Home » ZyXEL Manuals » Networking » ZyXEL P-870MH-C1 » Manual Viewer

ZyXEL P-870MH-C1 User Guide - Page 137

MAC Address Filter, 10.3.3, User Authentication

Get ZyXEL P-870MH-C1 PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 137 highlights

Chapter 7 Wireless LAN This type of security is fairly weak, however, because there are ways for unauthorized wireless devices to get the SSID. In addition, unauthorized wireless devices can still see the information that is sent in the wireless network. 7.10.3.2 MAC Address Filter Every device that can use a wireless network has a unique identification number, called a MAC address.1 A MAC address is usually written using twelve hexadecimal characters2; for example, 00A0C5000002 or 00:A0:C5:00:00:02. To get the MAC address for each device in the wireless network, see the device's User's Guide or other documentation. You can use the MAC address filter to tell the Device which devices are allowed or not allowed to use the wireless network. If a device is allowed to use the wireless network, it still has to have the correct information (SSID, channel, and security). If a device is not allowed to use the wireless network, it does not matter if it has the correct information. This type of security does not protect the information that is sent in the wireless network. Furthermore, there are ways for unauthorized wireless devices to get the MAC address of an authorized device. Then, they can use that MAC address to use the wireless network. 7.10.3.3 User Authentication Authentication is the process of verifying whether a wireless device is allowed to use the wireless network. You can make every user log in to the wireless network before they can use it. However, every device in the wireless network has to support IEEE 802.1x to do this. For wireless networks, you can store the user names and passwords for each user in a RADIUS server. This is a server used in businesses more than in homes. If you do not have a RADIUS server, you cannot set up user names and passwords for your users. Unauthorized wireless devices can still see the information that is sent in the wireless network, even if they cannot use the wireless network. Furthermore, there are ways for unauthorized wireless users to get a valid user name and password. Then, they can use that user name and password to use the wireless network. 1. Some wireless devices, such as scanners, can detect wireless networks but cannot use wireless networks. These kinds of wireless devices might not have MAC addresses. 2. Hexadecimal characters are 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, A, B, C, D, E, and F. P-870HN-5xb User's Guide 137

Section	Page
P-870HN-5xb	1
About This User's Guide	3
Document Conventions	5
Safety Warnings	7
Contents Overview	9
Table of Contents	11
User’s Guide	19
Introducing the Device	21
1.1 Overview	21
1.2 Ways to Manage the Device	21
1.3 Good Habits for Managing the Device	22
1.4 Applications for the Device	22
1.4.1 Internet Access	22
1.5 LEDs (Lights)	24
1.6 The RESET Button	25
1.6.1 Using the Reset Button	26
1.7 The WPS WLAN Button	26
1.7.1 Turn the Wireless LAN Off or On	26
1.7.2 Activate WPS	26
Tutorials	27
2.1 How to Set up a Wireless Network	27
2.1.1 Example Parameters	27
2.1.2 Configuring the AP	27
2.1.3 Configuring the Wireless Client	31
2.2 How to Set up Multiple VDSL Connection Groups	38
2.2.1 Adding WAN Internet Connections	38
2.2.2 Setting Interface Groups	44
2.2.3 Configuring Interface Group IP	49
2.2.4 Testing the VDSL Connection Groups	50
Introducing the Web Configurator	51
3.1 Web Configurator Overview	51
3.1.1 Accessing the Web Configurator	51
3.2 Web Configurator Main Screen	53
3.2.1 Navigation Panel	54
3.2.2 Main Window	56
3.2.3 Status Bar	56
Technical Reference	57
Status Screens	59
4.1 Status Screen	59
4.1.1 WAN Service Statistics	63
4.1.2 Route Info	64
4.1.3 WLAN Station List	66
4.1.4 xDSL Statistics	67
4.1.5 LAN Statistics	70
4.1.6 Client List	71
WAN Setup	73
5.1 Overview	73
5.1.1 What You Can Do in this Chapter	73
5.2 What You Need to Know	74
5.3 Before You Begin	75
5.4 The Mode Screen	75
5.5 The Layer 2 Interface Screen	75
5.5.1 Layer 2 Interface Configuration	77
5.6 The Internet Connection Screen	80
5.6.1 WAN Connection Configuration	81
5.7 Technical Reference	95
LAN Setup	103
6.1 Overview	103
6.1.1 What You Can Do in this Chapter	103
6.2 What You Need To Know	104
6.3 The IP Screen	105
6.4 The DHCP Client List Screen	107
6.5 The IPv6 screen	109
6.6 Technical Reference	110
Wireless LAN	115
7.1 Overview	115
7.1.1 What You Can Do in this Chapter	115
7.2 What You Need to Know	116
7.3 Before You Begin	118
7.4 The General Screen	119
7.4.1 No Security	121
7.4.2 WEP Encryption	122
7.4.3 WPA(2)-PSK	123
7.4.4 WPA(2) Authentication	125
7.4.5 MAC Filter	126
7.4.6 Adding a New MAC Filtering Rule	127
7.5 The More AP Screen	128
7.5.1 More AP Edit	129
7.6 The WPS Screen	129
7.7 The WPS Station Screen	130
7.8 The WDS Screen	131
7.9 The Advanced Setup Screen	133
7.10 Technical Reference	135
7.10.1 Wireless Network Overview	135
7.10.2 Additional Wireless Terms	136
7.10.3 Wireless Security Overview	136
7.10.4 WiFi Protected Setup	139
Network Address Translation (NAT)	147
8.1 Overview	147
8.1.1 What You Can Do in this Chapter	147
8.2 What You Need to Know	147
8.3 The Port Forwarding Screen	148
8.3.1 The Port Forwarding Edit Screen	150
8.4 The Trigger Port Screen	151
8.4.1 Trigger Port Configuration	154
8.5 The DMZ Host Screen	156
8.6 The ALG Screen	156
8.7 Technical Reference	157
MAC Filter	159
9.1 Overview	159
9.1.1 What You Can Do in this Chapter	159
9.2 The MAC Filter Screen	160
9.2.1 Creating MAC Filtering Rules	161
Firewall	163
10.1 Overview	163
10.1.1 What You Can Do in this Chapter	163
10.2 What You Need to Know	163
10.3 The Firewall Screen	164
10.3.1 Creating Incoming Firewall Rules	166
Certificate	169
11.1 Overview	169
11.1.1 What You Can Do in this Chapter	169
11.2 What You Need to Know	169
11.3 The Local Certificates Screen	170
11.3.1 Create Certificate Request	171
11.3.2 Import Certificate	172
11.3.3 Certificate Details	174
11.3.4 Load Signed Certificate	176
11.4 The Trusted CA Screen	177
11.4.1 View Trusted CA Certificate	179
11.4.2 Import Trusted CA Certificate	180
Static Route	181
12.1 Overview	181
12.1.1 What You Can Do in this Chapter	181
12.2 The Static Route Screen	182
12.2.1 Static Route Edit	183
Policy Forwarding	185
13.1 Overview	185
13.1.1 What You Can Do in this Chapter	185
13.2 The Policy Forwarding Screen	185
13.2.1 Policy Forwarding Setup	186
DNS Route	189
14.1 Overview	189
14.1.1 What You Can Do in this Chapter	189
14.2 The DNS Route Screen	189
14.2.1 DNS Route Setup	190
RIP	191
15.1 Overview	191
15.1.1 What You Can Do in this Chapter	191
15.2 The RIP Screen	191
Quality of Service (QoS)	193
16.1 Overview	193
16.1.1 What You Can Do in this Chapter	193
16.2 What You Need to Know	194
16.3 The Quality of Service General Screen	195
16.4 The Queue Setup Screen	197
16.4.1 Adding a QoS Queue	199
16.5 The Class Setup Screen	200
16.5.1 QoS Class Edit	202
16.6 The Policer Setup Screen	206
16.6.1 Adding a QoS Policer	207
16.7 The QoS Monitor Screen	209
16.8 Technical Reference	210
Dynamic DNS Setup	217
17.1 Overview	217
17.1.1 What You Can Do in this Chapter	217
17.2 What You Need To Know	217
17.3 The Dynamic DNS Screen	218
Remote Management	221
18.1 Overview	221
18.1.1 What You Can Do in this Chapter	221
18.2 The TR-069 Screen	221
18.3 The TR-064 Screen	223
18.4 The Service Control Screen	224
18.5 The IP Address Screen	225
18.5.1 Adding an IP Address	226
Universal Plug-and-Play (UPnP)	227
19.1 Overview	227
19.1.1 What You Can Do in this Chapter	227
19.2 What You Need to Know	227
19.3 The UPnP Screen	228
19.4 Installing UPnP in Windows Example	229
19.5 Using UPnP in Windows XP Example	233
Parental Control	241
20.1 Overview	241
20.1.1 What You Can Do in this Chapter	241
20.2 The Time Restriction Screen	241
20.2.1 Adding a Schedule	242
20.3 The URL Filter Screen	243
20.3.1 Adding URL Filter	244
Interface Group	245
21.1 Overview	245
21.1.1 What You Can Do in this Chapter	245
21.2 The Interface Group Screen	245
21.2.1 Interface Group Configuration	247
21.2.2 Interface Grouping Criteria	249
Captive Portal	251
22.1 Overview	251
22.1.1 What You Can Do in this Chapter	251
22.2 The DNS Route Screen	251
System Settings	253
23.1 Overview	253
23.1.1 What You Can Do in this Chapter	253
23.2 The General Screen	253
23.3 The Time Setting Screen	255
Logs	259
24.1 Overview	259
24.1.1 What You Can Do in this Chapter	259
24.2 The View Log Screen	259
24.3 The Log Settings Screen	260
Tools	263
25.1 Overview	263
25.1.1 What You Can Do in this Chapter	263
25.2 The Firmware Screen	264
25.3 The Configuration Screen	266
25.4 The Restart Screen	268
Diagnostic	269
26.1 Overview	269
26.1.1 What You Can Do in this Chapter	269
26.2 What You Need to Know	269
26.3 The General Diagnostic Screen	270
26.4 The following table describes the fields in this screen.The 802.1ag Screen	271
26.5 The OAM Ping Test Screen	273
Troubleshooting	275
27.1 Power, Hardware Connections, and LEDs	275
27.2 Device Access and Login	276
27.3 Internet Access	277
27.4 Wireless LAN Troubleshooting	279
Product Specifications	281
28.1 Hardware Specifications	281
28.2 Firmware Specifications	281
28.3 Wireless Features	285
Setting Up Your Computer’s IP Address	287
Pop-up Windows, JavaScripts and Java Permissions	317
IP Addresses and Subnetting	327
Wireless LANs	339
IPv6	355
Common Services	367
Open Software Announcements	371
Legal Information	391