ZyXEL Communications ZyAir G-2000 PlusV2 User manual

ZyXEL G-2000 Plus v2
4-port Wireless Router
User’s Guide
Version 3.60
Edition 1
2/2006

ZyXEL G-2000 Plus v2 User’s Guide
Copyright 3
Copyright
Copyright © 2006 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.
Trademarks
ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

ZyXEL G-2000 Plus v2 User’s Guide
4Certifications
Certifications
Federal Communications Commission (FCC) Interference Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause
undesired operations.
This equipment has been tested and found to comply with the limits for a Class B digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential installation. This equipment generates,
uses, and can radiate radio frequency energy, and if not installed and used in accordance with
the instructions, may cause harmful interference to radio communications. However, there is
no guarantee that interference will not occur in a particular installation
If this equipment does cause harmful interference to radio/television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and the receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.
• Consult the dealer or an experienced radio/TV technician for help.
This Class B digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.
FCC Caution
Any changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate this equipment.
IMPORTANT NOTE: FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with minimum distance 20cm
between the radiator & your body.
This transmitter must not be co-located or operating in conjunction with any other antenna or
transmitter.

ZyXEL G-2000 Plus v2 User’s Guide
Certifications 5
ZyXEL Communications Corporation declared that P-662H/HW-Dx is limited in CH1~11
from 2400 to 2483.5 MHz by specified firmware controlled in USA.
Certifications
1Go to www.zyxel.com
2Select your product from the drop-down list box on the ZyXEL home
page to go to that product's page.
3Select the certification you wish to view from this page.

ZyXEL G-2000 Plus v2 User’s Guide
6Safety Warnings
Safety Warnings
For your safety, be sure to read and follow all warning notices and instructions.
• To reduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger
telecommunication line cord.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel can
service the device. Please contact your vendor for further information.
• Use ONLY the dedicated power supply for your device. Connect the power cord or
power adaptor to the right supply voltage (110V AC in North America or 230V AC in
Europe).
• Do NOT use the device if the power supply is damaged as it might cause electrocution.
• If the power supply is damaged, remove it from the power outlet.
• Do NOT attempt to repair the power supply. Contact your local vendor to order a new
power supply.
• Place connecting cables carefully so that no one will step on them or stumble over them.
Do NOT allow anything to rest on the power cord and do NOT locate the product where
anyone can walk on the power cord.
• If you wall mount your device, make sure that no electrical, gas or water pipes will be
damaged.
• Do NOT install nor use your device during a thunderstorm. There may be a remote risk of
electric shock from lightning.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Make sure to connect the cables to the correct ports.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
• Do NOT store things on the device.
• Connect ONLY suitable accessories to the device.

ZyXEL G-2000 Plus v2 User’s Guide
ZyXEL Limited Warranty 7
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal or higher value, and will be solely at the discretion of ZyXEL. This warranty
shall not apply if the product has been modified, misused, tampered with, damaged by an act
of God, or subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind to the purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.

ZyXEL G-2000 Plus v2 User’s Guide
8Customer Support
Customer Support
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
METHOD
LOCATION
SUPPORT E-MAIL TELEPHONE1WEB SITE
REGULAR MAIL
SALES E-MAIL FAX FTP SITE
CORPORATE
HEADQUARTERS
(WORLDWIDE)
[email protected] [phone] www.zyxel.com
www.europe.zyxel.com
ZyXEL Communications Corp.
6 Innovation Road II
Science Park
Hsinchu 300
Ta i w a n
[email protected] [phone] ftp.zyxel.com
ftp.europe.zyxel.com
CZECH REPUBLIC
[email protected] [phone] www.zyxel.cz ZyXEL Communications
Czech s.r.o.
Modranská 621
143 01 Praha 4 - Modrany
Ceská Republika
[email protected] [phone]
DENMARK
[email protected] [phone] www.zyxel.dk ZyXEL Communications A/S
Columbusvej
2860 Soeborg
Denmark
[email protected] [phone]
FINLAND
[email protected] [phone] www.zyxel.fi ZyXEL Communications Oy
Malminkaari 10
00700 Helsinki
Finland
[email protected] [phone]
FRANCE
[email protected] [phone] www.zyxel.fr ZyXEL France
1 rue des Vergers
Bat. 1 / C
69760 Limonest
France
[phone]
GERMANY
[email protected] [phone] www.zyxel.de ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen
Germany
[email protected] [phone]
HUNGARY
[email protected] [phone] www.zyxel.hu ZyXEL Hungary
48, Zoldlomb Str.
H-1025, Budapest
Hungary
[email protected] [phone]
KAZAKHSTAN
http://zyxel.kz/support [phone] www.zyxel.kz ZyXEL Kazakhstan
43, Dostyk ave.,Office 414
Dostyk Business Centre
050010, Almaty
Republic of Kazakhstan
[email protected] [phone]
NORTH AMERICA
[email protected] 1-800-255-4101
[phone]
www.us.zyxel.com ZyXEL Communications Inc.
1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.
[email protected] [phone] ftp.us.zyxel.com
NORWAY
[email protected] [phone] www.zyxel.no ZyXEL Communications A/S
Nils Hansens vei 13
0667 Oslo
Norway
[email protected] [phone]

ZyXEL G-2000 Plus v2 User’s Guide
Customer Support 9
POLAND
[email protected] [phone] www.pl.zyxel.com ZyXEL Communications
ul.Emilli Plater 53
00-113 Warszawa
Poland
[phone]
RUSSIA
http://zyxel.ru/support [phone] www.zyxel.ru ZyXEL Russia
Ostrovityanova 37a Str.
Moscow, 117279
Russia
[email protected] [phone]
SPAIN
[email protected] [phone] www.zyxel.es ZyXEL Communications
Arte, 21 5ª planta
28033 Madrid
Spain
[email protected] [phone]
SWEDEN
[email protected] [phone] www.zyxel.se ZyXEL Communications A/S
Sjöporten 4, 41764 Göteborg
Sweden
[email protected] [phone]
UKRAINE
[email protected] [phone] www.ua.zyxel.com ZyXEL Ukraine
13, Pimonenko Str.
Kiev, 04050
Ukraine
[email protected] [phone]
UNITED KINGDOM
[email protected] [phone]
08707 555779 (UK only)
www.zyxel.co.uk ZyXEL Communications UK
Ltd.,11 The Courtyard,
Eastern Road, Bracknell,
Berkshire, RG12 2XB,
United Kingdom (UK)
[email protected] [phone] ftp.zyxel.co.uk
1. “+” is the (prefix) number you enter to make an international telephone call.
METHOD
LOCATION
SUPPORT E-MAIL TELEPHONE1WEB SITE
REGULAR MAIL
SALES E-MAIL FAX FTP SITE

ZyXEL G-2000 Plus v2 User’s Guide
10 Customer Support

ZyXEL G-2000 Plus v2 User’s Guide
Table of Contents 11
Table of Contents
Copyright .................................................................................................................. 3
Certifications ............................................................................................................ 4
Safety Warnings ....................................................................................................... 6
ZyXEL Limited Warranty.......................................................................................... 7
Customer Support.................................................................................................... 8
Table of Contents ................................................................................................... 11
List of Figures ........................................................................................................ 25
List of Tables .......................................................................................................... 31
Preface .................................................................................................................... 35
Chapter 1
Getting to Know Your Device ................................................................................ 37
1.1 Introducing the ZyXEL G-2000 Plus v2 .............................................................37
1.2 Features .............................................................................................................37
1.2.1 Physical Features .....................................................................................37
1.2.2 Firmware Features ....................................................................................38
1.3 Applications for the ZyXEL device .....................................................................43
1.3.1 Internet Access and Wireless Network .....................................................43
1.3.2 Firewall for Secure Broadband Internet Access .......................................44
Chapter 2
Introducing the Web Configurator........................................................................ 45
2.1 Web Configurator Overview ...............................................................................45
2.2 Accessing the ZyXEL device Web Configurator ................................................45
2.3 Resetting the ZyXEL device ...............................................................................47
2.3.1 .Procedure To Use The Reset Button .......................................................47
2.3.2 Method of Restoring Factory-Defaults Via Web Configurator ...................47
2.4 Navigating the ZyXEL device Web Configurator ................................................47
Chapter 3
Wizard Setup .......................................................................................................... 51
3.1 Wizard Setup Overview ......................................................................................51
3.2 General Setup ....................................................................................................51

ZyXEL G-2000 Plus v2 User’s Guide
12 Table of Contents
3.3 Wizard Setup Wireless LAN ...............................................................................52
3.3.1 Name (SSID), Channel ID and Security ...................................................53
3.3.2 Configuring WEP or WPA(2)-PSK Security ...............................................54
3.3.3 Confirm Security Settings ..........................................................................55
3.4 Wizard Setup WAN ............................................................................................56
3.4.1 Ethernet .....................................................................................................56
3.4.2 PPPoE Encapsulation................................................................................58
3.4.3 PPTP Encapsulation..................................................................................59
3.5 Wizard Setup WAN IP .......................................................................................61
3.5.1 WAN IP Address Assignment ...................................................................61
3.5.2 IP Address and Subnet Mask ...................................................................61
3.5.3 DNS Server Address Assignment .............................................................62
3.5.4 WAN MAC Address ..................................................................................62
3.6 Basic Setup Complete ........................................................................................64
Chapter 4
System Screens ..................................................................................................... 67
4.1 System Overview ...............................................................................................67
4.2 Configuring General Setup .............................................................................67
4.3 Dynamic DNS ...................................................................................................68
4.3.1 DynDNS Wildcard .....................................................................................68
4.4 Configuring Dynamic DNS .................................................................................69
4.5 Configuring Password ......................................................................................70
4.6 Configuring Time Setting .................................................................................71
Chapter 5
LAN Screens........................................................................................................... 73
5.1 LAN Overview ....................................................................................................73
5.2 DHCP Setup .......................................................................................................73
5.2.1 IP Pool Setup ............................................................................................73
5.2.2 System DNS Servers ................................................................................73
5.3 LAN TCP/IP ........................................................................................................73
5.3.1 Factory LAN Defaults ................................................................................73
5.3.2 IP Address and Subnet Mask ...................................................................74
5.3.3 RIP Setup .................................................................................................74
5.3.4 Multicast ....................................................................................................74
5.4 Configuring IP ...................................................................................................75
5.5 Configuring Static DHCP ...................................................................................78
5.6 Configuring IP Alias ..........................................................................................79
Chapter 6
Wireless LAN .......................................................................................................... 81
6.1 Wireless Network Overview ...............................................................................81

ZyXEL G-2000 Plus v2 User’s Guide
Table of Contents 13
6.2 Wireless Security Overview ...............................................................................82
6.2.1 SSID .........................................................................................................82
6.2.2 MAC Address Filter ...................................................................................82
6.2.3 User Authentication ..................................................................................82
6.2.4 Encryption .................................................................................................83
6.3 Additional Wireless Terms ..................................................................................84
6.4 Configuring Wireless .........................................................................................84
6.5 Wireless Security - No Security ..........................................................................86
6.6 Configuring WEP Encryption ..............................................................................87
6.7 Configuring WPA(2)-PSK Authentication ...........................................................89
6.8 Configuring WPA(2) Authentication ....................................................................91
6.9 Configuring RADIUS ..........................................................................................93
6.10 Configuring 802.1x ...........................................................................................95
6.11 MAC Filter ......................................................................................................97
6.12 Configuring Roaming .....................................................................................99
Chapter 7
WAN....................................................................................................................... 101
7.1 WAN Overview .................................................................................................101
7.2 Configuring WAN ISP ......................................................................................101
7.2.1 Ethernet Encapsulation............................................................................101
7.2.1.1 Service Type .................................................................................102
7.2.2 PPPoE Encapsulation .............................................................................103
7.2.3 PPTP Encapsulation ...............................................................................105
7.3 Configuring WAN IP ........................................................................................107
7.4 Configuring WAN MAC ....................................................................................110
Chapter 8
Single User Account (SUA) / Network Address Translation (NAT).................. 113
8.1 NAT Overview ..................................................................................................113
8.1.1 NAT Definitions .......................................................................................113
8.1.2 What NAT Does ...................................................................................... 114
8.1.3 How NAT Works .....................................................................................114
8.1.4 NAT Application ......................................................................................115
8.1.5 NAT Mapping Types ...............................................................................116
8.2 Using NAT ........................................................................................................117
8.2.1 SUA (Single User Account) Versus NAT ................................................117
8.3 SUA Server ......................................................................................................117
8.3.1 Default Server IP Address ...................................................................... 118
8.3.2 Port Forwarding: Services and Port Numbers ........................................118
8.3.3 Configuring Servers Behind SUA (Example) ..........................................119
8.4 Configuring SUA Server .................................................................................. 119
8.5 Configuring Address Mapping .........................................................................121

ZyXEL G-2000 Plus v2 User’s Guide
14 Table of Contents
8.5.1 Configuring Address Mapping ...............................................................123
8.6 Trigger Port Forwarding ...................................................................................125
8.6.1 Trigger Port Forwarding Example ...........................................................126
8.6.2 Two Points To Remember About Trigger Ports .......................................126
8.7 Configuring Trigger Port Forwarding ...............................................................126
Chapter 9
Static Route Screens ........................................................................................... 129
9.1 Static Route Overview ......................................................................................129
9.2 Configuring IP Static Route ...........................................................................129
9.2.1 Configuring Route Entry .........................................................................131
Chapter 10
Firewalls................................................................................................................ 133
10.1 Firewall Overview ...........................................................................................133
10.2 Types of Firewalls ..........................................................................................133
10.2.1 Packet Filtering Firewalls ......................................................................133
10.2.2 Application-level Firewalls ....................................................................133
10.2.3 Stateful Inspection Firewalls .................................................................134
10.3 Introduction to ZyXEL’s Firewall .....................................................................134
10.4 Denial of Service ............................................................................................135
10.4.1 Basics ...................................................................................................135
10.4.2 Types of DoS Attacks ...........................................................................136
10.4.2.1 ICMP Vulnerability ......................................................................139
10.4.2.2 Traceroute ...................................................................................139
10.5 Stateful Inspection ..........................................................................................140
10.5.1 Stateful Inspection Process ..................................................................140
10.5.2 Stateful Inspection and the ZyXEL device ............................................141
10.5.3 TCP Security .........................................................................................142
10.5.4 UDP/ICMP Security ..............................................................................142
10.5.5 Upper Layer Protocols ..........................................................................142
10.6 Guidelines For Enhancing Security With Your Firewall ..................................143
10.7 Packet Filtering Vs Firewall ............................................................................143
10.7.1 Packet Filtering: ....................................................................................143
10.7.1.1 When To Use Filtering .................................................................144
10.7.2 Firewall .................................................................................................144
10.7.2.1 When To Use The Firewall ..........................................................144
Chapter 11
Firewall Screens................................................................................................... 145
11.1 Access Methods .............................................................................................145
11.2 Firewall Policies Overview ..............................................................................145
11.3 Rule Logic Overview ......................................................................................146

ZyXEL G-2000 Plus v2 User’s Guide
Table of Contents 15
11.3.1 Rule Checklist .......................................................................................146
11.3.2 Security Ramifications ..........................................................................146
11.3.3 Key Fields For Configuring Rules .........................................................147
11.3.3.1 Action ...........................................................................................147
11.3.3.2 Service .........................................................................................147
11.3.3.3 Source Address ...........................................................................147
11.3.3.4 Destination Address ....................................................................147
11.4 Connection Direction Examples .....................................................................147
11.4.1 LAN to WAN Rules ................................................................................148
11.4.2 WAN to LAN Rules ................................................................................148
11.5 Alerts ..............................................................................................................149
11.6 Configuring Firewall .......................................................................................149
11.6.1 Rule Summary ......................................................................................150
11.6.2 Configuring Firewall Rules ...................................................................152
11.6.3 Configuring Custom Services ...............................................................155
11.7 Example Firewall Rule ....................................................................................156
11.8 Predefined Services .......................................................................................159
Chapter 12
Content Filtering ................................................................................................. 163
12.1 Introduction to Content Filtering .....................................................................163
12.2 Restrict Web Features ...................................................................................163
12.3 Days and Times .............................................................................................163
12.4 Configure Content Filtering ...........................................................................163
Chapter 13
Remote Management Screens ............................................................................ 167
13.1 Remote Management Overview .....................................................................167
13.1.1 Remote Management Limitations .........................................................167
13.1.2 Remote Management and NAT ............................................................168
13.1.3 System Timeout ...................................................................................168
13.2 Configuring WWW ........................................................................................168
13.3 Configuring TELNET .....................................................................................169
13.4 Configuring FTP ............................................................................................171
13.5 SNMP ...........................................................................................................172
13.5.1 Supported MIBs ....................................................................................173
13.5.2 SNMP Traps .........................................................................................173
13.5.3 Configuring SNMP ................................................................................174
13.6 Configuring DNS ...........................................................................................175
13.7 Configuring Security ......................................................................................176

ZyXEL G-2000 Plus v2 User’s Guide
16 Table of Contents
Chapter 14
UPnP...................................................................................................................... 179
14.1 Universal Plug and Play Overview ................................................................179
14.1.1 How Do I Know If I'm Using UPnP? ......................................................179
14.1.2 NAT Traversal .......................................................................................179
14.1.3 Cautions with UPnP ..............................................................................179
14.2 UPnP and ZyXEL ...........................................................................................180
14.3 Configuring UPnP .........................................................................................180
14.4 Installing UPnP in Windows Example ............................................................181
14.4.1 Installing UPnP in Windows Me ............................................................181
14.4.2 Installing UPnP in Windows XP ............................................................182
14.5 Using UPnP in Windows XP Example ...........................................................183
14.5.1 Auto-discover Your UPnP-enabled Network Device .............................184
14.5.2 Web Configurator Easy Access ............................................................185
14.5.3 Web Configurator Easy Access ............................................................186
Chapter 15
Internal RADIUS Server ....................................................................................... 189
15.1 Internal RADIUS Overview .............................................................................189
15.2 Internal RADIUS Server Setting ....................................................................191
15.3 Trusted AP Overview .....................................................................................193
15.4 Configuring Trusted AP .................................................................................194
15.5 Trusted Users Overview .................................................................................195
15.6 Configuring Trusted Users ............................................................................195
Chapter 16
Certificates............................................................................................................ 199
16.1 Certificates Overview .....................................................................................199
16.1.1 Advantages of Certificates ....................................................................200
16.2 Self-signed Certificates ..................................................................................200
16.3 Configuration Summary .................................................................................200
16.4 My Certificates ..............................................................................................200
16.5 Certificate File Formats ..................................................................................203
16.6 Importing a Certificate ...................................................................................203
16.7 Creating a Certificate ....................................................................................204
16.8 My Certificate Details ....................................................................................207
16.9 Trusted CAs ..................................................................................................210
16.10 Importing a Trusted CA’s Certificate ............................................................212
16.11 Trusted CA Certificate Details .....................................................................213
Chapter 17
Log Screens.......................................................................................................... 217
17.1 Configuring View Log ...................................................................................217

ZyXEL G-2000 Plus v2 User’s Guide
Table of Contents 17
17.2 Configuring Log Settings ...............................................................................218
17.3 Configuring Reports ......................................................................................221
Chapter 18
Maintenance ......................................................................................................... 223
18.1 Maintenance Overview ...................................................................................223
18.2 System Status Screen ...................................................................................223
18.2.1 System Statistics....................................................................................225
18.3 DHCP Table Screen ......................................................................................225
18.4 Association List .............................................................................................227
18.5 F/W Upload Screen .......................................................................................228
18.6 Configuration Screen ....................................................................................230
18.6.1 Backup Configuration .........................................................................231
18.6.2 Restore Configuration ..........................................................................231
18.6.3 Back to Factory Defaults ......................................................................233
18.7 Restart Screen ..............................................................................................233
Chapter 19
Introducing the SMT ............................................................................................ 235
19.1 SMT Introduction ............................................................................................235
19.2 Connect to your ZyXEL device Using Telnet ..................................................235
19.2.1 Entering Password ................................................................................235
19.3 Changing the System Password ....................................................................236
19.4 ZyXEL device SMT Menu Overview Example ...............................................236
19.5 Navigating the SMT Interface .........................................................................237
19.5.1 System Management Terminal Interface Summary ..............................239
19.6 Changing the System Password ....................................................................239
Chapter 20
General Setup....................................................................................................... 241
20.1 General Setup ................................................................................................241
20.1.1 Procedure To Configure Menu 1 ...........................................................241
20.1.2 Procedure to Configure Dynamic DNS .................................................243
Chapter 21
Menu 2 WAN Setup .............................................................................................. 245
21.1 Introduction to WAN .......................................................................................245
21.2 WAN Setup .....................................................................................................245
Chapter 22
LAN Setup............................................................................................................. 247
22.1 LAN Setup ......................................................................................................247
22.1.1 General Ethernet Setup ........................................................................247

ZyXEL G-2000 Plus v2 User’s Guide
18 Table of Contents
22.2 Protocol Dependent Ethernet Setup ..............................................................248
22.3 TCP/IP Ethernet Setup and DHCP ................................................................248
22.3.1 IP Alias Setup .......................................................................................250
22.4 Wireless LAN Setup .......................................................................................252
22.4.1 Configuring MAC Address Filter ...........................................................254
Chapter 23
Internet Access .................................................................................................... 257
23.1 Introduction to Internet Access Setup ............................................................257
23.2 Ethernet Encapsulation ..................................................................................257
23.3 Configuring the PPTP Client ..........................................................................258
23.4 Configuring the PPPoE Client ........................................................................260
23.5 Basic Setup Complete ....................................................................................261
Chapter 24
Remote Node Configuration ............................................................................... 263
24.1 Introduction to Remote Node Setup ...............................................................263
24.2 Remote Node Profile Setup ...........................................................................263
24.2.1 Ethernet Encapsulation .........................................................................263
24.2.2 PPPoE Encapsulation ...........................................................................266
24.2.2.1 Outgoing Authentication Protocol ................................................266
24.2.2.2 Nailed-Up Connection .................................................................266
24.2.3 PPTP Encapsulation .............................................................................267
24.3 Edit IP .............................................................................................................269
24.4 Remote Node Filter ........................................................................................271
Chapter 25
Static Route Setup ............................................................................................... 273
25.1 IP Static Route Setup .....................................................................................273
Chapter 26
Dial-in User Setup ................................................................................................ 275
26.1 Dial-in User Setup ..........................................................................................275
Chapter 27
Network Address Translation (NAT) ................................................................... 277
27.1 Using NAT ......................................................................................................277
27.1.1 SUA (Single User Account) Versus NAT ..............................................277
27.2 Applying NAT .................................................................................................277
27.3 NAT Setup ......................................................................................................279
27.3.1 Address Mapping Sets ..........................................................................279
27.3.1.1 User-Defined Address Mapping Sets ..........................................281
27.3.1.2 Ordering Your Rules ....................................................................282

ZyXEL G-2000 Plus v2 User’s Guide
Table of Contents 19
27.4 Configuring a Server behind NAT ..................................................................284
27.5 General NAT Examples ..................................................................................285
27.5.1 Example 1: Internet Access Only ..........................................................286
27.5.2 Example 2: Internet Access with an Inside Server ...............................286
27.5.3 Example 3: Multiple Public IP Addresses With Inside Servers .............287
27.5.4 Example 4: NAT Unfriendly Application Programs ...............................291
27.6 Configuring Trigger Port Forwarding .............................................................292
Chapter 28
Filter Configuration .............................................................................................. 295
28.1 Introduction to Filters ......................................................................................295
28.1.1 The Filter Structure of the ZyXEL device ..............................................296
28.2 Configuring a Filter Set ..................................................................................297
28.2.1 Configuring a Filter Rule .......................................................................300
28.2.2 Configuring a TCP/IP Filter Rule ..........................................................300
28.2.3 Configuring a Generic Filter Rule .........................................................304
28.3 Example Filter ................................................................................................306
28.4 Filter Types and NAT ......................................................................................309
28.5 Firewall Versus Filters ....................................................................................309
28.6 Applying a Filter ............................................................................................309
28.6.1 Applying LAN Filters .............................................................................309
28.6.2 Applying Remote Node Filters ..............................................................310
Chapter 29
Enabling the Firewall ........................................................................................... 311
29.1 Remote Management and the Firewall .......................................................... 311
29.2 Access Methods .............................................................................................311
29.3 Enabling the Firewall ......................................................................................311
Chapter 30
SNMP Configuration ............................................................................................ 313
30.1 About SNMP ..................................................................................................313
30.2 Supported MIBs ............................................................................................314
30.3 SNMP Configuration ......................................................................................314
30.4 SNMP Traps ...................................................................................................315
Chapter 31
System Security ................................................................................................... 317
31.1 System Security .............................................................................................317
31.1.1 System Password .................................................................................317
31.1.2 Configuring External RADIUS Server ...................................................317
31.1.3 802.1x ...................................................................................................319

ZyXEL G-2000 Plus v2 User’s Guide
20 Table of Contents
Chapter 32
System Information and Diagnosis .................................................................... 323
32.1 System Status ................................................................................................323
32.2 System Information ........................................................................................325
32.2.1 System Information ...............................................................................325
32.2.2 Console Port Speed ..............................................................................326
32.3 Log and Trace ................................................................................................326
32.3.1 Viewing Error Log .................................................................................326
32.3.2 UNIX Syslog .........................................................................................327
32.3.2.1 CDR ............................................................................................328
32.3.2.2 Packet triggered ..........................................................................328
32.3.2.3 Filter log .....................................................................................329
32.3.2.4 PPP log ......................................................................................329
32.3.2.5 Firewall log ..................................................................................330
32.3.3 Call-Triggering Packet ..........................................................................330
32.4 Diagnostic ......................................................................................................331
32.4.1 WAN DHCP ..........................................................................................332
Chapter 33
Firmware and Configuration File Maintenance ................................................. 335
33.1 Filename Conventions ...................................................................................335
33.2 Backup Configuration .....................................................................................336
33.2.1 Backup Configuration Using FTP .........................................................336
33.2.2 Using the FTP command from the DOS Prompt ..................................337
33.2.3 GUI-based FTP Clients .........................................................................338
33.2.4 TFTP and FTP over WAN Management Limitations .............................338
33.2.5 Backup Configuration Using TFTP .......................................................339
33.2.6 Example: TFTP Command ...................................................................339
33.2.7 GUI-based TFTP Clients ......................................................................340
33.3 Restore Configuration ...................................................................................340
33.3.1 Restore Using FTP ...............................................................................340
33.3.2 Restore Using FTP Session Example ..................................................341
33.4 Uploading Firmware and Configuration Files .................................................342
33.4.1 Firmware Upload ..................................................................................342
33.4.2 Configuration File Upload .....................................................................343
33.4.3 Using the FTP command from the DOS Prompt Example ...................343
33.4.4 TFTP File Upload ..................................................................................344
33.4.5 Example: TFTP Command ...................................................................345
Chapter 34
System Maintenance and Information ............................................................... 347
34.1 Command Interpreter Mode ...........................................................................347
34.2 Call Control Support .......................................................................................348