Page 171 / 268 Scroll up to view Page 166 - 170
Chapter 13 Remote Management Configuration
P-660R-F1 Series User’s Guide
171
13.6.3
Configuring SNMP
To change your ZyXEL Device’s SNMP settings, click
Advanced > Remote MGMT
>
SNMP
. The
screen appears as shown.
Figure 103
Remote Management: SNMP
The following table describes the labels in this screen.
Table 65
Remote Management: SNMP
LABEL
DESCRIPTION
SNMP
Port
You may change the server port number for a service if needed, however you
must use the same port number in order to use that service for remote
management.
Access Status
Select the interface(s) through which a computer may access the ZyXEL Device
using this service.
Secured Client IP
A secured client is a “trusted” computer that is allowed to communicate with
the ZyXEL Device using this service.
Select
All
to allow any computer to access the ZyXEL Device using this service.
Choose
Selected
to just allow the computer with the IP address that you
specify to access the ZyXEL Device using this service.
SNMP Configuration
Get Community
Enter the
Get Community
, which is the password for the incoming Get and
GetNext requests from the management station. The default is public and
allows all requests.
Set Community
Enter the
Set community
, which is the password for incoming Set requests
from the management station. The default is public and allows all requests.
Trap
Community
Type the trap community, which is the password sent with each trap to the
SNMP manager. The default is public and allows all requests.
Page 172 / 268
Chapter 13 Remote Management Configuration
P-660R-F1 Series User’s Guide
172
13.7
Configuring DNS
Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice
versa. Refer to the chapter on LAN for background information.
To change your ZyXEL Device’s DNS settings, click
Advanced > Remote MGMT
>
DNS
. The
screen appears as shown. Use this screen to set from which IP address the ZyXEL Device will accept
DNS queries and on which interface it can send them your ZyXEL Device’s DNS settings.
Figure 104
Remote Management: DNS
The following table describes the labels in this screen.
Destination
Type the IP address of the station to send your SNMP traps to.
Apply
Click
Apply
to save your customized settings and exit this screen.
Cancel
Click
Cancel
to begin configuring this screen afresh.
Table 65
Remote Management: SNMP
LABEL
DESCRIPTION
Table 66
Remote Management: DNS
LABEL
DESCRIPTION
Port
The DNS service port number is 53.
Access Status
Select the interface(s) through which a computer may send DNS queries to the
ZyXEL Device.
Secured Client IP
A secured client is a “trusted” computer that is allowed to send DNS queries to the
ZyXEL Device.
Select
All
to allow any computer to send DNS queries to the ZyXEL Device.
Choose
Selected
to just allow the computer with the IP address that you specify
to send DNS queries to the ZyXEL Device.
Apply
Click
Apply
to save your customized settings and exit this screen.
Cancel
Click
Cancel
to begin configuring this screen afresh.
Page 173 / 268
Chapter 13 Remote Management Configuration
P-660R-F1 Series User’s Guide
173
13.8
Configuring ICMP
To change your ZyXEL Device’s security settings, click
Advanced > Remote MGMT
>
ICMP
. The
screen appears as shown.
If an outside user attempts to probe an unsupported port on your ZyXEL Device, an ICMP response
packet is automatically returned. This allows the outside user to know the ZyXEL Device exists.
Your ZyXEL Device supports anti-probing, which prevents the ICMP response packet from being
sent. This keeps outsiders from discovering your ZyXEL Device when unsupported ports are probed.
Figure 105
Remote Management: ICMP
The following table describes the labels in this screen.
Table 67
Remote Management: ICMP
LABEL
DESCRIPTION
ICMP
Internet Control Message Protocol is a message control and error-reporting
protocol between a host server and a gateway to the Internet. ICMP uses Internet
Protocol (IP) datagrams, but the messages are processed by the TCP/IP software
and directly apparent to the application user.
Respond to Ping
on
The ZyXEL Device will not respond to any incoming Ping requests when
Disable
is
selected. Select
LAN
to reply to incoming LAN Ping requests.
Select
WAN
to reply
to incoming WAN Ping requests. Otherwise select
LAN & WAN
to reply to both
incoming LAN and WAN Ping requests.
Do not respond to
requests for
unauthorized
services
Select this option to prevent hackers from finding the ZyXEL Device by probing for
unused ports. If you select this option, the ZyXEL Device will not respond to port
request(s) for unused ports, thus leaving the unused ports and the ZyXEL Device
unseen. If this option is not selected, the ZyXEL Device will reply with an ICMP
port unreachable packet for a port probe on its unused UDP ports and a TCP reset
packet for a port probe on its unused TCP ports.
Note that the probing packets must first traverse the ZyXEL Device's firewall rule
checks before reaching this anti-probing mechanism. Therefore if a firewall rule
stops a probing packet, the ZyXEL Device reacts based on the firewall rule to
either send a TCP reset packet for a blocked TCP packet (or an ICMP port-
unreachable packet for a blocked UDP packets) or just drop the packets without
sending a response packet.
Apply
Click
Apply
to save your customized settings and exit this screen.
Cancel
Click
Cancel
to begin configuring this screen afresh.
Page 174 / 268
P-660R-F1 Series User’s Guide
174
C
HAPTER
14
Universal Plug-and-Play (UPnP)
This chapter introduces the UPnP feature in the web configurator.
14.1
Introducing Universal Plug and Play
Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for
simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a
network, obtain an IP address, convey its capabilities and learn about other devices on the network.
In turn, a device can leave a network smoothly and automatically when it is no longer in use.
See
Section 14.2.1 on page 175
for configuration instructions.
14.1.1
How do I know if I'm using UPnP?
UPnP hardware is identified as an icon in the Network Connections folder (Windows XP). Each UPnP
compatible device installed on your network will appear as a separate icon. Selecting the icon of a
UPnP device will allow you to access the information and properties of that device.
14.1.2
NAT Traversal
UPnP NAT traversal automates the process of allowing an application to operate through NAT. UPnP
network devices can automatically configure network addressing, announce their presence in the
network to other UPnP devices and enable exchange of simple product and service descriptions.
NAT traversal allows the following:
Dynamic port mapping
Learning public IP addresses
Assigning lease times to mappings
Windows Messenger is an example of an application that supports NAT traversal and UPnP.
See the NAT chapter for more information on NAT.
14.1.3
Cautions with UPnP
The automated nature of NAT traversal applications in establishing their own services and opening
firewall ports may present network security issues. Network information and configuration may also
be obtained and modified by users in some network environments.
When a UPnP device joins a network, it announces its presence with a multicast message. For
security reasons, the ZyXEL Device allows multicast messages on the LAN only.
Page 175 / 268
Chapter 14 Universal Plug-and-Play (UPnP)
P-660R-F1 Series User’s Guide
175
All UPnP-enabled devices may communicate freely with each other without additional configuration.
Disable UPnP if this is not your intention.
14.2
UPnP and ZyXEL
ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum UPnP™
Implementers Corp. (UIC). ZyXEL's UPnP implementation supports Internet Gateway Device (IGD)
1.0.
See the following sections for examples of installing and using UPnP.
14.2.1
Configuring UPnP
Click
Advanced > UPnP
to display the screen shown next.
See
Section 14.1 on page 174
for more information.
Figure 106
Configuring UPnP
The following table describes the fields in this screen.
Table 68
Configuring UPnP
LABEL
DESCRIPTION
Active the Universal Plug
and Play (UPnP) Feature
Select this check box to activate UPnP. Be aware that anyone could use
a UPnP application to open the web configurator's login screen without
entering the ZyXEL Device's IP address (although you must still enter
the password to access the web configurator).
Allow users to make
configuration changes
through UPnP
Select this check box to allow UPnP-enabled applications to
automatically configure the ZyXEL Device so that they can
communicate through the ZyXEL Device, for example by using NAT
traversal, UPnP applications automatically reserve a NAT forwarding
port in order to communicate with another UPnP enabled device; this
eliminates the need to manually configure port forwarding for the UPnP
enabled application.
Apply
Click
Apply
to save the setting to the ZyXEL Device.
Cancel
Click
Cancel
to return to the previously saved settings.

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top