ZyXEL Communications Vantage CNM manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430

Ir para a página of

Bom manual de uso

As regras impõem ao revendedor a obrigação de fornecer ao comprador o manual com o produto ZyXEL Communications Vantage CNM. A falta de manual ou informações incorretas fornecidas ao consumidor são a base de uma queixa por não conformidade do produto com o contrato. De acordo com a lei, pode anexar o manual em uma outra forma de que em papel, o que é frequentemente utilizado, anexando uma forma gráfica ou manual electrónicoZyXEL Communications Vantage CNM vídeos instrutivos para os usuários. A condição é uma forma legível e compreensível.

O que é a instrução?

A palavra vem do latim "Instructio" ou instruir. Portanto, no manual ZyXEL Communications Vantage CNM você pode encontrar uma descrição das fases do processo. O objetivo do manual é instruir, facilitar o arranque, a utilização do equipamento ou a execução de determinadas tarefas. O manual é uma coleção de informações sobre o objeto / serviço, um guia.

Infelizmente, pequenos usuários tomam o tempo para ler o manual ZyXEL Communications Vantage CNM, e um bom manual não só permite conhecer uma série de funcionalidades adicionais do dispositivo, mas evita a formação da maioria das falhas.

Então, o que deve conter o manual perfeito?

Primeiro, o manual ZyXEL Communications Vantage CNM deve conte:
- dados técnicos do dispositivo ZyXEL Communications Vantage CNM
- nome do fabricante e ano de fabricação do dispositivo ZyXEL Communications Vantage CNM
- instruções de utilização, regulação e manutenção do dispositivo ZyXEL Communications Vantage CNM
- sinais de segurança e certificados que comprovam a conformidade com as normas pertinentes

Por que você não ler manuais?

Normalmente, isso é devido à falta de tempo e à certeza quanto à funcionalidade específica do dispositivo adquirido. Infelizmente, a mesma ligação e o arranque ZyXEL Communications Vantage CNM não são suficientes. O manual contém uma série de orientações sobre funcionalidades específicas, a segurança, os métodos de manutenção (mesmo sobre produtos que devem ser usados), possíveis defeitos ZyXEL Communications Vantage CNM e formas de resolver problemas comuns durante o uso. No final, no manual podemos encontrar as coordenadas do serviço ZyXEL Communications na ausência da eficácia das soluções propostas. Atualmente, muito apreciados são manuais na forma de animações interessantes e vídeos de instrução que de uma forma melhor do que o o folheto falam ao usuário. Este tipo de manual é a chance que o usuário percorrer todo o vídeo instrutivo, sem ignorar especificações e descrições técnicas complicadas ZyXEL Communications Vantage CNM, como para a versão papel.

Por que ler manuais?

Primeiro de tudo, contem a resposta sobre a construção, as possibilidades do dispositivo ZyXEL Communications Vantage CNM, uso dos acessórios individuais e uma gama de informações para desfrutar plenamente todos os recursos e facilidades.

Após a compra bem sucedida de um equipamento / dispositivo, é bom ter um momento para se familiarizar com cada parte do manual ZyXEL Communications Vantage CNM. Atualmente, são cuidadosamente preparados e traduzidos para sejam não só compreensíveis para os usuários, mas para cumprir a sua função básica de informação

Índice do manual

  • Página 1

    www .zyxel.com V ant age CNM Centralized Network Management User ’ s Guide Ve r s i o n 3 . 0 11 / 2 0 0 7 Edition 1[...]

  • Página 2

    [...]

  • Página 3

    About This User's Guide Vantage CNM User’s Guide 3 About This User's Guide " The screens in V antage CNM vary by dev ice type and firmware version. The examples in this User ’ s Guide use one of the most comprehensive examples of each screen, not every variation for each device type and firmware version. If you are unable to fi n[...]

  • Página 4

    About This User's Guide Vantage CNM User’s Guide 4 The T echnical W riting T eam, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, T aiwan. E-mail: techwriters@zyxel.com.tw[...]

  • Página 5

    Document Conventions Vantage CNM User’s Guide 5 Document Conventions W arnings and Notes These are how warnings and notes are shown in this User ’ s Guide. 1 W arnings tell you about things that could harm you or your device. " Notes tell you other important informati on (for example, other things you may need to configure or helpful tip s[...]

  • Página 6

    Document Conventions Vantage CNM User’s Guide 6 Icons Used in Figures Figures in this User ’ s Guide may use the follo wing generic icons. Device icons are not an exact representations of your devices. Device (example) Computer Notebook computer Server DSLAM T elephone Switch Router[...]

  • Página 7

    Contents Overview Vantage CNM User’s Guide 7 Contents Overview Introducing V a ntage CNM ...... ................ ................ ............. ................ ................ ............. ....... ... 31 Introduction .......................................... ........................................................................ .......... 3[...]

  • Página 8

    Contents Overview Vantage CNM User’s Guide 8 About V antage CNM ........... ................ ............. ................ ............. ................ ................ ........ ... 321 Account Management ............................................... ........................................................... 32 3 Group .............. ......[...]

  • Página 9

    Vantage CNM User’s Guide 9 About This User's Guide ...................... .................................................................................. .. 3 Document Conventions.................................................................. ......................................... .5 Contents Overview ...............................[...]

  • Página 10

    Vantage CNM User’s Guide 10 5.3 WAN General (ZyNOS ZyW ALL) .. ................ ................ ............. ................ ................ .......... 67 5.3.1 WAN1 (ZyNOS ZyW ALL with one WAN port) ............ ................ ............. ................ ... 69 5.3.2 WAN1 and W AN2 (ZyNOS Zy W ALL with two W AN ports) .. ...............[...]

  • Página 11

    Vantage CNM User’s Guide 11 6.9 IDP Signatures ...... ... .... ... ... ............. ... ... .... ... ... ... .... ............. ... ... ... ... .... ... ... ............. ... .. ...... 152 6.9.1 Attack T ypes . ... .... ... ............. ... ... ... .... ... ............. ... ... .... ... ... ............. ... ... .... ... ... .......... .1 5 2 [...]

  • Página 12

    Vantage CNM User’s Guide 12 Chapter 8 Device Log ....................................................... .............................................................. ........ 209 8.1 Device Log .......... ... ... .... ... ... ... .... ... ............. ... ... ... .... ... ... ............. ... ... .... ... ... ... .... ........ ......... 209 C[...]

  • Página 13

    Vantage CNM User’s Guide 13 1 1.3 Signature S tatus ... ................ ................ ............. ................. ................ ............. ........... ...... 245 Part III: VPN Management ..... .............................. ........................ ........ 247 Chapter 12 VPN Community ...............................................[...]

  • Página 14

    Vantage CNM User’s Guide 14 17.1.3 Alarm S tates ......................... ............. ................ ............. ................ ............. ........... 272 17.1.4 Unresolved Alarms ......................... ............. ................ ................ ................ ........... 272 17.1.5 Responded Alarm ...... ................ ..[...]

  • Página 15

    Vantage CNM User’s Guide 15 21.5 Log Setting ................. ............. ................ ............. ................ ................ ............. ...... ........ 305 21.6 VRPT Management ....................... ................ ............. ................ ............. ................ ........ 3 06 21.6.1 General ................ ..[...]

  • Página 16

    Vantage CNM User’s Guide 16 Part VIII: T roubleshooting ..... .............................. ........................ ........ 333 Chapter 29 T roubleshooting ......................... ....................................................................................... .... 335 29.1 V antage CNM Acces s and Login ................... ..........[...]

  • Página 17

    Vantage CNM User’s Guide 17 Figure 1 V antage CNM Application ............... ................ ................ ................ ................ ............... ........... 31 Figure 2 Main Screen .................. ................. ............ ................. ............. ................ ............. ...... ............. 35 Figure 3 Devi[...]

  • Página 18

    Vantage CNM User’s Guide 18 Figure 39 Device Operation > Device Configur atio n > Ne t w o r k > WA N > WA N 1 / 2 - P PT P ( Z y N O S Z y WA L L with two W A N ports) .............. ............. ................ ............. ................ ............. ................ 83 Figure 40 Device Operation > Device Configur at ion &[...]

  • Página 19

    Vantage CNM User’s Guide 19 Figure 74 Device Operation > Device Configuration > S ecurity > IDP > Signature (Query View) ........ 157 Figure 75 Device Operation > Device Configuration > S ecurity > Signature Update ............. .............. 160 Figure 76 Device Operation > Device Configuration > S ecurity > Conten[...]

  • Página 20

    Vantage CNM User’s Guide 20 Figure 1 10 Device Operation > Configuration Management > Con f iguration File Managemen t > Schedule List (Device) .............. ............. ................ ............. ................ ............. ................ ........... 2 21 Figure 1 1 1 Device Operation > Configuration Manage ment > Conf[...]

  • Página 21

    Vantage CNM User’s Guide 21 Figure 143 VPN Management > VPN Monitor > By Co mmunity > Show Detail ........................ ........... 258 Figure 144 VPN Management > VPN Monitor > By Co mmunity > Show Detail > Diagnostic .............. 259 Figure 145 VPN Management > VPN Monitor > By Co mmunity > Show Detail > Di[...]

  • Página 22

    Vantage CNM User’s Guide 22 Figure 180 CNM System Setting > Maintenance > System ............... ................ ................. ................ . 313 Figure 181 CNM System Setting > Maintenance > System > Backup ............ ................ ................ ..... 314 Figure 182 CNM System Setting > Device Owner ...........[...]

  • Página 23

    Vantage CNM User’s Guide 23 Figure 223 Network Number and Host ID .......... ... .......... ................ ............. ................ ............. ........ ... 368 Figure 224 Subnetting Example: Be fore Subnetting ................. ... ... ... .... ............ .... ... ... ... .... ... ............. . 37 0 Figure 225 Subnetting Example: A[...]

  • Página 24

    Vantage CNM User’s Guide 24[...]

  • Página 25

    Vantage CNM User’s Guide 25 T able 1 Menu Bar Icon Description ................. ............. ................ ............. ............. ................ .... ............ 36 T a ble 2 T itle Bar Icon Description ................... ................ ................ ................ ................ ........ ............... 37 T a ble 3 Device[...]

  • Página 26

    Vantage CNM User’s Guide 26 T able 37 Wireless Card: No Access 802.1x + S tatic WEP ....... ............. ................ ............. ................ . 106 T able 38 Wireless Card: No Access 802.1x + No WEP ............ ... ............. ... ... ... .... ... ............. ... ... ... .... . 106 T able 39 Device Operation > Device Configura[...]

  • Página 27

    Vantage CNM User’s Guide 27 T a ble 75 Device Operation > Device Configuration > S ecurity > X Auth > RAD IUS ... ................... ..... 183 T able 76 Device Operation > Device Configuration > A dvanced > NA T > NA T Overview ..... .............. 186 T able 77 Device Operation > Device Configuration > A dvanced &g[...]

  • Página 28

    Vantage CNM User’s Guide 28 T able 107 Device Operation > Configuration Management > Building Blo c k > Configuration BB > Add/Edit/ Save as .... ... ... ... ............. .... ... ... ... ............. ... .... ... ............. ... ... ... .... ............. ... ... ... ... ..... 230 T able 108 D evice Operation > Configuration M[...]

  • Página 29

    Vantage CNM User’s Guide 29 T able 144 Log & Report > Operation Report > Signa ture Profile Backup & Restore Report > Restore Report ......... ............. ................ ............. ................ ............. ................ ............. .......... .2 8 9 T a ble 145 LOG & Report > CN M Logs ................ ..[...]

  • Página 30

    Vantage CNM User’s Guide 30[...]

  • Página 31

    Vantage CNM User’s Guide 31 C HAPTER 1 Introducing Vantage CNM This chapter introduces the main applications and features of V antage CNM. It also introduces the ways you can manage V antage CNM. 1.1 Overview V antage C entralized N etwork Managemen t (“V a ntage CNM”) helps network administrators monitor and manage a distributed network of Z[...]

  • Página 32

    Chapter 1 Int rod ucin g Vant ag e CNM Vantage CNM User’s Guide 32 1.2 W ays to Manage V ant age CNM Use the web configurator to access and manage V antage CNM. See the Quick Start Guide for instructions to access the web co nfigurator and this User ’ s Gu ide for more in formation about the screens. 1.3 Suggestions for Using V ant age CNM Do t[...]

  • Página 33

    33 P ART I Introduction Introducing V antage CNM (31) GUI Introduction (35)[...]

  • Página 34

    34[...]

  • Página 35

    Vantage CNM User’s Guide 35 C HAPTER 2 GUI Introduction See the Quick Start Guide for in structions about inst alling, setting up, and accessing V antage CNM. This chapter introduces the V antage CNM main sc reen. Figure 2 Main Screen The main screen consists of three main parts a nd are numbered in the sequence you typically follow to configure [...]

  • Página 36

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 36 " For security reasons, V ant age CNM automatically times out af ter fifteen min utes of inactivity . Log in again if this happens . Each part is discussed in more detail in the following sections. 2.1 Menu Bar The following table describes th e icons in the menu bar . " When you cl[...]

  • Página 37

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 37 2.2 Title Bar The following table describes th e icons in the title bar . 2.3 Device Window Use the device window to view the logical netw ork topology , search for a device, view general device status or select wh ich device(s) you want to edit configuration settings. 2.3.1 T opology Y ou ca[...]

  • Página 38

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 38 The following table describes the labels in the Device window . There are a couple icons in the device window that perform additiona l functions related to views. 2.3.1.1 Folders Folders are represented by the following icons in the device window . T able 3 Device Window: Topology LABEL DESCR[...]

  • Página 39

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 39 Y ou can right-c lick on a folder to see the follo wing menu items. Some folders do not have every menu item. Click Settings to configure the Adobe fl ash player settings. Click About Adobe Flash Player 9 to connect t o Adobe’ s we bsite for more information. Figure 4 Folder Right-Click Opt[...]

  • Página 40

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 40 4 A new folder icon displays. 2.3.1.1.2 Delete a Folder Deleting a folder also delete s all the associa ted device(s). Follow the steps below to delete a group. 1 In the device window , click To p o l o g y . 2 Right-click on a folder and click Delete Folder . 3 A warning screen displays. Cli[...]

  • Página 41

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 41 Y ou c an right-click on a device to see the follo wing menu. Some menu items are not available for every device. Click Settings to configure Adobe flash player settings. Click About Adobe Flash Player 9 to connect to Adobe’ s we bsite for more information. Figure 9 Device Right-Click Optio[...]

  • Página 42

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 42 Figure 1 1 Device Window: T opology: Add/Edit Device (ZyNOS) Figure 12 Device Window: T opology: Add/Edit Device ( ZLD) The following table describes the labels in this screen. T able 7 Configuration Screen: Device List LABEL DESCRIPTION LAN MAC (Hex) Enter the LAN MAC address of th e device [...]

  • Página 43

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 43 Firmware Ve r s i o n This field is only available for a ZyNOS dev ice. Select the firmwa re version the device is currentl y usi n g . Th e pu l l - do w n men u li st s only supported firmware versions. Select Unknown if you don’t know the device’s firmware version or you cannot find yo[...]

  • Página 44

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 44 4 After clicking Apply and a new device icon displays. 2.3.1.2.2 Delete a Device Follow the steps below to delete a group. 1 In the device window , click To p o l o g y . 2 Right-click on a device and click Delete Device . 3 A warning screen displays. Click OK to delete. Click Cancel to clos [...]

  • Página 45

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 45 Figure 15 Device Window: T opology: Delete Device W arning 3 The device’ s web configurator appears vi a a HTTP or HTTPS connection. Y ou can change the device lo gin setting by editing a device. Refer to Figure 1 1 on page 42 . 2.3.2 Device Search Use the Search function in th e device win[...]

  • Página 46

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 46 Following are the other menus. T able 8 Nav igation Pane l: Menu Summa ry - Device Op eration DEVICE OPERATION ZYNOS-BASED DEVICE ZLD-BASED DEVICE PRESTIGE Device Configuration Load or Save BB General System T im Setting Network LAN WAN DMZ WLAN Wireless Card Port Roles Secur ity Firewall VPN[...]

  • Página 47

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 47 The following table describes the links in the navigation panel. CNM SYSTEM SETTING ACCOUNT MANAGEMENT Serve rs User Access Notification Log Setting VRPT Management Certificate Man agement Maintenance Device Owner Upgrade License About Group Account T able 10 Navigation Panel Links LINK DESCR[...]

  • Página 48

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 48 This section provides some not es about the navigation pa ne l. • The configurat ion information ap pears when yo u click a menu item from neviga tion panel for a selected device, folder or for V antage CNM management. • Menus display ma y vary depending on which device mode l you are con[...]

  • Página 49

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 49 1 Click CNM System Setting in the menu bar . 2 Click Configuration > Certificate Management in the navigation panel. 3 Click Cr eate CSR . The following screen appears. Figure 17 CNM System Setting > Configuration > Certificate Management > Create CSR 4 T ype the IP address of the[...]

  • Página 50

    Chapter 2 GUI Introduction Vantage CNM User’s Guide 50 Figure 19 CNM System Setting > Configuration > Certificate Mana gement > Import Certificate 8 Enter the signed certificate file path and click Apply . 9 Restart the V antage CN M server . 10 Use the IP address and log into the V antage CNM server . 11 In Internet Explorer 7.0, click [...]

  • Página 51

    51 P ART II Device Operation " This menu only appear if y ou select a device. For ZLD-based device, this menu appear when the dev ice status is on. " The menus and screens may vary depending on the device model you select. See T able 8 on page 46 for the device model and t he corresponding firmware version CNM supports. Load or Save Build[...]

  • Página 52

    52[...]

  • Página 53

    Vantage CNM User’s Guide 53 C HAPTER 3 Load or Save Building Blocks (BB) " These menus only appear if you select a ZyNOS-based or a prestige device. 3.1 Load or Save BB Use this menu item to load building blocks to the selected device or to create building blocks from the current configuration of the selected de vice. This menu item appears [...]

  • Página 54

    Chapter 3 Load or Save Building Blocks (BB) Vantage CNM User’s Guide 54 Click the Load a BB icon to load a building block to th e selected device. The following pop- up screen appears. Figure 22 Device Operation > Device Configur ation > Load or Save BB > Load a BB Select the building block you wa nt to load to the selected device, and c[...]

  • Página 55

    Vantage CNM User’s Guide 55 C HAPTER 4 Device General Settings This section configures device general settings. " These menus only appear if you select a ZyNOS-based or a prestige device. For ZLD-based device, t hese menus appear when the device status is on. 4.0.1 System Use this screen to set the password, system name, domain name, idle ti[...]

  • Página 56

    Chapter 4 Device General Settings Vantage CNM User’s Guide 56 4.0.2 T ime Setting Use this screen to configure the time settings on the device. T o open this screen, click Device Operation > Device Configuration > General > T ime Setting . Figure 25 Device Operation > Device Confi guration > General > T ime Setting The following[...]

  • Página 57

    Chapter 4 Device General Settings Vantage CNM User’s Guide 57 Daylight Savings Daylight saving is a p eriod from late spri ng to early fall w hen many countries set their clocks ahead of normal local time by one hour to give more daytime light in the eveni ng . Select this opti on if you use Dayli ght Saving Time. S tart Date Configure the day an[...]

  • Página 58

    Chapter 4 Device General Settings Vantage CNM User’s Guide 58[...]

  • Página 59

    Vantage CNM User’s Guide 59 C HAPTER 5 Device Network Settings The screens explained network settings such as LAN, W AN, wireless card. The menus and screens may vary for dif ferent ZyXEL products. For example, click Device Configuration > Network Interface for ZLD-based device’ s network settings. This document uses the ZyNOS ZyW ALL settin[...]

  • Página 60

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 60 Figure 27 Device Operation > Device Configuration > Network > LAN > LAN The following table describes the fields in this screen. T able 13 Device Operation > Device C onfiguration > LAN > LAN LABEL DESCRIPTION DHCP Mode DHCP (Dynamic Host Configuration Protocol, RF[...]

  • Página 61

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 61 DHCP WINS Server 1, 2 T ype the IP address of the WINS (Windows Internet Naming Service) server that you want to send to the DHCP clients. The WINS server kee ps a mapping table of the computer names on your networ k and the IP addresses that they are currently using. Pool Size This fi[...]

  • Página 62

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 62 5.2 LAN (Prestige) " This section refers only to the LAN screen, but the information is applicable for the LAN, WLAN , and DMZ screens. Use this screen to configure th e DHCP settings, TCP/ IP settings , and Any IP settings for the LAN port on a device. T o open this screen, click[...]

  • Página 63

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 63 Figure 28 Device Operation > Device Configurat ion > Networ k > LAN > LAN (Prestige) The following table describes the fields in this screen. T able 14 Device Operation > Device C onfiguration > Network > LAN > LAN (Prestige) LABEL DESCRIPTION DHCP Mode DHCP (Dy[...]

  • Página 64

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 64 5.2.1 St atic DHCP " This section refers only to the LAN screen, but the information is applicable for the LAN, WLAN , and DMZ screens. TCP/IP IP Address T ype the IP address of t he devi ce in dotted decima l notation. IP Subnet Mask The subnet mask specifies the netwo rk number [...]

  • Página 65

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 65 Use this screen to assign IP addresses to specif ic individual computer s on the LAN based on their MAC addresses. T o open this screen, click Devic e Oper ation in the menu bar , and click Device Configuration > Network > LAN > S tatic DHCP in the navigation panel. Figure 29 [...]

  • Página 66

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 66 Figure 30 Device Operation > Device Configuration > Network > LAN > IP Alias The following table describes the fields in this screen T able 16 Device Operation > Devi ce Configuration > Network > LAN > IP Alias LABEL DESCRIPTION IP Alias 1,2 Select the check box[...]

  • Página 67

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 67 5.3 W AN General (ZyNOS ZyW ALL) This section gives configuration information on the fiel ds displa yed in this screen. T o open this screen, click Device Operation in the menu bar , and click Device Configuration > Network > W AN > General in the navigation panel. " Be c[...]

  • Página 68

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 68 The following table describes the fields in this screen. T able 17 Device Operation > Device C onfiguration > Network > WAN > General (ZyNOS ZyW ALL) LABEL DESCRIPTION W AN Priority W AN2 Priority T raffic R edirect Dial Backup The default W AN connection is "1' a[...]

  • Página 69

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 69 5.3.1 W AN1 (ZyNOS ZyW ALL with one W AN port) The screen differs by the encapsulation type chosen. Figure 32 Device Operation > Device Configurat ion > Network > WAN > W AN1 (ZyNOS ZyW ALL with one W A N port) Allow between W AN2 a nd DMZ Select this check box to forward N[...]

  • Página 70

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 70 5.3.1.1 Ethernet Encap sulation The following table describes the labels in the Ethernet encapsulation scree n. T able 18 Device Operation > Device Configuration > Network > WAN > ISP (Eth ernet) – ZyNOS ZyW ALL (one W AN port) LABEL DESCRIPTION Encapsulation Y ou must ch[...]

  • Página 71

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 71 5.3.1.2 PPPoE Encap sulation The device supports PPPoE (Point-to-Point Pr otoc ol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection. The PP PoE option is for a dial[...]

  • Página 72

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 72 Figure 34 Device Operation > Devi ce Configuration > Netw ork > W AN > WAN1-PPPoE (ZyNOS ZyW ALL with one W AN port) The following table describes the labels in the PPPoE screen. T able 19 Device Operation > Device C onfiguration > Network > WAN > IS P (PPPoE) ?[...]

  • Página 73

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 73 Service Name T ype the PPPoE service name provi ded to you. PPPoE uses a service name to identify and reach the PPPo E server . User Name T ype the user na me given to you by yo ur ISP . Password T ype the password associat ed with the User Name above. Retype to confirm Password T ype [...]

  • Página 74

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 74 5.3.1.3 PPTP Encap sulation Point-to-Point T unneling Protocol (PP TP) is a ne twork protocol that enables secure transfer of data from a remote client to a private server , creating a V irtual Private Network (VPN) using TCP/IP-based networks. PP TP supports on-demand, multi-protoco l[...]

  • Página 75

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 75 Figure 36 Device Operation > Device Configuration > Network > WAN > W AN1 - PPTP (ZyNOS ZyW ALL with one W AN port) The following table describes the labels in the PP TP screen. Ta b l e 2 0 Device Operation > Device Configuratio n > Network > W AN > ISP (PPTP) [...]

  • Página 76

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 76 PPTP User Name T ype the user name given to you by your ISP . Password T ype the password associ ated with the User Name above. Retype t o confirm Password T ype your password again to make sure that you have entered it correctly . Nailed-up Connection Select Nailed-Up Connection if yo[...]

  • Página 77

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 77 5.3.2 W AN1 and W AN2 (ZyNOS ZyW ALL with tw o W AN ports) Since ZyW ALL 4 . 00 , the W AN scree ns are organi zed differently than the previous versions because it has two W AN ports. Use the WA N 1 and WA N 2 tabs to configure the W AN1 and W AN2 ports. These tabs are similar an d va[...]

  • Página 78

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 78 Figure 37 Device Operation > Device Configurat ion > Network > WAN > W AN1/2 (ZyNOS ZyW ALL with two W AN ports) The following table describes the labels in this screen. T able 21 Device Operation > Device C onfiguration > Network > WAN > W AN1/2 (ZyNOS ZyW ALL [...]

  • Página 79

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 79 T elia Login Server (T elia Login only) T ype the domain name of the T elia login server , for example logi n1.telia.com. Relogin Every(mins) (T elia Login only) The T elia server logs the V antage CNM out if the V antage CNM does not log in periodically . T ype the number of minutes f[...]

  • Página 80

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 80 5.3.2.2 PPPoE Encap sulation PPPoE (Point-to-Point Protocol over Ethernet) is an IETF standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection. The PPPoE option is for a dial-up connection using PPPoE. For the [...]

  • Página 81

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 81 The following table describes the labels in this screen. T able 22 Device Operation > Device C onfiguration > Network > WAN > WAN1/2 - PPPoE (ZyNOS ZyWALL with two WAN ports) LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation T he PPPoE choice is for a dial-[...]

  • Página 82

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 82 5.3.2.3 PPTP Encap sulation Point-to-Point T unneling Protocol (PP TP) is a ne twork protocol that enables secure transfer of data from a remote client to a private server , creating a V irtual Private Network (VPN) using TCP/IP-based networks. PP TP supports on-demand, multi-protoco l[...]

  • Página 83

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 83 Figure 39 Device Operation > Device Configurat ion > Network > WAN > W AN1/2 - PPTP (ZyNOS ZyW ALL with two W AN ports ) The following table describes the labels in this screen. T able 23 Device Operation > Device C onfiguration > Network > WAN > W AN1/2 - PPTP [...]

  • Página 84

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 84 PPTP User Name T ype the user name gi ve n to you by your ISP . Password T ype the password associ ated with the user name above. Retype t o confirm Password T ype your password again to make sure that you have entered is correctly . Nailed-up Connection Select this if you do not want [...]

  • Página 85

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 85 5.3.3 Dial Backup (ZyNOS ZyW ALL) V antage CNM ca n communicate with the d evice using Dial Backup if the main W AN connection goes down. Use this screen to configure Dial Backup on the device. RIP V ersion The RIP V ersion field controls the format and t he broadcasting method of the [...]

  • Página 86

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 86 Figure 40 Device Operation > Device Configur ation > Network > WAN > Dial Backup (ZyNOS ZyWALL) The following table describes the labels in this screen. T able 24 Dev ice Operat ion > Dev ice Configuration > Network > W AN > Dial Backup (ZyNOS ZyW ALL) LABEL DES[...]

  • Página 87

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 87 5.3.4 Advanced Modem Setu p (ZyNOS ZyW AL L) 5.3.4.1 A T Command S trings For regular telephone lines, the default Dial st ring tells the modem that the line uses tone dialing. ATDT is the command for a switc h that requ ires tone dialing. If your switch requires pulse dialing, change [...]

  • Página 88

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 88 5.3.4.1.2 Response S trings The response strings tell the device the tags, or la bels, immediately preceding the various call parameters sent from the W AN device . The response strings have not been standardized; please consult the documentation of your W AN device to find the correct[...]

  • Página 89

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 89 5.3.5 Edit Dial Backup (ZyNOS ZyW ALL) Click Edit in the TCP/IP Options field in the screen shown in Figure 40 on page 86 to display the next screen. Drop DTR When Hang Up Select this check box to have the device drop the DTR (Data T erminal Ready) signal after the "A T Command St[...]

  • Página 90

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 90 Figure 42 Device Operation > Device Configuratio n > Network > WAN > Dial Backup > Edit (ZyNOS ZyWALL) The following table describes the fields in this screen. T able 26 Device Operation > Device Configuration > Netw ork > W A N > Dial Bac kup > Edit – Z[...]

  • Página 91

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 91 5.3.6 W AN Setup (Prestige) The fields in this screen vary depending on the mode and encapsu lation. Select a dev ice in th e object tree and then select Device Operation > Device Co nfig uration > Network > W AN . Enable RIP Select thi s check box to turn on RIP (Routing Info[...]

  • Página 92

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 92 Figure 43 Device Operation > Device Configurat ion > Network > WAN > Setup (Prestige) The following table describes the fields in this screen. T able 27 Device Operation > Device C onfiguration > Network > WAN > Setup (Prestige) LABEL DESCRIPTION Name Enter the [...]

  • Página 93

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 93 A TM QoS T ype Select CBR (Constant Bit Rate) to specify fixed (always-on) bandwi dth for voice or data traffic. Select UBR (U nspecified Bit Rate) for applications that are non-time sensitive, such as e-mail. Select VBR (V ariable Bit Rate) for bursty traffic and bandwidth sharing wit[...]

  • Página 94

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 94 5.3.7 W AN Backup (Prestige) T o change your device’ s W AN backup settings, click WA N > Backup . The screen appe ars as shown. Max Idle T ime out (Appears when you use PPPoA and PPPoE encapsulation) S pecify an idle time-out in the Max Idle Timeout field when you select Connect [...]

  • Página 95

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 95 Figure 44 Device Operation > Device Configuratio n > Netw ork > WAN > Backup (Prestige) The following table describes the fields in this screen. T able 28 Device Operation > Device C onfiguration > Network > WAN > Backup (Prestige) LABEL DESCRIPTION Backup T ype[...]

  • Página 96

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 96 Recovery In terval When the device is using a lower priority conne ction (usually a WAN backup connection), it periodically checks to whether or not it can use a higher priority connection. T ype the number of seconds (30 recommended) for the device to wait between checks. Allow mo re [...]

  • Página 97

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 97 5.3.8 Advanced W A N Backup (Prestige) Use this screen to edit your device’ s advanced W AN backup settings. T o open this screen, click WA N > Backup and the Advanced button. Figure 45 Device Operation > Device Co nfiguration > Network > W AN > Backup > Adva nced ([...]

  • Página 98

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 98 Primary/ Secondary Phone Numb er T ype the first (primary) phone number from the ISP for this remote node. If the primary phone number is busy or does not answer , your device dials the secondary phone n umber if available. Some areas requ ire dialing the pound sign # before the phone [...]

  • Página 99

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 99 5.3.9 Advanced Modem Setu p (Prestige) Click Edit in the Advanced Modem Setup field. Se e the section on ZyW ALL advanced modem setup on page 87 for configuration of this screen. 5.4 Wireless Card This section shows you how to configure the Wireless Card screens. These screens may vary[...]

  • Página 100

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 100 Figure 46 Device Operation > Device Configuratio n > Netw ork > Wirele ss Card > Wireles s Card The following table describes the fields in this screen. T able 30 Device Operation > Device Configuration > Network > Wireless Card > W ireless Card LABEL DESCRIPTI[...]

  • Página 101

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 101 5.4.2 Advanced Wireless Security Settings Use these screens to configure wireless secur ity settings. T o see th ese settings, select any option from the Security field in the Device Operation > Device Configuration > Network > Wir eless Card > Wireless Card screen. Fragme[...]

  • Página 102

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 102 Figure 47 Device Operation > Device Configuratio n > Netw ork > Wirele ss Card > Wireles s Card (Advance d Wire less Sec urity Settings)[...]

  • Página 103

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 103 The following table describes th e fields in these settings. T able 31 Wireless Card: Static W EP LABEL DESCRIPTION Security Select Stati c W EP from the drop-down list. WEP Encryption WEP (Wired Equivalent Privacy) provides data encryption to prevent unauthorized wireless stations fr[...]

  • Página 104

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 104 T able 33 Wireless Card: WPA LABEL DESCRIPTION Security Select WP A from the drop-down list. ReAuthenticati on T imer (Seconds) S pecify how often wireless stations have to resend user names and p assw ords in order to stay connected. Enter a time interval between 10 and 65535 seconds[...]

  • Página 105

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 105 T able 35 Wireless Ca rd: 802.1x + Static WEP LABEL DESCRIPTION Security Select 802.1x + Static WEP from the drop-down list. WEP Encryption WEP (Wired Equiva lent Privacy) provides data enc ryption to prevent un authorized wireless stations from accessing data tr ansmitte d over the w[...]

  • Página 106

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 106 5.4.3 MAC Filter Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pairs of hexadec imal characters, for example, 00:A0:C5:00:00:02 . Y ou need to know the MA C addresses of the devices to configure [...]

  • Página 107

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 107 " Be careful not to list your computer ’s MAC address and set the Action field to Deny Association when managing the device via a wireless connection. This would lock you out. Figure 48 Device Operation > Device Configuration > Network > Wireless Card > MAC Filter T[...]

  • Página 108

    Chapter 5 Device Network Settings Vantage CNM User’s Guide 108[...]

  • Página 109

    Vantage CNM User’s Guide 109 C HAPTER 6 Device Security Settings The screens explained device security se ttings such as firewall, VPN, anti-virus, anti-spam, IDP , signature update, content filter and X-auth. The menus and screens may vary for dif ferent ZyXEL products. For example, click Device Operation in the menu bar and then click Device Co[...]

  • Página 110

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 11 0 Figure 50 Device Operation > Device Configuratio n > Security > Firewall > Default Rule The following table describes the labels in this screen. T able 40 Device Operation > Device C onfiguration > Security > Firewall > Default Rule LABEL DESCRIPTION Default [...]

  • Página 111

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 111 6.1.2 Rule Summary Use the Insert button to add a new rule be fore an existing rule. Use Move to put an existing rule in a different place. Select a device, click Device Operation in the menu bar and then click Device Configuration > Security > Firewall > Rule Summary in the[...]

  • Página 112

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 11 2 Figure 51 Device Operation > Device Configuratio n > Security > Firewall > Rule Summary The following table describes the labels in this screen. T able 41 Device Operation > Device C onfiguration > Security > Firewall > Rule Summary LABEL DESCRIPTION Directio[...]

  • Página 113

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 11 3 6.1.3 Add/Edit Each device has a different number of rules and custom ports; see the device User Guide for more details. In Figure 51 on page 112 , click Edit to modify an existing firewall rule or click Inser t to create a new firewall rule. Rule Summary The following fields summar[...]

  • Página 114

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 11 4 Figure 52 Devi ce Ope ration > De vice Co nfiguration > Security > Firewall > Rule Summary > Edit[...]

  • Página 115

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 11 5 The following table describes the labels in this screen. T able 42 Device Operation > Device C onfig ur at ion > Security > Firewall > Rule Summary > Add/Edit LABEL DESCRIPTION Rule Name Enter a descriptive name of up to 31 printable ASCII characters (except Extended [...]

  • Página 116

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 11 6 6.1.4 Anti-Probing Click Device Operation in the menu bar and then click Device Configuration > Security > Firewall > Anti-Pr obing in the navigation panel to open the following screen. Configure this screen to help keep the device hidden from pr obing attempts. Y ou can sp[...]

  • Página 117

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 11 7 The following table describes the labels in this screen. 6.1.5 Threshold Click Device Operation in the menu bar and then click Device Configuration > Security > Fi re wa l l > T hre s h ol d in the navigation panel to bring up the next screen. The global values specified fo[...]

  • Página 118

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 11 8 The following table describes the labels in this screen. T able 44 Device Operation > Device C onfiguration > Security > Firewall > Threshold LABEL DESCRIPTION Disable DoS Attack Protec tion on Select the interface(s) (or VPN tunnels) for which you want the device to not[...]

  • Página 119

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 11 9 6.1.6 Service Click Device Operation in the menu bar and then click Device Configuration > Security > Firewall > Service in th e navigation panel to open the screen as shown next. Use this screen to configure custom services for use in firewall rules or view the services th[...]

  • Página 120

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 120 Figure 56 Device Operation > Device Configuratio n > Security > Firewall > Service > Add/ Edit The following table describes the labels in this screen. 6.2 VPN This section shows you how to configure the VPN screens. These screens may vary depending on which model you?[...]

  • Página 121

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 121 There are two sets of VPN screens, VPN version 1.0 and VP N version 1.1. The version depends on the d evice’ s type and firmware version. 6.3 IPSec High A v ailability IPSec high availability (also known as VPN high availability) allows yo u to use a redundant (backup) VPN connecti[...]

  • Página 122

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 122 Figure 58 Device Operation > Device Configurat ion > Security > VPN > VPN Rules (IKE) The following table describes the labels in this screen. 6.3.2 VPN Rules (IKE) > Gateway Policy Add/Edit In the VPN Rule (IKE) screen, click Add in the top of the column or click Edit[...]

  • Página 123

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 123 Figure 59 Device Operation > Device Configuration > Security > VPN > VPN Rules (IKE) > Gateway Policy Add/Edit[...]

  • Página 124

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 124 The following table describes the labels in this screen. T able 48 Device Operation > Device Configuration > Security > VPN > VPN Rules (IKE) > Gateway Policy Add/Edit LABEL DESCRIPTION Property NA T Traversal Select this check box to ena ble NA T traversal. NA T trave[...]

  • Página 125

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 125 Remote Gateway Address T ype the WAN IP address or the domain name (up to 31 characters) of the IPSec router with which you're ma king the VPN conne ction. Set this field to 0.0.0.0 if the remote IPSec router has a dynamic W AN IP address. In order to have more than one active r[...]

  • Página 126

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 126 Local ID T ype Select IP to identify this device by its IP address. Select DNS to identify this device by a domain name. Select E-mail to identify this device by an e-mail address. Y ou do not configure the local ID type and content when you set Authentication Key to Certificate . Th[...]

  • Página 127

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 127 Content The configurati on of the peer content depends on the peer ID type. Do the following when you set Authentication Key to Pre-shared Key . •F o r IP , type the IP address of the com puter with which you will make the VPN connection. If you confi gure this field to 0.0.0.0 or [...]

  • Página 128

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 128 6.3.3 VPN Rules (IKE) > Network Policy Add/Edit In the VPN Rule (IKE) screen, click the Add icon from a gateway policy or click Edit fr o m an existing network policy to display the Network Policy screen. Password Enter the corre sponding password for the above user name. The pass[...]

  • Página 129

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 129 Figure 60 Device Operation > Device Configuration > Security > VPN > VPN Rules (IKE) > Network Policy Add/Edit[...]

  • Página 130

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 130 The following table describes the labels in this screen. T able 49 Device Operation > Device Co nfiguration > VPN > IKE IPSec LABEL DESCRIPTION Active If the Active check box is selected, packets for the tunnel trigger the device to build the tunnel . Clear the Active check [...]

  • Página 131

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 131 Mapping T ype Select One-to-One to translate a single (static) IP address on your LAN to a single virtual IP address. Select Many-to -One to translate a range of (static) IP addresses on your LAN to a single virtual IP address. Many-to-one rules are for traffic going out from your LA[...]

  • Página 132

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 132 Ending IP Address/ Subnet Mask When the Address T ype field is configured to Single Address , this field is N/A. When the Addres s T yp e field is configured to Range Addre ss , enter the end (static) IP address, in a range of computers on the LAN behind your device. When the Addres [...]

  • Página 133

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 133 6.3.4 VPN Rules (IKE) > Network Policy Move In the VPN Rule (IKE) screen, click the move icon to display the screen shown next.Use this screen to associate a network policy to a gateway policy . Figure 61 Device Operation > Device Configuration > Security > VPN > VPN R[...]

  • Página 134

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 134 The following table describes the labels in this screen. 6.3.5 VPN Rules (Manual) Select a device, click Device Operation in the menu bar and then click Device Configuration > Security > VPN > VPN Rules (Manual) tab to open the VPN Rule s screen. This is a read- only menu of[...]

  • Página 135

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 135 The following table describes the labels in this screen. 6.3.6 VPN Rules (Manual) > Add/Edit Select Manual from Figure 60 on page 129 to proceed to the next screen. T able 51 Configuration > VPN > Manual-Key IPSec LABEL DESCRIPTION # This is the VPN policy index number . Nam[...]

  • Página 136

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 136 Figure 63 Device Operation > Device Configuration > Security > VPN > VPN Rules (Manual) > Add/Edit The following table describes the labels in this screen. T able 52 Device Operation > Device C onfig ur at ion > Security > VPN > VPN Rules (Manual) > Add/[...]

  • Página 137

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 137 Allow NetBIOS T r affic Through IPSec T u nnel NetBIOS (Network Basic Inpu t/Output Syst em) are TCP or UD P packets that ena ble a compu ter to find other computers. It may sometimes be necessary to allow NetBI OS packets to pass through VPN tunnels in order to allo w local computer[...]

  • Página 138

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 138 6.3.7 VPN Global Setting Select a device, click Devi ce Operation > Device Configuration > Security > VPN > Global Setting tab to open the screen shown next. Us e this screen to change your device’ s global settings. Encryption Algori thm Select DES , 3DES or NULL from [...]

  • Página 139

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 139 Figure 64 Device Operation > Device Configurat ion > Security > VPN > Global Setting The following table describes the labels in this screen. T able 53 Device Operation > Device C onfiguration > Security > VPN > Global Setting LABEL DESCRIPTION Output Idle Tim[...]

  • Página 140

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 140 6.4 Anti-V irus This section shows you how to configure the Anti-V irus screens. These screens may vary depending on which model you’re co nfig urin g. Please see th e d ev ice’ s User ’ s Guide for more information about any of these screens or fields. 6.4.1 General Anti-Virus[...]

  • Página 141

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 141 Figure 65 Device Operation > Device Configuration > Security > Anti- Virus > General The following table describes the labels in this screen. T able 54 Device Operation > Device Configuration > Security > Anti-V irus > General LABEL DESCRIPTION General Setup E[...]

  • Página 142

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 142 6.5 Anti-Sp am This section shows you how to configure the Anti-Spam screens. These screens may vary depending on which model you’re co nfig urin g. Please see th e d ev ice’ s User ’ s Guide for more information about any of these screens or fields. 6.5.1 Anti-Sp am General Sc[...]

  • Página 143

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 143 Figure 66 Device Operation > Device Configurat ion > Security > Anti-S pam > General The following table describes the labels in this screen. T able 55 Device Operation > Device Configuration > Security > Anti-S pam > General LABEL DESCRIPTION General Setup En[...]

  • Página 144

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 144 From, T o Select the directions of travel of packets that you want to check. Select or clear a row or column’s first check box (with the interface label) to select or clear the interface’s whole row or column. For example, From LAN T o LAN means packets traveling from a computer [...]

  • Página 145

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 145 6.5.2 Anti-Sp am External DB Screen Click Device Operation > Device Configuratio n > Security > Anti-Spam > External DB to display the Anti-Spam External DB screen. Use this sc reen to enable or di sable the use of the anti-spam external database. Y ou can also configure [...]

  • Página 146

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 146 The following table describes the labels in this screen. T able 56 Device Operation > Device Configuration > Security > Anti-S pam > External DB LABEL DESCRIPTION External Database Enable External Database Enable the anti-spam external database feature to have the device [...]

  • Página 147

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 147 6.6 Anti-Sp am Lists Screen Click Device Operation > Device Configurat ion > Security > Anti-Spam > Lists to display the Anti-Spam Lists screen. Configure the whitelist to identify legitimate e- mail. Configure the blac klist to id entify spam e-mail. Y o u can create whi[...]

  • Página 148

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 148 6.6.1 Anti-Sp am List s Edit Screen T o open this screen, click Inser t or Edit in the Device Operation > Device Configuration > Security > Anti-Spam > Lists screen. Use this screen to configure an anti-spam white list entry to identify legit imate e-mail or a blacklist e[...]

  • Página 149

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 149 Figure 69 Device Operation > Device Configuratio n > Security > Anti -S pam > List s > Add/ Edit The following table describes the labels in this screen. T able 58 Device Operation > Device Configuration > Security > Anti-S pam > List s > Add /Edit LABEL[...]

  • Página 150

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 150 E-Mail Address This field displays whe n you se lect the E-Mail type. Enter an e-mail add ress or domain name (up to 63 ASCII characters). Y ou can enter an individual e-mail address like ab c@def.com. If you enter a domain na me, the device s earches the source e-mail address string[...]

  • Página 151

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 151 6.7 IDP This section shows you how to configure the IDP screens. These screens may vary depending on which model you’re co nfiguring. Please see the device’ s User ’ s Guide for more information about any of these screens or fields. 6.8 General Setup Use this screen to enable I[...]

  • Página 152

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 152 6.9 IDP Signatures The rules that define how to id entify and respond to intrusions are called “signatures”. Click Device Operation > Device Configuration > Security > IDP > Signatur e to see the device’ s signatures. 6.9.1 Att ack T ypes In the Device Operation >[...]

  • Página 153

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 153 Figure 71 Device Operation > Device Configuration > Security > IDP > Signature > Attack Ty p e s The following table descr ibes each attack type. T able 60 Device Operation > Device Configuration > Security > IDP > Signature > Attack Ty p e s T YPE DESCR[...]

  • Página 154

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 154 6.9.2 Intrusion Severity Intrusions are assigned a severity level based on the following table. The intrusion severity level then determines the default signature action. 6.9.3 Signature Actions Y ou can ena ble/disable individua l signature s. Y ou can log and/or have an alert sent [...]

  • Página 155

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 155 The following table describes signature actions. 6.9.4 Configuring IDP Signatures Use this screen to see the device’ s “group view” signature screen where you can view signatures by attack type. T o search for signat ures based on other criteria such as signa t ure name or ID, [...]

  • Página 156

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 156 The following table describes the labels in this screen. T able 63 Device Operation > Device Configuration > Security > IDP > Signature LABEL DESCRIPTION Switch to query view Click this hyperlink to go to a screen where you can search for signatures based on criteria othe[...]

  • Página 157

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 157 6.9.5 Query V iew Use this screen to see the device’ s “group view” signature screen, then clic k the Switch to query view link to go to this ‘query view” screen. Use this screen to search for signatures by crit eria such as name, ID, severity , attack type, vulnerable atta[...]

  • Página 158

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 158 Signature Search by Attributes Select this to search for signatures that match the criteria that you specify . Then select the criteria to search for . Hold down the [Ctrl] key if you want to make multiple selections from a list of attributes. Severity Search for signatures by severi[...]

  • Página 159

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 159 6.10 Signature Up date The device comes with built-in signatures cr eated by the ZyXEL Security Response T eam (ZSR T). These are regularly updated as new intrusions evolve. Use the Update screen to immediately download or sched ule new signature downloads. " Y ou should have al[...]

  • Página 160

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 160 File-based anti-virus signatures (see the anti-vi rus chapter) are included with IDP signatures. When you down load new signatures using the anti-virus Update screen, IDP signatures are also downloaded. The ve rsion number changes both in the anti-virus Update screen and this screen.[...]

  • Página 161

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 161 6.1 1 Content Filter This section shows you how to configure the Content Filter screens. These screens may vary depending on which model you’re co nfig urin g. Please see th e d ev ice’ s User ’ s Guide for more information about any of these screens or fields. 6.12 Content Fil[...]

  • Página 162

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 162 Content filtering all ows you to block certain web features, such as Cookies, and/or block access to specific websites. Use this screen to enable cont ent filtering, configure a schedul e, and create a denial message. Y ou can also choose specific compute rs to be included in or excl[...]

  • Página 163

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 163 Enable Content Fil ter for VPN traffic Select this check box to have the content filter apply to traffic that the device sends out through a VPN tunnel or receives through a VPN tunnel. The device applies the content filter to t he traffic before encrypting it or after decrypting it.[...]

  • Página 164

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 164 Enable Report Service Select this option to record conte nt filtering reports on myZyXEL.com. These reports consist of generated statistics and charts of access attempt s to web sites belonging to the cate gorie s yo u selected in your content filter configuration. Click Report to go[...]

  • Página 165

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 165 6.13 Content Filter Policy This screen lists groups of content filtering settings called policies. Co ntent filtering policies allow you to have dif ferent content filtering settin gs for dif ferent users or groups of users. For example, you may want to block most employ ees from acc[...]

  • Página 166

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 166 6.13.1 Content Filt er Policy: General T o open this screen, click Add or a policy’ s general icon in the Device Operation > Device Configuration > Security > Content Filter > Policy screen. Use this screen to restrict web features and edit the source (user) addresses o[...]

  • Página 167

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 167 The following table describes the labels in this screen. T able 68 Device Operation > Device Configuration > Security > Co ntent Filter > Policy > Add/ General LABEL DESCRIPTION Policy Name Enter a descriptive name of up to 31 print able ASCII characters (e xcept Exten[...]

  • Página 168

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 168 6.13.2 Content Filter Policy: External Dat abase T o open this screen, click a polic y’ s external database icon in the Device Operation > Device Configuration > Security > Content Filter > Policy screen. Use this screen to edit which content categories the content filt[...]

  • Página 169

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 169 Adult/Mature Content Selecting this category excludes pages that contain mate rial of adul t nature that does not necessarily co ntain excessive violence, sexua l content, or nudity . These pages include very profane or vulgar content and pages that are not a ppropriate fo r children[...]

  • Página 170

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 170 Gambling Selecting this category excludes pages where a user can place a bet or particip a te in a betting pool (including lotterie s) on line. It also includes pages that provide information, assistance, recommendations, or training on placing bets or participat ing in games of chan[...]

  • Página 171

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 171 Business/Economy Selecting this category excludes pages devoted to business firms, business information, economics, marketing, business manageme nt and entrepreneurship . This does not include pages that perform services that are defi ned in anot her category (such as Information T e[...]

  • Página 172

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 172 Military Selecting this category exclude s pages that promote or provide information on military branches or armed services. Political/Activist Groups Selecting this categ ory excludes pages sponsored by or which provide information on political parties, special interest groups, or a[...]

  • Página 173

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 173 Open Image/Media Search Selecting this catego ry excludes pages with image or video search capabilities which return graphical re sults (i.e. thumbnail pictures) that include potentially porn ographic c ontent along with non-porno graphic content (as defined in the Pornography cate g[...]

  • Página 174

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 174 Sexuality/Alternative Lifestyles Selecting this category excludes pages that provide info rmation, promote, or cater to gays, lesbians, swinger s, oth er sexual orientations or practices, or a particular fetish. Th is category does not include sites th at are sexually gratuitous in n[...]

  • Página 175

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 175 6.13.3 Content Filter Policy: Customization T o open this screen, click a pol icy’ s customization icon in the Device Operation > Device Configuration > Security > Content Filter > Policy screen. Use this screen to select good (allowed) web site addre sses for this poli[...]

  • Página 176

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 176 Figure 80 Device Operation > Device Configuration > Security > Co nten t Filter > Policy > Customizationl The following table describes the labels in this screen. T able 70 Device Operation > Device Configuration > Security > Content Filter > Policy > Cu[...]

  • Página 177

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 177 6.13.4 Content Filt er Policy: Schedule T o open this screen, click a pol icy’ s schedule icon in the Device Opera tion > Device Config- uration > Security > Content Fil ter > Policy screen. Use this scre en to set for which days and times the policy applies. Enable Web[...]

  • Página 178

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 178 Figure 81 Device Operation > Device Configuration > Security > Co nten t Filter > Policy > Schedulel The following table describes the labels in this screen. T able 71 Device Operation > Device Configuration > Security > Content Filter > Policy > Schedul[...]

  • Página 179

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 179 6.14 Content Filter Object s Use this screen to create a list of good (allowed) web site addresses, a list of bad (bloc ked) web site addresses, or block web sites ba sed on whet her the web site’ s address contains a keyword.. T o open this screen, click a device, click Device Ope[...]

  • Página 180

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 180 The following table describes the labels in this screen. 6.15 Content Filtering Cache T o open this screen, click a device, click Device Operation in the menu bar and then click Device Configuration > Security > Content Filter > Cache in the navigation panel. T able 72 Devic[...]

  • Página 181

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 181 Use this screen to view and configure your de vice’ s URL caching. Y ou c an also configure how long a categorized web site address remains in the cache as we ll as view those web site addresses to which access has been allowed or blocked based on the responses from the external co[...]

  • Página 182

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 182 T o open this screen, click a device, click Device Operation in the menu bar and then click Device Configuration > X Auth > Local User in the navigation panel. Figure 84 Device Operation > Device Configurat ion > Security > X Auth > Local User The following table de[...]

  • Página 183

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 183 Figure 85 Device Operation > Device Configur ation > Security > X Auth > RADIUS The following table describes the fields in this screen. T able 75 Device Operation > Devi ce Configuration > Security > X Auth > RADIU S LABEL DESCRIPTION Activate Authenticati on[...]

  • Página 184

    Chapter 6 Device Security Settings Vantage CNM User’s Guide 184[...]

  • Página 185

    Vantage CNM User’s Guide 185 C HAPTER 7 Device Advanced Settings Use these screens to configure De vice advanced settings such as NA T , Static Route, DNS and Remote Management. 7.0.1 NA T This section shows you how to configure the NA T screens. These screens may vary depending on which model you’re co nfiguring. Please see the device’ s Use[...]

  • Página 186

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 186 Figure 86 Device Operation > Device Configuration > Advanced > NA T > NA T Overview The following table describes the fields in this screen. T able 76 Device Operation > Device Configuration > Advanced > NAT > NAT Overview LABEL DESCRIPTION Global Setting Ma[...]

  • Página 187

    Chapter 7 Device Advanced Settings Vantage CNM User’s Guide 187 7.2 Port Forwarding Use this screen to configure port forwarding on the device. T o open this screen, click a device, click Device Operation in the menu bar , and then click Devic e Configuration > Advanced > NA T > Port Forwarding in the navigation panel. Port Forwarding Ru[...]

  • Página 188

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 188 Figure 87 Device Operation > Device Configuratio n > Advanc ed > NA T > Port Forwar ding The following table describes the labels in this screen. T able 77 Device Operation > Device Configuration > Advanced > NAT > Port Fowarding LABEL DESCRIPTION W AN Inter[...]

  • Página 189

    Chapter 7 Device Advanced Settings Vantage CNM User’s Guide 189 7.3 Address Mapping Use this screen to configure various types of network address transla tion (NA T) on the device. T o open this screen, click a device, click Device Operation in the menu bar , and then click Device Configuration > Advanced > NA T > Address Mapping in the [...]

  • Página 190

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 190 7.3.1 Edit Address Mapping Rule Use this screen to edit an address mapping rule on the device. T o open this screen, click Edit for a rule in the Device Operation > Device Configuration > Advanc ed > NA T > Addr ess Mapping screen. Figure 89 Device Operation > Device[...]

  • Página 191

    Chapter 7 Device Advanced Settings Vantage CNM User’s Guide 191 7.4 T rigger Port Use this screen to configure trigger port forwar ding on the device. T o open this screen, click a device, clic k Device Operation in the menu bar and then click Device Configuration > Advanced > NA T > T rigger Port in the navigation panel. Figure 90 Devic[...]

  • Página 192

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 192 7.4.1 Edit T rigger Port Rule Use this screen to edit a trigger port forwarding rule on the device. T o open this screen, click Configuration > NA T , select SUA Only or Full Featur e , click Edit , select T rigger Port , an d click the Index field for the rule. Figure 91 Device[...]

  • Página 193

    Chapter 7 Device Advanced Settings Vantage CNM User’s Guide 193 7.5 St atic Route This section shows you how to configure the St a t i c R o u t e screens. These screens may vary depending on which model you’re co nfig urin g. Please see th e d ev ice’ s User ’ s Guide for more information about any of these screens or fields. 7.6 St atic R[...]

  • Página 194

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 194 The following table describes the labels in this screen. 7.6.1 Edit S tatic Route Use this screen to edit a static route i n the device. T o open this screen, select a static route, and click Edit in the Device Operation > Device Configuration > Advanced > S tatic Route sc[...]

  • Página 195

    Chapter 7 Device Advanced Settings Vantage CNM User’s Guide 195 7.7 DNS This section shows you how to configure the DNS screens. These screens may vary depending on which model you’re co nfiguring. Please see the device’ s User ’ s Guide for more information about any of these screens or fields. 7.8 Address Record Use this screen to map a f[...]

  • Página 196

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 196 The following table describes the labels in this screen. 7.8.1 Add/Edit an Address Record Use this screen to create or edit an address record. Figure 95 Device Operation > Device Configuration > Advanced > DNS > Address Record > Add/Edit The following table describes[...]

  • Página 197

    Chapter 7 Device Advanced Settings Vantage CNM User’s Guide 197 7.9 Name Server Record Use this screen to specify the IP address of a DNS server that the device can que r y to res olve domain names for features like VPN, DDNS, and th e time server . T o open this screen, click a device, clic k Device Operation in the menu bar and then click Devic[...]

  • Página 198

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 198 7.9.1 Add/Edit a Name Server Record Use this screen to create or edit a name server record. Figure 97 Device Operation > Device Configurat ion > Advanced > DNS > Name Server Record > Add/Edit The following table describes the labels in this screen. T able 87 Device O[...]

  • Página 199

    Chapter 7 Device Advanced Settings Vantage CNM User’s Guide 199 7.10 Cache Use this screen to configure a device ’ s DNS cachin g. T o open this screen, c lick a device, click Device Operation and then click Device Configuration > Advanced > DNS > Cache in the navigation panel. Figure 98 Device Operation > Device Confi guration >[...]

  • Página 200

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 200 7.1 1 DDNS Use this screen to configure your Dynamic DNS (DDNS) on the device. T o open this screen, click a device, click Device Operation in the menu ba r and then click Device Configuration > Advanced > DNS > DDNS . Figure 99 Device Operation > Device Configuration &[...]

  • Página 201

    Chapter 7 Device Advanced Settings Vantage CNM User’s Guide 201 7.12 DHCP Use this screen to configure the DNS server info rmation that the device sends to DHCP clients on the LAN, DMZ or WLAN. T o open this screen, click a device, click Device Operation in the menu bar and then click Device Configuration > Advanced > DNS > DHCP in the n[...]

  • Página 202

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 202 Figure 100 Device Operation > Device Config uration > Advanced > DNS > DHCP The following table describes the labels in this screen. T able 90 Device Operation > Device Conf iguration > Advanced > D NS > DHCP LABEL DESCRIPTION DNS Servers Assigned by DHCP Se[...]

  • Página 203

    Chapter 7 Device Advanced Settings Vantage CNM User’s Guide 203 7.13 Remote MGMT This section shows you how to configure the Remote MGMT screens. These screens may vary depending on which model you’re configuring. Pleas e see the device’ s User ’ s Guide for more information about any of these screens or fields. 7.14 Remote MGMT Use this sc[...]

  • Página 204

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 204 The following table describes the labels in this screen. T able 91 Device Operation > Device Configuration > Advanced > Remote Ma nagement LABEL DESCRIPTION HTTPS Serve r Certifica te Select the Server Certificate tha t the device will use to identify itself. The device is[...]

  • Página 205

    Chapter 7 Device Advanced Settings Vantage CNM User’s Guide 205 Secure Client IP Address A secure client is a “trust ed” computer that is allowe d to communicate with the device using this service. Select All to allow any computer to access the device using this service. Choose Selected to just allow the computer with the IP address that you [...]

  • Página 206

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 206 SNMP Configuration Get Community Enter the Get Community , which i s the password for the incoming Get an d GetNext requests from the management station. The default is public and allo ws all requests. Set Community Enter the Set community , which is the password for incoming Set r[...]

  • Página 207

    Chapter 7 Device Advanced Settings Vantage CNM User’s Guide 207[...]

  • Página 208

    Chapter 7 D evice Advanc ed Settings Vantage CNM User’s Guide 208[...]

  • Página 209

    Vantage CNM User’s Guide 209 C HAPTER 8 Device Log This section shows you how to configure the Device Log screen. This screen may vary depending on which model you’re co nfig urin g. Please see th e d ev ice’ s User ’ s Guide for more information about any of these screens or fields. 8.1 Device Log Use the Logging Options screen to configur[...]

  • Página 210

    Chapter 8 Dev ice Log Vantage CNM User’s Guide 210[...]

  • Página 211

    Chapter 8 Device Log Vantage CNM User’s Guide 21 1 The following table describes the labels in this screen. T able 92 Device Operation > Device Configuration > Device Log > Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server nam e or the IP address of the mail server for the e-mail addresses specified below. If this [...]

  • Página 212

    Chapter 8 Dev ice Log Vantage CNM User’s Guide 212 Send Immediate Alert Select the categories of aler ts for which yo u want th e device to instantly e- mail alerts to the e-mail address specified in the Send Alerts T o field. Log Consolidation Log Consolidation Activ e Some logs (such as the Attacks logs) ma y be so numerous that it becomes easy[...]

  • Página 213

    Vantage CNM User’s Guide 213 C HAPTER 9 Device Configuration Management 9.1 Synchronization Data inconsistencies may occur if device conf igurations are made directly to the device instead of in V antage CNM. Use this screen to resolve any data inco nsistencies between the selected device and V antage CNM. T o u se this screen, select a device, c[...]

  • Página 214

    Chapter 9 Device Configuration Manag ement Vantage CNM User’s Guide 214 Figure 104 Device Operation > Configuration Managem ent > Synchronization (Customize) The following table describes the fields in this screen. 9.2 Configuration File Management Once your device is configured and functioning properly , it is highly recommended that yo u [...]

  • Página 215

    Chapter 9 Device Configuration Manageme nt Vantage CNM User’s Guide 215 " Before you restore a confi guration file, make sure th e new configuration does not prevent you from mana ging the device remotely , unless that is desired. 1 Make sure you restore a configuration file to an appropriate model. Otherwise, you may damage the device or lo[...]

  • Página 216

    Chapter 9 Device Configuration Manag ement Vantage CNM User’s Guide 216 9.2.2 Backup a Device Use this screen to manage configuration fil es uploaded to V antage CNM for the selected device. After a backup task is applied, you ca n check the status in Log & Report > Operation Report > Configuration File Backup & Restore Report . T o[...]

  • Página 217

    Chapter 9 Device Configuration Manageme nt Vantage CNM User’s Guide 217 Figure 106 Device Operation > Con figuration Management > Configuration File Management > Backup (Device ) The following table describes the fields in this screen T able 95 Device Operation > Configuration M anagem ent > Configuration File Management > Backu[...]

  • Página 218

    Chapter 9 Device Configuration Manag ement Vantage CNM User’s Guide 218 9.2.3 Backup & Restore (Folder) Use this screen to manage or restore config uration files uploaded to V antage CNM for multiple devices in the selected folder . Y ou cann ot use this screen to manage or restore configuration files uploaded to V antage CNM fo r a specific [...]

  • Página 219

    Chapter 9 Device Configuration Manageme nt Vantage CNM User’s Guide 219 " Y ou have to select device(s) with Read y in the Stat u s field before you can backup any configuration files. " The backup takes some time depen ding on your network environment. Figure 108 Device Operation > Configuration Mana gem ent >Configuration Manage[...]

  • Página 220

    Chapter 9 Device Configuration Manag ement Vantage CNM User’s Guide 220 9.2.5 Group Restore (Folder) Use this screen to restore configuration files fo r one or more devices in the specified folder . The configuration files must be available in the V antage CNM server . T o open this screen, select an existing configuration file and click Re store[...]

  • Página 221

    Chapter 9 Device Configuration Manageme nt Vantage CNM User’s Guide 221 The following table describes the fields in this screen. 9.3 Schedule List (Device) Use this screen to s ee or delete the scheduled configuration backup s that have not performed yet. T o open this screen, select a de vice, click Device Operation in menu bar and then click Co[...]

  • Página 222

    Chapter 9 Device Configuration Manag ement Vantage CNM User’s Guide 222 9.4 Schedule List (Folder) Use this screen to s ee or delete the scheduled configuration backup for a group that has not performed yet. T o open this scree n, select a folder , and then click Configuration Management > Configuration Fi le Management > Schedule List . Fi[...]

  • Página 223

    Chapter 9 Device Configuration Manageme nt Vantage CNM User’s Guide 223 9.4.1 Add/Edit Schedule List (Fol der) Use this screen to add or edit an backup schedul e for one or more devices in the selec ted set of configuration files. T o open this screen, select an active folder , click Configuration Management > Configuration File Management >[...]

  • Página 224

    Chapter 9 Device Configuration Manag ement Vantage CNM User’s Guide 224 The following table describes the fields in this screen. 9.5 Signature Profile Management Use this menu item to manage, back up and restore the configuration and signatures for services such as IDP and anti-virus. Y ou can also use this menu item to reset the service configur[...]

  • Página 225

    Chapter 9 Device Configuration Manageme nt Vantage CNM User’s Guide 225 Figure 1 13 Device Operation > Configuration Manag e ment > Signatur e Profile Managemen t > Backup & Restore The following table describes the fields in this screen. 9.5.2 Signature Profile Backup (Device) Use this screen to back up the anti-virus or IDP configu[...]

  • Página 226

    Chapter 9 Device Configuration Manag ement Vantage CNM User’s Guide 226 " Y ou cannot use this screen if the dev ice’s T urbo Card is not installed. Figure 1 14 Device Operation > Configuration Manag e ment > Signatur e Profile Managemen t > Backup & Restore > Backup (Device) The following table describes the fields in this[...]

  • Página 227

    Chapter 9 Device Configuration Manageme nt Vantage CNM User’s Guide 227 Figure 1 15 Device Operation > Configuration Manag e ment > Signatur e Profile Managemen t > Backup & Restore > Restore (Folder) The following table describes the fields in this screen 9.5.4 Reset to Factory Use this screen to restore anti-virus or IDP conf ig[...]

  • Página 228

    Chapter 9 Device Configuration Manag ement Vantage CNM User’s Guide 228 Figure 1 16 Device Operation > Configuration Manag e ment > Signatur e Profile Managemen t > Reset to Factory The following table describes the fields in this screen 9.6 Configuration Building Block Use this menu item to mana ge building blocks to the selected device[...]

  • Página 229

    Chapter 9 Device Configuration Manageme nt Vantage CNM User’s Guide 229 The following table describes the fields in this screen 9.7 Add/Edit a Configuration BB Use this menu item to mana ge building blocks to the selected device. See Chapter 34 on page 356 for more information abou t building blocks. T o open this menu item, click Add , Edit or S[...]

  • Página 230

    Chapter 9 Device Configuration Manag ement Vantage CNM User’s Guide 230 Figure 1 19 Device Operation > Configuration Manageme nt > Building Blo c k > Configuration BB > Edit Figure 120 Device Op er ation > Configu ratio n Ma nag ement > Building Block > Configuration BB > Save as The following table describes the fields in[...]

  • Página 231

    Chapter 9 Device Configuration Manageme nt Vantage CNM User’s Guide 231 Feature Select the menu item the building block is for . If you select System , a screen displays (as Device Operatio n > Device Configuratio n > General > System ) after you click Create . See Section 4.0.1 on p age 55 . If you select Time Setting , a screen display[...]

  • Página 232

    Chapter 9 Device Configuration Manag ement Vantage CNM User’s Guide 232 9.8 Component BB Use this menu item to manage component building blocks to th e selected device. A component BB is a part of setting such as a myZyXEL.co m account, an IP address, an IKE phase 1 or phase2 setting. See Chapter 34 on page 356 for more information about building[...]

  • Página 233

    Chapter 9 Device Configuration Manageme nt Vantage CNM User’s Guide 233 Figure 122 Device Operation > Configuration Mana gem ent > Building Block > Component BB > Add/Edit/Save as The following table describes the fields in this screen T able 109 Device Operation > Configuratio n Management > Building Block > Comp onent BB &g[...]

  • Página 234

    Chapter 9 Device Configuration Manag ement Vantage CNM User’s Guide 234[...]

  • Página 235

    Vantage CNM User’s Guide 235 C HAPTER 10 Firmware Management 10.1 Firmware List Use this screen to upload device firmware to V antage CNM. It is recommended administrators subscribe to a ZyXEL mailing list to be regu larly informed of ne w firmware ver s ions. All firmware files are downloaded to one repos itory within V antage CNM. All firmware [...]

  • Página 236

    Chapter 10 F irm wa r e Ma na g eme nt Vantage CNM User’s Guide 236 10.1.1 Add Firmware Use this screen to select the fi rmware you want to upload to V a ntage CNM. T o open this screen, click Add in the Device Operation > Firmware Management > Firmwar e List screen. Y ou must upload the whole firmware zi p file, which contains the followin[...]

  • Página 237

    Chapter 10 Firmware Management Vantage CNM User’s Guide 237 10.2 Scheduler List Use this screen to look at and maintain the list of scheduled firmware upgrades in V antage CNM. Once an upgrade is completed, V antag e CNM removes the upgrade record from this screen and adds it to the Log & Report > Operation Report > Firmware Upgrade Rep[...]

  • Página 238

    Chapter 10 F irm wa r e Ma na g eme nt Vantage CNM User’s Guide 238 Consider the following when you decide to upgrade firmware. • It is advisable to upgrade firmware during periods of low network activity , since each device must restart after firmware upload. • Y ou should also notify device owners before you begin the uplo ad. S ee the CNM [...]

  • Página 239

    Chapter 10 Firmware Management Vantage CNM User’s Guide 239 The following table describes the fields in this screen. 10.3.3 Device > Upgrade Use this screen to perform the fi rmware upg rade to the selected device right away or define a schedule for it. T o open this screen, click Upgrade on a firmware entry in the Device Operation > Firmwa[...]

  • Página 240

    Chapter 10 F irm wa r e Ma na g eme nt Vantage CNM User’s Guide 240 The following table describes the fields in this screen. T able 1 13 Device Operation > Firmware Mana ge ment > Firmware Upgrade (Device) > Upgrade T YPE DESCRIPTION Device Information This section displays the selected devi ce(s) to which you will perform the firmware u[...]

  • Página 241

    Vantage CNM User’s Guide 241 C HAPTER 11 License Management 1 1.1 Service Activiation Use this menu item to register the selected device and to activate subscription services. " This menu item is avail able if you click a device. 1 1.1.1 Registration Use this screen to registe r the selected device on www .myzyxel.com and to activate free tr[...]

  • Página 242

    Chapter 11 L ice ns e Managem e nt Vantage CNM User’s Guide 242 Figure 130 Device Operation > License Manag ement > Service Activiation > Registration > Save as a BB Enter the name of the new building block, and click Apply . The name must be 1-32 alphanumeric characters or underscores (_). It cannot include spaces. The name is case- [...]

  • Página 243

    Chapter 11 License Management Vantage CNM User’s Guide 243 1 1.1.2 Service Use this screen to look at or update the current status of subscription services, such as IDP and content filtering, in the select ed device. The V antage CNM serv er must be connected to the Internet and have access to www .myzyxel. com to update the current status. T o o[...]

  • Página 244

    Chapter 11 L ice ns e Managem e nt Vantage CNM User’s Guide 244 1 1.2 License S t atus Use this screen to look at the current status of licenses for subsc ription services, such as IDP and content filtering. T o open th is screen, click a device, click Device Operation in the menu bar and then click License Management > License S tatus in the [...]

  • Página 245

    Chapter 11 License Management Vantage CNM User’s Guide 245 1 1.2.1 Activate/Upgrade License Use this screen to activate a trial version of the service, if available, or to apply a license for the service to the device. T o open this screen, click Upgrade in the Device Operation > License Management > License S tatus screen. Figure 133 Devic[...]

  • Página 246

    Chapter 11 L ice ns e Managem e nt Vantage CNM User’s Guide 246 Figure 134 Device Operation > License Manag ement > Signature S tatus The following table describes the labels in this screen. T able 1 18 Device Operation > License Management > Signature Status LABEL DESCRIPTION Page Size Select this from the list box to set up to how m[...]

  • Página 247

    247 P ART III VPN Management " The examples in this section use one of the most compr ehensive examples of each screen, not every variat ion for each device type and firmware version. If you are unable to find a specific screen or field in this User ’s Guide, please see the User ’s Guide for the device for more information. VPN Community ([...]

  • Página 248

    248[...]

  • Página 249

    Vantage CNM User’s Guide 249 C HAPTER 12 VPN Community 12.1 VPN Community Use this menu item to manage VPN configurat ion between or among ZyXEL devices. T o open this menu item, select the device, click VPN Management in the menu ba r and then click VPN Community in the navigation panel. Figure 135 VPN Management > VPN Community The following[...]

  • Página 250

    Chapter 12 VPN Community Vantage CNM User’s Guide 250 12.1.1 Add/Edit a VPN Community Use this scree to configure VP N configuration between or among ZyXEL devices. W e know almost all VPN parameter values should be the same in peer VPN gateways. This screen helps you to easily configure VPN settings in one scree n and applies it to devices in on[...]

  • Página 251

    Chapter 12 VPN Community Vantage CNM User’s Guide 251 Click the Load a BB icon to use phase 1 or phase 2 settin g from an existing building block. The following pop-up screen appears. Figure 137 VPN Management > VPN Community > Add/ Edit > Load a BB Select a building block fro m the list box, and click Ap ply . Or click Cancel to close t[...]

  • Página 252

    Chapter 12 VPN Community Vantage CNM User’s Guide 252 The following table describes the fields in this screen. T able 120 VPN Management > VPN Community > Add/Edit FIELD DESCRIPTION VPN Community Community Name T ype a name to id entify this VPN community . Description T ype a descriptive note fo r the VPN co mmunity . Community T ype Selec[...]

  • Página 253

    Chapter 12 VPN Community Vantage CNM User’s Guide 253 Encryption Algorith m Select which key size and encryption alg orithm to use in the IKE SA. Choices are: DES - a 56-bit key with the DES encryption alg orithm 3DES - a 168-bit key with the DES encryption algorithm AES - a 128-bit key with the AES encryption algorith m The ZyW ALL and the remo [...]

  • Página 254

    Chapter 12 VPN Community Vantage CNM User’s Guide 254 Perfect Forward Secret (PFS) Select whether or not y ou want to enable Perfect Forward Secrecy (PF S) and, if you do, which Diffie-Hellman key group to use for encryption. Choice s are: NONE - disable PFS DH1 - enable PFS and use a 768-bit random number DH2 - enable PFS and use a 1024-bit rand[...]

  • Página 255

    Vantage CNM User’s Guide 255 C HAPTER 13 Installation Report 13.1 Inst allation Report Use this screen to view the VPN community stat us between or am ong th e devices. T o open this screen, click a device or a folder , and then click VPN Management from the menu bar and then click Installation Report in the navigation panel. Figure 140 VPN Manag[...]

  • Página 256

    Chapter 13 In st a llation Report Vantage CNM User’s Guide 256 13.1.1 Show Det ailed Inst allation Reportl Use this screen to view whether the VPN comm unities have been applied successfully to all member gateways. T o open this screen, click Show Detail in the VPN Management > Installation Report screen. Figure 141 VPN Management > Inst al[...]

  • Página 257

    Vantage CNM User’s Guide 257 C HAPTER 14 VPN Monitor 14.1 VPN Monitor Use this menu item to centrally and easily mo nitor all VPN community status among devices. Y ou can check from a communities list (by comm unity) or from a devices list (by device). 14.2 By Community Use this menu item to monitor a ll VPN community status. T o open this screen[...]

  • Página 258

    Chapter 14 VPN Monitor Vantage CNM User’s Guide 258 14.2.1 By Community > Show Det ail Use this screen to monitor VPN tunnel status. T o open this screen, click Show Detail in the VPN Management > VPN Monitor > By Community screen. Figure 143 VPN Management > VPN Monitor > By Community > Sho w Detail The following table describe[...]

  • Página 259

    Chapter 14 VPN Monitor Vantage CNM User’s Guide 259 14.2.2 By Community > Show Det ail > Diagnostic Use this screen to perform diagnostic action fo r a disconnected tunnel. T o open this screen, click Diagnostic in the VPN Management > VPN Monitor > By Community > Show Detail screen. Figure 144 VPN Management > VPN Monitor > [...]

  • Página 260

    Chapter 14 VPN Monitor Vantage CNM User’s Guide 260 Figure 145 VPN Management > VPN Monitor > By Co mmunity > Show Detail > Diagnostic > Logs The following table describes the fields in this screen. T able 125 VPN Management > VPN Monitor > By Community > Show Detail > Diagnostic > Logs LABEL DESCRIPTION Hide Cookie [...]

  • Página 261

    Chapter 14 VPN Monitor Vantage CNM User’s Guide 261 14.3 By Device 14.3.1 VPN T unnel S t atus Use this menu item to monitor a ll VPN tunnel status for devices. T o open this screen, click a device or a folder , and then click VPN Management from the menu bar and clic k VPN Management > VPN Monitor > By Device > VPN T unnel S tatus in th[...]

  • Página 262

    Chapter 14 VPN Monitor Vantage CNM User’s Guide 262 Figure 147 VPN Management > VPN Monitor > By Device > VPN T unnel S tatus > Search S pecial Tunnel The following table describes the fields in this screen. 14.3.3 SA Monitor Use this menu item to monitor a ll VPN tunnel status for devices. T o open this screen, click VPN Management f[...]

  • Página 263

    Chapter 14 VPN Monitor Vantage CNM User’s Guide 263 Figure 148 VPN Management > VPN Monitor > By Device > SA Monitor The following table describes the fields in this screen. T able 128 VPN Management > VPN Monitor > By Device > SA Monitor LABEL DESCRIPTION Page Size Select this from the list box to set up to h ow many records yo[...]

  • Página 264

    Chapter 14 VPN Monitor Vantage CNM User’s Guide 264[...]

  • Página 265

    265 P ART IV Monitor Device Status Monitor (267) Device HA Status Monitor (269) Device Alarm (271)[...]

  • Página 266

    266[...]

  • Página 267

    Vantage CNM User’s Guide 267 C HAPTER 15 Device Status Monitor This chapter describes the device status monitor . 15.1 Device S tatus This report shows a summary of device status. T o open this scre en, click Monitor in the menu bar and then click Devi ce S tatus in the navigation panel. " Right click on t he screen and click Refresh to get [...]

  • Página 268

    Chapter 15 Devic e Sta tu s Monito r Vantage CNM User’s Guide 268 Firmware Ve r s i o n This displays the firmware version number of the device. S tatus This displays the current status of the device. Online T ime T his disp lays how long the device has registered and connected to the V antage CNM server since last booted up. Up T ime This displa[...]

  • Página 269

    Vantage CNM User’s Guide 269 C HAPTER 16 Device HA Status Monitor This chapter describes the monitor for device high availability (HA) status on ZLD ZyW ALL device(s) such as ZyW ALL 1050 or ZyW ALL USG series. 16.1 Device HA S tatus This report shows a summary of device status. T o open this screen, select a ZLD device, click Monitor in the menu[...]

  • Página 270

    Chapter 16 Devic e HA Stat us Mon ito r Vantage CNM User’s Guide 270 S tatus This field displays the device’s current HA status. If the device is a master deivce, the possible status are: • Active : All VRRP interfaces status on the device are active. • Fault : One or more VRRP interfaces st atus on the device are inactive. If the device is[...]

  • Página 271

    Vantage CNM User’s Guide 271 C HAPTER 17 Device Alarm 17.1 Device Alarm Alarms are time-critical information that the de vice automatically sends out at the ti me of occurrence. Y ou may have a dministrators auto ma tically e-mailed when an alarm oc curs in the CNM System Setting > Conf iguration > Notification screen. See Section 21.4.1 on[...]

  • Página 272

    Chapter 17 Devic e Alar m Vantage CNM User’s Guide 272 17.1.3 Alarm S tates When an alarm is received by V antage CNM, it can be in one of three states: 17.1.4 Unresolved Alarms V iew recent alarms and who has taken care of or is taking care of them in this screen. An alarm becomes historical after selecting Clear . T o open this screen, click a [...]

  • Página 273

    Chapter 17 Device Alarm Vantage CNM User’s Guide 273 The following table describes the fields in this screen. 17.1.5 Responded Alarm Responded alarms are alarms that have been responded by an administrator . T able 134 Monitor > Device Alarm > Unresolved Alarm STAT E DESCRIPTION Device Name/ Folder Name This field displays the selected devi[...]

  • Página 274

    Chapter 17 Devic e Alar m Vantage CNM User’s Guide 274 Figure 152 Monitor > De vice Alarm > Responded Alarm The following table describes the fields in this screen. T able 135 Monitor > Device Alarm > Responded Alarm STAT E DESCRIPTION Device Name/ Folder Name This field displays the selected device or folder . Platform This is availa[...]

  • Página 275

    Chapter 17 Device Alarm Vantage CNM User’s Guide 275 Response T ime This field displays the time the alarm occurred. Clear Click this to remove the alarm from the monitor . See Section 17.1.5 on page 273 . T ot al Records This entry displays th e total numbe r of records on the curre nt p age of the list. Clear All Click this to remove all of the[...]

  • Página 276

    Chapter 17 Devic e Alar m Vantage CNM User’s Guide 276[...]

  • Página 277

    277 P ART V Log & Report Device Operation Repo rt (279 ) CNM Logs (291) VRP T (293)[...]

  • Página 278

    278[...]

  • Página 279

    Vantage CNM User’s Guide 279 C HAPTER 18 Device Operation Report Use this menu items to see summary reports for the tasks you submit to the devices through V antage CNM web configurator . 18.1 Firmware Upgrade Report Firmware Upgrade means that V antage CNM si gnals the device to request a firmware FTP upload from V antag e CNM. Th is report show[...]

  • Página 280

    Chapter 18 Devic e Operation R epor t Vantage CNM User’s Guide 280 The following table describes the labels in this screen. 18.1.1 Firmware Report Det ails This report shows more information for each de vice firmware upgrade result performed in a group firmware upgrade. See Section 10.3 on page 237 . T o open this report, click Sho w Detail in th[...]

  • Página 281

    Chapter 18 Devic e Operation Rep or t Vantage CNM User’s Guide 281 The following table describes the labels in this screen. 18.2 Configuration Report Use this screen to look at operation records for a device or groups. T o open this screen, click Log & Report > Operation Re port > Configuration Report . Figure 156 Log & Report > [...]

  • Página 282

    Chapter 18 Devic e Operation R epor t Vantage CNM User’s Guide 282 Figure 157 Log & Report > Operation Repo rt > Configuration Report (Group) The following table describes the labels in this screen. 18.2.1 Configuration Report Det ails Use this screen to look at the detailed status of an configuration operation. T o open this screen, cl[...]

  • Página 283

    Chapter 18 Devic e Operation Rep or t Vantage CNM User’s Guide 283 Figure 158 Log & Report > Operation Repo rt > Configuration Report > Show Details The following table describes the labels in this screen. T able 139 Log & Report > Operation Report > Configuration Repor t > Show Details LABEL DESCRIPTION Device Name This[...]

  • Página 284

    Chapter 18 Devic e Operation R epor t Vantage CNM User’s Guide 284 18.3 Configuration File Backup Report Use this screen to look at configuration file backup records for a device or groups. Refer to Section 9.2.1 on page 215 . T o open this sc re en , cl ick Log & Report in the menu bar and then Operation Report > Configuration File Ba cku[...]

  • Página 285

    Chapter 18 Devic e Operation Rep or t Vantage CNM User’s Guide 285 The following table describes the labels in this screen. 18.3.1 Configuration F ile Backup Report Det ails Use this screen to look at the detailed status of an configuration operation. T o open this screen, click Show Detail on a group backup record, click Log & Report in the [...]

  • Página 286

    Chapter 18 Devic e Operation R epor t Vantage CNM User’s Guide 286 Figure 161 Log & Report > Operation Repo rt > Config uration File Backup & Restore Report > Backup R eport (Group ) > Show D etail The following table describes the labels in this screen. 18.4 Configuration File Restore Report Use this screen to look at configu[...]

  • Página 287

    Chapter 18 Devic e Operation Rep or t Vantage CNM User’s Guide 287 Figure 162 Log & Report > Operation Repo rt > Config uration File Backup & Restore Report > Restore Report (Device) Figure 163 Log & Report > Operation Repo rt > Config uration File Backup & Restore Report > Restore Report (Group) The following ta[...]

  • Página 288

    Chapter 18 Devic e Operation R epor t Vantage CNM User’s Guide 288 18.5 Signature Profile Backup Report Use this screen to look at the back up records of device signature profile. Refer to Section 9.5.2 on page 225 . T o open this sc reen, click Log & Report in the menu bar and then click Operation Report > Signatur e Profile Backup & [...]

  • Página 289

    Chapter 18 Devic e Operation Rep or t Vantage CNM User’s Guide 289 18.6 Signature Profile Restore Report Use this screen to look at the restore r ecords of device si gnature profile. Refer to Section 9.5.3 on page 226 . T o open this sc reen, click Log & Report in the menu bar and then click Operation Report > Signatur e Profile Backup &am[...]

  • Página 290

    Chapter 18 Devic e Operation R epor t Vantage CNM User’s Guide 290 # This is the number of an individu al entry . Action T ime This field displa ys the date an d ti me the operation was re quested. Y ou can click the label to sort by this column. Device Name This disp lays th e device name for the signature pr ofi le restore. Y ou can click the l[...]

  • Página 291

    Vantage CNM User’s Guide 291 C HAPTER 19 CNM Logs 19.1 V ant age CNM Logs Use these screens to view and configure V antage CNM system log preferences. 19.1.1 CNM Logs Y ou c an view system logs for previous day , the last two days or up to on e wee k here. T o open this screen, click Log & Report in the menu bar and then click CNM Logs in the[...]

  • Página 292

    Chapter 19 CN M Lo g s Vantage CNM User’s Guide 292 The following table describes the labels in this screen. T able 145 LOG & Report > CNM Logs LABEL DESCRIPTION Incident Select one of the general categor ies of events whose logs you want to view from the first list box. Select a more specific type of event whose logs you want to view from[...]

  • Página 293

    Vantage CNM User’s Guide 293 C HAPTER 20 VRPT The Report menu activates V antage Report. This ch ap ter introduces V antage Report and its role in V antage CNM. Then, it explains how to set up and start V antage Report. Please refer to the V antage Report 3.1 User ’ s Guid e for more detailed information. 20.1 V ant age Report Overview " T[...]

  • Página 294

    Chapter 20 VRPT Vantage CNM User’s Guide 294 20.2 V ant age Report in V ant age CNM V antage Report in V antage CNM is a sp ecial release for V antage CNM only . No additional license is required to use it. V antage Repor t in V antage CNM gene rally supports the capabilities available in the professional versio n of standalone V antage Report, i[...]

  • Página 295

    Chapter 20 VRPT Vantage CNM User’s Guide 295 20.4 Opening V ant age Report in V ant age CNM After you set up a V anta ge Report in V antage CN M (see Section 20.3 on page 294 ), selec t a device that is mana ged by V a ntage Report, and click Log & Report > VRP T . Then you can see the device’ s relative reports displayed via V antage Re[...]

  • Página 296

    Chapter 20 VRPT Vantage CNM User’s Guide 296[...]

  • Página 297

    297 P ART VI CNM System Setting CNM System Setting (299) Maintenance (313) Device Owner (315) V antage CNM Software Upgr ad e (317) License Upgrade (319) About V antage CNM (32 1)[...]

  • Página 298

    298[...]

  • Página 299

    Vantage CNM User’s Guide 299 C HAPTER 21 CNM System Setting Use these screens to configure V ant age CNM server se ttings such as servers configurat ion, system maintenance, create and define device owner , software upgrade, license management, and about. 21.1 Servers Configuration Y ou can configure the se se rvers as you install V antage CNM (i[...]

  • Página 300

    Chapter 21 CN M Syst em Set ting Vantage CNM User’s Guide 300 Figure 170 CNM System Setting > Configuration > Serv ers > Configur at ion The following table describes the fields in this screen. T able 146 CNM System Setting > Configuration > Servers > Configuration LABEL DESCRIPTION V antage CNM Server Public IP Address Select U[...]

  • Página 301

    Chapter 21 CNM System Setting Vantage CNM User’s Guide 301 21.1.1 V ant age CNM Se rver Public IP Address If you change the V antage CNM server public IP ad dress, then each (V antage CNM- registered) device’ s Manager IP address must change too. 1 Go to the CNM System Settings > Configur ation > Servers > Configuration screen. 2 Enter[...]

  • Página 302

    Chapter 21 CN M Syst em Set ting Vantage CNM User’s Guide 302 Figure 171 CNM System Settin g > Configuration > Servers > S tatus The following table describes the fields in this screen. 21.3 User Access A User is an administrator . Set the maximum number of administrators allowed to log into V antage CNM at one time, V antage CNM idle ti[...]

  • Página 303

    Chapter 21 CNM System Setting Vantage CNM User’s Guide 303 User lockout is a protection me chanism to di scourage brute-force passw ord guessing attacks on a device’ s mana gement interface . Y ou can specify a lockout period that must expire befo re entering a fourth password after three incorrect passwords have been entered. Y ou can also for[...]

  • Página 304

    Chapter 21 CN M Syst em Set ting Vantage CNM User’s Guide 304 21.4.1 Notifications Use this screen to decide who should receive e-mail for device and CNM events that may warrant immediate attention such as a VPN tunn el down or a device rebo ot or a CNM log purge notificati on. De vice Owner is a variable that refers to the e-ma il address of the[...]

  • Página 305

    Chapter 21 CNM System Setting Vantage CNM User’s Guide 305 21.5 Log Setting Use this screen to set how many days the V a ntage CNM server keeps the logs, alarms and reports. And to decide a threshold to indicate an alarm when a devic e’ s alarm severity is higher than the selected level. Y ou can also select what type of system logs you wish to[...]

  • Página 306

    Chapter 21 CN M Syst em Set ting Vantage CNM User’s Guide 306 21.6 VRPT Management V antage CNM also includes V antage Report. See Chapt er 20 on page 293 for information about V antage Report in V antage CNM. 21.6.1 General Use this screen to manage the V antage Report in stances in V antage CNM. T o open this scre en, click CNM System Setting i[...]

  • Página 307

    Chapter 21 CNM System Setting Vantage CNM User’s Guide 307 21.6.2 Add/Edit VRPT Management Use this screen to configure a VRP T server . T o open this sc reen, clic k Add or Edit in the CNM System Setting > Config uration > VRP T Management screen. Figure 176 CNM System Setting > Configuration > VRPT Manageme n t > Add/Edit The fol[...]

  • Página 308

    Chapter 21 CN M Syst em Set ting Vantage CNM User’s Guide 308 21.7 Certificate Management Overview Some devices can provide certificates (also calle d digital IDs) for users to authenticate the device. Certificates are based on public-private key pairs. A certificate contains the certific ate owner's identity and p ub l ic key . Certificate [...]

  • Página 309

    Chapter 21 CNM System Setting Vantage CNM User’s Guide 309 21.7.2 Current Certificate Information Y ou can view your current certificate informat ion in this screen, including certificate name, type, origin and duration of validity . Figure 177 CNM System Setting > Configuration > Certific at e Ma nag em e nt The following table describes t[...]

  • Página 310

    Chapter 21 CN M Syst em Set ting Vantage CNM User’s Guide 310 21.7.3 Create CSR Y ou can create certificate s by entering the requ ested information into th e fields below . The n click Apply . Figure 178 CNM System Setting > Conf iguration > Certificate Management > Create CSR The following table describes the labels in this screen. Cre[...]

  • Página 311

    Chapter 21 CNM System Setting Vantage CNM User’s Guide 31 1 21.7.4 Import Certificate In this screen, you can Browse for a certificate that has already been downloaded to your computer . Select Apply to complete the certificate import. Figure 179 CNM System Sett ing > Configu ration > Cer tificate Mana gement > Import Certificate The fol[...]

  • Página 312

    Chapter 21 CN M Syst em Set ting Vantage CNM User’s Guide 312[...]

  • Página 313

    Vantage CNM User’s Guide 313 C HAPTER 22 Maintenance Use the Maintenance screens to manage, back up and restore V antage CNM system backup files. Data maintenance includes de vice firmware and configuration files you have uploaded to the V antage CNM server . Y ou c an back up or restore to your computer or V a ntage CNM. Y ou can choose what dom[...]

  • Página 314

    Chapter 22 Maintenance Vantage CNM User’s Guide 314 22.1.1 Backup Use this screen to save your curre nt V antage CN M system to the V antage CNM server or your computer . Y ou can enter extra information on the file in the Description text box. Backup configuration allo ws yo u to back up (sav e) the current config ura tion to a file on the V ant[...]

  • Página 315

    Vantage CNM User’s Guide 315 C HAPTER 23 Device Owner This screen list the address book wh ich is a list of personal details of people of device owners. Y ou can add, edit or remove a device owner in this screen. T o associate a device owner with a device, select the person’ s name in the Device Ow ner field when you add or edit a device (via r[...]

  • Página 316

    Chapter 23 Devic e Own e r Vantage CNM User’s Guide 316 Figure 183 CNM System setting > Device Owner > Add/Edit The following table describes the labels in this screen. T able 158 CNM System setting > Device Owner > Add/Edit LABEL DESCRIPTION Name T ype the person’s name. Description T ype some extra info rmation about the person. A[...]

  • Página 317

    Vantage CNM User’s Guide 317 C HAPTER 24 Vantage CNM Software Upgrade Use this screen to view the current V antage CNM software version or perform a software upgrade. T o open this screen, click CNM System Setting in the menu bar and then click Upgrade in the navigation pa nel. Figure 184 CNM System Sett ing > Upgrade[...]

  • Página 318

    Chapter 24 Vantage CNM Software Upgrad e Vantage CNM User’s Guide 318[...]

  • Página 319

    Vantage CNM User’s Guide 319 C HAPTER 25 License Upgrade Use this screen to renew a standard license key to continuely use V antage CNM after the trial period or the old license key expires. Click CNM System Setting in the menu bar and then click License in the navigation panel to display the next screen. Figure 185 CNM System Setting > Licens[...]

  • Página 320

    Chapter 25 L ice ns e Upg r ade Vantage CNM User’s Guide 320 25.0.1 License Upgrade License key is a licence to manage a spe cific number of ZyXEL devices. It can be found in the iCard. T ype a license key to the License Key field and click Apply to increase the maximum device number the V antage CNM is allowed to manage. Click Upgrade in the CNM[...]

  • Página 321

    Vantage CNM User’s Guide 321 C HAPTER 26 About Vantage CNM Use this screen to see V antage CNM’ s software version, release date and the copyright. T o open this screen, click CNM System Setting in the menu bar and then click About in the navigation panel. Figure 187 CNM System Se tting > About[...]

  • Página 322

    Chapter 26 Abo ut Vanta g e CNM Vantage CNM User’s Guide 322[...]

  • Página 323

    323 P ART VII Account Management Group (325) Account (329)[...]

  • Página 324

    324[...]

  • Página 325

    Vantage CNM User’s Guide 325 C HAPTER 27 Group Use these screens to manage V antage CNM user groups. A group is associa ted with the privilege you defined and it is fo r one manageme nt do main. After y ou create a grou p, you can associate the user(s) with this group before th e user(s) can perform any functions in V antage CNM. " The user [...]

  • Página 326

    Chapter 27 G ro u p Vantage CNM User’s Guide 326 The following table describes the fields in this screen. 27.1.1 Add User Group Use this screen to create or edit a “user group” (administrator permission template). T o open this screen, click Add or Edit in the Account Management > Group screen. Figure 189 Account Management > Group >[...]

  • Página 327

    Chapter 27 Group Vantage CNM User’s Guide 327 The following table describes the fields in this screen. T able 161 Account Management > Group > Add LABEL DESCRIPTION Basic Information Group Name T ype a group name for this tempe rlate. Description T ype the description for the group. Device Access Privileges Click the icon a nd the associate[...]

  • Página 328

    Chapter 27 G ro u p Vantage CNM User’s Guide 328[...]

  • Página 329

    Vantage CNM User’s Guide 329 C HAPTER 28 Account An account is a user with permissions inhe rited from the associated group. “Root” is the predefined administrator belonging to the Super group. Only “root” or any accounts belonging to Super group can do everyth ing including managing the V antage CNM system. Custom administra tors have no[...]

  • Página 330

    Chapter 28 Ac co unt Vantage CNM User’s Guide 330 Figure 190 Account Manage ment > Accoun t The following table describes the fields in this screen. 28.2 Add/Edit an Administrator Account Click Add in the Account M anagement > Account screen to create a new Administrator account or click Edit to modify an existing Administrator account. Use[...]

  • Página 331

    Chapter 28 Account Vantage CNM User’s Guide 331 Figure 191 Account Manage ment > Accoun t > Add/Edit The following table describes the fields in this screen. T able 163 Account Management > Account > Add/Edit LABEL DESCRIPTION Username T ype the admin istrator login name a ssociated wi th the password that you log into V antage CNM wi[...]

  • Página 332

    Chapter 28 Ac co unt Vantage CNM User’s Guide 332[...]

  • Página 333

    333 P ART VIII T roubleshooting T roubleshooting (335)[...]

  • Página 334

    334[...]

  • Página 335

    Vantage CNM User’s Guide 335 C HAPTER 29 Troubleshooting This chapter offers some sugg estions to solve problems you might encounter . The potential problems are divided into the following categories. • V antage C NM Access and Login • V antage Report 29.1 V ant age CNM Access and Login See the Quick Start Guide for additional suggestions. V [...]

  • Página 336

    Chapter 29 Tro u blesh oo tin g Vantage CNM User’s Guide 336 29.2 Device Management V One device always keeps in On_Pending status in the device window . How can I do? A device in the On_Pending status means th ere are some pending tasks the V antage CNM should set but has not been set on the device. If the device keeps in the status for a long t[...]

  • Página 337

    Chapter 29 Troubleshooting Vantage CNM User’s Guide 337 29.4 V ant age Report V There is no information in any report for my device. 1 If you just added the device, wait. See T able 22 4 on page 413 for the amount of time it takes for information to appear in each report. 2 Click System > VRP T Management > General > Receiver Monitor . T[...]

  • Página 338

    Chapter 29 Tro u blesh oo tin g Vantage CNM User’s Guide 338[...]

  • Página 339

    339 P ART IX Appendices and Index Product Specification s (341) Setting up Y our Computer ’ s IP Address (345) Pop-up W indows, Java Scripts and Java Permissions (361) IP Addresses and Subnetting (367) IP Address Assignment Conflicts (375) Common Services (379) Importing Certificates (383) Open Software Announcements (393) Legal Information (417)[...]

  • Página 340

    340[...]

  • Página 341

    Vantage CNM User’s Guide 341 A PPENDIX A Product S pecifications This appendix summarizes V antage CNM’ s and V antage Rep ort’ s specifications. V ant age CNM S pecifications This section summarizes V antage CNM’ s specifications. T able 164 Firmware Specifications FEATURE DESCRIPTION Default User Name root Default Password root Object T r[...]

  • Página 342

    Appendix A Product Specifications Vantage CNM User’s Guide 342 Data Maintenance Back up and restor e entire V antage CN M configuration System Management V antage CNM server IP address FTP server Mail server Idle timeout Brute-force password protection Notifica ti on recipients Administrator privileges T able 165 Feature Specifications FEATURE DE[...]

  • Página 343

    Appendix A Product Specifications Vantage CNM User’s Guide 343 thawtepersonalbasicca Feb 13, 1999 E6:0B:D2:C9:CA:2D: 88:DB:1A:71: 0E:4B:78:EB:02:41 verisignclass1ca Mar 26, 2004 97:60:E8:5 7:5F:D3:50:47:E5:43: 0C:94:36:8A:B0:62 verisignclass1g2ca Ma r 26, 2004 DB:23:3D:F 9:69:FA:4B:B9:95:80: 44:73:5E:7D:41:83 entrustsslca Jan 9, 2003 DF:F2:80:73:[...]

  • Página 344

    Appendix A Product Specifications Vantage CNM User’s Guide 344 V ant age Report S pecifications This section summarizes V antage Report’ s specifications. Se e T able 224 on page 413 for specifications about the time it takes the V antag e Report se rver to process information from devices. equifaxsecureglobal ebusinessca1 Jul 19, 2003 8F:5D:77[...]

  • Página 345

    Vantage CNM User’s Guide 345 A PPENDIX B Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000 /XP , M acintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your[...]

  • Página 346

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 346 Figure 192 WIndows 95/98 /Me: Networ k: Configura tion Inst alling Components The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microsof t Netwo rks. If you need the adapter: [...]

  • Página 347

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 347 Configuring 1 In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties 2 Click the IP Address tab. • If your IP address is dynamic, select Obtain an IP address automatically . • If you have a static IP address, [...]

  • Página 348

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 348 Figure 194 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know you r ga teway’ s IP addr ess, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click [...]

  • Página 349

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 349 Figure 195 Windows XP: S t ar t Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W indow s 20 00/NT). Figure 196 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

  • Página 350

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 350 Figure 197 Windows XP: Control Panel: Network Connections: Pro per ties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties . Figure 198 Windows XP: Local Area Conne ction Properties 5 The Internet Protocol TCP/IP Properti[...]

  • Página 351

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 351 Figure 199 Windows XP: Internet Protocol (TCP/IP) Propert ies 6 If you do not know your gateway's IP ad dress, remove any previously installed gateways in the IP Settings tab and click OK . Do one or more of the fo llowing if you want to configure additi onal IP [...]

  • Página 352

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 352 Figure 200 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indow s XP): • Click Obtain DNS server address automatically if yo u d o not know your DNS server IP address(es). • If you know your DNS se[...]

  • Página 353

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 353 Figure 201 Windows XP: Internet Protocol (TCP/IP) Propert ies 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click Close ( OK in W indows 2000/NT) to close the Local Area Connection Properties window . 10 Close the Network Connections w indow[...]

  • Página 354

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 354 Figure 202 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 203 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4 For statically assigned settings, do the follo[...]

  • Página 355

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 355 • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your device in the Router addr es s bo x. 5 Close the TCP/IP Contr ol Panel . 6 Click Save if prompted, to save chan ges to your configurati[...]

  • Página 356

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 356 Figure 205 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of[...]

  • Página 357

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 357 " Make sure you are logged in as the root administrator . Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Setting and c[...]

  • Página 358

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 358 • If you have a dyna mic IP address, click Automatically obtain IP address settings with and select dhcp from the drop down list. • If you have a static IP address, click S tatically set IP Addresses and fill in the Address , Sub net mask , and Default Gateway Add[...]

  • Página 359

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 359 Figure 210 Red Hat 9.0: Dynamic IP Address Setting in ifconfig-eth0 • If you have a static IP address, enter static in t he BOOTPROTO= field. T ype IPADDR = followed by the IP address (in do tted decimal notation) and type NETMASK = followed by the subnet mask. The [...]

  • Página 360

    Appendix B Setting up Your Computer’s IP Address Vantage CNM User’s Guide 360 V erifying Settings Enter ifconfig in a terminal screen to ch eck your TCP/IP properties. Figure 214 Red Hat 9.0: Checking TCP/IP Properties [root@localhost]# ifconfig eth0 Link encap:Ethernet HWadd r 00:50:BA:72:5B:44 inet addr:10.1.19.129 Bca st:10.1.19.255 Mask:255[...]

  • Página 361

    Vantage CNM User’s Guide 361 A PPENDIX C Pop-up Windows, Java Script s and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-up win dows from your device. • Java Scripts (enabled by defa ult). • Java permissions (enabled by default). " Internet Explorer 6 screens are used here. Screens for oth[...]

  • Página 362

    Appendix C Pop-up Windows, Java Scripts and Java Permissions Vantage CNM User’s Guide 362 2 Clear the Block pop-ups check box in the Pop-up Block e r section of the screen. This disables any web po p-up blockers you ma y have enabled . Figure 216 Internet Options: Privacy 3 Click Apply to save this setting. Enable pop-up Blockers with Exceptions [...]

  • Página 363

    Appendix C Pop-up Windows, Java Scripts and Java Permissions Vantage CNM User’s Guide 363 Figure 217 Internet Options: Privacy 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.167.1. 4 Click Add to move the IP address to the list of Allowed sites .[...]

  • Página 364

    Appendix C Pop-up Windows, Java Scripts and Java Permissions Vantage CNM User’s Guide 364 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. Java Script s If pages of the web configura tor do not display properly in Internet Explorer, check that Java Scripts are allowed. 1 In Internet Explorer , click T ools , Inte[...]

  • Página 365

    Appendix C Pop-up Windows, Java Scripts and Java Permissions Vantage CNM User’s Guide 365 Figure 220 Security Settings - Java Scripting Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions make sure that[...]

  • Página 366

    Appendix C Pop-up Windows, Java Scripts and Java Permissions Vantage CNM User’s Guide 366 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is sele cted. 3 Click OK to clos e the wind ow . Figure 222 Java (Sun)[...]

  • Página 367

    Vantage CNM User’s Guide 367 A PPENDIX D IP Addresses and Subnetting This appendix introduces IP addresses and subnet masks. IP addresses identify ind ividual devices on a network. Every networking device (includin g computers, servers, routers, printe rs, etc.) ne eds an IP address to communicate across the network. These networking devices a re[...]

  • Página 368

    Appendix D IP Addresses a nd Subnetting Vantage CNM User’s Guide 368 Figure 223 Network Number and Host ID How much of the IP address is the network number and how much is the host ID varies according to the s ubnet mask. Subnet Masks A subnet mask is used to dete rmine which bits are part of th e network number , and which bits are part of the h[...]

  • Página 369

    Appendix D IP Addresses and Subnetting Vantage CNM User’s Guide 369 Subnet masks are expressed in dotted decimal no tation just like IP addresses. The follow ing examples show the binary and decimal not ation for 8-bit, 16-bit, 24-bit an d 29-bit subnet masks. Network Size The size of the network number determines the maximum number of po ssible [...]

  • Página 370

    Appendix D IP Addresses a nd Subnetting Vantage CNM User’s Guide 370 Subnetting Y ou can use subnetting to divide one network into multiple sub-networks. In the following example a network administrator creates two sub-networks to isolate a group of servers from the rest of the c ompany network for security reasons. In this example, the company n[...]

  • Página 371

    Appendix D IP Addresses and Subnetting Vantage CNM User’s Guide 371 Figure 225 Subnetting Example: Af ter Subnetting In a 25-bit subnet the host ID has 7 bits , so each sub-network has a maximum of 2 7 – 2 or 126 possible hosts (a host ID of all zeroes is the subnet’ s address itself, all ones is the subnet’ s broadcast address). 192.168.1.[...]

  • Página 372

    Appendix D IP Addresses a nd Subnetting Vantage CNM User’s Guide 372 Example: Eight Subnet s Similarly , use a 27-bit mask to create eight subnets (000, 00 1, 010, 01 1, 100, 101, 1 10 and 111 ) . The following table shows IP address last octet values for each subnet. T able 177 Subnet 2 IP/SUBNET MASK NETWORK NUMBER LAST OCTE T BIT VA L U E IP A[...]

  • Página 373

    Appendix D IP Addresses and Subnetting Vantage CNM User’s Guide 373 Subnet Planning The following table is a summary for su bnet planning on a network with a 24-bit network number . The following table is a summary for su bnet planning on a network with a 16-bit network number . 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 224 225 254 [...]

  • Página 374

    Appendix D IP Addresses a nd Subnetting Vantage CNM User’s Guide 374 Configuring IP Addresses Where you obtain your netwo rk number depends on yo ur particular situation. If the ISP or your network administrator assigns yo u a bloc k of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask. If the IS[...]

  • Página 375

    Vantage CNM User’s Guide 375 A PPENDIX E IP Address Assignment Conflict s This appendix describes situations where IP addre ss conflicts may occur . Subs cribers with duplicate IP addresses will not be able to access the Internet. Case A: The device is using the same LAN and W AN IP addresses The following figure shows an example where the device[...]

  • Página 376

    Appendix E IP Address Assignment Conflicts Vantage CNM User’s Guide 376 Figure 227 IP Address Conflicts: Case B T o solve this problem, make sure the device LAN IP address is not in the DHCP IP addre ss pool. Case C: The Subscriber IP address is the same as the IP address of a network device The following figure depicts an example where the subsc[...]

  • Página 377

    Appendix E IP Address Assignment Conflicts Vantage CNM User’s Guide 377 Figure 229 IP Address Conflicts: Case D This problem can be solved by adding a VLAN- enabled switch or set the computers to obtain IP addresses dynamically .[...]

  • Página 378

    Appendix E IP Address Assignment Conflicts Vantage CNM User’s Guide 378[...]

  • Página 379

    Vantage CNM User’s Guide 379 A PPENDIX F Common Services The following table l ists some commonly-used se rvices and their associated protocols and port numbers. For a comprehensive list of port numbers, ICMP type/code numbers and services, visit the IANA (Internet Assigned Number Authority) web site. • Name : This is a short, descrip tive name[...]

  • Página 380

    Appendix F Comm o n Ser vice s Vantage CNM User’s Guide 380 FTP TCP TCP 20 21 File T ransfer Program, a program to enable fast transfe r of files, including large files that may not be possible by e-mail. H.323 TCP 1720 NetMeeting uses this protoco l. HTTP TCP 80 Hyper T ext T ransfer Protocol - a client/ server protocol for the world wide web. H[...]

  • Página 381

    Appendix F Common Services Vantage CNM User’s Guide 381 RTS P TCP/UDP 554 The Real Time S treaming (media control) Protocol (R TSP) is a remote control for multimedia on the Internet. SFTP TCP 11 5 Simple File Transfer Protocol. SMTP TCP 25 Simple Mail Transfer Protocol is the message-exchange standard for the Internet. SMTP enables you to mo ve [...]

  • Página 382

    Appendix F Comm o n Ser vice s Vantage CNM User’s Guide 382[...]

  • Página 383

    Vantage CNM User’s Guide 383 A PPENDIX G Importing Certificates This appendix shows importing certificat es examples using In ternet Ex plorer 5. Import V ant age CNM Certificates into Net scape Navigator In Netscape Navigator , you ca n permanently trust the V antage CNM’ s server certificate by importing it into your operating system as a tru[...]

  • Página 384

    Appendix G Importing Certificates Vantage CNM User’s Guide 384 Figure 231 Login Screen 2 Click Install Certificate to open the Install Certificate wizard. Figure 232 Certificate General Information befor e Import 3 Click Next to begin the Install Certificate wizard.[...]

  • Página 385

    Appendix G Importing Certificates Vantage CNM User’s Guide 385 Figure 233 Certificate Import Wizard 1 4 Select where you would like to store the certificate and then click Next . Figure 234 Certificate Import Wizard 2 5 Click Finish to complete the Import Certificate wizard.[...]

  • Página 386

    Appendix G Importing Certificates Vantage CNM User’s Guide 386 Figure 235 Certificate Import Wizard 3 6 Click Ye s to add the V a ntage CNM certificate to the root store. Figure 236 Root Certificate S tore[...]

  • Página 387

    Appendix G Importing Certificates Vantage CNM User’s Guide 387 Figure 237 Certificate General Information af ter Import Enrolling and Importing SSL Client Certificates The SSL client needs a certificate if Authenticate Client Certificates is selected on the device. Y ou must have imported at least one trus ted CA to the device in order for the Au[...]

  • Página 388

    Appendix G Importing Certificates Vantage CNM User’s Guide 388 Figure 238 Device’s T rusted CA Screen The CA sends you a package containing the CA ’ s trusted certificate(s), your persona l certificate(s) and a password to inst all the personal certificate(s). Inst allin g the CA ’s Certificate 1 Double click the CA ’ s trusted certificat[...]

  • Página 389

    Appendix G Importing Certificates Vantage CNM User’s Guide 389 Figure 239 CA Certificate Example 2 Click Install Certificate and follow the wizard as show n earlier in this appendix. Inst alling Y our Personal Certificate(s) Y ou nee d a password in advance. The CA may is sue the pas sword or you may have to sp ecify it during the enrollment. Dou[...]

  • Página 390

    Appendix G Importing Certificates Vantage CNM User’s Guide 390 2 The file name and path of the certificate y ou double-clicked should automatically appear in the File name text box. Click Br owse if you wish to import a dif ferent certific ate. Figure 241 Personal Certificate Import Wizard 2 3 Enter the password give n to you by the CA. Figure 24[...]

  • Página 391

    Appendix G Importing Certificates Vantage CNM User’s Guide 391 Figure 243 Personal Certificate Import Wizard 4 5 Click Finish to complete the wizard and begin the import process. Figure 244 Personal Certificate Import Wizard 5 6 Y ou should see the following screen when the ce rtificate is correctly installed on your computer . Figure 245 Persona[...]

  • Página 392

    Appendix G Importing Certificates Vantage CNM User’s Guide 392 Using a Certificate When Accessing the Device Example Use the following procedure to access the device via HTTPS. 1 Enter ‘https://device IP Address/ in your browser ’ s web address field. Figure 246 Access th e Device Via HTTPS 2 When Authenticate Client Certificates is selected [...]

  • Página 393

    Vantage CNM User’s Guide 393 A PPENDIX H Open Sof tware Announcement s Notice Information herein is subject to change withou t notice. Companies, name s, and data used in examples herein are fictitious unless otherwise noted. No part may be reproduced or transmitted in any form or by any means, electronic or mechanical , for any purpos e, except [...]

  • Página 394

    Appendix H Open Software Announcements Vantage CNM User’s Guide 394 This Product includes ant -contrib 1.0b3 version, axis 1.2.1 version, a[ache-commoms qua r tz 1.5.2 version, log4j 10 20 14 version, j2sh, xerces 2.8 .1 version, apache-an y 1.6.5 version, and apache-tomcat 5.0 version under Apache S oftware License Apache License V ersion 2.0, J[...]

  • Página 395

    Appendix H Open Software Announcements Vantage CNM User’s Guide 395 2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to Y ou a perpetual, worldwide, no n-exclusive, no-charge, royalty- free, irrevocable copyright license to reproduce, prepare Derivative W orks of, publicly display [...]

  • Página 396

    Appendix H Open Software Announcements Vantage CNM User’s Guide 396 6. T rademarks. This License does not grant perm ission to use the trade names, trademarks, service marks, or product names of the Licensor , exce pt as require d for reasonable and customary use in describing the origin of the W ork and reproducing the conten t of the NOTICE fil[...]

  • Página 397

    Appendix H Open Software Announcements Vantage CNM User’s Guide 397 Products derived from this softwa re may not be called "Apache", nor may "Apache" ap pear in their name, without prior wr itten permission of the Apache Software Foundatio n. THIS SOFTW ARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED W ARRANTI[...]

  • Página 398

    Appendix H Open Software Announcements Vantage CNM User’s Guide 398 T o protect your rights, we need to make restricti ons that forbid distributors to deny you th ese rights or to ask you to surrender these righ ts. These restrictions translate to certain responsibilities for you if you distribute co pies of the library or if you modify it. For e[...]

  • Página 399

    Appendix H Open Software Announcements Vantage CNM User’s Guide 399 The precise terms and co nditions for copying, distribution and mod ification follow . Pay close attention to the difference between a "work ba sed on the library" and a "work that uses the library". The former contains code derived from the library , whereas [...]

  • Página 400

    Appendix H Open Software Announcements Vantage CNM User’s Guide 400 function must still compute square roots.) These requirements appl y to th e modified work as a whole. If identifiable sections of t hat work are not derived from the Library , and can be reasonably considered independ ent and separate works in themse lves, then this License, and[...]

  • Página 401

    Appendix H Open Software Announcements Vantage CNM User’s Guide 401 6. As an exception to the Sections above, you ma y also combine or link a "work that uses the Library" with the Library to produce a work containing portions of t he Library , and distribute that work under terms of your choice, p rovided that the terms permit m odifica[...]

  • Página 402

    Appendix H Open Software Announcements Vantage CNM User’s Guide 402 8. Y ou may not copy , modify , sublicense, link with, or distribute the Library except as expressly provided under this License. Any a tte mpt otherwise to copy , modify , sublicense, link with, or distribute the Library is void, and will automatically te rminate your rights und[...]

  • Página 403

    Appendix H Open Software Announcements Vantage CNM User’s Guide 403 14. If you wish to incorporate parts of the Library in to other free p r ogr ams whose distributio n conditions are incompatible with these, write to the author to ask for permission. For software which is copyrighted by the Free Software Fou n dation, write to the Free Software [...]

  • Página 404

    Appendix H Open Software Announcements Vantage CNM User’s Guide 404 When we speak of free software, we are referri ng to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute co pies of free software (and charge for this serv ic e if you wish), that you receive source code or can get it [...]

  • Página 405

    Appendix H Open Software Announcements Vantage CNM User’s Guide 405 b) Y ou must cause any work that you distribute or p ubl ish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License. c) If the modified program norm ally re[...]

  • Página 406

    Appendix H Open Software Announcements Vantage CNM User’s Guide 406 4. Y ou may not copy , modify , sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherw ise to copy , modify , sublicense or distribute the Program is void, and will au tomaticall y terminate your rights under this License. Howeve[...]

  • Página 407

    Appendix H Open Software Announcements Vantage CNM User’s Guide 407 10. If you wish to incorporate parts of the Program into o ther free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foun dation, write to the Free Software Foundation; we some[...]

  • Página 408

    Appendix H Open Software Announcements Vantage CNM User’s Guide 408 This software is provided "AS IS," with out a warranty of any kind. ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENT A TIO NS AND W ARRANTIES, INCLUDING ANY IMPLIED W ARRANTY OF MERCHANT ABILITY , FITNESS FOR A P AR TICULAR PURPOSE OR NON-INFRINGEMENT , A RE HEREBY EXCLUDED[...]

  • Página 409

    Appendix H Open Software Announcements Vantage CNM User’s Guide 409 DISTRIBUTING THE SOFTW ARE OR ITS DERIV A TIVES. IN NO EVENT WILL SUN MICROSYSTEMS, INC. OR ITS LICENS ORS BE LIABLE FOR ANY LOST REVENUE, PROFIT OR DA T A, OR FOR DIRECT , INDIRECT , SPECIAL, CONSEQUENTIAL, INCIDENT AL OR PUNITIVE DAMAGES, HOWEVER CAUSED AND REGARDLESS OF THE TH[...]

  • Página 410

    Appendix H Open Software Announcements Vantage CNM User’s Guide 410 software intended to supersed e any component(s) of the Redi stributables (unless otherwise specified in the applicable README file), (iii) you do not remove or alter any proprietary legends or notices contained in o r on the Redistributables, (iv) you only distribute the Redistr[...]

  • Página 411

    Appendix H Open Software Announcements Vantage CNM User’s Guide 41 1 8. T rademarks and Logos. Y ou acknowledge and agree as between yo u and Sun that Sun owns the SUN, SOLARIS, JA V A, JINI, FOR TE, and iPLANET trademarks and all SUN, SOLARIS, JA V A, JINI, FOR TE, and iPLANET -related trademarks, service marks, logos and other brand designation[...]

  • Página 412

    Appendix H Open Software Announcements Vantage CNM User’s Guide 412 20 W ARRANTIES OF MERCHANT ABILITY AND FITNESS FOR A P AR TICULAR PURPOSE ARE 21 DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR 22 ANY DIRECT , INDIRECT , INCIDENT AL, SPECIAL, EXEMPLAR Y , OR CONSEQUENTIAL DAMAGES 23 (INCLUDING , BUT NOT LIMITED [...]

  • Página 413

    Appendix H Open Software Announcements Vantage CNM User’s Guide 413 The Software a nd Documentation conta in mate rial that is protected by United States Copyright Law and trade secre t law , and by in ternational treaty provisions. All rights not granted to you herein are expressly reserved by ZyXEL. Y ou may not remove any proprietary notice of[...]

  • Página 414

    Appendix H Open Software Announcements Vantage CNM User’s Guide 414 BUSINESS INFORMA TION) ARISING OUT OF THE USE OF OR INABILITY T O USE THE PROGRAM, OR FOR ANY C LAIM BY ANY OTHER P AR TY , EVEN IF ZyXEL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. ZyXEL'S AGGREGA TE LIABILITY WITH RESPECT T O ITS OBLIGA TIONS UNDER THIS AGREEMENT [...]

  • Página 415

    Appendix H Open Software Announcements Vantage CNM User’s Guide 415 only be effective if it is in writing and signed by both parties hereto. If any part of this License Agreement is found invalid or unenforceable by a court of competent jurisdiction, the remainder of this License Agreement shall be interpreted so as to reasonably effect the inten[...]

  • Página 416

    Appendix H Open Software Announcements Vantage CNM User’s Guide 416[...]

  • Página 417

    Vantage CNM User’s Guide 417 A PPENDIX I Legal Information Copyright Copyright © 2007 by ZyXEL Communications Corporation. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mechanical[...]

  • Página 418

    Appendix I Lega l Info rm a tio n Vantage CNM User’s Guide 418 Note Repair or replacement, as provided un der this warranty , is the exclusive remedy of the purchaser . This warranty is in lieu of all othe r warranties, express or implied, including any implied warranty of merchantability or fitness fo r a particular use or purpose. ZyXEL shall i[...]

  • Página 419

    Vantage CNM User’s Guide 419 A PPENDIX J Customer Support Please have the following information r eady when you contact customer support. Required Information • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps you took to solv e it. “+” i[...]

  • Página 420

    Appendix J Customer Support Vantage CNM User’s Guide 420 • Re g u l a r M a i l : ZyXEL C ommunications, Czech s.r .o., Modranská 621, 143 01 Praha 4 - Modrany , Ceská Republika Denmark • Support E-mail: support@zyxel.dk • Sales E-mail: sales@zyxel.dk • T elephone: +45-39-55-07-00 • Fax: +45-39-55-07-07 • W eb: www .zyxel.dk • Re [...]

  • Página 421

    Appendix J Customer Support Vantage CNM User’s Guide 421 India • Support E-mail: support@zyxel.in • Sales E-mail: sales@zyxel.in • T elephone: +91-1 1-30888144 to +91- 11-308 88153 • Fax: +91-1 1-30888149, +91 -11-2 6810715 • W eb: http://www .zyxel.in • Re g u l a r M a i l : India - ZyXEL T echnology Indi a Pvt Ltd., I I - Fl o o r,[...]

  • Página 422

    Appendix J Customer Support Vantage CNM User’s Guide 422 • Regular Mail: ZyXEL Communications Inc., 1 1 30 N. Miller St., Anaheim, CA 92806- 2001, U.S.A. Norway • Support E-mail: support@zyxel.no • Sales E-mail: sales@zyxel.no • T elephone: +47-22-80-61-80 • Fax: +47-22-80-61-81 • W eb: www .zyxel.no • Re g u l a r M a i l: ZyXEL Co[...]

  • Página 423

    Appendix J Customer Support Vantage CNM User’s Guide 423 Sweden • Support E-mail: support@zyxel.se • Sales E-mail: sales@zyxel.se • T elephone: +46-31-744-7700 • Fax: +46-31-744-7701 • W eb: www .zyxel.se • Re g u l a r Ma i l : ZyXEL Communications A/S, Sjöporten 4, 41764 Götebor g, Sweden Thailand • Support E-mail: support@zyxel[...]

  • Página 424

    Appendix J Customer Support Vantage CNM User’s Guide 424[...]

  • Página 425

    Index Vantage CNM User’s Guide 425 Index A administrators idle timeout 302 maximum number logged in 302 root 329 storing in address book 315 super 329 types of 329 alarms 271 classifications 271 clearing 272 notifying device owners 303 , 304 states 272 types of 271 alternative subnet mask notation 369 B backing up (CNM configuration) 313 building[...]

  • Página 426

    Index Vantage CNM User’s Guide 426 H Hub & S poke 251 , 252 I IANA 374 icons devices 40 folders 38 views 38 idle timeout 36 , 302 IE 7.0 security risk messages 48 inconsistencies between CNM and device 213 Internet Assigned Nu mbers Authority See IANA 374 IP address 299 , 301 L License Upgrad e 319 license status 317 upgrade 320 log messages [...]

  • Página 427

    Index Vantage CNM User’s Guide 427 status 317 system status monitor 288 , 289 T title bar 35 , 36 , 37 topology 37 create a group folder 39 delete a groupl 40 remove a group folder 40 trademarks 417 U unassociate a device 44 User Lockout 303 V V antage Re port 306 in V antage CNM 294 opening in V antage CNM 295 setting up 294 setting up devices f[...]

  • Página 428

    Index Vantage CNM User’s Guide 428[...]

  • Página 429

    Index Vantage CNM User’s Guide 429[...]

  • Página 430

    Index Vantage CNM User’s Guide 430[...]