Home » ZyXEL Manuals » Networking » ZyXEL P-2024 » Manual Viewer

ZyXEL P-2024 User Guide - Page 107

Logs, 11.1 Logs Overview, 11.1.1 Alerts, 11.1.2 Syslog Logs, Alerts, Syslog Logs

Get ZyXEL P-2024 PDF manuals and user guides

View all ZyXEL P-2024 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 107 highlights

CHAPTER 11 Logs Use these screens to look at log entries and alerts and to configure the P-2024's log and alert settings. 11.1 Logs Overview For a list of log messages, see Section 11.3 on page 110. 11.1.1 Alerts An alert is a type of log that warrants more serious attention. Some categories such as System Errors consist of both logs and alerts. 11.1.2 Syslog Logs There are two types of syslog: event logs and traffic logs. The device generates an event log when a system event occurs, for example, when a user logs in or the device is under attack. The device generates a traffic log when a "session" is terminated. A traffic log summarizes the session's type, when it started and stopped the amount of traffic that was sent and received and so on. An external log analyzer can reconstruct and analyze the traffic flowing through the device after collecting the traffic logs. Table 41 Syslog Logs LOG MESSAGE DESCRIPTION Event Log: Mon dd hr:mm:ss hostname src="" dst="" msg="" note="" devID="" cat="" This message is sent by the system ("RAS" displays as the system name if you haven't configured one) when the router generates a syslog. The facility is defined in the Log Settings screen. The severity is the log's syslog class. The definition of messages and notes are defined in the various log charts throughout this chapter. The "devID" is the MAC address of the router's LAN port. The "cat" is the same as the category in the router's logs. Traffic Log: Mon dd hr:mm:ss hostname src="" dst="" msg="Traffic Log" note="Traffic Log" devID="" cat="Traffic Log" duration=seconds sent=sentBytes rcvd=receiveBytes dir="" protoID=IPProtocolID proto="serviceName" This message is sent by the device when the connection (session) is closed. The facility is defined in the Log Settings screen. The severity is the traffic log type. The message and note always display "Traffic Log". The "proto" field lists the service name. The "dir" field lists the incoming and outgoing interfaces ("LAN:LAN", "LAN:WAN", "LAN:DEV" for example). P-2024 User's Guide 107

Section	Page
User’s Guide	1
About This User's Guide	3
Document Conventions	4
Safety Warnings	6
Contents Overview	9
Table of Contents	11
List of Figures	17
List of Tables	21
Introduction and Wizard	25
Introducing the P-2024	27
1.1 Overview	27
1.2 Ways to Manage the P-2024	27
1.3 Good Habits for Managing the P-2024	28
1.4 Hardware	28
1.4.1 Ports	29
1.4.2 LEDs	29
1.4.3 Console Port	29
1.4.4 Digital Signal Processor Modules	30
1.5 Resetting the P-2024	31
Introducing the Web Configurator	33
2.1 Web Configurator Overview	33
2.2 Accessing the Web Configurator	33
2.3 Web Configurator Main Screen	35
2.3.1 Title Bar	35
2.3.2 Navigation Panel	36
2.3.3 Main Window	37
2.3.4 Status Bar	37
The Connection Wizard	39
3.1 Main Wizard Screen	39
3.1.1 Welcome	40
3.1.2 System Information	40
3.1.3 ISP Parameters	41
3.1.4 Your IP Address	43
3.1.5 WAN IP Address Assignment	43
3.1.6 Finish	46
Status Screens	47
4.1 Status Screen	47
4.2 Packet Statistics Window	50
4.3 VoIP Statistics Window	51
Network	55
WAN	57
5.1 WAN Overview	57
5.1.1 PPPoE Encapsulation	57
5.1.2 WAN IP Address Assignment	57
5.1.3 DNS Server Address Assignment	58
5.2 WAN Screens	58
5.2.1 WAN Internet Connection Screen (Ethernet)	58
5.2.2 WAN Internet Connection Screen (PPPoE)	59
5.2.3 WAN Advanced Screen	61
VoIP	63
SIP	65
6.1 SIP Overview	65
6.1.1 Introduction to VoIP	65
6.1.2 Introduction to SIP	65
6.1.3 SIP Identities	65
6.1.4 SIP Call Progression	66
6.1.5 SIP Client Server	66
6.1.6 RTP	68
6.1.7 NAT and SIP	68
6.1.8 Voice Coding	70
6.1.9 PSTN Call Setup Signaling	70
6.1.10 MWI (Message Waiting Indication)	71
6.1.11 Quality of Service (QoS)	71
6.2 SIP Screens	72
6.2.1 SIP Settings Screen	72
6.2.2 Advanced SIP Setup Screen	73
6.2.3 SIP QoS Screen	77
Phone	79
7.1 Analog Phone Overview	79
7.1.1 Voice Activity Detection/Silence Suppression/Comfort Noise	79
7.1.2 Echo Cancellation	79
7.1.3 Supplementary Phone Services Overview	79
7.2 Phone Screens	82
7.2.1 Analog Phone Screen	82
7.2.2 Advanced Analog Phone Setup Screen	83
7.2.3 Common Phone Settings Screen	84
7.2.4 Phone Region Screen	85
Phone Book	87
8.1 Incoming Call Policy Screen	87
Management	91
Remote Management	93
9.1 Remote Management Overview	93
9.1.1 Remote Management Limitations	93
9.1.2 System Timeout	94
9.2 Remote Management Screens	94
9.2.1 WWW Screen	94
9.2.2 Telnet Screen	94
9.2.3 FTP Screen	95
9.3 SNMP	96
9.3.1 Supported MIBs	97
9.3.2 SNMP Traps	97
9.3.3 Configuring SNMP	97
Maintenance, Troubleshooting and Specifications	99
System	101
10.1 General System Screen	101
10.2 Dynamic DNS	102
10.2.1 Dynamic DNS Screen	102
10.3 Time Setting Overview	104
10.3.1 Pre-defined NTP Time Servers List	104
10.3.2 Synchronizing with a Time Server	105
10.3.3 Time Settings Screen	105
Logs	107
11.1 Logs Overview	107
11.1.1 Alerts	107
11.1.2 Syslog Logs	107
11.2 Logs Screens	108
11.2.1 View Log Screen	108
11.2.2 Log Settings Screen	108
11.3 Log Message Descriptions	110
Tools	115
12.1 Firmware Screen	115
12.1.1 Firmware Upload Screens	116
12.2 Configuration Screen	117
12.2.1 Restore Configuration Screens	118
12.3 Restart Screen	119
Troubleshooting	121
13.1 Power, Hardware Connections, and LEDs	121
13.2 P-2024 Access and Login	122
13.3 Internet Access	123
13.4 Phone Calls and VoIP	124
Product Specifications	129
14.1 General P-2024 Specifications	129
14.2 Telco-50 Connector Pin Assignments	131
14.2.1 P-2024 Phone Port Pin Assignments	131
14.2.2 Telco-50 Cable Connector Pin Assignments	131
14.3 Console Port Pin Assignments	132
Appendices and Index	133
Setting up Your Computer’s IP Address	135
Pop-up Windows, JavaScripts and Java Permissions	151
Rack-mount Installation	157
IP Addresses and Subnetting	159
Command Interpreter	169
NetBIOS Filter Commands	173
Internal SPTGEN	175
Legal Information	191
Customer Support	195

Match case Limit results 1 per page

P-2024 User’s Guide

107

HAPTER

Logs

Use these screens to look at log entries and alerts and to configure the P-2024’s log and alert

settings.

11.1

Logs Overview

For a list of log messages, see

Section 11.3 on page 110

11.1.1

Alerts

An alert is a type of log that warrants more serious attention. Some categories such as

System

Errors

consist of both logs and alerts.

11.1.2

Syslog Logs

There are two types of syslog: event logs and traffic logs. The device generates an event log

when a system event occurs, for example, when a user logs in or the device is under attack.

The device generates a traffic log when a "session" is terminated. A traffic log summarizes the

session's type, when it started and stopped the amount of traffic that was sent and received and

so on.

An external log analyzer can reconstruct and analyze the traffic flowing through the

device after collecting the traffic logs.

Table 41

Syslog Logs

LOG MESSAGE

DESCRIPTION

Event Log: <Facility*8 + Severity>Mon

dd hr:mm:ss hostname

src="<srcIP:srcPort>"

dst="<dstIP:dstPort>" msg="<msg>"

note="<note>" devID="<mac address>"

cat="<category>"

This message is sent by the system ("RAS" displays as the

system name if you haven’t configured one) when the

router generates a syslog. The facility is defined in the

Log

Settings

screen. The severity is the log’s syslog class. The

definition of messages and notes are defined in the various

log charts throughout this chapter. The “devID” is the MAC

address of the router’s LAN port. The “cat” is the same as

the category in the router’s logs.

Traffic Log: <Facility*8 + Severity>Mon

dd hr:mm:ss hostname

src="<srcIP:srcPort>"

dst="<dstIP:dstPort>" msg="Traffic Log"

note="Traffic Log" devID="<mac

address>" cat="Traffic Log"

duration=seconds sent=sentBytes

rcvd=receiveBytes dir="<from:to>"

protoID=IPProtocolID

proto="serviceName"

This message is sent by the device when the connection

(session) is closed. The facility is defined in the Log

Settings screen. The severity is the traffic log type. The

message and note always display "Traffic Log". The "proto"

field lists the service name. The "dir" field lists the incoming

and outgoing interfaces ("LAN:LAN", "LAN:WAN",

"LAN:DEV" for example).