ZyXEL Communications VANTAGE CNM 2.0 - User manual

Vantage CNM 2.0
Centralized Network Management
User’s Guide
Version 2.0.00.61.00
April 2004

Vantage CNM 2.0
Copyright i
Copyright
Copyright © 2004 by ZyXEL Communications Corporation
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a
retrieval system, translated into any language, or transmitted in any form or by any means, electronic,
mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written
permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Refer to the appendices for open sourced software announcements.

Vantage CNM 2.0
Warranty ii
ZyXEL Limited Warranty
ZyXEL warrants that (a) the Vantage CNM 2.0 software (henceforth called the SOFTWARE) will perform
substantially in accordance with the accompanying written materials for a period of ninety (90) days from the
date of receipt, and (b) any Support Services provided by ZyXEL shall be substantially as described in
applicable written materials provided to you by ZyXEL, and ZyXEL support engineers will make commercially
reasonable efforts to solve any problem issues. To the extent allowed by applicable law, implied warranties on
the SOFTWARE, if any, are limited to ninety (90) days.
CUSTOMER REMEDIES.
ZyXEL's and its suppliers' entire liability and your exclusive remedy shall be, at ZyXEL's option, either (a)
return of the price paid, if any, or (b) repair or replacement of the SOFTWARE that does not meet ZyXEL's
Limited Warranty and which is returned to ZyXEL with a copy of your receipt. This Limited Warranty is void if
failure of the SOFTWARE has resulted from accident, abuse, or misapplication. Any replacement SOFTWARE
will be warranted for the remainder of the original warranty period or thirty (30) days, whichever is longer.
Outside Taiwan, neither these remedies nor any product support services offered by ZyXEL are available
without proof of purchase from an authorized international source.
NO OTHER WARRANTIES.
To the maximum extent permitted by applicable law, ZyXEL and its suppliers disclaim all other warranties and
conditions, either express or implied, including, but not limited to, implied warranties of merchantability, fitness
for a particular purpose, title, and non-infringement, with regard to the SOFTWARE, and the provision of or
failure to provide Support Services. This limited warranty gives you specific legal rights. You may have others,
which vary from state/jurisdiction to state/jurisdiction.
Please read the license screen in the installation wizard. You must accept the terms of the license in order to
install Vantage CNM.

Vantage CNM 2.0
Customer Support iii
Customer Support
Please have the following information ready when you contact customer support.
• Warranty Information.
• Date that you received your software.
• Brief description of the problem and the steps you took to solve it.
SUPPORT E-MAIL TELEPHONE1WEB SITEMETHOD
LOCATION
SALES E-MAIL FAX1FTP SITE
REGULAR MAIL
[email protected]m.tw [phone] www.zyxel.com
www.europe.zyxel.com
ftp.zyxel.com
WORLDWIDE
[e-mail] [phone] ftp.europe.zyxel.com
ZyXEL Communications Corp.
6 Innovation Road II
Science Park
Hsinchu 300
Taiwan
[email protected]m [phone]
[phone]
www.us.zyxel.comNORTH
AMERICA
[e-mail] [phone] ftp.us.zyxel.com
ZyXEL Communications Inc.
1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.
[email protected] [phone] www.zyxel.deGERMANY
[e-mail] [phone]
ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen
Germany
[phone]FRANCE [email protected]
[phone]
www.zyxel.fr ZyXEL France
1 rue des Vergers
Bat. 1 / C
69760 Limonest
France
[email protected] [phone]SPAIN
[e-mail] [phone]
www.zyxel.es ZyXEL Communications
Alejandro Villegas 33
1º, 28043 Madrid
Spain
[email protected] [phone] www.zyxel.dkDENMARK
[e-mail] [phone]
ZyXEL Communications A/S
Columbusvej 5
2860 Soeborg
Denmark
[email protected] [phone] www.zyxel.noNORWAY
[e-mail] [phone]
ZyXEL Communications A/S
Nils Hansens vei 13
0667 Oslo
Norway
[email protected] [phone] www.zyxel.seSWEDEN
[e-mail] [phone]
ZyXEL Communications A/S
Sjöporten 4, 41764 Göteborg
Sweden
[email protected] [phone] www.zyxel.fiFINLAND
[e-mail] [phone]
ZyXEL Communications Oy
Malminkaari 10
00700 Helsinki
Finland
1“+” is the (prefix) number you enter to make an international telephone call.

iv Table of Contents
Table of Contents
Copyright................................................................................................................................................... i
ZyXEL Limited Warranty .......................................................................................................................... ii
Customer Support ................................................................................................................................... iii
List of Figures.........................................................................................................................................viii
List of Tables........................................................................................................................................... xi
Preface.................................................................................................................................................. xiv
1INTRODUCING VANTAGE...........................................................................................................1-1
1.1 Key Features ..............................................................................................................................1-1
1.2 Vantage Requirements and Installation .....................................................................................1-2
2GUI INTRODUCTION ....................................................................................................................2-1
2.1 Main Menu Components ............................................................................................................2-1
2.2 Object Pane................................................................................................................................2-1
2.3 Content Pane .............................................................................................................................2-5
2.4 Icon Key .....................................................................................................................................2-7
3THE DEVICE MENUS ...................................................................................................................3-1
3.1 Device Menus Overview ............................................................................................................3-1
3.2 Device Main Screen ...................................................................................................................3-1
3.3 Device Status .............................................................................................................................3-2
3.4 Device Registration ....................................................................................................................3-2
3.5 Device – Vantage Data Inconsistency: Synchronize .................................................................3-6
3.6 Firmware Management ..............................................................................................................3-7
3.7 Device Firmware Upgrade .........................................................................................................3-9
3.8 Configuration File .................................................................................................................... 3-10
4CONFIGURATION > SELECT DEVICE BB & GENERAL ...........................................................4-1
4.1 Select Device BB........................................................................................................................4-1
4.2 Configuration General Screens..................................................................................................4-2
5CONFIGURATION > LAN .............................................................................................................5-1
5.1 LAN Overview ............................................................................................................................5-1
5.2 DHCP Setup...............................................................................................................................5-1
5.3 LAN TCP/IP................................................................................................................................5-1
5.4 Configuring LAN IP – ZyWALL...................................................................................................5-2
5.5 Configuring LAN IP - Prestige ....................................................................................................5-5
5.6 Configuring LAN Static DHCP – ZyWALL..................................................................................5-7
5.7 Configuring LAN IP Alias – ZyWALL..........................................................................................5-8

Vantage CNM 2.0
Table of Contents v
6CONFIGURATION > WLAN .........................................................................................................6-1
6.1 Wireless LAN Overview .............................................................................................................6-1
6.2 Wireless LAN Basics..................................................................................................................6-1
6.3 Configuring Wireless LAN..........................................................................................................6-3
6.4 Configuring MAC Filter...............................................................................................................6-4
6.5 802.1x Overview ........................................................................................................................6-5
6.6 Local User Database..................................................................................................................6-8
6.7 Configuring RADIUS ................................................................................................................6-11
7CONFIGURATION > DMZ ............................................................................................................7-1
7.1 DMZ Overview ...........................................................................................................................7-1
7.2 DMZ Addresses .........................................................................................................................7-1
7.3 Configuring DMZ ........................................................................................................................7-1
8CONFIGURATION > WAN............................................................................................................8-1
8.1 General WAN – ZyWALL ...........................................................................................................8-1
8.2 General WAN – Prestige..........................................................................................................8-16
9CONFIGURATION > NAT.............................................................................................................9-1
9.1 NAT Overview ............................................................................................................................9-1
9.2 Configuring NAT.........................................................................................................................9-3
9.3 SUA Servers ..............................................................................................................................9-4
9.4 Trigger Port Forwarding – ZyWALL .........................................................................................9-10
10 CONFIGURATION > STATIC ROUTE....................................................................................10-1
10.1 Static Route Overview..........................................................................................................10-1
11 CONFIGURATION > VPN .......................................................................................................11-1
11.1 VPN Overview ......................................................................................................................11-1
11.2 VPN Tunnel Summary..........................................................................................................11-6
11.3 VPN and NetBIOS..............................................................................................................11-15
12 CONFIGURATION > FIREWALL............................................................................................12-1
12.1 Firewall Overview .................................................................................................................12-1
12.2 Types of Firewalls.................................................................................................................12-1
12.3 Introduction to ZyXEL’s Firewall...........................................................................................12-2
12.4 Denial of Service ..................................................................................................................12-2
12.5 Stateful Inspection ................................................................................................................12-4
12.6 Firewall Policies Overview....................................................................................................12-7
12.7 Rule Logic Overview ............................................................................................................12-8
12.8 Firewall Configuration...........................................................................................................12-9
13 CONFIGURATION > DEVICE LOG ........................................................................................13-1

vi Table of Contents
13.1 Device Logs ......................................................................................................................... 13-1
13.2 Device Logging Options ...................................................................................................... 13-1
13.3 Purge Logs .......................................................................................................................... 13-3
14 CONFIGURATION > ADSL MONITOR.................................................................................. 14-1
14.1 Introduction .......................................................................................................................... 14-1
14.2 Configuring ADSL Monitor................................................................................................... 14-1
15 CONFIGURATION > DEVICE ALARMS................................................................................ 15-1
15.1 Device Alarms...................................................................................................................... 15-1
16 BUILDING BLOCK ................................................................................................................. 16-1
16.1 BB Categories...................................................................................................................... 16-1
16.2 BB Properties....................................................................................................................... 16-1
16.3 Configuring Device BB Menus............................................................................................. 16-1
16.4 Configuration BBs................................................................................................................ 16-3
16.5 Component BBs................................................................................................................... 16-5
17 SYSTEM > ADMINISTRATORS............................................................................................. 17-1
17.1 Introduction to Administrators.............................................................................................. 17-1
17.2 Configuring Administrators .................................................................................................. 17-2
17.3 Vantage Upgrade................................................................................................................. 17-3
17.4 Creating an Administrator Account...................................................................................... 17-5
18 OTHER SYSTEM SCREENS ................................................................................................. 18-1
18.1 Status................................................................................................................................... 18-1
18.2 License Management .......................................................................................................... 18-2
18.3 System >Preferences .......................................................................................................... 18-3
18.4 System Maintenance ......................................................................................................... 18-10
18.5 Address Book .................................................................................................................... 18-12
18.6 Certificate Mgmt................................................................................................................. 18-14
18.7 Vantage Logs..................................................................................................................... 18-17
18.8 About Vantage ................................................................................................................... 18-19
19 MONITOR > ALARMS............................................................................................................ 19-1
19.1 Alarms.................................................................................................................................. 19-1
20 OTHER MONITOR SCREENS ............................................................................................... 20-1
20.1 Firmware Upgrade Report ................................................................................................... 20-1
20.2 Status Monitor...................................................................................................................... 20-1
20.3 VPN Editor ........................................................................................................................... 20-2
Appendix A FTP Server (WFTPD ) Setup Example ............................................................................... A
Appendix B Configuring the Kiwi Syslog Daemon ..................................................................................G

Vantage CNM 2.0
Table of Contents vii
Appendix C Java Console Debug Messages .........................................................................................M
Appendix D IP Subnetting....................................................................................................................... O
Appendix E Open Software Announcements ......................................................................................... U

Vantage CNM 2.0
List of Tables viii
List of Figures
FIGURE 2-1 MAIN SCREEN _________________________________________________________________ 2-1
FIGURE 2-2 OBJECT TREE VIEW TYPES ________________________________________________________ 2-2
FIGURE 2-3 DETAILS SCREEN _______________________________________________________________ 2-2
FIGURE 2-4 FOLDER RIGHT-CLICK OPTIONS ____________________________________________________ 2-3
FIGURE 2-5 ADD DEVICES__________________________________________________________________ 2-3
FIGURE 2-6 ASSOCIATE ADMINISTRATORS _____________________________________________________ 2-4
FIGURE 2-7 ASSOCIATED ADMINISTRATOR RIGHT-CLICK OPTIONS __________________________________ 2-4
FIGURE 2-8 ADD NEW FOLDER GROUP NAME __________________________________________________ 2-4
FIGURE 2-9 ACCOUNT FOLDER ALARM RIGHT-CLICK OPTIONS _____________________________________ 2-5
FIGURE 2-10 DEVICE RIGHT-CLICK OPTIONS ___________________________________________________ 2-5
FIGURE 2-11 JAVA APPLET WINDOW _________________________________________________________ 2-7
FIGURE 3-1 DEVICE > STATUS > MAIN SCREEN _________________________________________________ 3-1
FIGURE 3-2 DEVICE > STATUS > SINGLE DEVICE ________________________________________________ 3-2
FIGURE 3-3 DEVICE > REGISTRATION WIZARD > ACCOUNT ASSOCIATION ____________________________ 3-3
FIGURE 3-4 DEVICE > REGISTRATION > OWNER SELECTION _______________________________________ 3-3
FIGURE 3-5 DEVICE > REGISTRATION > WIZARD CHOICES_________________________________________ 3-4
FIGURE 3-6 DEVICE > REGISTRATION > MANUAL REGISTRATION ___________________________________ 3-4
FIGURE 3-7 REGISTRATION WIZARD: CONFIGURATION FILE _______________________________________ 3-5
FIGURE 3-8 REGISTRATION _________________________________________________________________ 3-6
FIGURE 3-9 REGISTRATION WIZARD: FINISH ___________________________________________________ 3-6
FIGURE 3-10 DEVICE > SYNCHRONIZE ________________________________________________________ 3-7
FIGURE 3-11 DEVICE > FIRMWARE MANAGEMENT_______________________________________________ 3-7
FIGURE 3-12 DEVICE > FIRMWARE MANAGEMENT > ADD FIRMWARE ________________________________ 3-8
FIGURE 3-13 TYPEVIEW ___________________________________________________________________ 3-9
FIGURE 3-14 FIRMWARE UPGRADE > SELECT PRODUCT LINE AND MODE _____________________________ 3-9
FIGURE 3-15 DEVICE > FIRMWARE UPGRADE__________________________________________________ 3-10
FIGURE 3-16 DEVICE > CONFIGURATION FILE > MANAGEMENT____________________________________ 3-10
FIGURE 3-17 DEVICE > CONFIGURATION FILE > BACK UP________________________________________ 3-11
FIGURE 3-18 DEVICE > CONFIGURATION FILE > UPLOAD_________________________________________ 3-12
FIGURE 4-1 SELECT DEVICE BB _____________________________________________________________ 4-2
FIGURE 4-2 CONFIGURATION > GENERAL > SYSTEM – ZYWALL ___________________________________ 4-3
FIGURE 4-3 CONFIGURATION > GENERAL > DDNS ______________________________________________ 4-5
FIGURE 4-4 CONFIGURATION > GENERAL > TIME SETTING ________________________________________ 4-6
FIGURE 4-5 CONFIGURATION > GENERAL > OWNER INFO _________________________________________ 4-8
FIGURE 5-1 CONFIGURATION > LAN > IP – ZYWALL ___________________________________________ 5-3
FIGURE 5-2 CONFIGURATION > LAN > IP – PRESTIGE ____________________________________________ 5-6
FIGURE 5-3 CONFIGURATION > LAN > STATIC DHCP – ZYWALL__________________________________ 5-7
FIGURE 5-4 CONFIGURATION > LAN > IP ALIAS ________________________________________________ 5-8
FIGURE 6-1 RTS THRESHOLD _______________________________________________________________ 6-2
FIGURE 6-2 CONFIGURATION > WLAN > WIRELESS _____________________________________________ 6-3
FIGURE 6-3 CONFIGURATION > WLAN > MAC FILTER ___________________________________________ 6-5
FIGURE 6-4 CONFIGURATION > WLAN > 802.1X – ZYWALL ______________________________________ 6-6
FIGURE 6-5 CONFIGURATION > WLAN > 802.1X – PRESTIGE ______________________________________ 6-7
FIGURE 6-6 CONFIGURATION > WLAN > LOCAL USER ___________________________________________ 6-9
FIGURE 6-7 CONFIGURATION > WLAN > RADIUS _____________________________________________ 6-11
FIGURE 7-1 CONFIGURATION > DMZ _________________________________________________________ 7-2
FIGURE 8-1 CONFIGURATION > WAN > GENERAL – ZYWALL _____________________________________ 8-2
FIGURE 8-2 CONFIGURATION > WAN > ISP (ETHERNET) – ZYWALL _______________________________ 8-3
FIGURE 8-3 CONFIGURATION > WAN > ISP (PPPOE) – ZYWALL __________________________________ 8-5
FIGURE 8-4 CONFIGURATION > WAN > ISP (PPTP) – ZYWALL ___________________________________ 8-6
FIGURE 8-5 CONFIGURATION > WAN > IP – ZYWALL___________________________________________ 8-8