Zyxel-communications 650 Series Uživatelský manuál Strana 427
- Strana / 513
- Tabulka s obsahem
- ŘEŠENÍ PROBLÉMŮ
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
Prestige 650 Series User’s Guide
VPN/IPSec Setup 41-1
Chapter 41
VPN/IPSec Setup
This chapter introduces the VPN SMT menus.
41.1 VPN/IPSec Overview
The VPN/IPSec main SMT menu has these main submenus:
1. Define VPN policies in menu 27.1 submenus, including security policies, endpoint IP addresses,
peer IPSec router IP address and key management.
2. Menu 27.2 - SA Monitor allows you to manage (refresh or disconnect) your SA connections.
This is an overview of the VPN menu tree.
Figure 41-1 VPN SMT Menu Tree
From the main menu, enter 27 to display the first VPN menu (shown next).
- Prestige 650 Series 1
- Copyright 2
- (FCC) Interference Statement 3
- ZyXEL Limited Warranty 4
- Customer Support 5
- Table of Contents 6
- List of Figures 14
- List of Tables 21
- List of Charts 25
- Preface 26
- Introduction to DSL 28
- Part I: 29
- Chapter 1 31
- DHCP Support 35
- IP Alias 35
- IP Policy Routing (IPPR) 35
- Protocol Support 35
- 1.3.1 Internet Access 37
- Chapter 2 39
- Navigation panel 40
- Wizard Setup 40
- 2.4 Configuring Password 41
- 2.5 Resetting the Prestige 42
- Chapter 3 45
- 3.3 Multiplexing 46
- 3.4 VPI and VCI 46
- 3.7 IP Address Assignment 48
- 3.7.4 Private IP Addresses 49
- 3.9 NAT 50
- 3.10.2 RFC 1483 53
- 3.10.3 ENET ENCAP 53
- 3.10.4 PPPoE 55
- 3.11 DHCP Setup 56
- 3.11.1 IP Pool Setup 57
- Part II: 61
- Chapter 4 63
- LAN Setup 63
- 4.4 LAN TCP/IP 64
- 4.4.3 RIP Setup 65
- 4.4.4 Multicast 65
- 4.5 Configuring LAN 66
- LAN Setup 4-5 67
- Table 4-1 LAN 67
- Chapter 5 69
- 5.1.4 RTS/CTS 70
- 5.2 Levels of Security 71
- 5-6 Wireless LAN Setup 74
- Table 5-1 Wireless 74
- 5.6 Configuring MAC Filter 75
- 5-8 Wireless LAN Setup 76
- 5.7 802.1x Overview 77
- 5.8 Introduction to RADIUS 77
- 5.9 Configuring 802.1x 79
- 5-14 Wireless LAN Setup 82
- 5.11 Configuring RADIUS 83
- Wireless LAN Setup 5-17 85
- Table 5-5 RADIUS 85
- Chapter 6 87
- WAN Setup 87
- 6.4 Traffic Shaping 88
- 6.5 Configuring WAN Setup 89
- 6-4 WAN Setup 90
- WAN Setup 6-5 91
- 6-6 WAN Setup 92
- Part III: 93
- Chapter 7 95
- 7.1.3 How NAT Works 96
- 7.1.4 NAT Application 96
- 7.1.5 NAT Mapping Types 97
- 7.3 SUA Server 99
- 7.4 Selecting the NAT Mode 101
- 7.5 Configuring SUA Server 102
- LABEL DESCRIPTION 103
- NAT 7-13 107
- Chapter 8 109
- Dynamic DNS Setup 109
- Chapter 9 111
- Time and Date Setup 111
- 9-2 Time and Date Setup 112
- Table 9-1 Time and Date 112
- Time and Date Setup 9-3 113
- Part IV: 114
- Chapter 10 115
- Firewalls 115
- 10.4 Denial of Service 117
- . When these 118
- 5 REDIRECT 120
- 13 TIMESTAMP_REQUEST 120
- 14 TIMESTAMP_REPLY 120
- 17 ADDRESS_MASK_REQUEST 120
- 18 ADDRESS_MASK_REPLY 120
- 10.5 Stateful Inspection 121
- 10.5.3 TCP Security 124
- 10.5.4 UDP/ICMP Security 124
- 10.5.5 Upper Layer Protocols 125
- 10.6.1 Security In General 125
- 10.7.1 Packet Filtering: 126
- 10.7.2 Firewall 127
- 10-14 Firewalls 128
- Chapter 11 129
- Firewall Configuration 129
- 11.4 Attack Alert 131
- 11.4.1 Alerts 132
- 11.4.2 Threshold Values 132
- 11.4.3 Half-Open Sessions 132
- Table 11-2 Alert 135
- Chapter 12 137
- Creating Custom Rules 137
- Service 138
- 12.3 Connection Direction 139
- 12.4 Logs 140
- 12.5 Rule Summary 142
- 12.6 Predefined Services 144
- Source Address 148
- 12.8 Timeout 150
- Table 12-6 Timeout 152
- Chapter 13 153
- Customized Services 153
- This rule allows a MyService 158
- Click Apply to save your 158
- Chapter 14 159
- Content Filtering 159
- DESCRIPTION 162
- 14.5 Configuring Logs 163
- 14-6 Content Filtering 164
- Part V: 165
- Chapter 15 167
- Introduction to IPSec 167
- 15.1.4 VPN Applications 168
- 15.2 IPSec Architecture 169
- 15.2.1 IPSec Algorithms 170
- 15.2.2 Key Management 170
- 15.3 Encapsulation 171
- 15.4 IPSec and NAT 171
- SECURITY PROTOCOL MODE NAT 172
- AH Transport N 172
- AH Tunnel N 172
- ESP Transport N 172
- ESP Tunnel Y 172
- Chapter 16 173
- VPN Screens 173
- 16.3 My IP Address 174
- 16.4 Secure Gateway Address 174
- 16.5 VPN Summary Screen 175
- 16.6 Keep Alive 177
- 16.7 ID Type and Content 177
- 16.8 Pre-Shared Key 179
- 16.9 Editing VPN Policies 179
- 16-8 VPN Screens 180
- Figure 16-3 VPN IKE 180
- VPN Screens 16-9 181
- Table 16-7 VPN IKE 181
- 16-10 VPN Screens 182
- VPN Screens 16-11 183
- 16-12 VPN Screens 184
- 16.10 IKE Phases 185
- 16.10.1 Negotiation Mode 186
- LABEL DESCRIPTION 188
- VPN - IKE 188
- VPN Screens 16-17 189
- Table 16-8 VPN IKE: Advanced 189
- 16-18 VPN Screens 190
- 16.12 Manual Key Setup 191
- 16.13 Configuring Manual Key 192
- VPN Screens 16-21 193
- Table 16-9 VPN Manual Key 193
- 16-22 VPN Screens 194
- VPN Screens 16-23 195
- 16.14 Viewing SA Monitor 196
- 16.16 Configuring IPSec Logs 199
- 16-28 VPN Screens 200
- HEADQUARTERS TELECOMMUTERS 204
- VPN Screens 16-33 205
- Part VI: 206
- Chapter 17 207
- 17.2 Telnet 208
- 17.3 FTP 208
- 17.4 Web 209
- Chapter 18 211
- 18.2 UPnP and ZyXEL 212
- Chapter 19 219
- Logs Screens 219
- 19-2 Logs Screens 220
- Figure 19-1 Log Settings 220
- Logs Screens 19-3 221
- Table 19-1 Log Settings 221
- 19.3 Displaying the Logs 222
- 19.4 SMTP Error Messages 223
- 19.4.1 Example E-mail Log 224
- Part VII: 225
- Chapter 20 227
- Bandwidth Management 227
- 20.5 Scheduler 230
- 20.7 Bandwidth Borrowing 233
- 20.8 Configuring Summary 235
- 20.10 Configuring Monitor 243
- Refresh 244
- Part VIII: 245
- Chapter 21 247
- Maintenance 247
- Maintenance 21-3 249
- Table 21-1 System Status 249
- 21.2.1 System Statistics 250
- Maintenance 21-5 251
- 21.3 DHCP Table Screen 252
- 21.4 Wireless Screens 253
- 21.5 Diagnostic Screens 255
- 21.6 Firmware Screen 258
- 21.7 Configuration Screen 260
- Part IX: 265
- Chapter 22 267
- Introducing the SMT 267
- Enter Password : **** 268
- Menu 24.2.2 269
- System Maintenance 269
- Change Console Port Speed 269
- ? > or ChangeMe 270
- # MENU TITLE DESCRIPTION 272
- Chapter 23 273
- General Setup 273
- 23-2 General Setup 274
- Chapter 24 277
- LAN Setup 277
- Chapter 25 281
- Wireless LAN Setup 281
- 25-4 Wireless LAN Setup 284
- Chapter 26 285
- Internet Access 285
- 26.4 IP Alias Setup 286
- Edit IP Alias= Yes 287
- 26.5 Route IP Setup 288
- 26-6 Internet Access 290
- Chapter 27 293
- Remote Node Configuration 293
- 27.3 Metric 297
- 27.5 Remote Node Filter 301
- Separate VPI and 305
- VCI numbers must 305
- 27.7 Traffic Redirect 306
- Edit Traffic Redirect= Yes 308
- Chapter 28 311
- Static Route Setup 311
- Static Route Setup 28-3 313
- 28-4 Static Route Setup 314
- Chapter 29 315
- Bridging Setup 315
- Bridge= Yes 316
- Edit IP/Bridge= Yes 316
- 29-4 Bridging Setup 318
- Chapter 30 319
- 30.3 NAT Setup 321
- 30.3.1 Address Mapping Sets 322
- FIELD DESCRIPTION EXAMPLE 324
- 30.5 General NAT Examples 329
- NAT= Full Feature 333
- Type= One-to-One 333
- Start= 192.168.1.10 333
- Start= 10.132.50.1 333
- Part X: 337
- Chapter 31 339
- Filter Configuration 339
- Outgoing 340
- Filter Rule 341
- Filter Set 341
- Prestige 650HW 342
- Prestige 650R-E 344
- Len Length 347
- Length= 0 352
- 31.5 Filter Types and NAT 354
- 31.6 Example Filter 354
- 31.7.1 Ethernet Traffic 358
- 31.7.2 Remote Node Filters 358
- Chapter 32 361
- Enabling the Firewall 361
- 32.4 Viewing Firewall Log 362
- Table 32-1 Firewall Logs 363
- Chapter 33 365
- SNMP Configuration 365
- 33.2 Supported MIBs 366
- 33.3 SNMP Configuration 366
- 33.4 SNMP Traps 368
- Chapter 34 369
- System Security 369
- 34.1.3 IEEE802.1x 371
- Chapter 35 375
- 35.3 System Information 377
- 35.4 Log and Trace 379
- 35.4.2 Syslog and Accounting 380
- 35.5 Diagnostic 382
- Chapter 36 385
- 36.2 Backup Configuration 386
- 36.2.1 Backup Configuration 387
- 36.2.4 GUI-based FTP Clients 388
- 36.2.7 TFTP Command Example 389
- Starting XMODEM download 390
- 36.3 Restore Configuration 391
- 36.3.1 Restore Using FTP 392
- 36.4.1 Firmware File Upload 394
- 36.4.5 TFTP File Upload 396
- 650H/HW) 398
- Choose the Xmodem protocol 400
- Then click Send 400
- Chapter 37 401
- System Maintenance 401
- 37.2 Call Control Support 402
- 37.3 Time and Date Setting 404
- 37.3.1 Resetting the Time 405
- Chapter 38 407
- Remote Management 407
- 38.4 System Timeout 409
- Chapter 39 411
- IP Policy Routing 411
- IP Policy Routing 39-3 413
- 39.5 Applying an IP Policy 415
- IP Policies= 1,2 419
- Chapter 40 421
- Call Scheduling 421
- Part XI: 425
- Chapter 41 427
- VPN/IPSec Setup 427
- 41.2 IPSec Summary Screen 428
- VPN/IPSec Setup 41-3 429
- 41-4 VPN/IPSec Setup 430
- 41.3 IPSec Setup 431
- VPN/IPSec Setup 41-7 433
- 41-8 VPN/IPSec Setup 434
- VPN/IPSec Setup 41-9 435
- 41-10 VPN/IPSec Setup 436
- 41.4 IKE Setup 437
- 41-12 VPN/IPSec Setup 438
- 41.5 Manual Setup 439
- 41-14 VPN/IPSec Setup 440
- VPN/IPSec Setup 41-15 441
- Chapter 42 443
- SA Monitor 443
- 42-2 SA Monitor 444
- 42.3 Viewing IPSec Log 445
- Chapter 43 447
- Internal SPTGEN 447
- Part XII: 451
- Appendix A 453
- Troubleshooting 453
- A.2 Console Port 454
- A.3 Telnet 454
- A.4 Web Configurator 455
- A.6 LAN Interface 456
- A.7 WAN Interface 457
- A.8 Internet Access 457
- A.9 Remote Management 458
- A.10 Remote Node Connection 459
- Appendix B 461
- IP Subnetting 461
- B-8 IP Subnetting 468
- Appendix C 469
- Wireless LAN and IEEE 802.11 469
- Appendix D 473
- Appendix E 475
- Virtual Circuit Topology 475
- Appendix F 477
- Installing Components 478
- Configuring 478
- Verifying Settings 480
- Windows 2000/NT/XP 481
- Macintosh OS 8/9 485
- Appendix G 489
- Splitters and Microfilters 489
- Appendix H 491
- Log Descriptions 491
- Appendix I 497
- Switch/Wireless LAN 502
- Appendix J 507
Související produkty a manuály pro Hardware Zyxel-communications 650 Series
Hardware Zyxel-communications 480 Uživatelský manuál
(156 stránky)
(156 stránky)
© 2020, manymanuals.cz. Všechna práva vyhrazena. | 0.055 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentáře k této Příručce