ZyXEL Communications P-2602HW-63C Guide de l'utilisateur Page 172
- Page / 550
- Table des matières
- MARQUE LIVRES
Noté. / 5. Basé sur avis des utilisateurs
Prestige 2602H/HW Series User’s Guide
172 Chapter 13 Firewalls
amount of ICMP echo request and response traffic. If a hacker chooses to spoof the
source IP address of the ICMP echo request packet, the resulting ICMP traffic will not
only clog up the "intermediary" network, but will also congest the network of the spoofed
source IP address, known as the "victim" network. This flood of broadcast traffic
consumes all available bandwidth, making communications impossible.
Figure 69 Smurf Attack
13.4.2.1 ICMP Vulnerability
ICMP is an error-reporting protocol that works in concert with IP. The following ICMP types
trigger an alert:
13.4.2.2 Illegal Commands (NetBIOS and SMTP)
The only legal NetBIOS commands are the following - all others are illegal.
All SMTP commands are illegal except for those displayed in the following tables.
Table 51 ICMP Commands That Trigger Alerts
5 REDIRECT
13 TIMESTAMP_REQUEST
14 TIMESTAMP_REPLY
17 ADDRESS_MASK_REQUEST
18 ADDRESS_MASK_REPLY
Table 52 Legal NetBIOS Commands
MESSAGE:
REQUEST:
POSITIVE:
VE:
RETARGET:
KEEPALIVE:
- Prestige 2602H Series 1
- Prestige 2602HW Series 1
- Copyright 3
- Federal Communications 4
- Commission (FCC) Interference 4
- Statement 4
- Safety Warnings 6
- ZyXEL Limited Warranty 7
- Customer Support 8
- Customer Support 9 9
- 10 Customer Support 10
- Table of Contents 11
- Chapter 6 13
- Chapter 10 15
- Chapter 15 17
- Chapter 16 17
- Chapter 17 18
- 28 Table of Contents 28
- List of Figures 29
- List of Tables 37
- 42 List of Tables 42
- About This User's Guide 43
- Related Documentation 43
- User Guide Feedback 43
- Syntax Conventions 44
- Introduction to DSL 45
- Introduction to ADSL 46
- CHAPTER 1 47
- Built-in Switch 48
- High Speed Internet Access 48
- Table 3 IEEE 802.11g 52
- 1.2.1 Internet Access 53
- 1.2.5 LAN to LAN Application 55
- 1.2.6 Front Panel LEDs 56
- CHAPTER 2 59
- 2.1.2 Resetting the Prestige 60
- CHAPTER 3 65
- 66 Chapter 3 Wizard Setup 66
- Chapter 3 Wizard Setup 67 67
- 68 Chapter 3 Wizard Setup 68
- Chapter 3 Wizard Setup 69 69
- 70 Chapter 3 Wizard Setup 70
- Chapter 3 Wizard Setup 71 71
- 72 Chapter 3 Wizard Setup 72
- Chapter 3 Wizard Setup 73 73
- 74 Chapter 3 Wizard Setup 74
- Chapter 3 Wizard Setup 75 75
- 76 Chapter 3 Wizard Setup 76
- Chapter 3 Wizard Setup 77 77
- 78 Chapter 3 Wizard Setup 78
- 3.3 Password Setup 79
- 80 Chapter 3 Wizard Setup 80
- CHAPTER 4 81
- 4.2 DNS Server Address 82
- 4.4 LAN TCP/IP 83
- 4.5 LAN TCP/IP 83
- 4.5.2 RIP Setup 84
- 4.6 Any IP 85
- 4.6.1 How Any IP Works 86
- 4.7 Configuring LAN 87
- 88 Chapter 4 LAN Setup 88
- Table 17 LAN Setup 88
- 4.8 Configuring Static DHCP 89
- 90 Chapter 4 LAN Setup 90
- CHAPTER 5 91
- 5.2.3 Restricted Access 92
- 5.2.4 Hide Prestige Identity 92
- 5.3.1 WEP Encryption 93
- Figure 29 Wireless Screen 94
- Table 19 Wireless LAN 94
- 5.4 Configuring MAC Filters 95
- Table 20 MAC Address Filter 96
- 5.5 Introduction to WPA 97
- 5.8 Configuring RADIUS 106
- Table 26 RADIUS (continued) 107
- CHAPTER 6 109
- 6.1.4 IP Address Assignment 110
- 6.1.2 Multiplexing 110
- 6.1.3 VPI and VCI 110
- 6.2 Metric 111
- 6.3 PPPoE Encapsulation 112
- 6.4 Traffic Shaping 112
- 6.6 Configuring WAN Setup 113
- 114 Chapter 6 WAN Setup 114
- Figure 41 WAN Setup (PPPoE) 114
- Table 27 WAN Setup 114
- Chapter 6 WAN Setup 115 115
- 6.7 Traffic Redirect 116
- 6.8 Configuring WAN Backup 117
- IP address here 118
- Check WAN IP Address 119
- 120 Chapter 6 WAN Setup 120
- CHAPTER 7 121
- 7.1.2 What NAT Does 122
- 7.1.3 How NAT Works 122
- 7.1.4 NAT Application 123
- 7.1.5 NAT Mapping Types 123
- Table 30 NAT Mapping Types 124
- 7.3 SUA Server 125
- 7.4 Selecting the NAT Mode 126
- 7.5 Configuring SUA Server 127
- CHAPTER 8 133
- 8.2.2 SIP Call Progression 134
- 8.2.3 SIP Servers 134
- 8.2.3.1 SIP User Agent 135
- 8.2.3.2 SIP Proxy Server 135
- 8.2.3.3 SIP Redirect Server 136
- 8.3 SIP ALG 137
- 8.4 Pulse Code Modulation 137
- 8.5 Voice Coding 138
- CHAPTER 9 139
- 140 Chapter 9 Voice Screens 140
- Table 37 SIP Settings 140
- Chapter 9 Voice Screens 141 141
- 142 Chapter 9 Voice Screens 142
- 9.4 Quality of Service (QoS) 143
- 9.5 QoS Configuration 144
- 9.6 Phone 145
- 9.7 Phone Configuration 145
- 146 Chapter 9 Voice Screens 146
- Figure 59 Phone 146
- Table 40 Phone 146
- 9.8 Speed Dial 147
- 9.9 Speed Dial Configuration 147
- 148 Chapter 9 Voice Screens 148
- Figure 60 Speed Dial 148
- Table 41 Speed Dial 148
- Chapter 9 Voice Screens 149 149
- 150 Chapter 9 Voice Screens 150
- Figure 61 Lifeline 150
- Table 42 Lifeline 150
- 9.12.1 The Flash Key 151
- 152 Chapter 9 Voice Screens 152
- 9.12.3.1 USA Call Hold 153
- 9.12.3.2 USA Call Waiting 153
- 9.12.3.3 USA Call Transfer 153
- 154 Chapter 9 Voice Screens 154
- Figure 62 Phone Port Common 154
- Table 45 Voice Common 154
- Chapter 9 Voice Screens 155 155
- 156 Chapter 9 Voice Screens 156
- Table 46 Voice Call Forward 156
- Chapter 9 Voice Screens 157 157
- 158 Chapter 9 Voice Screens 158
- CHAPTER 10 159
- 10.5 Auto Firmware Upgrade 160
- CHAPTER 11 161
- Figure 64 Dynamic DNS 162
- Table 47 Dynamic DNS 162
- CHAPTER 12 163
- 164 Chapter 12 Time and Date 164
- Figure 65 Time and Date 164
- Table 49 Time and Date 164
- Chapter 12 Time and Date 165 165
- 166 Chapter 12 Time and Date 166
- CHAPTER 13 167
- 168 Chapter 13 Firewalls 168
- 13.4 Denial of Service 169
- 13.4.2 Types of DoS Attacks 170
- Chapter 13 Firewalls 171 171
- Figure 68 SYN Flood 171
- 13.4.2.1 ICMP Vulnerability 172
- 13.5 Stateful Inspection 173
- 174 Chapter 13 Firewalls 174
- 13.5.3 TCP Security 175
- 13.5.4 UDP/ICMP Security 176
- 13.5.5 Upper Layer Protocols 176
- 13.6.1 Security In General 177
- 13.7.1 Packet Filtering: 178
- 13.7.2 Firewall 178
- Chapter 13 Firewalls 179 179
- 180 Chapter 13 Firewalls 180
- CHAPTER 14 181
- 14.3 Rule Logic Overview 182
- 14.3.3.1 Action 183
- 14.3.3.2 Service 183
- 14.3.3.3 Source Address 183
- 14.3.3.4 Destination Address 183
- 14.4.1 LAN to WAN Rules 184
- 14.4.2 WAN to LAN Rules 184
- 14.4.3 Alerts 185
- 14.6 Rule Summary 186
- Table 55 Rule Summary 187
- Address 190
- 14.7 Customized Services 191
- 14.9 Example Firewall Rule 192
- 14.10 Predefined Services 196
- 14.11 Anti-Probing 198
- 14.12 DoS Thresholds 199
- 14.12.1 Threshold Values 200
- 14.12.2 Half-Open Sessions 200
- CHAPTER 15 203
- CHAPTER 16 207
- 16.1.4 VPN Applications 208
- 16.2 IPSec Architecture 209
- 16.3 Encapsulation 209
- 16.4 IPSec and NAT 210
- Table 65 VPN and NAT 211
- CHAPTER 17 213
- 17.3 My IP Address 214
- 17.4 Secure Gateway Address 215
- 17.5 VPN Summary Screen 215
- 216 Chapter 17 VPN Screens 216
- Figure 92 VPN Summary 216
- Table 67 VPN Summary 216
- 17.6 Keep Alive 217
- 17.7 Remote DNS Server 217
- 17.8 NAT Traversal 218
- 17.9 ID Type and Content 219
- VPN tunnel 220
- 17.10 Pre-Shared Key 221
- 17.11 Editing VPN Policies 221
- 222 Chapter 17 VPN Screens 222
- Figure 95 VPN IKE 222
- Chapter 17 VPN Screens 223 223
- Table 72 VPN IKE 223
- 224 Chapter 17 VPN Screens 224
- Chapter 17 VPN Screens 225 225
- 17.12 IKE Phases 226
- Chapter 17 VPN Screens 227 227
- 17.12.1 Negotiation Mode 228
- Chapter 17 VPN Screens 229 229
- 230 Chapter 17 VPN Screens 230
- 17.14 Manual Key Setup 231
- 17.15 Configuring Manual Key 232
- Chapter 17 VPN Screens 233 233
- Table 74 VPN: Manual Key 233
- 234 Chapter 17 VPN Screens 234
- 17.16 Viewing SA Monitor 235
- 236 Chapter 17 VPN Screens 236
- Figure 99 VPN: SA Monitor 236
- Table 75 VPN: SA Monitor 236
- Chapter 17 VPN Screens 237 237
- 238 Chapter 17 VPN Screens 238
- Chapter 17 VPN Screens 239 239
- 240 Chapter 17 VPN Screens 240
- CHAPTER 18 241
- 18.2 Telnet 242
- 18.3 FTP 242
- 18.4 Web 243
- CHAPTER 19 245
- 19.2 UPnP and ZyXEL 246
- Table 80 Configuring UPnP 247
- Components selection box 248
- Figure 115 System Tray Icon 255
- Network 256
- CHAPTER 20 259
- 260 Chapter 20 Logs Screens 260
- Figure 120 Log Settings 260
- Chapter 20 Logs Screens 261 261
- Table 81 Log Settings 261
- 20.3 Displaying the Logs 262
- 20.4 SMTP Error Messages 262
- 20.4.1 Example E-mail Log 263
- 264 Chapter 20 Logs Screens 264
- CHAPTER 21 265
- 21.5 Scheduler 268
- 21.7 Bandwidth Borrowing 270
- 21.8 Configuring Summary 271
- 21.9 Configuring Class Setup 273
- 21.10 Bandwidth Monitor 277
- CHAPTER 22 279
- 280 Chapter 22 Maintenance 280
- Figure 134 System Status 280
- Chapter 22 Maintenance 281 281
- Table 91 System Status 281
- 22.2.1 System Statistics 282
- 22.3 DHCP Table Screen 283
- 22.4 Any IP Table Screen 284
- 22.5 Wireless Screen 285
- 22.6 Diagnostic Screens 286
- 22.7 Firmware Screen 288
- Chapter 22 Maintenance 289 289
- Figure 143 Error Message 289
- 290 Chapter 22 Maintenance 290
- CHAPTER 23 291
- ? > or 292
- Table 100 SMT Main Menu 293
- Table 101 Main Menu Summary 293
- 23.2.2 SMT Menus Overview 294
- 1234", and 295
- *” for each character 296
- CHAPTER 24 297
- CHAPTER 25 301
- Press ENTER to Confirm 303
- CHAPTER 26 305
- CHAPTER 27 309
- MAC address table 310
- CHAPTER 28 313
- 28.4 IP Alias Setup 314
- 28.5 Route IP Setup 315
- CHAPTER 29 319
- 29.4 Remote Node Filter 325
- 29.5.3 Advance Setup Options 327
- CHAPTER 30 329
- CHAPTER 31 333
- 334 Chapter 31 Bridging Setup 334
- 336 Chapter 31 Bridging Setup 336
- CHAPTER 32 337
- 32.3 NAT Setup 339
- Menu 15.1.255 is read-only 340
- 32.3.1.3 Ordering Your Rules 341
- 32.5 General NAT Examples 344
- Figure 187 NAT Example 1 345
- Figure 189 NAT Example 2 346
- Figure 191 NAT Example 3 347
- Figure 196 NAT Example 4 350
- CHAPTER 33 353
- CHAPTER 34 355
- Filter Rule 356
- Filter Set 356
- Len Length 359
- 34.4.1 TCP/IP Filter Rule 360
- 34.4.2 Generic Filter Rule 362
- Length= 0 363
- 34.5 Filter Types and NAT 364
- 34.6 Example Filter 364
- Table 127 Filter Sets Table 366
- 34.7.1 Ethernet Traffic 367
- 34.7.2 Remote Node Filters 367
- CHAPTER 35 369
- 35.2 Supported MIBs 370
- 35.3 SNMP Configuration 370
- 35.4 SNMP Traps 371
- CHAPTER 36 373
- 36.1.3 IEEE802.1x 375
- CHAPTER 37 379
- 37.3 System Information 381
- 37.3.2 Console Port Speed 382
- 37.4 Log and Trace 383
- 37.4.2 Syslog and Accounting 384
- Figure 232 Syslog Example 385
- 37.5 Diagnostic 386
- CHAPTER 38 389
- 38.2 Backup Configuration 390
- 38.2.4 GUI-based FTP Clients 392
- 38.2.7 TFTP Command Example 393
- 38.3 Restore Configuration 394
- 38.4.1 Firmware File Upload 396
- 38.4.5 TFTP File Upload 398
- CHAPTER 39 401
- 39.2 Call Control Support 402
- 39.3 Time and Date Setting 403
- 39.3.1 Resetting the Time 404
- CHAPTER 40 407
- 40.4 System Timeout 409
- CHAPTER 41 411
- 41.4 IP Routing Policy Setup 412
- 41.5 Applying an IP Policy 415
- (192.168.1.100) 418
- CHAPTER 42 419
- CHAPTER 43 423
- 43.2 IPSec Summary Screen 424
- 43.3 IPSec Setup 426
- Menu 27.1.1 IPSec Setup 427
- 43.4 IKE Setup 430
- 43.5 Manual Setup 432
- CHAPTER 44 435
- 436 Chapter 44 SA Monitor 436
- Chapter 44 SA Monitor 437 437
- 438 Chapter 44 SA Monitor 438
- CHAPTER 45 439
- 45.3 Problems with the WAN 440
- Figure 267 Pop-up Blocker 442
- Figure 269 Internet Options 444
- 45.4.1.2 JavaScripts 445
- 3 Scroll down to Scripting 446
- 45.4.1.3 Java Permissions 447
- 45.4.1.3.1 JAVA (Sun) 448
- 45.5 Telephone Problems 449
- Appendix A 451
- Product Specifications 451
- Output Power DC 18Volts/1A 456
- Power Consumption 15W 456
- APPENDIX B 457
- Installing Components 458
- Configuring 459
- Windows 2000/NT/XP 460
- Verifying Settings 464
- Macintosh OS 8/9 465
- Macintosh OS X 466
- APPENDIX C 469
- Subnet Masks 470
- Subnetting 470
- Example: Two Subnets 471
- 472 Appendix C IP Subnetting 472
- Table 166 Subnet 1 472
- Table 167 Subnet 2 472
- Example: Four Subnets 473
- Example Eight Subnets 474
- Appendix C IP Subnetting 475 475
- 476 Appendix C IP Subnetting 476
- APPENDIX D 477
- How PPPoE Works 478
- Prestige as a PPPoE Client 478
- Appendix E 479
- Wireless LANs 479
- 480 Appendix E Wireless LANs 480
- Appendix E Wireless LANs 481 481
- Fragmentation Threshold 482
- Preamble Type 483
- IEEE 802.1x 484
- Types of Authentication 485
- PEAP (Protected EAP) 486
- Dynamic WEP Key Exchange 486
- User Authentication 487
- Encryption 487
- Security Parameters Summary 488
- APPENDIX F 489
- IP Aliasing 490
- Gateways on the WAN Side 491
- 492 Appendix F Triangle Route 492
- APPENDIX G 493
- Command Examples 516
- APPENDIX H 519
- APPENDIX I 521
- APPENDIX J 523
- 524 Appendix J Boot Commands 524
- APPENDIX K 525
- Table 191 System Error Logs 526
- Table 193 TCP Reset Logs 527
- Table 195 ICMP Logs 527
- Table 196 CDR Logs 528
- Table 197 PPP Logs 528
- Table 198 UPnP Logs 529
- Table 200 Attack Logs 529
- Table 201 802.1X Logs 530
- Table 202 ACL Setting Notes 531
- Table 203 ICMP Notes 531
- Table 204 Syslog Logs 532
- Table 205 SIP Logs 532
- Log Commands 534
- Displaying Logs 535
- Log Command Example 536
- Numerics 537
- 538 Index 538
- Index 539 539
- 540 Index 540
- Index 541 541
- 542 Index 542
- Index 543 543
- 544 Index 544
- Index 545 545
- 546 Index 546
- Index 547 547
- 548 Index 548
- Index 549 549
- 550 Index 550
Produits connexes et manuels pour Mise en réseau ZyXEL Communications P-2602HW-63C
(35 pages)
(49 pages)© 2020, manymanuals.fr. Tous droits réservés | 0.148 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels