ZyXEL Communications P-793H V2

P-793H v2

G.SHDSL.bis Bonded Broadband Gateway

Support Notes

Version 3.70

02/2010

P-793H v2 Support Notes

FAQ............................................................................................................................... 4

ZyNOS FAQ

......................................................

1. What isZyNOS?...................................................................................4

2. How do I accessthe P-793H v2 SMT menu?....................................4

3. How do I uploadthe ZyNOS firmware code via console?............... 4

4. How do I upgrade/backup the ZyNOS firmware by using TFTP

client programvia LAN?..........................................................................4

6. How do I restore P-793Hv2 configurationsby using TFTP client

program via LAN?.................................................................................. 5

7. What should I doif I forget the system password?......................... 5

8. How to use the Reset button?.......................................................... 5

9. What isSUA? Whenshould I use SUA?........................................... 6

10. What isthe difference between SUAand FullFeature NAT?........ 6

11. Is it possible to accessa server runningbehind SUA from the

outside Internet?Ifpossible,how?....................................................... 7

12. When do I needto select Full Feature NAT?.................................. 7

13. What IP/Port mapping doesMulti-NAT support?........................... 7

14. How many network userscanthe SUA/NAT support?.................. 8

15. What are Device filtersand Protocol filters?.................................. 9

16. How can I protect against IP spoofing attacks? ............................ 9

Product FAQ

....................................................

1. What isSHDSL, SHDSL.bis? ........................................................... 11

2. How can I manage P-793H v2?........................................................ 11

3. What isthe default password for Web Configurator?................... 11

4. What‟s the difference between „Common User Account‟ and

„Administrator Account‟?..................................................................... 11

5. How do I know the P-793H v2's WANIP address assigned by the ISP?

................................................................................................................ 11

6. What do I need before using the SHDSL?....................................... 12

7. What should I dowhen the power(PWR) LED isoff?.................... 12

8. How to debugwhile DSL LED isoff?............................................... 12

9. How do I verify my PC'sIP addressassigned by the P-793H v2?.. 12

10. What isTraffic Shaping?................................................................. 12

11. What do the parameters(PCR, SCR, MBS) mean?....................... 12

12. What do ATM QoSTypes(CBR, UBR, VBR-nRT, VBR-RT) mean?

................................................................................................................ 13

13. Why do we performtraffic shapingin the P-793H v2?................. 13

14. The P-793H v2 supportsBridge and Router mode, what'sthe

difference betweenthem?.................................................................... 14

15. How do I know I am using PPPoE?............................................... 14

16. Why doesmy provider use PPPoE?............................................. 14

17. What isDDNS?................................................................................. 14

18. When do I needDDNS service?....................................................... 15

P-793H v2 Support Notes

19. What is DDNS wildcard? Does the P-793H v2support DDNS wildcard?

................................................................................................................ 15

20. Can the P-793H v2'sSUA handleIPSec packetssent by the IPSec

gateway?............................................................................................... 15

21. How do I setup my P-793H v2 for routing IPSec packetsover SUA?

................................................................................................................ 15

22. What isVLAN?................................................................................ 16

23. 802.1Q/1P.......................................................................................... 16

24. What isTraffic Redirect ?................................................................ 17

25. What isDial Backup?...................................................................... 17

DSL FAQ

........................................................

1. How doesDSL compare to Cable modems?................................... 17

2. How do I know the DSL line isup? .................................................. 18

3. How doesthe P-793H v2 work on a noisy DSL?............................ 18

4. Doesthe VC-based multiplexing performbetter than the LLC-based

multiplexing?.......................................................................................... 18

5. How do I know the detailsof my DSL line statistics? .................... 18

6. What are the signalingpinsof the DSLconnector?....................... 19

7. What istriple play?........................................................................... 19

Firewall FAQ

....................................................

General................................................................................................... 20

Configuration........................................................................................ 23

Log and Alert......................................................................................... 26

IPSec FAQ

......................................................

VPN Overview ....................................................................................... 28

P-793H v2 VPN...................................................................................... 32

Application Notes.................................................................................................... 38

General Application Notes

.......................................

1. Internet AccessUsing P-793H v2 under Bridge mode................... 38

2. Internet AccessUsing P-793H v2 under Routingmode................. 40

3. Internet Accessscenarios................................................................ 42

4. Back to back scenarios..................................................................... 43

5. What isthe checklist for making a 1-1 Back-to-Back connection

over P-793H v2?...................................................................................... 44

6. What isthe checklist for making a 1-2 Back-to-Back connection

over P-793H v2?...................................................................................... 45

7. Setup the P-793H v2 asa DHCP Relay............................................... 45

8. SUA Notes.......................................................................................... 46

9. Using Full Feature NAT....................................................................... 55

10. Using the Dynamic DNS (DDNS) ..................................................... 63

11. Network Management Using SNMP ................................................ 65

12. Using syslog .................................................................................... 68

13. Using IP Alias.................................................................................... 68

14. Using IP Policy Routing................................................................... 71

P-793H v2 Support Notes

15. Using Call Scheduling.................................................................... 73

16. Using IP Multicast............................................................................. 75

17. Using Bandwidth Management....................................................... 76

18. How to configure packet filteron P-793H v2?.............................. 79

19. How could I configure triple play on P-793H v2?......................... 79

20. How to setup traffic redirect in P-793H v2?.................................. 80

21. How to deal with Triangle Route and Traffic redirect?.................. 82

22. How to setup Dial Backup?............................................................ 85

IPSEC VPNApplicationNotes

....................................

1. How to use P-793H v2 to build VPN Tunnel withanother VPN

Gateway/ Software?.............................................................................. 86

2. How to build a VPN between Secure Gateway with Dynamic WAN

IP Address?........................................................................................... 92

3. Configure NAT for internal servers................................................. 94

4. VPNRouting between BranchOffice through Headquarter.......... 95

Support Tool

....................................................

1. LAN/WAN Packet Trace.................................................................... 99

2. Firmware/ConfigurationsUploadingand Downloading using TFTP

.............................................................................................................. 103

3. Using FTP to Upload the Firmware and ConfigurationFiles...... 106

CI Command Reference

.........................................

109

Reference

......................................................

1 10

1. PPP Numbers.................................................................................. 110

2. Port Numbers.................................................................................. 122

3. Protocol Numbers........................................................................... 126

P-793H v2 Support Notes

FAQ

ZyNOS FAQ

1. What isZyNOS?

ZyNOS is ZyXEL's proprietary Network Operating System. It is the platform on

all P-793Hv2 routers that delivers network services and applications. It is

designed ina modular fashion soit iseasy fordevelopers toadd new features.

NewZyNOS software upgrades can be easily downloaded from our FTP sites

as they become available.

2. How do I accessthe P-793Hv2 SMT menu?

The SMTinterface is a menudriveninterface, which can beaccessedvia a

RS232 console or a Telnet connection. To access the P-793Hv2 via SMT

console port, a computerequipped with communication software such as

HyperTerminal must be configuredto the following parameters.



VT100 terminal emulation



9600bps baud rate



N81data format (No Parity, 8 data bits, 1stopbit)

The default consoleport baudrate is 9600bps, you canchangeit to 115200bps

inMenu 24.2.2 tospeedupaccessoftheSMT.

3. How do I uploadthe ZyNOS firmware code via console?

The procedure for uploading via console is as follows.

(1) Enterdebug mode when poweringonthe P-793H v2 using a

terminal emulator

(2) Enter'ATUR' tostart the uploading

(3) Use X-modem protocol to transfer the ZyNOS code

(4) Enter'ATGO'to restart the P-793H v2

4. How do I upgrade/backup the ZyNOS firmware by using TFTPclient

program via LAN?

The P-793H v2 allows you totransfer the firmware from/toP-793Hv2 by using

TFTP program via LAN. The procedureforuploadingvia TFTP is as follows.

P-793H v2 Support Notes

(1) Use the TELNETclient program in your PC tologin to yourP-793Hv2,

and use Menu 24.8 toenterCI command 'sys stdio 0'to disable

console idletimeout

(2) To upgradefirmware, useTFTP client program toput firmware infile

'ras' in the P-793Hv2. Afterdata transfer is finished, the P-793H v2

will program the upgraded firmware into FLASH ROM and reboot

itself.

(3) To backupyourfirmware, use theTFTP client program to get file 'ras'

from the P-793H v2.

5. How do I uploadROMFILE via console port?

In some situations,you mayneed toupload the ROMFILE, such as losing the

system password, orthe need ofresettingSMTto factorydefault.

The procedurefor uploading via the consoleport is as follows.

(1) Enterdebug mode when poweringonthe P-793H v2 using a

terminal emulator

(2) Enter'ATLC' tostart the uploading

(3) Use X-modem protocol totransfer ROMFILE

(4) Enter'ATGO'to restart the P-793H v2

6. How do I restore P-793H v2 configurationsby using TFTP client

program via LAN?

(1) Use the TELNETclient program in your PCtologin toyourP-793Hv2.

(2) Enter CI command 'sys stdio 0' disable Stdioidle timeout

(3) To backupthe P-793Hv2 configurations, use TFTP client program to

get file 'rom-0' from the P-793Hv2.

(4) To restore theP-793Hv2 configurations, use theTFTP client program to

put your configuration infile rom-0 inthe P-793H v2.

7. What should I doif I forget the system password?

In case you forget the systempassword, you can erase the current

configuration and restore factory defaults thisway:

Use the RESET button on the rear panel of P-793Hv2 toreset the router.

After the routeris reset, the LAN IP address willbereset to'192.168.1.1', the

common user password will be resetto'user', theAdministratorpasswordwill

be reset to „1234‟.

8. How to use the Reset button?

(1) Turn your P-793Hv2 on. Make surethe POWER led is on (not blinking)

P-793H v2 Support Notes

(2) Press the RESET buttonfor longerthan one secondandshorterthan

five seconds andrelease it.Ifthe POWER LED beginstoblink, the P-

793H v2‟s wireless auto security function-OTIST has been enabled.

(3) Press the RESET buttonfor six secondsandrelease it. Ifthe POWER

LEDbegins toblink, the default configuration has been restored and the

P-793Hv2 restarts.

9. What isSUA? Whenshould I use SUA?

SUA (Single User Account) is a unique feature supported by P-793H v2

router which allows multiple people to access Internet concurrently for the

cost ofa single useraccount.

When P-793Hv2 acts as SUAreceives a packetfrom alocal client destined

for theoutsideInternet, it replacesthesource address inthe IP packetheader

with its ownaddress and thesource port inthe TCP or UDP header with

another value chosenout ofa local pool. It then recomputes the appropriate

header checksums and forwards thepacket to the Internet as if it is originated

from P-793H v2 using the IP address assigned by ISP. When reply packets

from the external Internet are received by P-793H v2, the original IP source

address and TCP/UDP source port numbers are written into the destination

fields of the packet (since it is now moving in the opposite direction), the

checksums are recomputed, and the packet is delivered to its true destination.

This is because SUA keeps atable of the IP addresses and port numbers of

the local systems currently using it.

10. What isthe difference betweenSUA and Full Feature NAT?

When you edit a remote node inWeb Configurator, AdvancedSetup, Network ->

Remote Node -> Edit, there will bethreeoptionsforyou:



None



SUA Only



Full Feature

SUA (Single UserAccount) in previous ZyNOS versions is a NATset with 2

rules: Many-to-One and Server.With SUA, 'visible' servers had to be mapped

to different ports, since theservers share only one global IP.

The P-793H v2 now has Full Feature NAT which supports five types of

IP/Port mapping: One to One, Many to One, Many to Many Overload, Many

to Many No Overload and Server. You can make special application when

you select Full Feature NAT. For example: With multiple global IP

addresses, multiple severs using thesame port (e.g., FTP servers using port

21/20) are allowed on the LAN for outside access.

P-793H v2 Support Notes

The P-793Hv2 supports NATsetson a remote node basis. They are reusable,

but only one set is allowed for each remote node. The P-793H v2 supports 8

sets since thereare 8 remotenodes.

By factory default, theNATis select asSUA in Web Configurator, Advanced

Setup, Network -> NAT -> General -> NAT Setup.

11. Isitpossible to accessa server runningbehind SUA from the outside

Internet?Ifpossible,how?

Yes, it is possible because P-793Hv2 delivers the packet tothe local server by

looking up toa SUA server table. Therefore, to make alocal serveraccessible

tothe outside users, the port number and the inside IP address ofthe server

must beconfigured. (Youcan configureit in Web Configurator, Advanced

Setup, Network -> NAT -> Port Forwarding).

12. When do I needto selectFull FeatureNAT



Make multiple localservers on theLAN accessible from outsidewith

multiple global IP addresses

With SUA, 'visible'servers had tobe mapped todifferent ports, sincethe

servers share only one global IP. But when youselect Full Feature, you can

make multiple localservers (mapping the same port or not) ontheLAN

accessible from outside with multiple global IP addresses.



Support Non-NATFriendly Applications

Someservers providing Internet applications suchas some MIRCservers do

not allow users tologin using the same IP address. Thus, users on the same

network can not login to the same server simultaneously. In this case it is

betterto use Many-to-Many No Overload or One-to-One NATmapping types,

thus each user login tothe server using a unique global IP address.

13. What IP/Port mapping doesMulti-NAT support?

Multi-NATsupports fivetypes ofIP/port mapping:One toOne, ManytoOne,

Many toMany Overload, Many toManyNo Overload andServer. The details

of themapping betweenILA and IGA are described as below. Here we define

the local IP addresses as the Internal Local Addresses (ILA) and the global IP

addresses as the Inside Global Address (IGA),



One to One: In One-to-One mode,the P-793Hv2 maps one ILA to one

IGA.

P-793H v2 Support Notes



Many to One: InMany-to-One mode, the P-793Hv2 maps multiple ILA

toone IGA. This is equivalent toSUA (i.e., PAT, port address

translation), ZyXEL's Single UserAccount feature thatprevious ZyNOS

routers supported(the SUA is optional in today's P-793Hv2 routers).



Many to Many Overload: In Many-to-Many Overload mode, the

P-793Hv2 maps multiple ILA toshared IGA.



Many One-to-One: InMany One-to-Onemode, the P-793H v2 maps

each ILA tounique IGA.



Server: In Server mode, the P-793H v2 maps multiple inside servers

to one global IP address. This allows us to specify multiple servers of

different types behind the NATfor outside access. Note,ifyou want to

map each server to one unique IGA please use the One-to-Onemode.

The following table summarizesthe five types.

NAT Type

IP Mapping

One-to-One

ILA1<--->IGA1

Many-to-One

(SUA/PAT)

ILA1<--->IGA1

ILA2<--->IGA1

...

Many-to-Many

Overload

ILA1<--->IGA1

ILA2<--->IGA2

ILA3<--->IGA1

ILA4<--->IGA2

...

Many

One-to-One

ILA1<--->IGA1

ILA2<--->IGA2

ILA3<--->IGA3

ILA4<--->IGA4

...

Server

Server 1 IP<--->IGA1

Server 2 IP<--->IGA1

14. How manynetwork userscan the SUA/NAT support?

The P-793Hv2 does not limit the number ofthe users but thenumber ofthe

NATsessions. The P-793H v2 supports 2048 sessions thatyou can use the 'ip

nat session' command inCLItosee. You can also use „ip nat hashTable

wanif0‟toview the current active NATsessions.Oryoucan checkit in below

WEB Configurator.

P-793H v2 Support Notes

15. What are Device filtersand Protocol filters?

In ZyNOS, the filters have been separated into two groups.One group is called

'device filter group', and theotheris called'protocol filtergroup'. Generic

filters belong to the 'device filter group', TCP/IP and IPXfilters belong tothe

'protocol filter group'. Youcan configure the filter rule inSMT.

Note: In ZyNOS, you can not mix different filter groups in the same filter set.

16. How can I protect against IP spoofing attacks?

The P-793Hv2's filter sets provide a means toprotect againstIP spoofing

attacks.The basic scheme is as follows:

Forthe input data filter:



Deny packets from theoutsidethat claim to befrom theinside



Alloweverything that is not spoofing us

Filter rule setup:



Filtertype =TCP/IP Filter Rule



Active =Yes



Source IP Addr =a.b.c.d



Source IP Mask =w.x.y.z



Action Matched =Drop



Action Not Matched =Forward

Where a.b.c.d isan IP address on yourlocalnetwork and w.x.y.z isyour

netmask:

Forthe output data filters:



Deny bounce back packet

Inhaltsverzeichnis

Andere ZyXEL Communications Tor Handbücher

ZyXEL Communications

ZyXEL Communications P-794H Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyXEL ZYWALL10 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-660HW-TX Handbuch

ZyXEL Communications

ZyXEL Communications P-660HNU-Tx Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ADSL2+ 4-port Gateway P-660H-D Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications Prestige 653HWI series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications USG310 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL USG-1000 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications VSG1435-B101 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZYWALL USG 20W Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-660H-61 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-870HN-51D Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications LTE3301 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyXEL ZyAIR B-220 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications EMG2306-R10A Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyXEL ZyWALL 2WE Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications Unified Security Gateway ZyWALL 300 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-2302R-P1 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications N4100 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZyWALL USG 2000 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ADSL2+ 4-port Gateway P-660H-D Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications ZYAIR B-4000 Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-2302HWUDL-P1 Series Bedienungsanleitung

ZyXEL Communications

ZyXEL Communications P-870HN-51D Bedienungsanleitung

Beliebte Tor Handbücher anderer Marken

LST

LST M500RFE-AS Bedienungsanleitung

Kinnex

Kinnex Media Gateway Bedienungsanleitung

2N Telekomunikace

2N Telekomunikace 2N StarGate Bedienungsanleitung

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Bedienungsanleitung

Telsey

Telsey CPVA 500 - SIP Bedienungsanleitung

RTA

RTA 460A-NNA4 Technisches Datenblatt

Shaw

Shaw Gateway HDPVR Bedienungsanleitung

ABB

ABB VSN900 Kurzanleitung

Commander

Commander Pulse Bedienungsanleitung

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Bedienungsanleitung

NETGEAR

NETGEAR C6300BD Bedienungsanleitung

Amit

Amit CDW531AM Bedienungsanleitung

HMS

HMS Netbiter EasyConnect EC150 Bedienungsanleitung

Huawei

Huawei EchoLife HG620 Bedienungsanleitung

AT&T

AT&T U-verse 3801 Gebrauchs- und Pflegehandbuch

Logic IO

Logic IO RTCU MX2 turbo Bedienungsanleitung

Suttle

Suttle MediaMAX MXM-521 Bedienungsanleitung

RTA

RTA 460MCBC-N2E Technisches Datenblatt

ZyXEL Communications P-793H V2 - Handbuch

Beliebte Tor Handbücher anderer Marken