P-2302R Series VoIP Station Gateway User's Guide
Table Of Contents
- P-2302R Series
- User’s Guide
- Copyright
- Federal Communications Commission (FCC) Interference Statement
- Safety Warnings
- ZyXEL Limited Warranty
- Customer Support
- Table of Contents
- List of Figures
- List of Tables
- Preface
- Introducing the Prestige
- Introducing the Web Configurator
- Wizard Setup
- System Screens
- LAN Setup
- WAN Screens
- Introduction to VoIP
- VoIP Screens
- Phone
- Phone Book
- Phone Usage
- Network Address Translation (NAT) Screens
- Static Route
- Firewall
- Content Filtering
- Remote Management Screens
- Universal Plug-and-Play (UPnP)
- Logs
- Bandwidth Management
- 19.1 Bandwidth Management Overview
- 19.2 Bandwidth Classes and Filters
- 19.3 Proportional Bandwidth Allocation
- 19.4 Application-based Bandwidth Management
- 19.5 Subnet-based Bandwidth Management
- 19.6 Application and Subnet-based Bandwidth Management
- 19.7 Scheduler
- 19.8 Maximize Bandwidth Usage
- 19.9 Bandwidth Borrowing
- 19.10 Configuring Summary
- 19.11 Configuring Class Setup
- 19.12 Configuring Monitor
- Maintenance
- Introducing the SMT
- General Setup
- WAN Setup
- LAN Setup
- Internet Access
- Remote Node Configuration
- Static Route Setup
- Network Address Translation (NAT)
- Enabling the Firewall
- Filter Configuration
- SNMP Configuration
- System Information and Diagnosis
- Firmware and Configuration File Maintenance
- 33.1 Filename Conventions
- 33.2 Backup Configuration
- 33.2.1 Backup Configuration
- 33.2.2 Using the FTP Command from the Command Line
- 33.2.3 Example of FTP Commands from the Command Line
- 33.2.4 GUI-based FTP Clients
- 33.2.5 TFTP and FTP over WAN Management Limitations
- 33.2.6 Backup Configuration Using TFTP
- 33.2.7 TFTP Command Example
- 33.2.8 GUI-based TFTP Clients
- 33.3 Restore Configuration
- 33.4 Uploading Firmware and Configuration Files
- System Maintenance
- Remote Management
- Call Scheduling
- Troubleshooting
- 37.1 Problems Starting Up the Prestige
- 37.2 Problems with the LAN Interface
- 37.3 Problems with the WAN Interface
- 37.4 Problems with Internet Access
- 37.5 Problems with the Password
- 37.6 Problems with the Web Configurator
- 37.7 Problems with a Telephone or the Telephone Port
- 37.8 Problems with Voice Service
- 37.9 Pop-up Windows, JavaScripts and Java Permissions
- Product Specifications
- Wall-mounting Instructions
- Setting up Your Computer’s IP Address
- IP Subnetting
- PPPoE
- Triangle Route
- SIP Passthrough
- Index
P-2302R Series User’s Guide
Chapter 18 Logs 194
18.1.2 Syslog Logs
There are two types of syslog: event logs and traffic logs. The device generates an event log
when a system event occurs, for example, when a user logs in or the device is under attack.
The device generates a traffic log when a "session" is terminated. A traffic log summarizes the
session's type, when it started and stopped the amount of traffic that was sent and received and
so on. An external log analyzer can reconstruct and analyze the traffic flowing through the
device after collecting the traffic logs.
The following table shows RFC-2408 ISAKMP payload types that the log displays. Please
refer to the RFC for detailed information on each type.
Table 73 Syslog Logs
LOG MESSAGE DESCRIPTION
Event Log: <Facility*8 + Severity>Mon dd
hr:mm:ss hostname
src="<srcIP:srcPort>"
dst="<dstIP:dstPort>" msg="<msg>"
note="<note>" devID="<mac address>"
cat="<category>"
This message is sent by the system ("RAS" displays as the
system name if you haven’t configured one) when the router
generates a syslog. The facility is defined in the Log
Settings screen. The severity is the log’s syslog class. The
definition of messages and notes are defined in the various
log charts throughout this appendix. The “devID” is the MAC
address of the router’s LAN port. The “cat” is the same as
the category in the router’s logs.
Traffic Log: <Facility*8 + Severity>Mon
dd hr:mm:ss hostname
src="<srcIP:srcPort>"
dst="<dstIP:dstPort>" msg="Traffic Log"
note="Traffic Log" devID="<mac
address>" cat="Traffic Log"
duration=seconds sent=sentBytes
rcvd=receiveBytes dir="<from:to>"
protoID=IPProtocolID
proto="serviceName" trans="IPSec/
Normal"
This message is sent by the device when the connection
(session) is closed. The facility is defined in the Log
Settings screen. The severity is the traffic log type. The
message and note always display "Traffic Log". The "proto"
field lists the service name. The "dir" field lists the incoming
and outgoing interfaces ("LAN:LAN", "LAN:WAN",
"LAN:DEV" for example).
Table 74 RFC-2408 ISAKMP Payload Types
LOG DISPLAY PAYLOAD TYPE
SA Security Association
PROP Proposal
TRANS Transform
KE Key Exchange
ID Identification
CER Certificate
CER_REQ Certificate Request
HASH Hash
SIG Signature
NONCE Nonce
NOTFY Notification