Monitor
The Port Statistics Screen
Use this screen to look at packet statistics for each Gigabit Ethernet port.
Label | Description |
|---|---|
Poll Interval | Enter how often you want this window to be updated automatically, and click Set Interval. |
Set Interval | Click this to set the Poll Interval the screen uses. |
Stop | Click this to stop the window from updating automatically. You can start it again by setting the Poll Interval and clicking Set Interval. |
Switch to Graphic View | Click this to display the port statistics as a line graph. |
# | This field is a sequential value, and it is not associated with a specific port. |
Port | This field displays the physical port number. |
Status | This field displays the current status of the physical port. Down - The physical port is not connected. Speed / Duplex - The physical port is connected. This field displays the port speed and duplex setting (Full or Half). |
TxPkts | This field displays the number of packets transmitted from the Zyxel Device on the physical port since it was last connected. |
RxPkts | This field displays the number of packets received by the Zyxel Device on the physical port since it was last connected. |
Collisions | This field displays the number of collisions on the physical port since it was last connected. |
Tx B/s | This field displays the transmission speed, in bytes per second, on the physical port in the one-second interval before the screen updated. |
Rx B/s | This field displays the reception speed, in bytes per second, on the physical port in the one-second interval before the screen updated. |
Up Time | This field displays how long the physical port has been connected. |
System Up Time | This field displays how long the Zyxel Device has been running since it last restarted or was turned on. |
Port Statistics Graph
Use this screen to look at a line graph of packet statistics for each physical port.
Label | Description |
|---|---|
Refresh Interval | Enter how often you want this window to be automatically updated. |
Refresh Now | Click this to update the information in the window right away. |
Port Selection | Select the number of the physical port for which you want to display graphics. |
Switch to Grid View | Click this to display the port statistics as a table. |
bps | The y-axis represents the speed of transmission or reception. |
time | The x-axis shows the time period over which the transmission or reception occurred |
TX | This line represents traffic transmitted from the Zyxel Device on the physical port since it was last connected. |
RX | This line represents the traffic received by the Zyxel Device on the physical port since it was last connected. |
Last Update | This field displays the date and time the information in the window was last updated. |
Interface Status
This screen lists all of the Zyxel Device’s interfaces and gives packet statistics for them.
Label | Description |
|---|---|
Interface Status If an Ethernet interface does not have any physical ports associated with it, its entry is displayed in light gray text. | |
Name | This field displays the name of each interface. If there is an Expand icon (plus-sign) next to the name, click this to look at the status of virtual interfaces on top of this interface. |
Port/Binding | This field displays the physical port number. |
Status | This field displays the current status of each interface. The possible values depend on what type of interface it is. For Ethernet interfaces: • Inactive - The Ethernet interface is disabled. • Down - The Ethernet interface does not have any physical ports associated with it or the Ethernet interface is enabled but not connected. • Speed / Duplex - The Ethernet interface is enabled and connected. This field displays the port speed and duplex setting (Full or Half). For cellular (mobile broadband) interfaces, see USB Storage Screen for the status that can appear. For the auxiliary interface: • Inactive - The auxiliary interface is disabled. • Connected - The auxiliary interface is enabled and connected. • Disconnected - The auxiliary interface is not connected. For virtual interfaces, this field always displays Up. If the virtual interface is disabled, it does not appear in the list. For VLAN and bridge interfaces, this field always displays Up. If the VLAN or bridge interface is disabled, it does not appear in the list. For PPP interfaces: • Connected - The PPP interface is connected. • Disconnected - The PPP interface is not connected. If the PPP interface is disabled, it does not appear in the list. For WLAN interfaces: • Up - The WLAN interface is enabled. • Down - The WLAN interface is disabled. |
Zone | This field displays the zone to which the interface is assigned. |
IP Addr/Netmask | This field displays the current IP address and subnet mask assigned to the interface. If the IP address and subnet mask are 0.0.0.0, the interface is disabled or did not receive an IP address and subnet mask via DHCP. If this interface is a member of an active virtual router, this field displays the IP address it is currently using. This is either the static IP address of the interface (if it is the master) or the management IP address (if it is a backup). |
IP Assignment | This field displays how the interface gets its IP address. • Static - This interface has a static IP address. • DHCP Client - This interface gets its IP address from a DHCP server. |
Services | This field lists which services the interface provides to the network. Examples include DHCP relay, DHCP server, DDNS, RIP, and OSPF. This field displays n/a if the interface does not provide any services to the network. |
Action | Use this field to get or to update the IP address for the interface. Click Renew to send a new DHCP request to a DHCP server. Click Connect to try to connect a PPPoE/PPTP interface. If the interface cannot use one of these ways to get or to update its IP address, this field displays n/a. |
Tunnel Interface Status This displays the details of the Zyxel Device’s configured tunnel interfaces. | |
Name | This field displays the name of the interface. |
Status | The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is inactive. |
Zone | This field displays the zone to which the interface is assigned. |
IP Address | This is the IP address of the interface. If the interface is active (and connected), the Zyxel Device tunnels local traffic sent to this IP address to the Remote Gateway Address. |
My Address | This is the interface or IP address uses to identify itself to the remote gateway. The Zyxel Device uses this as the source for the packets it tunnels to the remote gateway. |
Remote Gateway Address | This is the IP address or domain name of the remote gateway to which this interface tunnels traffic. |
Mode | This field displays the tunnel mode that you are using. |
IPv6 Interface Status If an Ethernet interface does not have any physical ports associated with it, its entry is displayed in light gray text. | |
Name | This field displays the name of each interface. If there is an Expand icon (plus-sign) next to the name, click this to look at the status of virtual interfaces on top of this interface. |
Port | This field displays the physical port number. |
Status | This field displays the current status of each interface. The possible values depend on what type of interface it is. For Ethernet interfaces: • Inactive - The Ethernet interface is disabled. • Down - The Ethernet interface does not have any physical ports associated with it or the Ethernet interface is enabled but not connected. • Speed / Duplex - The Ethernet interface is enabled and connected. This field displays the port speed and duplex setting (Full or Half). For cellular (mobile broadband) interfaces, see USB Storage Screen for the status that can appear. For the auxiliary interface: • Inactive - The auxiliary interface is disabled. • Connected - The auxiliary interface is enabled and connected. • Disconnected - The auxiliary interface is not connected. For virtual interfaces, this field always displays Up. If the virtual interface is disabled, it does not appear in the list. For VLAN and bridge interfaces, this field always displays Up. If the VLAN or bridge interface is disabled, it does not appear in the list. For PPP interfaces: • Connected - The PPP interface is connected. • Disconnected - The PPP interface is not connected. If the PPP interface is disabled, it does not appear in the list. For WLAN interfaces: • Up - The WLAN interface is enabled. • Down - The WLAN interface is disabled. |
Zone | This field displays the zone to which the interface is assigned. |
IP Address | This field displays the current IPv6 address assigned to the interface. If the IPv6 address is ::, the interface is disabled or did not receive an IPv6 address via DHCP. If this interface is a member of an active virtual router, this field displays the IPv6 address it is currently using. This is either the static IPv6 address of the interface (if it is the master) or the management IPv6 address (if it is a backup). |
Services | This field lists which services the interface provides to the network. Examples include DHCP relay, DHCP server, DDNS, RIP, and OSPF. This field displays n/a if the interface does not provide any services to the network. |
Action | Use this field to get or to update the IP address for the interface. Click Renew to send a new DHCP request to a DHCP server. Click Connect to try to connect a PPPoE/PPTP interface. If the interface cannot use one of these ways to get or to update its IP address, this field displays n/a. |
Interface Statistics This table provides packet statistics for each interface. | |
Refresh | Click this button to update the information on the screen. |
Name | This field displays the name of each interface. If there is a Expand icon (plus-sign) next to the name, click this to look at the statistics for virtual interfaces on top of this interface. |
Status | This field displays the current status of the interface. • Down - The interface is not connected. • Speed / Duplex - The interface is connected. This field displays the port speed and duplex setting (Full or Half). This field displays Connected and the accumulated connection time (hh:mm:ss) when the PPP interface is connected. |
TxPkts | This field displays the number of packets transmitted from the Zyxel Device on the interface since it was last connected. |
RxPkts | This field displays the number of packets received by the Zyxel Device on the interface since it was last connected. |
Tx B/s | This field displays the transmission speed, in bytes per second, on the interface in the one-second interval before the screen updated. |
Rx B/s | This field displays the reception speed, in bytes per second, on the interface in the one-second interval before the screen updated. |
Traffic Statistics
This screen provides basic information about the following for example:
• Most-visited Web sites and the number of times each one was visited. This count may not be accurate in some cases because the Zyxel Device counts HTTP GET packets.
• Most-used protocols or service ports and the amount of traffic on each one
• LAN IP with heaviest traffic and how much traffic has been sent to and from each one
You use the Traffic Statistics screen to tell the Zyxel Device when to start and when to stop collecting information for these reports. You cannot schedule data collection; you have to start and stop it manually on the Traffic Statistics screen.
Label | Description |
|---|---|
Data Collection | |
Collect Statistics | Select this to have the Zyxel Device collect data for the report. If the Zyxel Device has already been collecting data, the collection period displays to the right. The progress is not tracked here real-time, but you can click the Refresh button to update it. |
Apply | Click Apply to save your changes back to the Zyxel Device. |
Reset | Click Reset to return the screen to its last-saved settings. |
Statistics | |
Interface | Select the interface from which to collect information. You can collect information from Ethernet, VLAN, bridge and PPPoE/PPTP interfaces. |
Sort By | Select the type of report to display. Choices are: • Host IP Address/User - displays the IP addresses or users with the most traffic and how much traffic has been sent to and from each one. • Service/Port - displays the most-used protocols or service ports and the amount of traffic for each one. • Web Site Hits - displays the most-visited Web sites and how many times each one has been visited. • Country - displays the countries with the most traffic and the amount of traffic for each one. Each type of report has different information in the report (below). |
Refresh | Click this button to update the report display. |
Flush Data | Click this button to discard all of the screen’s statistics and update the report display. |
These fields are available when the Traffic Type is Host IP Address/User. | |
# | This field is the rank of each record. The IP addresses and users are sorted by the amount of traffic. |
Direction | This field indicates whether the IP address or user is sending or receiving traffic. • Ingress- traffic is coming from the IP address or user to the Zyxel Device. • Egress - traffic is going from the Zyxel Device to the IP address or user. |
IP Address/User | This field displays the IP address or user in this record. The maximum number of IP addresses or users in this report is indicated in Maximum Values for Reports. |
Amount | This field displays how much traffic was sent or received from the indicated IP address or user. If the Direction is Ingress, a red bar is displayed; if the Direction is Egress, a blue bar is displayed. The unit of measure is bytes, Kbytes, Mbytes or Gbytes, depending on the amount of traffic for the particular IP address or user. The count starts over at zero if the number of bytes passes the byte count limit. |
These fields are available when the Traffic Type is Service/Port. | |
# | This field is the rank of each record. The protocols and service ports are sorted by the amount of traffic. |
Service/Port | This field displays the service and port in this record. |
Protocol | This field indicates what protocol the service was using. |
Direction | This field indicates whether the indicated protocol or service port is sending or receiving traffic. • Ingress - traffic is coming into the Zyxel Devicethrough the interface • Egress - traffic is going out from the Zyxel Device through the interface |
Amount | This field displays how much traffic was sent or received from the indicated service / port. If the Direction is Ingress, a red bar is displayed; if the Direction is Egress, a blue bar is displayed. The unit of measure is bytes, Kbytes, Mbytes, Gbytes, or Tbytes, depending on the amount of traffic for the particular protocol or service port. The count starts over at zero if the number of bytes passes the byte count limit. |
These fields are available when the Traffic Type is Web Site Hits. | |
# | This field is the rank of each record. The domain names are sorted by the number of hits. |
Web Site | This field displays the domain names most often visited. The Zyxel Device counts each page viewed on a Web site as another hit. |
Hits | This field displays how many hits the Web site received. The Zyxel Device counts hits by counting HTTP GET packets. Many Web sites have HTTP GET references to other Web sites, and the Zyxel Device counts these as hits too. The count starts over at zero if the number of hits passes the hit count limit. |
These fields are available when the Traffic Type is Country. | |
# | This field is the rank of each record. The country name is sorted by the amount of traffic. |
Direction | This field indicates whether the indicated protocol or service port is sending or receiving traffic. • Ingress - traffic is coming into the Zyxel Devicethrough the interface • Egress - traffic is going out from the Zyxel Device through the interface |
Country Name | This field displays the name of the country. |
Country | This field displays the country code. |
Amount | This field displays how much traffic was sent or received from the indicated country. If the Direction is Ingress, a red bar is displayed; if the Direction is Egress, a blue bar is displayed. The unit of measure is bytes, Kbytes, Mbytes, Gbytes, or Tbytes, depending on the amount of traffic for the particular protocol or service port. The count starts over at zero if the number of bytes passes the byte count limit. • Ingress - traffic is coming into the Zyxel Device from the country. • Egress - traffic is going from the Zyxel Device to the country. |
The following table displays the maximum number of records shown in the report, the byte count limit, and the hit count limit.
Label | Description |
|---|---|
Maximum Number of Records | 20 |
Byte Count Limit | 264 bytes; this is just less than 17 million terabytes. |
Hit Count Limit | 264 hits; this is over 1.8 x 1019 hits. |
The Session Monitor Screen
The Session Monitor screen displays all established sessions that pass through the Zyxel Device for debugging or statistical analysis. It is not possible to manage sessions in this screen. The following information is displayed.
• User who started the session
• Protocol or service port used
• Source address
• Destination address
• Number of bytes received (so far)
• Number of bytes transmitted (so far)
• Duration (so far)
You can look at all established sessions that passed through the Zyxel Device by user, service, source IP address, or destination IP address. You can also filter the information by user, protocol / service or service group, source address, and/or destination address and view it by user.
The following table describes the labels in this screen.
Label | Description |
|---|---|
View | Select how you want the established sessions that passed through the Zyxel Device to be displayed. Choices are: • sessions by users - display all active sessions grouped by user • sessions by services - display all active sessions grouped by service or protocol • sessions by source IP - display all active sessions grouped by source IP address • session by source region - display all active sessions grouped by where the traffic is coming from by country • sessions by destination IP - display all active sessions grouped by destination IP address • sessions by destination region - display all active sessions grouped by where the traffic is going to by country • all sessions - filter the active sessions by the User, Service, Source Address, and Destination Address, and display each session individually (sorted by user). |
Refresh | Click this button to update the information on the screen. The screen also refreshes automatically when you open and close the screen. |
The User, Service, Source Address, Destination Address, Source Country and Destination Country fields display if you view all sessions. Select your desired filter criteria and click the Refresh button to filter the list of sessions. | |
User | This field displays when View is set to all sessions. Type the user whose sessions you want to view. It is not possible to type part of the user name or use wildcards in this field; you must enter the whole user name. |
Service | This field displays when View is set to all sessions. Select the service or service group whose sessions you want to view. The Zyxel Device identifies the service by comparing the protocol and destination port of each packet to the protocol and port of each services that is defined. |
Source Address | This field displays when View is set to all sessions. Type the source IP address whose sessions you want to view. You cannot include the source port. |
Source Country | This field displays when View is set to all sessions. Select the country where the traffic is coming from. |
Destination Address | This field displays when View is set to all sessions. Type the destination IP address whose sessions you want to view. You cannot include the destination port. |
Destination Country | This field displays when View is set to all sessions. Select the country where the traffic is going to. |
Search | Click this to display all sessions in the table below according to the criteria you defined above. |
Clear Clear All | Administrators can use these buttons to forcibly terminate selected TCP/UDP connections. Select one or multiple connections and then click Clear; click Clear All to terminate all connections displayed. Cleared sessions display on the Log > View Log screen. |
# | This field is the rank of each record. The names are sorted by the name of user in active session. You can use the pull down menu on the right to choose sorting method. |
User | This field displays the user in each active session. If you are looking at the sessions by users (or all sessions) report, click + or - to display or hide details about a user’s sessions. |
Service | This field displays the protocol used in each active session. If you are looking at the sessions by services report, click + or - to display or hide details about a protocol’s sessions. |
Source | This field displays the source IP address and port in each active session. If you are looking at the sessions by source IP report, click + or - to display or hide details about a source IP address’s sessions. |
Source Country | This field displays the source country in each active session. |
Destination | This field displays the destination IP address and port in each active session. If you are looking at the sessions by destination IP report, click + or - to display or hide details about a destination IP address’s sessions. |
Destination Country | This field displays the destination country in each active session. |
Rx | This field displays the amount of information received by the source in the active session. |
Tx | This field displays the amount of information transmitted by the source in the active session. |
Duration | This field displays the length of the active session in seconds. |
DHCP Table
Use this screen to look at a list of interfaces and their DHCP-assigned IP addresses.
The following table describes the labels in this screen.
Label | Description |
|---|---|
Current DHCP List | |
Interface | Select a Zyxel Device interface that has DHCP enabled to show to which devices it has assigned DHCP IP addresses. |
Keyword | Enter a keyword to display the interfaces and their information, such as IP addresses, MAC addresses and so on. The field is case-sensitive. |
Search | Click to update the list of interfaces shown in the table below based on the search criteria. Your search criteria is retained when navigating between screens. |
Reset | Click to return this search criteria to the factory defaults and display all interfaces with DHCP enabled. |
Release | Select an entry and click on this button to let other devices use the dynamic DHCP that is currently assigned to the selected entry. |
Reserve | Select an entry and click on this button to set the entry as a static DHCP entry. The IP address will be reserved for the MAC address after you click this button. |
Unreserve | Select an entry and click on this button to set the entry from a static DHCP entry to a dynamic DHCP entry. The IP address is assigned to a DHCP client. |
Export | To export as a csv file on your computer, select them and click Export. Click Save in the file download dialogue box and then select a location and name for the file. You can edit the file after it is saved on your computer. To import the file you export here to recover the settings you configure now later on the Zyxel Device, go to Configuration> Network> Interface> Ethernet/VLAN> DCHP Setting. |
# | This field is a sequential value, and it is not associated with a specific entry. |
Interface | This field identifies the interface that assigned an IP address to a DHCP client. |
IP Address | This field displays the IP address currently assigned to a DHCP client or reserved for a specific MAC address. Click the column’s heading cell to sort the table entries by IP address. Click the heading cell again to reverse the sort order. |
Host Name | This field displays the name used to identify this device on the network (the computer name). The Zyxel Device learns these from the DHCP client requests. “None” shows here for a static DHCP entry. |
MAC Address | This field displays the MAC address to which the IP address is currently assigned or for which the IP address is reserved. Click the column’s heading cell to sort the table entries by MAC address. Click the heading cell again to reverse the sort order. |
Expiration Time | This displays the date and time the DHCP-assigned address will be renewed. |
Last Access | This is when the last time any traffic pass through the interface. |
Description | For a static DHCP entry, the host name or the description you configured shows here. This field is blank for dynamic DHCP entries. |
Static | This field displays if the address in the IP address field is reserved for the clients connected to this interface. Yes means that the clients connected to the interface will always get the IP address shown in the table. |
Device Insight
The Device Insight screen displays the status of the clients connected to the Zyxel Device, such as if a client is sending traffic to the Zyxel Device or if a client’s MAC address is in the CDR block list. See Collaborative Detection & Response for more information on CDR.
It also displays the basic information and the status of the clients. The clients show in this screen may include clients connected to the Zyxel Device:
• Using wired connections.
• Through access points (APs) using wired connections.
• Through access points (APs) using WiFi connections.
• Through bulit-in access points using WiFi connections.
• Using SecuExtender (IPSec VPN clients).
Use Device Insight to identify and monitor clients connected to the Zyxel Device internal LAN/VLAN DMZ networks in the same IP subnet. This feature collects client information, including:
• Hostname
• IP address and MAC address
• Operating system
• Category, such as mobile phones or computers
• Connected interface
You can create a profile based on clients' categories and operating systems, and then apply the created profile to the Zyxel Device security policies. See Device Insight for more information on creating and using Device Insight profiles.
To collect clients’ information using Device Insight, the clients must be in the same IP subnet in the LAN/VLAN/DMZ networks behind the Zyxel Device. Information from clients that are in different IP subnets in the LAN/VLAN/DMZ networks might not be collected correctly as traffic must pass through another router or a layer-3 switch to the Zyxel Device.The following table describes the labels in this screen.
lable | description |
|---|---|
Hide/Show Advanced Settings | Click this button to display a greater or lesser number of configuration fields. |
Edit | Double-click an entry or select it and click Edit to modify the entry’s settings in the Description field. |
Remove | Select an entry and click Remove to remove a client from the table that’s no longer connected to your network. For example, guest A visited your company over a month ago. Guest A used his cellphone to connect to your Zyxel Device networks. His cellphone was identified and shown in the Device Insight table. Guest A has left for over a month and you’re sure he will not return in the near future. You can use the Remove button to remove his device from this table. Guest A’s device will be identified and shown in the table again if he connects to your Zyxel Device networks in the future. Please note that clients that are blocked cannot be removed. Make sure to unblock clients before you remove them. |
Add to block list | Select an entry and click Add to block list to stop the selected client from connecting to the Zyxel Device. |
Remove from block list | Select an entry and click Remove from block list to allow the selected client to connect to the Zyxel Device. |
Feedback | Select an entry and click Feedback to report on a client that is wrongly identified regarding its Category, Operating System or Type. |
# | This field is a sequential value, and it is not associated with a specific service. |
Status | This field displays the status of the clients. On line ( 5.35/images/DeviceInventory_OnLine.jpg) )- The VPN connection between the client and the Zyxel Device is up.Off line ( 5.35/images/DeviceInventory_OffLine.jpg) )- The VPN connection between the client and the Zyxel Device is down.Block ( 5.35/images/DeviceInventory_Block.jpg) )- The client is blocked from the connection to the Zyxel Device.CDR Block ( 5.35/images/Monitor.04.1.4.png) )- The client’s MAC address is blocked by CDR. |
MAC Address | This field displays the MAC address of the client. |
IP Address | This field displays the IP address of the client. |
Hostname | This field displays the name used to identify this device on the network. |
Manufacturer | This field displays the manufacturer of the client, such as Apple or Samsung. |
Category | This field displays the type of the device of the client, such as printer or smart TV. |
OS | This field displays the operating system of the client. |
OS Version | This field displays the version of the operating system of the client. |
Type | This field displays the model names of the client. |
First-seen | This field displays the time when the client first sends traffic to the Zyxel Device. |
Last-seen | This field displays the time when the client last sends traffic to the Zyxel Device. |
User | This field displays the type of user account the client uses. See User/Group for more information the user account types. |
Auth method | This field displays the authentication method that is used to authenticate the client. |
TX rate (Kbps) | This field displays the transmission rate of the client to which the Zyxel Device is connected. |
RX rate (Kbps) | This field displays the reception rate of the client to which the Zyxel Device is connected. |
Connected to | This field displays if the client is connected directly to the Zyxel Device or to an AP that is connected to the Zyxel Device. |
Description | This field displays the descriptive name of the client. |
The Device Insight Edit Screen
Use this screen to edit the description for connected clients.
The following table describes the labels in this screen.
lable | description |
|---|---|
Description | Enter a descriptive name for this client. You can use up to 31 characters, spaces and underscores are allowed. |
OK | Click OK to save your changes back to the Zyxel Device. |
Cancel | Click Cancel to exit this screen without saving your changes. |
The Device Insight Feedback Screen
Use this screen to report on clients that are wrongly identified.
The following table describes the labels in this screen.
label | description |
|---|---|
Current Device Information | |
MAC address | This field displays the MAC address of the client. |
Category | This field displays the type of the device of the client, such as printer or smart TV. |
Operating System | This field displays the operating system of the client. |
Type | This field displays the model names of the client. |
Expect Device Information | |
Category | This field will display the current type of the client device identified by the Zyxel Device. If you think it’s wrong, select the type of device you believe is correct from the drop-down list box. If it is correct, leave it as it is. |
Operating System | This field will display the current operating system of the client identified by the Zyxel Device. If you think it’s wrong, select the operating system you believe is correct from the drop-down list box. If it is correct, leave it as it is. |
Type | This field will display the current model name of the client identified by the Zyxel Device. If you think it’s wrong, type the model name you believe is correct. If it is correct, leave it as it is. |
OK | Click OK to send your feedback to the Zyxel database. |
Cancel | Click Cancel to exit this screen without saving your changes. |
Login Users
Use this screen to see a list of users currently logged into the Zyxel Device.The following table describes the labels in this screen.
Label | Description |
|---|---|
Force Logout | Select a user row and click this icon to end a user’s session. |
# | This field is a sequential value and is not associated with any entry. |
User ID | This field displays the user name of each user who is currently logged in to the Zyxel Device. |
Reauth/Lease Time | This field displays the amount of reauthentication time remaining and the amount of lease time remaining for each user. See User/Group User Summary for more information on the reauthentication time and lease time. |
Session Timeout | This field displays the total account of time the account (authenticated by an external server) can use to log into the Zyxel Device or access the Internet through the Zyxel Device. This shows unlimited for an administrator account. |
Type | This field displays the way the user logged into the Zyxel Device. The user can log into the Zyxel Device using HTTP, HTTPS, Telnet, SSH, FTP and console. |
IP Address | This field displays the IP address of the computer used to log in to the Zyxel Device. |
Country | The Internet Assigned Numbers Authority (IANA) has reserved the following blocks of Private IPv4 addresses: • 10.0.0.0 - 10.255.255.255 • 172.16.0.0 - 172.31.255.255 • 192.168.0.0 - 192.168.255.255 • 224.0.0.0 - 239.255.255.255 The Zyxel Device cannot identify a user’s country if the user accessed the Zyxel Device using one of the private IPv4 addresses listed above. This field will display a hyphen (-). |
MAC | This field displays the MAC address of the computer used to log into the Zyxel Device. |
User Info | This field displays the types of user accounts the Zyxel Device uses. If the user type is ext-user (external user), this field will show its external-group information when you move your mouse over it. If the external user matches two external-group objects, both external-group object names will be shown. See What You Need To Know for more information on the user accounts. |
Created Date | This field displays the date the account was created. This field displays a hyphen (-) if the account was created on a Zyxel Device with firmware version earlier than 5.10. |
Acct. Status | For a captive portal login, this field displays the accounting status of the account used to log into the Zyxel Device. Accounting-on means accounting is being performed for the user login. Accounting-off means accounting has stopped for this user login. A “-” displays if accounting is not enabled for this login. |
RADIUS Profile Name | This field displays the name of the RADIUS profile used to authenticate the login through the captive portal. N/A displays for logins that do not use the captive portal and RADIUS server authentication. |
Refresh | Click this button to update the information on the screen. |
IGMP Statistics
The Internet Group Management Protocol (IGMP) Statistics is used by Zyxel Device IP hosts to inform adjacent router about multicast group memberships. It can also be used for one-to-many networking applications such as online streaming video and gaming, distribution of company newsletters, updating address book of mobile computer users in the field allowing more efficient use of resources when supporting these types of applications.
label | description |
|---|---|
# | This field is a sequential value, and it is not associated with a specific I GMP Statistics. |
Group | This field displays the group of devices in the IGMP. |
Source IP | This field displays the host source IP information of the IGMP. |
Incoming Interface | This field displays the incoming interface that’s connected on the IGMP. |
Packet Count | This field displays the packet size of the data being transferred. |
Bytes | This field displays the size of the data being transferred in Byes. |
Outgoing Interface | This field displays the outgoing interface that’s connected on the IGMP. |
Refresh | Click this button to update the information on the screen. |
DDNS Status
The DDNS Status screen shows the status of the Zyxel Device’s DDNS domain names.
Label | Description |
|---|---|
Update | Click this to have the Zyxel Device update the profile to the DDNS server. The Zyxel Device attempts to resolve the IP address for the domain name. |
# | This field is a sequential value, and it is not associated with a specific DDNS server. |
Profile Name | This field displays the descriptive profile name for this entry. |
Domain Name | This field displays each domain name the Zyxel Device can route. |
Effective IP | This is the (resolved) IP address of the domain name. |
Last Update | This shows whether the last attempt to resolve the IP address for the domain name was successful or not. Updating means the Zyxel Device is currently attempting to resolve the IP address for the domain name. |
Last Update Time | This shows when the last attempt to resolve the IP address for the domain name occurred (in year-month-day hour:minute:second format). |
Refresh | Click this button to update the information on the screen. |
IP/MAC Binding
This screen lists the devices that have received an IP address from Zyxel Device interfaces with IP/MAC binding enabled and have ever established a session with the Zyxel Device. Devices that have never established a session with the Zyxel Device do not display in the list.
Label | Description |
|---|---|
Interface | Select a Zyxel Device interface that has IP/MAC binding enabled to show to which devices it has assigned an IP address. |
# | This field is a sequential value, and it is not associated with a specific IP/MAC binding entry. |
IP Address | This is the IP address that the Zyxel Device assigned to a device. |
Host Name | This field displays the name used to identify this device on the network (the computer name). The Zyxel Device learns these from the DHCP client requests. |
MAC Address | This field displays the MAC address to which the IP address is currently assigned. |
Last Access | This is when the device last established a session with the Zyxel Device through this interface. |
Description | This field displays the description of the IP/MAC binding. |
Refresh | Click this button to update the information on the screen. |
Cellular Status
This screen displays your mobile broadband connection status.
Label | Description |
|---|---|
Refresh | Click this button to update the information on the screen. |
More Information | Click this to display more information on your mobile broadband, such as the signal strength, IMEA/ESN and IMSI. This is only available when the mobile broadband device attached and activated on your Zyxel Device. |
# | This field is a sequential value, and it is not associated with any interface. |
Extension Slot | This field displays where the entry’s cellular card is located. |
Connected Device | This field displays the model name of the cellular card. |
Status | • No device - no mobile broadband device is connected to the Zyxel Device. • No Service - no mobile broadband network is available in the area; you cannot connect to the Internet. • Limited Service - returned by the service provider in cases where the SIM card is expired, the user failed to pay for the service and so on; you cannot connect to the Internet. • Device detected - displays when you connect a mobile broadband device. • Device error - a mobile broadband device is connected but there is an error. • Probe device fail - the Zyxel Device’s test of the mobile broadband device failed. • Probe device ok - the Zyxel Device’s test of the mobile broadband device succeeded. • Init device fail - the Zyxel Device was not able to initialize the mobile broadband device. • Init device ok - the Zyxel Device initialized the mobile broadband card. • Check lock fail - the Zyxel Device’s check of whether or not the mobile broadband device is locked failed. • Device locked - the mobile broadband device is locked. • SIM error - there is a SIM card error on the mobile broadband device. • SIM locked-PUK - the PUK is locked on the mobile broadband device’s SIM card. • SIM locked-PIN - the PIN is locked on the mobile broadband device’s SIM card. • Unlock PUK fail - Your attempt to unlock a WCDMA mobile broadband device’s PUK failed because you entered an incorrect PUK. • Unlock PIN fail - Your attempt to unlock a WCDMA mobile broadband device’s PIN failed because you entered an incorrect PIN. • Unlock device fail - Your attempt to unlock a CDMA2000 mobile broadband device failed because you entered an incorrect device code. • Device unlocked - You entered the correct device code and unlocked a CDMA2000 mobile broadband device. • Get dev-info fail - The Zyxel Device cannot get cellular device information. • Get dev-info ok - The Zyxel Device succeeded in retrieving mobile broadband device information. • Searching network - The mobile broadband device is searching for a network. • Get signal fail - The mobile broadband device cannot get a signal from a network. • Network found - The mobile broadband device found a network. • Apply config - The Zyxel Device is applying your configuration to the mobile broadband device. • Inactive - The mobile broadband interface is disabled. • Active - The mobile broadband interface is enabled. • Incorrect device - The connected mobile broadband device is not compatible with the Zyxel Device. • Correct device - The Zyxel Device detected a compatible mobile broadband device. • Set band fail - Applying your band selection was not successful. • Set band ok - The Zyxel Device successfully applied your band selection. • Set profile fail - Applying your ISP settings was not successful. • Set profile ok - The Zyxel Device successfully applied your ISP settings. • PPP fail - The Zyxel Device failed to create a PPP connection for the cellular interface. • Need auth-password - You need to enter the password for the mobile broadband card on the cellular edit screen. • Device ready - The Zyxel Device successfully applied all of your configuration and you can use the mobile broadband connection. |
Service Provider | This displays the name of your network service provider. This shows Limited Service if the service provider has stopped service to the mobile broadband card. For example if the bill has not been paid or the account has expired. |
Cellular System | This field displays what type of cellular network the mobile broadband connection is using. The network type varies depending on the mobile broadband card you inserted and could be UMTS, UMTS/HSDPA, GPRS or EDGE when you insert a GSM mobile broadband card, or 1xRTT, EVDO Rev.0 or EVDO Rev.A when you insert a CDMA mobile broadband card. |
Signal Quality | This displays the strength of the signal. The signal strength mainly depends on the antenna output power and the distance between your Zyxel Device and the service provider’s base station. |
More Information
This screen displays more information on your mobile broadband, such as the signal strength, IMEA/ESN and IMSI that helps identify your mobile broadband device and SIM card.
This screen is only available when the mobile broadband device is attached to and activated on the Zyxel Device.Label | Description |
|---|---|
Extension Slot | This field displays where the entry’s cellular card is located. |
Service Provider | This displays the name of your network service provider. This shows Limited Service if the service provider has stopped service to the mobile broadband card. For example if the bill has not been paid or the account has expired. |
Cellular System | This field displays what type of cellular network the mobile broadband connection is using. The network type varies depending on the mobile broadband card you inserted and could be UMTS, UMTS/HSDPA, GPRS or EDGE when you insert a GSM mobile broadband card, or 1xRTT, EVDO Rev.0 or EVDO Rev.A when you insert a CDMA mobile broadband card. |
Signal Strength | This is the Signal Quality measured in dBm. |
Signal Quality | This displays the strength of the signal. The signal strength mainly depends on the antenna output power and the distance between your Zyxel Device and the service provider’s base station. |
Device Manufacturer | This shows the name of the company that produced the mobile broadband device. |
Device Model | This field displays the model name of the cellular card. |
Device Firmware | This shows the software version of the mobile broadband device. |
Device IMEI/ESN | IMEI (International Mobile Equipment Identity) is a 15-digit code in decimal format that identifies the mobile broadband device. ESN (Electronic Serial Number) is an 8-digit code in hexadecimal format that identifies the mobile broadband device. |
SIM Card IMSI | IMSI (International Mobile Subscriber Identity) is a 15-digit code that identifies the SIM card. |
UPnP Port Status
Use this screen to look at the NAT port mapping rules that UPnP creates on the Zyxel Device.
Label | Description |
|---|---|
Remove | Select an entry and click this button to remove it from the list. |
# | This is the index number of the UPnP-created NAT mapping rule entry. |
Remote Host | This field displays the source IP address (on the WAN) of inbound IP packets. Since this is often a wild-card, the field may be blank. When the field is blank, the Zyxel Device forwards all traffic sent to the External Port on the WAN interface to the Internal Client on the Internal Port. When this field displays an external IP address, the NAT rule has the Zyxel Device forward inbound packets to the Internal Client from that IP address only. |
External Port | This field displays the port number that the Zyxel Device “listens” non the WAN port) for connection requests destined for the NAT rule’s Internal Port and Internal Client. The Zyxel Device forwards incoming packets (from the WAN) with this port number to the Internal Client on the Internal Port (on the LAN). If the field displays “0”, the Zyxel Device ignores the Internal Port value and forwards requests on all external port numbers (that are otherwise unmapped) to the Internal Client. |
Protocol | This field displays the protocol of the NAT mapping rule (TCP or UDP). |
Internal Port | This field displays the port number on the Internal Client to which the Zyxel Device should forward incoming connection requests. |
Internal Client | This field displays the DNS host name or IP address of a client on the LAN. Multiple NAT clients can use a single port simultaneously if the internal client field is set to 255.255.255.255 for UDP mappings. |
Internal Client Type | This field displays the type of the client application on the LAN. |
Description | This field displays a text explanation of the NAT mapping rule. |
Delete All | Click this to remove all mapping rules from the NAT table. |
Refresh | Click this button to update the information on the screen. |
USB Storage Screen
This screen displays information about a connected USB storage device.
Label | Description |
|---|---|
Device description | This is a basic description of the type of USB device. |
Usage | This field displays how much of the USB storage device’s capacity is currently being used out of its total capacity and what percentage that makes. |
Filesystem | This field displays what file system the USB storage device is formatted with. This field displays Unknown if the file system of the USB storage device is not supported by the Zyxel Device, such as NTFS. |
Speed | This field displays the connection speed the USB storage device supports. |
Status | Ready - you can have the Zyxel Device use the USB storage device. Click Remove Now to stop the Zyxel Device from using the USB storage device so you can remove it. Unused - the connected USB storage device was manually unmounted by using the Remove Now button or for some reason the Zyxel Device cannot mount it. Click Use It to have the Zyxel Device mount a connected USB storage device. This button is grayed out if the file system is not supported (unknown) by the Zyxel Device. none - no USB storage device is connected. |
Detail | This field displays any other information the Zyxel Device retrieves from the USB storage device. • Deactivated - the use of a USB storage device is disabled (turned off) on the Zyxel Device. • OutofSpace - the available disk space is less than the disk space full threshold. • Mounting - the Zyxel Device is mounting the USB storage device. • Removing - the Zyxel Device is unmounting the USB storage device. • none - the USB device is operating normally or not connected. |
Ethernet Neighbor Screen
The Ethernet Neighbor screen allows you to view the Zyxel Device’s neighboring devices in one place.
It uses Smart Connect, that is Link Layer Discovery Protocol (LLDP) for discovering and configuring LLDP-aware devices in the same broadcast domain as the Zyxel Device that you’re logged into using the web configurator.
LLDP is a layer-2 protocol that allows a network device to advertise its identity and capabilities on the local network. It also allows the device to maintain and store information from adjacent devices which are directly connected to the network device. This helps you discover network changes and perform necessary network reconfiguration and management.
Enable Smart Connect on the System > ZON screen.See also System > ZON for more information on the Zyxel One Network (ZON) utility that uses the Zyxel Discovery Protocol (ZDP) for discovering and configuring ZDP-aware Zyxel devices on the same network as the computer on which the ZON utility is installed.
label | description |
|---|---|
Local Port (Description) | This field displays the port of the Zyxel Device, on which the neighboring device is discovered. For Zyxel Devices that support Port Role, if ports 3 to 5 are grouped together and there is a connection to P5 only, the Zyxel Device will display P3 as the interface port number (even though there is no connection to that port). |
Model Name | This field displays the model name of the discovered device. |
System Name | This field displays the system name of the discovered device. |
Firmware Version | This field displays the firmware version of the discovered device. |
Port (Description) | This field displays the first internal port on the discovered device. Internal is an interface type displayed on the Network > Interface > Ethernet > Edit screen. For example, if P1 and P2 are WAN, P3 to P5 are LAN, and P6 is DMZ, then Zyxel Device will display P3 as the first internal interface port number. For Zyxel Devices that support Port Role, if ports 3 to 5 are grouped together and there is a connection to P5 only, the Zyxel Device will display P3 as the first internal interface port number (even though there is no connection to that port). |
IP Address | This field displays the IP address of the discovered device. |
MAC Address | This field displays the MAC address of the discovered device. |
Refresh | Click this button to update the information on the screen. |
FQDN Object
View FQDN-to-IP address mappings cached in this screen. An FQDN is resolved to its IP address using the DNS server configured on the Zyxel Device. If the Zyxel Device receives a DNS query for an FQDN and the Zyxel Device has an FQDN cache entry, the Zyxel Device can map the IP address in a DNS response without having to query a DNS name server. The Zyxel Device updates FQDN-to-IP address mappings when the TTL (Time To Live) setting expires.
You can configure FQDN objects in Configuration > Object > Address/Geo IP > Address or Configuration > Object > Address/Geo IP > Address Group.
FQDN can be used in Security Policy, Policy Route, BWM and Web Authentication profiles as source and destination criteria. FQDN with a wildcard (for example, *.zyxel.com) can be used in these profiles as destination criteria only.
Suppose you want to block certain users from going to a website with a dynamically updated IP address using DDNS. Create an FQDN object for the website in Object > Address, and then create a Security Policy in Security Policy > Policy Control > Add. Use the FQDN object to identify the website as a destination, and configure specific users to block. When a user tries to connect to the forbidden website, the Zyxel Device first checks the IP address - website mapping in response to the DNS query and then finds the FQDN object match. The Security Policy that has this FQDN object match can then block the configured users from accessing the website.
label | description |
|---|---|
IPv4 FQDN Object Cache List You must first configure IPv4 FQDN objects in Configuration > Object > Address/Geo IP in the IPv4 Address Configuration field. | |
FQDN Object | Select a previously created object from the drop-down list box to display related FQDN object caches used in DNS queries. |
# | This is the index number of the FQDN entry. |
Name | This field displays the name of the selected FQDN object used in DNS queries. |
FQDN | This field displays a host’s fully qualified domain name. |
IP Address | This field displays the mapping of the FQDN to an IP address. This is the IP address of a host. |
TTL | This field displays the number of seconds the Zyxel Device holds IP address - FQDN object mapping in its cache. The mapping is updated when the TTL (Time To Live) setting expires. |
IPv6 FQDN Object Cache List You must first configure IPv6 FQDN objects in Configuration > Object > Address/Geo IP in the IPv6 Address Configuration field. | |
FQDN Object | Select an object from the drop-down list box to display related IPv6 FQDN object caches used in DNS queries. |
# | This is the index number of the IPv6 FQDN entry. |
Name | This field displays the name of the selected IPv6 FQDN object used in DNS queries. |
FQDN | This field displays a host’s fully qualified domain name. |
IP Address | This field displays the mapping of the FQDN to an IPv6 address. This is the IPv6 address of a host. |
TTL | This field displays the number of seconds the Zyxel Device holds IP address - FQDN object mapping in its cache. The mapping is updated when the TTL (Time To Live) setting expires. |
Refresh | Click this button to update the information on the screen. |
AP Information: Radio List
The following table describes the labels in this screen.
label | description |
|---|---|
More Information | Click this icon to see the traffic statistics, station count, SSID, Security Mode and VLAN ID information on the AP. |
Enable Column Freeze | Select this to lock the index columns in place while scrolling to the right. |
# | This field is a sequential value, and it is not associated with a specific radio. |
Loading | This indicates the AP’s load balance status (UnderLoad or OverLoad) when load balancing is enabled on the AP. Otherwise, it shows - when load balancing is disabled or the radio is in monitor mode. |
AP Description | Enter a description for this AP. You can use up to 31 characters, spaces and underscores allowed. |
Frequency Band | This field displays the WLAN frequency band using the IEEE 802.11 a/b/g/n standard of 2.4 or 5 GHz. |
Channel ID | This field displays the WLAN channels using the IEEE 802.11 protocols. |
Tx Power | This shows the radio’s output power (in dBm). |
Station | This field displays the station count information. |
Rx | This field displays the total number of bytes received by the radio. |
Tx | This field displays the total number of bytes transmitted by the radio. |
Model | This field displays the AP’s hardware model information. It displays N/A (not applicable) only when the AP disconnects from the Zyxel Device and the information is unavailable as a result. |
MAC Address | This field displays the MAC address of the AP. |
Radio | This field displays the Radio number. For example 1. |
OP Mode | This field displays the operating mode of the AP. It displays n/a for the profile for a radio not using an AP profile. AP Mode means the AP can receive connections from wireless clients and pass their data traffic through to the Zyxel Device to be managed (or subsequently passed on to an upstream gateway for managing). |
Radio List: More Information
This screen allows you to view detailed information about a selected radio’s SSID(s), wireless traffic and wireless clients for the preceding 24 hours. The following table describes the labels in this screen.
label | description |
|---|---|
MBSSID Detail | This list shows information about the SSID(s) that is associated with the radio over the preceding 24 hours. |
# | This is the items sequential number in the list. It has no bearing on the actual data in this list. |
SSID Name | This displays an SSID associated with this radio. There can be up to eight maximum. |
BSSID | This displays the MAC address associated with the SSID. |
Security Mode | This displays the security mode in which the SSID is operating. |
Forwarding Mode | This field indicates the forwarding mode (Local Bridge or Tunnel) associated with the SSID profile. |
VLAN | This displays the VLAN ID associated with the SSID. |
Traffic Statistics | This graph displays the overall traffic information about the radio over the preceding 24 hours. |
y-axis | This axis represents the amount of data moved across this radio in megabytes per second. |
x-axis | This axis represents the amount of time over which the data moved across this radio. |
Station Count | This graph displays information about all the wireless clients that have connected to the radio over the preceding 24 hours. |
y-axis | The y-axis represents the number of connected wireless clients. |
x-axis | The x-axis shows the time over which a wireless client was connected. |
Last Update | This field displays the date and time the information in the window was last updated. |
OK | Click this to close this window. |
Cancel | Click this to close this window. |
SSID Info
Use this screen to view the number of wireless clients currently connected to an SSID and the security type used by the SSID.
The following table describes the labels in this screen.
label | description |
|---|---|
# | This is the SSID’s index number in this list. |
SSID | This indicates the name of the wireless network to which the client is connected. A single AP can have multiple SSIDs or networks. |
2.4GHz | This shows the number of wireless clients which are currently connected to the SSID using the 2.4 GHz frequency band, Click the number to go to the Station Info > Station List screen. See Station Info: Top N Stations. |
5GHz | This shows the number of wireless clients which are currently connected to the SSID using the 5 GHz frequency band, Click the number to go to the Station Info > Station List screen. See Station Info: Top N Stations. |
6GHz | This shows the number of wireless clients which are currently connected to the SSID using the 6 GHz frequency band, Click the number to go to the Station Info > Station List screen. See Station Info: Top N Stations. |
SSID Profile Name | This indicates the name of the SSID profile in which the SSID is defined, |
Security Mode | This indicates which secure encryption methods is being used by the SSID. |
Refresh | Click Refresh to update this screen. |
Station Info: Station List
This screen displays information about connected wireless stations.The following table describes the labels in this screen.
label | description |
|---|---|
Hide/Show Advanced Settings | Click this button to display a greater or lesser number of configuration fields. |
Show Filter/ Hide Filer | Click this button to show or hide the filter settings. |
Filter | |
IP Address | Enter the IP address of the station you want to display. This field is case-sensitive. |
Associated AP | Select the AP(s) with which the stations you want to display associate. |
SSID Name | Select the SSID(s) to which the stations you want to display are connected. |
MAC Address | Enter the MAC address of the station you want to display. This field is case-sensitive. |
Security Mode | Select the security mode(s) used by the stations you want to display. |
Account | Enter the user account name of the station you want to display. This field is case-sensitive. |
Login Type | Select the login method(s) used by the stations you want to display. |
Band | Select the frequency band used by the stations you want to display. |
Search | Click this to update the list of stations based on the search criteria. Your search criteria is retained when navigating between screens. |
Reset | Click this to return the search criteria to the factory defaults and display all connected stations without a filter. |
Enable Column Freeze | Select this to lock the index columns in place while scrolling to the right. |
Station List | |
# | This field is a sequential value, and it is not associated with a specific station. |
MAC Address | This field displays the MAC address of the station. |
SSID Name | This field displays the SSID names of the station. |
Associated AP | This field displays the APs that are associated with the station. |
IP Address | This field displays the IP address of the station. |
Channel | This field displays the number of the channel used by the station to connect to the network. |
Rx Rate | This field displays the receive data rate of the station. |
Tx Rate | This field displays the transmit data rate of the station. |
Signal Strength | This field displays the signal strength of the station. |
Association Time | This field displays the time duration the station was online and offline. |
Enterprise | This field displays the RADIUS server of the station. |
Captive Portal | This displays whether the station logged into the network via the captive portal login page. |
MAC Auth | This displays whether the station logged into the network via MAC authentication. |
Band | This field displays the frequency band which is currently being used by the station. |
Capability | This displays the supported standard currently being used by the station or the standards supported by the station. |
802.11 Features | This displays whether the station supports IEEE802.11r, IEEE 802.11k, IEEE 802.11v or none of the above (N/A). |
Security Mode | This field displays the security mode the station is using. |
Download | This field displays the number of bytes received by the station. |
Upload | This field displays the number of bytes transmitted from the station. |
Refresh | Click Refresh to update this screen. |
Station Info: Top N Stations
Use this screen to view the top five or top ten traffic statistics of the wireless stations. The following table describes the labels in this screen.
label | description |
|---|---|
View | Select this to view the top five or top ten traffic statistics of the wireless stations. |
Usage by | Select the measure unit in GB or MB to display the graph. |
Traffic Usage | This graph displays the overall traffic information about the stations for the preceding 24 hours. |
y-axis | This axis represents the amount of data moved across stations in megabytes per second. |
Refresh | Click Refresh to update this screen. |
Station Info: Single Station
Use this screen to view traffic statistics of the wireless station you specified. The following table describes the labels in this screen.
label | description |
|---|---|
Station Selection | Select this to view the traffic statistics of the wireless station. |
Usage by | Select the measure unit in GB or MB to display the graph. |
Traffic Usage | This graph displays the overall traffic information about the station over the preceding 24 hours. |
y-axis | This axis represents the amount of data moved across this station in megabytes per second. |
Refresh | Click Refresh to update this screen. |
IPSec
You can use the IPSec Monitor screen to display and to manage active IPSec SAs. TClick a column’s heading cell to sort the table entries by that column’s criteria. Click the heading cell again to reverse the sort order.
Label | Description |
|---|---|
Name | Type the name of a IPSec SA here and click Search to find it (if it is associated). You can use a keyword or regular expression. Use up to 30 alphanumeric and _+-.()!$*^:?|{}[]<>/ characters. See Regular Expressions in Searching IPSec SAs for more details. |
Policy | Type the IP address(es) or names of the local and remote policies for an IPSec SA and click Search to find it. You can use a keyword or regular expression. Use up to 30 alphanumeric and _+-.()!$*^:?|{}[]<>/ characters. See Regular Expressions in Searching IPSec SAs for more details. |
Search | Click this button to search for an IPSec SA that matches the information you specified above. |
Disconnect | Select an IPSec SA and click this button to disconnect it. |
Connection Check | Select an IPSec SA and click this button to check the connection. |
# | This field is a sequential value, and it is not associated with a specific SA. |
User | This field only displays the client names if they’re using EAP or X-auth for authentication. If a client is connected to the Zyxel Device without using Extended Authentication Protocol (EAP) or X-Auth, this field will be empty. |
Serial Number | This field displays the serial number of this Zyxel Device. |
System Name | This field displays the name used to identify the Zyxel Device. |
Name | This field displays the name of the IPSec SA. |
Policy | This field displays the content of the local and remote policies for this IPSec SA. The IP addresses, not the address objects, are displayed. |
My Address | This field displays the IP address of local computer. |
Secure Gateway | This field displays the secure gateway information. |
Up Time | This field displays how many seconds the IPSec SA has been active. This field displays N/A if the IPSec SA uses manual keys. |
Timeout | This field displays how many seconds remain in the SA life time, before the Zyxel Device automatically disconnects the IPSec SA. This field displays N/A if the IPSec SA uses manual keys. |
Inbound (Bytes) | This field displays the amount of traffic that has gone through the IPSec SA from the remote IPSec router to the Zyxel Device since the IPSec SA was established. |
Outbound (Bytes) | This field displays the amount of traffic that has gone through the IPSec SA from the Zyxel Device to the remote IPSec router since the IPSec SA was established. |
Regular Expressions in Searching IPSec SAs
A question mark (?) lets a single character in the VPN connection or policy name vary. For example, use “a?c” (without the quotation marks) to specify abc, acc and so on.
Wildcards (*) let multiple VPN connection or policy names match the pattern. For example, use “*abc” (without the quotation marks) to specify any VPN connection or policy name that ends with “abc”. A VPN connection named “testabc” would match. There could be any number (of any type) of characters in front of the “abc” at the end and the VPN connection or policy name would still match. A VPN connection or policy name named “testacc” for example would not match.
A * in the middle of a VPN connection or policy name has the Zyxel Device check the beginning and end and ignore the middle. For example, with “abc*123”, any VPN connection or policy name starting with “abc” and ending in “123” matches, no matter how many characters are in between.
The whole VPN connection or policy name has to match if you do not use a question mark or asterisk.
SSL
The Zyxel Device keeps track of the users who are currently logged into the VPN SSL client.Use this screen to do the following:
• View a list of active SSL VPN connections.
• Log out individual users and delete related session information.
Once a user logs out, the corresponding entry is removed from the screen.
label | description |
|---|---|
Disconnect | Select a connection and click this button to terminate the user’s connection and delete corresponding session information from the Zyxel Device. |
Refresh | Click Refresh to update this screen. |
# | This field is a sequential value, and it is not associated with a specific SSL. |
User | This field displays the account user name used to establish this SSL VPN connection. |
Access | This field displays the name of the SSL VPN application the user is accessing. |
Login Address | This field displays the IP address the user used to establish this SSL VPN connection. |
Connected Time | This field displays the time this connection was established. |
Inbound (Bytes) | This field displays the number of bytes received by the Zyxel Device on this connection. |
Outbound (Bytes) | This field displays the number of bytes transmitted by the Zyxel Device on this connection. |
L2TP over IPSec
Use this screen to display and manage the Zyxel Device’s connected L2TP VPN sessions.
Label | Description |
|---|---|
Disconnect | Select a connection and click this button to disconnect it. |
Refresh | Click Refresh to update this screen. |
# | This field is a sequential value, and it is not associated with a specific L2TP VPN session. |
User Name | This field displays the remote user’s user name. |
Hostname | This field displays the name of the computer that has this L2TP VPN connection with the Zyxel Device. |
Assigned IP | This field displays the IP address that the Zyxel Device assigned for the remote user’s computer to use within the L2TP VPN tunnel. |
Public IP | This field displays the public IP address that the remote user is using to connect to the Internet. |
Content Filter
These screens display some basic statistics on web content filter and DNS content filer, such as the number of web pages and FQDNs inspected.
Web Content Filter
This screens display web content filter statistics.
The following table describes the labels in this screen.
Label | Description |
|---|---|
General Settings | |
Collect Statistics | Select this check box to have the Zyxel Device collect web content filtering statistics. The collection starting time displays after you click Apply. All of the statistics in this screen are for the time period starting at the time displayed here. The format is year, month, day and hour, minute, second. All of the statistics are erased if you restart the Zyxel Device or click Flush Data. Collecting starts over and a new collection start time displays. |
Refresh | Click this button to update the report display. |
Flush Data | Click this button to discard all of the screen’s statistics and update the report display. |
Summary | |
Total Web Page Inspected | This field displays the number of web pages that the Zyxel Device’s web content filter feature has checked. |
Blocked | This is the number of web pages that the Zyxel Device blocked access. |
Web Pages Blocked by Category Service | This is the number of web pages that matched an external database web content filtering category selected in the Zyxel Device and for which the Zyxel Device displayed a warning before allowing users access. |
Web Page Blocked by Custom Service | This is the number of web pages to which the Zyxel Device did not allow access due to the web content filtering custom service configuration. |
Restricted Web Features | This is the number of web pages to which the ZyWALL limited access or removed cookies due to the content filtering custom service's restricted web features configuration. |
Forbidden Web Sites | This is the number of web pages to which the Zyxel Device did not allow access because they matched the content filtering custom service’s forbidden web sites list. |
URL Keywords | This is the number of web pages to which the Zyxel Device did not allow access because they contained one of the content filtering custom service’s list of forbidden keywords. |
Warned | This is the number of web pages for which the Zyxel Device displayed a warning message to the access requesters. |
Passed | This is the number of web pages to which the Zyxel Device allowed access. |
Apply | Click Apply to save your changes back to the Zyxel Device. |
Reset | Click Reset to return the screen to its last-saved settings. |
DNS Content Filter
This screens display DNS content filter statistics.
The following table describes the labels in this screen.
Label | Description |
|---|---|
General Settings | |
Collect Statistics | Select this check box to have the Zyxel Device collect DNS content filtering statistics. The collection starting time displays after you click Apply. All of the statistics in this screen are for the time period starting at the time displayed here. The format is year, month, day and hour, minute, second. All of the statistics are erased if you restart the Zyxel Device or click Flush Data. Collecting starts over and a new collection start time displays. |
Refresh | Click this button to update the report display. |
Flush Data | Click this button to discard all of the screen’s statistics and update the report display. |
Summary | |
Total DNS Inspected | This field displays the number of FQDNs that the Zyxel Device’s DNS content filter feature has checked. |
Redirected | This is the number of FQDNs that the Zyxel Device redirects. |
Passed | This is the number of FQDNs to which the Zyxel Device allowed access. |
Apply | Click Apply to save your changes back to the Zyxel Device. |
Reset | Click Reset to return the screen to its last-saved settings. |
Anti-Spam
The Anti-Spam menu contains the Summary and Status screens.
Anti-Spam Summary
This screen displays spam statistics.
The following table describes the labels in this screen.
Label | Description |
|---|---|
Collect Statistics | Select this check box to have the Zyxel Device collect email security statistics. The collection starting time displays after you click Apply. All of the statistics in this screen are for the time period starting at the time displayed here. The format is year, month, day and hour, minute, second. All of the statistics are erased if you restart the Zyxel Device or click Flush Data. Collecting starts over and a new collection start time displays. |
Apply | Click Apply to save your changes back to the Zyxel Device. |
Reset | Click Reset to return the screen to its last-saved settings. |
Refresh | Click this button to update the report display. |
Flush Data | Click this button to discard all of the screen’s statistics and update the report display. |
Email Summary | |
Total Mails Scanned | This field displays the number of emails that the Zyxel Device’s email security feature has checked. |
Safe Mails | This is the number of emails that the Zyxel Device has determined to not be spam. |
Safe Mails Detected by White list | This is the number of emails that matched an entry in the Zyxel Device’s email security white list. |
Spam Mails | This is the number of emails that the Zyxel Device has determined to be spam. |
Spam Mails Detected by Black List | This is the number of emails that matched an entry in the Zyxel Device’s email security black list. |
Spam Mails Detected by Malicious Mail | This is the number of emails that the Zyxel Device has determined to have malicious contents. |
Spam Mails Detected by DNSBL | The Zyxel Device can check the sender and relay IP addresses in an email’s header against DNS (Domain Name Service)-based spam Black Lists (DNSBLs). This is the number of emails that had a sender or relay IP address in the header which matched one of the DNSBLs that the Zyxel Device uses. |
Query Timeout | This is how many queries that were sent to the Zyxel Device’s configured list of DNSBL domains or Mail Scan services and did not receive a response in time. |
When mail session threshold is reached | |
Mail Sessions Forwarded | This is how many email sessions the Zyxel Device allowed because they exceeded the maximum number of email sessions that the email security feature can check at a time. You can see the Zyxel Device’s threshold of concurrent email sessions on the Email Security > Status screen. Use the Email Security > Summary screen to set whether the Zyxel Device forwards or drops sessions that exceed this threshold. |
Mail Sessions Dropped | This is how many email sessions the Zyxel Device dropped because they exceeded the maximum number of email sessions that the email security feature can check at a time. You can see the Zyxel Device’s threshold of concurrent email sessions on the Email Security > Status screen. Use the Email Security > Summary screen to set whether the Zyxel Device forwards or drops sessions that exceed this threshold. |
Statistics | |
Top Sender By | Use this field to list the top email or IP addresses from which the Zyxel Device has detected the most spam. Select Sender IP to list the source IP addresses from which the Zyxel Device has detected the most spam. Select Sender Email Address to list the top email addresses from which the Zyxel Device has detected the most spam. |
# | This field displays the entry’s rank in the list of the top entries. |
Sender IP | This column displays when you display the entries by Sender IP. It shows the source IP address of spam emails that the Zyxel Device has detected. |
Sender Email Address | This column displays when you display the entries by Sender Email Address. This column displays the email addresses from which the Zyxel Device has detected the most spam. |
Occurrence | This field displays how many spam emails the Zyxel Device detected from the sender. |
The Anti-Spam Status Screen
Use the Anti-Spam Status screen to see how many email sessions the email security feature is scanning and statistics for the DNSBLs.
The following table describes the labels in this screen.
Label | Description |
|---|---|
Resource Status | |
Concurrent Mail Session Scanning | The darker shaded part of the bar shows how much of the Zyxel Device’s total spam checking capability is currently being used. The lighter shaded part of the bar and the pop-up show the historical high. The first number to the right of the bar is how many email sessions the Zyxel Device is presently checking for spam. The second number is the maximum number of email sessions that the Zyxel Device can check at once. An email session is when an email client and email server (or two email servers) connect through the Zyxel Device. |
Refresh | Click this button to update the information displayed on this screen. |
Flush | Click this button to clear the DNSBL statistics. This also clears the concurrent mail session scanning bar’s historical high. |
Mail Scan Statistics | These are the statistics for the service the Zyxel Device uses. These statistics are for when the Zyxel Device actually queries the service servers. |
# | This is the entry’s index number in the list. |
Service | This displays the name of the service. |
Total Queries | This is the total number of queries the Zyxel Device has sent to this service. |
Avg. Response Time (sec) | This is the average for how long it takes to receive a reply from this service. |
No Response | This is how many queries the Zyxel Device sent to this service without receiving a reply. |
DNSBL Statistics | These are the statistics for the DNSBL the Zyxel Device uses. These statistics are for when the Zyxel Device actually queries the DNSBL servers. Matches for DNSBL responses stored in the cache do not affect these statistics. |
# | This is the entry’s index number in the list. |
DNSBL Domain | These are the DNSBLs the Zyxel Device uses to check sender and relay IP addresses in emails. |
Total Queries | This is the total number of DNS queries the Zyxel Device has sent to this DNSBL. |
Avg. Response Time (sec) | This is the average for how long it takes to receive a reply from this DNSBL. |
No Response | This is how many DNS queries the Zyxel Device sent to this DNSBL without receiving a reply. |
Log
Log messages are stored in two separate logs, one for regular log messages and one for debugging messages. In the regular log, you can look at all the log messages by selecting All Logs, or you can select a specific category of log messages (for example, security policy or user). You can also look at the debugging log by selecting Debug Log. All debugging messages have the same priority.
When a log reaches the maximum number of log messages, new log messages automatically overwrite existing log messages, starting with the oldest existing log message first.Events that generate an alert (as well as a log message) display in red. Regular logs display in black. Click a column’s heading cell to sort the table entries by that column’s criteria. Click the heading cell again to reverse the sort order.
Label | Description |
|---|---|
Show (Hide) Filter | Click this button to show or hide criteria that allow you to filter logs that will be displayed. If the filter settings are hidden, the Category, Email Log Now, Refresh, and Clear fields are available. If the filter settings are shown, the Category, Priority, Source Address, Destination Address, Source Interface, Destination Interface, Service, Keyword, Protocol and Search fields are available. |
Category | Select the type of log message(s) you want to view. You can also view All Logs at one time, or you can view the Debug Log. |
Priority | This displays when you show the filter. Select the priority of log messages to display. The log displays the log messages with this priority or higher. Choices are: any, emerg, alert, crit, error, warn, notice, and info, from highest priority to lowest priority. This field is grayed out if the Category is Debug Log. |
Source Address | This displays when you show the filter. Type the source IP address of the incoming packet that generated the log message. Do not include the port in this filter. |
Destination Address | This displays when you show the filter. Type the IP address of the destination of the incoming packet when the log message was generated. Do not include the port in this filter. |
Source Interface | This displays when you show the filter. Type the source interface of the incoming packet that generated the log message. |
Destination Interface | This displays when you show the filter. Type the interface of the destination of the incoming packet when the log message was generated. |
Service | This displays when you show the filter. Select the service whose log messages you would like to see. The Web Configurator uses the protocol and destination port number(s) of the service to select which log messages you see. |
Keyword | This displays when you show the filter. Type a keyword to look for in the Message, Source, Destination and Note fields. If a match is found in any field, the log message is displayed. You can use up to 63 alphanumeric characters and the underscore, as well as punctuation marks ()’ ,:;?! +-*/= #$% @ ; the period, double quotes, and brackets are not allowed. |
Protocol | This displays when you show the filter. Select a service protocol whose log messages you would like to see. |
Search | This displays when you show the filter. Click this button to update the log using the current filter settings. |
Reset | Click Reset to return the screen to its last-saved settings. |
Email Log Now | Click this button to send log message(s) to the Active email address(es) specified in the Send Log To field on the Log Settings page. |
Refresh | Click this button to update the information on the screen. |
Clear | Click this button to clear the whole log, regardless of what is currently displayed on the screen. |
# | This field is a sequential value, and it is not associated with a specific log message. |
Time | This field displays the time the log message was recorded. |
Priority | This field displays the priority of the log message. It has the same range of values as the Priority field above. |
Category | This field displays the log that generated the log message. It is the same value used in the Category field above. |
Message | This field displays the reason the log message was generated. The text “[count=x]”, where x is a number, appears at the end of the Message field if log consolidation is turned on and multiple entries were aggregated to generate into this one. |
Source | This field displays the source IP address and the port number in the event that generated the log message. |
Destination | This field displays the destination IP address and the port number of the event that generated the log message. |
Note | This field displays any additional information about the log message. |