Zyxel P-792H v2 [12/472] Part ii technical reference 57

Содержание

• Default login details 1
• Firmware version 3 0 edition 1 04 2010 1
• G shdsl bis broadband gateway 1
• P 792h v2 1
• Www zyxel com 1
• About this user s guide 3
• Documentation feedback 3
• Intended audience 3
• Related documentation 3
• Tips for reading user s guides on screen 3
• Customer support 4
• Need more help 4
• Disclaimer 5
• Document conventions 6
• Note notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 6
• Syntax conventions 6
• Warnings and notes 6
• Warnings tell you about things that could harm you or your device 6
• Document conventions 7
• Figures in this user s guide may use the following generic icons the p 792h v2 icon is not an exact representation of your device 7
• Icons used in figures 7
• P 792h v2 user s guide 7
• P 792h v2 user s guide 8
• Safety warnings 8
• Contents overview 9
• Technical reference 7 9
• User s guide 3 9
• About this user s guide 11
• Chapter 1 getting to know your p 792h v2 5 11
• Chapter 2 introducing the web configurator 9 11
• Chapter 3 status screens 7 11
• Contents overview 11
• Document conventions 11
• Part i user s guide 23 11
• Safety warnings 11
• Table of contents 11
• Table of contents 1 11
• Chapter 4 internet setup wizard 3 12
• Chapter 5 tutorial 3 12
• Chapter 6 wan setup 9 12
• Part ii technical reference 57 12
• Chapter 7 lan setup 5 13
• Chapter 8 network address translation nat 01 13
• Chapter 9 firewalls 117 13
• Chapter 10 content filtering 39 14
• Chapter 11 certificates 45 14
• Chapter 12 vpn 55 14
• Chapter 13 static route 87 15
• Chapter 14 802 q 1p 91 15
• Chapter 15 quality of service qos 01 15
• Chapter 16 dynamic dns setup 19 16
• Chapter 17 remote management 23 16
• Chapter 18 universal plug and play upnp 35 16
• Chapter 19 system settings 47 17
• Chapter 20 logs 53 17
• Chapter 21 tools 67 17
• Chapter 22 diagnostic 81 17
• Chapter 23 introducing the smt 85 17
• Chapter 24 general setup 91 18
• Chapter 25 wan setup 95 18
• Chapter 26 lan setup 99 18
• Chapter 27 internet access setup 03 18
• Chapter 28 remote node setup 07 18
• Chapter 29 static route setup 17 18
• Chapter 30 nat setup 21 18
• Chapter 31 firewall setup 37 19
• Chapter 32 filter configuration 39 19
• Chapter 33 system password 55 19
• Chapter 34 system information diagnosis 57 19
• Chapter 35 firmware and configuration file maintenance 69 20
• Chapter 36 menus 24 to 24 1 85 20
• User s guide 23
• Getting to know your p 792h v2 25
• Hapter 25
• High speed internet access with g shdsl 25
• Overview 25
• Figure 1 high speed internet access with your p 792h v2 26
• Figure 2 point to point connections with your p 792h v2 26
• High speed point to point connections 26
• Ways to manage the p 792h v2 26
• Figure 3 leds 27
• Good habits for managing the p 792h v2 27
• Chapter 1 getting to know your p 792h v2 28
• If you forget your password or cannot access the web configurator you will need to use the reset button at the back of the device to reload the factory default configuration file this means that you will lose all configurations that you had previously and the password will be reset to 1234 28
• Led color status description 28
• Make sure the power led is on not blinking 28
• P 792h v2 user s guide 28
• Table 1 leds 28
• The following table describes the leds 28
• The reset button 28
• To set the device back to the factory default settings press the reset button for ten seconds or until the power led begins to blink and then release it when the power led begins to blink the defaults have been restored and the device restarts 28
• Using the reset button 28
• Accessing the web configurator 29
• Hapter 29
• Introducing the web configurator 29
• Web configurator overview 29
• Figure 4 login screen 30
• Figure 5 change password at login 30
• Figure 6 select a mode 31
• Figure 7 main screen 31
• Note for security reasons the p 792h v2 automatically logs you out if you do not use the web configurator for five minutes default if this happens log in again 31
• Web configurator main screen 31
• A title bar 32
• As illustrated above the main screen is divided into these parts 32
• B navigation panel 32
• C main window 32
• Chapter 2 introducing the web configurator 32
• D status bar 32
• Icon description 32
• Link tab function 32
• Navigation panel 32
• P 792h v2 user s guide 32
• Table 2 web configurator icons in the title bar 32
• Table 3 navigation panel summary 32
• The icons provide the following functions 32
• The title bar provides some icons in the upper right corner 32
• Title bar 32
• Use the menu items on the navigation panel to open screens to configure p 792h v2 features the following tables describe each menu item 32
• Chapter 2 introducing the web configurator 33
• Link tab function 33
• P 792h v2 user s guide 33
• Table 3 navigation panel summary 33
• Chapter 2 introducing the web configurator 34
• Link tab function 34
• P 792h v2 user s guide 34
• Table 3 navigation panel summary 34
• Main window 35
• Status bar 35
• Table 3 navigation panel summary 35
• Hapter 37
• Overview 37
• Status screens 37
• The status screen 37
• Chapter 3 status screens 38
• Each field is described in the following table 38
• Label description 38
• P 792h v2 user s guide 38
• Table 4 status screen 38
• Chapter 3 status screens 39
• Label description 39
• P 792h v2 user s guide 39
• Table 4 status screen 39
• Any ip table 40
• Client list 40
• Figure 9 any ip table 40
• Status vpn status 40
• Table 5 any ip table 40
• Chapter 3 status screens 41
• Figure 10 packet statistics 41
• Label description 41
• P 792h v2 user s guide 41
• Packet statistics 41
• Packet statistics to access this screen 41
• Table 6 packet statistics 41
• The following table describes the fields in this screen 41
• Chapter 3 status screens 42
• Label description 42
• P 792h v2 user s guide 42
• Table 6 packet statistics continued 42
• Hapter 43
• Internet access wizard setup 43
• Internet setup wizard 43
• Overview 43
• Figure 12 wizard welcome 44
• Figure 13 auto detection no dsl connection 44
• Figure 14 auto detection pppoe 45
• Figure 15 auto detection failed 45
• Chapter 4 internet setup wizard 46
• Figure 16 internet access wizard setup isp parameters 46
• If the p 792h v2 fails to detect your dsl connection type but the physical line is connected enter your internet access information in the wizard screen exactly as your service provider gave it to you leave the defaults in any fields for which you were not given information 46
• Label description 46
• Manual configuration 46
• P 792h v2 user s guide 46
• Table 7 internet access wizard setup isp parameters 46
• The following table describes the fields in this screen 46
• Chapter 4 internet setup wizard 47
• Figure 17 internet connection with pppoe 47
• Label description 47
• P 792h v2 user s guide 47
• Table 7 internet access wizard setup isp parameters 47
• The next wizard screen varies depending on what mode and encapsulation type you use all screens shown are with routing mode configure the fields and click next to continue 47
• Chapter 4 internet setup wizard 48
• Figure 18 internet connection with rfc 1483 48
• Label description 48
• P 792h v2 user s guide 48
• Table 8 internet connection with pppoe 48
• The following table describes the fields in this screen 48
• Chapter 4 internet setup wizard 49
• Figure 19 internet connection with enet encap 49
• Label description 49
• P 792h v2 user s guide 49
• Table 9 internet connection with rfc 1483 49
• The following table describes the fields in this screen 49
• Chapter 4 internet setup wizard 50
• Figure 20 internet connection with pppoa 50
• Label description 50
• P 792h v2 user s guide 50
• Table 10 internet connection with enet encap 50
• The following table describes the fields in this screen 50
• Figure 21 internet access setup complete 51
• Table 11 internet connection with pppoa 51
• Configuring point to point connection 53
• Hapter 53
• Overview 53
• Tutorial 53
• Internet access setup 54
• Set up the server 54
• Connect the p 792h v2s 55
• Set up the client 55
• Technical reference 57
• Hapter 59
• Overview 59
• Wan setup 59
• What you can do in the wan screens 59
• Encapsulation method 60
• Multicast 60
• Wan ip address 60
• What you need to know about wan 60
• Before you begin 61
• Finding out more 61
• Internet access setup 62
• The internet access setup screen 62
• Chapter 6 wan setup 63
• Internet access setup 63
• Label description 63
• P 792h v2 user s guide 63
• The following table describes the labels in this screen 63
• Chapter 6 wan setup 64
• Internet access setup continued 64
• Label description 64
• P 792h v2 user s guide 64
• Chapter 6 wan setup 65
• Internet access setup continued 65
• Label description 65
• P 792h v2 user s guide 65
• Advanced internet access setup 66
• Chapter 6 wan setup 66
• Internet access setup advanced setup 66
• Label description 66
• P 792h v2 user s guide 66
• The following table describes the labels in this screen 66
• Use this screen to edit your p 792h v2 s advanced wan settings click the advanced setup button in the internet access setup screen the screen appears as shown 66
• Chapter 6 wan setup 67
• Internet access setup advanced setup continued 67
• Label description 67
• P 792h v2 user s guide 67
• Chapter 6 wan setup 68
• Internet access setup advanced setup continued 68
• Internet access setup screen to set up internet access you are configuring the first wan connection 68
• Label description 68
• More connections 68
• P 792h v2 user s guide 68
• The more connections screen 68
• Chapter 6 wan setup 69
• Label description 69
• More connections 69
• P 792h v2 user s guide 69
• The following table describes the labels in this screen 69
• Chapter 6 wan setup 70
• Label description 70
• More connections edit 70
• P 792h v2 user s guide 70
• The following table describes the labels in this screen 70
• Use this screen to configure a connection click the edit icon in the more connections screen to display the following screen 70
• Chapter 6 wan setup 71
• Label description 71
• More connections edit continued 71
• P 792h v2 user s guide 71
• Chapter 6 wan setup 72
• Label description 72
• More connections edit continued 72
• P 792h v2 user s guide 72
• Chapter 6 wan setup 73
• Configuring more connections advanced setup 73
• Label description 73
• More connections edit advanced setup 73
• P 792h v2 user s guide 73
• The following table describes the labels in this screen 73
• Use this screen to edit your p 792h v2 s advanced wan settings click the advanced setup button in the more connections edit screen the screen appears as shown 73
• Chapter 6 wan setup 74
• Label description 74
• More connections edit advanced setup continued 74
• P 792h v2 user s guide 74
• Chapter 6 wan setup 75
• Label description 75
• P 792h v2 user s guide 75
• The following table describes the labels in this screen 75
• The wan backup setup screen 75
• Wan backup 75
• Wan backup setup this screen is not available if you set the wan type to ethernet in the internet access setup screen 75
• Be sure to use the encapsulation method required by your isp the p 792h v2 supports the following methods 76
• Chapter 6 wan setup 76
• Encapsulation 76
• Label description 76
• Note if you activate traffic redirect you must configure at least one check wan ip address 76
• P 792h v2 user s guide 76
• This section provides some technical background information about the topics covered in this chapter 76
• Wan backup 76
• Wan technical reference 76
• Enet encap 77
• Ppp over ethernet 77
• Rfc 1483 77
• Ip address assignment 78
• Ip assignment with pppoa or pppoe encapsulation 78
• Llc based multiplexing 78
• Multiplexing 78
• Vc based multiplexing 78
• Vpi and vci 78
• Ip assignment with enet encap encapsulation 79
• Ip assignment with rfc 1483 encapsulation 79
• Metric 79
• Nailed up connection ppp 79
• Figure 30 traffic redirect example 80
• Traffic redirect 80
• Figure 31 traffic redirect lan setup 81
• Traffic shaping 81
• Atm traffic classes 82
• Constant bit rate cbr 82
• Figure 32 example of traffic shaping 82
• Variable bit rate vbr 82
• Unspecified bit rate ubr 83
• Hapter 85
• Lan setup 85
• Overview 85
• What you can do in the lan screens 85
• Ip address 86
• Multicast 86
• Subnet mask 86
• What you need to know about lan 86
• Before you begin 87
• Finding out more 87
• The ip screen 87
• Chapter 7 lan setup 88
• Ip advanced setup 88
• Label description 88
• P 792h v2 user s guide 88
• The advanced lan ip setup screen 88
• The following table describes the fields in this screen 88
• Use this screen to edit your p 792h v2 s rip multicast any ip and windows networking settings click the advanced setup button in the lan ip screen the screen appears as shown 88
• Chapter 7 lan setup 89
• Ip advanced setup 89
• Label description 89
• Note you must enable nat sua in the nat screen to use the any ip feature on the p 792h v2 89
• P 792h v2 user s guide 89
• The following table describes the labels in this screen 89
• Chapter 7 lan setup 90
• Dhcp setup 90
• Dhcp setup to open this screen 90
• Ip advanced setup 90
• Label description 90
• P 792h v2 user s guide 90
• The dhcp setup screen 90
• Chapter 7 lan setup 91
• Dhcp setup 91
• Label description 91
• P 792h v2 user s guide 91
• The following table describes the labels in this screen 91
• Chapter 7 lan setup 92
• Client list 92
• Client list to open the following screen 92
• Every ethernet device has a unique mac media access control address the mac address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 a0 c5 00 00 02 92
• Label description 92
• P 792h v2 user s guide 92
• The client list screen 92
• The following table describes the labels in this screen 92
• This table allows you to assign ip addresses on the lan to specific individual computers based on their mac addresses 92
• Chapter 7 lan setup 93
• Client list 93
• Ethernet interface 93
• Figure 37 physical network partitioned logical networks 93
• Ip alias allows you to partition a physical network into different logical networks over the same ethernet interface the p 792h v2 supports three logical lan interfaces via its single physical ethernet interface with the p 792h v2 itself as the gateway for each lan network 93
• Label description 93
• Note make sure that the subnets of the logical networks do not overlap 93
• P 792h v2 user s guide 93
• The following figure shows a lan divided into subnets a b and c 93
• The ip alias screen 93
• When you use ip alias you can also configure firewall rules to control access between the lan s logical networks subnets 93
• Chapter 7 lan setup 94
• Configuring the lan ip alias screen 94
• Ip alias 94
• Ip alias to open the following screen 94
• Label description 94
• P 792h v2 user s guide 94
• The following table describes the labels in this screen 94
• Lan technical reference 95
• Lans wans and the zyxel device 95
• Wan lan 95
• Dhcp setup 96
• Dns server addresses 96
• Ip pool setup 96
• Ip address and subnet mask 97
• Lan tcp ip 97
• Private ip addresses 97
• Multicast 98
• Note regardless of your particular situation do not create an arbitrary ip address always follow the guidelines above for more information on address assignment please refer to rfc 1597 address allocation for private internets and rfc 1466 guidelines for management of ip address space 98
• Rip setup 98
• Hapter 101
• Network address translation nat 101
• Overview 101
• What you can do in the nat screens 101
• What you need to know about nat 101
• Finding out more 102
• Port forwarding 102
• Sua single user account versus nat 102
• Chapter 8 network address translation nat 103
• General 103
• Label description 103
• Nat to open the following screen 103
• Note you must create a firewall rule in addition to setting up sua nat to allow traffic from the wan to be forwarded through the p 792h v2 103
• P 792h v2 user s guide 103
• The following table describes the labels in this screen 103
• The nat general setup screen 103
• Default server ip address 104
• General screen 104
• Note if you do not assign a default server ip address the p 792h v2 discards all packets received for ports that are not specified here or in the remote management setup 104
• Note many residential broadband isp accounts do not allow you to run any server processes such as a web or ftp server from your location your isp may periodically check for servers and may suspend your account if it discovers any active services at your location if you are unsure refer to your isp 104
• The port forwarding screen 104
• Configuring servers behind port forwarding example 105
• Configuring the port forwarding screen 105
• Figure 41 multiple servers behind nat example 105
• Port forwarding 105
• Wan lan 105
• Chapter 8 network address translation nat 106
• Label description 106
• P 792h v2 user s guide 106
• Port forwarding 106
• Port forwarding edit 106
• The following table describes the fields in this screen 106
• The port forwarding rule edit screen 106
• Use this screen to edit a port forwarding rule click the rule s edit icon in the port forwarding screen to display the screen shown next 106
• Chapter 8 network address translation nat 107
• General screen 107
• Label description 107
• Ordering your rules is important because the p 792h v2 applies the rules in the order that you specify when a rule matches the current packet the p 792h v2 takes the corresponding action and the remaining rules are ignored if there are any empty rules before your new configured rule your configured rule will be pushed up by that number of empty rules for example if you have already configured rules 1 to 6 in your current set and now you configure rule number 9 in the set summary screen the new rule will be rule 7 not 9 now if you delete rule 4 rules 5 to 7 will be pushed up by 1 rule so old rules 5 6 and 7 become new rules 4 5 and 6 107
• P 792h v2 user s guide 107
• Port forwarding edit 107
• The address mapping screen 107
• The following table describes the fields in this screen 107
• Address mapping 108
• Address mapping to open the following screen 108
• Chapter 8 network address translation nat 108
• Label description 108
• P 792h v2 user s guide 108
• The following table describes the fields in this screen 108
• Address mapping continued 109
• Address mapping edit 109
• Chapter 8 network address translation nat 109
• Label description 109
• P 792h v2 user s guide 109
• The address mapping rule edit screen 109
• Use this screen to edit an address mapping rule click the rule s edit icon in the address mapping screen to display the screen shown next 109
• Address mapping edit 110
• Chapter 8 network address translation nat 110
• Label description 110
• P 792h v2 user s guide 110
• The following table describes the fields in this screen 110
• Nat definitions 111
• Nat technical reference 111
• The alg screen 111
• Table 29 nat definitions 112
• What nat does 112
• Figure 47 how nat works 113
• How nat works 113
• Wan lan 113
• Figure 48 nat application with ip alias 114
• Nat application 114
• Nat mapping types 114
• Chapter 8 network address translation nat 115
• P 792h v2 user s guide 115
• Port numbers do not change for one to one and many to many no overload nat mapping types 115
• Table 30 nat mapping types 115
• The following table summarizes these types 115
• Type ip mapping 115
• Firewalls 117
• Hapter 117
• Overview 117
• What you can do in the firewall screens 117
• Anti probing 118
• Dos thresholds 118
• Finding out more 118
• What you need to know about firewall 118
• Firewall rule setup example 119
• General 122
• The firewall general screen 122
• Chapter 9 firewalls 123
• General 123
• Label description 123
• Note allowing asymmetrical routes may let traffic from the wan go directly to the lan without passing through the p 792h v2 a better solution is to use ip alias to put the p 792h v2 and the backup gateway on separate subnets see section 9 on page 136 for an example 123
• P 792h v2 user s guide 123
• The following table describes the labels in this screen 123
• Chapter 9 firewalls 124
• Label description 124
• Note the ordering of your rules is very important as rules are applied in turn 124
• P 792h v2 user s guide 124
• Refer to section 9 on page 133 for more information 124
• Rules to bring up the following screen this screen displays a list of the configured firewall rules note the order in which the rules are listed 124
• The firewall rule screen 124
• The following table describes the labels in this screen 124
• Chapter 9 firewalls 125
• Label description 125
• P 792h v2 user s guide 125
• Rules continued 125
• Configuring firewall rules 126
• Rules edit 126
• Chapter 9 firewalls 127
• Label description 127
• P 792h v2 user s guide 127
• Rules edit continued 127
• Chapter 9 firewalls 128
• Configure customized services and port numbers not predefined by the p 792h v2 for a comprehensive list of port numbers and services visit the iana internet assigned number authority website see appendix f on page 455 for some examples click the edit customized services link while editing a firewall rule to configure a custom service port this displays the following screen 128
• Customized services 128
• Label description 128
• P 792h v2 user s guide 128
• Rules edit edit customized services 128
• The following table describes the labels in this screen 128
• Chapter 9 firewalls 129
• Configuring a customized service 129
• For dos attacks the p 792h v2 uses thresholds to determine when to start dropping sessions that do not become fully established half open sessions these thresholds apply globally to all sessions 129
• For tcp half open means that the session has not reached the established state the tcp three way handshake has not yet been completed under normal 129
• Label description 129
• P 792h v2 user s guide 129
• Rules edit edit customized services config 129
• The firewall threshold screen 129
• The following table describes the labels in this screen 129
• Use this screen to add a customized rule or edit an existing rule click a rule number in the firewall customized services screen to display the following screen 129
• Figure 55 three way handshake 130
• Threshold values 130
• Configuring firewall thresholds 131
• Threshold 131
• Chapter 9 firewalls 132
• Label description 132
• P 792h v2 user s guide 132
• Threshold continued 132
• Firewall rules overview 133
• Firewall technical reference 133
• Note you also need to configure nat port forwarding or full featured nat address mapping rules to allow computers on the wan to access devices on the lan 133
• Note you can also configure the remote management settings to allow only a specific computer to manage the p 792h v2 133
• Guidelines for enhancing security with your firewall 134
• Note you also need to configure the remote management settings to allow a wan computer to manage the p 792h v2 134
• Figure 57 ideal firewall setup 135
• Note incorrectly configuring the firewall may block valid access or introduce security risks to the p 792h v2 and your protected network use caution when creating or deleting firewall rules and test your rules after you configure them 135
• Security considerations 135
• Triangle route 135
• Wan lan 135
• Figure 58 triangle route problem 136
• Solving the triangle route problem 136
• The triangle route problem 136
• Wan lan 136
• Figure 59 ip alias 137
• Before you begin 139
• Content filtering 139
• Hapter 139
• Overview 139
• What you can do in the content filter screens 139
• What you need to know about content filtering 139
• Content filtering example 140
• Chapter 10 content filtering 142
• Content filter the screen appears as shown 142
• Keyword 142
• Label description 142
• P 792h v2 user s guide 142
• The following table describes the labels in this screen 142
• The keyword screen 142
• Use this screen to block sites containing certain keywords in the url for example if you enable the keyword bad the p 792h v2 blocks all sites containing this keyword including the url http www example com bad html 142
• Chapter 10 content filtering 143
• Content filter schedule 143
• Keyword continued 143
• Label description 143
• P 792h v2 user s guide 143
• Schedule 143
• Schedule the screen appears as shown 143
• The following table describes the labels in this screen 143
• The schedule screen 143
• Chapter 10 content filtering 144
• Content filter schedule continued 144
• Content filter trusted 144
• Label description 144
• P 792h v2 user s guide 144
• The following table describes the labels in this screen 144
• The trusted screen 144
• Trusted the screen appears as shown 144
• Certificates 145
• Hapter 145
• Overview 145
• What you need to know about certificates 145
• Factory default certificate 146
• Figure 64 remote host certificates 146
• Verifying a certificate 146
• Figure 65 certificate details 147
• Finding out more 147
• The trusted cas screen 147
• Chapter 11 certificates 148
• Figure 66 trusted cas 148
• Label description 148
• P 792h v2 user s guide 148
• Table 40 trusted cas 148
• The following table describes the labels in this screen 148
• Trusted cas to open the following screen 148
• Figure 67 trusted ca import 149
• Note you must remove any spaces from the certificate s filename before you can import the certificate 149
• Table 41 trusted ca import 149
• Trusted ca import 149
• Figure 68 trusted ca details 150
• Table 42 trusted ca details 150
• Trusted ca details 150
• Chapter 11 certificates 151
• Label description 151
• P 792h v2 user s guide 151
• Table 42 trusted ca details continued 151
• Advantages of certificates 152
• Certificates overview 152
• Certificates technical reference 152
• Private public certificates 152
• Hapter 155
• Overview 155
• What you can do in the vpn screens 155
• Figure 70 vpn ike sa and ipsec sa 156
• Ike sa 156
• Internet 156
• Ipsec sa 156
• My ip address 156
• Secure gateway address 156
• What you need to know about ipsec vpn 156
• Before you begin 157
• Dynamic secure gateway address 157
• Figure 71 ipsec summary fields 157
• Finding out more 157
• Local network 157
• Remote network 157
• Vpn setup screen 157
• Vpn tunnel 157
• Chapter 12 vpn 158
• Label description 158
• P 792h v2 user s guide 158
• The following table describes the fields in this screen 158
• Vpn to open the vpn setup screen this is a menu of your ipsec rules tunnels the ipsec summary menu is read only edit a vpn by selecting an index number and then configuring its associated submenus 158
• Chapter 12 vpn 159
• Label description 159
• P 792h v2 user s guide 159
• Setup continued 159
• Chapter 12 vpn 160
• Click an edit icon in the vpn setup screen to edit vpn policies 160
• Label description 160
• P 792h v2 user s guide 160
• The following table describes the fields in this screen 160
• The vpn edit screen 160
• Chapter 12 vpn 161
• Label description 161
• P 792h v2 user s guide 161
• Chapter 12 vpn 162
• Label description 162
• P 792h v2 user s guide 162
• Chapter 12 vpn 163
• Label description 163
• P 792h v2 user s guide 163
• Chapter 12 vpn 164
• Label description 164
• P 792h v2 user s guide 164
• Advanced setup 165
• Chapter 12 vpn 165
• Click advanced setup in the vpn setup edit screen to open this screen 165
• Configuring advanced ike settings 165
• Label description 165
• P 792h v2 user s guide 165
• The following table describes the fields in this screen 165
• Advanced setup continued 166
• Chapter 12 vpn 166
• Label description 166
• P 792h v2 user s guide 166
• Advanced setup continued 167
• Chapter 12 vpn 167
• Label description 167
• Manual key management is useful if you have problems with ike key management 167
• Manual key setup 167
• P 792h v2 user s guide 167
• Configuring manual key 168
• Manual key 168
• Security parameter index spi 168
• Chapter 12 vpn 169
• Label description 169
• Manual key 169
• P 792h v2 user s guide 169
• The following table describes the fields in this screen 169
• Chapter 12 vpn 170
• Label description 170
• Manual key continued 170
• P 792h v2 user s guide 170
• A security association sa is the group of security settings related to a specific vpn tunnel this screen displays active vpn connections use refresh to display active vpn connections this screen is read only the following table describes the fields in this tab 171
• Chapter 12 vpn 171
• Label description 171
• Manual key continued 171
• Monitor to open the screen as shown use this screen to display and manage active vpn connections 171
• P 792h v2 user s guide 171
• Viewing sa monitor 171
• When there is outbound traffic but no inbound traffic the sa times out automatically after two minutes a tunnel with no outbound or inbound traffic is idle and does not timeout until the sa lifetime period expires see section 171
• Chapter 12 vpn 172
• Configuring vpn global setting 172
• Global setting 172
• Label description 172
• Monitor 172
• On page 178 on keep alive to have the p 792h v2 renegotiate an ipsec sa when the sa lifetime expires even if there is no traffic 172
• P 792h v2 user s guide 172
• The following table describes the fields in this screen 172
• Vpn global setting the screen appears as shown 172
• Chapter 12 vpn 173
• Figure 78 ipsec architecture 173
• Global setting 173
• Ipsec architecture 173
• Ipsec vpn technical reference 173
• Label description 173
• P 792h v2 user s guide 173
• The following table describes the fields in this screen 173
• The overall ipsec architecture is shown as follows 173
• This section provides some technical background information about the topics covered in this chapter 173
• Ipsec algorithms 174
• Ipsec and nat 174
• Key management 174
• Figure 79 nat router between ipsec routers 175
• Internet 175
• Table 49 vpn and nat 175
• Vpn nat and nat traversal 175
• Encapsulation 176
• Figure 80 transport and tunnel mode ipsec encapsulation 176
• Table 50 vpn and nat 176
• Transport mode 176
• Figure 81 two phases to set up the ipsec sa 177
• Ike phases 177
• Tunnel mode 177
• Keep alive 178
• Negotiation mode 178
• Figure 82 vpn host using intranet dns server example 179
• Remote dns server 179
• Id type and content 180
• Table 51 local id type and content fields 180
• Chapter 12 vpn 181
• Id type and content examples 181
• P 792h v2 a p 792h v2 b 181
• P 792h v2 user s guide 181
• Peer id type content 181
• Table 52 peer id type and content fields 181
• Table 53 matching id type and content configuration example 181
• Table 54 mismatching id type and content configuration example 181
• The two p 792h v2s in this example can complete negotiation and establish a vpn tunnel 181
• The two p 792h v2s in this example cannot complete their negotiation because p 792h v2 b s local id type is ip but p 792h v2 a s peer id type is set to e mail an id mismatched message displays in the ipsec log 181
• Two ipsec routers must have matching id type and content configuration in order to set up a vpn tunnel 181
• 0 pre shared key 182
• 1 diffie hellman dh key groups 182
• 2 telecommuter vpn ipsec examples 182
• 2 telecommuters sharing one vpn rule example 182
• Figure 83 telecommuters sharing one vpn rule example 182
• Internet 182
• 2 telecommuters using unique vpn rules example 183
• Table 55 telecommuters sharing one vpn rule example 183
• Chapter 12 vpn 184
• Figure 84 telecommuters using unique vpn rules example 184
• Internet 184
• P 792h v2 user s guide 184
• Table 56 telecommuters using unique vpn rules example 184
• Telecommuters headquarters 184
• The p 792h v2 at headquarters can also initiate vpn connections to the telecommuters since it can find the telecommuters by resolving their domain names 184
• Chapter 12 vpn 185
• P 792h v2 user s guide 185
• Table 56 telecommuters using unique vpn rules example continued 185
• Telecommuters headquarters 185
• Hapter 187
• Overview 187
• Static route 187
• Chapter 13 static route 188
• Label description 188
• P 792h v2 user s guide 188
• Static route 188
• Static route to open the static route screen 188
• The following table describes the labels in this screen 188
• The static route screen 188
• Chapter 13 static route 189
• Label description 189
• P 792h v2 user s guide 189
• Static route edit 189
• The following table describes the labels in this screen 189
• Use this screen to configure the required information for a static route select a static route index number and click edit the screen shown next appears 189
• Hapter 191
• Overview 191
• What you can do in the 802 q 1p screens 191
• What you need to know about 802 q 1p 191
• Forwarding tagged and untagged frames 192
• Ieee 802 q tagged vlan 192
• 802 q 1p example 193
• P 792h v2 193
• Chapter 14 802 q 1p 197
• Group setting 197
• Label description 197
• P 792h v2 user s guide 197
• Q 1p to display the following screen 197
• The 802 q 1p group setting screen 197
• The following table describes the labels in this screen 197
• Chapter 14 802 q 1p 198
• Editing 802 q 1p group setting 198
• Group setting continued 198
• In the 802 q 1p screen click the edit button from the modify filed to display the following screen 198
• Label description 198
• P 792h v2 user s guide 198
• The following table describes the labels in this screen 198
• Use this screen to configure the settings for each vlan group 198
• Chapter 14 802 q 1p 199
• Edit continued 199
• Label description 199
• P 792h v2 user s guide 199
• Port setting 199
• Port setting to display the following screen 199
• The 802 q 1p port setting screen 199
• Chapter 14 802 q 1p 200
• Label description 200
• P 792h v2 user s guide 200
• Port setting 200
• The following table describes the labels in this screen 200
• Hapter 201
• Overview 201
• Qos overview 201
• Quality of service qos 201
• Qos versus cos 202
• Tagging and marking 202
• What you can do in the qos screens 202
• What you need to know about qos 202
• Finding out more 203
• Qos class setup example 203
• Figure 92 qos example 204
• Figure 93 qos class example voip 1 204
• Mbps dsl 204
• Figure 96 qos class example boss 2 206
• Chapter 15 quality of service qos 207
• General 207
• Label description 207
• P 792h v2 user s guide 207
• Qos to open the screen as shown next 207
• The following table describes the labels in this screen 207
• The qos general screen 207
• Use this screen to enable or disable qos and have the p 792h v2 automatically assign priority to traffic according to the ieee 802 p priority level ip precedence and or packet length 207
• Chapter 15 quality of service qos 208
• Class setup 208
• Class setup to open the following screen 208
• General 208
• Label description 208
• P 792h v2 user s guide 208
• The class setup screen 208
• The following table describes the labels in this screen 208
• Use this screen to add edit or delete classifiers a classifier groups traffic into data flows according to specific criteria such as the source address destination address source port number destination port number or incoming interface for example you can configure a classifier to select traffic from the same protocol port such as telnet to form a flow 208
• Chapter 15 quality of service qos 209
• Class setup continued 209
• Label description 209
• P 792h v2 user s guide 209
• Class setup edit 210
• The class configuration screen 210
• Chapter 15 quality of service qos 211
• Class setup edit 211
• Label description 211
• P 792h v2 user s guide 211
• See appendix f on page 455 for a list of commonly used services the following table describes the labels in this screen 211
• Chapter 15 quality of service qos 212
• Class setup edit continued 212
• Label description 212
• P 792h v2 user s guide 212
• Chapter 15 quality of service qos 213
• Class setup edit continued 213
• Label description 213
• P 792h v2 user s guide 213
• Chapter 15 quality of service qos 214
• Label description 214
• Monitor 214
• Monitor the screen appears as shown 214
• P 792h v2 user s guide 214
• The following table describes the labels in this screen 214
• The qos monitor screen 214
• Chapter 15 quality of service qos 215
• Ieee 802 p specifies the user priority field and defines up to eight separate traffic types the following table describes the traffic types defined in the ieee 802 d standard which incorporates the 802 p 215
• Ieee 802 q tag 215
• Ip precedence 215
• P 792h v2 user s guide 215
• Priority level traffic type 215
• Qos technical reference 215
• Similar to ieee 802 p prioritization at layer 2 you can use ip precedence to prioritize packets in a layer 3 network ip precedence uses three bits of the eight bit tos type of service field in the ip header there are eight classes of services ranging from zero to seven in ip precedence zero is the lowest priority level and seven is the highest 215
• Table 66 ieee 802 p priority level and traffic type 215
• The ieee 802 q standard defines an explicit vlan tag in the mac header to identify the vlan membership of a frame across bridges a vlan tag includes the 12 bit vlan id and 3 bit user priority the vlan id associates a frame with a specific vlan and provides the information that devices need to process the frame across the network 215
• This section provides some technical background information about the topics covered in this chapter 215
• Automatic priority queue assignment 216
• Diffserv 216
• Dscp and per hop behavior 216
• Chapter 15 quality of service qos 217
• Ieee 802 p user priority ethernet priority 217
• Layer 2 layer 3 217
• P 792h v2 user s guide 217
• Priority queue 217
• Table 67 internal layer2 and layer3 qos mapping 217
• Through faster while traffic in lower index queues is dropped if the network is congested 217
• Tos ip precedence dscp ip packet length byte 217
• Dynamic dns setup 219
• Hapter 219
• Overview 219
• What you need to know about ddns 219
• Chapter 16 dynamic dns setup 220
• Dynamic dns 220
• Dynamic dns the screen appears as shown 220
• Label description 220
• P 792h v2 user s guide 220
• The dynamic dns screen 220
• The following table describes the fields in this screen 220
• Chapter 16 dynamic dns setup 221
• Dynamic dns continued 221
• Label description 221
• Note the ddns server may not be able to detect the proper ip address if there is an http proxy server between the p 792h v2 and the ddns server 221
• P 792h v2 user s guide 221
• Hapter 223
• Overview 223
• Remote management 223
• Remote management limitations 224
• What you can do in the remote management screens 224
• What you need to know about remote management 224
• Configuring the www screen 225
• Note if you disable the www service in this screen then the p 792h v2 blocks all http connection attempts 225
• Remote management and nat 225
• System timeout 225
• The www screen 225
• Chapter 17 remote management 226
• Label description 226
• P 792h v2 user s guide 226
• Telnet 226
• Telnet tab to display the screen as shown 226
• The following table describes the labels in this screen 226
• The telnet screen 226
• You can use telnet to access the p 792h v2 s command line interface specify which interfaces allow telnet access and from which ip address the access can come 226
• Chapter 17 remote management 227
• Ftp the screen appears as shown 227
• Label description 227
• P 792h v2 user s guide 227
• Telnet 227
• The following table describes the labels in this screen 227
• The ftp screen 227
• You can use ftp file transfer protocol to upload and download the p 792h v2 s firmware and configuration files please see the user s guide chapter on firmware and configuration file maintenance for details to use this feature your computer must have an ftp client 227
• Chapter 17 remote management 228
• Label description 228
• P 792h v2 user s guide 228
• Simple network management protocol snmp is a protocol used for exchanging management information between network devices snmp is a member of the tcp ip protocol suite your p 792h v2 supports snmp agent functionality which allows a manager station to manage and monitor the p 792h v2 through the network the p 792h v2 supports snmp version one snmpv1 and version two snmpv2 the next figure illustrates an snmp management operation 228
• The following table describes the labels in this screen 228
• The snmp screen 228
• Figure 106 snmp management model 229
• Note snmp is only available if tcp ip is configured 229
• Chapter 17 remote management 230
• P 792h v2 user s guide 230
• Snmp traps 230
• Supported mibs 230
• Table 72 snmp traps 230
• The p 792h v2 supports mib ii which is defined in rfc 1213 and rfc 1215 the focus of the mibs is to let administrators collect statistical data and monitor status and performance 230
• The p 792h v2 will send traps to the snmp manager when any one of the following events occurs 230
• Trap trap name description 230
• Chapter 17 remote management 231
• Configuring snmp 231
• Label description 231
• P 792h v2 user s guide 231
• Snmp the screen appears as shown 231
• The following table describes the labels in this screen 231
• Chapter 17 remote management 232
• Dns to change your p 792h v2 s dns settings 232
• Label description 232
• P 792h v2 user s guide 232
• The dns screen 232
• The following table describes the labels in this screen 232
• Use dns domain name system to map a domain name to its corresponding ip address and vice versa refer to chapter 7 on page 85 for background information 232
• Chapter 17 remote management 233
• Icmp the screen appears as shown 233
• If an outside user attempts to probe an unsupported port on your p 792h v2 an icmp response packet is automatically returned this allows the outside user to know the p 792h v2 exists your p 792h v2 supports anti probing which prevents the icmp response packet from being sent this keeps outsiders from discovering your p 792h v2 when unsupported ports are probed 233
• Label description 233
• Note if you want your device to respond to pings and requests for unauthorized services you may also need to configure the firewall anti probing settings to match 233
• P 792h v2 user s guide 233
• The following table describes the labels in this screen 233
• The icmp screen 233
• Hapter 235
• Overview 235
• Universal plug and play upnp 235
• What you can do in the upnp screen 235
• What you need to know about upnp 235
• Cautions with upnp 236
• Upnp and zyxel 236
• General 237
• Installing upnp in windows example 237
• Installing upnp in windows me 237
• The upnp screen 237
• Installing upnp in windows xp 239
• Auto discover your upnp enabled network device 241
• Using upnp in windows xp example 241
• Web configurator easy access 244
• Hapter 247
• Overview 247
• System settings 247
• What you can do in the system settings screens 247
• What you need to know about system settings 247
• General 248
• The general screen 248
• Chapter 19 system settings 249
• General 249
• Label description 249
• P 792h v2 user s guide 249
• The following table describes the labels in this screen 249
• Chapter 19 system settings 250
• Label description 250
• P 792h v2 user s guide 250
• The following table describes the fields in this screen 250
• The time setting screen 250
• Time setting 250
• Time setting the screen appears as shown 250
• Chapter 19 system settings 251
• Label description 251
• P 792h v2 user s guide 251
• Time setting continued 251
• Chapter 19 system settings 252
• Label description 252
• P 792h v2 user s guide 252
• Time setting continued 252
• Hapter 253
• Overview 253
• What you can do in the log screens 253
• What you need to know about logs 253
• Chapter 20 logs 254
• Entries in red indicate alerts the log wraps around and deletes the old entries after it fills click a column heading to sort the entries by that column s criteria click the heading cell again to reverse the sort order a triangle indicates ascending or descending sort order 254
• Label description 254
• Logs to open the view log screen 254
• P 792h v2 user s guide 254
• The following table describes the fields in this screen 254
• The view log screen 254
• View log 254
• Log settings 255
• The log settings screen 255
• View log 255
• Chapter 20 logs 256
• Label description 256
• Log settings 256
• P 792h v2 user s guide 256
• The following table describes the fields in this screen 256
• An end of log message displays for each mail in which a complete log has been sent the following is an example of a log sent by e mail 257
• Chapter 20 logs 257
• Example e mail log 257
• If there are difficulties in sending e mail the following error message appears 257
• Label description 257
• Log settings 257
• P 792h v2 user s guide 257
• Smtp action request failed ret the are described in the following table 257
• Smtp error messages 257
• Table 81 smtp error messages 257
• You may edit the subject title 257
• Chapter 20 logs 258
• End of log message shows that a complete log has been sent 258
• Figure 115 e mail log example 258
• Log descriptions 258
• Log message description 258
• P 792h v2 user s guide 258
• Table 82 system maintenance logs 258
• This section provides descriptions of example log messages 258
• Chapter 20 logs 259
• Log message description 259
• P 792h v2 user s guide 259
• Table 82 system maintenance logs continued 259
• Table 83 system error logs 259
• Chapter 20 logs 260
• Log message description 260
• P 792h v2 user s guide 260
• Table 84 access control logs 260
• Table 85 tcp reset logs 260
• Chapter 20 logs 261
• Log message description 261
• P 792h v2 user s guide 261
• Table 85 tcp reset logs continued 261
• Table 86 packet filter logs 261
• Table 87 icmp logs 261
• Chapter 20 logs 262
• Log message description 262
• P 792h v2 user s guide 262
• Table 88 cdr logs 262
• Table 89 ppp logs 262
• Table 90 upnp logs 262
• Table 91 content filtering logs 262
• Chapter 20 logs 263
• Log message description 263
• P 792h v2 user s guide 263
• Table 92 attack logs 263
• Table 93 802 x logs 263
• Chapter 20 logs 264
• Log message description 264
• P 792h v2 user s guide 264
• Packet direction direction description 264
• Table 93 802 x logs continued 264
• Table 94 acl setting notes 264
• Table 95 icmp notes 264
• Type code description 264
• Chapter 20 logs 265
• Log message description 265
• P 792h v2 user s guide 265
• Table 95 icmp notes continued 265
• Table 96 syslog logs 265
• Type code description 265
• Chapter 20 logs 266
• Log display payload type 266
• P 792h v2 user s guide 266
• Table 97 rfc 2408 isakmp payload types 266
• The following table shows rfc 2408 isakmp payload types that the log displays please refer to rfc 2408 for detailed information on each type 266
• Hapter 267
• Overview 267
• What you can do in the tool screens 267
• Filename conventions 268
• Table 98 filename conventions 268
• What you need to know about tools 268
• Before you begin 269
• Do not interrupt the file transfer process as this may permanently damage your device when the restore configuration process is complete the device automatically restarts 269
• Ftp restrictions 269
• Tool examples 269
• Using ftp or tftp to restore configuration 269
• Do not interrupt the file transfer process as this may permanently damage your device 270
• Figure 116 restore using ftp session example 270
• Ftp and tftp firmware and configuration file uploads 270
• Ftp file upload command from the dos prompt example 270
• Restore using ftp session example 270
• Figure 117 ftp session example of firmware file upload 271
• Ftp session example of firmware file upload 271
• Tftp file upload 271
• Tftp upload command example 272
• Using the ftp commands to back up configuration 272
• Backup configuration using tftp 273
• Chapter 21 tools 273
• Command description 273
• Configuration backup using gui based ftp clients 273
• Figure 118 ftp session example 273
• Ftp command configuration backup example 273
• P 792h v2 user s guide 273
• Table 99 general commands for gui based ftp clients 273
• The following table describes some of the commands that you may see in gui based ftp clients 273
• The p 792h v2 supports the up downloading of the firmware and the configuration file using tftp trivial file transfer protocol over lan although tftp should work over wan as well it is not recommended 273
• This figure gives an example of using ftp commands from the dos command prompt to save your device s configuration onto your computer 273
• To use tftp your computer must have both telnet and tftp clients to backup the configuration file follow the procedure shown next 273
• Configuration backup using gui based tftp clients 274
• Table 100 general commands for gui based tftp clients 274
• Tftp command configuration backup example 274
• Do not turn off the p 792h v2 while firmware upload is in progress 275
• Firmware 275
• Table 100 general commands for gui based tftp clients continued 275
• The firmware screen 275
• Figure 120 firmware upload in progress 276
• Figure 121 network temporarily disconnected 276
• Figure 122 error message 276
• Firmware continued 276
• Backup configuration 277
• Configuration 277
• Restore configuration 277
• Table 102 restore configuration 277
• The configuration screen 277
• Do not turn off the p 792h v2 while configuration file upload is in progress 278
• Figure 124 configuration upload successful 278
• Figure 125 network temporarily disconnected 278
• Figure 126 configuration upload error 278
• Figure 127 reset warning message 279
• Figure 128 reset in process message 279
• Reset to factory defaults 279
• Restart 279
• The restart screen 279
• Diagnostic 281
• Hapter 281
• Overview 281
• The general diagnostic screen 281
• What you can do in the diagnostic screens 281
• Dsl line 282
• General 282
• The dsl line diagnostic screen 282
• Chapter 22 diagnostic 283
• Dsl line 283
• Label description 283
• P 792h v2 user s guide 283
• The following table describes the fields in this screen 283
• Chapter 22 diagnostic 284
• Dsl line continued 284
• Label description 284
• P 792h v2 user s guide 284
• Accessing the smt 285
• Hapter 285
• Introducing the smt 285
• Chapter 23 introducing the smt 286
• Figure 133 smt main menu 286
• Menu function 286
• Note there is an inactivity timeout and the default value is ten minutes if there is no activity for longer than this your p 792h v2 will automatically log you out you will then have to telnet into the p 792h v2 again you can use the web configurator or the ci commands menu 24 to change the inactivity timeout period 286
• Note use menu 23 to change the password 286
• P 792h v2 user s guide 286
• Smt menu items 286
• Table 105 main menu summary 286
• The following table provides an overview of each menu item 286
• Chapter 23 introducing the smt 287
• Menu function 287
• Menus sub menus 287
• P 792h v2 user s guide 287
• Table 105 main menu summary 287
• Table 106 smt menus overview 287
• The following table gives you an overview of the various smt menus 287
• Chapter 23 introducing the smt 288
• Menus sub menus 288
• P 792h v2 user s guide 288
• Table 106 smt menus overview continued 288
• Chapter 23 introducing the smt 289
• Navigating the smt interface 289
• Operation keystroke description 289
• P 792h v2 user s guide 289
• Table 107 main menu commands 289
• You should be familiar with the following operations before you try to use the smt to modify the configuration 289
• Configuring general setup 291
• General setup 291
• Hapter 291
• Chapter 24 general setup 292
• Configuring dynamic dns 292
• Field description 292
• P 792h v2 user s guide 292
• Table 108 menu 1 general setup continued 292
• To configure dynamic dns set the p 792h v2 to router mode in menu 1 or in the maintenance device mode screen and go to menu 1 general setup and 292
• Chapter 24 general setup 293
• Field description 293
• Figure 135 menu 1 configure dynamic dns 293
• Follow the instructions in the next table to configure dynamic dns parameters 293
• Http www dyndns org 293
• P 792h v2 user s guide 293
• Press space bar to select yes in the edit dynamic dns field press enter to display menu 1 configure dynamic dns shown next 293
• Table 109 menu 1 configure dynamic dns 293
• Chapter 24 general setup 294
• Field description 294
• Note the ddns server may not be able to detect the proper ip address if there is an http proxy server between the p 792h v2 and the ddns server 294
• P 792h v2 user s guide 294
• Table 109 menu 1 configure dynamic dns 294
• Hapter 295
• Wan setup 295
• Chapter 25 wan setup 296
• Field description 296
• Note if you activate either traffic redirect or dial backup you must configure at least one ip address here 296
• P 792h v2 user s guide 296
• Table 110 menu 2 wan setup continued 296
• Chapter 25 wan setup 297
• Configuring traffic redirect 297
• Field description 297
• Figure 137 menu 2 traffic redirect setup 297
• From the main menu in menu 2 select yes in traffic redirect and then press enter 297
• P 792h v2 user s guide 297
• Table 110 menu 2 wan setup continued 297
• Table 111 menu 2 traffic redirect setup 297
• The following table describes the fields in this menu 297
• Accessing the lan menus 299
• Hapter 299
• Lan port filter setup 299
• Lan setup 299
• Figure 140 menu 3 tcp ip and dhcp ethernet setup 300
• Table 112 menu 3 tcp ip and dhcp ethernet setup 300
• Tcp ip and dhcp setup menu 300
• Chapter 26 lan setup 301
• Field description 301
• P 792h v2 user s guide 301
• Table 112 menu 3 tcp ip and dhcp ethernet setup continued 301
• Chapter 26 lan setup 302
• Field description 302
• Figure 141 menu 3 ip alias setup 302
• Lan ip alias 302
• P 792h v2 user s guide 302
• Table 113 menu 3 ip alias setup 302
• Use menu 3 to configure the first network and you use menu 3 to configure the other two networks move the cursor to the edit ip alias field press space bar to choose yes and press enter to configure the second and third network 302
• Use the instructions in the following table to configure ip alias parameters 302
• Hapter 303
• Internet access setup 303
• Chapter 27 internet access setup 304
• Field description 304
• P 792h v2 user s guide 304
• Table 114 menu 4 internet access setup continued 304
• Chapter 27 internet access setup 305
• Field description 305
• P 792h v2 user s guide 305
• Table 114 menu 4 internet access setup continued 305
• Hapter 307
• Introduction to remote node setup 307
• Remote node setup 307
• Chapter 28 remote node setup 308
• Field description 308
• Figure 144 menu 11 remote node profile nodes 1 7 308
• P 792h v2 user s guide 308
• Remote node profile 308
• Table 115 menu 11 remote node profile nodes 1 7 308
• The following explains how to configure remote nodes 1 7 308
• The following table describes the labels in this menu 308
• Chapter 28 remote node setup 309
• Field description 309
• P 792h v2 user s guide 309
• Table 115 menu 11 remote node profile nodes 1 7 continued 309
• Chapter 28 remote node setup 310
• Field description 310
• Figure 145 menu 11 remote node network layer options 310
• Move the cursor to the edit ip bridge field in menu 11 then press space bar to select yes press enter to open menu 11 remote node network layer options 310
• P 792h v2 user s guide 310
• Remote node network layer options 310
• Table 115 menu 11 remote node profile nodes 1 7 continued 310
• Table 116 menu 11 remote node network layer options 310
• The following table describes the fields in this menu 310
• Chapter 28 remote node setup 311
• Field description 311
• P 792h v2 user s guide 311
• Table 116 menu 11 remote node network layer options continued 311
• Chapter 28 remote node setup 312
• Field description 312
• Move the cursor to the field edit filter sets in menu 11 and then press space bar to set the value to yes press enter to open menu 11 remote node filter 312
• P 792h v2 user s guide 312
• Remote node filter 312
• Table 116 menu 11 remote node network layer options continued 312
• Use this menu to specify the filter set s to apply to the incoming and outgoing traffic between this remote node and the p 792h v2 to prevent certain packets from triggering calls you can specify up to 4 filter sets separated by commas for example 1 5 9 12 in each filter field note that spaces are accepted in this field for more information on defining the filters please refer to chapter 32 on 312
• Chapter 28 remote node setup 313
• Field description 313
• Figure 146 menu 11 remote node filter 313
• P 792h v2 user s guide 313
• Page 339 for pppoe or pptp encapsulation you have the additional option of specifying remote node call filter sets 313
• Table 117 menu 11 remote node filter 313
• The following table describes the labels in this menu 313
• Chapter 28 remote node setup 314
• Field description 314
• Figure 147 menu 11 remote node atm layer options 314
• Move the cursor to the edit atm options field in menu 11 then press space bar to select yes press enter to open this menu this menu depends on the multiplexing and encapsulation you select in menu 11 314
• P 792h v2 user s guide 314
• Remote node atm layer options 314
• Table 118 menu 11 remote node atm layer options 314
• The following table describes the fields in this menu 314
• Advance setup options 315
• Figure 148 menu 11 advance setup options 315
• Table 119 menu 11 advance setup options 315
• Hapter 317
• Ip static route setup 317
• Static route setup 317
• Chapter 29 static route setup 318
• Field description 318
• Figure 150 menu 12 edit ip static route 318
• Now enter the index number of the static route that you want to configure 318
• P 792h v2 user s guide 318
• Table 120 menu 12 edit ip static route 318
• The following table describes the fields in this screen 318
• Bridge static route setup 319
• Chapter 29 static route setup 319
• Enter 3 from menu 12 select one of the bridge static routes as shown next to configure ip static routes in menu 12 319
• Field description 319
• Figure 151 menu 12 bridge static route setup 319
• Figure 152 menu 12 edit bridge static route 319
• Now enter the index number of the static route that you want to configure 319
• P 792h v2 user s guide 319
• Table 121 menu 12 edit bridge static route 319
• The following table describes the fields in this screen 319
• Hapter 321
• Nat setup 321
• Sua single user account versus nat 321
• Using nat 321
• Applying nat 322
• Chapter 30 nat setup 322
• Enter 1 to open menu 11 remote node profile 322
• Enter 11 from the main menu 322
• Figure 153 menu 4 applying nat for internet access 322
• P 792h v2 user s guide 322
• The following figure shows how you apply nat to the remote node in menu 11 322
• You apply nat via menus 4 or 11 as displayed next the next figure shows you how to apply nat for internet access in menu 4 enter 4 from the main menu to go to menu 4 internet access setup 322
• Chapter 30 nat setup 323
• Field description options 323
• Figure 154 menu 11 applying nat to the remote node 323
• Move the cursor to the edit ip bridge field press space bar to select yes and then press enter to bring up menu 11 remote node network layer options 323
• Nat setup 323
• P 792h v2 user s guide 323
• Table 122 applying nat in menus 4 11 323
• The following table describes the fields in this menu 323
• Use the address mapping sets menus and submenus to create the mapping table used to assign global addresses to computers on the lan and the dmz set 255 is used for sua when you select full feature in menu 4 or menu 11 the smt will use the address mapping set that you specify when you select sua only the smt will use the pre configured set 255 read only 323
• Address mapping sets 324
• Figure 155 menu 15 nat setup 324
• Figure 156 menu 15 address mapping sets 324
• Chapter 30 nat setup 325
• Field description 325
• Figure 157 menu 15 address mapping rules 325
• Note the entire set will be deleted if you leave the set name field blank and press enter at the bottom of the screen 325
• Note the type local and global start end ips are configured in menu 15 described later and the values are displayed here 325
• P 792h v2 user s guide 325
• Table 123 menu 15 address mapping rules 325
• User defined address mapping sets 325
• Figure 158 menu 15 address mapping rule 326
• Note an ip end address must be numerically greater than its corresponding ip start address 326
• Note you must press enter at the bottom of the screen to save the whole set you must do this again if you make any changes to the set including deleting a rule no changes to the set take place until this action is taken 326
• Table 124 menu 15 address mapping rule 326
• Chapter 30 nat setup 327
• Configuring a server behind nat 327
• Enter 15 in the main menu to go to menu 15 nat setup 327
• Enter 2 to open menu 15 and configure the address mapping rules for the wan port on a p 792h v2 with a single wan port 327
• Field description 327
• Figure 159 menu 15 nat server sets 327
• Follow these steps to configure a server behind nat 327
• Note if you do not assign a default server ip address the p 792h v2 discards all packets received for ports that are not specified here or in the remote management setup 327
• P 792h v2 user s guide 327
• Table 124 menu 15 address mapping rule continued 327
• Chapter 30 nat setup 328
• Enter 1 to configure the server set used by sua or enter the number of the server set you want to modify for full feature nat in menu 15 nat server setup configure the port forwarding rules 328
• Field description 328
• Figure 160 menu 15 nat server setup 328
• General nat examples 328
• P 792h v2 user s guide 328
• Table 125 menu 15 nat server setup 328
• The first entry is for the default server the following table describes the labels in this menu 328
• The following are some examples of nat configuration 328
• Figure 161 nat example 1 329
• Figure 162 menu 4 internet access nat example 329
• Internet access only 329
• Example 2 internet access with a default server 330
• Example 3 multiple public ip addresses with inside servers 330
• Figure 163 nat example 2 330
• Figure 164 menu 15 specifying an inside server 330
• Figure 165 nat example 3 331
• Chapter 30 nat setup 332
• Figure 166 example 3 menu 11 332
• P 792h v2 user s guide 332
• When finished menu 15 should look like as shown in figure 168 on page 333 332
• Chapter 30 nat setup 333
• Enter 15 from the main menu 333
• Enter 2 to go to menu 15 333
• Figure 167 example 3 menu 15 333
• Figure 168 example 3 final menu 15 333
• Now configure the iga3 to map to our web server and mail server on the lan 333
• P 792h v2 user s guide 333
• The following figure shows how to configure the first rule 333
• Example 4 nat unfriendly application programs 334
• Figure 169 example 3 menu 15 334
• Figure 170 nat example 4 334
• Note other applications such as some gaming programs are nat unfriendly because they embed addressing information in the data stream these applications won t work through nat even when using one to one and many one to one mapping types 334
• After you ve configured your rule you should be able to check the settings in menu 15 as shown next example 4 menu 15 address mapping rules 335
• Chapter 30 335
• Figure 171 example 4 menu 15 address mapping rule 335
• Follow the steps outlined in example 3 above to configure these two menus as follows 335
• P 792h v2 user s guide 335
• Activating the firewall 337
• Firewall setup 337
• Hapter 337
• Using p 792h v2 smt menus 337
• Chapter 31 firewall setup 338
• Figure 173 menu 21 firewall setup 338
• Menu 15 to configure the lan to wan set name and wan to lan set name 338
• Note it is recommended to configure the firewall rules using the web configurator 338
• P 792h v2 user s guide 338
• Filter configuration 339
• Hapter 339
• Introduction to filters 339
• The filter structure of the p 792h v2 340
• Figure 175 filter rule process 341
• Configuring a filter set 342
• Figure 176 menu 21 filter and firewall setup 342
• Figure 177 menu 21 filter set configuration 342
• Chapter 32 filter configuration 343
• Field description 343
• Figure 178 menu 21 filter rules summary 343
• P 792h v2 user s guide 343
• Table 126 abbreviations used in the filter rules summary menu 343
• The following table describes the labels in this screen 343
• This screen shows the summary of the existing rules in the filter set 343
• Configuring a filter rule 344
• Configuring a tcp ip filter rule 344
• Table 127 rule abbreviations used 344
• Chapter 32 filter configuration 345
• Field description 345
• Figure 179 menu 21 tcp ip filter rule 345
• P 792h v2 user s guide 345
• Table 128 menu 21 tcp ip filter rule 345
• The following table describes how to configure your tcp ip filter rule 345
• To configure tcp ip rules select tcp ip filter rule from the filter type field and press enter to open menu 21 tcp ip filter rule as shown next 345
• Chapter 32 filter configuration 346
• Field description 346
• P 792h v2 user s guide 346
• Table 128 menu 21 tcp ip filter rule 346
• Figure 180 executing an ip filter 347
• Chapter 32 filter configuration 348
• Configuring a generic filter rule 348
• Field description 348
• Figure 181 menu 21 generic filter rule 348
• For generic rules the p 792h v2 treats a packet as a byte stream as opposed to an ip or ipx packet you specify the portion of the packet to check with the offset from 0 and the length fields both in bytes the p 792h v2 applies the mask bit wise anding to the data portion before comparing the result against the value to determine a match the mask and value are specified in hexadecimal numbers note that it takes two hexadecimal digits to represent a byte so if the length is 4 the value in either field will take 8 digits for example ffffffff 348
• P 792h v2 user s guide 348
• Table 129 menu 21 generic filter rule 348
• The following table describes the fields in the generic filter rule menu 348
• This section shows you how to configure a generic filter rule the purpose of generic rules is to allow you to filter non ip packets for ip it is generally easier to use the ip rules directly 348
• To configure a generic rule select generic filter rule in the filter type field in menu 21 and press enter to open generic filter rule as shown below 348
• Chapter 32 filter configuration 349
• Enter 21 from the main menu to open menu 21 filter and firewall setup 349
• Example filter 349
• Field description 349
• Figure 182 telnet filter example 349
• Let s look at an example to block outside users from accessing the p 792h v2 via telnet please see our included disk for more example filters 349
• P 792h v2 user s guide 349
• Table 129 menu 21 generic filter rule continued 349
• Figure 183 example filter menu 21 350
• Figure 184 example filter rules summary menu 21 351
• Filter types and nat 351
• Applying a filter 352
• Applying lan filters 352
• Figure 185 protocol and device filter sets 352
• Firewall versus filters 352
• Note if you do not activate the firewall it is advisable to apply filters 352
• Applying remote node filters 353
• Chapter 32 filter configuration 353
• Example 3 4 6 11 input filter sets filter incoming traffic to the p 792h v2 and output filter sets filter outgoing traffic from the p 792h v2 353
• Figure 186 filtering lan traffic 353
• Figure 187 filtering remote node traffic 353
• Go to menu 11 shown below note that call filter sets are only present for pppoa or pppoe encapsulation and enter the number s of the filter set s as appropriate you can cascade up to four filter sets by entering their numbers separated by commas the p 792h v2 already has filters to prevent netbios traffic from triggering calls and block incoming telnet ftp and http connections 353
• P 792h v2 user s guide 353
• Hapter 355
• System password 355
• Hapter 357
• Introduction to system status 357
• System information diagnosis 357
• System status 357
• Chapter 34 system information diagnosis 358
• Enter number 24 to go to menu 24 system maintenance 358
• Field description 358
• Figure 190 menu 24 system maintenance status 358
• In this menu enter 1 to open system maintenance status 358
• P 792h v2 user s guide 358
• Table 131 menu 24 system maintenance status 358
• The following table describes the fields present in menu 24 system maintenance status these fields are read only and meant for diagnostic purposes the upper right corner of the screen shows the time and date 358
• There are three commands in menu 24 system maintenance status entering 1 drops the wan connection 9 resets the counters and esc takes you back to the previous screen 358
• To get to the system status 358
• Chapter 34 system information diagnosis 359
• Enter 2 to open menu 24 system information and console port speed 359
• Enter 24 to go to menu 24 system maintenance 359
• Field description 359
• Figure 191 menu 24 system information and console port speed 359
• From this menu you have two choices as shown in the next figure 359
• P 792h v2 user s guide 359
• System information and console port speed 359
• Table 131 menu 24 system maintenance status continued 359
• This section describes your system and allows you to choose different console port speeds to get to the system information and console port speed 359
• Chapter 34 system information diagnosis 360
• Field description 360
• Figure 192 menu 24 system maintenance information 360
• P 792h v2 user s guide 360
• System information 360
• System information gives you information about your system as shown below more specifically it gives you information on your routing protocol ethernet address ip address etc 360
• Table 132 menu 24 system maintenance information 360
• The following table describes the fields in this screen 360
• Console port speed 361
• Figure 193 menu 24 system maintenance change console port speed 361
• Figure 194 menu 24 system maintenance log and trace 361
• Log and trace 361
• Viewing error log 361
• Chapter 34 system information diagnosis 362
• Examples of typical error and information messages are presented in the following figure 362
• Field description 362
• Figure 195 examples of error and information messages 362
• Figure 196 menu 24 system maintenance unix syslog 362
• P 792h v2 user s guide 362
• Syslog logging 362
• Table 133 menu 24 system maintenance unix syslog 362
• The p 792h v2 uses the syslog facility to log the cdr call detail record and system messages to a syslog server syslog and accounting can be configured in menu 24 system maintenance syslog logging as shown next 362
• You need to configure the syslog parameters described in the following table to activate syslog then choose what you want to log 362
• Chapter 34 system information diagnosis 363
• Field description 363
• P 792h v2 user s guide 363
• Table 133 menu 24 system maintenance unix syslog continued 363
• Your p 792h v2 sends five types of syslog messages some examples not all p 792h v2 specific of these syslog messages with their message formats are shown next 363
• Chapter 34 system information diagnosis 364
• Filter log 364
• P 792h v2 user s guide 364
• Packet triggered 364
• Chapter 34 system information diagnosis 365
• P 792h v2 user s guide 365
• Chapter 34 system information diagnosis 366
• Diagnostic 366
• Firewall log 366
• P 792h v2 user s guide 366
• Ppp log 366
• The diagnostic facility allows you to test the different aspects of your p 792h v2 to determine if it is working properly menu 24 allows you to choose among various 366
• Chapter 34 system information diagnosis 367
• Field description 367
• Figure 197 menu 24 system maintenance diagnostic 367
• Follow the procedure below to get to menu 24 system maintenance diagnostic 367
• From the main menu select option 24 to open menu 24 system maintenance 367
• From this menu select option 4 diagnostic this will open menu 24 system maintenance diagnostic 367
• P 792h v2 user s guide 367
• Table 134 menu 24 system maintenance diagnostic 367
• The following table describes the labels in this screen 367
• Types of diagnostic tests to evaluate your system as shown next not all fields are available on all models 367
• Filename conventions 369
• Firmware and configuration file maintenance 369
• Hapter 369
• Introduction 369
• Backup configuration 370
• Note the p 792h v2 displays different messages explaining different ways to backup restore and upload files in menus 24 24 24 7 and 24 depending on whether you use the console port or telnet 370
• Table 135 filename conventions 370
• Backup configuration 371
• Figure 198 menu 24 backup configuration 371
• Using the ftp command from the command line 371
• Chapter 35 firmware and configuration file maintenance 372
• Command description 372
• Example of ftp commands from the command line 372
• Figure 199 ftp session example 372
• File maintenance over wan 372
• Gui based ftp clients 372
• P 792h v2 user s guide 372
• Table 136 general commands for gui based ftp clients 372
• Tftp ftp and telnet over the wan will not work when 372
• The firewall is active turn the firewall off in menu 21 or create a firewall rule to allow access from the wan 372
• The following table describes some of the commands that you may see in gui based ftp clients 372
• You have disabled telnet service in menu 24 1 372
• Backup configuration using tftp 373
• Tftp command example 373
• Backup via console port 374
• Figure 200 system maintenance backup configuration 374
• Gui based tftp clients 374
• Table 137 general commands for gui based tftp clients 374
• Figure 201 system maintenance starting xmodem download screen 375
• Figure 202 backup configuration example 375
• Figure 203 successful backup confirmation screen 375
• Restore configuration 375
• Do not interrupt the file transfer process as this may permanently damage your p 792h v2 when the restore configuration process is complete the p 792h v2 will automatically restart 376
• Figure 204 menu 24 restore configuration 376
• Restore using ftp 376
• Figure 205 restore using ftp session example 377
• Figure 206 system maintenance restore configuration 377
• Figure 207 system maintenance starting xmodem download screen 377
• Restore using ftp session example 377
• Restore via console port 377
• Do not interrupt the file transfer process as this may permanently damage your p 792h v2 378
• Figure 208 restore configuration example 378
• Figure 209 successful restoration confirmation screen 378
• Firmware file upload 378
• Uploading firmware and configuration files 378
• Chapter 35 firmware and configuration file maintenance 379
• Configuration file upload 379
• Figure 210 menu 24 system maintenance upload system firmware 379
• Figure 211 menu 24 system maintenance upload system configuration file 379
• P 792h v2 user s guide 379
• To upload the firmware and the configuration file follow these examples 379
• When you telnet into the p 792h v2 you will see the following screens for uploading firmware and the configuration file using ftp 379
• You see the following screen when you telnet into menu 24 379
• Figure 212 ftp session example of firmware file upload 380
• Ftp file upload command from the dos prompt example 380
• Ftp session example of firmware file upload 380
• Tftp file upload 381
• Tftp upload command example 381
• Figure 213 menu 24 as seen using the console port 382
• Uploading firmware file via console port 382
• Uploading via console port 382
• 0 uploading configuration file via console port 383
• After the firmware upload process has completed the p 792h v2 will automatically restart 383
• Chapter 35 firmware and configuration file maintenance 383
• Click transfer then send file to display the following screen 383
• Example xmodem firmware upload using hyperterminal 383
• Figure 214 example xmodem upload 383
• Figure 215 menu 24 as seen using the console port 383
• P 792h v2 user s guide 383
• Select 2 from menu 24 system maintenance upload firmware to display menu 24 system maintenance upload system configuration file follow the instructions as shown in the next screen 383
• 1 example xmodem configuration upload using hyperterminal 384
• Figure 216 example xmodem upload 384
• Command interpreter mode 385
• Command syntax 385
• Hapter 385
• Menus 24 to 24 1 385
• Call control support 386
• Command usage 386
• Figure 218 valid commands 386
• Budget management 387
• Chapter 36 menus 24 to 24 1 387
• Field description example 387
• Figure 219 menu 24 system maintenance call control 387
• Figure 220 menu 24 budget management 387
• Menu 24 shows the budget management statistics for outgoing calls enter 1 from menu 24 system maintenance call control to bring up the following menu not all fields are available on all models 387
• P 792h v2 user s guide 387
• Table 138 menu 24 budget management 387
• The total budget is the time limit on the accumulated time for outgoing calls to a remote node when this limit is reached the call will be dropped and further outgoing calls to that remote node will be blocked after each period the total budget is reset the default for the total budget is 0 minutes and the period is 0 hours meaning no budget control you can reset the accumulated connection time in this menu by entering the index of a remote node enter 0 to update the screen the budget and the reset period can be configured in menu 11 for the remote node 387
• To access the call control menu select option 9 in menu 24 to go to menu 24 system maintenance call control as shown in the next table 387
• Chapter 36 menus 24 to 24 1 388
• Field description example 388
• Figure 221 menu 24 system maintenance 388
• P 792h v2 user s guide 388
• Select menu 24 in the main menu to open menu 24 system maintenance as shown next 388
• Table 138 menu 24 budget management continued 388
• The p 792h v2 s real time chip rtc keeps track of the time and date there is also a software mechanism to set the time manually or get the current time and date from an external server when you turn on your p 792h v2 menu 24 0 allows you to update the time and date settings of your p 792h v2 the real time is then displayed in the p 792h v2 error logs and firewall logs 388
• Time and date setting 388
• Chapter 36 menus 24 to 24 1 389
• Enter 10 to go to menu 24 0 system maintenance time and date setting to update the time and date settings of your p 792h v2 as shown in the following screen 389
• Field description 389
• Figure 222 menu 24 0 system maintenance time and date setting 389
• P 792h v2 user s guide 389
• Table 139 menu 24 0 system maintenance time and date setting 389
• The following table describes the fields in this screen 389
• Chapter 36 menus 24 to 24 1 390
• Field description 390
• P 792h v2 user s guide 390
• Table 139 menu 24 0 system maintenance time and date setting continued 390
• A filter in menu 3 lan or in menu 11 wan is applied to block a telnet ftp or web service 391
• Chapter 36 menus 24 to 24 1 391
• Field description 391
• Figure 223 menu 24 1 remote management control 391
• P 792h v2 user s guide 391
• Remote management 391
• Remote management limitations 391
• Remote management over lan or wan will not work when 391
• Table 140 menu 24 1 remote management control 391
• The following table describes the fields in this screen 391
• To disable remote management of a service select disable in the corresponding server access field enter 11 from menu 24 to bring up menu 24 1 remote management control 391
• Hapter 393
• Schedule set overview 393
• Schedule setup 393
• Chapter 37 schedule setup 394
• Field description 394
• Figure 225 menu 26 schedule set setup 394
• P 792h v2 user s guide 394
• Schedule set setup 394
• Table 141 menu 26 schedule setup 394
• The following table describes the labels in this menu 394
• This menu is only applicable if your internet connection uses pppoe encapsulation use this menu to configure the schedule sets in the p 792h v2 to open this menu enter the number of the schedule set in the enter schedule set number to configure field enter the name of the schedule set in the edit name field and press enter in menu 26 394
• Chapter 37 schedule setup 395
• Field description 395
• P 792h v2 user s guide 395
• Table 142 menu 26 schedule set setup 395
• The following table describes the labels in this menu 395
• Hapter 397
• Power hardware connections and leds 397
• Troubleshooting 397
• I cannot see or access the login screen in the web configurator 398
• I forgot the ip address for the p 792h v2 398
• I forgot the password 398
• P 792h v2 access and login 398
• I can see the login screen but i cannot log in to the p 792h v2 399
• I cannot access the internet 400
• I cannot access the internet anymore i had access to the internet with the p 792h v2 but my internet connection is not available anymore 400
• I cannot telnet to the p 792h v2 400
• I cannot use ftp to upload download the configuration file i cannot use ftp to upload new firmware 400
• Internet access 400
• My network cannot be connected how can i check the internet connection status 401
• Network connections 401
• The internet connection is slow or intermittent 401
• Ppendix 403
• Product specifications 403
• Appendix a product specifications 404
• P 792h v2 user s guide 404
• Table 144 firmware 404
• Appendix a product specifications 405
• P 792h v2 user s guide 405
• Table 144 firmware continued 405
• Appendix a product specifications 406
• Feature description 406
• Note only upload firmware for your specific model 406
• P 792h v2 user s guide 406
• Table 145 firmware features 406
• Appendix a product specifications 407
• Feature description 407
• Figure 226 y cable configuration 407
• P 792h v2 user s guide 407
• Table 145 firmware features 407
• Ppendix 409
• Wall mounting instructions 409
• Ppendix 411
• Setting up your computer s ip address 411
• Figure 228 windows 95 98 me network configuration 412
• Installing components 412
• Windows 95 98 me 412
• Configuring 413
• Figure 229 windows 95 98 me tcp ip properties ip address 413
• Figure 230 windows 95 98 me tcp ip properties dns configuration 414
• Verifying settings 414
• Figure 231 windows xp start menu 415
• Figure 232 windows xp control panel 415
• Windows 2000 nt xp 415
• Figure 233 windows xp control panel network connections properties 416
• Figure 234 windows xp local area connection properties 416
• Figure 235 windows xp internet protocol tcp ip properties 417
• Figure 236 windows xp advanced tcp ip properties 418
• Figure 237 windows xp internet protocol tcp ip properties 419
• Verifying settings 419
• Windows vista 419
• Figure 238 windows vista start menu 420
• Figure 239 windows vista control panel 420
• Figure 240 windows vista network and internet 420
• Figure 241 windows vista network and sharing center 421
• Figure 242 windows vista network and sharing center 421
• Note during this procedure click continue whenever windows displays a screen saying that it needs your permission to continue 421
• Figure 243 windows vista local area connection properties 422
• Figure 244 windows vista internet protocol version 4 tcp ipv4 properties 423
• Figure 245 windows vista advanced tcp ip properties 424
• Figure 246 windows vista internet protocol version 4 tcp ipv4 properties 425
• Verifying settings 425
• Figure 247 macintosh os 8 9 apple menu 426
• Macintosh os 8 9 426
• Figure 248 macintosh os 8 9 tcp ip 427
• Verifying settings 427
• Figure 249 macintosh os x apple menu 428
• Figure 250 macintosh os x network 428
• Macintosh os x 428
• Figure 251 red hat 9 kde network configuration devices 429
• Note make sure you are logged in as the root administrator 429
• Using the k desktop environment kde 429
• Verifying settings 429
• Figure 252 red hat 9 kde ethernet device general 430
• Figure 253 red hat 9 kde network configuration dns 430
• Figure 254 red hat 9 kde network configuration activate 431
• Figure 255 red hat 9 dynamic ip address setting in ifconfig eth0 431
• Using configuration files 431
• Figure 256 red hat 9 static ip address setting in ifconfig eth0 432
• Figure 257 red hat 9 dns settings in resolv conf 432
• Figure 258 red hat 9 restart ethernet card 432
• Appendix c setting up your computer s ip address 433
• Enter ifconfig in a terminal screen to check your tcp ip properties 433
• Figure 259 red hat 9 checking tcp ip properties 433
• P 792h v2 user s guide 433
• Verifying settings 433
• Internet explorer pop up blockers 435
• Pop up windows javascripts and java permissions 435
• Ppendix 435
• Enable pop up blockers with exceptions 436
• Figure 261 internet options privacy 436
• Figure 262 internet options privacy 437
• Figure 263 pop up blocker settings 438
• Javascripts 438
• Figure 264 internet options security 439
• Figure 265 security settings java scripting 440
• Java permissions 440
• Figure 266 security settings java 441
• Java sun 441
• Figure 267 java sun 442
• Mozilla firefox 442
• Options 442
• Figure 269 mozilla firefox content security 443
• Introduction to ip addresses 445
• Ip addresses and subnetting 445
• Ppendix 445
• Structure 445
• Figure 270 network number and host id 446
• Subnet masks 446
• Table 146 subnet masks 446
• An ip address with host ids of all zeros is the ip address of the network 192 68 with a 24 bit subnet mask for example an ip address with host ids of all ones is the broadcast address for that network 192 68 55 with a 24 bit subnet mask for example 447
• Appendix e ip addresses and subnetting 447
• As these two ip addresses cannot be used for individual hosts calculate the maximum number of possible hosts in a network as follows 447
• Binary 447
• By convention subnet masks always consist of a continuous sequence of ones beginning from the leftmost bit of the mask followed by a continuous sequence of zeros for a total number of 32 bits 447
• Decimal 1st octet 447
• Nd octet 447
• Network size 447
• P 792h v2 user s guide 447
• Rd octet 447
• Subnet mask host id size maximum number of hosts 447
• Subnet masks are expressed in dotted decimal notation just like ip addresses the following examples show the binary and decimal notation for 8 bit 16 bit 24 bit and 29 bit subnet masks 447
• Subnet masks can be referred to by the size of the network number part the bits with a 1 value for example an 8 bit mask means that the first 8 bits of the mask are ones and the remaining 24 bits are zeroes 447
• Table 147 subnet masks 447
• Table 148 maximum host numbers 447
• Th octet 447
• The size of the network number determines the maximum number of possible hosts you can have on your network the larger the number of network number bits the smaller the number of remaining host id bits 447
• 2 or 254 possible hosts 448
• Alternative notation 448
• Appendix e ip addresses and subnetting 448
• For example 192 25 is equivalent to saying 192 with subnet mask 255 55 55 28 448
• In this example the company network address is 192 68 the first three octets of the address 192 68 are the network number and the remaining octet is the host id allowing a maximum of 448
• Last octet binary 448
• Last octet decimal 448
• Notation 448
• P 792h v2 user s guide 448
• Since the mask is always a continuous number of ones beginning from the left followed by a continuous number of zeros for the remainder of the 32 bit mask you can simply specify the number of ones instead of writing the value of each octet this is usually specified by writing a followed by the number of bits in the mask after the address 448
• Subnet mask 448
• Subnetting 448
• Table 149 alternative subnet mask notation 448
• The following table shows some possible subnet masks using both notations 448
• You can use subnetting to divide one network into multiple sub networks in the following example a network administrator creates two sub networks to isolate a group of servers from the rest of the company network for security reasons 448
• Figure 271 subnetting example before subnetting 449
• Figure 272 subnetting example after subnetting 449
• 2 or 126 possible hosts a host id of all zeroes is the subnet s address itself all ones is the subnet s broadcast address 450
• 2 or 62 hosts for each subnet a host id of all zeroes is the subnet itself all ones is the subnet s broadcast address 450
• 68 with mask 255 55 55 28 is subnet a itself and 192 68 27 with mask 255 55 55 28 is its broadcast address therefore the lowest ip address that can be assigned to an actual host for subnet a is 192 68 and the highest is 192 68 26 450
• Appendix e ip addresses and subnetting 450
• Each subnet contains 6 host id bits giving 450
• Example four subnets 450
• In a 25 bit subnet the host id has 7 bits so each sub network has a maximum of 450
• Ip subnet mask network number last octet bit value 450
• P 792h v2 user s guide 450
• Similarly the host id range for subnet b is 192 68 29 to 192 68 54 450
• Table 150 subnet 1 450
• Table 151 subnet 2 450
• The previous example illustrated using a 25 bit subnet mask to divide a 24 bit address into two subnets similarly to divide a 24 bit address into four subnets you need to borrow two host id bits to give four possible combinations 00 01 10 and 11 the subnet mask is 26 bits 11111111 1111111 1111111 11 000000 or 255 55 55 92 450
• Appendix e ip addresses and subnetting 451
• Broadcast address 451
• Example eight subnets 451
• Ip subnet mask network number last octet bit value 451
• P 792h v2 user s guide 451
• Similarly use a 27 bit mask to create eight subnets 000 001 010 011 100 101 110 and 111 451
• Subnet subnet address first address last address 451
• Table 152 subnet 3 451
• Table 153 subnet 4 451
• Table 154 eight subnets 451
• The following table shows ip address last octet values for each subnet 451
• Appendix e ip addresses and subnetting 452
• Configuring ip addresses 452
• No borrowed host bits subnet mask no subnets no hosts per subnet 452
• P 792h v2 user s guide 452
• Subnet planning 452
• Table 155 24 bit network number subnet planning 452
• Table 156 16 bit network number subnet planning 452
• The following table is a summary for subnet planning on a network with a 16 bit network number 452
• The following table is a summary for subnet planning on a network with a 24 bit network number 452
• Where you obtain your network number depends on your particular situation if the isp or your network administrator assigns you a block of registered ip 452
• Private ip addresses 453
• Ppendix 455
• Services 455
• Appendix f services 456
• Name protocol port s description 456
• P 792h v2 user s guide 456
• Table 157 examples of services 456
• Appendix f services 457
• Name protocol port s description 457
• P 792h v2 user s guide 457
• Table 157 examples of services continued 457
• Appendix f services 458
• Name protocol port s description 458
• P 792h v2 user s guide 458
• Table 157 examples of services continued 458
• Certifications 459
• Copyright 459
• Legal information 459
• Ppendix 459
• Fcc radiation exposure statement 460
• 注意 460
• Notices 461
• Viewing certifications 461
• Zyxel limited warranty 461
• Registration 462
• Numerics 463
• P 792h v2 user s guide 463
• P 792h v2 user s guide 464
• P 792h v2 user s guide 465
• P 792h v2 user s guide 466
• P 792h v2 user s guide 467
• P 792h v2 user s guide 468
• P 792h v2 user s guide 469
• P 792h v2 user s guide 470