ZyXEL Communications VANTAGE CNM User manual

Vantage CNM
Centralized Network Management
User’s Guide
Version 2.2
8/2005

Vantage CNM User’s Guide
Copyright 2
Copyright
Copyright © 2005 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Note: Refer also to the Open Software Announcementson page 448.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.
Trademarks
ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not
apply if the product is modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.

Vantage CNM User’s Guide
3 Customer Support
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind of character to the
purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.
Customer Support
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
METHOD
LOCATION
SUPPORT E-MAIL TELEPHONEAWEB SITE
REGULAR MAIL
SALES E-MAIL FAX FTP SITE
CORPORATE
HEADQUARTERS
(WORLDWIDE)
[email protected] [phone] www.zyxel.com
www.europe.zyxel.com
ZyXEL Communications Corp.
6 Innovation Road II
Science Park
Hsinchu 300
Taiwan
[email protected] [phone] ftp.zyxel.com
ftp.europe.zyxel.com
CZECH
REPUBLIC
[email protected] [phone] www.zyxel.cz ZyXEL Communications Czech
s.r.o.
Modranská 621
143 01 Praha 4 - Modrany
Ceská Republika
[email protected] [phone]
DENMARK
[email protected] [phone] www.zyxel.dk ZyXELCommunicationsA/S
Columbusvej 5
2860 Soeborg
Denmark
[email protected] [phone]
FINLAND
[email protected] [phone] www.zyxel.fi ZyXEL Communications Oy
Malminkaari 10
00700 Helsinki
Finland
[email protected] [phone]

Vantage CNM User’s Guide
Customer Support 4
FRANCE
[email protected] [phone] www.zyxel.fr ZyXE L France
1 rue des Vergers
Bat. 1 / C
69760 Limonest
France
[phone]
GERMANY
[email protected] [phone] www.zyxel.de ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen
Germany
[email protected] [phone]
NORTH AMERICA
[email protected] [phone]
[phone]
www.us.zyxel.com ZyXEL Communications Inc.
1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.
[email protected] [phone] ftp.us.zyxel.com
NORWAY
[email protected] [phone] www.zyxel.no Z y X E L C o m m u n i c a t i o n s A / S
Nils Hansens vei 13
0667 Oslo
Norway
[email protected] [phone]
SPAIN
[email protected] [phone] www.zyxel.es ZyXEL Co mmunica tions
Alejandro Villegas 33
1º,28043Madrid
Spain
[email protected] [phone]
SWEDEN
[email protected] [phone] www.zyxel.se ZyXEL Communications A/S
Sjöporten 4, 41764 Göteborg
Sweden
[email protected] [phone]
UNITED
KINGDOM
[email protected] [phone]
08707 555779 (UK only)
www.zyxel.co.uk ZyXEL Communications UK
Ltd.,11 The Courtyard,
Eastern Road, Bracknell,
Berkshire, RG12 2XB,
United Kingdom (UK)
[email protected] [phone] ftp.zyxel.co.uk
A. “+” IS THE (PREFIX) NUMBER YOU ENTER TO MAKE AN INTERNATIONAL TELEPHONE CALL.

Vantage CNM User’s Guide
5 Customer Support

Vantage CNM User’s Guide
Table of Contents 6
Table of Contents
Copyright .................................................................................................................. 2
ZyXEL Limited Warranty.......................................................................................... 2
Customer Support.................................................................................................... 3
Preface .................................................................................................................... 34
Chapter 1
Introducing Vantage............................................................................................... 36
1.1 Key Features ......................................................................................................36
1.1.1 Object Tree View ......................................................................................36
1.1.2 Flexible Friendly Device Registration .......................................................36
1.1.3 Building Blocks .........................................................................................36
1.1.4 Multiple Domain Administration ................................................................36
1.1.5 Complete Device Configuration ................................................................37
1.1.6 Configuration Synchronization ..................................................................37
1.1.7 Firewall .....................................................................................................37
1.1.8 VPN Editor ................................................................................................37
1.1.9 Configuration File Management ................................................................37
1.1.10 Firmware Upgrade ..................................................................................37
1.1.11 Monitoring and Notifications ....................................................................38
1.1.12 Logs ........................................................................................................38
1.1.13 Data Maintenance ...................................................................................38
1.1.14 Vantage System Management ................................................................38
1.2 Vantage Requirements and Installation ..............................................................38
Chapter 2
GUI Introduction..................................................................................................... 40
2.1 Overview ............................................................................................................40
2.2 Main Menu Components ....................................................................................40
2.2.1 Object Pane ..............................................................................................41
2.2.1.1 Object Tree View Types ..................................................................41
2.2.1.2 Folders ............................................................................................42
2.2.1.3 Devices ...........................................................................................45
2.2.2 Content Pane ............................................................................................46
2.2.2.1 Object Path .....................................................................................46

Vantage CNM User’s Guide
7Table of Contents
2.2.2.2 Menu Path .......................................................................................46
2.3 Menu Overview ..................................................................................................46
2.4 Procedure For Configuring A Device .................................................................47
2.5 Context-Sensitive Menus ...................................................................................47
2.6 Icon Key .............................................................................................................48
Chapter 3
Device Menus ......................................................................................................... 52
3.1 Device Menus Overview ....................................................................................52
3.1.1 Device Main Screen ..................................................................................52
3.2 Device Status .....................................................................................................54
3.3 Device Registration ............................................................................................54
3.3.1 Manual Option ..........................................................................................56
3.3.1.1 Configuring ZyXEL Device using Commands .................................56
3.3.1.2 Configuring ZyXEL Device using Web Configurator .......................56
3.3.2 Import From an XML Registration File ......................................................57
3.3.2.1 Basic XML Syntax ...........................................................................58
3.3.2.2 Minimum Mandatory Device Settings ..............................................59
3.4 Device – Vantage Data Inconsistency: Synchronize ..........................................61
3.4.1 Vantage – Device Override Criteria ..........................................................61
3.4.1.1 Vantage CNM Override Device .......................................................61
3.4.1.2 Device Override Vantage CNM .......................................................61
3.4.1.3 Synchronizing Device with Vantage ................................................62
3.5 Firmware Management ......................................................................................62
3.5.1 Add Firmware Screen ...............................................................................63
3.5.2 Firmware Upgrade Select Product Line and Mode ...................................64
3.5.3 Firmware Upgrade Process ......................................................................65
3.5.4 Advisory Notes on Firmware Upgrade ......................................................65
3.5.5 Configuration File ......................................................................................66
3.5.6 Configuration File Management ................................................................66
3.5.7 Configuration File Backup .........................................................................66
3.5.8 Configuration File Restore ........................................................................67
3.6 Firmware Upgrade Scheduling ...........................................................................68
3.6.1 Firmware Upgrade Schedule Process ......................................................68
3.6.2 Firmware Upgrade Scheduler List ............................................................69
Chapter 4
Configuration > Select Device BB & General ...................................................... 72
4.1 Select Device BB ...............................................................................................72
4.1.1 Procedure to Select and Apply a Device BB ............................................73
4.2 Configuration General Screens ..........................................................................74
4.2.1 System ......................................................................................................74
4.2.2 DDNS ........................................................................................................75

Vantage CNM User’s Guide
Table of Contents 8
4.2.3 Time Setting ..............................................................................................77
4.2.4 Owner Info ................................................................................................78
Chapter 5
Configuration > LAN .............................................................................................. 80
5.1 LAN Overview ....................................................................................................80
5.2 DHCP Setup .......................................................................................................80
5.2.1 IP Pool Setup ............................................................................................80
5.2.2 DNS Servers .............................................................................................80
5.2.3 LAN TCP/IP ..............................................................................................80
5.2.4 Factory LAN Defaults ................................................................................80
5.2.5 IP Address and Subnet Mask ...................................................................81
5.2.6 RIP Setup .................................................................................................81
5.2.7 Multicast ....................................................................................................81
5.3 Any IP .................................................................................................................82
5.3.1 How Any IP Works ....................................................................................83
5.4 Configuring LAN IP - ZyWALL ............................................................................84
5.5 Configuring LAN IP - Prestige ............................................................................86
5.6 Configuring LAN Static DHCP ............................................................................88
5.7 Configuring LAN IP Alias - ZyWALL ...................................................................90
Chapter 6
Configuration > WLAN........................................................................................... 92
6.1 Introduction ........................................................................................................92
6.2 Wireless Security Overview ...............................................................................92
6.2.1 Encryption .................................................................................................92
6.2.2 Authentication ...........................................................................................92
6.2.3 Restricted Access .....................................................................................93
6.2.4 Hide Prestige Identity ................................................................................93
6.2.5 Configuring Wireless LAN on the Prestige ...............................................93
6.3 Configuring the Wireless Screen ........................................................................94
6.3.1 WEP Encryption ........................................................................................94
6.4 Configuring MAC Filters .....................................................................................96
6.5 Introduction to WPA ...........................................................................................97
6.5.1 WPA-PSK Application Example ................................................................98
6.5.2 WPA with RADIUS Application Example ..................................................98
6.5.3 Wireless Client WPA Supplicants ............................................................99
6.6 Configuring IEEE 802.1x and WPA ....................................................................99
6.6.1 Configuring 802.1x - ZyWALL .................................................................100
6.6.2 Configuring 802.1x - Prestige .................................................................100
6.6.3 Authentication Required > 802.1x ..........................................................102
6.6.4 Authentication Required > WPA .............................................................104
6.6.5 Authentication Required > WPA-PSK .....................................................106

Vantage CNM User’s Guide
9Table of Contents
6.7 Configuring Local User Authentication .............................................................107
6.7.1 Configuring Local User Database ...........................................................107
6.8 Configuring RADIUS ........................................................................................108
Chapter 7
Configuration > DMZ............................................................................................ 110
7.1 DMZ Overview .................................................................................................110
7.2 DMZ Addresses ...............................................................................................110
7.3 Configuring DMZ .............................................................................................. 110
Chapter 8
Configuration > WAN ........................................................................................... 114
8.1 WAN Overview ................................................................................................. 114
8.2 Multiple WAN - ZyWALL (ZyNOS 3.64) ............................................................114
8.3 TCP/IP Priority (Metric) ....................................................................................115
8.4 General WAN - ZyWALL ..................................................................................115
8.4.1 WAN ISP - ZyWALL ................................................................................117
8.4.1.1 Ethernet Encapsulation .................................................................117
8.4.1.2 PPPoE Encapsulation ...................................................................118
8.4.1.3 PPTP Encapsulation .....................................................................120
8.5 WAN IP - ZyWALL ............................................................................................122
8.6 Dial Backup - ZyWALL .....................................................................................123
8.6.1 Traffic Redirect ........................................................................................124
8.6.2 Configuring Dial Backup - ZyWALL ........................................................124
8.6.3 Advanced Modem Setup - ZyWALL .......................................................127
8.6.3.1 AT Command Strings ....................................................................127
8.6.4 Edit Dial Backup - ZyWALL ....................................................................129
8.7 General WAN - Prestige ...................................................................................131
8.7.1 Traffic Shaping ........................................................................................132
8.7.2 Configuring Prestige WAN Setup ...........................................................132
8.7.3 WAN Backup - Prestige ..........................................................................137
8.7.3.1 Traffic Redirect .............................................................................137
8.7.4 Configuring WAN Backup - Prestige .......................................................137
8.7.5 Configuring Advanced WAN Backup - Prestige ......................................140
8.7.6 Advanced Modem Setup - Prestige ........................................................143
Chapter 9
Configuration > NAT ............................................................................................ 144
9.1 NAT Overview ..................................................................................................144
9.1.1 NAT Definitions .......................................................................................144
9.1.2 What NAT Does ......................................................................................145
9.1.3 How NAT Works .....................................................................................145
9.1.4 NAT Mapping Types ...............................................................................145

Vantage CNM User’s Guide
Table of Contents 10
9.1.5 SUA (Single User Account) Versus NAT ................................................146
9.2 Configuring NAT - ZyWALL ..............................................................................146
9.3 Configuring NAT - Prestige ..............................................................................148
9.4 SUA Servers ....................................................................................................149
9.4.1 Port Forwarding: Services and Port Numbers ........................................149
9.4.2 NAT and Multiple WAN ...........................................................................150
9.4.3 Port Translation ......................................................................................150
9.4.4 Configuring SUA Servers - ZyWALL .......................................................151
9.4.5 Configuring SUA Servers - Prestige .......................................................153
9.4.6 Full Feature Address Mapping ................................................................154
9.4.7 Edit Full Feature Address Mapping ........................................................156
9.5 Trigger Port Forwarding - ZyWALL ..................................................................157
9.5.1 Configuring Trigger Port .........................................................................158
9.5.2 Edit Trigger Port ......................................................................................160
Chapter 10
Configuration > Static Route............................................................................... 162
10.1 Static Route Overview ....................................................................................162
10.1.1 Static Route Summary ..........................................................................162
10.1.2 Edit Static Route ...................................................................................164
Chapter 11
Configuration > VPN ............................................................................................ 166
11.1 VPN Overview ................................................................................................166
11.1.1 IPSec ....................................................................................................166
11.1.2 Security Association ..............................................................................166
11.1.3 Other Terminology .................................................................................166
11.1.3.1 Encryption ....................................................................................166
11.1.3.2 Data Confidentiality .....................................................................167
11.1.3.3 Data Integrity ...............................................................................167
11.1.3.4 Data Origin Authentication ...........................................................167
11.1.3.5 Linking Two or More Private Networks Together .........................167
11.1.3.6 Accessing Network Resources When NAT Is Enabled ...............167
11.1.3.7 Unsupported IP Applications .......................................................167
11.2 IPSec Architecture ..........................................................................................167
11.2.1 IPSec Algorithms ..................................................................................168
11.2.2 Key Management ..................................................................................168
11.3 Encapsulation .................................................................................................168
11.3.1 Transport Mode .....................................................................................169
11.3.2 Tunnel Mode .........................................................................................169
11.4 IPSec and NAT ...............................................................................................169
11.5 IPSec Algorithms ............................................................................................170
11.5.1 AH (Authentication Header) Protocol ....................................................170

Vantage CNM User’s Guide
11 Table of Contents
11.5.2 ESP (Encapsulating Security Payload) Protocol ...................................171
11.5.3 Key Management ..................................................................................172
11.5.4 Encapsulation .......................................................................................172
11.5.4.1 Transport Mode ...........................................................................172
11.5.4.2 Tunnel Mode ................................................................................172
11.5.5 IPSec and NAT .....................................................................................172
11.6 My ZyWALL ....................................................................................................173
11.7 Remote Gateway Address .............................................................................173
11.7.1 Dynamic Remote Gateway Address .....................................................174
11.7.2 Keep Alive/Nailed Up ............................................................................174
11.8 NAT Traversal .................................................................................................174
11.8.1 NAT Traversal Configuration .................................................................175
11.9 ID Type and Content ......................................................................................175
11.9.1 ID Type and Content Examples ............................................................176
11.9.2 IKE Phases ...........................................................................................177
11.9.3 Negotiation Mode ..................................................................................178
11.9.4 Pre-Shared Key ....................................................................................178
11.9.5 Diffie-Hellman (DH) Key Groups ...........................................................179
11.9.6 Perfect Forward Secrecy (PFS) ............................................................179
11.10 X-Auth (Extended Authentication) ................................................................179
11.10.1 Authentication Server ..........................................................................179
11.11 VPN Screens ................................................................................................180
11.12 VPN Tunnel Summary (VPN version 1.0) ....................................................180
11.12.1 Add a VPN Tunnel ..............................................................................181
11.12.2 Manual VPN Tunnel ............................................................................185
11.13 VPN and NetBIOS (VPN version 1.0) ..........................................................188
11.14 VPN Rules (IKE) (VPN version 1.1) .............................................................188
11.14.1 VPN Rules (IKE) > Gateway Policy Add .............................................190
11.14.2 VPN Rules (IKE) > Network Policy Edit ..............................................196
11.14.3 VPN Rules (IKE) > Network Policy Move ............................................200
11.15 VPN Rules (Manual) (VPN version 1.1) .......................................................201
11.15.1 VPN Rules (Manual) > Edit ................................................................202
11.15.1.1 Security Parameter Index (SPI) .................................................202
11.16 VPN Global Setting (VPN version 1.1) .........................................................206
11.17 Telecommuter VPN/IPSec Examples ...........................................................207
11.17.1 Telecommuters Sharing One VPN Rule Example ...............................207
11.17.2 Telecommuters Using Unique VPN Rules Example ...........................208
11.18 VPN and Remote Management ...................................................................210
Chapter 12
Configuration > Firewall ...................................................................................... 212
12.1 Types of DoS Attacks .....................................................................................212
12.1.1 ICMP Vulnerability ...............................................................................214

Vantage CNM User’s Guide
Table of Contents 12
12.1.2 Illegal Commands (NetBIOS and SMTP) .............................................215
12.1.3 Traceroute ............................................................................................215
12.2 Stateful Inspection ..........................................................................................215
12.2.1 Stateful Inspection Process ..................................................................216
12.2.2 Stateful Inspection and the ZyWALL .....................................................217
12.2.3 TCP Security .........................................................................................217
12.2.4 UDP/ICMP Security ..............................................................................218
12.2.5 Upper Layer Protocols ..........................................................................218
12.3 Guidelines For Enhancing Security With Your Firewall ..................................219
12.4 Packet Filtering Vs Firewall ............................................................................219
12.4.1 Packet Filtering: ....................................................................................219
12.4.1.1 When To Use Filtering .................................................................219
12.4.2 Firewall .................................................................................................220
12.4.2.1 When To Use The Firewall ..........................................................220
12.5 Firewall Configuration Screens ......................................................................220
12.5.1 Firewall Summary Screen .....................................................................220
12.5.1.1 Ordering Rules ............................................................................220
12.5.2 DoS Settings .........................................................................................222
12.5.3 Add/Edit a Firewall Rule .......................................................................224
12.5.4 Add/Edit Source/Destination IP Addresses ..........................................226
12.5.5 Custom Ports ........................................................................................227
Chapter 13
Configuration > Device Log ................................................................................ 228
13.1 Device Logging Options .................................................................................228
13.2 Purge Logs .....................................................................................................231
Chapter 14
Configuration > ADSL Monitor............................................................................ 232
14.1 Introduction ....................................................................................................232
14.2 Configuring ADSL Monitor .............................................................................232
Chapter 15
Configuration > X Auth ........................................................................................ 234
15.1 Overview ........................................................................................................234
15.2 Configuring Local User Database ..................................................................234
15.3 Configuring RADIUS ......................................................................................235
Chapter 16
Configuration > Device Alarms........................................................................... 238
16.1 Device Alarms ................................................................................................238
16.1.1 Alarm Classifications ............................................................................238
16.1.2 Alarm States .........................................................................................238

Vantage CNM User’s Guide
13 Table of Contents
16.1.3 Current Alarms Screen .........................................................................239
16.1.4 Historical Alarms Screen ......................................................................240
Chapter 17
Configuration > DNS ............................................................................................ 242
17.1 DNS Overview ................................................................................................242
17.2 DNS Server Address Assignment ..................................................................242
17.3 DNS Servers ..................................................................................................242
17.4 Address Record .............................................................................................243
17.4.1 DNS Wildcard .......................................................................................243
17.5 Name Server Record .....................................................................................243
17.5.1 Private DNS Server ..............................................................................243
17.6 DNS Screens .................................................................................................244
17.6.1 DNS System Configuration ...................................................................244
17.6.2 Adding an Address Record ...................................................................246
17.6.3 Adding a Name Server Record .............................................................247
17.7 DNS Cache ....................................................................................................249
17.8 Configure DNS Cache ....................................................................................249
17.9 Dynamic DNS .................................................................................................250
17.9.1 DYNDNS Wildcard ................................................................................250
17.9.2 High Availability ....................................................................................250
17.10 Configuring Dynamic DNS ...........................................................................251
Chapter 18
Building Blocks (BBs) ......................................................................................... 254
18.1 Categories ......................................................................................................254
18.2 BB Properties .................................................................................................254
18.3 Configuring Device BB Menus .......................................................................254
18.3.1 Editing an Existing BB ..........................................................................255
18.3.2 Device BB Configuration Select ............................................................256
18.3.3 Adding a New BB ..................................................................................256
18.4 Configuration BBs ..........................................................................................257
18.4.1 Adding a Configuration BB ...................................................................258
18.4.2 Editing a Configuration BB ....................................................................259
18.5 Component BBs .............................................................................................260
18.5.1 Adding a Component BB ......................................................................261
18.5.1.1 Adding a Component BB: IP Type ..............................................261
18.5.1.2 Adding a Component BB: E-mail Type ........................................262
18.5.1.3 Adding a Component BB: VPN1.1d_IPSec Type ........................263
18.5.1.4 Adding a Component BB: VPN1.1d_IKE Type ............................265
18.5.1.5 Adding a Component BB: VPN1.0 Type .....................................269
18.5.2 Editing a Component BB ......................................................................272

Vantage CNM User’s Guide
Table of Contents 14
Chapter 19
System > Administrators..................................................................................... 274
19.1 Introduction to Administrators ........................................................................274
19.1.1 Administrator Types ..............................................................................274
19.1.1.1 “Root” Administrator ....................................................................274
19.1.1.2 “Super” Administrators ................................................................275
19.1.1.3 “Normal” Administrators ..............................................................275
19.1.1.4 “Custom” Administrators .............................................................275
19.2 Configuring Administrators .............................................................................275
19.3 Creating an Administrator Account ................................................................276
19.3.1 Administrator Details .............................................................................276
19.3.2 Administrator Permissions ....................................................................278
Chapter 20
Other System Screens......................................................................................... 280
20.1 Status .............................................................................................................280
20.2 Vantage Upgrade ...........................................................................................281
20.2.1 Upgrade Procedure ..............................................................................281
20.2.2 Version Format .....................................................................................283
20.3 License Management .....................................................................................284
20.3.1 License Upgrade ...................................................................................284
20.4 System >Preferences .....................................................................................285
20.4.1 General Vantage Preferences ..............................................................285
20.4.2 User Access ..........................................................................................286
20.4.3 Servers .................................................................................................287
20.4.3.1 Vantage Server Public IP Address ..............................................289
20.4.4 Notifications ..........................................................................................290
20.4.5 Vantage Permissions: User Group .......................................................291
20.4.5.1 Add User Group ..........................................................................292
20.5 System Maintenance ......................................................................................294
20.5.1 System Maintenance Management ......................................................294
20.5.2 Back Up System Maintenance ..............................................................294
20.5.3 Restore System Maintenance ...............................................................295
20.6 Address Book .................................................................................................296
20.6.1 Address Book Add/Edit .........................................................................297
20.7 Vantage Logs .................................................................................................298
20.7.1 CNM Server ..........................................................................................298
20.7.2 Vantage Logging Options .....................................................................298
20.8 Certificate Management Overview .................................................................299
20.8.1 Advantages of Certificates ....................................................................300
20.8.2 Current Certification Information ...........................................................300
20.8.3 Create a Certificate ...............................................................................302
20.8.4 Importing Certificates ............................................................................302

Vantage CNM User’s Guide
15 Table of Contents
20.9 About Vantage ................................................................................................303
Chapter 21
Monitor > Alarms.................................................................................................. 304
21.1 Alarms ............................................................................................................304
21.1.1 Alarm Types ..........................................................................................304
21.1.2 Alarm Classifications ............................................................................304
21.1.3 Alarm States .........................................................................................305
21.1.4 Current Alarms Screen .........................................................................305
21.1.5 Historical Alarms ...................................................................................307
Chapter 22
Other Monitor Screens ........................................................................................ 308
22.1 Firmware Upgrade Report ..............................................................................308
22.2 Status Monitor ................................................................................................308
22.3 VPN Editor .....................................................................................................309
22.3.1 VPN Editor Configuration ......................................................................309
22.3.2 Tunnel Graphical Depictions .................................................................311
Chapter 23
Introduction to Reports ....................................................................................... 312
23.1 Bandwidth Reports .........................................................................................312
23.2 Service Reports ..............................................................................................312
23.3 Web Filter Reports .........................................................................................313
23.4 Attack Reports ................................................................................................313
23.5 Authentication Reports ...................................................................................314
23.6 Log Viewer Reports ........................................................................................314
23.7 System Reports ..............................................................................................315
23.8 Reports ...........................................................................................................315
Chapter 24
Bandwidth Reports .............................................................................................. 316
24.1 Introduction ....................................................................................................316
24.1.1 Bandwidth Summary Settings ...............................................................318
24.2 Bandwidth Monitoring .....................................................................................319
24.3 Bandwidth Top Users .....................................................................................319
24.3.1 Bandwidth Top Users Settings ..............................................................321
24.4 Bandwidth Line Usage ...................................................................................321
24.4.1 Bandwidth Line Usage Settings ............................................................322
24.5 Bandwidth Line Interrupt ................................................................................323
24.5.1 Bandwidth Line Interrupt Settings .........................................................324

Vantage CNM User’s Guide
Table of Contents 16
Chapter 25
Service Reports .................................................................................................... 326
25.1 Service Monitor ..............................................................................................326
25.2 Pre-defined and Custom Services .................................................................326
25.2.1 Creating a Custom Service ...................................................................327
25.3 Configuring Service Settings ..........................................................................327
25.4 Service Summary Screens .............................................................................329
25.4.1 All Services Summary ...........................................................................329
25.4.2 Service Summary Settings ...................................................................330
25.4.3 Web Services Summary .......................................................................330
25.4.4 FTP Services Summary ........................................................................331
25.4.5 Mail Services Summary ........................................................................332
25.4.6 VPN Services Summary .......................................................................333
25.4.7 Custom Services Summary ..................................................................334
25.5 Service Top Sites ...........................................................................................335
25.5.1 All Services Top Sites ...........................................................................336
25.5.2 Top Site Service Settings ......................................................................337
25.5.3 Web Service Top Sites ..........................................................................337
25.5.4 FTP Service Top Sites ..........................................................................338
25.5.5 Mail Service Top Sites ..........................................................................340
25.5.6 VPN Traffic Top Sites ............................................................................341
25.5.7 Custom Service Top Sites .....................................................................343
25.6 Top Users of Services ....................................................................................344
25.6.1 Top Users of All Services ......................................................................344
25.6.2 Top Site Service Settings ......................................................................345
25.6.3 Top Users of Web Services ..................................................................346
25.6.4 Top Users of FTP Services ...................................................................347
25.6.5 Top Users of Mail Services ...................................................................348
25.6.6 Top Users of VPN Tunnels ...................................................................349
25.6.7 Top Users of Custom Services .............................................................350
Chapter 26
Web Filter .............................................................................................................. 352
26.1 Web Filter Summary ......................................................................................352
26.2 Web Filter Top Sites .......................................................................................353
26.3 Web Filter Top Users ......................................................................................354
26.4 Web Filter By User .........................................................................................355
Chapter 27
Attack Reports...................................................................................................... 358
27.1 Attack Summary .............................................................................................358
27.2 Attack Categories ...........................................................................................359
27.2.1 Attack Category Settings ......................................................................360

Vantage CNM User’s Guide
17 Table of Contents
27.3 Source of Attacks ...........................................................................................360
27.3.1 Attack Source Settings .........................................................................361
27.4 Attack Errors and Exceptions .........................................................................362
Chapter 28
Authentication ...................................................................................................... 364
28.1 Successful Logins ..........................................................................................364
28.2 Failed Logins ..................................................................................................364
Chapter 29
Log Viewer ............................................................................................................ 366
29.1 Log Monitor ....................................................................................................366
29.2 Log Search ....................................................................................................368
Chapter 30
Report System Screens....................................................................................... 370
30.1 General Configuration ....................................................................................370
30.2 Schedule Reports ...........................................................................................371
30.2.1 Schedule Daily Report ..........................................................................372
30.2.2 Schedule Weekly Report ......................................................................373
30.3 CSV Import .....................................................................................................375
30.4 About Reports ................................................................................................375
Chapter 31
Report.................................................................................................................... 376
31.1 Daily Report ...................................................................................................376
31.2 Over Time Report ...........................................................................................378
Appendix A
FTP Server (WFTPD) Setup Example ................................................................. 382
Installing WFTPD ................................................................................................... 382
Running WFTPD .................................................................................................... 385
WFTPD Main Screen ............................................................................................. 385
Appendix B
Configuring the Kiwi Syslog Daemon ................................................................ 388
Installing the Kiwi Syslog Daemon ......................................................................... 388
Importing the Syslog Configuration File ................................................................. 389
Starting the Telnet Service .................................................................................... 391
Setting Up the Syslog Server in Vantage ............................................................... 392
Appendix C
Pop-up Windows, JavaScripts and Java Permissions ..................................... 394

Vantage CNM User’s Guide
Table of Contents 18
Internet Explorer Pop-up Blockers ......................................................................... 394
Disable pop-up Blockers.................................................................................. 394
Enable pop-up Blockers with Exceptions......................................................... 395
JavaScripts............................................................................................................. 397
Java Permissions ................................................................................................... 399
JAVA (Sun) ...................................................................................................... 400
Appendix D
FTP and syslog Server Overview ....................................................................... 402
Introduction ............................................................................................................ 402
Appendix E
Java Console Debug Messages.......................................................................... 404
Introduction ............................................................................................................ 404
Appendix F
IP Subnetting ........................................................................................................ 408
IP Addressing......................................................................................................... 408
IP Classes .............................................................................................................. 408
Subnet Masks ........................................................................................................ 409
Subnetting .............................................................................................................. 409
Example: Two Subnets .......................................................................................... 410
Example: Four Subnets.......................................................................................... 412
Example Eight Subnets.......................................................................................... 413
Subnetting With Class A and Class B Networks. ................................................... 414
Appendix G
Virtual Circuit Topology ...................................................................................... 416
Introduction ............................................................................................................ 416
Appendix H
Wireless LANs ...................................................................................................... 418
Wireless LAN Topologies ....................................................................................... 418
Ad-hoc Wireless LAN Configuration ................................................................ 418
BSS.................................................................................................................. 418
ESS.................................................................................................................. 419
Channel.................................................................................................................. 420
RTS/CTS................................................................................................................ 420
Fragmentation Threshold ....................................................................................... 421
Preamble Type ....................................................................................................... 422
IEEE 802.1x ........................................................................................................... 423
RADIUS.................................................................................................................. 423

Vantage CNM User’s Guide
19 Table of Contents
Types of RADIUS Messages ........................................................................... 423
Types of Authentication......................................................................................... 424
EAP-MD5 (Message-Digest Algorithm 5) ........................................................ 424
EAP-TLS (Transport Layer Security) ............................................................... 425
EAP-TTLS (Tunneled Transport Layer Service) .............................................. 425
PEAP (Protected EAP) .................................................................................... 425
LEAP................................................................................................................ 425
Dynamic WEP Key Exchange ......................................................................... 425
WPA ....................................................................................................................... 426
User Authentication ........................................................................................ 426
Encryption ....................................................................................................... 426
Security Parameters Summary .............................................................................. 427
Benefits of a Wireless LAN .................................................................................... 427
IEEE 802.11 ........................................................................................................... 428
Ad-hoc Wireless LAN Configuration....................................................................... 428
Infrastructure Wireless LAN Configuration............................................................. 429
Appendix I
Log Descriptions.................................................................................................. 432
Introduction ............................................................................................................ 432
Appendix J
Open Software Announcements......................................................................... 448
Notice ..................................................................................................................... 448
Copyright (C) 1999-2001 Intalio, Inc. All Rights Reserved.................................... 448
Common Public License Version 1.0 ..................................................................... 449
Cryptix General License......................................................................................... 453
TECHNOLOGY LICENSE FROM SUN MICROSYSTEMS, INC. TO DOUG LEA. 454
JAVA Software Technologies.................................................................................. 455
Apache License...................................................................................................... 457
Copyright (c) 2002, 2003 Gargoyle Software Inc. All rights reserved. ................... 462
GNU LESSER GENERAL PUBLIC LICENSE ....................................................... 463
GNU GENERAL PUBLIC LICENSE....................................................................... 470
End-User License Agreement for Vantage CNM.................................................... 475