ZyXEL Communications 2864I manual

Pre stige 2864I Us e r ’ s Manua l Version 2.0 JiH5< A CCESSING T HE I NTERNET & I NTRANET[...]

ii Zy X EL Li m ited Wa r r a nty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship a[...]

iii rights, and you may also have other rights which vary from state to state. C o p yri gh t © 1997 b y ZyXEL The contents of this book may not be reproduced (in any part or as a whole) or transmitted in any form or by any means without the written permission of the publisher. Published by ZyXEL Communications Corporation. All rights reserved. No[...]

iv generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. If this equipment does cause harmful interference to radio/television reception, which can be determined by turning the equipment off and on, the user is encouraged to[...]

v telecommunications company. The equipment must also be installed using an acceptable method of connection. In some cases, the company’s inside wiring associated with a single line individual service may be extended by means of a certified connector assembly. The customer should be aware that the compliance with the above conditions may not prev[...]

vi • The Council Directive 89/336/EEC of 3 May 1992 on the approximation of the laws of the member states relation to Electro Magnetic Compatibility. (EMC Directive) • Council Directive 91/263/EEC of 29 April 1991 on the approximation of the laws of the Member States concerning telecommunication terminal equipment. (The Telecom Terminal Equipme[...]

vii • Technical support : support@zyxel.com in North America. support@zyxel.hinet.net outside North America. • Product information : Visit our site on the World Wide Web: http://www.zyxel.com. • FTP : Information , such as ZyXEL software and ROM updates for North America can be found at this FTP address: ftp.zyxel.com For European and Asian v[...]

viii C onte nt s ZyXEL Limited Warranty i i Copyright © 1997 by ZyXEL i i i Acknowledgments i i i FCC Part 15 Information i i i Information for Canadian Users iv Contacting ZyXEL vi 1 Introduction 1 Features 1 Ease of Installation 1 ISDN Basic Rate Interface (BRI) 2 Built-in V.34 Modem 2 Multiple Networking Protocol Support 2 Standard Phone Jack 2[...]

ix What This Manual Doesn’t Cover 6 Other Resources 6 Packing List 7 Addi ti o nal Insta l l ati o n Re qu irem en ts 7 2 Before You Begin 9 Road Map and Flow 9 Completing the Worksheet 10 Ordering Your ISDN Line 11 Collecting General Setup Information 11 Collecting ISDN Phone Line Information 12 Collecting Ethernet Setup Information 14 3 Install[...]

x 4 Configuring for Internet Access 40 IP Addresses and the Internet 41 Internet Access Configuration 42 Single User Account 45 Configuration for Single User Account 47 Configuring Backup ISP Accounts 47 5 Remote Node Configuration 50 Bandwidth on Demand 56 Editing PPP Options 57 6 Dial-In Configuration 59 Telecommuting 60 Dial-In Server Applicatio[...]

xi 9 Bridging Configuration 87 IPX Spoofing 87 Bridge Ethernet Setup 88 LAN-to-LAN Application 89 Remote Node Setup 90 Default Dial-In Setup for Bridge 91 Bridge Static Route Setup 91 10 Filter Configuration 93 About Filtering 93 Prestige’s Filter Structure 94 Configuring a Filter Set 94 Configuring a Filter Rule 97 TCP/IP Filter Rule 97 Generic [...]

xii System Status 117 Terminal Baud Rate 120 Log and Trace 121 View Error Log 121 Syslog And Accounting 122 Diagnostic 123 Backup Configuration 126 Restore Configuration 126 Software Update 127 Command Interpreter Mode 128 Call Control 128 Call Control Parameters 129 Blacklist 130 Budget Management 130 Modem/ISDN TA Emulation 131 15 Troubleshooting[...]

xiii[...]

Introduction 1  Intr oduc t ion Congratulations on your purchase of the ZyXEL Prestige 2864I Remote Access Router. The Prestige is the first device to integrate a Router and Bridge into a single package. In a modem-sized box, the Prestige offers inexpensive yet complete telecommunications and internetworking solutions for your home or branch [...]

2 Introduction ISD N B as ic R at e Int erf ace (B R I) Using either a standard S/T or U Interface the Prestige supports a full range of switch types. The switch type depends on the CO (Central Office) switch your ISDN line is connected to. See Chapter 16 for more information on North American, European, and Asian ISDN firmware and switch types sup[...]

Introduction 3 Protocol/Multilink Protocol) to bundle two B channels over a BRI line. In addition, the Prestige dynamically allocates bandwidth between the two B channels, increasing or decreasing speeds as needed to allow for greater efficiency in data transfer. It supports BAP (Bandwidth Allocation Protocol) and BACP (Bandwidth Allocation Control[...]

4 Introduction Call C on t rol The Prestige provides budget management for outgoing calls and maintains a blacklist for unreachable phone numbers in order to save you the expense of unnecessary charges. Da ta Com pr e ss ion The Prestige incorporates Stac data compression and CCP (Compression Control Protocol). Net w o rking C om patib ility The Pr[...]

Introduction 5 M ult iprot ocol LA N- to- LA N Co nnectio n The Prestige can dial to or answer calls from another remote access router connected to a different network. The Prestige supports TCP/IP, Novell IPX, and has the capability to bridge any Ethernet protocol. T elecomm ut ing Serv er The Prestige allows Remote Dial-in Users to dial-in and ga[...]

6 Introduction 4. Part Four - Advanced Management (Chapters 11-14) - provides information on advanced management features for network managers. 5. Part Five - System Maintenance (Chapters 15-16) - describes maintenance features for checking system status and logging errors. Regardless of the application, it is important that you follow the steps ou[...]

Introduction 7 Packing List Before you proceed further, check all items you received with your Prestige against this list to make sure nothing is missing. The complete package should include: • One Prestige 2864I. • One power adapter. • One RJ-45 phone cable. • One RJ-11 phone cable. • One 25 pin female - 9 pin male cable. • One LAN cro[...]

8 Introduction • A computer equipped with communications software configured to the following parameters: • VT100 terminal emulation. • 9600 Baud rate. • No parity, 8 Data bits, 1 Stop bit. After the Prestige has been successfully connected to your network, you can make future changes to the configuration by using a Telnet application.[...]

Before You Begin 9  Befo re Y o u Begi n To ensure successful installation of your Prestige, we strongly recommend that you carefully follow the steps outlined in Chapters 2 and 3. These chapters are designed as a guide for you to collect the necessary information about your ISDN phone line, and the LAN which you will be connected to. Once th[...]

10 Before You Begin Figure 2- 1 Installation Guide Completing the Worksheet Before you continue locate the worksheet at the end of this chapter. This information worksheet has been provided to help you get through setup and installation of your Prestige as easily as possible.[...]

Before You Begin 11 O rde r i ng Y our I S DN Li ne If you do not have the ISDN line installed already, we suggest that you order it from your telephone company as soon as possible to avoid the long waits common when ordering a new line. Use the information in this section to place the order (see Chapter 16 for information on provisioning your ISDN[...]

12 Before You Begin • System Name - This is the name given to the Prestige for identification purposes. This name should be no more than 8 alphanumeric characters. Spaces are not allowed, but “-” and “_” are accepted. This name can be obtained remotely via the SNMP management protocol and will be displayed as the prompt when the user ente[...]

Before You Begin 13 America, select your ISDN switch type. For DSS1 and 1TR6, verify this field to make sure that you have the proper firmware loaded. • B Channel Usage - Determine which connection is appropriate for your B channel and check the corresponding option on the worksheet. If your Prestige is the only device using the ISDN line, then c[...]

14 Before You Begin Coll e c ting E the r ne t Se tup Inform ati on This section assumes that you are setting up your Prestige for a TCP/IP connection. If you want to configure the Prestige for other protocols (e.g., IPX), refer to the appropriate chapters. • Ethernet Interface - The first step is to determine the type of Ethernet interface you w[...]

Before You Begin 15 IP Subnet Mask Number of Host IDs Number of Bits 255.255.255.128 126 25 255.255.255.192 62 26 255.255.255.224 30 27 255.255.255.255 1 32[...]

16 Before You Begin P r estige Setu p an d I n stallation W or ksh eet General Setup Information • System Name (for identification purposes): _______________________________________ • • Protocol Routing: ___TCP/IP ___IPX ___Bridging ISDN Setup Information • • Switch Type (check one): ___AT&T 5ESS NI-1 ___AT&T Point to Point ___AT&[...]

Before You Begin 17 N o rt h A m erica IS D N • 1 st Telephone Number: _______________________________________ • • Analog Call (check one): ___Modem ___A/B Adapter ___Ignore • 1 st SPID Number: _______________________________________ • 2 nd Telephone Number: _______________________________________ • • Analog Call (check one): ___Modem[...]

18 Before You Begin • Outside Line Prefix Number: _______________________________________ • PBX Number (S/T Bus Number): _______________________________________ • • Incoming Number Matching: ___MSN ___CDSA ___Don’t Care • • Analog Call Routing: ___Modem ___A/B Adapter ___Ignore • • Global Analog Call: ___Accept ___Ignore 1 T R6 I [...]

Before You Begin 19 • PBX Number (S/T Bus Number): _______________________________________ • • Incoming Number Matching: ___EAZ ___Don’t Care • • Analog Call Routing: ___Modem ___A/B ___Ignore Ethernet Setup Information • • Ethernet Interface (check one): ___AUI ___UTP • • IP Address: _______._______._______._______ • • IP S[...]

20 Before You Begin[...]

Installation 21  Ins ta lla tion This chapter outlines how to connect your Prestige to the LAN and ISDN line. A diagram of the right panel and rear panel of the Prestige are shown below. Please refer to this diagram to identify all of the ports on your device when you attempt to make the various connections. Figure 3- 1 Rear Panel Diagram[...]

22 Installation A Warning On Connection Cables The RS-232, ISDN line, and Ethernet cable, are very similar to each other. It is important that you use the correct cable for each connection; otherwise, your Prestige could be damaged. Connecting Your Computer and Your Prestige For the initial setup of your Prestige, you must use an RS-232 cable and c[...]

Installation 23 • U interface - This allows you to connect directly to your ISDN wall jack. 2 2   1 1 27( 27(   7 +( ,6'1 -$&.,6)25 ,6'1 /,1(&211(&7,2121/< & 211(&7,212)$3+21( /,1(0$<5(68/7,1'$0$*(72<285 3 5(67,*(  $ $ 77(17,21 7[...]

24 Installation • Straight through cable (white tag): Connect your Prestige to a 10Base-T hub. • Crossover cable (red tag): Connect your Prestige to your computer directly without a hub. 2 2   1 1 27( 27(   , )7+,6&$%/(,686('72&211(&7 ,6'1 ,70$<'$0$*(<285 3 5(67[...]

Installation 25 PWR - This LED (power) comes on as soon as you connect you Prestige to the power supply and switch it to the ‘I’ (on) position. RDY - The ready LED will come on once the Prestige has been turned on and initialized. If this LED is blinking, there is an error and you need to contact technical support. LAN - This LED indicates that[...]

26 Installation Figure 3- 3 Power on Messages If you press ENTER , the Prestige will display a login screen and ask you to enter the password as shown below: Figure 3- 4 Login Screen Enter the default password, 1234 to get into the Main Menu of System Management Terminal (SMT). Note that once you are in the SMT and if there is no activity for longe[...]

Installation 27 Navigating Through the System Management Terminal Interface The SMT i s the interface that you use to configure your Prestige. Several operations that you should be familiar with before you attempt to modify the configuration of your Prestige are listed below: • Moving Forward to Another Menu. To move forward to a sub-menu below t[...]

28 Installation • Saving Your Configuration. You can save your configuration by pressing ENTER at the message: Press ENTER to confirm or ESC to cancel: Saving the data on the screen will take you in most cases to the previous menu. The SMT main menu is shown below: Figure 3 - 5 SMT Main Menu System Management Terminal Interface Summary This secti[...]

Installation 29 # Menu Title Description 12 Static Routing Setup Setup static route for different protocols. There are four static routes for each protocol. 13 Default Dial-in Setup Setup default dial-in parameters such that your Prestige can be a dial-in server for the Remote Node and Remote Dial-in User. 14 Dial-in User Setup Setup Remote Dial-in[...]

30 Installation remotely via SNMP, used for CHAP authentication, and will be displayed as the prompt in the Command Mode. See Chapter 6 for more information on CHAP; see Chapter 14 for more information on Command Mode. 2. Location - Enter the geographic location (up to 31 characters) of your Prestige, e.g., San Jose. 3. Contact Person’s Name - En[...]

Installation 31 N o rt h A m erican ISDN Figure 3- 7 Menu 2 - ISDN Setup for North America 1. Switch Type - Verify the switch type information with your telephone company. For North America, select the type of switch used by your telephone company. If your switch type is not currently shown, press the space bar to change to the next switch; repeat [...]

32 Installation analog call for this telephone number to the PHONE port (a.k.a., ‘POTS’ port in North America and a/b adapter in Europe). Set to Modem if you wish to route the incoming analog call for this telephone number to the internal modem (e.g., when the Prestige is used as a dial-in server for the Remote Dial-in User). 5. SPID Number(s) [...]

Installation 33 Figure 3- 9 Menu 2 - ISDN Setup for 1TR6 1. Switch Type - This field is fixed as DSS1 or 1TR6. 2. B Channel Usage - This field is fixed as Switch/Switch. 3. ISDN Data & Subaddress - Enter the telephone number and subaddress assigned to the ISDN data call for the Prestige. It will be used as the outgoing CGPN(Calling Party Number[...]

34 Installation be added to all outgoing calls and should be no longer than 3 digits. Otherwise, leave this field blank. 7. PBX Number (with S/T Bus Number) - Enter the S/T bus number if the Prestige is connected to an ISDN PBX. If this field is left as blank then the loopback test will be skipped. 8. Incoming Phone Number Matching - There are thre[...]

Installation 35 9. Analog Call Routing - All analog calls will be routed to the modem if the setting is Modem. Or they will be routed to the A/B Adapter if the setting is A/B Adapter. Or they will not be answered if the setting is Ignore. 10. Global Analog Call - : All global analog calls will be answered and routed to the modem or A/B Adapter (the[...]

36 Installation Ethernet Setup Menu 3 is used to enter Ethernet related information. Depending on the protocols (TCP/IP or IPX) on your LAN, you will need to configure each protocol separately. General Eth ernet Setu p This menu determines the type of Ethernet interface you are using as well as the filter sets you wish to implement to monitor your [...]

Installation 37 T CP/I P Ethe rne t Se tup a nd DHCP If you are setting up your network for the first time, read Chapter 4, Configuring for Internet Access, before proceeding. The chapter contains important information on how to assign IP addresses for your network. From Menu 3 - Ethernet Setup, enter 2 to go to Menu 3.2 - TCP/IP Ethernet Setup. Fi[...]

38 Installation provider. The Client IP Pool Starting Address gives the first address in the reserved block, which is also used as the LAN network address of the Prestige itself. This address will also serve as the default gateway for DHCP clients. 3. Size of Client IP Pool - Gives the size of the block of addresses reserved for DHCP address assign[...]

Installation 39 packets that it receives. If set to None, the Prestige will not participate in any RIP exchange with other routers. Usually, you should leave this parameter at its default of Both and let RIP propagate the routing information automatically. When you are finished, press ENTER at the message: Press ENTER to Confirm... to save your sel[...]

40 Configuring for Internet Access  C onfigur ing f or Int e r ne t A ccess Menu 4 of the SMT allows you to configure Internet access on one screen. Before you configure the Prestige for Internet access, you need to collect the following information from your ISP (Internet Service Provider). • IP address of the ISP’s gateway (optional). ?[...]

Configuring for Internet Access 41 Figure 4- 1 Internet Access IP Addresses and the Internet Conventionally, the Internet (with a capital I) refers the large-scale interconnected networks across the world that was originally developed by the US Department of Defense. The Internet uses exclusively the TCP/IP suite of protocols. The term “internet?[...]

42 Configuring for Internet Access For this reason, it is recommended that you choose your network number from the above list. You can obtain your IP address from the IANA, from an ISP, or assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addr[...]

Configuring for Internet Access 43 Figure 4- 2 M enu 4 - I nternet Access Setup 1. From the Main Menu, enter 4 to go to Menu 4 - Internet Access Setup as seen above. 2. ISP’s Name - Enter the name of your Internet Service Provider, e.g., myisp. This information is for identification purposes only. 3. ISP IP Addr - Enter the IP Address of the remo[...]

44 Configuring for Internet Access 6. My Password - Enter the password associated with the login name above. Note that this login name/password pair is only for the Prestige to connect to the ISP’s gateway. When you use TCP/IP applications, e.g., FTP, to access the Internet from your workstation, you will need a separate login name and password f[...]

Configuring for Internet Access 45 test the Internet connection. If the test fails, note the error message that you receive and take the appropriate troubleshooting steps. Single User Account Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, they will have to subscribe to multiple IP addresses or a Class[...]

46 Configuring for Internet Access translation, refer to RFC 1631, The IP Network Address Translator (NAT) . In summary: 1 . SUA i s a n ideal, cost-effective solution for small offices with less than 20 hosts using a LAN to concurrently access the Internet or other remote TCP/IP network. 2 . SUA can provide one server address to be accessed by Rem[...]

Configuring for Internet Access 47 Configuration for Single User Account The steps for configuring your Prestige for Single User Internet Access are identical to conventional Internet Access with the exception that you need to fill in three extra fields. Follow steps 1-8 from the previous section, Internet Access Configuration. 1. Single User Accou[...]

48 Configuring for Internet Access 1. Configure your primary ISP using Menu 4, as described earlier in this chapter. 2. Enter Menu 11, then select the number of an unused remote node. 3. In Menu 11.1, choose a name for your backup ISP account, set the Active field to No, and enter your outgoing login name, password, and phone number(s). The Remote [...]

Configuring for Internet Access 49[...]

50 Remote Node Configuration  Remo t e No de Co nf igura t ion A Remote Node represents both a remote gateway and the internet behind it, across an ISDN connection. A Remote Node is required for placing calls to or answering calls from a remote network. Note that when you use Menu 4 to configure the Internet, the Prestige will automatically a[...]

Remote Node Configuration 51 Enter the Remote Node number to edit and you will go to the next submenu: 11.1 - Remote Node Profile as shown below: Figure 5- 2 Menu 11.1 - Remote Node Profile 1. Rem Node Name - This is a required field. Enter a descriptive name for the Remote Node, e.g., SJHQ. This field can support up to eight characters. This name [...]

52 Remote Node Configuration 4. Incoming: Rem Node Login Name - Enter the login name that this Remote Node will use when it calls into the Prestige. The login name in this field combined with the Rem Node Password will be used to authenticate the incoming calls from this node. 5. Incoming: Rem Node Password - Enter the password used when this Remot[...]

Remote Node Configuration 53 • PAP sends the user name and password in plain text. • CHAP scrambles the password before it is sent over the wire. Generally speaking, CHAP is more secure than PAP; however, PAP is readily available on more platforms. The recommendation is to use CHAP whenever possible. Turning off the authentication is STRONGLY d[...]

54 Remote Node Configuration 13. Bridge - Bridging i s used for protocols that are not supported or not turned on in the previous Route field by the Prestige, e.g., SNA. When bridging is enabled, the Prestige will forward any packet that it does not recognize to this Remote Node; otherwise, the unrecognized packets are discarded. The disadvantage o[...]

Remote Node Configuration 55 • 56K - (For the North America only) The Prestige will place 56Kbps digital data calls. • DOVBS - (For the North America only) The Prestige will place 56Kbps Data Over Voice Bearer Service (DOVBS) call. Some phone companies in North America charge less if calls are made using DOVBS. 18. Telco Options: Allocated Budg[...]

56 Remote Node Configuration Bandwidth on Demand The Bandwidth on Demand (BOD) feature allows you to bundle both B channels in one connection. The second channel is added and subtracted dynamically according to traffic demand. The Prestige uses the Bandwidth Allocation Control Protocol (BACP) and the Multilink Protocol (MP) to implement bandwidth o[...]

Remote Node Configuration 57 and Receive will only use incoming traffic to make this determination. If, after making the call to bring up a second channel, the second channel does not succeed in joining the Multilink Protocol bundle (because the remote device does not recognize the second call as coming from the same device), the Prestige will hang[...]

58 Remote Node Configuration 4. Multiple Link Options: Base Trans Rate - Select the base data transfer rate for this Remote Node. This parameter is in kilobits per second (Kbps). There are two options for this field: • 64 - Only one channel will be used. • 128 - Two channels will be used when a packet triggers a call. 5. Multiple Link Options: [...]

Dial-In Configuration 59  D ia l-In C onfigur a t ion You can configure the Prestige to receive calls from Remote Dial- in Users (e.g. telecommuters) and Remote Nodes. There are several differences between R emote Dial-in Users and Remote Nodes: 1. The Prestige can make calls to or answer calls from the Remote Node. However, the Prestige will[...]

60 Dial-In Configuration Telecommuting Telecommuting enables people to work at remote sites and yet still have access to the resources in the business office. Typically, a telecommuter will uses a client workstation with TCP/IP or IPX and dial-out capabilities, e.g., a Windows 95 PC or a Macintosh and an ISDN Terminal Adapter (TA). For telecommuter[...]

Dial-In Configuration 61 router on the remote network (see Chapter 5). An example of the Prestige being used as a dial-in server is shown below: Figure 6- 2 Example of a Dial-In Server Application Default Dial-In Setup This section covers the default dial-in parameters. The parameters in Menu 13 affect incoming calls from all Remote Dial-in Users a[...]

62 Dial-In Configuration Figure 6- 3 Menu 13 - Default Dial-in Setup From the Main Menu, enter 13 to go to Menu 13 - Default Dial-in Setup. This section will describe how to configure the protocol- independent fields in this menu. For the protocol-dependent fields, refer to the appropriate chapters. 1. Telco Options: CLID Authen. - This field sets [...]

Dial-In Configuration 63 3. PPP Options: Mutual Authen. - Some vendors, e.g. Cisco, implement a type of mutual authentication. That is, the node that initiates the call will request a user name and password from the far end that they are dialing to. If the Remote Node that is dialing in implements this type of authentication, set this field to Yes.[...]

64 Dial-In Configuration invalid IP address and potentially disrupting the whole network. If set to No, the remote host must use the IP address assigned by the Prestige from the IP pool, configured below. The default is Yes. 10. Dial-In IP Address Supplied By: IP Pool - This field tells the Prestige to provide the remote host with an IP address fro[...]

Dial-In Configuration 65 16. Session Options: Input Filter Sets and Session Options: Output Filter Sets - In these fields, you need to select the filter set(s) to filter the incoming and outgoing traffic between your Prestige and the Remote Dial-in User. Keep in mind that these filter set(s) will only apply to all Remote Dial-in Users bu t not the [...]

66 Dial-In Configuration Figure 6- 4 Menu 14 - Dial-in User Setup After selecting one of eight users by number and pressing enter you will see Menu 14.1 - Edit Dial-in User as seen below: Figure 6- 5 Menu 14.1 - Edit Dial-in User 1. User Name - This is a required field. This will be used as the login name for authentication. Choose a descriptive wo[...]

Dial-In Configuration 67 3. Password - Enter the password for the Remote Dial-in User. 4. Callback - This field determines if the Prestige will allow call back to the Remote Dial-in User upon dial-in. If this option is enabled, the Prestige will be able to call back to the Remote Dial-in User if they request it. In such a case, the Prestige will di[...]

68 Dial-In Configuration Once you have completed filling in Menu 14.1 - Edit Dial-in User , press ENTER at the message: Press ENTER to Confirm ... to save your selections, or press ESC at any time to cancel your selections. M ore on CLI D CLID allows the Prestige to authenticate the caller before a call is answered, thus saving the cost of a connec[...]

TCP/IP Configuration 69  T C P /IP C onfigur a t ion This chapter shows you how to configure the Prestige for TCP/IP. Depending on your particular applications, you will need to configure different menus. For instance, Internet access is the most common application of TCP/IP. For this application, you should configure Menu 4. We will illustra[...]

70 TCP/IP Configuration 204.247.203.0 with subnet mask 255.255.255.0 into 16 subnets (4 bits), the new subnet mask becomes 255.255.255.240. Number of Bits Dot Decimal 1 128 2 192 3 224 4 240 5 248 6 252 7 254 8 255 LAN-to-LAN Application A typical LAN-to-LAN application is to use the Prestige to call from a branch office to the headquarters, as dep[...]

TCP/IP Configuration 71 need to configure Static Routes if some services reside beyond the immediate remote LAN. Re m ote No d e S e tup Follow the procedure in Chapter 5 to fill the protocol- independent parameters in Menu 11, Remote Node Profile. For the protocol-dependent parameters, follow the instructions below. If you are configuring the Pres[...]

72 TCP/IP Configuration 5. Rem IP Subnet Mask - Enter the subnet mask for the remote network. 6. My WAN Addr - Some implementations, especially the UNIX derivatives, require hosts on both ends of the ISDN link to have separate addresses from the LAN, and that the addresses must have the same network number. If this is the case, enter the IP address[...]

TCP/IP Configuration 73 9. Metric - The metric represents the “cost” of transmission for routing purpose. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Enter a number that approximates the cost for this link. The number need not be precise, but it must be between 1 and 16. In practice[...]

74 TCP/IP Configuration used to resolve this problem by providing the Prestige with some static routing information. As a matter of fact, when you configure the Internet Access or a Remote Node, a static route is implicitly created by the Prestige. An example is given below. In the example, stations on the 204.5.1.0/24 subnetwork can access the rem[...]

TCP/IP Configuration 75 Figure 7- 5 Menu 12 - Static Route Setup - Main Menu Figure 7- 6 I P Static Route Setup 1. Route Name - Enter a descriptive name for this route. This is for identification purpose only. 2. Active - This fields allows you to activate/deactivate this static route. 3. Destination IP Address - This parameter specifies the IP net[...]

76 TCP/IP Configuration 4. IP Subnet Mask - Enter the subnet mask for this destination. Follow the discussion on IP subnet mask in this chapter. 5. Gateway IP Address - Enter the IP address of the gateway. The gateway is an immediate neighbor of the Prestige that will forward the packet to the destination. On the LAN, the gateway must be a router o[...]

Novell IPX Configuration 77  N ov e ll IPX C onf igur a tion This chapter shows you how to configure the Prestige for IPX. Depending on your particular applications, you will need to configure different menus. We will illustrate the configuration for some applications in the following sections. IPX Network Environment F rame T ype The station[...]

78 Novell IPX Configuration There are two different scenarios in which you would connect your Prestige to a LAN: one with a server (server side), and one without a server (client side). Figure 8- 1 Prestige Operating in IPX Environment Prestige on LAN with Server When the Prestige is being connected to a LAN with an existing NetWare server station,[...]

Novell IPX Configuration 79 This Prestige must then be configured as a Seed Router, and the network number can be configured in the Ethernet Setup Menu. The network number must be unique and not used anywhere else on the entire internetwork. IPX Spoofing The Prestige comes with several pre-defined call filters designed to prevent certain IPX packet[...]

80 Novell IPX Configuration Figure 8- 2 Menu 3.3 - Novell IPX Ethernet Setup 1. Seed Router - Determine if the Prestige is to act as a seed router. This value depends on the existing network. If there is a NetWare server providing the network number, select No. If there is no NetWare server providing the network number, select Yes. 2. Frame Type - [...]

Novell IPX Configuration 81 Once you have completed filling in the Menu 3.3, press ENTER the save message to save your selections, or press ESC at any time to cancel your selections. LAN-to-LAN Application A typical LAN-to-LAN application is to use the Prestige to call from a branch office to headquarters such that all of the stations on the branch[...]

82 Novell IPX Configuration configure the default dial-in parameters in menu 13 (see Chapter 6). 1. Route - Make sure IPX is among the protocols in the Route field. 2. Edit IP/IPX/Bridge - Press the space bar to change it to Yes and press Enter to go to the network layer options menu. Figure 8- 4 Menu 14.1 - Edit Dial-in User 3. Dial-On-Query - Thi[...]

Novell IPX Configuration 83 6. Hop Count - This field indicates the number of intermediate networks that must be passed through to reach the Remote Node. The default is one (1). 7. Tick Count - This field indicates the time-ticks required to reach the Remote Node. The default is two (2). 8. W/D Spoofing (min) - This field is used for the Prestige o[...]

84 Novell IPX Configuration Figure 8- 5 NetWare Servers on Both Sides of the Link This may present a problem if you desire your client station to access a server at a remote site. For example, in the above diagram, suppose that a client station on the network on the left wishes to access the NetWare server on the right (internal network number = 11[...]

Novell IPX Configuration 85 Figure 8- 6 Menu 12.2 - Edit IPX Static Route 1. Server Name - In this field, enter in the name that has been configured for the server. This name must be the exact name configured in the NetWare server. 2. Network # - This field contains the internal network number of the remote server which you wish to access. Do not u[...]

86 Novell IPX Configuration Once you have completed filling in the menu, press ENTER at the message: Press ENTER to Confirm ... to save your selections, or press ESC at any time to cancel your selections.[...]

Bridging Configuration 87  B r idging C onfigur a tion This chapter shows you how to configure the Bridging options for the Prestige. Depending on your particular applications, you will need to configure different menus. We will illustrate the configuration for some applications in the following sections. IPX Spoofing The Prestige comes with [...]

88 Bridging Configuration Bridge Ethernet Setup Bridging is used to forward packets of unsupported protocols whose destination is not on the local Ethernet to the WAN. Basically, all non-local packets are bridged to the WAN, however, the Prestige applies a special handling for certain IPX packets to reduce the number of calls, depending on the sett[...]

Bridging Configuration 89 Figure 9- 1 Bridge Ethernet Setup • Handle IPX - Set this parameter to None if there is no IPX traffic on the LAN or if you do not want to apply any special handling for IPX. Set it to Client if there are only client workstations on the LAN. Set to Server if there are only IPX servers on the LAN. If there are both client[...]

90 Bridging Configuration Re m ote No d e S e tup Follow the procedure in Chapter 5 to fill the protocol-independent parameters in Menu 11, Remote Node Profile. For the protocol- dependent parameters, follow the ensuing instructions: 1. Bridge - Make sure this field is set to Yes. 2. Edit IP/IPX/Bridge - Press the space bar to change it to Yes and [...]

Bridging Configuration 91 Once you have completed filling in the Network Layer Options Menu, press ENTER to return to Menu 11. Press ENTER at the message: Press ENTER to Confirm ... to save your selections, or press ESC at any time to cancel your selections. De fa ul t Dia l-I n S e tup for B r i dge There is only one parameter you need to fill out[...]

92 Bridging Configuration 2. Active - Indicates whether the static route is active or not. 3. Ether Address -Enter the MAC address of the destination device that you wish to bridge your packets to. 4. IP Address - If available, enter the IP address of the destination device that you wish to bridge your packets to. 5. Gateway Node - Enter the number[...]

Filter Configuration 93  Filte r C onfigur a t ion About Filtering The Prestige uses filters to decide whether or not to allow passage of a data packet and/or to make a call over the ISDN line. There are three types of filters involved: incoming data filters, outgoing data filters, and call filters. Data filters screen the data to determin[...]

94 Filter Configuration For incoming packets, the Prestige applies data filters only. Packets are processed depending upon whether a match is made. The Prestige allows you to customize the filter sets that you wish to use. This following sections describe how to configure the Prestige’s filter sets. Prestige’s Filter Structure You can configure[...]

Filter Configuration 95 The new information will now be displayed in the read-only section of Menu 21 - Filter Set Configuration as shown below: Figure 10- 2 Menu 21 - Filter Set Configuration Once you press ENTER, you will be taken to Menu - 21.1 - Filter Rules Summary as seen below. The information displayed in this menu is read-only. From here, [...]

96 Filter Configuration • m - Refers to Action Matched. F means to forward the packet, D means to drop the packet, and N means check the next rule. • n - Refers to Action Not Matched. F means to forward the packet, D means to drop the packet, and N means check the next rule. Figure 10 - 3 Menu 21.1 - Filter Rules Summary If the filter type is I[...]

Filter Configuration 97 • PT - IPX Packet Type. • SS - Source Socket. • DS - Destination Socket. For more information on configuring the filter rule parameters, refer to the next section. To configure a specific filter rule, simply select the number of the filter rule (1-6) you wish to configure and press ENTER. This will take you to Menu 21.[...]

98 Filter Configuration Figure 10 - 4 Menu 21.1.1 - TCP/IP Filter Rule 1. Active - In this field, you can make the filter rule active or inactive. There are two options: • Yes. • No. 2. IP Protocol - Protocol refers to the IP specific number of the protocol. The range for this value should be between 0 and 255. For example, 6 refers to the TCP [...]

Filter Configuration 99 7. Destination: Port # Comp - In this field, you can select what comparison quantifier you wish to enable to compare to the value given in Destination: Port #. There are five options for this field: • None. • Less. • Greater. • Equal. • Not Equal. 8. Source: IP Addr - In this field, enter the source IP Address of t[...]

100 Filter Configuration • Yes - filter match only established TCP connections. • No - filter match both initial and established TCP connections . 13. More - In this field, you can determine if you want to pass the packet through the next filter rule before an action is taken. There are two options for this field: • Yes. • No. If More is Ye[...]

Filter Configuration 101 • Check Next Rule . • Forward. • Drop. Once you have completed filling in Menu 21.1.1 - TCP/IP Filter Rule, press ENTER at the message: Press ENTER to Confirm ... to confirm your selections, or press ESC at any time to cancel your selections. This data will now be displayed on Menu 21.1 - Filter Rules Summary. Generic[...]

102 Filter Configuration 2. Length - This field refers to the length (in bytes) of the data in the packet that the Prestige should use for comparison and masking. The starting point of this data is determined by Offset . The range for this field is 0 to 8. Default = 0 3. Mask - In this field, specify (in Hexadecimal) the value that the Prestige sho[...]

Filter Configuration 103 Figure 10- 6 Menu 21.1.3 - IPX Filter Rule 1. IPX Packet Type - Enter the IPX packet type value of the packet you wish to filter. This value should be two hex-bytes. 2. Destination/Source Network # - Enter the four hex-byte destination/source network numbers of the packet that you wish to filter. 3. Destination/Source Node [...]

104 Filter Configuration • RIP Response. • SAP Request. • SAP Response. • SAP Get Nearest Server Request. • SAP Get Nearest Server Response. Once you have completed filling in Menu 21.1.3 - IPX Filter Rule, press ENTER at the message: Press ENTER to Confirm ... to confirm your selections, or press ESC at any time to cancel your selections[...]

SNMP 105  SNM P About SNMP The Simple Network Management Protocol (SNMP) is a protocol governing network management and the monitoring of network devices and their functions. The Prestige supports the utilization of SNMP to regulate the communication that occurs between the manager station and the agent stations in a network. Basically, th[...]

106 SNMP Figure 11- 1 Menu 22 - SNMP Configuration 1. From the Main Menu, select option 22. SNMP Configuration. This will bring you to Figure 12.1 Menu 22 - SNMP Configuration. 2. You will then be prompted to enter the following information. Steps 3 -7 will describe the specific parameters involved in the configuration. The parameters you will have[...]

SNMP 107 6. Trap: Community - In this field, enter the community name that is sent with each trap to the SNMP manager. This should be treated like a password and match what the SNMP manager is expecting. The default is public. 7. Trap: Destination - This field contains the IP address of the station that you wish to send your SNMP traps to. Once you[...]

108 SNMP[...]

System Security 109  Syst em S ecu rit y The Prestige incorporates a number of security measures to prevent unauthorized access to your network. For example, the Prestige supports both PAP (Password Authentication Protocol) and CHAP (Challenge Handshake Authentication Protocol) in authenticating a Remote Node. More information on CHAP and [...]

110 System Security obtain a copy of the RADIUS software, along with documentation for the server, at http://www.livingston.com/Tech/FTP/pub-le-radius.shtml or at ftp://ftp.livingston.com/pub/le/radius/ Follow the included instructions to install the server on your UNIX-based server. Once you have installed the server, you will need to edit the dic[...]

System Security 111 This will bring you to Menu 23.2 - System Security - External Server. Figure 12 - 1 Menu 23.2 - System Security - External Server The fields in the System Security - External Server menu are as follows: 1. Active - Determines whether the external security facility is enabled. If this field contains No, only the built-in dial-up [...]

112 System Security # Client Name Key #----------------------------- 192.168.0.1 1234 should be added to the client file. The Client Name field in the file gives the IP address of the Prestige router, and the Key field should be the same as the Key field in Menu 23.2. After a RADIUS server has been configured, the Prestige will use it to authentica[...]

System Security 113 User-Name = “joeuser”, Zyxel-Callback-Option = Mandatory, Zyxel-Callback-Phone-Source = Preconfigured Dialback-No = “5551212” Note that if CLID is turned off in the Prestige, you still need to have a separate user record for joeuser so the regular user name/password mechanism still works. Configuring the SMT Password Fig[...]

114 System Security 5. Re-type your new system password for confirmation purposes and press ENTER . You will now need to enter in this password when you try to get into the SMT. In addition, this password will also be used when a network administrator attempts to telnet to the Prestige.[...]

Telnet Configuration and Capabilities 11 5  T e lne t C onf igur at ion a nd C a pa bilitie s About Telnet Configuration When you first configure your Prestige, it must be done via a computer connected to the RS-232 port. However, once the Prestige has been initially configured, you can use telnet to configure the device remotely as shown [...]

116 Telnet Configuration and Capabilities IP in menu 1, telnet will still be available provided you assign the Prestige an IP address. Telnet Capabilities Si ngle A dm ini strator To prevent confusion and discrepancy on the configuration, Prestige will only allow one terminal connection at any time. Prestige also gives priority to the RS-232 connec[...]

System Maintenance 117  Syst em Main ten ance The Prestige provides diagnostic tools that you can use to maintain your device. Some of these tools include updates on system status, ISDN B channel status, log and trace capabilities and upgrades to the system software. This chapter will describe how to use these tools in greater detail. Syst[...]

118 System Maintenance Figure 14 - 2 Example of Menu 24.1 - System Maintenance - Status 1. To get to the System Status, select option 24. System Maintenance. This will bring you to Menu 24 - System Maintenance. 2. From this menu, select option 1. System Status. 3. There are four (4) possible commands in Menu 24.1 - System Maintenance - Status. Ente[...]

System Maintenance 119 9. RXPkt - the number of received packets on this channel. 10. Error - the number of error packets on this channel. 11. CLU - (Current Line Utilization) - percentage of current bandwidth used on this channel. 12. ALU - (Average Line Utilization) - average CLU for this channel. 13. Up Time - time this channel has been connecte[...]

120 System Maintenance 24. Country Code - refers to the one byte country code value (in decimal notation), e.g., 225 indicates North America. 25. LAN Packet Which Triggered Last Call - shows the first 48 octets of the LAN packet that triggered the last outgoing call. There are three different types of packets: IP, IPX, and RAW. By viewing the packe[...]

System Maintenance 121 Figure 14- 4 Menu 24.2 -System Maintenance - Change Terminal Baud Rate Log and Trace Log and trace tools allow users of the Prestige to view the error logs and trace records to troubleshoot any errors that may occur. The Prestige is also able to generate syslogs to send to other machines. 1. To get to the Log and Trace, selec[...]

122 System Maintenance You can also clear the Error Log on your Prestige. After each display, you are prompted with an option to do so. Enter the appropriate choice and press ENTER. Sy slog A nd A c c ounti ng Syslog and Accounting can be configured in Menu 24.3.2 - System Maintenance - Syslog and Accounting. This menu configures the Prestige to se[...]

System Maintenance 123 and Session information messages. Some examples of these messages are shown below: Call Information Messages: line 1 channel 1, call 41, C01, Incoming Call, 40001 line 1 channel 1, call 41, C01, ANSWER Connected, 64K 40001 line 1 channel 1, call 41, C01, Incoming Call, Call Terminated Error Information Messages: line 1, chann[...]

124 System Maintenance 1. From the Main Menu, select option 24. System Maintenance. This will bring you to Menu 24 - System Maintenance. 2. From this menu, select option 4. Diagnostic. This will bring you to Figure 15.4 Menu 24.4 - System Maintenance - Diagnostic. 3. Items 4 - 12 will describes the nine (9) options to test your Prestige and its con[...]

System Maintenance 125 F i gu r e 14-7 Tr ace D i sp lay for a Su cce ssf u l I PC P C on n e ct i on vi a M an u al Cal l Below is an example of a failed Trace Display for a Successful IPCP Connection via Manual Call. Figure 14- 8 Trace Display for a Failed IPCP Connection via Manual Call 1. Internet Setup Test - This test checks to see if your In[...]

126 System Maintenance 2. Ping Host - This diagnostic test pings the host which determines the functionality of the TCP/IP protocol on your system. 3. Reboot System - This option reboots the system. This serves to implement any changes that may have been recently added to your system. 4. Command Mode - This option allows the user to enter the comma[...]

System Maintenance 127 Software Update Software updates are only possible through the RS-232 cable connection. You cannot use telnet to update the software version of your Prestige. Note that this function will delete the old software before installing the new software. Do not attempt to utilize this menu unless you have the new software version. T[...]

128 System Maintenance perform the upload. After uploading is successful, power off the Prestige, and then power it back on to restart. Command Interpreter Mode This option allows the user to enter the command interpreter mode. This mode allows you to diagnose, test, and configure your Prestige using a specified set of commands. A list of valid com[...]

System Maintenance 129 Call C on t rol P ara m et ers Figure 14- 10 Menu 24.9.1 Call Control Parameters • Dialer Timeout: Digital Call (sec) - The Prestige will timeout if it can not set up an outgoing digital call within the timeout value. The default is 30. • Dialer Timeout: Analog Call (sec) - The Prestige will timeout if it can not set up a[...]

130 System Maintenance B lacklis t Figure 14 - 11 Blacklist The phone numbers on this list cannot be entered directly, instead, they are numbers which have had problems connecting in the past. The user can take a number off the list by entering the index number of entry. B udge t M a na ge m ent Figure 14- 12 Budget Management The total budget is t[...]

System Maintenance 131 dropped and further outgoing calls to that Remote Node or Remote Dial-in User (callback) will fail. After each period, the total budget is reset. The defaults for the total budget is 0 minutes and the period is 0 hours. This means no budget control. The user can reset the total outgoing call time through this menu. The total [...]

132 System Maintenance[...]

Troubleshooting 133  T r ouble shoot ing This chapter contains some problems you may run into when using your Prestige. After each problem description, we have provided some instructions to help you diagnose and solve the problem. Problems Starting Up the Prestige None of the LE Ds are on w he n y ou pow er up t he P res t ige • Check th[...]

134 Troubleshooting Problems With the ISDN Line T he ISDN init ialization failed This problem occurs when you attempt to save the parameters entered in menu 2, but receive the message, “Save successful, but Failed to initialize ISDN; Press ESC to exit”. 1. Check the error log (in menu 24.3.1), you should see a log entry for the ISDN initializat[...]

Troubleshooting 135 Problems with the LAN Interface Ca n’ t PING a ny st a ti on on the LA N 1. Check the LAN LED on the front panel of your Prestige. If it is on, then the link is up. If it is off, then check the cables connecting your Prestige to your LAN. 2. The type of Ethernet interface that you have configured in menu 3.1. Verify that you a[...]

136 Troubleshooting nothing in the log, the call may have been dropped by the remote device that you dialed in to. Make sure that the configuration parameters between these two devices are consistent. Problems Connecting to a Remote User 1. First verify that you have configured the authentication parameters in menu 13. These would be CLID Authen, R[...]

ISDN Switch Types 137  ISD N S w it ch T y pe s The following table summarizes the different type of switch types supported by the Prestige and some related information on the switch types (number of phone numbers and SPID numbers). It should be noted that the information in this table is for the common case and is recommended for those ca[...]

138 ISDN Switch Types For AT&T 5ESS National ISDN-1 Provisioning Feature Setting Term Type A Circuit Switched Voice (CSV) 1 CSV Additional Call Offering (ACO) Unrestricted CSV limit 2 CSV Notification Busy (NB) limit 1 Circuit Switched Data (CSD) 1 CSD Additional Call Offering (ACO) Unrestricted CSD limit 2 CSD Notification Busy (NB) limit 1 MT[...]

ISDN Switch Types 139 Provisioning Feature Setting CSV Flexible Call Offering (FCO) Unrestricted CSV limit 2 CSV Notification Busy (NB) limit 1 Circuit Switched Data (CSD) 1 CSD Flexible Call Offering (FCO) Unrestricted CSD limit 2 CSD Notification Busy (NB) limit 1 MTERM 2 P rovisioning For the Nor the r n T el e c om Sw itc h The Northern Telecom[...]

140 ISDN Switch Types Provisioning Feature Setting EKTS)[...]

Index 141  Inde x 10Base2, 14, 24 10Base5. See AUI 10Base-T, 14, 23, 24 1TR6, 13, 33, 139 A/B Adapter, 1 Accounting, 123, 124 AUI, 14, 24, 37, 121, 137 BACP. See Bandwidth Allocation Control Protocol Bandwidth Allocation Control Protocol, 3, 44, 55, 57 Bandwidth Allocation Protocol, 3 Bandwidth On Demand. See BOD BAP. See Bandwidth Allocat[...]

142 Index IP Subnet Mask, 15, 39, 71, 74, 78 IPX, 1, 2, 5, 12, 14, 36, 40, 51, 55, 62, 66, 67, 73, 79, 80, 81, 82, 84, 86, 87, 89, 90, 91, 92, 97, 98, 99, 103, 104, 105, 106, 117, 122, 138 ISDN connecting the line, 22 ISDN Ordering Code, 11, 139 LAN, 1, 2, 4, 5, 6, 7, 9, 29, 39, 42, 46, 47, 51, 61, 62, 72, 73, 74, 78, 79, 80, 81, 83, 84, 85, 91, 92[...]

Index 143 SPID, 11, 13, 14, 30, 136, 139 Spoofing, 81, 85, 89 SUA. See Single User Account switch types, 2, 13, 31, 136, 139 System Management Terminal, 26 Target Utility, 58, 60 TCP/IP, 1, 2, 4, 5, 14, 15, 36, 37, 38, 39, 42, 45, 51, 62, 71, 97, 98, 99, 100, 103, 107, 117, 128 Telco Options, 56, 64 Telecommuting, 5, 62 Telnet, 3, 8, 22, 116, 117, [...]