Zyxel-communications G-2000 Plus Manuel d'utilisateur

ZyAIR G-2000 Plus802.11g Wireless 4-port RouterUser’s GuideVersion 3.60 4/2005

ZyAIR G-2000 Plus User’s Guide9 Table of Contents1.2.2.16 PPPoE Support (RFC2516) ...401.2.2.

ZyAIR G-2000 Plus User’s Guide99 Chapter 7 Wireless SecurityFigure 35 Wireless: WPAThe following table describes the labels in this screen.Table 26

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 1007.9 Introduction to RADIUSRADIUS is based on a client-sever model that supports authenti

ZyAIR G-2000 Plus User’s Guide101 Chapter 7 Wireless SecurityThe following types of RADIUS messages are exchanged between the access point and the RA

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 1024 The RADIUS server checks the user information against its user profile database and det

ZyAIR G-2000 Plus User’s Guide103 Chapter 7 Wireless SecurityFigure 37 Wireless: WPAThe following table describes the labels in this screen.Table 2

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 1047.11 802.1x OverviewThe IEEE 802.1x standard outlines enhanced security methods for both

ZyAIR G-2000 Plus User’s Guide105 Chapter 7 Wireless Security•EAP-TLS•EAP-TTLS• PEAPNote: EAP-MD5 cannot be used with Dynamic WEP Key Exchange7.13 C

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 106Figure 38 Wireless: 802.1x and Dynamic WEPThe following table describes the labels in t

ZyAIR G-2000 Plus User’s Guide107 Chapter 7 Wireless Security7.14 Configuring 802.1x and Static WEP Key Exchange In order to configure and enable 80

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 108Figure 39 Wireless: 802.1x and Static WEPThe following table describes the labels in th

ZyAIR G-2000 Plus User’s Guide Table of Contents 103.6.1 WAN IP Address Assignment ...

ZyAIR G-2000 Plus User’s Guide109 Chapter 7 Wireless SecurityAuthentication MethodThis field is activated when you select 64-bit WEP or 128-bit WEP i

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 1107.15 Configuring 802.1x In order to configure and enable 802.1x; click the WIRELESS link

ZyAIR G-2000 Plus User’s Guide111 Chapter 7 Wireless SecurityFigure 40 Wireless: 802.1xThe following table describes the labels in this screen.Tabl

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 1127.16 MAC FilterThe MAC filter screen allows you to configure the ZyAIR to give exclusive

ZyAIR G-2000 Plus User’s Guide113 Chapter 7 Wireless SecurityFigure 41 MAC Address FilterThe following table describes the labels in this menu.Tabl

ZyAIR G-2000 Plus User’s GuideChapter 8 Internal RADIUS Server 114CHAPTER 8Internal RADIUS ServerThis chapter describes how to use the internal RADIUS

ZyAIR G-2000 Plus User’s Guide115 Chapter 8 Internal RADIUS ServerFigure 42 ZyAIR Authenticates Wireless StationsFigure 43 ZyAIR as a RADIUS serv

ZyAIR G-2000 Plus User’s GuideChapter 8 Internal RADIUS Server 1168.2 Internal RADIUS Server SettingThe INTERNAL RADIUS SERVER Setting screen display

ZyAIR G-2000 Plus User’s Guide117 Chapter 8 Internal RADIUS ServerFigure 44 Internal RADIUS Server Setting ScreenThe following table describes the

ZyAIR G-2000 Plus User’s GuideChapter 8 Internal RADIUS Server 1188.3 Trusted AP OverviewA trusted AP is an AP that uses the ZyAIR’s internal RADIUS

ZyAIR G-2000 Plus User’s Guide11 Table of ContentsChapter 7Wireless Security ...

ZyAIR G-2000 Plus User’s Guide119 Chapter 8 Internal RADIUS Server2 Configure wireless client user names and passwords in the Trusted Users database

ZyAIR G-2000 Plus User’s GuideChapter 8 Internal RADIUS Server 1208.5 Trusted Users OverviewA trusted user is a wireless client within the ZyAIR’s wi

ZyAIR G-2000 Plus User’s Guide121 Chapter 8 Internal RADIUS ServerFigure 47 Trusted Users ScreenThe following table describes the labels in this sc

ZyAIR G-2000 Plus User’s GuideChapter 8 Internal RADIUS Server 122Apply Click Apply to save your changes back to the ZyAIR.Reset Click Reset to begin

ZyAIR G-2000 Plus User’s Guide123 Chapter 8 Internal RADIUS Server

ZyAIR G-2000 Plus User’s GuideChapter 9 WAN 124CHAPTER 9WANThis chapter describes how to configure WAN settings.9.1 WAN OverviewA WAN (Wide Area Netw

ZyAIR G-2000 Plus User’s Guide125 Chapter 9 WANFigure 48 Ethernet EncapsulationThe following table describes the labels in this screen.Table 36 E

ZyAIR G-2000 Plus User’s GuideChapter 9 WAN 126Figure 49 Ethernet EncapsulationThe following table describes the labels in this screen.Table 37 Et

ZyAIR G-2000 Plus User’s Guide127 Chapter 9 WANFor the service provider, PPPoE offers an access and authentication method that works with existing ac

ZyAIR G-2000 Plus User’s GuideChapter 9 WAN 128Figure 50 PPPoE EncapsulationThe following table describes the labels in this screen.Table 38 PPPoE

ZyAIR G-2000 Plus User’s Guide Table of Contents 129.2.1 Ethernet Encapsulation ...

ZyAIR G-2000 Plus User’s Guide129 Chapter 9 WAN9.2.3 PPTP EncapsulationPoint-to-Point Tunneling Protocol (PPTP) is a network protocol that enables s

ZyAIR G-2000 Plus User’s GuideChapter 9 WAN 130Figure 51 PPTP EncapsulationThe following table describes the labels in this screen.Table 39 PPTP E

ZyAIR G-2000 Plus User’s Guide131 Chapter 9 WAN9.3 TCP/IP Priority (Metric)The metric represents the "cost of transmission". A router dete

ZyAIR G-2000 Plus User’s GuideChapter 9 WAN 132Figure 52 WAN: IP The following table describes the labels in this screen.Table 40 WAN: IPLABEL DES

ZyAIR G-2000 Plus User’s Guide133 Chapter 9 WANNetwork Address TranslationNetwork Address Translation (NAT) allows the translation of an Internet pro

ZyAIR G-2000 Plus User’s GuideChapter 9 WAN 1349.5 Configuring WAN MACTo change your ZyAIR’s WAN MAC settings, click WA N, then the WA N M A C tab.

ZyAIR G-2000 Plus User’s Guide135 Chapter 9 WANOtherwise, click Spoof this computer's MAC address - IP Address and enter the IP address of the c

ZyAIR G-2000 Plus User’s GuideChapter 10 Single User Account (SUA) / Network Address Translation (NAT) 136CHAPTER 10Single User Account (SUA) / Networ

Note: NAT never changes the IP address (either local or global) of an outside host.ZyAIR G-2000 Plus User’s Guide137 Chapter 10 Single User Account (

ZyAIR G-2000 Plus User’s GuideChapter 10 Single User Account (SUA) / Network Address Translation (NAT) 138Figure 54 How NAT Works10.1.4 NAT Applica

ZyAIR G-2000 Plus User’s Guide13 Table of Contents12.3 Configuring Telnet ...

ZyAIR G-2000 Plus User’s Guide139 Chapter 10 Single User Account (SUA) / Network Address Translation (NAT)Figure 55 NAT Application With IP Alias10

ZyAIR G-2000 Plus User’s GuideChapter 10 Single User Account (SUA) / Network Address Translation (NAT) 140The following table summarizes these types.T

ZyAIR G-2000 Plus User’s Guide141 Chapter 10 Single User Account (SUA) / Network Address Translation (NAT)You may enter a single port number or a ran

ZyAIR G-2000 Plus User’s GuideChapter 10 Single User Account (SUA) / Network Address Translation (NAT) 142The most often used port numbers are shown i

ZyAIR G-2000 Plus User’s Guide143 Chapter 10 Single User Account (SUA) / Network Address Translation (NAT)Figure 56 Multiple Servers Behind NAT Exa

ZyAIR G-2000 Plus User’s GuideChapter 10 Single User Account (SUA) / Network Address Translation (NAT) 144Figure 57 SUA/NAT SetupThe following table

ZyAIR G-2000 Plus User’s Guide145 Chapter 10 Single User Account (SUA) / Network Address Translation (NAT)10.5 Configuring Address MappingOrdering y

ZyAIR G-2000 Plus User’s GuideChapter 10 Single User Account (SUA) / Network Address Translation (NAT) 146Figure 58 Address MappingThe following tab

ZyAIR G-2000 Plus User’s Guide147 Chapter 10 Single User Account (SUA) / Network Address Translation (NAT)10.5.1 Configuring Address Mapping To edit

ZyAIR G-2000 Plus User’s GuideChapter 10 Single User Account (SUA) / Network Address Translation (NAT) 14810.6 Trigger Port ForwardingSome services u

ZyAIR G-2000 Plus User’s Guide Table of Contents 1414.5.4 UDP/ICMP Security ...

ZyAIR G-2000 Plus User’s Guide149 Chapter 10 Single User Account (SUA) / Network Address Translation (NAT)Figure 60 Trigger Port Forwarding Process

ZyAIR G-2000 Plus User’s GuideChapter 10 Single User Account (SUA) / Network Address Translation (NAT) 150Figure 61 Trigger PortThe following table

ZyAIR G-2000 Plus User’s Guide151 Chapter 10 Single User Account (SUA) / Network Address Translation (NAT)

ZyAIR G-2000 Plus User’s GuideChapter 11 Static Route Screens 152CHAPTER 11Static Route ScreensThis chapter shows you how to configure static routes f

ZyAIR G-2000 Plus User’s Guide153 Chapter 11 Static Route ScreensFigure 63 Static RouteThe following table describes the labels in this screen.Tabl

ZyAIR G-2000 Plus User’s GuideChapter 11 Static Route Screens 154Figure 64 Static Route: EditThe following table describes the labels in this screen

ZyAIR G-2000 Plus User’s Guide155 Chapter 11 Static Route Screens

ZyAIR G-2000 Plus User’s GuideChapter 12 Remote Management Screens 156CHAPTER 12Remote Management ScreensThis chapter provides information on the Remo

ZyAIR G-2000 Plus User’s Guide157 Chapter 12 Remote Management Screens1 A filter in SMT menu 3.1 (LAN) or in menu 11.5 (WAN) is applied to block a Te

ZyAIR G-2000 Plus User’s GuideChapter 12 Remote Management Screens 158Figure 65 Remote Management: WWWThe following table describes the labels in th

ZyAIR G-2000 Plus User’s Guide15 Table of Contents17.2 Self-signed Certificates ...

ZyAIR G-2000 Plus User’s Guide159 Chapter 12 Remote Management ScreensFigure 66 Telnet Configuration on a TCP/IP Network12.4 Configuring TELNETCli

ZyAIR G-2000 Plus User’s GuideChapter 12 Remote Management Screens 16012.5 Configuring FTPYou can upload and download the ZyAIR’s firmware and config

ZyAIR G-2000 Plus User’s Guide161 Chapter 12 Remote Management Screens12.6 SNMPSimple Network Management Protocol (SNMP) is a protocol used for exch

ZyAIR G-2000 Plus User’s GuideChapter 12 Remote Management Screens 162An agent is a management software module that resides in a managed device (the Z

ZyAIR G-2000 Plus User’s Guide163 Chapter 12 Remote Management Screens12.6.3 Configuring SNMPTo change your ZyAIR’s SNMP settings, click REMOTE MGMT

ZyAIR G-2000 Plus User’s GuideChapter 12 Remote Management Screens 164Figure 70 Remote Management: SNMPThe following table describes the labels in t

ZyAIR G-2000 Plus User’s Guide165 Chapter 12 Remote Management Screens12.7 Configuring DNSUse DNS (Domain Name System) to map a domain name to its c

ZyAIR G-2000 Plus User’s GuideChapter 12 Remote Management Screens 16612.8 Configuring SecurityTo change your ZyAIR’s security settings, click REMOTE

ZyAIR G-2000 Plus User’s Guide167 Chapter 12 Remote Management ScreensFigure 72 SecurityThe following table describes the labels in this screen.Tab

ZyAIR G-2000 Plus User’s GuideChapter 13 UPnP 168CHAPTER 13UPN PThis chapter introduces the Universal Plug and Play feature.13.1 Universal Plug and

ZyAIR G-2000 Plus User’s Guide Table of Contents 16Chapter 21General Setup...

ZyAIR G-2000 Plus User’s Guide169 Chapter 13 UPnPAll UPnP-enabled devices may communicate freely with each other without additional configuration. Di

ZyAIR G-2000 Plus User’s GuideChapter 13 UPnP 170Figure 73 Configuring UPnPThe following table describes the labels in this screen.Table 57 Config

ZyAIR G-2000 Plus User’s Guide171 Chapter 13 UPnP13.4.1 Installing UPnP in Windows MeFollow the steps below to install UPnP in Windows Me. 1 Click S

ZyAIR G-2000 Plus User’s GuideChapter 13 UPnP 17213.4.2 Installing UPnP in Windows XPFollow the steps below to install UPnP in Windows XP.1 Click Sta

ZyAIR G-2000 Plus User’s Guide173 Chapter 13 UPnP13.5 Using UPnP in Windows XP ExampleThis section shows you how to use the UPnP feature in Windows

ZyAIR G-2000 Plus User’s GuideChapter 13 UPnP 17413.5.1 Auto-discover Your UPnP-enabled Network Device1 Click Start and Control Panel. Double-click N

ZyAIR G-2000 Plus User’s Guide175 Chapter 13 UPnP13.5.2 Web Configurator Easy AccessWith UPnP, you can access the web-based configurator on the ZyXE

1 Click Start and then Control Panel. 2 Double-click Network Connections. 3 Select My Network Places under Other Places. 4 An icon with the descriptio

ZyAIR G-2000 Plus User’s Guide177 Chapter 13 UPnPFollow the steps below to access the web configurator.1 Click Start and then Control Panel.2 Double-

ZyAIR G-2000 Plus User’s GuideChapter 14 Firewalls 178CHAPTER 14FirewallsThis chapter gives some background information on firewalls and introduces th

ZyAIR G-2000 Plus User’s Guide17 Table of ContentsChapter 26Static Route Setup ...

ZyAIR G-2000 Plus User’s Guide179 Chapter 14 Firewalls1 Information hiding prevents the names of internal systems from being made known via DNS to ou

ZyAIR G-2000 Plus User’s GuideChapter 14 Firewalls 180Figure 74 ZyAIR Firewall Application14.4 Denial of ServiceDenials of Service (DoS) attacks ar

ZyAIR G-2000 Plus User’s Guide181 Chapter 14 Firewalls14.4.2 Types of DoS AttacksThere are four types of DoS attacks: 1 Those that exploit bugs in a

ZyAIR G-2000 Plus User’s GuideChapter 14 Firewalls 182Figure 75 Three-Way HandshakeUnder normal circumstances, the application that initiates a sess

ZyAIR G-2000 Plus User’s Guide183 Chapter 14 FirewallsFigure 76 SYN Floodb In a LAND Attack, hackers flood SYN packets into the network with a spoo

ZyAIR G-2000 Plus User’s GuideChapter 14 Firewalls 184Figure 77 Smurf Attack14.4.2.1 ICMP Vulnerability ICMP is an error-reporting protocol that wo

ZyAIR G-2000 Plus User’s Guide185 Chapter 14 Firewalls14.5 Stateful InspectionWith stateful inspection, fields of the packets are compared to packet

ZyAIR G-2000 Plus User’s GuideChapter 14 Firewalls 1863 The firewall inspects packets to determine and record information about the state of the packe

ZyAIR G-2000 Plus User’s Guide187 Chapter 14 FirewallsBelow is a brief technical description of how these connections are tracked. Connections may ei

ZyAIR G-2000 Plus User’s GuideChapter 14 Firewalls 18814.5.5 Upper Layer ProtocolsSome higher layer protocols (such as FTP and RealAudio) utilize mul

ZyAIR G-2000 Plus User’s Guide Table of Contents 1830.2 Access Methods ...

ZyAIR G-2000 Plus User’s Guide189 Chapter 14 Firewalls14.7.1 Packet Filtering:• The router filters packets as they pass through the router’s interfa

ZyAIR G-2000 Plus User’s GuideChapter 14 Firewalls 1906 The firewall can block specific URL traffic that might occur in the future. The URL can be sav

ZyAIR G-2000 Plus User’s Guide191 Chapter 14 Firewalls

ZyAIR G-2000 Plus User’s GuideChapter 15 Firewall Screens 192CHAPTER 15Firewall ScreensThis chapter shows you how to configure your ZyAIR firewall.15.

ZyAIR G-2000 Plus User’s Guide193 Chapter 15 Firewall ScreensYou may define additional rules and sets or modify existing ones but please exercise ext

ZyAIR G-2000 Plus User’s GuideChapter 15 Firewall Screens 19415.3.2 Security RamificationsOnce the logic of the rule has been defined, it is critical

ZyAIR G-2000 Plus User’s Guide195 Chapter 15 Firewall Screens15.4 Connection Direction ExamplesThis section describes examples for firewall rules fo

ZyAIR G-2000 Plus User’s GuideChapter 15 Firewall Screens 196Figure 80 WAN to LAN Traffic15.5 AlertsAlerts are reports on events, such as attacks,

ZyAIR G-2000 Plus User’s Guide197 Chapter 15 Firewall ScreensFigure 81 Default Rule The following table describes the labels in this screen.Table 6

ZyAIR G-2000 Plus User’s GuideChapter 15 Firewall Screens 198Figure 82 Rule SummaryThe following table describes the labels in this screen.Table 61

ZyAIR G-2000 Plus User’s Guide19 Table of Contents34.2.5 Backup Configuration Using TFTP ...3543

ZyAIR G-2000 Plus User’s Guide199 Chapter 15 Firewall Screens15.6.2 Configuring Firewall RulesFollow these directions to create a new rule.1 In the

ZyAIR G-2000 Plus User’s GuideChapter 15 Firewall Screens 200Figure 83 Creating/Editing A Firewall Rule

ZyAIR G-2000 Plus User’s Guide201 Chapter 15 Firewall ScreensThe following table describes the labels in this screen.Table 62 Creating/Editing A Fi

ZyAIR G-2000 Plus User’s GuideChapter 15 Firewall Screens 20215.6.3 Configuring Custom ServicesConfigure customized ports for services not predefined

ZyAIR G-2000 Plus User’s Guide203 Chapter 15 Firewall Screens15.7 Example Firewall Rule The following Internet firewall rule example allows a hypoth

ZyAIR G-2000 Plus User’s GuideChapter 15 Firewall Screens 204Figure 86 Rule Edit Example6 In the Edit Rule screen, click Add under Custom Service to

ZyAIR G-2000 Plus User’s Guide205 Chapter 15 Firewall ScreensFigure 88 My Service Rule Configuration

ZyAIR G-2000 Plus User’s GuideChapter 15 Firewall Screens 206Figure 89 My Service Example Rule Summary Rule 1: Allows a My Service connection from t

ZyAIR G-2000 Plus User’s Guide207 Chapter 15 Firewall ScreensFTP(TCP:20.21) File Transfer Program, a program to enable fast transfer of files, inclu

ZyAIR G-2000 Plus User’s GuideChapter 15 Firewall Screens 208SMTP(TCP:25) Simple Mail Transfer Protocol is the message-exchange standard for the Inte

ZyAIR G-2000 Plus User’s Guide Table of Contents 20Appendix DIP Address Assignment Conflicts ...

ZyAIR G-2000 Plus User’s Guide209 Chapter 15 Firewall Screens

ZyAIR G-2000 Plus User’s GuideChapter 16 Content Filtering 210CHAPTER 16Content Filtering This chapter provides a brief overview of content filtering

ZyAIR G-2000 Plus User’s Guide211 Chapter 16 Content FilteringFigure 90 Content FilterThe following table describes the labels in this screen.Table

ZyAIR G-2000 Plus User’s GuideChapter 16 Content Filtering 212Keyword Type a keyword in this field. You may use any character (up to 64 characters). W

ZyAIR G-2000 Plus User’s Guide213 Chapter 16 Content Filtering

ZyAIR G-2000 Plus User’s GuideChapter 17 Certificates 214CHAPTER 17CertificatesThis chapter gives background information about public-key certificates

ZyAIR G-2000 Plus User’s Guide215 Chapter 17 Certificates17.1.1 Advantages of CertificatesCertificates offer the following benefits.• The ZyAIR only

ZyAIR G-2000 Plus User’s GuideChapter 17 Certificates 216Figure 91 My CertificatesThe following table describes the labels in this screen.Table 66

ZyAIR G-2000 Plus User’s Guide217 Chapter 17 CertificatesType This field displays what kind of certificate this is. REQ represents a certification re

ZyAIR G-2000 Plus User’s GuideChapter 17 Certificates 21817.5 Certificate File FormatsThe certification authority certificate that you want to import

ZyAIR G-2000 Plus User’s Guide21 Table of Contents

ZyAIR G-2000 Plus User’s Guide219 Chapter 17 CertificatesFigure 92 My Certificate ImportThe following table describes the labels in this screen.Tab

ZyAIR G-2000 Plus User’s GuideChapter 17 Certificates 220Figure 93 My Certificate Create

ZyAIR G-2000 Plus User’s Guide221 Chapter 17 CertificatesThe following table describes the labels in this screen.Table 68 My Certificate Create LAB

ZyAIR G-2000 Plus User’s GuideChapter 17 Certificates 222After you click Apply in the My Certificate Create screen, you see a screen that tells you th

ZyAIR G-2000 Plus User’s Guide223 Chapter 17 CertificatesFigure 94 My Certificate Details

ZyAIR G-2000 Plus User’s GuideChapter 17 Certificates 224The following table describes the labels in this screen.Table 69 My Certificate Details LAB

ZyAIR G-2000 Plus User’s Guide225 Chapter 17 Certificates17.9 Trusted CAsClick CERTIFICATES, Trusted CAs to open the Trusted CAs screen. This screen

ZyAIR G-2000 Plus User’s GuideChapter 17 Certificates 226Figure 95 Trusted CAsThe following table describes the labels in this screen.Table 70 Tru

ZyAIR G-2000 Plus User’s Guide227 Chapter 17 Certificates17.10 Importing a Trusted CA’s CertificateClick CERTIFICATES, Trusted CAs to open the Trust

ZyAIR G-2000 Plus User’s GuideChapter 17 Certificates 22817.11 Trusted CA Certificate DetailsClick CERTIFICATES, Trusted CAs to open the Trusted CAs

ZyAIR G-2000 Plus User’s Guide List of Figures 22List of FiguresFigure 1 Internet Access Application Example ...

ZyAIR G-2000 Plus User’s Guide229 Chapter 17 CertificatesFigure 97 Trusted CA Details

ZyAIR G-2000 Plus User’s GuideChapter 17 Certificates 230The following table describes the labels in this screen.Table 72 Trusted CA Details LABEL D

ZyAIR G-2000 Plus User’s Guide231 Chapter 17 CertificatesKey Algorithm This field displays the type of algorithm that was used to generate the certif

ZyAIR G-2000 Plus User’s GuideChapter 18 Log Screens 232CHAPTER 18Log ScreensThis chapter contains information about configuring general log settings

ZyAIR G-2000 Plus User’s Guide233 Chapter 18 Log Screens18.2 Configuring Log SettingsTo change your ZyAIR’s log settings, click the LOGS links under

ZyAIR G-2000 Plus User’s GuideChapter 18 Log Screens 234Figure 99 Log Settings

ZyAIR G-2000 Plus User’s Guide235 Chapter 18 Log ScreensThe following table describes the labels in this screen.Table 74 Log SettingsLABEL DESCRIPT

ZyAIR G-2000 Plus User’s GuideChapter 18 Log Screens 23618.3 Configuring ReportsThe Reports page displays which computers on the LAN send and receive

ZyAIR G-2000 Plus User’s Guide237 Chapter 18 Log ScreensFigure 100 ReportsNote: Enabling the ZyAIR’s reporting function decreases the overall throu

Note: All of the recorded reports data is erased when you turn off the ZyAIR.ZyAIR G-2000 Plus User’s GuideChapter 18 Log Screens 238

ZyAIR G-2000 Plus User’s Guide23 List of FiguresFigure 37 Wireless: WPA ...

ZyAIR G-2000 Plus User’s Guide239 Chapter 18 Log Screens

ZyAIR G-2000 Plus User’s GuideChapter 19 Maintenance 240CHAPTER 19MaintenanceThis chapter displays system information such as ZyNOS firmware, port IP

ZyAIR G-2000 Plus User’s Guide241 Chapter 19 MaintenanceFigure 101 System StatusThe following table describes the labels in this screen.Table 76

ZyAIR G-2000 Plus User’s GuideChapter 19 Maintenance 24219.2.1 System StatisticsRead-only information here includes port status, packet specific stat

ZyAIR G-2000 Plus User’s Guide243 Chapter 19 MaintenanceClick MAINTENANCE, and then the DHCP Table tab. Read-only information here relates to your DH

ZyAIR G-2000 Plus User’s GuideChapter 19 Maintenance 244Figure 104 Association ListThe following table describes the labels in this screen.Table 79

ZyAIR G-2000 Plus User’s Guide245 Chapter 19 MaintenanceFigure 105 Firmware UploadThe following table describes the labels in this screen.Table 80

ZyAIR G-2000 Plus User’s GuideChapter 19 Maintenance 246Figure 106 Firmware Upload In ProcessThe ZyAIR automatically restarts in this time causing a

ZyAIR G-2000 Plus User’s Guide247 Chapter 19 MaintenanceFigure 108 Firmware Upload Error19.6 Configuration ScreenSee the Firmware and Configuratio

ZyAIR G-2000 Plus User’s GuideChapter 19 Maintenance 248Figure 109 Configuration19.6.1 Backup ConfigurationBackup configuration allows you to back

ZyAIR G-2000 Plus User’s Guide List of Figures 24Figure 80 WAN to LAN Traffic ...

ZyAIR G-2000 Plus User’s Guide249 Chapter 19 MaintenanceAfter you see a “restore configuration successful” screen, you must then wait one minute befo

ZyAIR G-2000 Plus User’s GuideChapter 19 Maintenance 250Figure 112 Configuration Upload Error19.6.3 Back to Factory DefaultsPressing the Reset butt

ZyAIR G-2000 Plus User’s Guide251 Chapter 19 MaintenanceFigure 114 Restart Screen

ZyAIR G-2000 Plus User’s GuideChapter 20 Introducing the SMT 252CHAPTER 20Introducing the SMTThis chapter explains how to access and navigate the Syst

ZyAIR G-2000 Plus User’s Guide253 Chapter 20 Introducing the SMTPlease note that if there is no activity for longer than five minutes after you log i

ZyAIR G-2000 Plus User’s GuideChapter 20 Introducing the SMT 254Figure 118 ZyAIR G-2000 Plus SMT Menu Overview Example20.5 Navigating the SMT Inter

ZyAIR G-2000 Plus User’s Guide255 Chapter 20 Introducing the SMTAfter you enter the password, the SMT displays the main menu, as shown next.Move to a

ZyAIR G-2000 Plus User’s GuideChapter 20 Introducing the SMT 256Figure 119 ZyAIR G-2000 Plus SMT Main Menu Copyright (c) 1994 - 2004 Zy

ZyAIR G-2000 Plus User’s Guide257 Chapter 20 Introducing the SMTChange the ZyAIR default password by following the steps shown next. 1 Enter 23 in th

ZyAIR G-2000 Plus User’s GuideChapter 21 General Setup 258CHAPTER 21General SetupThe chapter shows you the information on general setup.21.1 General

ZyAIR G-2000 Plus User’s Guide25 List of FiguresFigure 123 Menu 1.1 Configure Dynamic DNS ...

ZyAIR G-2000 Plus User’s Guide259 Chapter 21 General SetupFigure 122 Menu 1 General Setup Menu 1 - General Setup

ZyAIR G-2000 Plus User’s GuideChapter 21 General Setup 26021.1.2 Procedure to Configure Dynamic DNSNote: If you have a private WAN IP address, then y

ZyAIR G-2000 Plus User’s Guide261 Chapter 21 General SetupEnable WildcardsYour ZyAIR supports DYNDNS Wildcard. Press [SPACE BAR] and then [ENTER] to

ZyAIR G-2000 Plus User’s GuideChapter 22 Menu 2 WAN Setup 262CHAPTER 22Menu 2 WAN SetupThis chapter describes how to configure the WAN using menu 2.22

ZyAIR G-2000 Plus User’s Guide263 Chapter 22 Menu 2 WAN Setup

ZyAIR G-2000 Plus User’s GuideChapter 23 LAN Setup 264CHAPTER 23LAN SetupThis chapter shows you how to configure wired Local Area Network (LAN) settin

ZyAIR G-2000 Plus User’s Guide265 Chapter 23 LAN Setup23.2 Protocol Dependent Ethernet SetupDepending on the protocols for your applications, you ne

ZyAIR G-2000 Plus User’s GuideChapter 23 LAN Setup 266Use the instructions in the following table to configure TCP/IP parameters for the LAN port.Tabl

ZyAIR G-2000 Plus User’s Guide267 Chapter 23 LAN Setup23.3.1 IP Alias SetupIP alias allows you to partition a physical network into different logica

ZyAIR G-2000 Plus User’s GuideChapter 23 LAN Setup 268Figure 129 Menu 3.2.1: IP Alias Setup Menu 3.2.1 - IP Alias Setup

ZyAIR G-2000 Plus User’s Guide List of Figures 26Figure 166 Example 4: Menu 15.1.1 Address Mapping Rules ...

ZyAIR G-2000 Plus User’s Guide269 Chapter 23 LAN SetupFigure 130 Menu 3.5 Wireless LAN Setup Menu 3.5 - Wireless LAN Setup

ZyAIR G-2000 Plus User’s GuideChapter 23 LAN Setup 27023.4.1 Configuring MAC Address FilterYour ZyAIR checks the MAC address of the wireless station

ZyAIR G-2000 Plus User’s Guide271 Chapter 23 LAN Setup2 Enter 5 to display Menu 3.5 – Wireless LAN Setup.Figure 131 Menu 3.5 Wireless LAN Setup

ZyAIR G-2000 Plus User’s GuideChapter 23 LAN Setup 272Figure 132 Menu 3.5.1 WLAN MAC Address Filter Menu 3.5.1 - WLAN MAC

ZyAIR G-2000 Plus User’s Guide273 Chapter 23 LAN Setup

ZyAIR G-2000 Plus User’s GuideChapter 24 Internet Access 274CHAPTER 24Internet AccessThis chapter shows you how to configure your ZyAIR for Internet a

ZyAIR G-2000 Plus User’s Guide275 Chapter 24 Internet AccessFigure 133 Menu 4 - Internet Access Setup I

ZyAIR G-2000 Plus User’s GuideChapter 24 Internet Access 27624.3 Configuring the PPTP ClientNote: The ZyAIR supports only one PPTP server connection

ZyAIR G-2000 Plus User’s Guide277 Chapter 24 Internet AccessFigure 134 Internet Access Setup (PPTP) Menu 4 - Internet Acce

ZyAIR G-2000 Plus User’s GuideChapter 24 Internet Access 278Figure 135 Menu 4 - Internet Access Setup IS

ZyAIR G-2000 Plus User’s Guide27 List of FiguresFigure 209 Budget Management ...

ZyAIR G-2000 Plus User’s Guide279 Chapter 24 Internet Access

ZyAIR G-2000 Plus User’s GuideChapter 25 Remote Node Configuration 280CHAPTER 25Remote Node ConfigurationThis chapter covers remote node configuration

ZyAIR G-2000 Plus User’s Guide281 Chapter 25 Remote Node ConfigurationFigure 136 Menu 11.1 - Remote Node Profile

ZyAIR G-2000 Plus User’s GuideChapter 25 Remote Node Configuration 28225.2.2 PPPoE EncapsulationThe ZyAIR supports PPPoE (Point-to-Point Protocol ove

ZyAIR G-2000 Plus User’s Guide283 Chapter 25 Remote Node ConfigurationFigure 137 Menu 11.1 - Remote Node Profile Rem Node Na

ZyAIR G-2000 Plus User’s GuideChapter 25 Remote Node Configuration 284The following table describes the fields not already described insee Table 95.Ta

ZyAIR G-2000 Plus User’s Guide285 Chapter 25 Remote Node ConfigurationFigure 138 Menu 11.1 - Remote Node Profile Rem Node Name= C

ZyAIR G-2000 Plus User’s GuideChapter 25 Remote Node Configuration 286Figure 139 Menu 11.3 Remote Node Network Layer Options for Ethernet Encapsulat

ZyAIR G-2000 Plus User’s Guide287 Chapter 25 Remote Node Configuration25.4 Remote Node FilterMove the cursor to the field Edit Filter Sets in menu 1

ZyAIR G-2000 Plus User’s GuideChapter 25 Remote Node Configuration 288Figure 140 MMenu 11.5 - Remote Node Filter Input Filter Sets: prot

ZyAIR G-2000 Plus User’s Guide List of Tables 28List of TablesTable 1 IEEE 802.11b ...

ZyAIR G-2000 Plus User’s Guide289 Chapter 25 Remote Node Configuration

ZyAIR G-2000 Plus User’s GuideChapter 26 Static Route Setup 290CHAPTER 26Static Route SetupThis chapter shows how to setup IP static routes.26.1 IP S

ZyAIR G-2000 Plus User’s Guide291 Chapter 26 Static Route SetupFigure 143 Menu12.1 Edit IP Static RouteMenu 12.1 - Edit IP Static Route Rou

ZyAIR G-2000 Plus User’s GuideChapter 27 Dial-in User Setup 292CHAPTER 27Dial-in User SetupThis chapter shows you how to create user accounts on the Z

ZyAIR G-2000 Plus User’s Guide293 Chapter 27 Dial-in User SetupFigure 145 Menu 14.1- Edit Dial-in User Menu 14.1 - Edit Dial

ZyAIR G-2000 Plus User’s GuideChapter 28 Network Address Translation (NAT) 294CHAPTER 28Network Address Translation (NAT)This chapter discusses how to

ZyAIR G-2000 Plus User’s Guide295 Chapter 28 Network Address Translation (NAT)Figure 146 Menu 4 Applying NAT for Internet Access

ZyAIR G-2000 Plus User’s GuideChapter 28 Network Address Translation (NAT) 296Figure 147 Menu 11.3 - Remote Node Network Layer Opti

ZyAIR G-2000 Plus User’s Guide297 Chapter 28 Network Address Translation (NAT)Figure 148 Menu 15 - NAT Setup 1. Address Mapping Sets

ZyAIR G-2000 Plus User’s GuideChapter 28 Network Address Translation (NAT) 298Figure 150 Menu 15.1.255 SUA Address Mapping Rules

ZyAIR G-2000 Plus User’s Guide Copyright 2CopyrightCopyright © 2005 by ZyXEL Communications Corporation.The contents of this publication may not be re

ZyAIR G-2000 Plus User’s Guide29 List of TablesTable 37 Ethernet Encapsulation ...

ZyAIR G-2000 Plus User’s Guide299 Chapter 28 Network Address Translation (NAT)Figure 151 Menu 15.1.1 - Address Mapping Rules Set Name= NAT_SET Idx

Note: You must press [ENTER] at the bottom of the screen to save the whole set. You must do this again if you make any changes to the set – including

ZyAIR G-2000 Plus User’s Guide301 Chapter 28 Network Address Translation (NAT)28.4 Configuring a Server behind NATFollow these steps to configure a

ZyAIR G-2000 Plus User’s GuideChapter 28 Network Address Translation (NAT) 302Figure 154 Multiple Servers Behind NAT Example28.5 General NAT Exampl

ZyAIR G-2000 Plus User’s Guide303 Chapter 28 Network Address Translation (NAT)Figure 155 NAT Example 1Figure 156 Menu 4

ZyAIR G-2000 Plus User’s GuideChapter 28 Network Address Translation (NAT) 304Figure 157 NAT Example 2In this case, you do exactly as above (use the

ZyAIR G-2000 Plus User’s Guide305 Chapter 28 Network Address Translation (NAT)4 You also map your third IGA to the web server and mail server on the

ZyAIR G-2000 Plus User’s GuideChapter 28 Network Address Translation (NAT) 306Figure 160 Menu 11.3 - Remote Node Network Layer Opt

ZyAIR G-2000 Plus User’s Guide307 Chapter 28 Network Address Translation (NAT)Figure 161 Example 3: Menu 15.1.1.1 Menu 15.1.1.1 Address Mapping Rul

ZyAIR G-2000 Plus User’s GuideChapter 28 Network Address Translation (NAT) 308Figure 163 Example 3: Menu 15.2 Menu 15.2 - NAT Ser

ZyAIR G-2000 Plus User’s Guide List of Tables 30Table 80 Firmware Upload ...

ZyAIR G-2000 Plus User’s Guide309 Chapter 28 Network Address Translation (NAT)Figure 164 NAT Example 4Note: Other applications such as some gaming

ZyAIR G-2000 Plus User’s GuideChapter 28 Network Address Translation (NAT) 310Figure 166 Example 4: Menu 15.1.1 Address Mapping RulesMenu 15.1.1 - A

ZyAIR G-2000 Plus User’s Guide311 Chapter 28 Network Address Translation (NAT)Figure 167 Menu 15.3 Trigger Port Setup Menu 15.3 - Trigger Port

ZyAIR G-2000 Plus User’s GuideChapter 29 Filter Configuration 312CHAPTER 29Filter ConfigurationThis chapter shows you how to create and apply filters.

ZyAIR G-2000 Plus User’s Guide313 Chapter 29 Filter Configuration29.1.1 The Filter Structure of the ZyAIRA filter set consists of one or more filter

ZyAIR G-2000 Plus User’s GuideChapter 29 Filter Configuration 314Figure 169 Filter Rule ProcessYou can apply up to four filter sets to a particular

ZyAIR G-2000 Plus User’s Guide315 Chapter 29 Filter ConfigurationFigure 170 Menu 21: Filter and Firewall SetupMenu 21 - Filter and Firewall Setup

ZyAIR G-2000 Plus User’s GuideChapter 29 Filter Configuration 316The protocol dependent filter rules abbreviation are listed as follows:Table 107 Ru

ZyAIR G-2000 Plus User’s Guide317 Chapter 29 Filter Configuration29.2.2 Configuring a TCP/IP Filter RuleThis section shows you how to configure a TC

ZyAIR G-2000 Plus User’s GuideChapter 29 Filter Configuration 318Port # Enter the destination port of the packets that you wish to filter. The range o

ZyAIR G-2000 Plus User’s Guide31 List of TablesTable 123 Call History Fields ...

ZyAIR G-2000 Plus User’s Guide319 Chapter 29 Filter ConfigurationThe following figure illustrates the logic flow of an IP filter.Figure 173 Executi

ZyAIR G-2000 Plus User’s GuideChapter 29 Filter Configuration 320For generic rules, the ZyAIR treats a packet as a byte stream as opposed to an IP or

ZyAIR G-2000 Plus User’s Guide321 Chapter 29 Filter Configuration29.3 Example FilterLet’s look at an example to block outside users from accessing t

ZyAIR G-2000 Plus User’s GuideChapter 29 Filter Configuration 3225 Press [ENTER] at the message [Press ENTER to confirm] to open Menu 21.1.3 - Filter

ZyAIR G-2000 Plus User’s Guide323 Chapter 29 Filter ConfigurationFigure 177 Menu 21.1.3 - Filter Rules Summary # A Type

ZyAIR G-2000 Plus User’s GuideChapter 29 Filter Configuration 324Figure 178 Protocol and Device Filter Sets29.5 Firewall Versus FiltersFirewall con

ZyAIR G-2000 Plus User’s Guide325 Chapter 29 Filter ConfigurationFigure 179 Filtering LAN TrafficMenu 3.1 - LAN Port Filter Setup Input

ZyAIR G-2000 Plus User’s GuideChapter 30 Enabling the Firewall 326CHAPTER 30Enabling the FirewallThis chapter shows you how to get started with the Zy

ZyAIR G-2000 Plus User’s Guide327 Chapter 30 Enabling the FirewallFigure 181 Menu 21.2 Firewall Setup Menu 21.2 - Firewal

ZyAIR G-2000 Plus User’s GuideChapter 31 SNMP Configuration 328CHAPTER 31SNMP ConfigurationThis chapter explains SNMP Configuration menu 22.31.1 Abou

ZyAIR G-2000 Plus User’s Guide Preface 32PrefaceCongratulations on your purchase of the ZyAIR G-2000 Plus - 802.11g Wireless 4 port Router.A wireless

ZyAIR G-2000 Plus User’s Guide329 Chapter 31 SNMP ConfigurationThe managed devices contain object variables/managed objects that define each piece of

ZyAIR G-2000 Plus User’s GuideChapter 31 SNMP Configuration 330Figure 183 Menu 22 SNMP ConfigurationMenu 22 - SNMP ConfigurationSNMP: Get Communit

ZyAIR G-2000 Plus User’s Guide331 Chapter 31 SNMP ConfigurationThe following table maps the physical port and encapsulation to the interface type,Tab

ZyAIR G-2000 Plus User’s GuideChapter 32 System Security 332CHAPTER 32System SecurityThis chapter describes how to configure the system security on th

ZyAIR G-2000 Plus User’s Guide333 Chapter 32 System SecurityFigure 185 Menu 23 System Security Menu 23 - System Security

ZyAIR G-2000 Plus User’s GuideChapter 32 System Security 33432.1.3 802.1x The IEEE 802.1x standards outline enhanced security methods for both the au

ZyAIR G-2000 Plus User’s Guide335 Chapter 32 System SecurityFigure 188 Menu 23.4 System Security : IEEE802.1x Menu 23.4 - System

ZyAIR G-2000 Plus User’s GuideChapter 32 System Security 336Once you enable user authentication, you need to specify an external RADIUS server or crea

ZyAIR G-2000 Plus User’s Guide337 Chapter 32 System Security

ZyAIR G-2000 Plus User’s GuideChapter 33 System Information and Diagnosis 338CHAPTER 33System Information and DiagnosisThis chapter covers the informa

ZyAIR G-2000 Plus User’s Guide33 PrefaceUser Guide Feedback Help us help you! E-mail all User Guide-related comments, questions or suggestions for i

ZyAIR G-2000 Plus User’s Guide339 Chapter 33 System Information and DiagnosisFigure 190 Menu 24.1 System Maintenance : Status M

ZyAIR G-2000 Plus User’s GuideChapter 33 System Information and Diagnosis 34033.2 System InformationTo get to the System Information:1 Enter 24 to di

ZyAIR G-2000 Plus User’s Guide341 Chapter 33 System Information and Diagnosis33.2.2 Console Port SpeedYou can set up different port speeds for the c

ZyAIR G-2000 Plus User’s GuideChapter 33 System Information and Diagnosis 342Figure 194 Menu 24.3 System Maintenance : Log and Trace

ZyAIR G-2000 Plus User’s Guide343 Chapter 33 System Information and Diagnosis33.3.2.1 CDRSdcmdSyslogSend ( SYSLOG_CDR, SYSLOG_INFO, String);String =

ZyAIR G-2000 Plus User’s GuideChapter 33 System Information and Diagnosis 34433.3.2.3 Filter log Filter log Message FormatSdcmdSyslogSend(SYSLOG_FILL

ZyAIR G-2000 Plus User’s Guide345 Chapter 33 System Information and Diagnosis33.3.2.5 Firewall logFirewall Log Message FormatSdcmdSyslogSend(SYSLOG_

ZyAIR G-2000 Plus User’s GuideChapter 33 System Information and Diagnosis 346Figure 196 IP Frame: ENET0-RECV Size: 44/ 44 Time: 17:02:44.262 Fra

ZyAIR G-2000 Plus User’s Guide347 Chapter 33 System Information and Diagnosis2 From this menu, type 4. Diagnostic to open Menu 24.4 – System Maintena

ZyAIR G-2000 Plus User’s GuideChapter 33 System Information and Diagnosis 348WAN DHCP Renewal Get a new IP address from the DHCP server. Reboot Syste

ZyAIR G-2000 Plus User’s Guide Preface 34Graphics Icons KeyZyAIR Computer Notebook computerServer DSLAM FirewallModem Switch Router Wireless Signal

ZyAIR G-2000 Plus User’s Guide349 Chapter 33 System Information and Diagnosis

ZyAIR G-2000 Plus User’s GuideChapter 34 Firmware and Configuration File Maintenance 350CHAPTER 34Firmware and Configuration File MaintenanceThis chap

ZyAIR G-2000 Plus User’s Guide351 Chapter 34 Firmware and Configuration File MaintenanceThe following table is a summary. Please note that the intern

ZyAIR G-2000 Plus User’s GuideChapter 34 Firmware and Configuration File Maintenance 352Figure 198 Menu 24.5 Backup Configuration

ZyAIR G-2000 Plus User’s Guide353 Chapter 34 Firmware and Configuration File MaintenanceFigure 199 FTP Session Example331 Enter PASS commandPasswor

ZyAIR G-2000 Plus User’s GuideChapter 34 Firmware and Configuration File Maintenance 35434.2.5 Backup Configuration Using TFTPThe ZyAIR supports the

ZyAIR G-2000 Plus User’s Guide355 Chapter 34 Firmware and Configuration File Maintenance34.2.7 GUI-based TFTP ClientsThe following table describes s

ZyAIR G-2000 Plus User’s GuideChapter 34 Firmware and Configuration File Maintenance 356Figure 200 Menu 24.6 Restore Configuration

ZyAIR G-2000 Plus User’s Guide357 Chapter 34 Firmware and Configuration File Maintenance34.4 Uploading Firmware and Configuration FilesMenu 24.7 – S

ZyAIR G-2000 Plus User’s GuideChapter 34 Firmware and Configuration File Maintenance 358Figure 203 Menu 24.7.1 System Maintenance : Upload System Fi

ZyAIR G-2000 Plus User’s Guide35 Preface

ZyAIR G-2000 Plus User’s Guide359 Chapter 34 Firmware and Configuration File Maintenance4 Enter “root” and your SMT password as requested. The defaul

ZyAIR G-2000 Plus User’s GuideChapter 34 Firmware and Configuration File Maintenance 3605 Use the TFTP client (see the example below) to transfer file

ZyAIR G-2000 Plus User’s Guide361 Chapter 34 Firmware and Configuration File Maintenance

ZyAIR G-2000 Plus User’s GuideChapter 35 System Maintenance and Information 362CHAPTER 35System Maintenance and InformationThis chapter leads you thro

ZyAIR G-2000 Plus User’s Guide363 Chapter 35 System Maintenance and InformationFigure 206 Menu 24 System Maintenance Menu

ZyAIR G-2000 Plus User’s GuideChapter 35 System Maintenance and Information 364Figure 208 Menu 24.9 System Maintenance : Call Control Menu 24.9

ZyAIR G-2000 Plus User’s Guide365 Chapter 35 System Maintenance and InformationFigure 210 Menu 24.9.2 - Call History Menu

ZyAIR G-2000 Plus User’s GuideChapter 35 System Maintenance and Information 366Figure 211 Menu 24.10 System Maintenance : Time and Date Setting

ZyAIR G-2000 Plus User’s Guide367 Chapter 35 System Maintenance and Information35.3.1 Resetting the TimeThe ZyAIR resets the time in three instances

ZyAIR G-2000 Plus User’s GuideChapter 36 Remote Management 368CHAPTER 36Remote ManagementThis chapter covers remote management (SMT menu 24.11).36.1

ZyAIR G-2000 Plus User’s GuideChapter 1 Getting to Know Your ZyAIR 36CHAPTER 1Getting to Know Your ZyAIRThis chapter introduces the main features and

ZyAIR G-2000 Plus User’s Guide369 Chapter 36 Remote ManagementFigure 212 Menu 24.11 - Remote Management Control TELNET Ser

ZyAIR G-2000 Plus User’s GuideChapter 36 Remote Management 370Figure 213 Telnet Configuration on a TCP/IP Network36.1.2 FTPYou can upload and downl

ZyAIR G-2000 Plus User’s Guide371 Chapter 36 Remote Management• Use the ZyAIR’s WAN IP address when configuring from the WAN. • Use the ZyAIR’s LAN I

ZyAIR G-2000 Plus User’s GuideChapter 37 Call Scheduling 372CHAPTER 37Call SchedulingCall scheduling (applicable for PPPoA or PPPoE encapsulation only

ZyAIR G-2000 Plus User’s Guide373 Chapter 37 Call Scheduling To setup a schedule set, select the schedule set you want to setup from menu 26 (1-12) a

ZyAIR G-2000 Plus User’s GuideChapter 37 Call Scheduling 374Once your schedule sets are configured, you must then apply them to the desired remote nod

ZyAIR G-2000 Plus User’s Guide375 Chapter 37 Call Scheduling

ZyAIR G-2000 Plus User’s GuideAppendix A 376Appendix ATroubleshootingThis appendix covers potential problems and possible remedies. After each proble

ZyAIR G-2000 Plus User’s Guide377 Appendix A Problems with the PasswordProblems with TelnetProblems with the WLAN InterfaceTable 129 Troubleshootin

ZyAIR G-2000 Plus User’s GuideAppendix B 378Appendix BBrute-Force Password Guessing ProtectionThe following describes the commands for enabling, disa

ZyAIR G-2000 Plus User’s Guide37 Chapter 1 Getting to Know Your ZyAIR1.2.1.4 10/100 Mbps Ethernet WANThe 10/100 Mbps Ethernet WAN port attaches to t

ZyAIR G-2000 Plus User’s Guide379 Appendix B

ZyAIR G-2000 Plus User’s GuideAppendix C 380Appendix CSetting up Your Computer’s IP AddressAll computers must have a 10M or 100M Ethernet adapter car

ZyAIR G-2000 Plus User’s Guide381 Appendix C Figure 217 WIndows 95/98/Me: Network: ConfigurationInstalling ComponentsThe Network window Configurati

ZyAIR G-2000 Plus User’s GuideAppendix C 3823 Select Microsoft from the list of manufacturers.4 Select Client for Microsoft Networks from the list of

ZyAIR G-2000 Plus User’s Guide383 Appendix C Figure 219 Windows 95/98/Me: TCP/IP Properties: DNS Configuration4 Click the Gateway tab.• If you do n

ZyAIR G-2000 Plus User’s GuideAppendix C 384Figure 220 Windows XP: Start Menu2 For Windows XP, click Network Connections. For Windows 2000/NT, clic

ZyAIR G-2000 Plus User’s Guide385 Appendix C Figure 222 Windows XP: Control Panel: Network Connections: Properties4 Select Internet Protocol (TCP/I

ZyAIR G-2000 Plus User’s GuideAppendix C 386• If you have a static IP address click Use the following IP Address and fill in the IP address, Subnet m

ZyAIR G-2000 Plus User’s Guide387 Appendix C • Click Obtain DNS server address automatically if you do not know your DNS server IP address(es).• If y

ZyAIR G-2000 Plus User’s GuideAppendix C 388Figure 226 Macintosh OS 8/9: Apple Menu2 Select Ethernet built-in from the Connect via list.Figure 227

ZyAIR G-2000 Plus User’s GuideChapter 1 Getting to Know Your ZyAIR 381.2.2.4 802.11g Wireless LAN StandardThe ZyAIR, complies with the 802.11g wirele

ZyAIR G-2000 Plus User’s Guide389 Appendix C 4 For statically assigned settings, do the following:•From the Configure box, select Manually.• Type you

ZyAIR G-2000 Plus User’s GuideAppendix C 390Figure 229 Macintosh OS X: Network4 For statically assigned settings, do the following:•From the Config

ZyAIR G-2000 Plus User’s Guide391 Appendix C

ZyAIR G-2000 Plus User’s GuideAppendix D 392Appendix DIP Address Assignment ConflictsThis appendix describes situations where IP address conflicts ma

ZyAIR G-2000 Plus User’s Guide393 Appendix D Figure 231 IP Address Conflicts: Case BTo solve this problem, make sure the ZyAIR LAN IP address is n

ZyAIR G-2000 Plus User’s GuideAppendix D 394In this case, the subscribers are not able to access the Internet. Figure 233 IP Address Conflicts: Cas

ZyAIR G-2000 Plus User’s Guide395 Appendix D

ZyAIR G-2000 Plus User’s GuideAppendix E 396Appendix EIP SubnettingIP Addressing Routers “route” based on the network number. The router that deliver

ZyAIR G-2000 Plus User’s Guide397 Appendix E Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” addre

ZyAIR G-2000 Plus User’s GuideAppendix E 398Since the mask is always a continuous number of ones beginning from the left, followed by a continuous nu

ZyAIR G-2000 Plus User’s Guide3 Federal Communications Commission (FCC) Interference StatementFederal Communications Commission (FCC) Interference S

ZyAIR G-2000 Plus User’s Guide39 Chapter 1 Getting to Know Your ZyAIR1.2.2.9 FirewallThe ZyAIR employs a stateful inspection firewall with DoS (Deni

ZyAIR G-2000 Plus User’s Guide399 Appendix E Divide the network 192.168.1.0 into two separate subnets by converting one of the host ID bits of the IP

ZyAIR G-2000 Plus User’s GuideAppendix E 400Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” addr

Table 143 Subnet 4 NETWORK NUMBER LAST OCTET BIT VALUEIP Address 192.168.1. 192IP Address (Binary) 11000000.10101000.00000001. 11000000Subnet Mask

ZyAIR G-2000 Plus User’s GuideAppendix E 402Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also

ZyAIR G-2000 Plus User’s Guide403 Appendix E

ZyAIR G-2000 Plus User’s GuideAppendix F 404Appendix FCommand InterpreterThe following describes how to use the command interpreter. Enter 24 in the

ZyAIR G-2000 Plus User’s Guide405 Appendix F

ZyAIR G-2000 Plus User’s GuideAppendix G 406Appendix GLog DescriptionsThis appendix provides descriptions of example log messagesTable 147 System E

ZyAIR G-2000 Plus User’s Guide407 Appendix G Log CommandsGo to the command interpreter interface (the Command Interpreter Appendix explains how to ac

ZyAIR G-2000 Plus User’s GuideAppendix G 408Configuring What You Want the ZyAIR to LogUse the sys logs load command to load the log setting buffer th

ZyAIR G-2000 Plus User’s GuideChapter 1 Getting to Know Your ZyAIR 401.2.2.16 PPPoE Support (RFC2516)PPPoE (Point-to-Point Protocol over Ethernet) em

ZyAIR G-2000 Plus User’s Guide409 Appendix G Log Command ExampleThis example shows how to set the ZyAIR to record the error logs and alerts and then

ZyAIR G-2000 Plus User’s GuideAppendix H 410Appendix HWireless LAN and IEEE 802.11A wireless LAN (WLAN) provides a flexible data communications syste

ZyAIR G-2000 Plus User’s Guide411 Appendix H Ad-hoc Wireless LAN ConfigurationThe simplest WLAN configuration is an independent (Ad-hoc) WLAN that co

ZyAIR G-2000 Plus User’s GuideAppendix H 412Figure 235 ESS Provides Campus-Wide Coverage

ZyAIR G-2000 Plus User’s Guide413 Appendix H

ZyAIR G-2000 Plus User’s GuideAppendix I 414Appendix IWireless LAN With IEEE 802.1xAs wireless networks become popular for both portable computing an

ZyAIR G-2000 Plus User’s Guide415 Appendix I RADIUS Server Authentication SequenceThe following figure depicts a typical wireless network with a remo

ZyAIR G-2000 Plus User’s GuideAppendix I 416Figure 237 Sequences for PEAP, MS–CHAP V2 Authentication

ZyAIR G-2000 Plus User’s Guide417 Appendix I

ZyAIR G-2000 Plus User’s GuideAppendix J 418Appendix JTypes of EAP AuthenticationThis appendix discusses popular EAP authentication types.The type of

ZyAIR G-2000 Plus User’s Guide41 Chapter 1 Getting to Know Your ZyAIR1.2.2.22 MulticastTraditionally, IP packets are transmitted in two ways - unica

ZyAIR G-2000 Plus User’s Guide419 Appendix J PEAP (Protected EAP) Like EAP-TTLS, server-side certificate authentication is used to establish a secu

ZyAIR G-2000 Plus User’s GuideAppendix K 420Appendix KAntenna Selection and Positioning RecommendationAn antenna couples RF signals onto air. A trans

ZyAIR G-2000 Plus User’s Guide421 Appendix K • Omni-directional antennas send the RF signal out in all directions on a horizontal plane. The coverage

ZyAIR G-2000 Plus User’s GuideAppendix L 422Appendix LPower Adaptor SpecificationsTable 153 NORTH AMERICAN PLUG STANDARDSAC Power Adaptor Model AD

Table 158 Australia and New Zealand plug standardsAC Power Adaptor Model AD-1201200DS or AD-121200DSInput Power AC240Volts/50Hz/0.2AOutput Power DC1

ZyAIR G-2000 Plus User’s Guide Index 424IndexNumerics802.1x 104AAction for Matched Packets 202Active 281ActiveX 211Allocated Budget 284Alternative Sub

ZyAIR G-2000 Plus User’s Guide425 IndexDirect Sequence Spread Spectrum 410Distribution System 411DNS 165Domain Name 142DoSBasics 180Types 181DS 411D

ZyAIR G-2000 Plus User’s Guide Index 426Idle Timeout 283, 284IEEE 802.1x 39IGMP 71, 72Independent Basic Service Set 78, 411Inside 136Inside Global Add

ZyAIR G-2000 Plus User’s Guide427 IndexOOne to One 139Outside 136PPacket Filtering 189Packet Filtering Firewalls 178Packets 339Password 67, 252, 253

ZyAIR G-2000 Plus User’s Guide Index 428Spain, Contact Information 6SSL Passthrough 38Stateful Inspection 178, 179, 185Process 185Static Route 152STP

ZyAIR G-2000 Plus User’s GuideChapter 1 Getting to Know Your ZyAIR 421.2.2.29 Embedded FTP and TFTP ServersThe ZyAIR’s embedded FTP and TFTP servers

ZyAIR G-2000 Plus User’s Guide429 IndexWizard Setup 48, 49, 50WLAN 410Worldwide Contact Information 5WPA 37, 93WPA with RADIUS Application 97WPA-PSK

ZyAIR G-2000 Plus User’s Guide43 Chapter 1 Getting to Know Your ZyAIR

ZyAIR G-2000 Plus User’s GuideChapter 2 Introducing the Web Configurator 44CHAPTER 2Introducing the Web ConfiguratorThis chapter describes how to acce

ZyAIR G-2000 Plus User’s Guide45 Chapter 2 Introducing the Web ConfiguratorFigure 2 Change Password Screen6 Click Apply in the Replace Certificate

ZyAIR G-2000 Plus User’s GuideChapter 2 Introducing the Web Configurator 462.3 Resetting the ZyAIRIf you forget your password or cannot access the we

ZyAIR G-2000 Plus User’s Guide47 Chapter 2 Introducing the Web ConfiguratorFigure 4 The MAIN MENU Screen of the Web ConfiguratorUse submenus to con

ZyAIR G-2000 Plus User’s GuideChapter 3 Wizard Setup 48CHAPTER 3Wizard SetupThe web configurator’s setup wizard helps you configure your ZyAIR for Int

ZyAIR G-2000 Plus User’s Guide ZyXEL Limited Warranty 4ZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that this product is

ZyAIR G-2000 Plus User’s Guide49 Chapter 3 Wizard Setup3.1.4 WPA-PSKWi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i security specificat

ZyAIR G-2000 Plus User’s GuideChapter 3 Wizard Setup 50Figure 5 Wizard 1 : General SetupThe following table describes the labels in this screen.Tabl

ZyAIR G-2000 Plus User’s Guide51 Chapter 3 Wizard SetupFigure 6 Wizard 2 : Wireless LAN SetupThe following table describes the labels in this scree

ZyAIR G-2000 Plus User’s GuideChapter 3 Wizard Setup 52Figure 7 Wizard 3: Wireless LAN Setup: Basic SecurityThe following table describes the labels

ZyAIR G-2000 Plus User’s Guide53 Chapter 3 Wizard SetupFigure 8 Wizard 3: Wireless LAN Setup: Extend SecurityThe following table describes the labe

ZyAIR G-2000 Plus User’s GuideChapter 3 Wizard Setup 54Figure 9 Wizard 4: Ethernet EncapsulationThe following table describes the labels in this scr

ZyAIR G-2000 Plus User’s Guide55 Chapter 3 Wizard Setup3.5.2 PPPoE EncapsulationPoint-to-Point Protocol over Ethernet (PPPoE) functions as a dial-up

ZyAIR G-2000 Plus User’s GuideChapter 3 Wizard Setup 56Figure 10 Wizard 4: PPPoE EncapsulationThe following table describes the labels in this scree

ZyAIR G-2000 Plus User’s Guide57 Chapter 3 Wizard SetupPPTP supports on-demand, multi-protocol, and virtual private networking over public networks,

ZyAIR G-2000 Plus User’s GuideChapter 3 Wizard Setup 583.6 Wizard Setup: Screen 5 The fifth wizard screen allows you to configure WAN IP address assi

ZyAIR G-2000 Plus User’s Guide5 Customer SupportCustomer SupportPlease have the following information ready when you contact customer support.• Prod

ZyAIR G-2000 Plus User’s Guide59 Chapter 3 Wizard Setup3.6.2 IP Address and Subnet MaskSimilar to the way houses on a street share a common street n

ZyAIR G-2000 Plus User’s GuideChapter 3 Wizard Setup 60You can configure the WAN port's MAC address by either using the factory default or clonin

ZyAIR G-2000 Plus User’s Guide61 Chapter 3 Wizard SetupFigure 12 Wizard 5: WAN SetupThe following table describes the labels in this screenTable 12

ZyAIR G-2000 Plus User’s GuideChapter 3 Wizard Setup 623.7 Basic Setup CompleteClick Back to return to the previous screen or click Finish to complet

ZyAIR G-2000 Plus User’s Guide63 Chapter 3 Wizard SetupFigure 13 Wizard FinishWell done! You have successfully set up the ZyAIR. A congratulations

ZyAIR G-2000 Plus User’s GuideChapter 4 System Screens 64CHAPTER 4System Screens4.1 System OverviewThis section provides information on general syste

ZyAIR G-2000 Plus User’s Guide65 Chapter 4 System Screens4.3 Dynamic DNSDynamic DNS allows you to update your current dynamic IP address with one or

ZyAIR G-2000 Plus User’s GuideChapter 4 System Screens 664.4 Configuring Dynamic DNSTo change your ZyAIR’s DDNS, click SYSTEM, then the DDNS tab. The

ZyAIR G-2000 Plus User’s Guide67 Chapter 4 System Screens4.5 Configuring PasswordTo change your ZyAIR’s password (recommended), click the SYSTEM lin

ZyAIR G-2000 Plus User’s GuideChapter 4 System Screens 684.6 Configuring Time SettingTo change your ZyAIR’s time and date, click the SYSTEM link und

ZyAIR G-2000 Plus User’s Guide Customer Support 6SPAIN [email protected] +34 902 195 420 www.zyxel.es Z y X E L Co mm un ic a t io ns

ZyAIR G-2000 Plus User’s Guide69 Chapter 4 System ScreensNew Time (hh:mm:ss) This field displays the last updated time from the time server.When you

ZyAIR G-2000 Plus User’s GuideChapter 5 LAN Screens 70CHAPTER 5LAN Screens This chapter describes how to configure LAN settings.5.1 LAN OverviewLocal

ZyAIR G-2000 Plus User’s Guide71 Chapter 5 LAN Screens• IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits)• DHCP server enabled wi

ZyAIR G-2000 Plus User’s GuideChapter 5 LAN Screens 72224.0.0.0 is not assigned to any group and is used by IP multicast computers. The address 224.0.

ZyAIR G-2000 Plus User’s Guide73 Chapter 5 LAN ScreensFigure 18 LAN IPThe following table describes the labels in this screen.Table 17 LAN IPLABE

ZyAIR G-2000 Plus User’s GuideChapter 5 LAN Screens 74First DNS ServerSecond DNS ServerThird DNS Server Select From ISP if your ISP dynamically assign

ZyAIR G-2000 Plus User’s Guide75 Chapter 5 LAN Screens5.5 Configuring Static DHCPThis table allows you to assign IP addresses on the LAN to specific

ZyAIR G-2000 Plus User’s GuideChapter 5 LAN Screens 76Figure 19 Static DHCPThe following table describes the labels in this screen.Table 18 Static

ZyAIR G-2000 Plus User’s Guide77 Chapter 5 LAN ScreensFigure 20 IP AliasThe following table describes the labels in this screen.Table 19 IP Alias

ZyAIR G-2000 Plus User’s GuideChapter 6 Wireless Configuration and Roaming 78CHAPTER 6Wireless Configuration and RoamingThis chapter discusses how to

ZyAIR G-2000 Plus User’s Guide7 Customer Support

ZyAIR G-2000 Plus User’s Guide79 Chapter 6 Wireless Configuration and RoamingIntra-BSS traffic is traffic between wireless stations in the BSS. When

ZyAIR G-2000 Plus User’s GuideChapter 6 Wireless Configuration and Roaming 80Figure 23 Extended Service Set6.2 Wireless LAN Basics Refer also to th

ZyAIR G-2000 Plus User’s Guide81 Chapter 6 Wireless Configuration and RoamingFigure 24 RTS/CTS When station A sends data to the ZyAIR, it might not

ZyAIR G-2000 Plus User’s GuideChapter 6 Wireless Configuration and Roaming 82A large Fragmentation Threshold is recommended for networks not prone to

ZyAIR G-2000 Plus User’s Guide83 Chapter 6 Wireless Configuration and RoamingFigure 25 Wireless The following table describes the general wireless

ZyAIR G-2000 Plus User’s GuideChapter 6 Wireless Configuration and Roaming 84See the Wireless Security chapter for information on the other labels in

ZyAIR G-2000 Plus User’s Guide85 Chapter 6 Wireless Configuration and Roaming1 As wireless station Y moves from the coverage area of access point P1

ZyAIR G-2000 Plus User’s GuideChapter 6 Wireless Configuration and Roaming 86Figure 27 RoamingThe following table describes the labels in this scree

ZyAIR G-2000 Plus User’s Guide87 Chapter 6 Wireless Configuration and Roaming

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 88CHAPTER 7Wireless SecurityThis Chapter describes how to use the MAC Filter, 802.1x, Roamin

ZyAIR G-2000 Plus User’s Guide Table of Contents 8Table of ContentsCopyright ...

ZyAIR G-2000 Plus User’s Guide89 Chapter 7 Wireless SecurityFigure 29 Wireless: No SecurityThe following table describes the labels in this screen.

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 907.2 Security Parameters SummaryRefer to this table to see what other security parameters

ZyAIR G-2000 Plus User’s Guide91 Chapter 7 Wireless SecurityFigure 30 WEP Authentication StepsOpen system authentication involves an unencrypted tw

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 92Figure 31 Wireless: Static WEP EncryptionThe following table describes the wireless LAN

ZyAIR G-2000 Plus User’s Guide93 Chapter 7 Wireless Security7.5 Introduction to WPAWi-Fi Protected Access (WPA) is a subset of the IEEE 802.11i secu

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 947.5.2 Encryption WPA improves data encryption by using Temporal Key Integrity Protocol (T

ZyAIR G-2000 Plus User’s Guide95 Chapter 7 Wireless SecurityFigure 32 WPA - PSK Authentication7.6 Configuring WPA-PSK Authentication In order to c

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 96Figure 33 Wireless: WPA-PSKThe following table describes the labels in this screen.Table

ZyAIR G-2000 Plus User’s Guide97 Chapter 7 Wireless Security7.7 Wireless Client WPA SupplicantsA wireless client supplicant is the software that run

ZyAIR G-2000 Plus User’s GuideChapter 7 Wireless Security 98Figure 34 WPA with RADIUS Application Example7.8 Configuring WPA Authentication In orde