Zyxel-communications 10 Manual do Utilizador Página 258
- Página / 495
- Índice
- RESOLUÇÃO DE PROBLEMAS
- MARCADORES
Avaliado. / 5. Com base em avaliações de clientes
ZyWALL 10~100 Series Internet Security Gateway
19-16 Filter Configuration
19.4 Filter Types and NAT
There are two classes of filter rules, Generic Filter (Device) rules and protocol filter (TCP/IP) rules.
Generic filter rules act on the raw data from/to LAN and WAN. Protocol filter rules act on the IP packets.
Generic and TCP/IP filter rules are discussed in more detail in the next section. When NAT (Network
Address Translation) is enabled, the inside IP address and port number are replaced on a connection-by-
connection basis, which makes it impossible to know the exact address and port on the wire. Therefore, the
ZyWALL applies the protocol filters to the “native” IP address and port number before NAT for outgoing
packets and after NAT for incoming packets. On the other hand, the generic, or device filters are applied to
the raw packets that appear on the wire. They are applied at the point when the ZyWALL is receiving and
sending the packets; i.e. the interface. The interface can be an Ethernet port or any other hardware port. The
following diagram illustrates this.
Figure 19-12 Protocol and Device Filter Sets
19.5 Firewall
Firewall configuration is discussed in the firewall chapters of this manual. Further comparisons are also
made between filtering, NAT and the firewall.
- ZyWALL 10/10W/50/100 1
- Copyright 2
- Interference Statement 3
- Caution 4
- ZyXEL Limited Warranty 5
- Customer Support 6
- Table of Contents 7
- List of Figures 16
- List of Tables 25
- Preface 30
- Part I: 33
- Chapter 1 35
- Getting to Know Your ZyWALL 35
- 1.2.1 Physical Features 36
- 1.2.2 Non-Physical Features 37
- 1.2.3 ZyWALL 100 Note 41
- 1.3.2 VPN Application 43
- Chapter 2 45
- Hardware Installation 45
- Hardware Installation 2-3 47
- Table 2-1 LED Descriptions 47
- UPLINK button “off” (out) 51
- Part II: 55
- Chapter 3 57
- Initial Setup 57
- Enter Password : XXXX 58
- 3.2.1 Main Menu 59
- 3-4 Initial Setup 60
- Table 3-2 Main Menu Summary 60
- 3-6 Initial Setup 62
- 3.4 Resetting the ZyWALL 64
- Chapter 4 65
- SMT Menu 1 - General Setup 65
- 4.3 General Setup 66
- Chapter 5 69
- WAN and Dial Backup Setup 69
- 5.3 Dial Backup 70
- 5.5 Advanced WAN Setup 72
- 5.6.1 Metric 74
- 5.8 Editing PPP Options 77
- 5.9 Editing TCP/IP Options 79
- 5.10 Editing Login Script 80
- 5.11 Remote Node Filter 82
- Chapter 6 85
- LAN Setup 85
- 6.3 TCP/IP and LAN DHCP 86
- Private IP Addresses 87
- 6.3.4 RIP Setup 88
- 6.3.5 IP Multicast 88
- 6.3.6 IP Alias 89
- 6.4.1 IP Alias Setup 92
- 6.5 Wireless LAN 94
- 6.6 Wireless LAN Setup 95
- Chapter 7 99
- Wireless LAN Security Setup 99
- 7.3 Network Authentication 101
- 7.5 MAC Address Filtering 108
- DESCRIPTION 109
- Chapter 8 111
- DMZ Setup 111
- 8.2 DMZ Port Filter Setup 112
- 8.3 TCP/IP Setup 112
- 8.3.2 IP Alias Setup 113
- Chapter 9 115
- Internet Access 115
- 9.1.2 PPTP Encapsulation 116
- 9.1.4 PPPoE Encapsulation 118
- 9.2 Basic Setup Complete 119
- Part III: 121
- Chapter 10 123
- Remote Node Setup 123
- 10.2 Remote Node Profile 124
- 10.2.2 PPPoE Encapsulation 125
- 10.2.3 PPTP Encapsulation 127
- 10-8 Remote Node Setup 130
- 10-10 Remote Node Setup 132
- 10.4 Remote Node Filter 133
- 10.5 Traffic Redirect 134
- Remote Node Setup 10-15 137
- Chapter 11 139
- IP Static Route Setup 139
- 11.1 IP Static Route Setup 140
- Chapter 12 143
- 12.1.2 What NAT Does 144
- 12.1.3 How NAT Works 144
- NAT 12-3 145
- Figure 12-1 How NAT Works 145
- 12.1.4 NAT Application 146
- 12.1.5 NAT Mapping Types 146
- 12.2 Using NAT 148
- 12.3 NAT Setup 150
- 12.3.1 Address Mapping Sets 151
- FIELD DESCRIPTION EXAMPLE 153
- SERVICES PORT NUMBER 156
- Telnet 23 156
- 12.5 General NAT Examples 159
- Part IV: 171
- Chapter 13 173
- Firewalls 173
- 13.4 Denial of Service 175
- 13.4.2 Types of DoS Attacks 176
- 5 REDIRECT 178
- 13 TIMESTAMP_REQUEST 178
- 14 TIMESTAMP_REPLY 178
- 17 ADDRESS_MASK_REQUEST 178
- 18 ADDRESS_MASK_REPLY 178
- 13.5 Stateful Inspection 179
- 13.5.3 TCP Security 182
- 13.5.4 UDP/ICMP Security 182
- 13.5.5 Upper Layer Protocols 183
- 13.6.1 Security In General 184
- 13.7.1 Packet Filtering: 185
- 13.7.2 Firewall 185
- Chapter 14 187
- Chapter 15 189
- 15.3 Attack Alert 190
- 15.3.1 Threshold Values 191
- 15.3.2 Half-Open Sessions 191
- Table 15-1 Attack Alert 194
- Chapter 16 197
- Creating Custom Rules 197
- 16.2 Rule Logic Overview 198
- 16.3.1 LAN to WAN Rules 200
- 16.3.2 WAN to LAN Rules 200
- 16.4 Rule Summary 201
- 16.5 Predefined Services 204
- 16.6 Custom Ports 211
- Select WAN to LAN from the 213
- Chapter 17 219
- Content Filtering 219
- Content Filtering 17-3 221
- 17-4 Content Filtering 222
- 17.2 Free 223
- 17-6 Content Filtering 224
- 17.3 iCard 225
- 17.4 List Update 226
- 17.5 Exempt Computers 228
- 17.6 Customizing 229
- Content Filtering 17-13 231
- 17.7 Domain Name 232
- Content Filtering 17-15 233
- Part V: 235
- Chapter 18 237
- Centralized Logs 237
- 18-2 Centralized Logs 238
- Figure 18-1 View Log 238
- Table 18-1 View Log 238
- 18.2 Log Settings 239
- Centralized Logs 18-5 241
- Chapter 19 243
- Filter Configuration 243
- Outgoing 244
- Filter Rule 245
- Filter Set 245
- 19.2.2 TCP/IP Filter Rule 248
- 19-8 Filter Configuration 250
- Filter Configuration 19-9 251
- 19-10 Filter Configuration 252
- 19.2.3 Generic Filter Rule 253
- 19-12 Filter Configuration 254
- 19.3 Example Filter 255
- 19.4 Filter Types and NAT 258
- 19.5 Firewall 258
- 19.6.1 LAN Filters 259
- 19.6.2 DMZ Filters 259
- 19.6.3 Remote Node Filters 260
- Chapter 20 261
- SNMP Configuration 261
- 20.2 Supported MIBs 263
- 20.3 SNMP Configuration 263
- 20.4 SNMP Traps 264
- Part VI: 265
- Chapter 21 267
- 1. System Information 269
- 2. Console Port Speed 269
- 21.2.1 System Information 270
- 21.3 Log and Trace 271
- 21.3.2 UNIX Syslog 272
- 3. Filter log 275
- 4. PPP log 275
- 5. Firewall log 275
- 21.4 Diagnostic 276
- 21.4.1 WAN DHCP 277
- Chapter 22 279
- Maintenance 279
- 22.2 Backup Configuration 280
- 22.2.1 Backup Configuration 281
- 22.2.4 GUI-based FTP Clients 282
- 22.2.7 TFTP Command Example 284
- 22.3 Restore Configuration 286
- 22.4.1 Firmware File Upload 290
- 22.4.5 TFTP File Upload 292
- Choose the Xmodem protocol 295
- Then click Send 295
- Part VII: 299
- Chapter 23 301
- 23.2 Call Control Support 302
- 23.2.1 Budget Management 303
- 23.2.2 Call History 304
- 23.3 Time and Date Setting 305
- 23.3.1 Resetting the Time 307
- Chapter 24 309
- Remote Management 309
- 24.3 FTP 310
- 24.4 Web 310
- 24.5 SNMP 310
- 24.6 DNS 310
- 24.7 Remote Management 310
- 24.9 System Timeout 313
- Part VIII: 315
- Chapter 25 317
- Bandwidth Management 317
- 25.5 Scheduler 320
- 25.7 Bandwidth Borrowing 324
- Bandwidth Manager Summary 327
- FIELD DESCRIPTION 330
- Part IX: 335
- Chapter 26 337
- IP Policy Routing 337
- IP Policy Routing 26-5 341
- Table 26-2 IP Routing Policy 341
- 26.5 Applying an IP Policy 342
- 26-10 IP Policy Routing 346
- Chapter 27 347
- Call Scheduling 347
- 27-4 Call Scheduling 350
- Call Scheduling 27-5 351
- Chapter 28 353
- Introduction to IPSec 353
- 28.1.5 VPN Applications 354
- 28.2 IPSec Architecture 355
- 28.2.1 IPSec Algorithms 356
- 28.2.2 Key Management 356
- 28.3 Encapsulation 357
- 28.4 IPSec and NAT 357
- Chapter 29 359
- VPN/IPSec Setup 359
- 29.2 IPSec Algorithms 360
- 29.3 IPSec Summary 361
- 29.3.2 ID Type and Content 362
- 29.3.3 My IP Address 364
- VPN/IPSec Setup 29-9 367
- 29-10 VPN/IPSec Setup 368
- 29.4 IPSec Setup 369
- VPN/IPSec Setup 29-13 371
- 29-14 VPN/IPSec Setup 372
- VPN/IPSec Setup 29-15 373
- 29-16 VPN/IPSec Setup 374
- 29.5 IKE Setup 375
- 29.5.2 Negotiation Mode 376
- 29.5.3 Pre-Shared Key 376
- 29-20 VPN/IPSec Setup 378
- 29.6 Manual Setup 379
- VPN/IPSec Setup 29-23 381
- Chapter 30 383
- SA Monitor 383
- 30-2 SA Monitor 384
- Part X: 385
- Chapter 31 387
- Troubleshooting 387
- 31-2 Troubleshooting 388
- Troubleshooting 31-3 389
- Part XI: 391
- Appendix A 393
- Windows 2000/NT/XP 396
- Macintosh OS 8/9 400
- Macintosh OS X 402
- Appendix B 404
- Triangle Route 404
- IP Aliasing 405
- Gateways on the WAN Side 406
- Appendix C 407
- The Big Picture 407
- Appendix D 408
- Appendix E 412
- Client computer 413
- Appendix F 415
- How PPPoE Works 416
- ZyWALL as a PPPoE Client 416
- Appendix G 417
- PPTP Protocol Overview 418
- PPP Data Connection 419
- Appendix H 420
- Hardware Specifications 420
- Cable Pin Assignments 421
- 32 Hardware Specifications 424
- Appendix I 425
- Universal Plug and Play 425
- Opening UPnP 426
- DESCRIPTION 427
- Web Configurator Easy Access 431
- Appendix J 434
- IP Subnetting 434
- Subnet Masks 435
- Subnetting 435
- Example: Two Subnets 436
- Example: Four Subnets 438
- Example Eight Subnets 439
- IP Subnetting 49 441
- Appendix K 442
- Appendix L 443
- Part XII: 445
- Appendix M 447
- Command Interpreter 447
- Appendix N 448
- Firewall Commands 448
- Firewall Commands 57 449
- Chart N-1 Firewall Commands 449
- Firewall Commands 59 451
- 60 Firewall Commands 452
- Firewall Commands 61 453
- 62 Firewall Commands 454
- Appendix O 455
- NetBIOS Filter Commands 455
- NetBIOS Filter Configuration 457
- Appendix P 459
- Boot Commands 459
- Appendix Q 461
- Log Descriptions 461
- VPN/IPSec logs 471
- VPN Responder IPSec Log 472
- Log Descriptions 81 473
- Log Commands 477
- Log Command Example 478
- Appendix R 479
- Protection 479
- Part XIII: 481
Manuais e produtos relacionados com Hardware Zyxel-communications 10
(78 páginas)
Hardware Zyxel-communications 2864 Manual do Utilizador
(267 páginas)
(267 páginas)
Hardware Zyxel-communications 802.11g Wireless Firewall Router P-320W Manual do Utilizador
(215 páginas)
(215 páginas)
Hardware Zyxel-communications Internet Security Appliance ZyWALL5UTM 4.0 Manual do Utilizador
(803 páginas)
(803 páginas)
© 2020, manymanuals-pt.com. Todos os direitos reservados. | 0.072 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentários a estes Manuais