Home » ZyXEL Manuals » Networking » ZyXEL P-660R-T1 v3s » Manual Viewer

ZyXEL P-660R-T1 v3s User Guide - Page 101

Firewall, 13.1 Overview, 13.1.1 What You Can Do in the Firewall Screens

Get ZyXEL P-660R-T1 v3s PDF manuals and user guides

View all ZyXEL P-660R-T1 v3s manuals

Add to My Manuals
Save this manual to your list of manuals

Page 101 highlights

CHAPTER 13 Firewall 13.1 Overview This chapter shows you how to enable the ZyXEL Device firewall. Use the firewall to protect your ZyXEL Device and network from attacks by hackers on the Internet and control access to it. By default the firewall: • allows traffic that originates from your LAN computers to go to all other networks. • blocks traffic that originates on other networks from going to the LAN. • blocks SYN and port scanner attacks. By default, the ZyXEL Device blocks DDOS, LAND and Ping of Death attacks whether the firewall is enabled or disabled. 13.1.1 What You Can Do in the Firewall Screens Use the Firewall screen (Section 13.2 on page 102) to enable firewall and/or SPI on the ZyXEL Device. 13.1.2 What You Need to Know About Firewall SYN Attack A SYN attack floods a targeted system with a series of SYN packets. Each packet causes the targeted system to issue a SYN-ACK response. While the targeted system waits for the ACK that follows the SYN-ACK, it queues up all outstanding SYN-ACK responses on a backlog queue. SYN-ACKs are moved off the queue only when an ACK comes back or when an internal timer terminates the three-way handshake. Once the queue is full, the system will ignore all incoming SYN requests, making the system unavailable for legitimate users. DoS Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources. The ZyXEL Device is pre-configured to automatically detect and thwart all known DoS attacks. DDoS A DDoS attack is one in which multiple compromised systems attack a single target, thereby causing denial of service for users of the targeted system. P-660R-Tx v3s User's Guide 101

Section	Page
User’s Guide	1
About This User's Guide	3
Document Conventions	5
Safety Warnings	7
Contents Overview	9
Table of Contents	11
List of Figures	19
List of Tables	23
Introduction	25
Introducing the ZyXEL Device	27
1.1 Overview	27
1.2 Ways to Manage the ZyXEL Device	27
1.3 Good Habits for Managing the ZyXEL Device	28
1.4 Applications for the ZyXEL Device	28
1.4.1 Internet Access	28
1.5 LEDs (Lights)	29
1.6 The RESET Button	30
1.6.1 Using the Reset Button	30
Introducing the Web Configurator	31
2.1 Overview	31
2.1.1 Accessing the Web Configurator	31
2.2 Web Configurator Main Screen	32
2.2.1 Navigation Panel	33
2.2.2 Main Window	34
Status	35
Device Information	37
3.1 Overview	37
3.2 The Device Info Screen	37
System Logs	39
4.1 Overview	39
4.2 The System Log Screen	39
Traffic Statistics	41
5.1 Overview	41
5.2 The Statistics Screen	41
Quick Start Wizard	43
Quick Start Wizard	45
6.1 Overview	45
6.2 Quick Start Wizard	45
Interface Setup	51
Internet Setup	53
7.1 Overview	53
7.1.1 What You Can Do in the Internet Screens	53
7.1.2 What You Need to Know About ADSL Internet Access	53
7.1.3 Before You Begin	54
7.2 The Internet Screen	55
7.2.1 Dynamic IP Address	56
7.2.2 Static IP Address	58
7.2.3 PPPoA/PPPoE	60
7.2.4 Bridge Mode	62
7.2.5 The PVCs Summary Screen	62
7.3 WAN Technical Reference	63
7.3.1 Encapsulation	63
7.3.2 Multiplexing	64
7.3.3 VPI and VCI	64
7.3.4 IP Address Assignment	64
7.3.5 Always-On Connection (PPP)	65
7.3.6 ATM QoS	65
7.3.7 ATM Traffic Classes	66
LAN Setup	67
8.1 Overview	67
8.1.1 What You Can Do in the LAN Screens	67
8.1.2 What You Need To Know About LAN	67
8.2 The LAN Screen	68
8.2.1 The DHCP IP Pool Summary Screen	70
8.3 LAN Technical Reference	71
8.3.1 LANs, WANs and the ZyXEL Device	71
8.3.2 DHCP Setup	71
8.3.3 DNS Server Addresses	72
8.3.4 LAN TCP/IP	72
8.3.5 RIP Setup	73
8.3.6 Multicast	74
Advanced Setup	75
Static Route	77
9.1 Overview	77
9.1.1 What You Can Do in the Static Route Screens	77
9.2 The Routing Table List Screen	78
9.2.1 The Static Route Screen	78
Network Address Translation (NAT)	81
10.1 Overview	81
10.1.1 What You Can Do in the NAT Screens	81
10.1.2 What You Need To Know About NAT	81
10.2 The NAT Screen	82
10.3 The DMZ Screen	83
10.4 The Virtual Server Screen	84
10.4.1 Configuring Servers Behind Port Forwarding (Example)	84
10.4.2 Configuring the Virtual Server Screen	85
10.5 The IP Address Mapping Screen	86
10.6 NAT Technical Reference	88
10.6.1 NAT Definitions	88
10.6.2 What NAT Does	89
10.6.3 How NAT Works	89
Quality of Service (QoS)	91
11.1 Overview	91
11.1.1 What You Can Do in the QoS Screens	92
11.1.2 What You Need to Know About QoS	92
11.2 The QoS Screen	93
11.2.1 The QoS Settings Summary Screen	95
11.3 QoS Technical Reference	96
11.3.1 IEEE 802.1p	96
11.3.2 IP Precedence	96
11.3.3 Automatic Priority Queue Assignment	97
ADSL	99
12.1 Overview	99
12.2 The ADSL Screen	99
Firewall	101
13.1 Overview	101
13.1.1 What You Can Do in the Firewall Screens	101
13.1.2 What You Need to Know About Firewall	101
13.2 The Firewall Screen	102
Access Management	103
Access Control	105
14.1 Access Control Overview	105
14.1.1 The Access Control Setup Screen	105
14.1.2 Access Control Interfaces	105
14.1.3 System Timeout	106
14.1.4 Configuring the Access Control Setup Screen	106
Filters	109
15.1 Overview	109
15.1.1 What You Can Do in the Filter Screens	109
15.1.2 What You Need to Know About Filtering	109
15.2 The IP/MAC Filter Screen	110
15.3 The Application Filter Screen	112
15.4 The URL Filter Screen	113
SNMP	115
16.1 Overview	115
16.1.1 Supported MIBs	116
16.2 The SNMP Screen	116
Universal Plug-and-Play (UPnP)	117
17.1 Overview	117
17.1.1 What You Can Do in the UPnP Screen	117
17.1.2 What You Need to Know About UPnP	117
17.2 The UPnP Screen	118
17.3 Installing UPnP in Windows Example	119
17.4 Using UPnP in Windows XP Example	122
Dynamic DNS Setup	129
18.1 Overview	129
18.1.1 What You Can Do in the DDNS Screen	129
18.1.2 What You Need To Know About DDNS	129
18.2 The Dynamic DNS Screen	130
CWMP	131
19.1 Overview	131
19.2 The CWMP Setup Screen	132
Maintenance	135
Administrator Settings	137
20.1 Overview	137
20.2 The Administrator Screen	137
Time Zone	139
21.1 Overview	139
21.2 The Time Zone Screen	139
Firmware	141
22.1 Overview	141
22.1.1 What You Need To Know About Firmware	141
22.1.2 Before You Begin	142
22.1.3 Firmware and Configuration Files Examples	142
22.2 The Firmware Screen	146
System Restart	149
23.1 Overview	149
23.2 The System Restart Screen	149
Diagnostic	151
24.1 Overview	151
24.2 The Diagnostic Screen	151
Troubleshooting and Product Specifications	153
Troubleshooting	155
25.1 Power, Hardware Connections, and LEDs	155
25.2 ZyXEL Device Access and Login	156
25.3 Internet Access	157
Product Specifications	159
26.1 Hardware Specifications	159
26.2 Firmware Specifications	159
26.3 Power Adaptor Specifications	162
Appendices and Index	165
Setting up Your Computer’s IP Address	167
Pop-up Windows, JavaScripts and Java Permissions	189
IP Addresses and Subnetting	197
Services	205
Legal Information	209

Match case Limit results 1 per page

P-660R-Tx v3s User’s Guide

101

HAPTER

Firewall

13.1

Overview

This chapter shows you how to enable the ZyXEL Device firewall. Use the firewall to protect

your ZyXEL Device and network from attacks by hackers on the Internet and control access to

it. By default the firewall:

•

allows traffic that originates from your LAN computers to go to all other networks.

•

blocks traffic that originates on other networks from going to the LAN.

•

blocks SYN and port scanner attacks.

By default, the ZyXEL Device blocks DDOS, LAND and Ping of Death attacks whether the

firewall is enabled or disabled.

13.1.1

What You Can Do in the Firewall Screens

Use the

Firewall

screen (

Section 13.2 on page 102

) to enable firewall and/or SPI on the

ZyXEL Device.

13.1.2

What You Need to Know About Firewall

SYN Attack

A SYN attack floods a targeted system with a series of SYN packets. Each packet causes the

targeted system to issue a SYN-ACK response. While the targeted system waits for the ACK

that follows the SYN-ACK, it queues up all outstanding SYN-ACK responses on a backlog

queue. SYN-ACKs are moved off the queue only when an ACK comes back or when an

internal timer terminates the three-way handshake. Once the queue is full, the system will

ignore all incoming SYN requests, making the system unavailable for legitimate users.

DoS

Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the

Internet. Their goal is not to steal information, but to disable a device or network so users no

longer have access to network resources. The ZyXEL Device is pre-configured to

automatically detect and thwart all known DoS attacks.

DDoS

A DDoS attack is one in which multiple compromised systems attack a single target, thereby

causing denial of service for users of the targeted system.