161 Simple Network Management Program SNMP TRAPS TCP U...

Страница 115: ...e the Prestige knows about network N2 in the following figure through remote node router R1 However the Prestige is unable to route a packet to network N3 because it doesn t know that there is a route...

Страница 116: ...dress of the final destination Routing is always based on network number Gateway This is the IP address of the gateway The gateway is an immediate neighbor of your Prestige that will forward the packe...

Страница 117: ...e IP subnet mask here Gateway IP Address Enter the IP address of the gateway The gateway is an immediate neighbor of your Prestige that will forward the packet to the destination On the LAN the gatewa...

Страница 118: ...P 320W User s Guide 118 Chapter 10 Static Route Screens...

Страница 119: ...rules You may manage your Prestige from a remote location via LAN only ALL LAN and WAN To disable remote management of a service select LAN in the corresponding Server Access field 11 1 1 Remote Manag...

Страница 120: ...describes the labels in this screen Table 51 WWW Remote Management LABEL DESCRIPTION Server Port You may change the server port number for a service if needed however you must use the same port numbe...

Страница 121: ...tware module that resides in a managed device the Prestige An agent translates the local management information from the managed device into a form compatible with SNMP The manager is the console thro...

Страница 122: ...MP manager when any one of the following events occurs Table 52 SNMP Traps TRAP TRAP NAME DESCRIPTION 0 coldStart defined in RFC 1215 A trap is sent after booting power on 1 warmStart defined in RFC 1...

Страница 123: ...rusted computer that is allowed to communicate with the Prestige using this service Select All to allow any computer to access the Prestige using this service Choose Selected to just allow the compute...

Страница 124: ...and error reporting protocol between a host server and a gateway to the Internet ICMP uses Internet Protocol IP datagrams but the messages are processed by the TCP IP software and directly apparent t...

Страница 125: ...icon of a UPnP device will allow you to access the information and properties of that device 12 1 2 NAT Traversal UPnP NAT traversal automates the process of allowing an application to operate through...

Страница 126: ...AN Please see later in this User s Guide for examples of installing UPnP in Windows XP and Windows Me as well as an example of using UPnP in Windows 12 3 UPnP Screen Click the UPnP link under Manageme...

Страница 127: ...ollow the steps below to install UPnP in Windows Me 1 Click Start and Control Panel Double click Add Remove Programs 2 Click on the Windows Setup tab and select Communication in the Components selecti...

Страница 128: ...nstalling UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP 1 Click Start and Control Panel 2 Double click Network Connections 3 In the Network Connections window click Advan...

Страница 129: ...ersal Plug and Play check box Figure 76 Networking Services Click OK to go back to the Windows Optional Networking Component Wizard window and click Next 12 5 Using UPnP in Windows XP Example This sec...

Страница 130: ...12 5 1 Auto discover Your UPnP enabled Network Device 1 Click Start and Control Panel Double click Network Connections An icon displays under Internet Gateway 2 Right click the icon and select Propert...

Страница 131: ...Guide Chapter 12 UPnP 131 Figure 78 Internet Connection Properties 4 You may edit or delete the port mappings or click Add to manually add port mappings Figure 79 Internet Connection Properties Advan...

Страница 132: ...s disconnected from your computer all port mappings will be deleted automatically 6 Select Show icon in notification area when connected option and click OK An icon displays in the system tray Figure...

Страница 133: ...t know the IP address of the ZyXEL device Follow the steps below to access the web configurator 1 Click Start and then Control Panel 2 Double click Network Connections 3 Select My Network Places under...

Страница 134: ...84 Network Connections My Network Places 6 Right click on the icon for your Prestige and select Properties A properties window displays with basic information about the Prestige Figure 85 Network Con...

Страница 135: ...provides information on the System screens 13 1 System Overview See the Wizard Setup chapter for more information on the next few screens 13 2 General Screen Click the System link under Maintenance an...

Страница 136: ...em in this field New Password Type your new system password up to 30 characters Note that as you type a password the screen displays an asterisk for each character you type Retype to Confirm Type the...

Страница 137: ...rovider Host Name Enter a host namesin the feld provided You can specify up to two host names in the field separated by a comma User Name Enter your user name Password Enter the password assigned to y...

Страница 138: ...Manual Select this radio button to enter the time and date manually If you configure a new time and date Time Zone and Daylight Saving at the same time the new time and date you entered has priority a...

Страница 139: ...aylight saving is a period from late spring to early fall when many countries set their clocks ahead of normal local time by one hour to give more daytime light in the evening Select this option if yo...

Страница 140: ...P 320W User s Guide 140 Chapter 13 System...

Страница 141: ...explanations 14 1 View Log The web configurator allows you to look at all of the Prestige s logs in one location Click the Logs link under Maintenance to open the View Log screen Log entries in red i...

Страница 142: ...You can configure the Prestige s general log settings in one location Click the Logs link under Maintenance in the navigation panel and the Log Settings tab to open the Log Settings screen Use the Lo...

Страница 143: ...want to be in the subject line of the log e mail message that the Prestige sends Not all Prestige models have this field Send Log To The Prestige sends logs to the e mail address specified in this fie...

Страница 144: ...ver that will log the selected categories of logs Log Facility Select a location from the drop down list box The log facility allows you to log the messages to different files in the syslog server Ref...

Страница 145: ...the system will reboot Click the Tools link under Maintenance in the navigation panel Follow the instructions in this screen to upload firmware to your Prestige Figure 91 Maintenance Firmware Upload...

Страница 146: ...network disconnect In some operating systems you may see the following icon on your desktop Figure 93 Network Temporarily Disconnected After two minutes log in again and check your new firmware versio...

Страница 147: ...p configuration file will be useful in case you need to return to your previous settings Click Backup to save the Prestige s current configuration to your computer 15 2 2 Restore Configuration Restore...

Страница 148: ...See the appendix for details on how to set up your computer s IP address If the upload was not successful the following screen will appear Figure 98 Configuration Restore Error 15 2 3 Back to Factory...

Страница 149: ...P 320W User s Guide Chapter 15 Tools 149 Figure 99 System Restart...

Страница 150: ...P 320W User s Guide 150 Chapter 15 Tools...

Страница 151: ...that the Prestige and the power source are both turned on Turn the Prestige off and on If the error persists you may have a hardware problem In this case you should contact your vendor 16 2 Problems w...

Страница 152: ...I cannot access the Internet Make sure the Prestige is turned on and connected to the network Verify your WAN settings Refer to the chapter on WAN setup Make sure you entered the correct user name an...

Страница 153: ...our WAN connection Use the Prestige s LAN IP address when configuring from the LAN Refer to for instructions on checking your LAN connection Check that you have enabled web service access If you have...

Страница 154: ...p blocking to log into your device Either disable pop up blocking enabled by default in Windows XP SP Service Pack 2 or allow pop up blocking and create an exception for your device s IP address 16 6...

Страница 155: ...e this setting 16 6 1 1 2 Enable pop up Blockers with Exceptions Alternatively if you only want to allow pop up windows from your device see the following steps 1 In Internet Explorer select Tools Int...

Страница 156: ...ce the web page that you do not want to have blocked with the prefix http For example http 192 168 1 1 4 Click Add to move the IP address to the list of Allowed sites Note If you change the IP address...

Страница 157: ...lick Close to return to the Privacy screen 6 Click Apply to save this setting 16 6 1 2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer check that JavaScripts...

Страница 158: ...4 Internet Options 2 Click the Custom Level button 3 Scroll down to Scripting 4 Under Active scripting make sure that Enable is selected the default 5 Under Scripting of Java applets make sure that En...

Страница 159: ...Java Scripting 16 6 1 3 Java Permissions 1 From Internet Explorer click Tools Internet Options and then the Security tab 2 Click the Custom Level button 3 Scroll down to Microsoft VM 4 Under Java perm...

Страница 160: ...Figure 106 Security Settings Java 16 6 1 3 1 JAVA Sun 1 From Internet Explorer click Tools Internet Options and then the Advanced tab 2 Make sure that Use Java 2 for applet under Java Sun is selected...

Страница 161: ...nternet Explorer 6 are shown Steps may vary depending on your version of Internet Explorer 1 In Internet Explorer click Tools Internet Options and then the Security tab 2 In the Internet Options windo...

Страница 162: ...P 320W User s Guide 162 Chapter 16 Troubleshooting Figure 109 Security Setting ActiveX Controls...

Страница 163: ...net ports Operation Temperature 0 C 65 C Storage Temperature 20 60 C Operation Humidity 15 90 RH Storage Humidity 10 90 RH Table 70 Firmware Standards IEEE 802 3 Ethernet IEEE 802 3u Fast Ethernet IEE...

Страница 164: ...OTIST One Touch Intelligent Security Technology IEEE 802 1x External Radius server using EAP MD5 TLS TTLS Firewall Stateful Packet Inspection Prevent Denial of Service attacks such as Fraggle SYN Flo...

Страница 165: ...the first two octets make up the network number and the two remaining octets make up the host ID Class C addresses begin starting from the left with 1 1 0 In a class C address the first three octets...

Страница 166: ...twork number and which bits are part of the host ID using a logical AND operation A subnet mask has 32 is a 1 then the corresponding bit in the IP address is part of the network number If a bit in the...

Страница 167: ...55 255 224 27 1110 0000 255 255 255 240 28 1111 0000 255 255 255 248 29 1111 1000 255 255 255 252 30 1111 1100 The first mask shown is the class C natural mask Normally if no mask is specified it is u...

Страница 168: ...s 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask 255 255 255 128 Subnet Mask Binary 11111111 11111111 11111111 10000000 Subnet Address 192 168 1 128 Lowest Host ID 192...

Страница 169: ...IP Address Binary 11000000 10101000 00000001 00000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 0 Lowest Host ID 192 168 1 1 Broadcast Address 192 168 1 63 Highes...

Страница 170: ...110 The following table shows class C IP address last octet values for each subnet Table 82 Eight Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BROADCAST ADDRESS 1 0 1 30 31 2 32 33 62 63...

Страница 171: ...bnetting The following table is a summary for class B subnet planning Table 84 Class B Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 1 255 255 128 0 17 2 32766 2 255...

Страница 172: ...P 320W User s Guide 172 Appendix B IP Subnetting...

Страница 173: ...quires the purchase of a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriat...

Страница 174: ...crosoft Networks If you need the adapter 1 In the Network window click Add 2 Select Adapter and then click Add 3 Select the manufacturer and model of your network adapter and then click OK If you need...

Страница 175: ...ter s TCP IP entry and click Properties 2 Click the IP Address tab If your IP address is dynamic select Obtain an IP address automatically If you have a static IP address select Specify an IP address...

Страница 176: ...the TCP IP Properties window 6 Click OK to close the Network window Insert the Windows CD if prompted 7 Turn on your Prestige and restart your computer when prompted Verifying Settings 1 Click Start a...

Страница 177: ...s IP Address 177 Figure 113 Windows XP Start Menu 2 In the Control Panel double click Network Connections Network and Dial up Connections in Windows 2000 NT Figure 114 Windows XP Control Panel 3 Righ...

Страница 178: ...tions Properties 4 Select Internet Protocol TCP IP under the General tab in Win XP and then click Properties Figure 116 Windows XP Local Area Connection Properties 5 The Internet Protocol TCP IP Prope...

Страница 179: ...additional IP addresses In the IP Settings tab in IP addresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two st...

Страница 180: ...General tab in Windows XP Click Obtain DNS server address automatically if you do not know your DNS server IP address es If you know your DNS server IP address es click Use the following DNS server ad...

Страница 181: ...Connections window Network and Dial up Connections in Windows 2000 NT 11Turn on your Prestige and restart your computer if prompted Verifying Settings 1 Click Start All Programs Accessories and then...

Страница 182: ...up Your Computer s IP Address Figure 120 Macintosh OS 8 9 Apple Menu 2 Select Ethernet built in from the Connect via list Figure 121 Macintosh OS 8 9 TCP IP 3 For dynamically assigned settings select...

Страница 183: ...Save if prompted to save changes to your configuration 7 Turn on your Prestige and restart your computer if prompted Verifying Settings Check your TCP IP properties in the TCP IP Control Panel window...

Страница 184: ...sk in the Subnet mask box Type the IP address of your Prestige in the Router address box 5 Click Apply Now and close the window 6 Turn on your Prestige and restart your computer if prompted Verifying...

Страница 185: ...ow to configure your computer IP address using the KDE 1 Click the Red Hat button located on the bottom left corner select System Setting and click Network Figure 124 Red Hat 9 0 KDE Network Configura...

Страница 186: ...server IP address es click the DNS tab in the Network Configuration screen Enter the DNS server information in the fields provided Figure 126 Red Hat 9 0 KDE Network Configuration DNS 5 Click the Dev...

Страница 187: ...cimal notation and type NETMASK followed by the subnet mask The following example shows an example where the static IP address is 192 168 1 10 and the subnet mask is 255 255 255 0 Figure 129 Red Hat 9...

Страница 188: ...s Enter ifconfig in a terminal screen to check your TCP IP properties Figure 132 Red Hat 9 0 Checking TCP IP Properties root localhost ifconfig eth0 Link encap Ethernet HWaddr 00 50 BA 72 5B 44 inet a...

Страница 189: ...manner similar to dial up services using PPP Benefits of PPPoE PPPoE offers the following benefits It provides you with a familiar dial up networking DUN user interface It lessens the burden on the ca...

Страница 190: ...Concentrator and tunnels the PPP frames to the ISP The L2TP tunnel is capable of carrying multiple PPP sessions With PPPoE the VC Virtual Circuit is equivalent to the dial up connection and is betwee...

Страница 191: ...that it requires one separate ATM VC per destination Figure 135 Transport PPP frames over Ethernet PPTP and the ZyWALL When the ZyWALL is deployed in such a setup it appears as a computer to the ANT I...

Страница 192: ...y The phone call is between the user and the PAC and the PAC tunnels the PPP frames to the PNS The PPTP user is unaware of the tunnel between the PAC and the PNS Figure 136 PPTP Protocol Overview Micr...

Страница 193: ...age Exchange between Computer and an ANT PPP Data Connection The PPP frames are tunneled between the PNS and PAC over GRE General Routing Encapsulation RFC 1701 1702 The individual calls within a tunn...

Страница 194: ...P 320W User s Guide 194 Appendix E PPTP...

Страница 195: ...or Independent Basic Service Set IBSS The following diagram shows an example of notebook computers using wireless adapters to form an Ad hoc wireless LAN Figure 138 Peer to Peer Communication in an Ad...

Страница 196: ...connection between APs is called a Distribution System DS This type of wireless LAN topology is called an Infrastructure WLAN The Access Points not only provide communication with the wired network b...

Страница 197: ...erlap however To avoid interference due to overlap your AP should be on a channel at least five channels away from a channel that an adjacent AP is using For example if your region has 11 channels and...

Страница 198: ...ission It also reserves and confirms with the requesting station the time frame for the requested transmission Stations can send frames smaller than the specified RTS CTS directly to the AP without th...

Страница 199: ...preamble However not all wireless adapters support short preamble Use long preamble if you are unsure what preamble mode the wireless adapters support to ensure interpretability between the AP and the...

Страница 200: ...reless stations RADIUS RADIUS is based on a client server model that supports authentication authorization and accounting The access point is the client and the server is the RADIUS server The RADIUS...

Страница 201: ...ed is also encrypted to protect the network from unauthorized access EAP Authentication EAP Extensible Authentication Protocol is an authentication protocol that runs on top of the IEEE802 1x transpor...

Страница 202: ...thentication server as MD5 authentication method does not perform mutual authentication Finally MD5 authentication method does not support data encryption with dynamic session key You must configure W...

Страница 203: ...on EAP GTC is implemented only by Cisco LEAP LEAP Lightweight Extensible Authentication Protocol is a Cisco implementation of IEEE 802 1x WEP Encryption WEP encryption scrambles the data transmitted b...

Страница 204: ...e using the AP s default WEP key If the decrypted message matches the challenge text the wireless station is authenticated When your device authentication method is set to open system it will only acc...

Страница 205: ...cation Protocol EAP to authenticate wireless stations using an external RADIUS database Encryption WPA improves data encryption by using Temporal Key Integrity Protocol TKIP or Advanced Encryption Sta...

Страница 206: ...rd guessing attacks but it s still an improvement over WEP as it employs an easier to use consistent single alphanumeric password Security Parameters Summary Refer to this table to see what other secu...

Страница 207: ...bout the change The new information is then propagated to the other access points on the LAN An example is shown in Figure 144 If the roaming feature is not enabled on the access points information is...

Страница 208: ...802 1x user authentication is enabled and to be done locally on the access point the new access point must have the user profile for the wireless station 3 The adjacent access points should use differ...

Страница 209: ...rn A radiation pattern is a diagram that allows you to visualize the shape of the antenna s coverage area Antenna Gain Antenna gain measured in dB decibel is the increase in coverage within the RF bea...

Страница 210: ...rn typically ranges from 20 degrees less directional to 90 degrees very directional The directional antennas are ideal for hallways and outdoor point to point applications Positioning Antennas In gene...

Страница 211: ...e Authority 202 Certifications 5 Changes or Modifications 4 Channel 197 Interference 197 Channel ID 64 Charge 7 Circuit 4 Class B 4 Communications 4 Compliance FCC 4 Components 7 Condition 7 Configura...

Страница 212: ...7 Fragmentation Threshold 198 Fragmentation threshold 198 France Contact Information 8 FTP 93 102 119 136 FTP Restrictions 119 Functionally Equivalent 7 G Gas Pipes 6 General Setup 135 General wirele...

Страница 213: ...th America 6 North America Contact Information 8 Norway Contact Information 8 O Opening 6 Operating Condition 7 OTIST 72 OTIST Wizard 51 Out dated Warranty 7 Outlet 4 Outside 100 P Packet statistics 4...

Страница 214: ...198 S Safety Warnings 6 Security Parameters 206 Separation Between Equipment and Receiver 4 Serial Number 8 Service 6 7 Service Personnel 6 Service Set 64 Service Type 152 Services 102 111 Shipping 7...

Страница 215: ...Web Configurator 35 37 Web Site 8 WEP Wired Equivalent Privacy 31 WEP Encryption 66 68 WEP encryption 65 203 Wet Basement 6 Wi Fi Protected Access 67 Wi Fi Protected Access WPA 30 Wireless association...

Результаты поиска

Содержание P-320W

Отзывы:

Бренды по названию

Популярные бренды

ZyXEL Communications P-320W, Руководство пользователя

Результаты поиска

Содержание P-320W

Отзывы:

Бренды по названию

Популярные бренды