User manual ZYXEL NBG5715

[. . . ] Graphics in this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide is designed to help you get your NBG5715 up and running right away. It contains information on setting up your network and configuring for Internet access. [. . . ] DROP - Traffic matching the conditions of the firewall rule are stopped. DESCRIPTION Select the protocol (ALL, TCP, UDP or BOTH) used to transport the packets for which you want to apply the firewall rule. Enter the port number/range of the destination that define the traffic type, for example TCP port 80 defines web traffic. Enter the port number/range of the source that define the traffic type, for example TCP port 80 defines web traffic. See Appendix E on page 237 for commonly used services and port numbers. nBG5715 User’s Guide 119 Chapter 17 Firewall 120 NBG5715 User’s Guide C HAPTER 18 IPSec VPN 18. 1 Overview A virtual private network (VPN) provides secure communications between sites without the expense of leased site-to-site lines. a secure VPN is a combination of tunneling , encryption , authentication , access control and auditing. It is used to transport traffic over the Internet or any insecure network that uses TCP/IP for communication. Internet Protocol Security (IPSec) is a standards-based VPN that offers flexible solutions for secure data communications across a public network like the Internet. IPSec is built around a number of standardized cryptographic techniques to provide confidentiality, data integrity and authentication at the IP layer. The following figure provides one perspective of a VPN tunnel. Figure 76 IPSec VPN: Overview VPN Tunnel X Y The VPN tunnel connects the NBG5715 (X) and the remote IPSec router (Y). These routers then connect the local network (A) and remote network (B). 2 What You Can Do in this Chapter • Use the General screen to display and manage the NBG5715’s VPN rules (tunnels) (Section 18. € Use the SA Monitor screen to display and manage active VPN connections (Section 18. 3 What You Need To Know A VPN tunnel is usually established in two phases. Each phase establishes a security association (SA), a contract indicating what security parameters the NBG5715 and the remote IPSec router will use. The first phase establishes an Internet Key Exchange (IKE) SA between the NBG5715 and remote IPSec router. The second phase uses the IKE SA to securely establish an IPSec SA through which the NBG5715 and remote IPSec router can send data between computers on the local network and remote network. Figure 77 VPN: IKE SA and IPSec SA IPSec SA X IKE SA Y In this example, a computer in network A is exchanging data with a computer in network B. Inside networks A and B, the data is transmitted the same way data is normally transmitted in the networks. [. . . ] Do NOT allow anything to rest on the power adaptor or cord and do NOT place the product where anyone can walk on the power adaptor or cord. Do NOT use the device if the power adaptor or cord is damaged as it might cause electrocution. If the power adaptor or cord is damaged, remove it from the power outlet. do NOT attempt to repair the power adaptor or cord. [. . . ]