Zyxel-communications Prestige 2602R Series Manual do Utilizador Página 167
- Página / 450
- Índice
- MARCADORES
Avaliado. / 5. Com base em avaliações de clientes
Prestige 2602R Series User’s Guide
Chapter 13 Firewall Configuration 167
13.12.1 Threshold Values
Tune these parameters when something is not working and after you have checked the firewall
counters. These default values should work fine for most small offices. Factors influencing
choices for threshold values are:
• The maximum number of opened sessions.
• The minimum capacity of server backlog in your LAN network.
• The CPU power of servers in your LAN network.
• Network bandwidth.
• Type of traffic for certain servers.
If your network is slower than average for any of these factors (especially if you have servers
that are slow or handle many tasks and are often busy), then the default values should be
reduced.
You should make any changes to the threshold values before you continue configuring
firewall rules.
13.12.2 Half-Open Sessions
An unusually high number of half-open sessions (either an absolute number or measured as
the arrival rate) could indicate that a Denial of Service attack is occurring. For TCP, "half-
open" means that the session has not reached the established state-the TCP three-way
handshake has not yet been completed (see
Figure 52 on page 138). For UDP, "half-open"
means that the firewall has detected no return traffic.
The Prestige measures both the total number of existing half-open sessions and the rate of
session establishment attempts. Both TCP and UDP half-open sessions are counted in the total
number and rate measurements. Measurements are made once a minute.
When the number of existing half-open sessions rises above a threshold (max-incomplete
high), the Prestige starts deleting half-open sessions as required to accommodate new
connection requests. The Prestige continues to delete half-open requests as necessary, until the
number of existing half-open sessions drops below another threshold (max-incomplete low).
When the rate of new connection attempts rises above a threshold (one-minute high), the
Prestige starts deleting half-open sessions as required to accommodate new connection
requests. The Prestige continues to delete half-open sessions as necessary, until the rate of new
connection attempts drops below another threshold (one-minute low). The rate is the number
of new attempts detected in the last one-minute sample period.
13.12.2.1 TCP Maximum Incomplete and Blocking Time
An unusually high number of half-open sessions with the same destination host address could
indicate that a Denial of Service attack is being launched against the host.
- Prestige 2602R Series 1
- Copyright 3
- Federal Communications 4
- Statement 4
- Safety Warnings 5
- ZyXEL Limited Warranty 6
- Customer Support 7
- 8 Customer Support 8
- Table of Contents 9
- Chapter 6 11
- Chapter 7 11
- Chapter 8 12
- Chapter 13 14
- Chapter 14 14
- Table of Contents 23 23
- 24 Table of Contents 24
- List of Figures 25
- 32 List of Figures 32
- List of Tables 33
- About This User's Guide 37
- Related Documentation 37
- User Guide Feedback 37
- Syntax Conventions 38
- Graphics Icons Key 38
- Introduction to DSL 39
- 40 Introduction to DSL 40
- CHAPTER 1 41
- 1.2.1 Internet Access 46
- 1.2.5 LAN to LAN Application 48
- 1.2.6 Front Panel LEDs 48
- CHAPTER 2 51
- 2.1.2 Resetting the Prestige 52
- CHAPTER 3 57
- 58 Chapter 3 Wizard Setup 58
- Chapter 3 Wizard Setup 59 59
- 60 Chapter 3 Wizard Setup 60
- Chapter 3 Wizard Setup 61 61
- 62 Chapter 3 Wizard Setup 62
- Chapter 3 Wizard Setup 63 63
- 64 Chapter 3 Wizard Setup 64
- Chapter 3 Wizard Setup 65 65
- 66 Chapter 3 Wizard Setup 66
- Chapter 3 Wizard Setup 67 67
- 68 Chapter 3 Wizard Setup 68
- Chapter 3 Wizard Setup 69 69
- 3.3 Password Setup 70
- CHAPTER 4 71
- 4.2 DNS Server Address 72
- 4.4 LAN TCP/IP 73
- 4.5 LAN TCP/IP 73
- 4.5.2 RIP Setup 74
- 4.6 Any IP 75
- 4.6.1 How Any IP Works 76
- 4.7 Configuring LAN 77
- 78 Chapter 4 LAN Setup 78
- Table 15 LAN Setup 78
- CHAPTER 5 79
- 5.1.2 Multiplexing 80
- 5.1.3 VPI and VCI 80
- 5.1.4 IP Address Assignment 80
- 5.2 Metric 81
- 5.3 PPPoE Encapsulation 82
- 5.4 Traffic Shaping 82
- 5.6 Configuring WAN Setup 83
- 84 Chapter 5 WAN Setup 84
- Figure 27 WAN Setup (PPPoE) 84
- Table 16 WAN Setup 84
- Chapter 5 WAN Setup 85 85
- 5.7 Traffic Redirect 86
- 5.8 Configuring WAN Backup 87
- IP address here 88
- Check WAN IP Address 89
- 90 Chapter 5 WAN Setup 90
- CHAPTER 6 91
- 6.1.2 What NAT Does 92
- 6.1.3 How NAT Works 92
- 6.1.4 NAT Application 93
- 6.1.5 NAT Mapping Types 93
- Table 19 NAT Mapping Types 94
- 6.3 SUA Server 95
- 6.4 Selecting the NAT Mode 96
- 6.5 Configuring SUA Server 97
- CHAPTER 7 103
- 7.2.2 SIP Call Progression 104
- 7.2.3 SIP Servers 104
- 7.2.3.1 SIP User Agent 105
- 7.2.3.2 SIP Proxy Server 105
- 7.2.4 RTP 106
- 7.5 Voice Coding 107
- 7.3 SIP ALG 107
- 7.4 Pulse Code Modulation 107
- RFC 3842 108
- CHAPTER 8 109
- 110 Chapter 8 Voice Screens 110
- Table 26 SIP Settings 110
- Chapter 8 Voice Screens 111 111
- 112 Chapter 8 Voice Screens 112
- 8.4 Quality of Service (QoS) 113
- 8.5 QoS Configuration 114
- 8.6 Phone 115
- 8.7 Phone Configuration 115
- 116 Chapter 8 Voice Screens 116
- Figure 45 Phone 116
- Table 29 Phone 116
- 8.8 Speed Dial 117
- 8.9 Speed Dial Configuration 117
- 118 Chapter 8 Voice Screens 118
- Figure 46 Speed Dial 118
- Table 30 Speed Dial 118
- 8.10.1 The Flash Key 119
- 8.10.2.1 European Call Hold 120
- Chapter 8 Voice Screens 121 121
- 8.10.3.1 USA Call Hold 122
- 8.10.3.2 USA Call Waiting 122
- 8.10.3.3 USA Call Transfer 122
- Chapter 8 Voice Screens 123 123
- Figure 47 Phone Port Common 123
- Table 33 Voice Common 123
- 124 Chapter 8 Voice Screens 124
- Chapter 8 Voice Screens 125 125
- Table 34 Voice Call Forward 125
- 126 Chapter 8 Voice Screens 126
- CHAPTER 9 127
- 9.5 Auto Firmware Upgrade 128
- CHAPTER 10 129
- Figure 49 Dynamic DNS 130
- Table 35 Dynamic DNS 130
- CHAPTER 11 131
- 132 Chapter 11 Time and Date 132
- Figure 50 Time and Date 132
- Table 37 Time and Date 132
- Chapter 11 Time and Date 133 133
- 134 Chapter 11 Time and Date 134
- CHAPTER 12 135
- 136 Chapter 12 Firewalls 136
- 12.4 Denial of Service 137
- 12.4.2 Types of DoS Attacks 138
- Chapter 12 Firewalls 139 139
- Figure 53 SYN Flood 139
- 12.4.2.1 ICMP Vulnerability 140
- 12.5 Stateful Inspection 141
- 142 Chapter 12 Firewalls 142
- 12.5.3 TCP Security 143
- 12.5.4 UDP/ICMP Security 144
- 12.5.5 Upper Layer Protocols 144
- 12.6.1 Security In General 145
- 12.7.1 Packet Filtering: 146
- 12.7.2 Firewall 146
- Chapter 12 Firewalls 147 147
- 148 Chapter 12 Firewalls 148
- CHAPTER 13 149
- 13.3 Rule Logic Overview 150
- 13.3.3.1 Action 151
- 13.3.3.2 Service 151
- 13.3.3.3 Source Address 151
- 13.3.3.4 Destination Address 151
- 13.4.1 LAN to WAN Rules 152
- 13.4.2 WAN to LAN Rules 152
- 13.4.3 Alerts 152
- 13.6 Rule Summary 154
- Address 157
- 13.7 Customized Services 158
- 13.9 Example Firewall Rule 159
- 13.10 Predefined Services 163
- 13.11 Anti-Probing 165
- 13.12 DoS Thresholds 166
- 13.12.1 Threshold Values 167
- 13.12.2 Half-Open Sessions 167
- CHAPTER 14 171
- CHAPTER 15 175
- 15.2 Telnet 176
- 15.3 FTP 176
- 15.4 Web 177
- CHAPTER 16 179
- 16.2 UPnP and ZyXEL 180
- Table 54 Configuring UPnP 181
- Components selection box 182
- Figure 85 System Tray Icon 189
- Network 190
- CHAPTER 17 193
- 194 Chapter 17 Logs Screens 194
- Figure 90 Log Settings 194
- Table 55 Log Settings 194
- 17.3 Displaying the Logs 195
- 17.4 SMTP Error Messages 196
- 17.4.1 Example E-mail Log 197
- 198 Chapter 17 Logs Screens 198
- CHAPTER 18 199
- 18.5 Scheduler 201
- 18.7 Bandwidth Borrowing 204
- 18.8 Configuring Summary 205
- 18.9 Configuring Class Setup 207
- 18.10 Bandwidth Monitor 211
- LABEL DESCRIPTION 212
- CHAPTER 19 213
- 214 Chapter 19 Maintenance 214
- Figure 104 System Status 214
- Chapter 19 Maintenance 215 215
- Table 65 System Status 215
- 19.2.1 System Statistics 216
- 19.3 DHCP Table Screen 217
- 19.4 Any IP Table Screen 218
- 19.5 Diagnostic Screens 219
- 220 Chapter 19 Maintenance 220
- 19.6 Firmware Screen 221
- 222 Chapter 19 Maintenance 222
- Figure 110 Firmware Upgrade 222
- Table 71 Firmware Upgrade 222
- Chapter 19 Maintenance 223 223
- Figure 112 Error Message 223
- 224 Chapter 19 Maintenance 224
- CHAPTER 20 225
- ? > or 226
- Table 73 SMT Main Menu 227
- Table 74 Main Menu Summary 227
- 20.2.2 SMT Menus Overview 228
- 1234", and 229
- *” for each character 230
- CHAPTER 21 231
- CHAPTER 22 235
- Press ENTER to Confirm 237
- CHAPTER 23 239
- CHAPTER 24 243
- 24.4 IP Alias Setup 244
- 24.5 Route IP Setup 245
- CHAPTER 25 249
- 25.4 Remote Node Filter 255
- 25.5.3 Advance Setup Options 257
- CHAPTER 26 259
- CHAPTER 27 263
- CHAPTER 28 267
- 28.3 NAT Setup 269
- Menu 15.1.255 is read-only 270
- 28.3.1.3 Ordering Your Rules 271
- 28.5 General NAT Examples 274
- Figure 154 NAT Example 1 275
- Figure 156 NAT Example 2 276
- Figure 158 NAT Example 3 277
- Figure 163 NAT Example 4 280
- CHAPTER 29 283
- CHAPTER 30 285
- Filter Rule 286
- Filter Set 286
- Len Length 289
- 30.4.1 TCP/IP Filter Rule 290
- 30.4.2 Generic Filter Rule 293
- 30.5 Filter Types and NAT 294
- 30.6 Example Filter 295
- 30.7.1 Ethernet Traffic 297
- 30.7.2 Remote Node Filters 298
- CHAPTER 31 299
- 31.2 Supported MIBs 300
- 31.3 SNMP Configuration 300
- 31.4 SNMP Traps 301
- CHAPTER 32 303
- 32.3 System Information 305
- 32.3.2 Console Port Speed 306
- 32.4 Log and Trace 307
- 32.4.2 Syslog and Accounting 308
- Figure 192 Syslog Example 309
- 32.5 Diagnostic 310
- CHAPTER 33 313
- 33.2 Backup Configuration 314
- 33.2.4 GUI-based FTP Clients 316
- 33.2.7 TFTP Command Example 317
- 33.3 Restore Configuration 318
- 33.4.1 Firmware File Upload 320
- 33.4.5 TFTP File Upload 322
- CHAPTER 34 325
- 34.2 Call Control Support 326
- 34.3 Time and Date Setting 327
- 34.3.1 Resetting the Time 329
- CHAPTER 35 331
- 35.4 System Timeout 333
- CHAPTER 36 335
- 36.4 IP Routing Policy Setup 336
- 36.5 Applying an IP Policy 339
- (192.168.1.100) 342
- CHAPTER 37 343
- CHAPTER 38 347
- 38.3 Problems with the WAN 348
- Figure 220 Pop-up Blocker 350
- Figure 222 Internet Options 352
- 38.4.1.2 JavaScripts 353
- 3 Scroll down to Scripting 354
- 38.4.1.3 Java Permissions 355
- 38.4.1.3.1 JAVA (Sun) 356
- 38.5 Telephone Problems 357
- Appendix A 359
- Product Specifications 359
- Appendix B 363
- Installing Components 364
- Configuring 365
- Windows 2000/NT/XP 366
- Macintosh OS 8/9 371
- Macintosh OS X 373
- Verifying Settings 374
- Using Configuration Files 376
- APPENDIX C 379
- How PPPoE Works 380
- Prestige as a PPPoE Client 380
- APPENDIX D 381
- Subnet Masks 382
- Subnetting 382
- Example: Two Subnets 383
- 384 Appendix D IP Subnetting 384
- Table 128 Subnet 1 384
- Table 129 Subnet 2 384
- Example: Four Subnets 385
- Example Eight Subnets 386
- Appendix D IP Subnetting 387 387
- 388 Appendix D IP Subnetting 388
- APPENDIX E 389
- IP Aliasing 390
- Gateways on the WAN Side 391
- APPENDIX F 393
- APPENDIX G 395
- Command Examples 418
- APPENDIX H 421
- APPENDIX I 423
- APPENDIX J 425
- 426 Appendix J Boot Commands 426
- APPENDIX K 427
- Table 152 TCP Reset Logs 429
- Table 154 ICMP Logs 429
- Table 155 CDR Logs 430
- Table 156 PPP Logs 430
- Table 157 UPnP Logs 431
- Table 159 Attack Logs 431
- Table 161 ICMP Notes 432
- Table 162 Syslog Logs 433
- Table 163 SIP Logs 433
- Table 164 RTP Logs 434
- Log Commands 435
- Displaying Logs 436
- Log Command Example 437
- Numerics 439
- 440 Index 440
- Index 441 441
- 442 Index 442
- Index 443 443
- 444 Index 444
- Index 445 445
- 446 Index 446
- Index 447 447
- 448 Index 448
- Index 449 449
- 450 Index 450
Manuais e produtos relacionados com Hardware Zyxel-communications Prestige 2602R Series
Hardware Zyxel-communications ADSL VoIP IAD with 802.11g Wireless 2602HW Series Manual do Utilizador
(519 páginas)
(519 páginas)
(90 páginas)
Hardware Zyxel-communications 802.11g Wireless VDSL2 4-port Gateway P-870HW-I1 Manual do Utilizador
(9 páginas)
(9 páginas)
Hardware Zyxel-communications ADSL2+ Ethernet Gateway P-660R-T Series Manual do Utilizador
(302 páginas)
(302 páginas)
Hardware Zyxel-communications 2864I Manual do Utilizador
(156 páginas)
(156 páginas)
Acer NX.MANAL.009 manuales
Manuales del propietario y guías del usuario para Cuadernos Acer NX.MANAL.009.
Ofrecemos 1 manuales en pdf Acer NX.MANAL.009 para descargar gratis por tipos de documentos: Ficha de datos
Comentários a estes Manuais