Home » ZyXEL Manuals » Networking » ZyXEL P-334W » Manual Viewer

ZyXEL P-334W User Guide - Page 170

Cautions with UPnP, UPnP and ZyXEL, Configuring UPnP

Get ZyXEL P-334W PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 170 highlights

Prestige 334W User's Guide 12.1.3 Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and opening firewall ports may present network security issues. Network information and configuration may also be obtained and modified by users in some network environments. All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. 12.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum Creates UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports IGD 1.0 (Internet Gateway Device). At the time of writing ZyXEL's UPnP implementation supports Windows Messenger 4.6 and 4.7 while Windows Messenger 5.0 and Xbox are still being tested. UPnP broadcasts are only allowed on the LAN. Please see later in this User's Guide for examples of installing UPnP in Windows XP and Windows Me as well as an example of using UPnP in Windows. 12.3 Configuring UPnP Click UPnP to display the screen shown next. 12-2 UPnP

Section	Page
Copyright	3
Federal Communications Commission (FCC) Interference Statement	4
Information for Canadian Users	5
ZyXEL Limited Warranty	7
Customer Support	8
Table of Contents	10
List of Figures	22
List of Tables	28
Preface	32
Part1.pdf	35
Prestige Internet Security Gateway Overview	35
Prestige Features	35
Physical Features	35
Non-Physical Features	36
Applications for the Prestige	39
Secure Broadband Internet Access via Cable or DSL Modem	40
VPN Application	40
Internet Access Application	41
Introducing the Web Configurator	43
Web Configurator Overview	43
Accessing the Prestige Web Configurator	43
Resetting the Prestige	44
Procedure To Use The Reset Button	44
Navigation Panel	45
Wizard Setup	49
Wizard Setup Overview	49
Wizard Setup: General Setup and System Name	49
Domain Name	49
Wizard Setup: Screen 2	50
Wizard Setup: Screen 3	51
Wizard Setup: Screen 4	53
Ethernet	53
PPPoE Encapsulation	55
PPTP Encapsulation	57
Wizard Setup: Screen 5	58
WAN IP Address Assignment	58
IP Address and Subnet Mask	59
DNS Server Address Assignment	59
WAN MAC Address	60
Basic Setup Complete	62
Media Bandwidth Management Setup	65
Media Bandwidth Management Setup Overview	65
Media Bandwidth Management Setup 1	65
Media Bandwidth Management Setup 2	66
Media Bandwidth Management Setup 3:	67
Media Bandwidth Management Setup Complete	68
Part2.pdf	71
System Overview	71
Configuring General Setup	71
Dynamic DNS	73
DynDNS Wildcard	73
Configuring Dynamic DNS	73
Configuring Password	75
Configuring Time Zone	76
LAN Screens	79
LAN Overview	79
DHCP Setup	79
IP Pool Setup	79
System DNS Servers	79
LAN TCP/IP	79
Factory LAN Defaults	79
IP Address and Subnet Mask	80
RIP Setup	80
Multicast	80
Any IP	81
How Any IP Works	82
Configuring IP	82
Configuring Static DHCP	86
Configuring IP Alias	87
Wireless Configuration and Roaming	89
Wireless LAN Overview	89
IBSS	89
BSS	89
ESS	90
Wireless LAN Basics	91
RTS/CTS	91
Fragmentation Threshold	92
Configuring Wireless	93
Configuring Roaming	94
Requirements for Roaming	96
Wireless Security	99
Wireless Security Overview	99
Security Parameters Summary	101
WEP Overview	102
Data Encryption	102
Authentication	102
Preamble Type	104
Configuring WEP Encryption	104
Introduction to WPA	106
User Authentication	107
Encryption	107
WPA-PSK Application Example	107
Configuring WPA-PSK Authentication	108
Wireless Client WPA Supplicants	111
WPA with RADIUS Application Example	111
Configuring WPA Authentication	112
802.1x Overview	114
Dynamic WEP Key Exchange	115
Configuring 802.1x and Dynamic WEP Key Exchange	115
Configuring 802.1x and Static WEP Key Exchange	117
Configuring 802.1x	121
MAC Filter	123
Introduction to Local User Database	125
Configuring Local User Database	126
Introduction to RADIUS	127
EAP Authentication Overview	128
Configuring RADIUS	129
WAN Screens	131
WAN Overview	131
TCP/IP Priority (Metric)	131
Configuring Route	131
Configuring WAN ISP	132
Ethernet Encapsulation	132
PPPoE Encapsulation	134
PPTP Encapsulation	136
Configuring WAN IP	137
Configuring WAN MAC	141
Traffic Redirect	142
Configuring Traffic Redirect	143
Part3.pdf	147
NAT Overview	147
NAT Definitions	147
What NAT Does	148
How NAT Works	148
NAT Application	149
NAT Mapping Types	150
Using NAT	152
SUA (Single User Account) Versus NAT	152
SUA Server	152
Port Forwarding: Services and Port Numbers	152
Configuring Servers Behind SUA (Example)	153
Configuring SUA Server	154
Configuring Address Mapping	156
Trigger Port Forwarding	159
Trigger Port Forwarding Example	160
Two Points To Remember About Trigger Ports	160
Configuring Trigger Port Forwarding	160
Static Route Screens	163
Static Route Overview	163
Configuring IP Static Route	163
Configuring Route Entry	164
Part4.pdf	169
Universal Plug and Play Overview	169
How Do I Know If I'm Using UPnP?	169
NAT Traversal	169
Cautions with UPnP	170
UPnP and ZyXEL	170
Configuring UPnP	170
Installing UPnP in Windows Example	172
Installing UPnP in Windows Me	172
Installing UPnP in Windows XP	172
Using UPnP in Windows XP Example	174
Auto-discover Your UPnP-enabled Network Device	174
Web Configurator Easy Access	176
Firewall	179
Introduction	179
Guidelines For Enhancing Security With Your Firewall	180
Firewall Settings Screen	181
The Firewall, NAT and Remote Management	183
LAN-to-WAN rules	183
WAN-to-LAN rules	183
Configuring Content Filtering	184
Services	186
Part5.pdf	191
Remote Management Overview	191
Remote Management Limitations	192
Remote Management and NAT	192
System Timeout	192
Configuring WWW	192
Configuring Telnet	194
Configuring TELNET	194
Configuring FTP	196
SNMP	197
Supported MIBs	199
SNMP Traps	199
Configuring SNMP	200
Configuring DNS	201
Configuring Security	203
Introduction to IPSec	205
VPN Overview	205
IPSec	205
Security Association	205
Other Terminology	205
VPN Applications	206
IPSec Architecture	207
IPSec Algorithms	207
Key Management	208
Encapsulation	208
Transport Mode	208
Tunnel Mode	208
IPSec and NAT	209
VPN Screens	211
VPN/IPSec Overview	211
IPSec Algorithms	211
AH (Authentication Header) Protocol	211
ESP (Encapsulating Security Payload) Protocol	212
My IP Address	212
Secure Gateway Address	212
Dynamic Secure Gateway Address	213
Summary Screen	213
Keep Alive	215
NAT Traversal	216
NAT Traversal Configuration	216
Remote DNS Server	217
ID Type and Content	218
ID Type and Content Examples	219
Pre-Shared Key	220
Editing VPN Rules	220
IKE Phases	225
Negotiation Mode	227
Diffie-Hellman (DH) Key Groups	227
Perfect Forward Secrecy (PFS)	228
Configuring Advanced IKE Settings	228
Manual Key Setup	235
Security Parameter Index (SPI)	235
Configuring Manual Key	236
Viewing SA Monitor	240
Configuring Global Setting	242
Telecommuter VPN/IPSec Examples	243
Telecommuters Sharing One VPN Rule Example	243
Telecommuters Using Unique VPN Rules Example	244
VPN and Remote Management	246
Part6.pdf	283
SMT Introduction	283
Procedure for SMT Configuration via Console Port	283
Procedure for SMT Configuration via Telnet	283
Entering Password	283
Prestige SMT Menu Overview	284
Navigating the SMT Interface	285
System Management Terminal Interface Summary	287
Changing the System Password	288
Menu 1 General Setup	289
General Setup	289
Procedure To Configure Menu 1	289
Procedure to Configure Dynamic DNS	291
Menu 2 WAN Setup	295
Introduction to WAN	295
WAN Setup	295
Menu 3 LAN Setup	297
LAN Setup	297
General Ethernet Setup	297
Protocol Dependent Ethernet Setup	298
TCP/IP Ethernet Setup and DHCP	298
IP Alias Setup	300
Wireless LAN Setup	302
Configuring MAC Address Filter	305
Configuring Roaming on the Prestige	307
Internet Access	309
Introduction to Internet Access Setup	309
Ethernet Encapsulation	309
Configuring the PPTP Client	311
Configuring the PPPoE Client	312
Basic Setup Complete	313
Remote Node Configuration	315
Introduction to Remote Node Setup	315
Remote Node Profile Setup	315
Ethernet Encapsulation	315
PPPoE Encapsulation	318
PPTP Encapsulation	320
Edit IP	321
Remote Node Filter	323
Traffic Redirect Setup	324
Static Route Setup	327
IP Static Route Setup	327
Dial-in User Setup	331
Dial-in User Setup	331
Network Address Translation (NAT)	333
Using NAT	333
SUA (Single User Account) Versus NAT	333
Applying NAT	333
NAT Setup	335
Address Mapping Sets	336
Configuring a Server behind NAT	341
General NAT Examples	342
Example 1: Internet Access Only	342
Example 2: Internet Access with an Inside Server	343
Example 3: Multiple Public IP Addresses With Inside Servers	344
Example 4: NAT Unfriendly Application Programs	348
Configuring Trigger Port Forwarding	350
Enabling the Firewall	353
Remote Management and the Firewall	353
Access Methods	353
Enabling the Firewall	353
Part8.pdf	357
Introduction to Filters	357
The Filter Structure of the Prestige	358
Configuring a Filter Set	360
Configuring a Filter Rule	362
Configuring a TCP/IP Filter Rule	362
Configuring a Generic Filter Rule	367
Example Filter	369
Filter Types and NAT	371
Firewall Versus Filters	372
Applying a Filter	372
Applying LAN Filters	373
Applying Remote Node Filters	373
SNMP Configuration	375
About SNMP	375
Supported MIBs	376
SNMP Configuration	376
SNMP Traps	378
System Security	379
System Security	379
System Password	379
Configuring External RADIUS Server	379
802.1x	381
System Information and Diagnosis	385
System Status	385
System Information	387
System Information	387
Console Port Speed	388
Log and Trace	389
Syslog Logging	389
Call-Triggering Packet	392
Diagnostic	393
WAN DHCP	394
Firmware and Configuration File Maintenance	397
Filename Conventions	397
Backup Configuration	398
Backup Configuration	399
Using the FTP Command from the Command Line	399
Example of FTP Commands from the Command Line	400
GUI-based FTP Clients	400
TFTP and FTP over WAN Management Limitations	400
Backup Configuration Using TFTP	401
TFTP Command Example	401
GUI-based TFTP Clients	402
Restore Configuration	402
Restore Using FTP	403
Restore Using FTP Session Example	404
Uploading Firmware and Configuration Files	404
Firmware File Upload	404
Configuration File Upload	405
FTP File Upload Command from the DOS Prompt Example	406
FTP Session Example of Firmware File Upload	406
TFTP File Upload	406
TFTP Upload Command Example	407
System Maintenance	409
Command Interpreter Mode	409
Command Syntax	409
Command Usage	410
Call Control Support	410
Budget Management	411
Call History	412
Time and Date Setting	412
Resetting the Time	414
Remote Management	417
Remote Management	417
Remote Management Limitations	418
Call Scheduling	419
Introduction to Call Scheduling	419
Part9.pdf	425
VPN/IPSec Overview	425
IPSec Summary Screen	426
IPSec Setup	429
IKE Setup	434
Manual Setup	437
Active Protocol	437
Security Parameter Index (SPI)	437
SA Monitor	441
SA Monitor Overview	441
Using SA Monitor	441
Part10.pdf	445
PPTP	449
NetBIOS Filter Commands	453
Log Descriptions	457
Setting up Your Computer’s IP Address	461
Wireless LAN and IEEE 802.11	475
Wireless LAN With IEEE 802.1x	479
Types of EAP Authentication	481
Antenna Selection and Positioning Recommendation	483
Brute-Force Password Guessing Protection	485
Triangle Route	487
Index	491