ZyXEL 802.11g Bedienungsanleitung Seite 177
- Seite / 496
- Inhaltsverzeichnis
- LESEZEICHEN
Bewertet. / 5. Basierend auf Kundenbewertungen
P-662H/HW-D Series User’s Guide
Chapter 10 Firewalls 177
• Allow certain types of traffic from the Internet to specific hosts on the LAN.
• Allow access to a Web server to everyone but competitors.
• Restrict use of certain protocols, such as Telnet, to authorized users on the LAN.
These custom rules work by evaluating the network traffic’s Source IP address, Destination IP
address, IP protocol type, and comparing these to rules set by the administrator.
Note: The ability to define firewall rules is a very powerful tool. Using custom rules, it
is possible to disable all firewall protection or block all access to the Internet.
Use extreme caution when creating or deleting firewall rules. Test changes
after creating them to make sure they work correctly.
Below is a brief technical description of how these connections are tracked. Connections may
either be defined by the upper protocols (for instance, TCP), or by the ZyXEL Device itself (as
with the "virtual connections" created for UDP and ICMP).
10.5.3 TCP Security
The ZyXEL Device uses state information embedded in TCP packets. The first packet of any
new connection has its SYN flag set and its ACK flag cleared; these are "initiation" packets.
All packets that do not have this flag structure are called "subsequent" packets, since they
represent data that occurs later in the TCP stream.
If an initiation packet originates on the WAN, this means that someone is trying to make a
connection from the Internet into the LAN. Except in a few special cases (see "Upper Layer
Protocols" shown next), these packets are dropped and logged.
If an initiation packet originates on the LAN, this means that someone is trying to make a
connection from the LAN to the Internet. Assuming that this is an acceptable part of the
security policy (as is the case with the default policy), the connection will be allowed. A cache
entry is added which includes connection information such as IP addresses, TCP ports,
sequence numbers, etc.
When the ZyXEL Device receives any subsequent packet (from the Internet or from the LAN),
its connection information is extracted and checked against the cache. A packet is only
allowed to pass through if it corresponds to a valid connection (that is, if it is a response to a
connection which originated on the LAN).
10.5.4 UDP/ICMP Security
UDP and ICMP do not themselves contain any connection information (such as sequence
numbers). However, at the very minimum, they contain an IP address pair (source and
destination). UDP also contains port pairs, and ICMP has type and code information. All of
this data can be analyzed in order to build "virtual connections" in the cache.
For instance, any UDP packet that originates on the LAN will create a cache entry. Its IP
address and port pairs will be stored. For a short period of time, UDP packets from the WAN
that have matching IP and UDP information will be allowed back in through the firewall.
- P-662H/HW-D Series 1
- Copyright 3
- Certifications 4
- Viewing Certifications 5
- Safety Warnings 6
- ZyXEL Limited Warranty 7
- Customer Support 8
- Customer Support 9 9
- 10 Customer Support 10
- Table of Contents 11
- Chapter 6 13
- Chapter 7 13
- Chapter 8 14
- Chapter 9 14
- Chapter 10 15
- Chapter 11 15
- Chapter 12 16
- Chapter 13 16
- Chapter 17 18
- 24 Table of Contents 24
- List of Figures 25
- 32 List of Figures 32
- List of Tables 33
- 38 List of Tables 38
- About This User's Guide 39
- Syntax Conventions 39
- Related Documentation 39
- User Guide Feedback 40
- Graphics Icons Key 40
- CHAPTER 1 41
- High Speed Internet Access 42
- Firewall 42
- Content Filtering 42
- 1.1.2.1 Internet Access 46
- 1.1.4 Front Panel LEDs 47
- CHAPTER 2 49
- Figure 6 Password Screen 50
- Figure 9 Select a Mode 51
- 2.3.1 Using the Reset Button 52
- 2.4.1 Navigation Panel 52
- 2.4.2 Status Screen 55
- Figure 11 Status Screen 56
- Table 4 Status Screen 56
- 2.4.3 Status: Any IP Table 58
- 2.4.4 Status: WLAN Status 58
- 2.4.6 Status: VPN Status 59
- Table 7 Status: VPN Status 60
- Figure 17 System General 62
- CHAPTER 3 65
- Figure 19 Wizard: Welcome 66
- 3.2.1 Automatic Detection 67
- 3.2.2 Manual Configuration 67
- CHAPTER 4 79
- Figure 37 Select a Mode 80
- Figure 38 Wizard: Welcome 81
- CHAPTER 5 85
- 5.1.2 Multiplexing 86
- 5.1.3 VPI and VCI 86
- 5.1.4 IP Address Assignment 87
- 5.1.6 NAT 87
- 5.2 Metric 88
- 5.3 Traffic Shaping 88
- 5.3.1 ATM Traffic Classes 89
- 5.5 Internet Connection 90
- Chapter 5 WAN Setup 91 91
- 92 Chapter 5 WAN Setup 92
- Chapter 5 WAN Setup 93 93
- 94 Chapter 5 WAN Setup 94
- 5.6.1 More Connections Edit 95
- 96 Chapter 5 WAN Setup 96
- Chapter 5 WAN Setup 97 97
- 98 Chapter 5 WAN Setup 98
- 5.7 Traffic Redirect 99
- 5.8 Configuring WAN Backup 100
- Chapter 5 WAN Setup 101 101
- Figure 50 WAN Backup Setup 101
- Table 27 WAN Backup Setup 101
- Check WAN IP Address 102
- Chapter 5 WAN Setup 103 103
- 104 Chapter 5 WAN Setup 104
- Chapter 5 WAN Setup 105 105
- 106 Chapter 5 WAN Setup 106
- Chapter 5 WAN Setup 107 107
- 108 Chapter 5 WAN Setup 108
- CHAPTER 6 109
- 6.1.2 DHCP Setup 110
- 6.1.3 DNS Server Address 110
- 6.2 LAN TCP/IP 111
- 6.2.2 RIP Setup 112
- 6.2.3 Multicast 113
- 6.2.4 Any IP 113
- 6.2.4.1 How Any IP Works 114
- 6.3 Configuring LAN IP 115
- 116 Chapter 6 LAN Setup 116
- Table 31 Advanced LAN Setup 116
- 6.4 DHCP Setup 117
- 6.5 LAN Client List 118
- 6.6 LAN IP Alias 119
- 120 Chapter 6 LAN Setup 120
- Figure 60 LAN IP Alias 120
- Table 34 LAN IP Alias 120
- Chapter 6 LAN Setup 121 121
- 122 Chapter 6 LAN Setup 122
- CHAPTER 7 123
- 7.2.1 SSID 124
- 7.2.2 MAC Address Filter 124
- 7.2.3 User Authentication 124
- 7.2.4 Encryption 125
- 126 Chapter 7 Wireless LAN 126
- Chapter 7 Wireless LAN 127 127
- 128 Chapter 7 Wireless LAN 128
- 7.5.1 No Security 129
- 7.5.2 WEP Encryption Screen 129
- 7.5.3 WPA(2)-PSK 130
- Chapter 7 Wireless LAN 131 131
- 132 Chapter 7 Wireless LAN 132
- Figure 66 Wireless: WPA(2) 132
- Chapter 7 Wireless LAN 133 133
- Table 41 Wireless: WPA(2) 133
- 134 Chapter 7 Wireless LAN 134
- Figure 67 Advanced 134
- 7.6 OTIST 135
- 7.6.1.1 AP 136
- 7.6.1.2 Wireless Client 137
- 7.6.2 Starting OTIST 138
- 7.6.3 Notes on OTIST 138
- 7.7 MAC Filter 139
- 140 Chapter 7 Wireless LAN 140
- Table 44 MAC Address Filter 140
- 7.8 WMM QoS 141
- 7.8.3 Services 142
- Chapter 7 Wireless LAN 143 143
- 7.9 QoS Screen 144
- Chapter 7 Wireless LAN 145 145
- Figure 76 Wireless LAN: QoS 145
- Table 47 Wireless LAN: QoS 145
- 146 Chapter 7 Wireless LAN 146
- Chapter 7 Wireless LAN 147 147
- 148 Chapter 7 Wireless LAN 148
- command 149
- 7.10.2 Multiple SSID Example 150
- CHAPTER 8 151
- 152 Chapter 8 DMZ 152
- Figure 79 DMZ 152
- Table 51 DMZ 152
- Chapter 8 DMZ 153 153
- Table 51 DMZ (continued) 153
- 154 Chapter 8 DMZ 154
- Chapter 8 DMZ 155 155
- 156 Chapter 8 DMZ 156
- CHAPTER 9 157
- 9.1.2 What NAT Does 158
- 9.1.3 How NAT Works 158
- 9.1.4 NAT Application 159
- 9.1.5 NAT Mapping Types 159
- 9.3 NAT General Setup 160
- 9.4 Port Forwarding 161
- 9.6 Address Mapping 165
- CHAPTER 10 169
- 170 Chapter 10 Firewalls 170
- 10.4 Denial of Service 171
- 10.4.2 Types of DoS Attacks 172
- Chapter 10 Firewalls 173 173
- Figure 92 SYN Flood 173
- 10.4.2.1 ICMP Vulnerability 174
- 10.5 Stateful Inspection 175
- 176 Chapter 10 Firewalls 176
- 10.5.3 TCP Security 177
- 10.5.4 UDP/ICMP Security 177
- 10.5.5 Upper Layer Protocols 178
- 10.6.1 Security In General 179
- 10.7.1 Packet Filtering: 180
- 10.7.2 Firewall 180
- CHAPTER 11 181
- 11.3 Rule Logic Overview 182
- 11.4 Connection Direction 183
- 11.4.1 LAN to WAN Rules 184
- 11.4.2 Alerts 184
- 11.6 Firewall Rules Summary 185
- Figure 96 Firewall Rules 186
- Table 65 Firewall Rules 186
- Address 189
- 11.6.2 Customized Services 190
- 11.7 Example Firewall Rule 191
- 10.0.0.15 on the LAN 194
- 11.8 Predefined Services 195
- 11.9 Anti-Probing 197
- 11.10 DoS Thresholds 198
- 11.10.2 Half-Open Sessions 199
- CHAPTER 12 203
- LABEL DESCRIPTION 207
- CHAPTER 13 211
- CHAPTER 14 215
- 14.2.2 Configuring Services 219
- 14.2.2.1 Available Services 220
- 14.3 User Account Setup 228
- 14.4 User Online Status 229
- 14.5.1 User Login 230
- 14.5.2 Administrator Login 231
- CHAPTER 15 233
- 15.1.4 VPN Applications 234
- 15.2 IPSec Architecture 235
- 15.3 Encapsulation 235
- 15.4 IPSec and NAT 236
- Table 86 VPN and NAT 237
- CHAPTER 16 239
- 16.3 My IP Address 240
- 16.4 Secure Gateway Address 241
- 16.5 VPN Setup Screen 241
- 242 Chapter 16 VPN Screens 242
- Figure 129 VPN Setup 242
- Table 88 VPN Setup 242
- 16.6 Keep Alive 243
- 244 Chapter 16 VPN Screens 244
- Table 89 VPN and NAT 244
- 16.8 Remote DNS Server 245
- 16.9 ID Type and Content 245
- 246 Chapter 16 VPN Screens 246
- 16.10 Pre-Shared Key 247
- 16.11 Editing VPN Policies 247
- 248 Chapter 16 VPN Screens 248
- Table 94 Edit VPN Policies 248
- Chapter 16 VPN Screens 249 249
- 250 Chapter 16 VPN Screens 250
- Chapter 16 VPN Screens 251 251
- 16.12 IKE Phases 252
- 16.12.1 Negotiation Mode 253
- 254 Chapter 16 VPN Screens 254
- Chapter 16 VPN Screens 255 255
- 256 Chapter 16 VPN Screens 256
- 16.14 Manual Key Setup 257
- 258 Chapter 16 VPN Screens 258
- Figure 135 VPN: Manual Key 258
- Table 96 VPN: Manual Key 258
- Chapter 16 VPN Screens 259 259
- 16.16 Viewing SA Monitor 260
- Chapter 16 VPN Screens 261 261
- Figure 136 VPN: SA Monitor 261
- Table 97 VPN: SA Monitor 261
- 262 Chapter 16 VPN Screens 262
- Chapter 16 VPN Screens 263 263
- 264 Chapter 16 VPN Screens 264
- CHAPTER 17 265
- 17.3 Configuration Summary 266
- 17.4 My Certificates 267
- 268 Chapter 17 Certificates 268
- 17.5 My Certificate Import 269
- 17.6 My Certificate Create 270
- Chapter 17 Certificates 271 271
- 17.7 My Certificate Details 272
- Chapter 17 Certificates 273 273
- 274 Chapter 17 Certificates 274
- 17.8 Trusted CAs 275
- 276 Chapter 17 Certificates 276
- Figure 145 Trusted CAs 276
- Table 105 Trusted CAs 276
- 17.9 Trusted CA Import 277
- 17.10 Trusted CA Details 278
- Chapter 17 Certificates 279 279
- 280 Chapter 17 Certificates 280
- Chapter 17 Certificates 281 281
- 282 Chapter 17 Certificates 282
- Chapter 17 Certificates 283 283
- 284 Chapter 17 Certificates 284
- Chapter 17 Certificates 285 285
- 17.15 Directory Servers 286
- Chapter 17 Certificates 287 287
- Table 111 Directory Servers 287
- 288 Chapter 17 Certificates 288
- CHAPTER 18 289
- 18.2.1 Static Route Edit 290
- Chapter 18 Static Route 291 291
- Table 114 Static Route Edit 291
- 292 Chapter 18 Static Route 292
- CHAPTER 19 293
- 19.5 Scheduler 294
- 19.7 Configuring Summary 297
- 19.8.1 Rule Configuration 300
- 19.9 Bandwidth Monitor 302
- CHAPTER 20 305
- Figure 163 Dynamic DNS 306
- Table 124 Dynamic DNS 306
- Device and the DDNS server 307
- CHAPTER 21 309
- 21.2 WWW 310
- 21.3 Telnet 311
- 21.4 Configuring Telnet 311
- 21.5 Configuring FTP 312
- 21.6 SNMP 313
- 21.6.1 Supported MIBs 314
- 21.6.2 SNMP Traps 315
- 21.6.3 Configuring SNMP 315
- 21.7 Configuring DNS 317
- 21.8 Configuring ICMP 317
- 21.9 TR-069 319
- Table 132 TR-069 Commands 320
- CHAPTER 22 321
- 22.2 UPnP and ZyXEL 322
- Table 133 Configuring UPnP 323
- Components selection box 324
- Figure 183 System Tray Icon 329
- Network 330
- CHAPTER 23 333
- 334 Chapter 23 System 334
- 23.2 Time Setting 335
- 336 Chapter 23 System 336
- Chapter 23 System 337 337
- 338 Chapter 23 System 338
- CHAPTER 24 339
- 340 Chapter 24 Logs 340
- Figure 190 View Log 340
- Table 136 View Log 340
- Chapter 24 Logs 341 341
- Figure 191 Log Settings 341
- Table 137 Log Settings 341
- 342 Chapter 24 Logs 342
- 24.4 SMTP Error Messages 343
- 344 Chapter 24 Logs 344
- CHAPTER 25 345
- 346 Chapter 25 Tools 346
- 25.2 Configuration Screen 347
- 25.2.2 Restore Configuration 348
- 25.3 Restart 349
- 350 Chapter 25 Tools 350
- CHAPTER 26 351
- 26.2 DSL Line Diagnostic 352
- CHAPTER 27 353
- 27.3 Problems with the WAN 354
- Figure 204 Pop-up Blocker 356
- Figure 206 Internet Options 357
- 27.4.1.2 JavaScripts 358
- 3 Scroll down to Scripting 359
- 27.4.1.3 Java Permissions 360
- 27.4.1.3.1 JAVA (Sun) 361
- APPENDIX A 365
- 366 Product Specifications 366
- Table 148 Firmware 366
- 368 Product Specifications 368
- APPENDIX B 369
- 370 Appendix B About ADSL 370
- APPENDIX C 371
- APPENDIX D 373
- Installing Components 374
- Configuring 375
- Windows 2000/NT/XP 376
- Macintosh OS 8/9 381
- Macintosh OS X 383
- Verifying Settings 384
- Using Configuration Files 386
- APPENDIX E 389
- Subnet Masks 391
- Subnetting 391
- Example: Two Subnets 392
- Example: Four Subnets 393
- Example Eight Subnets 394
- Table 160 Eight Subnets 395
- APPENDIX F 397
- 398 Appendix F Wireless LANs 398
- Appendix F Wireless LANs 399 399
- Fragmentation Threshold 400
- Preamble Type 401
- IEEE 802.11g Wireless LAN 401
- IEEE 802.1x 402
- Types of Authentication 403
- PEAP (Protected EAP) 404
- Dynamic WEP Key Exchange 404
- Encryption 405
- User Authentication 406
- Security Parameters Summary 407
- 408 Appendix F Wireless LANs 408
- APPENDIX G 409
- Figure 243 Login Screen 410
- APPENDIX H 419
- APPENDIX I 421
- APPENDIX J 425
- 426 Appendix J Boot Commands 426
- APPENDIX K 427
- FUNCTION COMMAND DESCRIPTION 432
- APPENDIX L 433
- NetBIOS Filter Configuration 434
- APPENDIX M 437
- Command Examples 460
- APPENDIX N 463
- ZyXEL Device With ISDN 464
- APPENDIX O 465
- Table 181 System Error Logs 466
- Table 183 TCP Reset Logs 467
- Table 185 ICMP Logs 468
- Table 186 CDR Logs 468
- Table 187 PPP Logs 468
- Table 188 UPnP Logs 469
- Table 190 Attack Logs 470
- Table 191 IPSec Logs 471
- Table 192 IKE Logs 471
- Table 193 PKI Logs 474
- Table 195 802.1X Logs 476
- Table 196 ACL Setting Notes 477
- Table 197 ICMP Notes 477
- Table 198 Syslog Logs 478
- Log Commands 479
- Log Command Example 480
- APPENDIX P 481
- IP Aliasing 482
- Gateways on the WAN Side 483
- 484 Appendix P Triangle Route 484
- Index 485 485
- 486 Index 486
- Index 487 487
- 488 Index 488
- Index 489 489
- 490 Index 490
- Index 491 491
- 492 Index 492
- Index 493 493
- 494 Index 494
- Index 495 495
- 496 Index 496
Verwandte Produkte und Handbücher für Vernetzung ZyXEL 802.11g
Vernetzung ZyXEL GS-4012F/4024 Bedienungsanleitung
(326 Seiten)
(326 Seiten)
Vernetzung ZyXEL G-162 Bedienungsanleitung
(72 Seiten)
(72 Seiten)
Vernetzung ZyXEL P-660RU-Tx Bedienungsanleitung
(238 Seiten)
(238 Seiten)
Vernetzung ZyXEL ZyAIR G210H Bedienungsanleitung
(100 Seiten)
(100 Seiten)
Vernetzung ZyXEL ZYAIR B-500 Bedienungsanleitung
(14 Seiten)
(14 Seiten)
(97 Seiten)
Vernetzung ZyXEL NWA3160 Bedienungsanleitung
(314 Seiten)
(314 Seiten)
Vernetzung ZyXEL 802.11g Bedienungsanleitung
(19 Seiten)
(19 Seiten)
Vernetzung ZyXEL 802.11g Bedienungsanleitung
(13 Seiten)
(13 Seiten)
Vernetzung ZyXEL ZyAIR G-470 Bedienungsanleitung
(110 Seiten)
(110 Seiten)
Vernetzung ZyXEL G-2000 Bedienungsanleitung
(12 Seiten)
(12 Seiten)
Vernetzung ZyXEL AES-100 Bedienungsanleitung
(90 Seiten)
(90 Seiten)
Vernetzung ZyXEL AG-220 Bedienungsanleitung
(138 Seiten)
(138 Seiten)
Vernetzung ZyXEL NWA1121NI Bedienungsanleitung
(206 Seiten)
(206 Seiten)
Yamaha CLP-115 manuali
Manuali dei proprietari e guide per l'utente per Pianoforti digitali Yamaha CLP-115.
We fornisce 4 manuali pdf Yamaha CLP-115 per scaricare gratuitamente in base al tipo di documento: Specifiche, Guida Utente, Manuale del Proprietario
Kommentare zu diesen Handbüchern