Zyxel P-793H v2 [12/490] Part ii technical reference 73

Содержание

• Default login details 1
• Firmware version 3 0 edition 1 03 2010 1
• G shdsl bis bonded broadband gateway 1
• P 793h v2 1
• Www zyxel com 1
• About this user s guide 3
• Documentation feedback 3
• Intended audience 3
• Related documentation 3
• Tips for reading user s guides on screen 3
• Customer support 4
• Need more help 4
• Disclaimer 5
• Document conventions 6
• Note notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 6
• Syntax conventions 6
• Warnings and notes 6
• Warnings tell you about things that could harm you or your device 6
• Document conventions 7
• Figures in this user s guide may use the following generic icons the p 793h v2 icon is not an exact representation of your device 7
• Icons used in figures 7
• P 793h v2 user s guide 7
• P 793h v2 user s guide 8
• Safety warnings 8
• Contents overview 9
• Technical reference 3 9
• User s guide 5 9
• About this user s guide 11
• Chapter 1 getting to know your p 793h v2 7 11
• Chapter 2 introducing the web configurator 3 11
• Chapter 3 status screens 1 11
• Contents overview 11
• Document conventions 11
• List of figures 3 11
• List of tables 1 11
• Part i user s guide 35 11
• Safety warnings 11
• Table of contents 11
• Table of contents 1 11
• Chapter 4 internet setup wizard 7 12
• Chapter 5 tutorials 7 12
• Chapter 6 wan setup 5 12
• Part ii technical reference 73 12
• Chapter 7 lan setup 01 13
• Chapter 8 network address translation nat 117 13
• Chapter 10 content filtering 55 14
• Chapter 11 vpn 61 14
• Chapter 9 firewalls 33 14
• Chapter 12 certificates 93 15
• Chapter 13 static route 03 15
• Chapter 14 802 q 1p 07 15
• Chapter 15 quality of service qos 17 16
• Chapter 16 dynamic dns setup 35 16
• Chapter 17 remote management 39 16
• Chapter 18 universal plug and play upnp 51 17
• Chapter 19 system settings 63 17
• Chapter 20 logs 69 17
• Chapter 21 tools 83 17
• Chapter 22 diagnostic 97 18
• Chapter 23 introducing the smt 01 18
• Chapter 24 general setup 07 18
• Chapter 25 wan setup 311 18
• Chapter 26 lan setup 17 18
• Chapter 27 internet access setup 21 18
• Chapter 28 remote node setup 25 18
• Chapter 29 static route setup 35 19
• Chapter 30 nat setup 39 19
• Chapter 31 firewall setup 55 19
• Chapter 32 filter configuration 57 19
• Chapter 33 system password 73 19
• Chapter 34 system information diagnosis 75 20
• Chapter 35 firmware and configuration file maintenance 87 20
• Appendix a product specifications 21 21
• Appendix b wall mounting instructions 27 21
• Appendix c setting up your computer s ip address 29 21
• Appendix d pop up windows javascripts and java permissions 53 21
• Appendix e ip addresses and subnetting 63 21
• Appendix f services 73 21
• Appendix g legal information 77 21
• Chapter 36 menus 24 to 24 1 03 21
• Chapter 37 schedule setup 411 21
• Chapter 38 troubleshooting 15 21
• Index 81 21
• List of figures 23
• List of tables 31
• User s guide 35
• Getting to know your p 793h v2 37
• Hapter 37
• High speed internet access with g shdsl 37
• Overview 37
• Figure 1 high speed internet access with your p 793h v2 38
• Figure 2 point to point connections with your p 793h v2 38
• High speed point to 2points connections 38
• High speed point to point connections 38
• Figure 3 point to 2points connections with your p 793h v2 39
• Note see chapter 5 on page 67 for more information on setting up point to point and point to 2points connections 39
• Ways to manage the p 793h v2 39
• Back up the configuration and make sure you know how to restore it restoring an earlier working configuration may be useful if the device becomes unstable or even crashes if you forget your password you will have to reset the p 793h v2 to its factory default settings if you backed up an earlier configuration file you would not have to totally re configure the p 793h v2 you could simply restore your last configuration 40
• Change the password use a password that s not easy to guess and that consists of different types of characters such as numbers and letters 40
• Chapter 1 getting to know your p 793h v2 40
• Do the following things regularly to make the p 793h v2 more secure and to manage the p 793h v2 more effectively 40
• Figure 4 leds 40
• Good habits for managing the p 793h v2 40
• Led color status description 40
• P 793h v2 user s guide 40
• Table 1 leds 40
• The following figure shows the leds 40
• The following table describes the leds 40
• Write down the password and put it in a safe place 40
• Note for internet access setup or point to point connections the dsl1 and dsl2 leds indicate the status of a single connection act as one led for point to 2point connections the dsl1 and dsl2 leds indicate the status of connection 1 and connection 2 respectively 41
• Table 1 leds continued 41
• The reset button 41
• Using the reset button 41
• Accessing the web configurator 43
• Hapter 43
• Introducing the web configurator 43
• Web configurator overview 43
• Figure 5 login screen 44
• Figure 6 change password at login 44
• Figure 7 select a mode 45
• Figure 8 main screen 45
• Note for security reasons the p 793h v2 automatically logs you out if you do not use the web configurator for five minutes default if this happens log in again 45
• Web configurator main screen 45
• A title bar 46
• As illustrated above the main screen is divided into these parts 46
• B navigation panel 46
• C main window 46
• Chapter 2 introducing the web configurator 46
• D status bar 46
• Icon description 46
• Link tab function 46
• Navigation panel 46
• P 793h v2 user s guide 46
• Table 2 web configurator icons in the title bar 46
• Table 3 navigation panel summary 46
• The icons provide the following functions 46
• The title bar provides some icons in the upper right corner 46
• Title bar 46
• Use the menu items on the navigation panel to open screens to configure p 793h v2 features the following tables describe each menu item 46
• Chapter 2 introducing the web configurator 47
• Link tab function 47
• P 793h v2 user s guide 47
• Table 3 navigation panel summary 47
• Chapter 2 introducing the web configurator 48
• Link tab function 48
• P 793h v2 user s guide 48
• Table 3 navigation panel summary 48
• Main window 49
• Status bar 49
• Table 3 navigation panel summary 49
• Hapter 51
• Overview 51
• Status screens 51
• The status screen 51
• Chapter 3 status screens 52
• Each field is described in the following table 52
• Label description 52
• P 793h v2 user s guide 52
• Table 4 status screen 52
• Chapter 3 status screens 53
• Label description 53
• P 793h v2 user s guide 53
• Table 4 status screen 53
• Any ip table 54
• Client list 54
• Figure 10 any ip table 54
• Status vpn status 54
• Table 5 any ip table 54
• Chapter 3 status screens 55
• Figure 11 packet statistics 55
• Label description 55
• P 793h v2 user s guide 55
• Packet statistics 55
• Packet statistics to access this screen 55
• Table 6 packet statistics 55
• The following table describes the fields in this screen 55
• Chapter 3 status screens 56
• Label description 56
• P 793h v2 user s guide 56
• Table 6 packet statistics continued 56
• Hapter 57
• Internet access wizard setup 57
• Internet setup wizard 57
• Overview 57
• Figure 13 wizard welcome 58
• Figure 14 auto detection no dsl connection 58
• Figure 15 auto detection pppoe 59
• Figure 16 auto detection failed 59
• Chapter 4 internet setup wizard 60
• Figure 17 internet access wizard setup isp parameters 60
• If the p 793h v2 fails to detect your dsl connection type but the physical line is connected enter your internet access information in the wizard screen exactly as your service provider gave it to you leave the defaults in any fields for which you were not given information 60
• Label description 60
• Manual configuration 60
• P 793h v2 user s guide 60
• Table 7 internet access wizard setup isp parameters 60
• The following table describes the fields in this screen 60
• Chapter 4 internet setup wizard 61
• Figure 18 internet connection with pppoe 61
• Label description 61
• P 793h v2 user s guide 61
• Table 7 internet access wizard setup isp parameters 61
• The next wizard screen varies depending on what mode and encapsulation type you use all screens shown are with routing mode configure the fields and click next to continue 61
• Chapter 4 internet setup wizard 62
• Figure 19 internet connection with rfc 1483 62
• Label description 62
• P 793h v2 user s guide 62
• Table 8 internet connection with pppoe 62
• The following table describes the fields in this screen 62
• Chapter 4 internet setup wizard 63
• Figure 20 internet connection with enet encap 63
• Label description 63
• P 793h v2 user s guide 63
• Table 9 internet connection with rfc 1483 63
• The following table describes the fields in this screen 63
• Chapter 4 internet setup wizard 64
• Figure 21 internet connection with pppoa 64
• Label description 64
• P 793h v2 user s guide 64
• Table 10 internet connection with enet encap 64
• The following table describes the fields in this screen 64
• Figure 22 internet access setup complete 65
• Table 11 internet connection with pppoa 65
• Configuring point to point connection 67
• Hapter 67
• Overview 67
• Tutorials 67
• Internet access setup 68
• Set up the server 68
• Connect the p 793h v2s 69
• Set up the client 69
• Configuring a point to 2points connection 70
• Set up the server 70
• Internet access setup 71
• Set up the clients 71
• Connect the p 793h v2s 72
• Service type of b 72
• Service type of c 72
• Technical reference 73
• Hapter 75
• Overview 75
• Wan setup 75
• What you can do in the wan screens 75
• Encapsulation method 76
• Multicast 76
• Wan ip address 76
• What you need to know about wan 76
• Before you begin 77
• Finding out more 77
• Internet access setup 78
• The internet access setup screen 78
• Chapter 6 wan setup 79
• Internet access setup 79
• Label description 79
• P 793h v2 user s guide 79
• The following table describes the labels in this screen 79
• Chapter 6 wan setup 80
• Internet access setup continued 80
• Label description 80
• P 793h v2 user s guide 80
• Chapter 6 wan setup 81
• Internet access setup continued 81
• Label description 81
• P 793h v2 user s guide 81
• Chapter 6 wan setup 82
• Figure 29 2wire 2line service mode 82
• Label description 82
• P 793h v2 user s guide 82
• Table 13 2wire 2line service mode 82
• The following table describes the labels in this screen 82
• The service mode section of the internet connection screen allows you to set up two dsl connections when you select 2wire 2line mode this allows you to create a point to 2points configuration 82
• Wire 2line service mode 82
• Advanced internet access setup 83
• Chapter 6 wan setup 83
• Internet access setup advanced setup 83
• Label description 83
• P 793h v2 user s guide 83
• Table 13 2wire 2line service mode continued 83
• The following table describes the labels in this screen 83
• Use this screen to edit your p 793h v2 s advanced wan settings click the advanced setup button in the internet access setup screen the screen appears as shown 83
• Chapter 6 wan setup 84
• Internet access setup advanced setup continued 84
• Label description 84
• P 793h v2 user s guide 84
• Chapter 6 wan setup 85
• Internet access setup advanced setup continued 85
• Label description 85
• P 793h v2 user s guide 85
• Chapter 6 wan setup 86
• Internet access setup screen to set up internet access you are configuring the first wan connection 86
• Label description 86
• More connections 86
• P 793h v2 user s guide 86
• The following table describes the labels in this screen 86
• The more connections screen 86
• Chapter 6 wan setup 87
• Label description 87
• More connections edit 87
• P 793h v2 user s guide 87
• The following table describes the labels in this screen 87
• Use this screen to configure a connection click the edit icon in the more connections screen to display the following screen 87
• Chapter 6 wan setup 88
• Label description 88
• More connections edit continued 88
• P 793h v2 user s guide 88
• Chapter 6 wan setup 89
• Label description 89
• More connections edit continued 89
• P 793h v2 user s guide 89
• Chapter 6 wan setup 90
• Configuring more connections advanced setup 90
• Label description 90
• More connections edit advanced setup 90
• P 793h v2 user s guide 90
• The following table describes the labels in this screen 90
• Use this screen to edit your p 793h v2 s advanced wan settings click the advanced setup button in the more connections edit screen the screen appears as shown 90
• Chapter 6 wan setup 91
• Label description 91
• More connections edit advanced setup continued 91
• P 793h v2 user s guide 91
• Chapter 6 wan setup 92
• Label description 92
• P 793h v2 user s guide 92
• The following table describes the labels in this screen 92
• The wan backup setup screen 92
• Wan backup 92
• Wan backup setup this screen is not available if you set the wan type to ethernet in the internet access setup screen 92
• Be sure to use the encapsulation method required by your isp the p 793h v2 supports the following methods 93
• Chapter 6 wan setup 93
• Encapsulation 93
• Label description 93
• Note if you activate traffic redirect you must configure at least one check wan ip address 93
• P 793h v2 user s guide 93
• This section provides some technical background information about the topics covered in this chapter 93
• Wan backup 93
• Wan technical reference 93
• Enet encap 94
• Ppp over ethernet 94
• Rfc 1483 94
• Ip address assignment 95
• Ip assignment with pppoa or pppoe encapsulation 95
• Llc based multiplexing 95
• Multiplexing 95
• Vc based multiplexing 95
• Vpi and vci 95
• Ip assignment with enet encap encapsulation 96
• Ip assignment with rfc 1483 encapsulation 96
• Metric 96
• Nailed up connection ppp 96
• Figure 35 traffic redirect example 97
• Traffic redirect 97
• Figure 36 traffic redirect lan setup 98
• Traffic shaping 98
• Atm traffic classes 99
• Constant bit rate cbr 99
• Figure 37 example of traffic shaping 99
• Variable bit rate vbr 99
• Unspecified bit rate ubr 100
• Hapter 101
• Lan setup 101
• Overview 101
• What you can do in the lan screens 101
• Ip address 102
• Multicast 102
• Subnet mask 102
• What you need to know about lan 102
• Before you begin 103
• Finding out more 103
• The ip screen 103
• Chapter 7 lan setup 104
• Ip advanced setup 104
• Label description 104
• P 793h v2 user s guide 104
• The advanced lan ip setup screen 104
• The following table describes the fields in this screen 104
• Use this screen to edit your p 793h v2 s rip multicast any ip and windows networking settings click the advanced setup button in the lan ip screen the screen appears as shown 104
• Chapter 7 lan setup 105
• Ip advanced setup 105
• Label description 105
• Note you must enable nat sua in the nat screen to use the any ip feature on the p 793h v2 105
• P 793h v2 user s guide 105
• The following table describes the labels in this screen 105
• Chapter 7 lan setup 106
• Dhcp setup 106
• Dhcp setup to open this screen 106
• Ip advanced setup 106
• Label description 106
• P 793h v2 user s guide 106
• The dhcp setup screen 106
• Chapter 7 lan setup 107
• Dhcp setup 107
• Label description 107
• P 793h v2 user s guide 107
• The following table describes the labels in this screen 107
• Chapter 7 lan setup 108
• Client list 108
• Client list to open the following screen 108
• Every ethernet device has a unique mac media access control address the mac address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 a0 c5 00 00 02 108
• Label description 108
• P 793h v2 user s guide 108
• The client list screen 108
• The following table describes the labels in this screen 108
• This table allows you to assign ip addresses on the lan to specific individual computers based on their mac addresses 108
• Chapter 7 lan setup 109
• Client list 109
• Ethernet interface 109
• Figure 42 physical network partitioned logical networks 109
• Ip alias allows you to partition a physical network into different logical networks over the same ethernet interface the p 793h v2 supports three logical lan interfaces via its single physical ethernet interface with the p 793h v2 itself as the gateway for each lan network 109
• Label description 109
• Note make sure that the subnets of the logical networks do not overlap 109
• P 793h v2 user s guide 109
• The following figure shows a lan divided into subnets a b and c 109
• The ip alias screen 109
• When you use ip alias you can also configure firewall rules to control access between the lan s logical networks subnets 109
• Chapter 7 lan setup 110
• Configuring the lan ip alias screen 110
• Ip alias 110
• Ip alias to open the following screen 110
• Label description 110
• P 793h v2 user s guide 110
• The following table describes the labels in this screen 110
• Lan technical reference 111
• Lans wans and the zyxel device 111
• Wan lan 111
• Dhcp setup 112
• Dns server addresses 112
• Ip pool setup 112
• Ip address and subnet mask 113
• Lan tcp ip 113
• Private ip addresses 113
• Multicast 114
• Note regardless of your particular situation do not create an arbitrary ip address always follow the guidelines above for more information on address assignment please refer to rfc 1597 address allocation for private internets and rfc 1466 guidelines for management of ip address space 114
• Rip setup 114
• Hapter 117
• Network address translation nat 117
• Overview 117
• What you can do in the nat screens 117
• What you need to know about nat 117
• Finding out more 118
• Port forwarding 118
• Sua single user account versus nat 118
• Chapter 8 network address translation nat 119
• General 119
• Label description 119
• Nat to open the following screen 119
• Note you must create a firewall rule in addition to setting up sua nat to allow traffic from the wan to be forwarded through the p 793h v2 119
• P 793h v2 user s guide 119
• The following table describes the labels in this screen 119
• The nat general setup screen 119
• Default server ip address 120
• General screen 120
• Note if you do not assign a default server ip address the p 793h v2 discards all packets received for ports that are not specified here or in the remote management setup 120
• Note many residential broadband isp accounts do not allow you to run any server processes such as a web or ftp server from your location your isp may periodically check for servers and may suspend your account if it discovers any active services at your location if you are unsure refer to your isp 120
• The port forwarding screen 120
• Configuring servers behind port forwarding example 121
• Configuring the port forwarding screen 121
• Figure 46 multiple servers behind nat example 121
• Port forwarding 121
• Wan lan 121
• Chapter 8 network address translation nat 122
• Label description 122
• P 793h v2 user s guide 122
• Port forwarding 122
• Port forwarding edit 122
• The following table describes the fields in this screen 122
• The port forwarding rule edit screen 122
• Use this screen to edit a port forwarding rule click the rule s edit icon in the port forwarding screen to display the screen shown next 122
• Chapter 8 network address translation nat 123
• General screen 123
• Label description 123
• Ordering your rules is important because the p 793h v2 applies the rules in the order that you specify when a rule matches the current packet the p 793h v2 takes the corresponding action and the remaining rules are ignored if there are any empty rules before your new configured rule your configured rule will be pushed up by that number of empty rules for example if you have already configured rules 1 to 6 in your current set and now you configure rule number 9 in the set summary screen the new rule will be rule 7 not 9 now if you delete rule 4 rules 5 to 7 will be pushed up by 1 rule so old rules 5 6 and 7 become new rules 4 5 and 6 123
• P 793h v2 user s guide 123
• Port forwarding edit 123
• The address mapping screen 123
• The following table describes the fields in this screen 123
• Address mapping 124
• Address mapping to open the following screen 124
• Chapter 8 network address translation nat 124
• Label description 124
• P 793h v2 user s guide 124
• The following table describes the fields in this screen 124
• Address mapping continued 125
• Address mapping edit 125
• Chapter 8 network address translation nat 125
• Label description 125
• P 793h v2 user s guide 125
• The address mapping rule edit screen 125
• Use this screen to edit an address mapping rule click the rule s edit icon in the address mapping screen to display the screen shown next 125
• Address mapping edit 126
• Chapter 8 network address translation nat 126
• Label description 126
• P 793h v2 user s guide 126
• The following table describes the fields in this screen 126
• Nat definitions 127
• Nat technical reference 127
• The alg screen 127
• Table 30 nat definitions 128
• What nat does 128
• Figure 52 how nat works 129
• How nat works 129
• Wan lan 129
• Figure 53 nat application with ip alias 130
• Nat application 130
• Nat mapping types 130
• Chapter 8 network address translation nat 131
• P 793h v2 user s guide 131
• Port numbers do not change for one to one and many to many no overload nat mapping types 131
• Table 31 nat mapping types 131
• The following table summarizes these types 131
• Type ip mapping 131
• Firewalls 133
• Hapter 133
• Overview 133
• What you can do in the firewall screens 133
• Anti probing 134
• Dos thresholds 134
• Finding out more 134
• What you need to know about firewall 134
• Firewall rule setup example 135
• General 138
• The firewall general screen 138
• Chapter 9 firewalls 139
• General 139
• Label description 139
• Note allowing asymmetrical routes may let traffic from the wan go directly to the lan without passing through the p 793h v2 a better solution is to use ip alias to put the p 793h v2 and the backup gateway on separate subnets see section 9 on page 152 for an example 139
• P 793h v2 user s guide 139
• The following table describes the labels in this screen 139
• Chapter 9 firewalls 140
• Label description 140
• Note the ordering of your rules is very important as rules are applied in turn 140
• P 793h v2 user s guide 140
• Refer to section 9 on page 149 for more information 140
• Rules to bring up the following screen this screen displays a list of the configured firewall rules note the order in which the rules are listed 140
• The firewall rule screen 140
• The following table describes the labels in this screen 140
• Chapter 9 firewalls 141
• Label description 141
• P 793h v2 user s guide 141
• Rules continued 141
• Configuring firewall rules 142
• Rules edit 142
• Chapter 9 firewalls 143
• Label description 143
• P 793h v2 user s guide 143
• Rules edit continued 143
• Chapter 9 firewalls 144
• Configure customized services and port numbers not predefined by the p 793h v2 for a comprehensive list of port numbers and services visit the iana internet assigned number authority website see appendix f on page 473 for some examples click the edit customized services link while editing a firewall rule to configure a custom service port this displays the following screen 144
• Customized services 144
• Label description 144
• P 793h v2 user s guide 144
• Rules edit edit customized services 144
• The following table describes the labels in this screen 144
• Chapter 9 firewalls 145
• Configuring a customized service 145
• For dos attacks the p 793h v2 uses thresholds to determine when to start dropping sessions that do not become fully established half open sessions these thresholds apply globally to all sessions 145
• For tcp half open means that the session has not reached the established state the tcp three way handshake has not yet been completed under normal 145
• Label description 145
• P 793h v2 user s guide 145
• Rules edit edit customized services config 145
• The firewall threshold screen 145
• The following table describes the labels in this screen 145
• Use this screen to add a customized rule or edit an existing rule click a rule number in the firewall customized services screen to display the following screen 145
• Figure 60 three way handshake 146
• Threshold values 146
• Configuring firewall thresholds 147
• Threshold 147
• Chapter 9 firewalls 148
• Label description 148
• P 793h v2 user s guide 148
• Threshold continued 148
• Firewall rules overview 149
• Firewall technical reference 149
• Note you also need to configure nat port forwarding or full featured nat address mapping rules to allow computers on the wan to access devices on the lan 149
• Note you can also configure the remote management settings to allow only a specific computer to manage the p 793h v2 149
• Guidelines for enhancing security with your firewall 150
• Note you also need to configure the remote management settings to allow a wan computer to manage the p 793h v2 150
• Figure 62 ideal firewall setup 151
• Note incorrectly configuring the firewall may block valid access or introduce security risks to the p 793h v2 and your protected network use caution when creating or deleting firewall rules and test your rules after you configure them 151
• Security considerations 151
• Triangle route 151
• Wan lan 151
• Figure 63 triangle route problem 152
• Solving the triangle route problem 152
• The triangle route problem 152
• Wan lan 152
• Figure 64 ip alias 153
• Before you begin 155
• Content filtering 155
• Hapter 155
• Overview 155
• What you can do in the content filter screens 155
• What you need to know about content filtering 155
• Content filtering example 156
• Chapter 10 content filtering 158
• Content filter the screen appears as shown 158
• Keyword 158
• Label description 158
• P 793h v2 user s guide 158
• The following table describes the labels in this screen 158
• The keyword screen 158
• Use this screen to block sites containing certain keywords in the url for example if you enable the keyword bad the p 793h v2 blocks all sites containing this keyword including the url http www example com bad html 158
• Chapter 10 content filtering 159
• Content filter schedule 159
• Keyword continued 159
• Label description 159
• P 793h v2 user s guide 159
• Schedule 159
• Schedule the screen appears as shown 159
• The following table describes the labels in this screen 159
• The schedule screen 159
• Chapter 10 content filtering 160
• Content filter schedule continued 160
• Content filter trusted 160
• Label description 160
• P 793h v2 user s guide 160
• The following table describes the labels in this screen 160
• The trusted screen 160
• Trusted the screen appears as shown 160
• Hapter 161
• Overview 161
• What you can do in the vpn screens 161
• Figure 69 vpn ike sa and ipsec sa 162
• Ike sa 162
• Internet 162
• Ipsec sa 162
• My ip address 162
• Secure gateway address 162
• What you need to know about ipsec vpn 162
• Before you begin 163
• Dynamic secure gateway address 163
• Figure 70 ipsec summary fields 163
• Finding out more 163
• Local network 163
• Remote network 163
• Vpn setup screen 163
• Vpn tunnel 163
• Chapter 11 vpn 164
• Label description 164
• P 793h v2 user s guide 164
• The following table describes the fields in this screen 164
• Vpn to open the vpn setup screen this is a menu of your ipsec rules tunnels the ipsec summary menu is read only edit a vpn by selecting an index number and then configuring its associated submenus 164
• Chapter 11 vpn 165
• Label description 165
• P 793h v2 user s guide 165
• Setup continued 165
• Chapter 11 vpn 166
• Click an edit icon in the vpn setup screen to edit vpn policies 166
• Label description 166
• P 793h v2 user s guide 166
• The following table describes the fields in this screen 166
• The vpn edit screen 166
• Chapter 11 vpn 167
• Label description 167
• P 793h v2 user s guide 167
• Chapter 11 vpn 168
• Label description 168
• P 793h v2 user s guide 168
• Chapter 11 vpn 169
• Label description 169
• P 793h v2 user s guide 169
• Chapter 11 vpn 170
• Label description 170
• P 793h v2 user s guide 170
• Advanced setup 171
• Chapter 11 vpn 171
• Click advanced setup in the vpn setup edit screen to open this screen 171
• Configuring advanced ike settings 171
• Label description 171
• P 793h v2 user s guide 171
• The following table describes the fields in this screen 171
• Advanced setup continued 172
• Chapter 11 vpn 172
• Label description 172
• P 793h v2 user s guide 172
• Advanced setup continued 173
• Chapter 11 vpn 173
• Label description 173
• Manual key management is useful if you have problems with ike key management 173
• Manual key setup 173
• P 793h v2 user s guide 173
• Configuring manual key 174
• Manual key 174
• Security parameter index spi 174
• Chapter 11 vpn 175
• Label description 175
• Manual key 175
• P 793h v2 user s guide 175
• The following table describes the fields in this screen 175
• Chapter 11 vpn 176
• Label description 176
• Manual key continued 176
• P 793h v2 user s guide 176
• A security association sa is the group of security settings related to a specific vpn tunnel this screen displays active vpn connections use refresh to display active vpn connections this screen is read only the following table describes the fields in this tab 177
• Chapter 11 vpn 177
• Label description 177
• Manual key continued 177
• Monitor to open the screen as shown use this screen to display and manage active vpn connections 177
• P 793h v2 user s guide 177
• Viewing sa monitor 177
• When there is outbound traffic but no inbound traffic the sa times out automatically after two minutes a tunnel with no outbound or inbound traffic is idle and does not timeout until the sa lifetime period expires see section 177
• Chapter 11 vpn 178
• Label description 178
• Monitor 178
• On page 185 on keep alive to have the p 793h v2 renegotiate an ipsec sa when the sa lifetime expires even if there is no traffic 178
• P 793h v2 user s guide 178
• The following table describes the fields in this screen 178
• Chapter 11 vpn 179
• Configuring vpn global setting 179
• Global setting 179
• Ipsec vpn technical reference 179
• Label description 179
• P 793h v2 user s guide 179
• The following table describes the fields in this screen 179
• This section provides some technical background information about the topics covered in this chapter 179
• Vpn global setting the screen appears as shown 179
• Figure 77 ipsec architecture 180
• Ipsec algorithms 180
• Ipsec and nat 180
• Ipsec architecture 180
• Key management 180
• Table 47 vpn and nat 181
• Vpn nat and nat traversal 181
• Figure 78 nat router between ipsec routers 182
• Internet 182
• Table 48 vpn and nat 182
• Encapsulation 183
• Figure 79 transport and tunnel mode ipsec encapsulation 183
• Transport mode 183
• Tunnel mode 183
• Figure 80 two phases to set up the ipsec sa 184
• Ike phases 184
• Keep alive 185
• Negotiation mode 185
• Remote dns server 185
• Figure 81 vpn host using intranet dns server example 186
• Id type and content 186
• Chapter 11 vpn 187
• Distinguish between up to 12 different incoming sas that connect from remote ipsec routers that have dynamic wan ip addresses the p 793h v2 can distinguish up to 12 incoming sas because you can select between three encryption algorithms des 3des and aes two authentication algorithms md5 and sha1 and two key groups dh1 and dh2 when you configure a vpn rule see section 11 on page 171 the id type and content act as an extra level of identification for incoming sas 187
• Id type and content examples 187
• Local id type content 187
• P 793h v2 user s guide 187
• Peer id type content 187
• Table 49 local id type and content fields 187
• Table 50 peer id type and content fields 187
• The type of id can be a domain name an ip address or an e mail address the content is the ip address domain name or e mail address 187
• Two ipsec routers must have matching id type and content configuration in order to set up a vpn tunnel 187
• 0 pre shared key 188
• 1 diffie hellman dh key groups 188
• 2 telecommuter vpn ipsec examples 188
• Table 51 matching id type and content configuration example 188
• Table 52 mismatching id type and content configuration example 188
• 2 telecommuters sharing one vpn rule example 189
• 2 telecommuters using unique vpn rules example 189
• Figure 82 telecommuters sharing one vpn rule example 189
• Internet 189
• Table 53 telecommuters sharing one vpn rule example 189
• Figure 83 telecommuters using unique vpn rules example 190
• Internet 190
• Table 54 telecommuters using unique vpn rules example 190
• Chapter 11 vpn 191
• P 793h v2 user s guide 191
• Table 54 telecommuters using unique vpn rules example continued 191
• Telecommuters headquarters 191
• Certificates 193
• Hapter 193
• Overview 193
• What you need to know about certificates 193
• Factory default certificate 194
• Figure 85 remote host certificates 194
• Verifying a certificate 194
• Figure 86 certificate details 195
• Finding out more 195
• The trusted cas screen 195
• Chapter 12 certificates 196
• Figure 87 trusted cas 196
• Label description 196
• P 793h v2 user s guide 196
• Table 55 trusted cas 196
• The following table describes the labels in this screen 196
• Trusted cas to open the following screen 196
• Figure 88 trusted ca import 197
• Note you must remove any spaces from the certificate s filename before you can import the certificate 197
• Table 56 trusted ca import 197
• Trusted ca import 197
• Figure 89 trusted ca details 198
• Table 57 trusted ca details 198
• Trusted ca details 198
• Chapter 12 certificates 199
• Label description 199
• P 793h v2 user s guide 199
• Table 57 trusted ca details continued 199
• Advantages of certificates 200
• Certificates overview 200
• Certificates technical reference 200
• Private public certificates 200
• Hapter 203
• Overview 203
• Static route 203
• Chapter 13 static route 204
• Label description 204
• P 793h v2 user s guide 204
• Static route 204
• Static route to open the static route screen 204
• The following table describes the labels in this screen 204
• The static route screen 204
• Chapter 13 static route 205
• Label description 205
• P 793h v2 user s guide 205
• Static route edit 205
• The following table describes the labels in this screen 205
• Use this screen to configure the required information for a static route select a static route index number and click edit the screen shown next appears 205
• Hapter 207
• Overview 207
• What you can do in the 802 q 1p screens 207
• What you need to know about 802 q 1p 207
• Forwarding tagged and untagged frames 208
• Ieee 802 q tagged vlan 208
• 802 q 1p example 209
• P 793h v2 209
• Chapter 14 802 q 1p 213
• Group setting 213
• Label description 213
• P 793h v2 user s guide 213
• Q 1p to display the following screen 213
• The 802 q 1p group setting screen 213
• The following table describes the labels in this screen 213
• Chapter 14 802 q 1p 214
• Editing 802 q 1p group setting 214
• Group setting continued 214
• In the 802 q 1p screen click the edit button from the modify filed to display the following screen 214
• Label description 214
• P 793h v2 user s guide 214
• The following table describes the labels in this screen 214
• Use this screen to configure the settings for each vlan group 214
• Chapter 14 802 q 1p 215
• Edit continued 215
• Label description 215
• P 793h v2 user s guide 215
• Port setting 215
• Port setting to display the following screen 215
• The 802 q 1p port setting screen 215
• Chapter 14 802 q 1p 216
• Label description 216
• P 793h v2 user s guide 216
• Port setting 216
• The following table describes the labels in this screen 216
• Hapter 217
• Overview 217
• Qos overview 217
• Quality of service qos 217
• Qos versus cos 218
• Tagging and marking 218
• What you can do in the qos screens 218
• What you need to know about qos 218
• Finding out more 219
• Qos class setup example 219
• Figure 97 qos example 220
• Figure 98 qos class example voip 1 220
• Mbps dsl 220
• Figure 101 qos class example boss 2 222
• Chapter 15 quality of service qos 223
• General 223
• Label description 223
• P 793h v2 user s guide 223
• Qos to open the screen as shown next 223
• The following table describes the labels in this screen 223
• The qos general screen 223
• Use this screen to enable or disable qos and have the p 793h v2 automatically assign priority to traffic according to the ieee 802 p priority level ip precedence and or packet length 223
• Chapter 15 quality of service qos 224
• Class setup 224
• Class setup to open the following screen 224
• General 224
• Label description 224
• P 793h v2 user s guide 224
• The class setup screen 224
• The following table describes the labels in this screen 224
• Use this screen to add edit or delete classifiers a classifier groups traffic into data flows according to specific criteria such as the source address destination address source port number destination port number or incoming interface for example you can configure a classifier to select traffic from the same protocol port such as telnet to form a flow 224
• Chapter 15 quality of service qos 225
• Class setup continued 225
• Label description 225
• P 793h v2 user s guide 225
• Class setup edit 226
• The class configuration screen 226
• Chapter 15 quality of service qos 227
• Class setup edit 227
• Label description 227
• P 793h v2 user s guide 227
• See appendix f on page 473 for a list of commonly used services the following table describes the labels in this screen 227
• Chapter 15 quality of service qos 228
• Class setup edit continued 228
• Label description 228
• P 793h v2 user s guide 228
• Chapter 15 quality of service qos 229
• Class setup edit continued 229
• Label description 229
• P 793h v2 user s guide 229
• Chapter 15 quality of service qos 230
• Label description 230
• Monitor 230
• Monitor the screen appears as shown 230
• P 793h v2 user s guide 230
• The following table describes the labels in this screen 230
• The qos monitor screen 230
• Chapter 15 quality of service qos 231
• Ieee 802 p specifies the user priority field and defines up to eight separate traffic types the following table describes the traffic types defined in the ieee 802 d standard which incorporates the 802 p 231
• Ieee 802 q tag 231
• Ip precedence 231
• P 793h v2 user s guide 231
• Priority level traffic type 231
• Qos technical reference 231
• Similar to ieee 802 p prioritization at layer 2 you can use ip precedence to prioritize packets in a layer 3 network ip precedence uses three bits of the eight bit tos type of service field in the ip header there are eight classes of services ranging from zero to seven in ip precedence zero is the lowest priority level and seven is the highest 231
• Table 67 ieee 802 p priority level and traffic type 231
• The ieee 802 q standard defines an explicit vlan tag in the mac header to identify the vlan membership of a frame across bridges a vlan tag includes the 12 bit vlan id and 3 bit user priority the vlan id associates a frame with a specific vlan and provides the information that devices need to process the frame across the network 231
• This section provides some technical background information about the topics covered in this chapter 231
• Automatic priority queue assignment 232
• Diffserv 232
• Dscp and per hop behavior 232
• Chapter 15 quality of service qos 233
• Ieee 802 p user priority ethernet priority 233
• Layer 2 layer 3 233
• P 793h v2 user s guide 233
• Priority queue 233
• Table 68 internal layer2 and layer3 qos mapping 233
• Through faster while traffic in lower index queues is dropped if the network is congested 233
• Tos ip precedence dscp ip packet length byte 233
• Dynamic dns setup 235
• Hapter 235
• Overview 235
• What you need to know about ddns 235
• Chapter 16 dynamic dns setup 236
• Dynamic dns 236
• Dynamic dns the screen appears as shown 236
• Label description 236
• P 793h v2 user s guide 236
• The dynamic dns screen 236
• The following table describes the fields in this screen 236
• Chapter 16 dynamic dns setup 237
• Dynamic dns continued 237
• Label description 237
• Note the ddns server may not be able to detect the proper ip address if there is an http proxy server between the p 793h v2 and the ddns server 237
• P 793h v2 user s guide 237
• Hapter 239
• Overview 239
• Remote management 239
• Remote management limitations 240
• What you can do in the remote management screens 240
• What you need to know about remote management 240
• Configuring the www screen 241
• Note if you disable the www service in this screen then the p 793h v2 blocks all http connection attempts 241
• Remote management and nat 241
• System timeout 241
• The www screen 241
• Chapter 17 remote management 242
• Label description 242
• P 793h v2 user s guide 242
• Telnet 242
• Telnet tab to display the screen as shown 242
• The following table describes the labels in this screen 242
• The telnet screen 242
• You can use telnet to access the p 793h v2 s command line interface specify which interfaces allow telnet access and from which ip address the access can come 242
• Chapter 17 remote management 243
• Ftp the screen appears as shown 243
• Label description 243
• P 793h v2 user s guide 243
• Telnet 243
• The following table describes the labels in this screen 243
• The ftp screen 243
• You can use ftp file transfer protocol to upload and download the p 793h v2 s firmware and configuration files please see the user s guide chapter on firmware and configuration file maintenance for details to use this feature your computer must have an ftp client 243
• Chapter 17 remote management 244
• Label description 244
• P 793h v2 user s guide 244
• Simple network management protocol snmp is a protocol used for exchanging management information between network devices snmp is a member of the tcp ip protocol suite your p 793h v2 supports snmp agent functionality which allows a manager station to manage and monitor the p 793h v2 through the network the p 793h v2 supports snmp version one snmpv1 and version two snmpv2 the next figure illustrates an snmp management operation 244
• The following table describes the labels in this screen 244
• The snmp screen 244
• Figure 111 snmp management model 245
• Note snmp is only available if tcp ip is configured 245
• Chapter 17 remote management 246
• P 793h v2 user s guide 246
• Snmp traps 246
• Supported mibs 246
• Table 73 snmp traps 246
• The p 793h v2 supports mib ii which is defined in rfc 1213 and rfc 1215 the focus of the mibs is to let administrators collect statistical data and monitor status and performance 246
• The p 793h v2 will send traps to the snmp manager when any one of the following events occurs 246
• Trap trap name description 246
• Chapter 17 remote management 247
• Configuring snmp 247
• Label description 247
• P 793h v2 user s guide 247
• Snmp the screen appears as shown 247
• The following table describes the labels in this screen 247
• Chapter 17 remote management 248
• Dns to change your p 793h v2 s dns settings 248
• Label description 248
• P 793h v2 user s guide 248
• The dns screen 248
• The following table describes the labels in this screen 248
• Use dns domain name system to map a domain name to its corresponding ip address and vice versa refer to chapter 7 on page 101 for background information 248
• Chapter 17 remote management 249
• Icmp the screen appears as shown 249
• If an outside user attempts to probe an unsupported port on your p 793h v2 an icmp response packet is automatically returned this allows the outside user to know the p 793h v2 exists your p 793h v2 supports anti probing which prevents the icmp response packet from being sent this keeps outsiders from discovering your p 793h v2 when unsupported ports are probed 249
• Label description 249
• Note if you want your device to respond to pings and requests for unauthorized services you may also need to configure the firewall anti probing settings to match 249
• P 793h v2 user s guide 249
• The following table describes the labels in this screen 249
• The icmp screen 249
• Hapter 251
• Overview 251
• Universal plug and play upnp 251
• What you can do in the upnp screen 251
• What you need to know about upnp 251
• Cautions with upnp 252
• Upnp and zyxel 252
• General 253
• Installing upnp in windows example 253
• Installing upnp in windows me 253
• The upnp screen 253
• Installing upnp in windows xp 255
• Auto discover your upnp enabled network device 257
• Using upnp in windows xp example 257
• Web configurator easy access 260
• Hapter 263
• Overview 263
• System settings 263
• What you can do in the system settings screens 263
• What you need to know about system settings 263
• General 264
• The general screen 264
• Chapter 19 system settings 265
• General 265
• Label description 265
• P 793h v2 user s guide 265
• The following table describes the labels in this screen 265
• Chapter 19 system settings 266
• Label description 266
• P 793h v2 user s guide 266
• The following table describes the fields in this screen 266
• The time setting screen 266
• Time setting 266
• Time setting the screen appears as shown 266
• Chapter 19 system settings 267
• Label description 267
• P 793h v2 user s guide 267
• Time setting continued 267
• Chapter 19 system settings 268
• Label description 268
• P 793h v2 user s guide 268
• Time setting continued 268
• Hapter 269
• Overview 269
• What you can do in the log screens 269
• What you need to know about logs 269
• Chapter 20 logs 270
• Entries in red indicate alerts the log wraps around and deletes the old entries after it fills click a column heading to sort the entries by that column s criteria click the heading cell again to reverse the sort order a triangle indicates ascending or descending sort order 270
• Label description 270
• Logs to open the view log screen 270
• P 793h v2 user s guide 270
• The following table describes the fields in this screen 270
• The view log screen 270
• View log 270
• Log settings 271
• The log settings screen 271
• View log 271
• Chapter 20 logs 272
• Label description 272
• Log settings 272
• P 793h v2 user s guide 272
• The following table describes the fields in this screen 272
• An end of log message displays for each mail in which a complete log has been sent the following is an example of a log sent by e mail 273
• Chapter 20 logs 273
• Example e mail log 273
• If there are difficulties in sending e mail the following error message appears 273
• Label description 273
• Log settings 273
• P 793h v2 user s guide 273
• Smtp action request failed ret the are described in the following table 273
• Smtp error messages 273
• Table 82 smtp error messages 273
• You may edit the subject title 273
• Chapter 20 logs 274
• End of log message shows that a complete log has been sent 274
• Figure 120 e mail log example 274
• Log descriptions 274
• Log message description 274
• P 793h v2 user s guide 274
• Table 83 system maintenance logs 274
• This section provides descriptions of example log messages 274
• Chapter 20 logs 275
• Log message description 275
• P 793h v2 user s guide 275
• Table 83 system maintenance logs continued 275
• Table 84 system error logs 275
• Chapter 20 logs 276
• Log message description 276
• P 793h v2 user s guide 276
• Table 85 access control logs 276
• Table 86 tcp reset logs 276
• Chapter 20 logs 277
• Log message description 277
• P 793h v2 user s guide 277
• Table 86 tcp reset logs continued 277
• Table 87 packet filter logs 277
• Table 88 icmp logs 277
• Chapter 20 logs 278
• Log message description 278
• P 793h v2 user s guide 278
• Table 89 cdr logs 278
• Table 90 ppp logs 278
• Table 91 upnp logs 278
• Table 92 content filtering logs 278
• Chapter 20 logs 279
• Log message description 279
• P 793h v2 user s guide 279
• Table 93 attack logs 279
• Table 94 802 x logs 279
• Chapter 20 logs 280
• Log message description 280
• P 793h v2 user s guide 280
• Packet direction direction description 280
• Table 94 802 x logs continued 280
• Table 95 acl setting notes 280
• Table 96 icmp notes 280
• Type code description 280
• Chapter 20 logs 281
• Log message description 281
• P 793h v2 user s guide 281
• Table 96 icmp notes continued 281
• Table 97 syslog logs 281
• Type code description 281
• Chapter 20 logs 282
• Log display payload type 282
• P 793h v2 user s guide 282
• Table 98 rfc 2408 isakmp payload types 282
• The following table shows rfc 2408 isakmp payload types that the log displays please refer to rfc 2408 for detailed information on each type 282
• Hapter 283
• Overview 283
• What you can do in the tool screens 283
• Filename conventions 284
• Table 99 filename conventions 284
• What you need to know about tools 284
• Before you begin 285
• Do not interrupt the file transfer process as this may permanently damage your device when the restore configuration process is complete the device automatically restarts 285
• Ftp restrictions 285
• Tool examples 285
• Using ftp or tftp to restore configuration 285
• Do not interrupt the file transfer process as this may permanently damage your device 286
• Figure 121 restore using ftp session example 286
• Ftp and tftp firmware and configuration file uploads 286
• Ftp file upload command from the dos prompt example 286
• Restore using ftp session example 286
• Figure 122 ftp session example of firmware file upload 287
• Ftp session example of firmware file upload 287
• Tftp file upload 287
• Tftp upload command example 288
• Using the ftp commands to back up configuration 288
• Backup configuration using tftp 289
• Chapter 21 tools 289
• Command description 289
• Configuration backup using gui based ftp clients 289
• Figure 123 ftp session example 289
• Ftp command configuration backup example 289
• P 793h v2 user s guide 289
• Table 100 general commands for gui based ftp clients 289
• The following table describes some of the commands that you may see in gui based ftp clients 289
• The p 793h v2 supports the up downloading of the firmware and the configuration file using tftp trivial file transfer protocol over lan although tftp should work over wan as well it is not recommended 289
• This figure gives an example of using ftp commands from the dos command prompt to save your device s configuration onto your computer 289
• To use tftp your computer must have both telnet and tftp clients to backup the configuration file follow the procedure shown next 289
• Configuration backup using gui based tftp clients 290
• Table 101 general commands for gui based tftp clients 290
• Tftp command configuration backup example 290
• Do not turn off the p 793h v2 while firmware upload is in progress 291
• Firmware 291
• Table 101 general commands for gui based tftp clients continued 291
• The firmware screen 291
• Figure 125 firmware upload in progress 292
• Figure 126 network temporarily disconnected 292
• Figure 127 error message 292
• Firmware continued 292
• Backup configuration 293
• Configuration 293
• Restore configuration 293
• Table 103 restore configuration 293
• The configuration screen 293
• Do not turn off the p 793h v2 while configuration file upload is in progress 294
• Figure 129 configuration upload successful 294
• Figure 130 network temporarily disconnected 294
• Figure 131 configuration upload error 294
• Figure 132 reset warning message 295
• Figure 133 reset in process message 295
• Reset to factory defaults 295
• Restart 295
• The restart screen 295
• Diagnostic 297
• Hapter 297
• Overview 297
• The general diagnostic screen 297
• What you can do in the diagnostic screens 297
• Dsl line 298
• General 298
• The dsl line diagnostic screen 298
• Chapter 22 diagnostic 299
• Dsl line 299
• Label description 299
• P 793h v2 user s guide 299
• The following table describes the fields in this screen 299
• Chapter 22 diagnostic 300
• Dsl line continued 300
• Label description 300
• P 793h v2 user s guide 300
• Accessing the smt 301
• Hapter 301
• Introducing the smt 301
• Chapter 23 introducing the smt 302
• Figure 138 smt main menu 302
• Menu function 302
• Note there is an inactivity timeout and the default value is ten minutes if there is no activity for longer than this your p 793h v2 will automatically log you out you will then have to telnet into the p 793h v2 again you can use the web configurator or the ci commands menu 24 to change the inactivity timeout period 302
• Note use menu 23 to change the password 302
• P 793h v2 user s guide 302
• Smt menu items 302
• Table 106 main menu summary 302
• The following table provides an overview of each menu item 302
• Chapter 23 introducing the smt 303
• Menu function 303
• Menus sub menus 303
• P 793h v2 user s guide 303
• Table 106 main menu summary 303
• Table 107 smt menus overview 303
• The following table gives you an overview of the various smt menus 303
• Chapter 23 introducing the smt 304
• Menus sub menus 304
• P 793h v2 user s guide 304
• Table 107 smt menus overview continued 304
• Chapter 23 introducing the smt 305
• Navigating the smt interface 305
• Operation keystroke description 305
• P 793h v2 user s guide 305
• Table 108 main menu commands 305
• You should be familiar with the following operations before you try to use the smt to modify the configuration 305
• Configuring general setup 307
• General setup 307
• Hapter 307
• Chapter 24 general setup 308
• Configuring dynamic dns 308
• Field description 308
• P 793h v2 user s guide 308
• Table 109 menu 1 general setup continued 308
• To configure dynamic dns set the p 793h v2 to router mode in menu 1 or in the maintenance device mode screen and go to menu 1 general setup and 308
• Chapter 24 general setup 309
• Field description 309
• Figure 140 menu 1 configure dynamic dns 309
• Follow the instructions in the next table to configure dynamic dns parameters 309
• Http www dyndns org 309
• P 793h v2 user s guide 309
• Press space bar to select yes in the edit dynamic dns field press enter to display menu 1 configure dynamic dns shown next 309
• Table 110 menu 1 configure dynamic dns 309
• Chapter 24 general setup 310
• Field description 310
• Note the ddns server may not be able to detect the proper ip address if there is an http proxy server between the p 793h v2 and the ddns server 310
• P 793h v2 user s guide 310
• Table 110 menu 1 configure dynamic dns 310
• Hapter 311
• Wan setup 311
• Chapter 25 wan setup 312
• Field description 312
• Note if you activate either traffic redirect or dial backup you must configure at least one ip address here 312
• P 793h v2 user s guide 312
• Table 111 menu 2 wan setup 312
• The following table describes the fields in this screen 312
• 2wire 2line service mode 313
• Chapter 25 wan setup 313
• Field description 313
• Figure 142 menu 2 2wire 2line service mode 313
• From the main menu enter 2 to open menu 2 then select 2wire 2line in the service mode field to see the screen as shown below 313
• P 793h v2 user s guide 313
• Table 111 menu 2 wan setup continued 313
• Chapter 25 wan setup 314
• Field description 314
• Note if you activate either traffic redirect or dial backup you must configure at least one ip address here 314
• P 793h v2 user s guide 314
• Table 112 menu 2 2wire 2line service mode 314
• The following table describes the fields in this screen 314
• Chapter 25 wan setup 315
• Configuring traffic redirect 315
• Field description 315
• Figure 143 menu 2 traffic redirect setup 315
• From the main menu in menu 2 select yes in traffic redirect and then press enter 315
• P 793h v2 user s guide 315
• Table 112 menu 2 2wire 2line service mode continued 315
• Table 113 menu 2 traffic redirect setup 315
• The following table describes the fields in this menu 315
• Accessing the lan menus 317
• Hapter 317
• Lan port filter setup 317
• Lan setup 317
• Figure 146 menu 3 tcp ip and dhcp ethernet setup 318
• Table 114 menu 3 tcp ip and dhcp ethernet setup 318
• Tcp ip and dhcp setup menu 318
• Chapter 26 lan setup 319
• Field description 319
• P 793h v2 user s guide 319
• Table 114 menu 3 tcp ip and dhcp ethernet setup continued 319
• Chapter 26 lan setup 320
• Field description 320
• Figure 147 menu 3 ip alias setup 320
• Lan ip alias 320
• P 793h v2 user s guide 320
• Table 115 menu 3 ip alias setup 320
• Use menu 3 to configure the first network and you use menu 3 to configure the other two networks move the cursor to the edit ip alias field press space bar to choose yes and press enter to configure the second and third network 320
• Use the instructions in the following table to configure ip alias parameters 320
• Hapter 321
• Internet access setup 321
• Chapter 27 internet access setup 322
• Field description 322
• P 793h v2 user s guide 322
• Table 116 menu 4 internet access setup continued 322
• Chapter 27 internet access setup 323
• Field description 323
• P 793h v2 user s guide 323
• Table 116 menu 4 internet access setup continued 323
• Hapter 325
• Introduction to remote node setup 325
• Remote node setup 325
• Chapter 28 remote node setup 326
• Field description 326
• Figure 150 menu 11 remote node profile nodes 1 7 326
• P 793h v2 user s guide 326
• Remote node profile 326
• Table 117 menu 11 remote node profile nodes 1 7 326
• The following explains how to configure remote nodes 1 7 326
• The following table describes the labels in this menu 326
• Chapter 28 remote node setup 327
• Field description 327
• P 793h v2 user s guide 327
• Table 117 menu 11 remote node profile nodes 1 7 continued 327
• Chapter 28 remote node setup 328
• Field description 328
• Figure 151 menu 11 remote node network layer options 328
• Move the cursor to the edit ip bridge field in menu 11 then press space bar to select yes press enter to open menu 11 remote node network layer options 328
• P 793h v2 user s guide 328
• Remote node network layer options 328
• Table 117 menu 11 remote node profile nodes 1 7 continued 328
• Table 118 menu 11 remote node network layer options 328
• The following table describes the fields in this menu 328
• Chapter 28 remote node setup 329
• Field description 329
• P 793h v2 user s guide 329
• Table 118 menu 11 remote node network layer options continued 329
• Chapter 28 remote node setup 330
• Field description 330
• Move the cursor to the field edit filter sets in menu 11 and then press space bar to set the value to yes press enter to open menu 11 remote node filter 330
• P 793h v2 user s guide 330
• Remote node filter 330
• Table 118 menu 11 remote node network layer options continued 330
• Use this menu to specify the filter set s to apply to the incoming and outgoing traffic between this remote node and the p 793h v2 to prevent certain packets from triggering calls you can specify up to 4 filter sets separated by commas for example 1 5 9 12 in each filter field note that spaces are accepted in this field for more information on defining the filters please refer to chapter 32 on 330
• Chapter 28 remote node setup 331
• Field description 331
• Figure 152 menu 11 remote node filter 331
• P 793h v2 user s guide 331
• Page 357 for pppoe or pptp encapsulation you have the additional option of specifying remote node call filter sets 331
• Table 119 menu 11 remote node filter 331
• The following table describes the labels in this menu 331
• Chapter 28 remote node setup 332
• Field description 332
• Figure 153 menu 11 remote node atm layer options 332
• Move the cursor to the edit atm options field in menu 11 then press space bar to select yes press enter to open this menu this menu depends on the multiplexing and encapsulation you select in menu 11 332
• P 793h v2 user s guide 332
• Remote node atm layer options 332
• Table 120 menu 11 remote node atm layer options 332
• The following table describes the fields in this menu 332
• Advance setup options 333
• Figure 154 menu 11 advance setup options 333
• Table 121 menu 11 advance setup options 333
• Hapter 335
• Ip static route setup 335
• Static route setup 335
• Chapter 29 static route setup 336
• Field description 336
• Figure 156 menu 12 edit ip static route 336
• Now enter the index number of the static route that you want to configure 336
• P 793h v2 user s guide 336
• Table 122 menu 12 edit ip static route 336
• The following table describes the fields in this screen 336
• Bridge static route setup 337
• Chapter 29 static route setup 337
• Enter 3 from menu 12 select one of the bridge static routes as shown next to configure ip static routes in menu 12 337
• Field description 337
• Figure 157 menu 12 bridge static route setup 337
• Figure 158 menu 12 edit bridge static route 337
• Now enter the index number of the static route that you want to configure 337
• P 793h v2 user s guide 337
• Table 123 menu 12 edit bridge static route 337
• The following table describes the fields in this screen 337
• Hapter 339
• Nat setup 339
• Sua single user account versus nat 339
• Using nat 339
• Applying nat 340
• Chapter 30 nat setup 340
• Enter 1 to open menu 11 remote node profile 340
• Enter 11 from the main menu 340
• Figure 159 menu 4 applying nat for internet access 340
• P 793h v2 user s guide 340
• The following figure shows how you apply nat to the remote node in menu 11 340
• You apply nat via menus 4 or 11 as displayed next the next figure shows you how to apply nat for internet access in menu 4 enter 4 from the main menu to go to menu 4 internet access setup 340
• Chapter 30 nat setup 341
• Field description options 341
• Figure 160 menu 11 applying nat to the remote node 341
• Move the cursor to the edit ip bridge field press space bar to select yes and then press enter to bring up menu 11 remote node network layer options 341
• Nat setup 341
• P 793h v2 user s guide 341
• Table 124 applying nat in menus 4 11 341
• The following table describes the fields in this menu 341
• Use the address mapping sets menus and submenus to create the mapping table used to assign global addresses to computers on the lan and the dmz set 255 is used for sua when you select full feature in menu 4 or menu 11 the smt will use the address mapping set that you specify when you select sua only the smt will use the pre configured set 255 read only 341
• Address mapping sets 342
• Figure 161 menu 15 nat setup 342
• Figure 162 menu 15 address mapping sets 342
• Chapter 30 nat setup 343
• Field description 343
• Figure 163 menu 15 address mapping rules 343
• Note the entire set will be deleted if you leave the set name field blank and press enter at the bottom of the screen 343
• Note the type local and global start end ips are configured in menu 15 described later and the values are displayed here 343
• P 793h v2 user s guide 343
• Table 125 menu 15 address mapping rules 343
• User defined address mapping sets 343
• Figure 164 menu 15 address mapping rule 344
• Note an ip end address must be numerically greater than its corresponding ip start address 344
• Note you must press enter at the bottom of the screen to save the whole set you must do this again if you make any changes to the set including deleting a rule no changes to the set take place until this action is taken 344
• Table 126 menu 15 address mapping rule 344
• Chapter 30 nat setup 345
• Configuring a server behind nat 345
• Enter 15 in the main menu to go to menu 15 nat setup 345
• Enter 2 to open menu 15 and configure the address mapping rules for the wan port on a p 793h v2 with a single wan port 345
• Field description 345
• Figure 165 menu 15 nat server sets 345
• Follow these steps to configure a server behind nat 345
• Note if you do not assign a default server ip address the p 793h v2 discards all packets received for ports that are not specified here or in the remote management setup 345
• P 793h v2 user s guide 345
• Table 126 menu 15 address mapping rule continued 345
• Chapter 30 nat setup 346
• Enter 1 to configure the server set used by sua or enter the number of the server set you want to modify for full feature nat in menu 15 nat server setup configure the port forwarding rules 346
• Field description 346
• Figure 166 menu 15 nat server setup 346
• General nat examples 346
• P 793h v2 user s guide 346
• Table 127 menu 15 nat server setup 346
• The first entry is for the default server the following table describes the labels in this menu 346
• The following are some examples of nat configuration 346
• Figure 167 nat example 1 347
• Figure 168 menu 4 internet access nat example 347
• Internet access only 347
• Example 2 internet access with a default server 348
• Example 3 multiple public ip addresses with inside servers 348
• Figure 169 nat example 2 348
• Figure 170 menu 15 specifying an inside server 348
• Figure 171 nat example 3 349
• Chapter 30 nat setup 350
• Figure 172 example 3 menu 11 350
• P 793h v2 user s guide 350
• When finished menu 15 should look like as shown in figure 174 on page 351 350
• Chapter 30 nat setup 351
• Enter 15 from the main menu 351
• Enter 2 to go to menu 15 351
• Figure 173 example 3 menu 15 351
• Figure 174 example 3 final menu 15 351
• Now configure the iga3 to map to our web server and mail server on the lan 351
• P 793h v2 user s guide 351
• The following figure shows how to configure the first rule 351
• Example 4 nat unfriendly application programs 352
• Figure 175 example 3 menu 15 352
• Figure 176 nat example 4 352
• Note other applications such as some gaming programs are nat unfriendly because they embed addressing information in the data stream these applications won t work through nat even when using one to one and many one to one mapping types 352
• After you ve configured your rule you should be able to check the settings in menu 15 as shown next example 4 menu 15 address mapping rules 353
• Chapter 30 353
• Figure 177 example 4 menu 15 address mapping rule 353
• Follow the steps outlined in example 3 above to configure these two menus as follows 353
• P 793h v2 user s guide 353
• Activating the firewall 355
• Firewall setup 355
• Hapter 355
• Using p 793h v2 smt menus 355
• Chapter 31 firewall setup 356
• Figure 179 menu 21 firewall setup 356
• Menu 15 to configure the lan to wan set name and wan to lan set name 356
• Note it is recommended to configure the firewall rules using the web configurator 356
• P 793h v2 user s guide 356
• Filter configuration 357
• Hapter 357
• Introduction to filters 357
• The filter structure of the p 793h v2 358
• Figure 181 filter rule process 359
• Configuring a filter set 360
• Figure 182 menu 21 filter and firewall setup 360
• Figure 183 menu 21 filter set configuration 360
• Chapter 32 filter configuration 361
• Field description 361
• Figure 184 menu 21 filter rules summary 361
• P 793h v2 user s guide 361
• Table 128 abbreviations used in the filter rules summary menu 361
• The following table describes the labels in this screen 361
• This screen shows the summary of the existing rules in the filter set 361
• Configuring a filter rule 362
• Configuring a tcp ip filter rule 362
• Table 129 rule abbreviations used 362
• Chapter 32 filter configuration 363
• Field description 363
• Figure 185 menu 21 tcp ip filter rule 363
• P 793h v2 user s guide 363
• Table 130 menu 21 tcp ip filter rule 363
• The following table describes how to configure your tcp ip filter rule 363
• To configure tcp ip rules select tcp ip filter rule from the filter type field and press enter to open menu 21 tcp ip filter rule as shown next 363
• Chapter 32 filter configuration 364
• Field description 364
• P 793h v2 user s guide 364
• Table 130 menu 21 tcp ip filter rule 364
• Figure 186 executing an ip filter 365
• Chapter 32 filter configuration 366
• Configuring a generic filter rule 366
• Field description 366
• Figure 187 menu 21 generic filter rule 366
• For generic rules the p 793h v2 treats a packet as a byte stream as opposed to an ip or ipx packet you specify the portion of the packet to check with the offset from 0 and the length fields both in bytes the p 793h v2 applies the mask bit wise anding to the data portion before comparing the result against the value to determine a match the mask and value are specified in hexadecimal numbers note that it takes two hexadecimal digits to represent a byte so if the length is 4 the value in either field will take 8 digits for example ffffffff 366
• P 793h v2 user s guide 366
• Table 131 menu 21 generic filter rule 366
• The following table describes the fields in the generic filter rule menu 366
• This section shows you how to configure a generic filter rule the purpose of generic rules is to allow you to filter non ip packets for ip it is generally easier to use the ip rules directly 366
• To configure a generic rule select generic filter rule in the filter type field in menu 21 and press enter to open generic filter rule as shown below 366
• Chapter 32 filter configuration 367
• Enter 21 from the main menu to open menu 21 filter and firewall setup 367
• Example filter 367
• Field description 367
• Figure 188 telnet filter example 367
• Let s look at an example to block outside users from accessing the p 793h v2 via telnet please see our included disk for more example filters 367
• P 793h v2 user s guide 367
• Table 131 menu 21 generic filter rule continued 367
• Figure 189 example filter menu 21 368
• Figure 190 example filter rules summary menu 21 369
• Filter types and nat 369
• Applying a filter 370
• Applying lan filters 370
• Figure 191 protocol and device filter sets 370
• Firewall versus filters 370
• Note if you do not activate the firewall it is advisable to apply filters 370
• Applying remote node filters 371
• Chapter 32 filter configuration 371
• Example 3 4 6 11 input filter sets filter incoming traffic to the p 793h v2 and output filter sets filter outgoing traffic from the p 793h v2 371
• Figure 192 filtering lan traffic 371
• Figure 193 filtering remote node traffic 371
• Go to menu 11 shown below note that call filter sets are only present for pppoa or pppoe encapsulation and enter the number s of the filter set s as appropriate you can cascade up to four filter sets by entering their numbers separated by commas the p 793h v2 already has filters to prevent netbios traffic from triggering calls and block incoming telnet ftp and http connections 371
• P 793h v2 user s guide 371
• Hapter 373
• System password 373
• Hapter 375
• Introduction to system status 375
• System information diagnosis 375
• System status 375
• Chapter 34 system information diagnosis 376
• Enter number 24 to go to menu 24 system maintenance 376
• Field description 376
• Figure 196 menu 24 system maintenance status 376
• In this menu enter 1 to open system maintenance status 376
• P 793h v2 user s guide 376
• Table 133 menu 24 system maintenance status 376
• The following table describes the fields present in menu 24 system maintenance status these fields are read only and meant for diagnostic purposes the upper right corner of the screen shows the time and date 376
• There are three commands in menu 24 system maintenance status entering 1 drops the wan connection 9 resets the counters and esc takes you back to the previous screen 376
• To get to the system status 376
• Chapter 34 system information diagnosis 377
• Enter 2 to open menu 24 system information and console port speed 377
• Enter 24 to go to menu 24 system maintenance 377
• Field description 377
• Note in a point to 2points connection this field only displays line 1 status 377
• P 793h v2 user s guide 377
• System information and console port speed 377
• Table 133 menu 24 system maintenance status continued 377
• This section describes your system and allows you to choose different console port speeds to get to the system information and console port speed 377
• Chapter 34 system information diagnosis 378
• Field description 378
• Figure 197 menu 24 system information and console port speed 378
• Figure 198 menu 24 system maintenance information 378
• From this menu you have two choices as shown in the next figure 378
• P 793h v2 user s guide 378
• System information 378
• System information gives you information about your system as shown below more specifically it gives you information on your routing protocol ethernet address ip address etc 378
• Table 134 menu 24 system maintenance information 378
• The following table describes the fields in this screen 378
• Console port speed 379
• Figure 199 menu 24 system maintenance change console port speed 379
• Log and trace 379
• Table 134 menu 24 system maintenance information continued 379
• Viewing error log 379
• After the p 793h v2 finishes displaying you will have the option to clear the error log 380
• Chapter 34 system information diagnosis 380
• Examples of typical error and information messages are presented in the following figure 380
• Figure 200 menu 24 system maintenance log and trace 380
• Figure 201 examples of error and information messages 380
• P 793h v2 user s guide 380
• Chapter 34 system information diagnosis 381
• Field description 381
• Figure 202 menu 24 system maintenance unix syslog 381
• P 793h v2 user s guide 381
• Syslog logging 381
• Table 135 menu 24 system maintenance unix syslog 381
• The p 793h v2 uses the syslog facility to log the cdr call detail record and system messages to a syslog server syslog and accounting can be configured in menu 24 system maintenance syslog logging as shown next 381
• You need to configure the syslog parameters described in the following table to activate syslog then choose what you want to log 381
• Your p 793h v2 sends five types of syslog messages some examples not all p 793h v2 specific of these syslog messages with their message formats are shown next 381
• Chapter 34 system information diagnosis 382
• P 793h v2 user s guide 382
• Packet triggered 382
• Chapter 34 system information diagnosis 383
• Filter log 383
• P 793h v2 user s guide 383
• Chapter 34 system information diagnosis 384
• Diagnostic 384
• Firewall log 384
• P 793h v2 user s guide 384
• Ppp log 384
• The diagnostic facility allows you to test the different aspects of your p 793h v2 to determine if it is working properly menu 24 allows you to choose among various 384
• Chapter 34 system information diagnosis 385
• Field description 385
• Figure 203 menu 24 system maintenance diagnostic 385
• Follow the procedure below to get to menu 24 system maintenance diagnostic 385
• From the main menu select option 24 to open menu 24 system maintenance 385
• From this menu select option 4 diagnostic this will open menu 24 system maintenance diagnostic 385
• P 793h v2 user s guide 385
• Table 136 menu 24 system maintenance diagnostic 385
• The following table describes the labels in this screen 385
• Types of diagnostic tests to evaluate your system as shown next not all fields are available on all models 385
• Filename conventions 387
• Firmware and configuration file maintenance 387
• Hapter 387
• Introduction 387
• Backup configuration 388
• Note the p 793h v2 displays different messages explaining different ways to backup restore and upload files in menus 24 24 24 7 and 24 depending on whether you use the console port or telnet 388
• Table 137 filename conventions 388
• Backup configuration 389
• Figure 204 menu 24 backup configuration 389
• Using the ftp command from the command line 389
• Chapter 35 firmware and configuration file maintenance 390
• Command description 390
• Example of ftp commands from the command line 390
• Figure 205 ftp session example 390
• File maintenance over wan 390
• Gui based ftp clients 390
• P 793h v2 user s guide 390
• Table 138 general commands for gui based ftp clients 390
• Tftp ftp and telnet over the wan will not work when 390
• The firewall is active turn the firewall off in menu 21 or create a firewall rule to allow access from the wan 390
• The following table describes some of the commands that you may see in gui based ftp clients 390
• You have disabled telnet service in menu 24 1 390
• Backup configuration using tftp 391
• Tftp command example 391
• Backup via console port 392
• Figure 206 system maintenance backup configuration 392
• Gui based tftp clients 392
• Table 139 general commands for gui based tftp clients 392
• Figure 207 system maintenance starting xmodem download screen 393
• Figure 208 backup configuration example 393
• Figure 209 successful backup confirmation screen 393
• Restore configuration 393
• Do not interrupt the file transfer process as this may permanently damage your p 793h v2 when the restore configuration process is complete the p 793h v2 will automatically restart 394
• Figure 210 menu 24 restore configuration 394
• Restore using ftp 394
• Figure 211 restore using ftp session example 395
• Figure 212 system maintenance restore configuration 395
• Figure 213 system maintenance starting xmodem download screen 395
• Restore using ftp session example 395
• Restore via console port 395
• Do not interrupt the file transfer process as this may permanently damage your p 793h v2 396
• Figure 214 restore configuration example 396
• Figure 215 successful restoration confirmation screen 396
• Firmware file upload 396
• Uploading firmware and configuration files 396
• Chapter 35 firmware and configuration file maintenance 397
• Configuration file upload 397
• Figure 216 menu 24 system maintenance upload system firmware 397
• Figure 217 menu 24 system maintenance upload system configuration file 397
• P 793h v2 user s guide 397
• To upload the firmware and the configuration file follow these examples 397
• When you telnet into the p 793h v2 you will see the following screens for uploading firmware and the configuration file using ftp 397
• You see the following screen when you telnet into menu 24 397
• Figure 218 ftp session example of firmware file upload 398
• Ftp file upload command from the dos prompt example 398
• Ftp session example of firmware file upload 398
• Tftp file upload 399
• Tftp upload command example 399
• Figure 219 menu 24 as seen using the console port 400
• Uploading firmware file via console port 400
• Uploading via console port 400
• 0 uploading configuration file via console port 401
• After the firmware upload process has completed the p 793h v2 will automatically restart 401
• Chapter 35 firmware and configuration file maintenance 401
• Click transfer then send file to display the following screen 401
• Example xmodem firmware upload using hyperterminal 401
• Figure 220 example xmodem upload 401
• Figure 221 menu 24 as seen using the console port 401
• P 793h v2 user s guide 401
• Select 2 from menu 24 system maintenance upload firmware to display menu 24 system maintenance upload system configuration file follow the instructions as shown in the next screen 401
• 1 example xmodem configuration upload using hyperterminal 402
• Figure 222 example xmodem upload 402
• Command interpreter mode 403
• Command syntax 403
• Hapter 403
• Menus 24 to 24 1 403
• Call control support 404
• Command usage 404
• Figure 224 valid commands 404
• Budget management 405
• Chapter 36 menus 24 to 24 1 405
• Field description example 405
• Figure 225 menu 24 system maintenance call control 405
• Figure 226 menu 24 budget management 405
• Menu 24 shows the budget management statistics for outgoing calls enter 1 from menu 24 system maintenance call control to bring up the following menu not all fields are available on all models 405
• P 793h v2 user s guide 405
• Table 140 menu 24 budget management 405
• The total budget is the time limit on the accumulated time for outgoing calls to a remote node when this limit is reached the call will be dropped and further outgoing calls to that remote node will be blocked after each period the total budget is reset the default for the total budget is 0 minutes and the period is 0 hours meaning no budget control you can reset the accumulated connection time in this menu by entering the index of a remote node enter 0 to update the screen the budget and the reset period can be configured in menu 11 for the remote node 405
• To access the call control menu select option 9 in menu 24 to go to menu 24 system maintenance call control as shown in the next table 405
• Chapter 36 menus 24 to 24 1 406
• Field description example 406
• Figure 227 menu 24 system maintenance 406
• P 793h v2 user s guide 406
• Select menu 24 in the main menu to open menu 24 system maintenance as shown next 406
• Table 140 menu 24 budget management continued 406
• The p 793h v2 s real time chip rtc keeps track of the time and date there is also a software mechanism to set the time manually or get the current time and date from an external server when you turn on your p 793h v2 menu 24 0 allows you to update the time and date settings of your p 793h v2 the real time is then displayed in the p 793h v2 error logs and firewall logs 406
• Time and date setting 406
• Chapter 36 menus 24 to 24 1 407
• Enter 10 to go to menu 24 0 system maintenance time and date setting to update the time and date settings of your p 793h v2 as shown in the following screen 407
• Field description 407
• Figure 228 menu 24 0 system maintenance time and date setting 407
• P 793h v2 user s guide 407
• Table 141 menu 24 0 system maintenance time and date setting 407
• The following table describes the fields in this screen 407
• Chapter 36 menus 24 to 24 1 408
• Field description 408
• P 793h v2 user s guide 408
• Table 141 menu 24 0 system maintenance time and date setting continued 408
• A filter in menu 3 lan or in menu 11 wan is applied to block a telnet ftp or web service 409
• Chapter 36 menus 24 to 24 1 409
• Field description 409
• Figure 229 menu 24 1 remote management control 409
• P 793h v2 user s guide 409
• Remote management 409
• Remote management limitations 409
• Remote management over lan or wan will not work when 409
• Table 142 menu 24 1 remote management control 409
• The following table describes the fields in this screen 409
• To disable remote management of a service select disable in the corresponding server access field enter 11 from menu 24 to bring up menu 24 1 remote management control 409
• Hapter 411
• Schedule set overview 411
• Schedule setup 411
• Chapter 37 schedule setup 412
• Field description 412
• Figure 231 menu 26 schedule set setup 412
• P 793h v2 user s guide 412
• Schedule set setup 412
• Table 143 menu 26 schedule setup 412
• The following table describes the labels in this menu 412
• This menu is only applicable if your internet connection uses pppoe encapsulation use this menu to configure the schedule sets in the p 793h v2 to open this menu enter the number of the schedule set in the enter schedule set number to configure field enter the name of the schedule set in the edit name field and press enter in menu 26 412
• Chapter 37 schedule setup 413
• Field description 413
• P 793h v2 user s guide 413
• Table 144 menu 26 schedule set setup 413
• The following table describes the labels in this menu 413
• Hapter 415
• Power hardware connections and leds 415
• Troubleshooting 415
• I cannot see or access the login screen in the web configurator 416
• I forgot the ip address for the p 793h v2 416
• I forgot the password 416
• P 793h v2 access and login 416
• I can see the login screen but i cannot log in to the p 793h v2 417
• I cannot access the internet 418
• I cannot access the internet anymore i had access to the internet with the p 793h v2 but my internet connection is not available anymore 418
• I cannot telnet to the p 793h v2 418
• I cannot use ftp to upload download the configuration file i cannot use ftp to upload new firmware 418
• Internet access 418
• My network cannot be connected how can i check the internet connection status 419
• Network connections 419
• Note for internet access setup or point to point connections the dsl1 and dsl2 leds indicate the status of a single connection act as one led for point to 2point connections the dsl1 and dsl2 leds indicate the status of connection 1 and connection 2 respectively 419
• The internet connection is slow or intermittent 419
• Ppendix 421
• Product specifications 421
• Appendix a product specifications 422
• P 793h v2 user s guide 422
• Table 146 firmware 422
• Appendix a product specifications 423
• P 793h v2 user s guide 423
• Table 146 firmware continued 423
• Appendix a product specifications 424
• P 793h v2 user s guide 424
• Table 146 firmware continued 424
• Appendix a product specifications 425
• Feature description 425
• Note only upload firmware for your specific model 425
• P 793h v2 user s guide 425
• Table 147 firmware features 425
• Appendix a product specifications 426
• Feature description 426
• Figure 232 y cable configuration 426
• P 793h v2 user s guide 426
• Table 147 firmware features 426
• Ppendix 427
• Wall mounting instructions 427
• Ppendix 429
• Setting up your computer s ip address 429
• Figure 234 windows 95 98 me network configuration 430
• Installing components 430
• Windows 95 98 me 430
• Configuring 431
• Figure 235 windows 95 98 me tcp ip properties ip address 431
• Figure 236 windows 95 98 me tcp ip properties dns configuration 432
• Verifying settings 432
• Figure 237 windows xp start menu 433
• Figure 238 windows xp control panel 433
• Windows 2000 nt xp 433
• Figure 239 windows xp control panel network connections properties 434
• Figure 240 windows xp local area connection properties 434
• Figure 241 windows xp internet protocol tcp ip properties 435
• Figure 242 windows xp advanced tcp ip properties 436
• Figure 243 windows xp internet protocol tcp ip properties 437
• Verifying settings 437
• Windows vista 437
• Figure 244 windows vista start menu 438
• Figure 245 windows vista control panel 438
• Figure 246 windows vista network and internet 438
• Figure 247 windows vista network and sharing center 439
• Figure 248 windows vista network and sharing center 439
• Note during this procedure click continue whenever windows displays a screen saying that it needs your permission to continue 439
• Figure 249 windows vista local area connection properties 440
• Figure 250 windows vista internet protocol version 4 tcp ipv4 properties 441
• Figure 251 windows vista advanced tcp ip properties 442
• Figure 252 windows vista internet protocol version 4 tcp ipv4 properties 443
• Verifying settings 443
• Figure 253 macintosh os 8 9 apple menu 444
• Macintosh os 8 9 444
• Figure 254 macintosh os 8 9 tcp ip 445
• Verifying settings 445
• Figure 255 macintosh os x apple menu 446
• Figure 256 macintosh os x network 446
• Macintosh os x 446
• Figure 257 red hat 9 kde network configuration devices 447
• Note make sure you are logged in as the root administrator 447
• Using the k desktop environment kde 447
• Verifying settings 447
• Figure 258 red hat 9 kde ethernet device general 448
• Figure 259 red hat 9 kde network configuration dns 448
• Figure 260 red hat 9 kde network configuration activate 449
• Figure 261 red hat 9 dynamic ip address setting in ifconfig eth0 449
• Using configuration files 449
• Figure 262 red hat 9 static ip address setting in ifconfig eth0 450
• Figure 263 red hat 9 dns settings in resolv conf 450
• Figure 264 red hat 9 restart ethernet card 450
• Appendix c setting up your computer s ip address 451
• Enter ifconfig in a terminal screen to check your tcp ip properties 451
• Figure 265 red hat 9 checking tcp ip properties 451
• P 793h v2 user s guide 451
• Verifying settings 451
• Internet explorer pop up blockers 453
• Pop up windows javascripts and java permissions 453
• Ppendix 453
• Enable pop up blockers with exceptions 454
• Figure 267 internet options privacy 454
• Figure 268 internet options privacy 455
• Figure 269 pop up blocker settings 456
• Javascripts 456
• Figure 270 internet options security 457
• Figure 271 security settings java scripting 458
• Java permissions 458
• Figure 272 security settings java 459
• Java sun 459
• Figure 273 java sun 460
• Mozilla firefox 460
• Options 460
• Figure 275 mozilla firefox content security 461
• Introduction to ip addresses 463
• Ip addresses and subnetting 463
• Ppendix 463
• Structure 463
• Figure 276 network number and host id 464
• Subnet masks 464
• Table 148 subnet masks 464
• An ip address with host ids of all zeros is the ip address of the network 192 68 with a 24 bit subnet mask for example an ip address with host ids of all ones is the broadcast address for that network 192 68 55 with a 24 bit subnet mask for example 465
• Appendix e ip addresses and subnetting 465
• As these two ip addresses cannot be used for individual hosts calculate the maximum number of possible hosts in a network as follows 465
• Binary 465
• By convention subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask followed by a continuous sequence of zeros for a total number of 32 bits 465
• Decimal 1st octet 465
• Nd octet 465
• Network size 465
• P 793h v2 user s guide 465
• Rd octet 465
• Subnet mask host id size maximum number of hosts 465
• Subnet masks are expressed in dotted decimal notation just like ip addresses the following examples show the binary and decimal notation for 8 bit 16 bit 24 bit and 29 bit subnet masks 465
• Subnet masks can be referred to by the size of the network number part the bits with a 1 value for example an 8 bit mask means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes 465
• Table 149 subnet masks 465
• Table 150 maximum host numbers 465
• Th octet 465
• The size of the network number determines the maximum number of possible hosts you can have on your network the larger the number of network number bits the smaller the number of remaining host id bits 465
• 2 or 254 possible hosts 466
• Alternative notation 466
• Appendix e ip addresses and subnetting 466
• For example 192 25 is equivalent to saying 192 with subnet mask 255 55 55 28 466
• In this example the company network address is 192 68 the first three octets of the address 192 68 are the network number and the remaining octet is the host id allowing a maximum of 466
• Last octet binary 466
• Last octet decimal 466
• Notation 466
• P 793h v2 user s guide 466
• Since the mask is always a continuous number of ones beginning from the left followed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number of ones instead of writing the value of each octet this is usually specified by writing a followed by the number of bits in the mask after the address 466
• Subnet mask 466
• Subnetting 466
• Table 151 alternative subnet mask notation 466
• The following table shows some possible subnet masks using both notations 466
• You can use subnetting to divide one network into multiple sub networks in the following example a network administrator creates two sub networks to isolate a group of servers from the rest of the company network for security reasons 466
• Figure 277 subnetting example before subnetting 467
• Figure 278 subnetting example after subnetting 467
• 2 or 126 possible hosts a host id of all zeroes is the subnet s address itself all ones is the subnet s broadcast address 468
• 2 or 62 hosts for each subnet a host id of all zeroes is the subnet itself all ones is the subnet s broadcast address 468
• 68 with mask 255 55 55 28 is subnet a itself and 192 68 27 with mask 255 55 55 28 is its broadcast address therefore the lowest ip address that can be assigned to an actual host for subnet a is 192 68 and the highest is 192 68 26 468
• Appendix e ip addresses and subnetting 468
• Each subnet contains 6 host id bits giving 468
• Example four subnets 468
• In a 25 bit subnet the host id has 7 bits so each sub network has a maximum of 468
• Ip subnet mask network number last octet bit value 468
• P 793h v2 user s guide 468
• Similarly the host id range for subnet b is 192 68 29 to 192 68 54 468
• Table 152 subnet 1 468
• Table 153 subnet 2 468
• The previous example illustrated using a 25 bit subnet mask to divide a 24 bit address into two subnets similarly to divide a 24 bit address into four subnets you need to borrow two host id bits to give four possible combinations 00 01 10 and 11 the subnet mask is 26 bits 11111111 1111111 1111111 11 000000 or 255 55 55 92 468
• Appendix e ip addresses and subnetting 469
• Broadcast address 469
• Example eight subnets 469
• Ip subnet mask network number last octet bit value 469
• P 793h v2 user s guide 469
• Similarly use a 27 bit mask to create eight subnets 000 001 010 011 100 101 110 and 111 469
• Subnet subnet address first address last address 469
• Table 154 subnet 3 469
• Table 155 subnet 4 469
• Table 156 eight subnets 469
• The following table shows ip address last octet values for each subnet 469
• Appendix e ip addresses and subnetting 470
• Configuring ip addresses 470
• No borrowed host bits subnet mask no subnets no hosts per subnet 470
• P 793h v2 user s guide 470
• Subnet planning 470
• Table 157 24 bit network number subnet planning 470
• Table 158 16 bit network number subnet planning 470
• The following table is a summary for subnet planning on a network with a 16 bit network number 470
• The following table is a summary for subnet planning on a network with a 24 bit network number 470
• Where you obtain your network number depends on your particular situation if the isp or your network administrator assigns you a block of registered ip 470
• Private ip addresses 471
• Ppendix 473
• Services 473
• Appendix f services 474
• Name protocol port s description 474
• P 793h v2 user s guide 474
• Table 159 examples of services 474
• Appendix f services 475
• Name protocol port s description 475
• P 793h v2 user s guide 475
• Table 159 examples of services continued 475
• Appendix f services 476
• Name protocol port s description 476
• P 793h v2 user s guide 476
• Table 159 examples of services continued 476
• Certifications 477
• Copyright 477
• Legal information 477
• Ppendix 477
• Fcc radiation exposure statement 478
• 注意 478
• Notices 479
• Viewing certifications 479
• Zyxel limited warranty 479
• Registration 480
• Numerics 481
• P 793h v2 user s guide 481
• P 793h v2 user s guide 482
• P 793h v2 user s guide 483
• P 793h v2 user s guide 484
• P 793h v2 user s guide 485
• P 793h v2 user s guide 486
• P 793h v2 user s guide 487
• P 793h v2 user s guide 488