Zyxel-communications 202H Manuel d'utilisateur Page 135
- Page / 309
- Table des matières
- DEPANNAGE
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
Prestige 202H User’s Guide
Firewalls 12-5
Figure 12-2 Three-Way Handshake
Under normal circumstances, the application that initiates a session sends a SYN (synchronize) packet to the
receiving server. The receiver sends back an ACK (acknowledgment) packet and its own SYN, and then the
initiator responds with an ACK (acknowledgment). After this handshake, a connection is established.
2-a SYN Attack floods a targeted system with a series of SYN packets. Each packet causes the
targeted system to issue a SYN-ACK response. While the targeted system waits for the ACK that
follows the SYN-ACK, it queues up all outstanding SYN-ACK responses on what is known as a
backlog queue. SYN-ACKs are moved off the queue only when an ACK comes back or when an
internal timer (which is set at relatively long intervals) terminates the three-way handshake. Once
the queue is full, the system will ignore all incoming SYN requests, making the system unavailable
for legitimate users.
Figure 12-3 SYN Flood
- Prestige 202H 1
- Copyright 2
- Interference Statement 3
- Caution 4
- ZyXEL Limited Warranty 5
- Customer Support 6
- Table of Contents 7
- List of Figures 14
- List of Tables 21
- Preface 25
- Part I: 27
- Chapter 1 29
- 1.3.1 Internet Access 32
- 1.3.2 LAN-to-LAN Connection 33
- 1.3.3 Remote Access Server 34
- Chapter 2 37
- Hardware Installation 37
- 2.3 Turn On Your Router 39
- Chapter 3 41
- Introducing the SMT 41
- Enter Password : XXXX 42
- 3.5 SMT Menu Overview 44
- 3.7 Resetting the Prestige 46
- Chapter 4 49
- SMT Menu 1 General Setup 49
- 4.3 Dynamic DNS 50
- 4.4 Configuring Dynamic DNS 51
- Chapter 5 53
- ISDN Setup 53
- Switch Type 54
- Calling Line Indication 54
- PABX Outside Line Prefix 54
- Data Link Connection 55
- 5.3 NetCAPI 57
- 5.3.3 RVS-COM 58
- 5.3.4 Configuring NetCAPI 59
- 5-8 ISDN Setup 60
- Chapter 6 61
- Ethernet Setup 61
- 6.2.3 Private IP Addresses 63
- 6.2.4 RIP Setup 63
- 6.2.5 DHCP Configuration 64
- , as shown 65
- 6.4 IP Alias 66
- 6.5 IP Alias Setup 67
- 6-8 Ethernet Setup 68
- Chapter 7 69
- Internet Access Setup 69
- 7.2 Internet Access Setup 70
- Part II: 72
- Chapter 8 73
- Remote Node Configuration 73
- 8.4 PPP Multilink 78
- 8.5 Bandwidth on Demand 78
- 8.6 Editing PPP Options 79
- 8.7 LAN-to-LAN Application 81
- 8.9 Configuring Filter 86
- Chapter 9 89
- Static Route Setup 89
- Chapter 10 93
- Dial-in Setup 93
- Dial-in Setup 10-3 95
- 10-4 Dial-in Setup 96
- 10.4 Callback Overview 97
- 10.5 Dial-In User Setup 97
- Both and 103
- No respectively 103
- Both and Yes 103
- Required 105
- Chapter 11 107
- 11.1.2 What NAT Does 108
- 11.1.3 How NAT Works 108
- 11.1.4 NAT Application 109
- 11.1.5 NAT Mapping Types 110
- 11.2 Applying NAT 112
- 11.3 NAT Setup 113
- 11.3.1 Address Mapping Sets 114
- 11.3.3 Ordering Your Rules 116
- 11.5 General NAT Examples 121
- Part III: 130
- Chapter 12 131
- Firewalls 131
- 12.4 Denial of Service 133
- 12.4.2 Types of DoS Attacks 134
- 5 REDIRECT 136
- 13 TIMESTAMP_REQUEST 136
- 14 TIMESTAMP_REPLY 136
- 17 ADDRESS_MASK_REQUEST 136
- 18 ADDRESS_MASK_REPLY 136
- 12.5 Stateful Inspection 137
- 12.5.3 TCP Security 140
- 12.5.4 UDP/ICMP Security 140
- 12.5.5 Upper Layer Protocols 140
- 12.6.1 Security In General 141
- 12.7.1 Packet Filtering: 142
- 12.7.2 Firewall 143
- Chapter 13 145
- Prestige 202H User’s Guide 147
- Table 13-1 View Firewall Log 147
- Chapter 14 149
- Configurator 149
- 14.2 Enabling the Firewall 151
- 14.3 E-mail 151
- 14.3.1 Alerts 152
- Table 14-2 E-mail 153
- 14.3.2 SMTP Error Messages 154
- 14.3.3 Example E-mail Log 154
- 14.4 Attack Alert 155
- 14.4.2 Half-Open Sessions 156
- Table 14-4 Attack Alert 158
- Chapter 15 161
- Creating Custom Rules 161
- Service 162
- 15.3 Connection Direction 163
- 15.4 Rule Summary 164
- 15.5 Predefined Services 166
- 15.6 Timeout 172
- Chapter 16 175
- Customized Services 175
- 16.3 Example Firewall Rule 177
- 10.0.0.15 on the LAN 180
- Click Apply to save your 180
- Chapter 17 181
- Firewall Logs 181
- 17-2 Firewall Logs 182
- Table 17-1 Log Screen 182
- Part IV: 183
- Chapter 18 185
- Filter Configuration 185
- Built-in 186
- Call Filters 186
- Filter Rule 187
- Filter Set 187
- 18.3.1 TCP/IP Filter Rule 193
- 18.3.2 Generic Filter Rule 198
- 18.4 Filter Types and NAT 200
- 18.5 Example Filter 200
- 18.6.1 Ethernet Traffic 204
- 18.6.2 Remote Node Filters 204
- Chapter 19 207
- SNMP Configuration 207
- 19.2 Supported MIBs 208
- 19.3 SNMP Configuration 208
- 19.4 SNMP Traps 209
- Chapter 20 211
- 20.3.1 System Information 214
- 20.4 Log and Trace 215
- 20.4.2 Unix Syslog 216
- FIELD DESCRIPTION 218
- Firewall log 218
- 20.5 Accounting Server 219
- 20.6 Call Triggering Packet 220
- 20.7 Diagnostic 221
- Chapter 21 225
- Maintenance 225
- 21.2 Backup Configuration 226
- 21.2.1 Backup Configuration 227
- 21.2.4 GUI-based FTP Clients 228
- 21.2.7 TFTP Command Example 229
- 21.3 Restore Configuration 231
- 21.3.1 Restore Using FTP 232
- 21.4.1 Firmware File Upload 234
- 21.4.5 TFTP File Upload 237
- Choose the Xmodem protocol 239
- Then click Send 239
- Chapter 22 243
- SMT Menus 24.8 to 24.10 243
- 22.2 Call Control Support 244
- 22.2.2 Black List 245
- 22.2.3 Budget Management 246
- 22.2.4 Call History 247
- 22.3 Time and Date 248
- 22.3.1 Resetting the Time 250
- Chapter 23 251
- Call Scheduling 251
- 23.3 Applying Schedule Sets 253
- 23-4 Call Scheduling 254
- Chapter 24 255
- Remote Management 255
- 24.2 Telnet 256
- 24.3 FTP 256
- 24.4 Web 256
- DESCRIPTION 257
- Chapter 25 259
- Introduction to VPN/IPSec 259
- 25.1.4 VPN Applications 260
- 25.2 IPSec Architecture 261
- 25.2.1 IPSec Algorithms 262
- 25.2.2 Key Management 262
- 25.3 Encapsulation 263
- 25.4 IPSec and NAT 264
- Chapter 26 265
- VPN/IPSec Setup 265
- 26.2 IPSec Algorithms 266
- 26.3 My IP Address 267
- 26.4 Secure Gateway Address 267
- 26.5 IPSec Summary 268
- VPN/IPSec Setup 26-5 269
- 26-6 VPN/IPSec Setup 270
- VPN/IPSec Setup 26-7 271
- 26.6 Keep Alive 272
- 26.7 ID Type and Content 272
- 26.8 Pre-Shared Key 274
- 26.9 IPSec Setup 274
- 26-12 VPN/IPSec Setup 276
- VPN/IPSec Setup 26-13 277
- 192.168.1.35 277
- 26-14 VPN/IPSec Setup 278
- 26.10 IKE Phases 279
- 26.10.1 Negotiation Mode 281
- VPN/IPSec Setup 26-19 283
- 26.12 Manual Key Setup 284
- VPN/IPSec Setup 26-21 285
- Chapter 27 289
- SA Monitor 289
- 27-2 SA Monitor 290
- Chapter 28 291
- IPSec Log 291
- IPSec Log 28-3 293
- IPSec Log 28-5 295
- Part V: 296
- Appendix A 298
- Troubleshooting 298
- Problems With the ISDN Line 299
- Remote User Dial-in Problems 300
- Problems With the Password 300
- Appendix B 302
- Power Adapter Specifications 302
- Index I 306
- J Index 307
Produits connexes et manuels pour Matériel Zyxel-communications 202H
(2 pages)
(133 pages)© 2020, manymanuals.fr. Tous droits réservés | 0.047 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels