P-2302R Series VoIP Station Gateway User's Guide
Table Of Contents
- P-2302R Series
- User’s Guide
- Copyright
- Federal Communications Commission (FCC) Interference Statement
- Safety Warnings
- ZyXEL Limited Warranty
- Customer Support
- Table of Contents
- List of Figures
- List of Tables
- Preface
- Introducing the Prestige
- Introducing the Web Configurator
- Wizard Setup
- System Screens
- LAN Setup
- WAN Screens
- Introduction to VoIP
- VoIP Screens
- Phone
- Phone Book
- Phone Usage
- Network Address Translation (NAT) Screens
- Static Route
- Firewall
- Content Filtering
- Remote Management Screens
- Universal Plug-and-Play (UPnP)
- Logs
- Bandwidth Management
- 19.1 Bandwidth Management Overview
- 19.2 Bandwidth Classes and Filters
- 19.3 Proportional Bandwidth Allocation
- 19.4 Application-based Bandwidth Management
- 19.5 Subnet-based Bandwidth Management
- 19.6 Application and Subnet-based Bandwidth Management
- 19.7 Scheduler
- 19.8 Maximize Bandwidth Usage
- 19.9 Bandwidth Borrowing
- 19.10 Configuring Summary
- 19.11 Configuring Class Setup
- 19.12 Configuring Monitor
- Maintenance
- Introducing the SMT
- General Setup
- WAN Setup
- LAN Setup
- Internet Access
- Remote Node Configuration
- Static Route Setup
- Network Address Translation (NAT)
- Enabling the Firewall
- Filter Configuration
- SNMP Configuration
- System Information and Diagnosis
- Firmware and Configuration File Maintenance
- 33.1 Filename Conventions
- 33.2 Backup Configuration
- 33.2.1 Backup Configuration
- 33.2.2 Using the FTP Command from the Command Line
- 33.2.3 Example of FTP Commands from the Command Line
- 33.2.4 GUI-based FTP Clients
- 33.2.5 TFTP and FTP over WAN Management Limitations
- 33.2.6 Backup Configuration Using TFTP
- 33.2.7 TFTP Command Example
- 33.2.8 GUI-based TFTP Clients
- 33.3 Restore Configuration
- 33.4 Uploading Firmware and Configuration Files
- System Maintenance
- Remote Management
- Call Scheduling
- Troubleshooting
- 37.1 Problems Starting Up the Prestige
- 37.2 Problems with the LAN Interface
- 37.3 Problems with the WAN Interface
- 37.4 Problems with Internet Access
- 37.5 Problems with the Password
- 37.6 Problems with the Web Configurator
- 37.7 Problems with a Telephone or the Telephone Port
- 37.8 Problems with Voice Service
- 37.9 Pop-up Windows, JavaScripts and Java Permissions
- Product Specifications
- Wall-mounting Instructions
- Setting up Your Computer’s IP Address
- IP Subnetting
- PPPoE
- Triangle Route
- SIP Passthrough
- Index
P-2302R Series User’s Guide
187 Chapter 18 Logs
Exceed maximum sessions per host (%d). The device blocked a session because the host's
connections exceeded the maximum sessions per host.
Firewall allowed a packet that matched a
NAT session: [ TCP | UDP ]
A packet from the WAN (TCP or UDP) matched a cone
NAT session and the device forwarded it to the LAN.
Table 58 TCP Reset Logs
LOG MESSAGE DESCRIPTION
Under SYN flood attack,
sent TCP RST
The router sent a TCP reset packet when a host was under a SYN
flood attack (the TCP incomplete count is per destination host.)
Exceed TCP MAX
incomplete, sent TCP RST
The router sent a TCP reset packet when the number of TCP
incomplete connections exceeded the user configured threshold.
(the TCP incomplete count is per destination host.)
Peer TCP state out of
order, sent TCP RST
The router sent a TCP reset packet when a TCP connection state
was out of order.Note: The firewall refers to RFC793 Figure 6 to
check the TCP state.
Firewall session time
out, sent TCP RST
The router sent a TCP reset packet when a dynamic firewall
session timed out.
The default timeout values are as follows:
ICMP idle timeout: 3 minutes
UDP idle timeout: 3 minutes
TCP connection (three way handshaking) timeout: 270 seconds
TCP FIN-wait timeout: 2 MSL (Maximum Segment Lifetime set in
the TCP header).
TCP idle (established) timeout (s): 150 minutes
TCP reset timeout: 10 seconds
Exceed MAX incomplete,
sent TCP RST
The router sent a TCP reset packet when the number of
incomplete connections (TCP and UDP) exceeded the user-
configured threshold. (Incomplete count is for all TCP and UDP
connections through the firewall.)Note: When the number of
incomplete connections (TCP + UDP) > “Maximum Incomplete
High”, the router sends TCP RST packets for TCP connections
and destroys TOS (firewall dynamic sessions) until incomplete
connections < “Maximum Incomplete Low”.
Access block, sent TCP
RST
The router sends a TCP RST packet and generates this log if you
turn on the firewall TCP reset mechanism (via CI command:
sys
firewall tcprst
).
Table 59 Packet Filter Logs
LOG MESSAGE DESCRIPTION
[ TCP | UDP | ICMP | IGMP |
Generic ] packet filter
matched (set: %d, rule: %d)
Attempted access matched a configured filter rule (denoted by
its set and rule number) and was blocked or forwarded
according to the rule.
Table 57 Access Control Logs (continued)
LOG MESSAGE DESCRIPTION