Zyxel-communications G.SHDSL.bis 4-port Security Gateway P-793H Instrukcja Użytkownika Strona 131
- Strona / 432
- Spis treści
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
P-793H User’s Guide
Chapter 9 Firewall Configuration 131
CHAPTER 9
Firewall Configuration
This chapter shows you how to enable and configure the ZyXEL Device firewall.
9.1 Access Methods
The web configurator is, by far, the most comprehensive firewall configuration tool your
ZyXEL Device has to offer. For this reason, it is recommended that you configure your
firewall using the web configurator. CLI (Command Line Interpreter) commands provide
limited configuration options and are only recommended for advanced users.
9.2 Firewall Policies Overview
Firewall rules are grouped based on the direction of travel of packets to which they apply:
By default, the ZyXEL Device’s stateful packet inspection allows packets traveling in the
following directions:
• LAN to LAN/ Router
This allows computers on the LAN to manage the ZyXEL Device and communicate
between networks or subnets connected to the LAN interface.
• LAN to WAN
By default, the ZyXEL Device’s stateful packet inspection drops packets traveling in the
following directions:
•WAN to LAN
•WAN to WAN/ Router
This prevents computers on the WAN from using the ZyXEL Device as a gateway to
communicate with other computers on the WAN and/or managing the ZyXEL Device.
You may define additional rules and sets or modify existing ones but please exercise
extreme caution in doing so.
• LAN to LAN/ Router • WAN to LAN
• LAN to WAN • WAN to WAN/ Router
- User’s Guide 1
- Copyright 3
- Certifications 4
- Safety Warnings 5
- 6 Safety Warnings 6
- ZyXEL Limited Warranty 7
- Customer Support 8
- Customer Support 9 9
- P-793H User’s Guide 10
- 10 Customer Support 10
- Table of Contents 11
- Chapter 4 12
- Chapter 5 12
- Chapter 6 13
- Chapter 7 13
- Chapter 8 14
- Chapter 9 14
- Chapter 10 15
- Chapter 11 15
- 24 Table of Contents 24
- List of Figures 25
- 32 List of Figures 32
- List of Tables 33
- 38 List of Tables 38
- About This User's Guide 39
- Syntax Conventions 39
- Related Documentation 39
- User Guide Feedback 40
- Graphics Icons Key 40
- CHAPTER 1 41
- 1.2 LEDs 42
- Figure 3 LEDs 43
- Table 1 LEDs 43
- CHAPTER 2 45
- Figure 4 Login Screen 46
- Figure 6 Select a Mode 47
- 2.4 Status Screen 50
- Figure 8 Status 51
- Table 3 Status 51
- Table 3 Status (continued) 52
- 2.4.3 Status: VPN Status 54
- 2.5.1 Using the Reset Button 54
- CHAPTER 3 55
- 3.1 Internet Setup Wizard 56
- 3.1.2 Screen 2 57
- 58 Chapter 3 Wizards 58
- Chapter 3 Wizards 59 59
- 3.1.3 Screen 3 60
- Chapter 3 Wizards 61 61
- 62 Chapter 3 Wizards 62
- 3.2.1 Screen 1 63
- 3.2.2 Screen 2 63
- 3.2.3 Screen 3 64
- Chapter 3 Wizards 65 65
- 66 Chapter 3 Wizards 66
- CHAPTER 4 67
- 4.2.1 Set up the Server 68
- 4.2.2 Set up the Client 68
- CHAPTER 5 71
- 5.1.2 Multiplexing 72
- 5.1.3 VPI and VCI 72
- 5.1.4 IP Address Assignment 73
- 5.1.6 NAT 73
- 5.2 Metric 74
- 5.3 Traffic Shaping 74
- 5.3.1 ATM Traffic Classes 75
- 5.4 Internet Connection 76
- Chapter 5 WAN Setup 77 77
- 78 Chapter 5 WAN Setup 78
- Chapter 5 WAN Setup 79 79
- 80 Chapter 5 WAN Setup 80
- 5.5.1 More Connections Edit 81
- 82 Chapter 5 WAN Setup 82
- Chapter 5 WAN Setup 83 83
- 84 Chapter 5 WAN Setup 84
- 5.6 Traffic Redirect 85
- 5.7 Dial Backup Interface 86
- Chapter 5 WAN Setup 87 87
- Check WAN IP Address 88
- 5.8.1 Advanced Backup Setup 89
- 90 Chapter 5 WAN Setup 90
- Chapter 5 WAN Setup 91 91
- 92 Chapter 5 WAN Setup 92
- Chapter 5 WAN Setup 93 93
- 94 Chapter 5 WAN Setup 94
- CHAPTER 6 95
- 6.1.2 DHCP Setup 96
- 6.1.3 DNS Server Address 96
- 6.2 LAN TCP/IP 97
- 6.2.2 RIP Setup 98
- 6.3 Configuring LAN IP 99
- 100 Chapter 6 LAN Setup 100
- Figure 34 LAN > IP 100
- Table 23 LAN > IP 100
- 6.4 DHCP Setup 101
- 102 Chapter 6 LAN Setup 102
- 6.5 LAN Client List 103
- 6.6 LAN IP Alias 104
- Chapter 6 LAN Setup 105 105
- Figure 39 LAN > IP Alias 105
- Table 27 LAN > IP Alias 105
- 106 Chapter 6 LAN Setup 106
- CHAPTER 7 107
- 7.1.2 What NAT Does 108
- 7.1.3 How NAT Works 108
- 7.1.4 NAT Application 109
- 7.1.5 NAT Mapping Types 109
- 7.3 NAT General Setup 110
- 7.4 Port Forwarding 111
- 7.6 Address Mapping 115
- CHAPTER 8 119
- 120 Chapter 8 Firewalls 120
- 8.4 Denial of Service 121
- 8.4.2 Types of DoS Attacks 122
- Chapter 8 Firewalls 123 123
- Figure 50 SYN Flood 123
- 8.4.2.1 ICMP Vulnerability 124
- 8.5 Stateful Inspection 125
- 126 Chapter 8 Firewalls 126
- 8.5.3 TCP Security 127
- 8.5.4 UDP/ICMP Security 127
- 8.5.5 Upper Layer Protocols 128
- 8.6.1 Security In General 128
- 8.7.1 Packet Filtering 129
- 8.7.2 Firewall 130
- CHAPTER 9 131
- 9.3 Rule Logic Overview 132
- 9.4 Connection Direction 133
- 9.5 Triangle Route 134
- Figure 55 IP Alias 135
- 9.7 Firewall Rules Summary 137
- 9.7.2 Customized Services 141
- 9.8 Example Firewall Rule 142
- 10.0.0.15 on the LAN 145
- 9.9 Anti-Probing 146
- 9.10 DoS Thresholds 147
- 9.10.2 Half-Open Sessions 148
- CHAPTER 10 151
- CHAPTER 11 155
- 11.1.1 IKE SA Overview 156
- 11.1.1.2 IKE SA Proposal 157
- 11.1.1.4 Authentication 158
- 11.1.2.1 Negotiation Mode 159
- 11.1.3 IPSec SA Overview 160
- 11.1.3.2 Active Protocol 161
- 11.1.3.3 Encapsulation 161
- 162 Chapter 11 IPSec VPN 162
- 11.2 VPN Setup Screen 163
- 164 Chapter 11 IPSec VPN 164
- Figure 78 VPN > Setup 164
- Table 50 VPN > Setup 164
- 11.3 Editing VPN Policies 165
- 166 Chapter 11 IPSec VPN 166
- Chapter 11 IPSec VPN 167 167
- 168 Chapter 11 IPSec VPN 168
- Chapter 11 IPSec VPN 169 169
- 170 Chapter 11 IPSec VPN 170
- Chapter 11 IPSec VPN 171 171
- 172 Chapter 11 IPSec VPN 172
- 11.5 Configuring Manual Key 173
- 174 Chapter 11 IPSec VPN 174
- Chapter 11 IPSec VPN 175 175
- 11.6 Viewing SA Monitor 176
- Chapter 11 IPSec VPN 177 177
- Figure 82 VPN > Monitor 177
- Table 54 VPN > Monitor 177
- 178 Chapter 11 IPSec VPN 178
- Chapter 11 IPSec VPN 179 179
- 180 Chapter 11 IPSec VPN 180
- Chapter 11 IPSec VPN 181 181
- 182 Chapter 11 IPSec VPN 182
- CHAPTER 12 183
- 12.2.1 Static Route Edit 184
- Chapter 12 Static Route 185 185
- 186 Chapter 12 Static Route 186
- CHAPTER 13 187
- 13.5 Scheduler 188
- 13.7 Configuring Summary 192
- 13.8.1 Rule Configuration 194
- 13.9 Bandwidth Monitor 197
- CHAPTER 14 199
- Device and the DDNS server 201
- CHAPTER 15 203
- 15.2 WWW 204
- 15.3 Telnet 205
- 15.4 Configuring Telnet 205
- 15.5 Configuring FTP 206
- 15.6 SNMP 207
- 15.6.1 Supported MIBs 208
- 15.6.2 SNMP Traps 208
- 15.6.3 Configuring SNMP 209
- 15.7 Configuring DNS 210
- 15.8 Configuring ICMP 211
- 15.9 TR-069 212
- Figure 103 Enabling TR-069 213
- Table 78 TR-069 Commands 213
- CHAPTER 16 215
- 16.2 UPnP and ZyXEL 216
- Table 79 UPnP > General 217
- Components selection box 218
- Figure 114 System Tray Icon 222
- Network 224
- CHAPTER 17 227
- 228 Chapter 17 System 228
- 17.2 Time Setting 229
- 230 Chapter 17 System 230
- Chapter 17 System 231 231
- 232 Chapter 17 System 232
- CHAPTER 18 233
- 234 Chapter 18 Logs 234
- Table 82 Logs > View Log 234
- Chapter 18 Logs 235 235
- 236 Chapter 18 Logs 236
- CHAPTER 19 237
- 238 Chapter 19 Tools 238
- 19.2 Configuration 239
- 240 Chapter 19 Tools 240
- 19.3 Restart 241
- 242 Chapter 19 Tools 242
- CHAPTER 20 243
- CHAPTER 21 245
- 21.2 SMT Menu Items 246
- Table 88 Main Menu Summary 247
- Table 89 SMT Menus Overview 247
- Table 90 Main Menu Commands 248
- CHAPTER 22 251
- 252 Chapter 22 General Setup 252
- 254 Chapter 22 General Setup 254
- CHAPTER 23 255
- 256 Chapter 23 WAN Setup 256
- 23.3 Dial Backup Interface 257
- 258 Chapter 23 WAN Setup 258
- Chapter 23 WAN Setup 259 259
- 260 Chapter 23 WAN Setup 260
- CHAPTER 24 261
- 262 Chapter 24 LAN Setup 262
- Chapter 24 LAN Setup 263 263
- None after you save your 263
- 24.4 LAN IP Alias 264
- 24.4.1 Port-based VLAN Setup 265
- 266 Chapter 24 LAN Setup 266
- CHAPTER 25 267
- CHAPTER 26 269
- Yes. Press [ENTER] 273
- 26.5 Remote Node Filter 275
- 26.7 Advance Setup Options 278
- CHAPTER 27 279
- CHAPTER 28 283
- 284 Chapter 28 NAT Setup 284
- 28.2 NAT Setup 285
- SUA and are read-only 286
- Chapter 28 NAT Setup 287 287
- 288 Chapter 28 NAT Setup 288
- Chapter 28 NAT Setup 289 289
- 28.4 General NAT Examples 290
- Chapter 28 NAT Setup 291 291
- Figure 169 NAT Example 2 291
- 292 Chapter 28 NAT Setup 292
- Chapter 28 NAT Setup 293 293
- Figure 171 NAT Example 3 293
- 2 Enter 2 to go to menu 15.2 294
- Chapter 28 NAT Setup 295 295
- Figure 176 NAT Example 4 295
- 296 Chapter 28 NAT Setup 296
- CHAPTER 29 297
- 298 Chapter 29 Firewall Setup 298
- CHAPTER 30 299
- 30.3 Example Filter 309
- 30.4 Filter Types and NAT 311
- 30.5 Firewall Versus Filters 311
- 30.6 Applying a Filter 311
- 30.6.1 Applying LAN Filters 312
- CHAPTER 31 313
- CHAPTER 32 315
- CHAPTER 33 317
- 33.3.1 System Information 319
- 33.3.2 Console Port Speed 320
- 33.4 Log and Trace 321
- 33.4.2 Syslog Logging 322
- 2 Packet triggered 323
- 3 Filter log 323
- 4 PPP log 324
- 5 Firewall log 324
- 33.5 Diagnostic 325
- CHAPTER 34 327
- 34.3 Backup Configuration 328
- 34.3.4 GUI-based FTP Clients 330
- 34.3.7 TFTP Command Example 331
- 34.4 Restore Configuration 333
- 34.5.1 Firmware File Upload 335
- 34.5.5 TFTP File Upload 337
- CHAPTER 35 341
- 35.2 Call Control Support 342
- 35.2.1 Budget Management 343
- 35.3 Time and Date Setting 344
- 35.4 Remote Management 346
- CHAPTER 36 349
- 36.4 IP Routing Policy Setup 350
- 36.5 IP Routing Policy Setup 350
- 36.6 IP Routing Policy 352
- (192.168.1.100) 355
- CHAPTER 37 357
- 37.3 Schedule Set Setup 358
- Chapter 37 Schedule Setup 359 359
- 360 Chapter 37 Schedule Setup 360
- CHAPTER 38 361
- 38.3 Problems with the WAN 362
- Appendix A 365
- Product Specifications 365
- APPENDIX B 367
- Appendix C 369
- Installing Components 370
- Configuring 370
- 4 Click the Gateway tab 371
- Windows 2000/NT/XP 372
- Properties 373
- Macintosh OS X 377
- Verifying Settings 379
- Using Configuration Files 381
- APPENDIX D 383
- Figure 263 Internet Options 384
- Figure 264 Internet Options 385
- JavaScripts 386
- Java Permissions 387
- JAVA (Sun) 388
- APPENDIX E 389
- 390 Appendix E Services 390
- Appendix E Services 391 391
- 392 Appendix E Services 392
- Appendix F 393
- IP Addresses and Subnetting 393
- Subnet Masks 395
- Subnetting 395
- Example: Two Subnets 396
- Example: Four Subnets 397
- Example Eight Subnets 399
- Appendix G 401
- Command Interpreter 401
- Appendix H 403
- Firewall Commands 403
- Appendix I 409
- NetBIOS Filter Commands 409
- NetBIOS Filter Configuration 410
- Appendix J 411
- Log Descriptions 411
- Table 157 System Error Logs 412
- Table 159 TCP Reset Logs 413
- Table 161 ICMP Logs 414
- Table 162 CDR Logs 414
- Table 163 PPP Logs 414
- Table 164 UPnP Logs 415
- Table 166 Attack Logs 416
- Table 167 IPSec Logs 417
- Table 168 IKE Logs 417
- Table 169 PKI Logs 420
- Table 171 802.1X Logs 422
- Table 172 ACL Setting Notes 423
- Table 173 ICMP Notes 423
- Table 174 Syslog Logs 424
- Log Commands 425
- Log Command Example 426
- Index 427 427
- 428 Index 428
- Index 429 429
- 430 Index 430
- Index 431 431
- 432 Index 432
Powiązane produkty i podręczniki dla Sprzęt komputerowy Zyxel-communications G.SHDSL.bis 4-port Security Gateway P-793H
(21 strony)
(10 strony)
(103 strony)
© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.045 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji