User manual ZYXEL P-202H PLUS V2

[. . . ] P-202H Plus v2 ISDN Internet Access Router User's Guide Version 3. 40 Edition 1 8/2006 P-202H Plus v2 User's Guide Copyright Copyright © 2006 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. [. . . ] Having everyone use the same pre-shared key may create a vulnerability. If the pre-shared key is compromised, all of the VPN connections using that VPN rule are at risk. A recommended alternative is to use a different VPN rule for each telecommuter and identify them by unique IDs (see Section 11. 16. 2 on page 137). . Table 42 Telecommuter and Headquarters Configuration Example TELECOMMUTER My IP Address: Secure Gateway IP Address: 0. 0. 0. 0 (dynamic IP address assigned by the ISP) Public static IP address or domain name. HEADQUARTERS Public static IP address 0. 0. 0. 0 With this IP address only the telecommuter can initiate the IPSec tunnel. Chapter 11 VPN Screens 136 P-202H Plus v2 User's Guide Figure 58 Telecommuters Sharing One VPN Rule Example 11. 16. 2 Telecommuters Using Unique VPN Rules Example With aggressive negotiation mode (see Section 11. 10. 1 on page 127), the ZyXEL Device can use the ID types and contents to distinguish between VPN rules. Telecommuters can each use a separate VPN rule to simultaneously access a ZyXEL Device at headquarters. They can use different IPSec parameters (including the pre-shared key) and the local IP addresses (or ranges of addresses) can overlap. See the following graphic for an example where three telecommuters each use a different VPN rule to initiate a VPN connection to a ZyXEL Device located at headquarters. The ZyXEL Device at headquarters identifies each by its secure gateway address (a dynamic domain name) and uses the appropriate VPN rule to establish the VPN connection. 137 Chapter 11 VPN Screens P-202H Plus v2 User's Guide Figure 59 Telecommuters Using Unique VPN Rules Example 11. 17 Logs This screen displays the logs for all VPNs. The VPN log includes log index numbers, the date and time of the log records, and log messages. Refer to the Log appendix for descriptions and examples of VPN logs. Chapter 11 VPN Screens 138 P-202H Plus v2 User's Guide Figure 60 VPN Logs The following table describes the labels in this screen. Table 43 VPN Logs LABEL Log Back Previous Page Refresh Clear Next Page DESCRIPTION This field lists a message that gives information about the reason for the log. Click this button to view more items in the summary (if you have a summary list that exceeds this page). 139 Chapter 11 VPN Screens P-202H Plus v2 User's Guide CHAPT E R 1 2 NetCAPI This chapter covers the NetCAPI screen. 12. 1 NetCAPI Overview Your ZyXEL Device supports NetCAPI. NetCAPI is ZyXEL's implementation of CAPI (Common ISDN Application Program Interface) capabilities over a network. NetCAPI can be used for applications such as Eurofile transfer, file transfer, G3/G4 Fax, Autoanswer host mode, telephony, etc. on Windows 95/98/NT platforms. 12. 2 CAPI CAPI is an interface standard that allows applications to access ISDN services. When an application wants to communicate with an ISDN terminal it sends a series of standard commands to the terminal. The CAPI standard defines the commands and allows you to use a well-defined mechanism for communications using ISDN lines. CAPI also simplifies the development of ISDN applications through many default values that do not need to be programmed. It provides a unified interface for applications to access the different ISDN services such as data, voice, fax, telephony, etc. 12. 2. 1 ISDN-DCP ISDN-DCP allows a computer on the LAN to use services such as transmitting and receiving faxes as well as placing and receiving phone calls. By default, the ZyXEL Device listens for DCP messages on TCP port number 2578 (the Internet-assigned number for RVSCOM DCP). When the ZyXEL Device receives a DCP message from a DCP client i. e. , a computer, the ZyXEL Device processes the message and acts on it. Your ZyXEL Device supports all the DCP messages specified in the ISDN-DCP specification. Chapter 12 NetCAPI 140 P-202H Plus v2 User's Guide 12. 3 Configuring NetCAPI To edit your ZyXEL Device's NetCAPI settings, click Advanced > NetCAPI. The screen appears as shown. Figure 61 NetCAPI The following table describes the fields in this screen. Table 44 NetCAPI LABEL Active Max Number of Registered Users Incoming Data Call Number Matching DESCRIPTION Select this check box to enable NetCAPI. [. . . ] Lowest Host ID: 192. 168. 1. 129 Highest Host ID: 192. 168. 1. 190 LAST OCTET BIT VALUE 128 10000000 11000000 Table 141 Subnet 4 IP/SUBNET MASK IP Address IP Address (Binary) Subnet Mask (Binary) Subnet Address: 192. 168. 1. 192 Broadcast Address: 192. 168. 1. 255 NETWORK NUMBER 192. 168. 1. Lowest Host ID: 192. 168. 1. 193 Highest Host ID: 192. 168. 1. 254 LAST OCTET BIT VALUE 192 11000000 11000000 Example Eight Subnets Similarly use a 27-bit mask to create eight subnets (000, 001, 010, 011, 100, 101, 110 and 111). 359 Appendix E IP Addresses and Subnetting P-202H Plus v2 User's Guide The following table shows class C IP address last octet values for each subnet. Table 142 Eight Subnets SUBNET 1 2 3 4 5 6 7 8 SUBNET ADDRESS FIRST ADDRESS 0 32 64 96 128 160 192 224 1 33 65 97 129 161 193 225 LAST ADDRESS 30 62 94 126 158 190 222 254 BROADCAST ADDRESS 31 63 95 127 159 191 223 255 The following table is a summary for class "C" subnet planning. Table 143 Class C Subnet Planning NO. "BORROWED" HOST BITS 1 2 3 4 5 6 7 SUBNET MASK 255. 255. 255. 128 (/25) 255. 255. 255. 192 (/26) 255. 255. 255. 224 (/27) 255. 255. 255. 240 (/28) 255. 255. 255. 248 (/29) 255. 255. 255. 252 (/30) 255. 255. 255. 254 (/31) NO. HOSTS PER SUBNET 126 62 30 14 6 2 1 Subnetting With Class A and Class B Networks. For class "A" and class "B" addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID. [. . . ]