User manual ZYXEL P-660HN

[. . . ] P-660HN-Fx Series 802. 11n Wireless ADSL2+ 4-port Gateway User's Guide Version 3. 70 9/2008 Edition 1 DEFAULT LOGIN IP Address Admin Password User Password http://192. 168. 1. 1 1234 user www. zyxel. com About This User's Guide About This User's Guide Intended Audience This manual is intended for people who want to configure the ZyXEL Device using the web configurator. You should have at least a basic knowledge of TCP/IP networking concepts and topology. Related Documentation · Quick Start Guide The Quick Start Guide is designed to help you get up and running right away. It contains information on setting up your network and configuring for Internet access. [. . . ] ICMP Internet Control Message Protocol (ICMP) is a message control and error-reporting protocol between a host server and a gateway to the Internet. ICMP uses Internet Protocol (IP) datagrams, but the messages are processed by the TCP/IP software and directly apparent to the application user. DoS Thresholds For DoS attacks, the ZyXEL Device uses thresholds to determine when to drop sessions that do not become fully established. These thresholds apply globally to all sessions. You can use the default threshold values, or you can change them to values more suitable to your security requirements. Finding Out More · See Section 9. 1. 3 on page 152 for an example of setting up a firewall. · See Section 9. 5 on page 166 for advanced technical information on firewall. 9. 1. 3 Firewall Rule Setup Example The following Internet firewall rule example allows a hypothetical "MyService" connection from the Internet. 1 Click Security > Firewall > Rules. 2 Select WAN to LAN in the Packet Direction field. 152 P-660HN-Fx User's Guide Chapter 9 Firewalls Figure 80 Firewall Example: Rules 3 In the Rules screen, select the index number after that you want to add the rule. For example, if you select "6", your new rule becomes number 7 and the previous rule 7 (if there is one) becomes rule 8. 4 Click Add to display the firewall rule configuration screen. 5 In the Edit Rule screen, click the Edit Customized Services link to open the Customized Service screen. 6 Click an index number to display the Customized Services Config screen and configure the screen as follows and click Apply. Figure 81 Edit Custom Port Example 7 Select Any in the Destination Address List box and then click Delete. 8 Configure the destination address screen as follows and click Add. P-660HN-Fx User's Guide 153 Chapter 9 Firewalls Figure 82 Firewall Example: Edit Rule: Destination Address 9 Use the Add >> and Remove buttons between Available Services and Selected Services list boxes to configure it as follows. Click Apply when you are done. Custom services show up with an "*" before their names in the Services list box and the Rules list box. 154 P-660HN-Fx User's Guide Chapter 9 Firewalls Figure 83 Firewall Example: Edit Rule: Select Customized Services On completing the configuration procedure for this Internet firewall rule, the Rules screen should look like the following. Rule 1 allows a "MyService" connection from the WAN to IP addresses 10. 0. 0. 10 through 10. 0. 0. 15 on the LAN. P-660HN-Fx User's Guide 155 Chapter 9 Firewalls Figure 84 Firewall Example: Rules: MyService 9. 2 The Firewall General Screen Use this screen to configure the firewall settings. Click Security > Firewall to display the following screen. Figure 85 Security > Firewall > General 156 P-660HN-Fx User's Guide Chapter 9 Firewalls The following table describes the labels in this screen. Table 52 Security > Firewall > General LABEL Active Firewall DESCRIPTION Select this check box to activate the firewall. The ZyXEL Device performs access control and protects against Denial of Service (DoS) attacks when the firewall is activated. If an alternate gateway on the LAN has an IP address in the same subnet as the ZyXEL Device's LAN IP address, return traffic may not go through the ZyXEL Device. This is called an asymmetrical or "triangle" route. This causes the ZyXEL Device to reset the connection, as the connection has not been acknowledged. Select this check box to have the ZyXEL Device permit the use of asymmetrical route topology on the network (not reset the connection). Bypass Triangle Route Note: Allowing asymmetrical routes may let traffic from the WAN go directly to the LAN without passing through the ZyXEL Device. [. . . ] ZyXEL shall in no event be held liable for indirect or consequential damages of any kind to the purchaser. To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended that the unit be insured when shipped. [. . . ]