ZyXEL Communications 660HW Series manual

Prestige 660H/HW Series 802.1 1g Wireless ADSL2+ 4-Port Security Gateway User ’ s Guide V ersion 3.40 5/2005[...]

[...]

Prestige 660H/HW Series User’s Guide Copyright 2 Copyright Copyright © 2005 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mechanical , magnet[...]

Prestige 660H/HW Series User’s Guide 3 Federal Communications Commission (F CC) Interference Statement Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rul es. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must acce[...]

Prestige 660H/HW Series User’s Guide Safety Warnings 4 Safety W arnings For your safety , be sure to read and fo llow all warning notices and instructions. • T o reduce the risk of fire, use only No. 26 A WG (American W ire Gauge) or larger telecommunication line cord. • Do NOT open the device or un it. Opening or removi ng covers can expose [...]

Prestige 660H/HW Series User’s Guide 5 ZyXEL Limited Warranty ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase . During the warranty period, and upon proof of purchase, should the product h[...]

Prestige 660H/HW Series User’s Guide Customer Support 6 Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps yo u took to solve i t . METHOD LOCATI[...]

Prestige 660H/HW Series User’s Guide 7 Customer Suppo rt UNITED KINGDOM technical@zyxel.co.uk +44 (0) 8702 909090 www .zyxel.co.uk ZyXEL Co mmunications UK Ltd.,1 1, The Courtyard, Eastern Road, Bracknell, Berkshire, RG12 2XB, United Kingdom (UK) sales@zyxel.co.uk +44 (0) 8702 909091 ftp.zyxel.co.uk a. “+” is the (prefi x) number you enter to[...]

Prestige 660H/HW Series User’s Guide 8 T able of Content s Copyright .................................................. ................................................................ 2 Federal Communications Commissi on (FCC) Interference St atement ............... 3 Safety W arnings .............................................................[...]

Prestige 660H/HW Series User’s Guide 9 Chapter 3 Wizard Setup for Inte rnet Access ........................................... .............................. 58 3.1 Introduction to Internet Access Wizard ............ ................ ............. ................ ..... 58 3.1.1 Internet Acc ess Wizard Set up ............ ................ .......[...]

Prestige 660H/HW Series User’s Guide 10 7.3.1 WEP Encryption ..... ............. ................ ............. ............. ................ ............ 84 7.4 Configuring MAC Filters ......... ............. ................ ............. ................ ............. .....87 7.5 Introduction to WP A ............................ .............[...]

Prestige 660H/HW Series User’s Guide 11 9.4 SIP ALG .......... ............. ............. ................ ............. ............. ................ ............. 1 19 9.5 Selecting the NA T Mode ................. ................. ................ ............. ................ ...120 9.6 Configuring SUA Server .................. ...........[...]

Prestige 660H/HW Series User’s Guide 12 12.7.2.1 When T o Use The Firewall ... ............. ............. ................ ............. 141 Chapter 13 Firewall Configuration ....................................... .................................................. 144 13.1 Access Methods ... ............ ............. ............. ............[...]

Prestige 660H/HW Series User’s Guide 13 15.1.3 System Timeout ............................ ............. ................ ................ .......... 171 15.2 T elnet ................ ................ ............. ............. ................ ............. ................ ....... 171 15.3 FTP ............................ ............. .......[...]

Prestige 660H/HW Series User’s Guide 14 18.7.2 Maximize Bandwidth Usage With Bandwidth Borrowing ............ .......... 200 18.8 Configuring Summary .......................... ............. ............. ................ ............. ...200 18.9 Configuring Class Setu p .. ............. ................. ............ ............. .............[...]

Prestige 660H/HW Series User’s Guide 15 22.2.1 T raffic Redirect Setup . ............. ................ ................ ................ ............. 233 Chapter 23 Menu 3 LAN Setup .............. ..................................................... ............................ 23 6 23.1 LAN Setup ..................... ............. ..........[...]

Prestige 660H/HW Series User’s Guide 16 Chapter 27 St atic Route Setup ............................................................................. .................. 26 0 27.1 IP S tatic Route Overview ..................... ................ ................ ............. ............. 260 27.2 Configuration ................. ................ ..[...]

Prestige 660H/HW Series User’s Guide 17 31.4.2 Generic Filter Rule ...... ............. ............. ................ ............. ............ .......293 31.5 Filter T y pes and NA T ................. ... .......... ................ ............. ............. ............. 295 31.6 Example Filter .. ............. ................ ............[...]

Prestige 660H/HW Series User’s Guide 18 35.2.6 Backup Conf iguration Using TFTP ................................................ ....... 324 35.2.7 TFTP Command Exampl e ................ ................ ................. ............ ....... 324 35.2.8 GUI-based TFTP Clients .. ............. ... ............. ............. ................ .....[...]

Prestige 660H/HW Series User’s Guide 19 Chapter 39 Call Scheduling ........................................ ............................................................ 35 2 39.1 Introduction .......................... ............. ................ ............. ................ ............. ...352 Chapter 40 Internal SPTGEN ...................[...]

Prestige 660H/HW Series User’s Guide 20 Appendix C IP Subnetting ............................................ ..................................................... ....... 380 IP Addressing ................... ............. ................ ............. ............. ................ ............. .. 380 IP Classes ........... ............. ....[...]

Prestige 660H/HW Series User’s Guide 21 WEP Authentication S teps ............ ............. ................ ............. ................ ............... 400 Dynamic WEP Key Exchange ............................. ............. ................ ............... 401 WP A ............. ............. ............. ................ ............. ...[...]

Prestige 660H/HW Series User’s Guide 22 Configuring What Y ou W ant t he Prestige to Log .................... ................... ...... 447 Displaying Logs ............ ............. ................ ............. ................ ............. ............ 447 Log Command Example ...... ................ ................ ............. ..........[...]

Prestige 660H/HW Series User’s Guide 23[...]

Prestige 660H/HW Series User’s Guide 24 List of Figures Figure 1 Prestige Internet Access Applicati on ... ............. ................ ............. ................ ....... 48 Figure 2 Firewall Application .............. .......... ... ............. ............. ................ ............. ............. 49 Figure 3 Prestige LAN-to-LAN App[...]

Prestige 660H/HW Series User’s Guide 25 Figure 37 Example Wireless Client OTIST Scre en ... ................ ............. ................ ............. 101 Figure 38 Security Key ....... ................ ....... ...... ................ ............. ............. ................ .......... 101 Figure 39 OTIST in Progress (Prestige) .... ......[...]

Prestige 660H/HW Series User’s Guide 26 Figure 80 Remote Management ........................ ............. ............. ................ ............. .......... 172 Figure 81 Configuring UPnP ........... ................ ................ ............. ................ ................ ....... 175 Figure 82 Add/Remove Progra ms: Windows S etup: [...]

Prestige 660H/HW Series User’s Guide 27 Figure 123 Menu 23.1 Change Password . ...... ....... ................ ............. ............. ................ ... 226 Figure 124 Menu 1 General Setup .. ................ .......... ................ ............. ............. ................ 229 Figure 125 Menu 1.1 Configure Dynamic DNS .............[...]

Prestige 660H/HW Series User’s Guide 28 Figure 166 Menu 4 Internet Access & NA T Exam ple ............. ............. ................ ............. ... 276 Figure 167 NA T Example 2 .......... ................ ............. ................ ................ ............. ............. 277 Figure 168 Menu 15.2.1 S pecifying an Inside Server .[...]

Prestige 660H/HW Series User’s Guide 29 Figure 209 Syslog Example ............ ................ ............. ................ ................ ............. .......... 316 Figure 210 Menu 24.4 System Maintenance : Di agnostic ... ............ ................. ............ ....... 317 Figure 21 1 T e lnet in Menu 24.5 .......... .......... .....[...]

Prestige 660H/HW Series User’s Guide 30 Figure 252 Windows XP: Advanced TCP/ IP Sett ings .. ................ ............. ................ .......... 374 Figure 253 Windows XP: Internet P rotocol (TCP /IP) Properties .................. ................ ....... 375 Figure 254 Macintosh OS 8/9: Apple Menu .... ... ............. ................ .[...]

Prestige 660H/HW Series User’s Guide 31[...]

Prestige 660H/HW Series User’s Guide 32 List of T ables T able 1 ADSL S tandards ............. ................ ................ ............. ................ ................ .......... 42 T able 2 Front Panel LED s . ................ ............. ................ ................ ............. ................ ....... 50 T able 3 Web Configur[...]

Prestige 660H/HW Series User’s Guide 33 T able 37 ICMP Commands That Trigger Alert s . ................. ............ ................. ............ ....... 135 T able 38 Legal Net BIOS Commands .......... ................ ............. ................ ................ .......... 135 T able 39 Legal SMTP Commands ....................... ........[...]

Prestige 660H/HW Series User’s Guide 34 T able 80 Menu 3. 5 - Wireless LAN Setup ............. ................ ............. ................ ................ 240 T able 81 Menu 3. 5.1 WLAN MAC Address Filtering .......... ................ ............. ................ ... 242 T able 82 Menu 3. 2.1 IP Alias Setup ..... ................. .......[...]

Prestige 660H/HW Series User’s Guide 35 T able 123 Troubleshooting Internet Access ............. ................ ................ ................ .......... 362 T able 124 Troubleshooting the Password ... ................ ................ ................ ................ ....... 362 T able 125 Troubleshooting the W e b Configurator ...........[...]

Prestige 660H/HW Series User’s Guide 36 T able 166 802.1X Logs ........ ............. ................ ................. ............ ................. ............ ....... 44 4 T able 167 ACL Setting Notes ...... ................ ............. ................ ............. ................ ............. 444 T able 168 ICMP Notes ... ...........[...]

Prestige 660H/HW Series User’s Guide 37[...]

Prestige 660H/HW Series User’s Guide Preface 38 Preface Congratulations on your p urchase of the Pres tige 660HW W ireless ADSL Security Gateway or the Prestige 660H ADSL Security Gateway . Note: Register your product online to receive e-mail notice s of firmware upgrades and information at www .zyxel.com for global products, or at www .us.zyxel.[...]

Prestige 660H/HW Series User’s Guide 39 Pref ace The Quick S tart Guide is designed to help yo u get up and running right away . They contain connection information and instructions on getting st arted. • W eb Configurator Online Help Embedded web help for descriptions of individual screens and supplementary information. • ZyXEL Glossary and [...]

Prestige 660H/HW Series User’s Guide Introduction to DSL 40 Introduction to DSL DSL (Digital Subscriber Line) te chnology enhances the data ca pacity of the existing twisted- pair wire that runs betwee n the local telephone co mpany switching of fi ces and most homes and offices. While the wire itself can handle higher frequencies, the telephone [...]

Prestige 660H/HW Series User’s Guide 41 Introduction to DSL[...]

Prestige 660H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 42 C HAPTER 1 Getting T o Know Y our Prestige This chapter describes the key features and applications of your Prestige. 1.1 Introducing the Prestige Y our Prestige integrates high-speed 10/100Mb ps auto-negotiating LAN interface(s) and a high-speed ADSL port into a sin[...]

Prestige 660H/HW Series User’s Guide 43 Chapter 1 G etting To Know Your Pres tige The web browser-based Graphical User Interface (GUI) provides easy management. 1.1.1 Features of the Prestige The following sections describe the features of the Prestige. Note: See the product specifications in t he appendix for deta iled features and standards sup[...]

Prestige 660H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 4 4 Content Filtering Content filtering allows you to block access to fo rbidden Internet web sit es, schedule when the Prestige should perform the filtering and give trusted LAN IP addresses unfiltered Internet access. T raffic Redirect T raffic redirect forwards W A N[...]

Prestige 660H/HW Series User’s Guide 45 Chapter 1 G etting To Know Your Pres tige Dynamic DNS Support W ith Dynamic DNS support, you can have a sta tic hostname alias for a dynamic IP address, allowing the host to be more easily accessible from various locations on the Internet. Y ou must register for this service with a Dynamic DNS service provi[...]

Prestige 660H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 4 6 T raditionally , routing is based on the destina tion address only and the router takes the shortest path to forward a packet. IP Po licy Routing (IPPR) prov ides a mechanism to override the default routing behavior and alte r the packet forwarding based on the poli[...]

Prestige 660H/HW Series User’s Guide 47 Chapter 1 G etting To Know Your Pres tige Diagnostics Cap abilities The Prestige can perform self-diagnostic te sts. Th ese tests check the integrity of the following circuitry: • FLASH memory • ADSL circuitry •R A M • LAN port Packet Filters The Prestige's packet filtering functions a llows ad[...]

Prestige 660H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 48 Wireless LAN MAC Address Filtering Y our Prestige can check the MAC address es of wireless stations against a list of allowed or denied MAC addresses. WEP Encryption WEP (W ired Equivalent Privacy) encrypts data frames before transmitting over the wireless network to[...]

Prestige 660H/HW Series User’s Guide 49 Chapter 1 G etting To Kn ow Your Pres tige 1.1.3 Firewall for Secure Broadband Internet Access The Prestige provides protection from attacks by Internet hackers. By default, the firewall blocks all incoming traffic from the W AN. Th e firewall supports TCP/UDP inspection an d DoS (Denial of Services) detect[...]

Prestige 660H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 50 Figure 5 P-660HW Front Panel The following table describes the LEDs. Table 2 Front Panel LEDs LED COLOR ST ATUS DESCRIPTION PWR/SYS Green On The Prestige is receiving power and functioning prop erly . Blinking The Prestige is rebooting. Red On Power to the Prestige i[...]

Prestige 660H/HW Series User’s Guide 51 Chapter 1 G etting To Know Your Pres tige[...]

Prestige 660H/HW Series User’s Guide Chapter 2 Introdu cing the Web Configur ator 52 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access and navigate the web configurator . 2.1 W eb Configurator Overview The web configurator is an HTML-based mana gement interface that allows easy Prestige setup and management via Int[...]

Prestige 660H/HW Series User’s Guide 53 Chapter 2 Introducing the Web Configurator Figure 6 Password Screen 6 It is highly recommended you change the de fault password! Enter a new password, retype it to confirm and click Apply ; alternatively click Ignor e to proceed to the main menu if you do not want to chang e the password now . Note: If you [...]

Prestige 660H/HW Series User’s Guide Chapter 2 Introdu cing the Web Configurator 54 2 Press the RESET button for ten seconds or until the PWR/SYS LED begins to blink and then release it. When the PWR/SYS LED begins to blink, the defaults have been restored and the Prestige restarts. 2.1.3 Navigating the Pr estige Web Configurator The following su[...]

Prestige 660H/HW Series User’s Guide 55 Chapter 2 Introducing the Web Configurator Note: Click the icon (located in the top right corner o f most screens) to view embedded help. T able 3 Web Config urator Scre ens Summ ary LINK SUB-LINK FUNCTION Wizard Setup Connection Setup Use these screens for initial configuration including general setup, ISP[...]

Prestige 660H/HW Series User’s Guide Chapter 2 Introdu cing the Web Configur ator 56 UPnP Use this screen to enable UPnP on the Prestige. Logs Log Settings Use this screen to change your Prestige’s log settings. Vi ew Log Use this screen to view the logs for the categories that you selected. Media Bandw idth Management Summary Use this screen t[...]

Prestige 660H/HW Series User’s Guide 57 Chapter 2 Introducing the Web Configurator[...]

Prestige 660H/HW Series User’s Guide Chapter 3 Wizard Setu p for Internet Access 58 C HAPTER 3 W izard Setup for Internet Access This chapter provides informatio n on the W izard Setup screens for Internet access in the web configurator . 3.1 Introduction to Internet Access Wizard Use the W izard Setup screens to configure your system for Interne[...]

Prestige 660H/HW Series User’s Guide 59 Chapter 3 Wizard Setup fo r Internet Access Figure 9 Internet Access Wizard Setup: First Screen The following table describes the fields in this screen. T able 4 Internet Access Wizard Setup: First Screen LABEL DESCRIPTION Mode From the Mode drop-down list box, select Routing (default) if your ISP a llows m[...]

Prestige 660H/HW Series User’s Guide Chapter 3 Wizard Setu p for Internet Acce ss 60 Figure 10 Internet Connection with PPPoE The following table describes the fields in this screen. Table 5 Internet Connection with PPPoE LABEL DESCRIPTION Service Name T ype the name of your PPPoE service here. User Name Enter the u ser name exactly as your ISP a[...]

Prestige 660H/HW Series User’s Guide 61 Chapter 3 Wizard Setup fo r Internet Access Figure 1 1 Internet Connec tion with RFC 1483 The following table describes the fields in this screen. Table 6 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select Routing in the Mode field. T ype your ISP assigned I[...]

Prestige 660H/HW Series User’s Guide Chapter 3 Wizard Setu p for Internet Acce ss 62 The following table describes the fields in this screen. Table 7 Internet Connection with ENET ENCAP LABEL DESCRIPTION IP Address A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you a different one eac[...]

Prestige 660H/HW Series User’s Guide 63 Chapter 3 Wizard Setup fo r Internet Access The following table describes the fields in this screen. Table 8 Internet Connection with PPPoA LABEL DESCRIPTION User Name Enter the login name that your ISP gives you. Password Enter the password associated with the user name above. IP Address This option is ava[...]

Prestige 660H/HW Series User’s Guide Chapter 3 Wizard Setu p for Internet Acce ss 64 Figure 14 Internet Access Wizard Setup: Third Screen If you want to change your Prestige LAN settings, click Change LAN Configuration to display the screen as shown next. Figure 15 Internet Access Wizard Setup: LAN Configuration[...]

Prestige 660H/HW Series User’s Guide 65 Chapter 3 Wizard Setup fo r Internet Access The following table describes the fields in this screen. Table 9 Internet Access Wizard Setup: LAN Configuration LABEL DESCRIPTION LAN IP Address Enter the IP address of your Prestige in dotted decimal notat ion, for example, 192.168.1.1 (factory defa ult). If you[...]

Prestige 660H/HW Series User’s Guide Chapter 4 Wizard Setup for Media Ba ndwidth Ma nagement 66 C HAPTER 4 Wizard Setup for Media Bandwid th Management This chapter shows you how to configure basic bandwidth management using the wizard screens. 4.1 Introduction to Media Bandwid th Management The web configurator’ s Media Bandwidth Magnt. screen[...]

Prestige 660H/HW Series User’s Guide 67 Chapter 4 Wizard Setup for Media Ban dwidth Management 4.2 Media Bandwid th Management Setup 1 Click Media Bandwidth Mgnt. under Wizard Set up in the SITE MAP screen. Figure 17 Media Bandwid th Mgnt. Wiza rd Setup: First Screen FTP File T ransfer Pro gram enables fast transfer of files, including large file[...]

Prestige 660H/HW Series User’s Guide Chapter 4 Wizard Setup for Media Ba ndwidth Ma nagement 68 The following table describes the labels in this screen. Ta b l e 11 Media Bandwid th Mgnt. Wiza rd Setup: First Screen LABEL DESCRIPTION Active Select the Active check box to have the Prestige apply bandw idth management to traffic going out through t[...]

Prestige 660H/HW Series User’s Guide 69 Chapter 4 Wizard Setup for Media Ban dwidth Management 3 W ell done! Y ou have finished co nfiguratio n of Media Bandwidth Management . Y ou may now continue configu ring your device. Click Return to Main Menu to return to the Site Map screen. Figure 19 Media Bandwid th Mgnt. Wizard Setup: Finish Back Click[...]

Prestige 660H/HW Series User’s Guide Chapter 5 Pass word Setup 70 C HAPTER 5 Password Setup This chapter provides information on the Password scre en. 5.1 Password Overview It is highly recommended that you ch ange the password for accessing the Prestige. 5.1.1 Configuring Password T o change your Prestige’ s password (recommended), click Passw[...]

Prestige 660H/HW Series User’s Guide 71 Chapter 5 Password Setup[...]

Prestige 660H/HW Series User’s Guide Chapter 6 LAN Setu p 72 C HAPTER 6 LAN Setup This chapter describes how to configure LAN settings. 6.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached. A LAN is a computer network lim ited to the immediate area, usually the same building or floor o[...]

Prestige 660H/HW Series User’s Guide 73 Chapter 6 LAN Setup 6.2 DNS Server Address DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely impo rtant because without it, you must know the IP address of a machine before you can access it. The DNS server addre sses that you e[...]

Prestige 660H/HW Series User’s Guide Chapter 6 LAN Setup 74 6.4 LAN TCP/IP The Prestige has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability . 6.4.1 Factory LAN Default s The LAN parameters of the Prestige are preset in the factory with the following values: • IP address of[...]

Prestige 660H/HW Series User’s Guide 75 Chapter 6 LAN Setup 6.4.3 RIP Setup RIP (Routing Information Protocol) allows a ro uter to e xchange ro u ting information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. When set to: • Both - the Prestige will broadcast its routing ta ble periodically and in[...]

Prestige 660H/HW Series User’s Guide Chapter 6 LAN Setu p 76 6.5 Any IP T raditionally , you must set the IP addresses an d the subnet masks of a computer and the Prestige to be in the same subn et to allow the computer to a ccess the Internet (through the Prestige). In cases where your computer is requ ired to use a static IP address in another [...]

Prestige 660H/HW Series User’s Guide 77 Chapter 6 LAN Setup The following lists out the steps taken, when a co mputer tries to access the Internet for the first time through the Prestige. 1 When a computer (which is in a different subnet) first attempts to access the Internet, it sends packets to its default ga teway (which is not the Pres tige) [...]

Prestige 660H/HW Series User’s Guide Chapter 6 LAN Setu p 78 Figure 23 LAN Setup The following table describes the fields in this screen. Table 14 LAN Setup LABEL DESCRIPTION DHCP DHCP If set to Server , you r Prestige can assign IP ad dresses, an IP defau lt gateway and DNS servers to Windows 95, Windows NT and other systems that support the DHC[...]

Prestige 660H/HW Series User’s Guide 79 Chapter 6 LAN Setup 6.7 Configuring S tatic DHCP This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pair[...]

Prestige 660H/HW Series User’s Guide Chapter 6 LAN Setu p 80 Figure 24 LAN: S tatic DHCP The following table describes the labels in this screen. Table 15 LAN: S tatic DHCP LABEL DESCRIPTION # This is the index number of the St atic IP table entry (row ). MAC Address Type the MAC address (with colons ) of a computer o n your LAN. IP Address This [...]

Prestige 660H/HW Series User’s Guide 81 Chapter 6 LAN Setup[...]

Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 82 C HAPTER 7 W ireless LAN (Prestige 660HW) This chapter discusses how to configure W ireless LAN. 7.1 Introduction A wireless LAN can be as simple as two computers with wireless LAN adapters communicating in a peer-to-p eer network or as complex as a number of comput[...]

Prestige 660H/HW Series User’s Guide 83 Chapter 7 Wireless LAN (Prestig e 660HW) • Use the Local User Database if you have less than 32 wireless client s in your network. The Prestige uses MD5 encryption when a clie nt authenticates with the Local User Database 7.2.3 Restricted Access The MAC Filter screen allows you to configure the AP to give[...]

Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 84 6 If you have OTIST -enabled clients, configure OTIST in the OTIST scre en. OTIST transfers device SSID and WEP or WP A-PSK key se ttings (if enabled) to wireless clients. The following figure shows th e relative effectiveness of th ese wireless security methods ava[...]

Prestige 660H/HW Series User’s Guide 85 Chapter 7 Wireless LAN (Prestig e 660HW) Figure 26 Wireless Sc reen The following table describes the labels in this screen. Table 16 Wirel ess LAN LABEL DESCRIPTION Enable Wireless LAN Y ou should configure some wireless security (see Figure 25 on page 84 ) when you enable the wireless LAN. Sele ct the che[...]

Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 86 Hide ESSID Select Ye s to hide the ESSID in so a station cannot obtain the ESSID through AP scanning. Select No to make the ESSID visible so a st ation can obtain the ESSID through AP scanning. Channel ID The radio frequency used by IEEE 802.1 1a, b or g wirel ess d[...]

Prestige 660H/HW Series User’s Guide 87 Chapter 7 Wireless LAN (Prestig e 660HW) Note: If you are configuring the Prestige from a computer connected to the wireless LAN and you change the Prestige’s ESSID or security settings (see F igure 25 on page 84 ), you will lose your wireless connection when you pr ess Apply to confirm. Y ou must then ch[...]

Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 88 Figure 27 MAC Addres s Filter The following table describes the fields in this menu. Table 17 MAC Address F ilter LABEL DESCRIPTION Active Select Ye s from the drop down list box to enable MAC address filtering. Action Define the filter action for th e list of MAC a[...]

Prestige 660H/HW Series User’s Guide 89 Chapter 7 Wireless LAN (Prestig e 660HW) 7.5 Introduction to WP A W i-Fi Protected Access (WP A) is a subset of th e IEEE 802.1 1 i standard. WP A is preferred to WEP as WP A has user authentication and improv ed data encryption. See the append ix for more information on WP A user authentication and WP A en[...]

Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 90 Figure 28 WP A - PSK Authentication 7.5.2 WP A with RADIUS Application Example Y ou need the IP address, port number (default is 1812) and share d secret of a RADIUS server . A WP A application example with an external RADIUS serve r looks as follows. "A" [...]

Prestige 660H/HW Series User’s Guide 91 Chapter 7 Wireless LAN (Prestig e 660HW) Figure 29 WP A with RADIU S Application Example 2 7.5.3 Wireless Client WP A Supplicant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A. At the time of writing, the mo st widely availa bl[...]

Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 92 Figure 30 Wireless LAN: 802.1x/WP A: No Authentication The following table describes the label in these screens. Table 18 Wireless LAN: 802.1x/WP A : No Access/Authentication LABEL DESCRIPTION Wireless Port Control T o control wireless st ation access to the wired n[...]

Prestige 660H/HW Series User’s Guide 93 Chapter 7 Wireless LAN (Prestig e 660HW) Figure 31 Wireless LAN: 802.1x/WP A: 802.1xl The following table describes the labels in this screen. T able 19 Wireless LA N: 802.1x/WP A: 802.1x LABEL DESCRIPTION Wireless Port Control T o control wire less station access to the wired network, select a control meth[...]

Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 94 Note: Once you enable user auth entication, y ou need to specify an external RADIUS server or create local user account s on the Prestige for authentication. 7.6.2 Authentication Required: WP A Select Authentication Required in the Wir eless Port Control field and W[...]

Prestige 660H/HW Series User’s Guide 95 Chapter 7 Wireless LAN (Prestig e 660HW) Figure 32 Wireless LAN: 802.1x/WP A: WP Al The following table describes the labels not previously discussed Table 20 Wireless LAN: 802.1x/WP A: WP Al LABEL DESCRIPTION Key Management Protocol Choose WP A in this field. WP A Mi xed Mode The Prestige ca n operate in W[...]

Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 96 7.6.3 Authentication Required: WP A-PSK Select Authentication Required in t he Wireless Port Contr ol field and WP A-PSK in the Key Management Protocol fie ld to display the next screen. Figure 33 Wireless LAN: 802.1x/WP A:WP A-PSKl The following table describes the[...]

Prestige 660H/HW Series User’s Guide 97 Chapter 7 Wireless LAN (Prestig e 660HW) 7.7 Configuring Local User Authentication By storing user profiles locally , your Prestige is able to authenticate wireless users without interacting with a network RADIUS server . However , there is a limit on the number of users you may authentica te in this way . [...]

Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 98 7.8 Configuring RADIUS T o set up your Prestige’ s RADIUS server settings, click WIRELESS LAN , R ADIUS . The screen appears as shown. Figure 35 RADIUS The following table describes th e fields in this screen. Password Enter a password of up to 31 printable charac[...]

Prestige 660H/HW Series User’s Guide 99 Chapter 7 Wireless LAN (Prestig e 660HW) 7.9 Introduction to OTIST In a wireless network, the wireless clients mu st have the same SSID and security settings as the access point (AP) or wireless router (we wi ll refer to both as “AP” here) in order to associate with it. T raditionally th is meant that y[...]

Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 100 7.9.1.1.1 Reset button If you use the Reset button, the default (01234 567) or previous saved (through the web configurator) Setup key is used to encryp t the settings that you want to transfer . Hold in the Reset button for one or two second s. Note: If you hold i[...]

Prestige 660H/HW Series User’s Guide 101 Chapter 7 Wireless LAN (Prestig e 660HW) 7.9.1.2 Wireless Client Start the ZyXEL utility and click the Adapter tab. Select the OTIST check box, enter the same Setup Key as your AP’ s and click Save . Figure 37 Example Wireless Client OTIST Screen 7.9.2 St arting OTIST Note: Y ou must click Star t in the [...]

Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 102 7.9.3 Notes on OTIST 1 If you enabled OTIST in the wireless client, you see this screen each time you start the utility . Click Ye s for it to search for an OTIST -enabled AP . Figure 42 S tart OTIST? 2 If an OTIST -enabled wireless client loses its wireless conne [...]

Prestige 660H/HW Series User’s Guide 103 Chapter 7 Wireless LAN (Prestig e 660HW)[...]

Prestige 660H/HW Series User’s Guide Chapter 8 WAN Setup 104 C HAPTER 8 W AN Setup This chapter describes how to configure W AN settings. 8.1 W AN Overview A W AN (W ide Area Network) is an outside conn ection to another network or the Intern et. See Chapter 3 on pa ge 58 for more information on th e fields in the W AN scree ns. 8.2 Metric The me[...]

Prestige 660H/HW Series User’s Guide 105 Chapter 8 WAN Setup 8.3 PPPoE Encap sulation The Prestige supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection. The PP PoE option is for a dial-up c[...]

Prestige 660H/HW Series User’s Guide Chapter 8 WAN Setup 106 Figure 43 Example of T ra ffic Shaping 8.5 Zero Configuration Internet Access Once you turn on and connect the Prestige to a telephone jack, it automatically detects the Internet connection settings (s uch as the VCI/VPI numbers an d the encapsulation method) from the ISP and makes the [...]

Prestige 660H/HW Series User’s Guide 107 Chapter 8 WAN Setup Figure 44 W AN Setup (PPPoE) The following table describes the fields in this screen. Table 25 WAN S e t u p LABEL DESCRIPTION Name Enter the name o f your Internet Service Pr ovider , e.g., MyISP . This in formation is for identification purposes only . Mode Select Routing (default) fr[...]

Prestige 660H/HW Series User’s Guide Chapter 8 WAN Setup 108 Encapsulation Select the method of encapsulati on used by your ISP from the drop-down list box. Choices vary depending on the mode you select in th e Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483 . If you select Routing in the Mode field, select PPP[...]

Prestige 660H/HW Series User’s Guide 109 Chapter 8 WAN Setup 8.7 T raffic Redirect T raffic redirect forwards traffic to a backup gateway when the Prestige cannot connect to the Internet. An exampl e is shown in the figu re below . Connect on Demand Select Connect on Demand when you don't want th e connection up all the time and specify an i[...]

Prestige 660H/HW Series User’s Guide Chapter 8 WAN Setup 110 Figure 45 T raffic Redirect Example The following network topology allows you to avoid triangle route security issues when the backup gateway is conn ected to the LAN. Use IP alias to configure the LAN into two or three logical networks with the Prestige itself as the gateway for each L[...]

Prestige 660H/HW Series User’s Guide 111 Chapter 8 WAN Setup Figure 47 W AN Backup The following table describes the fields in this screen. Table 26 WAN B a c k u p LABEL DESCRIPTION Backup T ype Select the method that the Prestige uses to check the DSL connection. Select DSL Link to have the Prestige check if the connection to the DSLAM is up. S[...]

Prestige 660H/HW Series User’s Guide Chapter 8 WAN Setup 112 T imeou t T ype the numbe r of seconds (3 recommended) for your Prestige to wait for a ping response from one of the IP addresses in the Check W AN IP Addres s field before timing out the request. The WAN connection is considered "down" after the Prestige times out the number [...]

Prestige 660H/HW Series User’s Guide 113 Chapter 8 WAN Setup[...]

Prestige 660H/HW Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) Screens 114 C HAPTER 9 Network Address T ranslation (NA T) Screens This chapter discusses how to configure NA T on the Prestige. 9.1 NA T Overview NA T (Network Address Translation - NA T , RFC 1631) is the translation of the IP address of a host in a packet, for e[...]

Prestige 660H/HW Series User’s Guide 115 Chapter 9 Network Address Translation (NAT ) Screens 9.1.2 What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W A N side. When the resp onse co[...]

Prestige 660H/HW Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) Screens 116 Figure 48 How NA T W orks 9.1.4 NA T Ap plication The following figure illustrates a possible NA T application, wher e three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct W AN networks. More examples f[...]

Prestige 660H/HW Series User’s Guide 117 Chapter 9 Network Address Translation (NAT ) Screens 9.1.5 NA T Mapp ing T yp es NA T supports five types of IP/port mapping. They are: • One to One : In One-to-One mode, the Prestige maps one local IP address to one global IP address. • Many to One : In Many-to-One mode, the Prestige maps multiple loc[...]

Prestige 660H/HW Series User’s Guide Chapter 9 Netwo rk Address Translat ion (NAT) Screens 118 9.2 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server . The Prestige also supports Full Feature NA T to map multiple global IP addre[...]

Prestige 660H/HW Series User’s Guide 119 Chapter 9 Network Address Translation (NAT ) Screens 9.3.3 Configuring Ser vers Behind SUA (Example) Let's say you want to assign po rts 21-25 to one FTP , T elnet and SMTP server (A in the example), port 80 to another (B in the exam ple) and assign a default server IP address of 192.168.1.35 to a thi[...]

Prestige 660H/HW Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) Screens 120 9.5 Selecting the NA T Mode Y ou must create a firewall rule in addition to setting up SUA/NA T , to allow traffic from the W AN to be forwarded through the Prestige. Click NA T to open the following screen. Figure 51 NA T Mode The following table descr[...]

Prestige 660H/HW Series User’s Guide 121 Chapter 9 Network Address Translation (NAT ) Screens Figure 52 Edit SUA/NA T Server Set The following table describes the fields in this screen. T able 31 Edit SUA/NA T Server Set LABEL DESCRIPTION S tart Port No. Enter a port number in this field. T o forward only one port, enter the port number again in [...]

Prestige 660H/HW Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) Screens 122 9.7 Configuring Address Mapping Ordering your rules is important because the Pr estige applies the rules in the order that you specify . When a rule matches the current pack et, the Prestige takes the corresponding action and the remaining rules are ign[...]

Prestige 660H/HW Series User’s Guide 123 Chapter 9 Network Address Translation (NAT ) Screens 9.8 Editing an Address Mapping Rule T o edit an address mapping rule, click the rule’ s link in the NA T Addr ess Mapping Rules screen to display the screen sh own next. Figure 54 Address Mapping Rule Ed it The following table describes the fields in t[...]

Table 33 Address Mapp ing Rule Edit LABEL DESCRIPTION Ty p e Ch oose the port mapping type from one of the fo llowing. • One-to-One : One-to-One mode maps one local IP address to o ne global IP address. Note that port numbers do not change for One-to-one NA T mapping type. • Many-to-One : Many-to-One mode maps multiple local IP addresses to one[...]

Prestige 660H/HW Series User’s Guide 125 Chapter 9 Network Address Translation (NAT ) Screens[...]

Prestige 660H/HW Series User’s Guide Chapter 10 Dy namic DNS Se tup 126 C HAPTER 10 Dynamic DNS Setup This chapter discusses how to configure your Prestige to use Dynamic DNS. 10.1 Dynamic DNS Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU[...]

Prestige 660H/HW Series User’s Guide 127 Chapter 10 Dynamic DNS Setup Figure 55 Dynamic DNS The following table describes the fields in this screen. Table 34 Dynamic DNS LABEL DESCRIPTION Active Select this check box to use dynamic DNS. Service Provider This is the na me of your Dynamic DNS se rvice provide r . Host Names T ype the domain na me a[...]

Prestige 660H/HW Series User’s Guide Chapter 11 Time an d Date 128 C HAPTER 11 T ime and Date This screen is not available on all models. Us e this screen to configur e the Prestige’ s time and date settings. 1 1.1 Configuring T ime and Date T o change your Prestige’ s time and date, click Time And Date . The screen appears as shown. Use this[...]

Table 35 T ime and Date LABEL DESCRIPTION T ime Server Use Protocol when Bootup Select the time service protocol that your time server sends when you turn on the Prestige. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use tria l and error to find a protocol that works. The main differenc[...]

Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 130 C HAPTER 12 Firewalls This chapter gives some backgr ound information on firewalls and introduces the Prestige firewall. 12.1 Firewall Overview Originally , the term fir ewall referred to a construction techni que designed to prevent the spread of fire from one room to another . The ne[...]

Prestige 660H/HW Series User’s Guide 131 Chapter 12 Firewalls Information hiding prevents the names of in ternal systems from being made known via DNS to outside systems, since the ap plication gateway is the only ho st whose name must be mad e known to outside systems. Robust authentication and logging pre-authenticates application traffic befor[...]

Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 132 12.3.1 Denial of Service Att acks Figure 57 Prestige Firewall Application 12.4 Denial of Service Denials of Service (DoS) attacks are aimed at devices and networks w ith a connection to the Internet. Their goal is not to st eal information, but to disabl e a device or netwo rk so users[...]

Table 36 Common IP Ports 21 FTP 53 DNS 23 Te l n e t 80 HTTP 25 SMTP 11 0 POP3 Prestige 660H/HW Series User’s Guide 133 Chapter 12 Firewalls 12.4.2 T ypes of DoS Atta cks There are four types of DoS attacks: 1 Those that exploit bugs in a TCP/IP implementation. 2 Those that exploit weaknesses in the TCP/IP specification. 3 Brute-force attacks tha[...]

Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 134 Under normal circumstances, the applica tion that initiates a session sends a SYN (synchronize) packet to the receiving server . The receiver sends back an ACK (acknowledgment) packet and its own SYN, and then the in itiator responds with an ACK (acknowledgment). After this handsh ake,[...]

Prestige 660H/HW Series User’s Guide 135 Chapter 12 Firewalls Figure 60 Smurf Attack 12.4.2.1 ICMP V ulnerability ICMP is an error -reporting protocol that work s in concert with IP . The following ICMP types trigger an alert: Table 37 ICMP Commands That Trigger Alerts 5 REDIRECT 13 TIMEST AMP_REQUEST 14 TIMEST AMP_REPL Y 17 ADDRESS_MASK_REQUEST [...]

Table 39 Legal SMTP Commands AUTH DA T A EHLO ETRN EXPN HELO HELP MAIL NOOP QUIT RCPT RSET SAML SEND SOML TURN VRFY Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 136 12.4.2.3 T raceroute T raceroute is a utility used to determine th e path a packet takes between two endpoints. Sometimes when a packet filter firewall is conf igured inc[...]

Prestige 660H/HW Series User’s Guide 137 Chapter 12 Firewalls Figure 61 S tateful Inspection The previous figure shows the Prestige’ s default firewall rules in action as well as demonstrates how stateful inspection works. User A can initiate a T elnet session from within the LAN and responses to this request are allowe d. However other T elnet[...]

Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 138 temporary entries might be modified, in order to permit only packets that a re valid for the current state o f the connection. 8 Any additional inbound or outb ound packets that belong to the connection are inspected to update the state table entry and to modify the temporary inbound a[...]

Prestige 660H/HW Series User’s Guide 139 Chapter 12 Firewalls When the Prestige receives any subsequent packet (from the In ternet or from the LAN), its connection information is extracted and checked against the cache. A packet is only allowed to pass through if it corresponds to a valid connection (that is, if i t is a response to a connection [...]

Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 140 • Limit who can telnet into your router . • Don't enable any local service (such as SN MP or NTP) that you don't use. An y enabled service could present a potential sec urity risk. A determined hacker might be able to find creative ways to misuse the enabled services to a[...]

Prestige 660H/HW Series User’s Guide 141 Chapter 12 Firewalls • Always shred confidential in formation, particularly about your computer , before throwing it away . Some hackers dig through the trash of companies or individuals for information that might he lp them in an attack. 12.7 Packet Filtering Vs Firewall Below are some comparisons betwe[...]

Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 142 • A range of source an d destination IP address es as well as port numbers can be specified within one firewall rule making the fire wall a better choice when complex rules are required. • T o selectively block/allow inbound o r outbound traf fic between inside host/networks and ou[...]

Prestige 660H/HW Series User’s Guide 143 Chapter 12 Firewalls[...]

Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 144 C HAPTER 13 Firewall Configuration This chapter shows you how to enable and configure the Prestige firewall. 13.1 Access Methods The web configurator is, by far , the most co mprehensive firewall configuration tool your Prestige has to offer . For this reason, it is reco [...]

Prestige 660H/HW Series User’s Guide 145 Chapter 13 Firewall Configu r ation Note: If you configure firewall rules wit hout a good understanding of how they work, you might inadvertently introduce securi ty risks to the f irewall and to the protected network. Make sure you test your rules af ter you configure them. For example, you may create rul[...]

Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 146 4 Does a rule that allows Internet users acces s to resources on the LAN create a security vulnerability? For example, if FTP ports (TCP 20, 21) are al lowed from the Internet to the LAN, Internet users may be able to connect to computers with running FTP servers. 5 Does [...]

Prestige 660H/HW Series User’s Guide 147 Chapter 13 Firewall Co nfiguration 13.4.1 LAN to W AN Rules The default rule for LAN to W AN traffic is that all use rs on the LAN are allowed non- restricted access to the W AN. When you config ure a LAN to W AN rule, you in essenc e want to limit some or all users from accessing cer tain services on the [...]

Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 148 13.4.3 Alert s Alerts are reports on events, such as attacks, that you may want to know about right away . Y ou can choose to generate an alert when an attack is detected in the Edit Rule screen ( select the Send Alert Message to Administrator When Matched checkbox) or wh[...]

Prestige 660H/HW Series User’s Guide 149 Chapter 13 Firewall Co nfiguration 13.6 Rule Summary Note: The ordering of your rule s is very important as rules are applie d in turn. Click on Fire wall , then Rule Summary to bring up the following screen. This screen is a summary of the existing rules. Note the order in which the rules are listed. Figu[...]

Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 150 The following table describes the labels in this screen. Table 41 Rule Summary LABEL DESCRIPTION Firewall Rules S torage Sp ace in Use This read-only bar shows how much of the Prestige' s memory for recording fire wall rules it is currently usin g. When you are us in[...]

Prestige 660H/HW Series User’s Guide 151 Chapter 13 Firewall Configu r ation 13.6.1 Configuring Firewall Rules Follow these directions to create a new rule. 1 In the Rule Summary screen, type the index number for where you want to put the rule. For example, if you type “6”, your new rule becomes number 6 and the previous rule 6 (i f there is [...]

Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 152 Figure 66 Firewall: Edit Rule[...]

Prestige 660H/HW Series User’s Guide 153 Chapter 13 Firewall Co nfiguration The following table describes the labels in this screen. Table 42 Firewall: Edit Rule LABEL DESCRIPTION Active Select this option to ena ble this firewall rule. Action for Matched Packet Use the radio button to select whether to disca rd ( Block ) o r allow the passage of[...]

Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 154 13.7 Customized Services Configure customized services and port numb ers not predefined by the Prestige. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. For further inform ation on these services, please [...]

Prestige 660H/HW Series User’s Guide 155 Chapter 13 Firewall Co nfiguration Figure 68 Firewall: Configure Customized Services The following table describes the labels in this screen. Table 44 Firewall: Configure Customized Services LABEL DESCRIPTION Service Na me T ype a unique name for your custom port. Service T ype C hoose the IP port ( TCP , [...]

Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 156 Figure 69 Firewall Example: Rule Summary 3 In the Rule Summary screen, type the index number for where you want to put the rule. For example, if you type “6”, your new rule becomes number 6 and the previous rule 6 (i f there is one) becomes rule 7. 4 Click Inser t to [...]

Prestige 660H/HW Series User’s Guide 157 Chapter 13 Firewall Co nfiguration Figure 70 Firewall Example: Edit Ru le: Des tination Addres s 7 In the Edit Rule screen, click the Customized Servic es link to open the Customized Service screen. 8 Click an index numb er to display the Customized Services -Config screen and configure the screen as follo[...]

Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 158 Figure 72 Firewall Example: Edit Rule: Select Customized Services Note: Custom ports show up with an “*” before their names in the Services list box and the Rule Summary list box. Click Apply af ter you’ve created your custom port. On completing the configuration pr[...]

Prestige 660H/HW Series User’s Guide 159 Chapter 13 Firewall Co nfiguration Rule 2 allows a “My Service” connection fro m the W AN to IP addresses 10.0.0.10 through 10.0.0.15 on the LAN. Figure 73 Firewall Example: Rule Summary: My Service 13.10 Predefined Services The A vailable Services list box in the Edit Ru le screen (see Section 13.6.1 [...]

Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 160 CU-SEEME(TCP/UDP:7648, 24032) A popular videocon ferencing solution from White Pines So ftware. DNS(UDP/TCP:53) Domain Name Serve r , a service that matches web names (e.g. www .zyxel.com ) to IP numbers. FINGER(TCP:79) Finger is a UNIX or Internet rela ted command that c[...]

Prestige 660H/HW Series User’s Guide 161 Chapter 13 Firewall Co nfiguration 13.1 1 Anti-Probing If an outside user attempts to probe an unsupp orted port on your Prestige, an ICMP respon se packet is automatically returned. This allows the outside user to know the Prestige exists. The Prestige supports anti-probing, which prevents the ICMP respon[...]

Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 162 Figure 74 Firewall: Anti Probing The following table describes the labels in this screen. Table 46 Firewall: Anti Probing LABEL DESCRIPTION Respond to PING on The Prestige does not respond to any incoming Ping requests when Disable is selected. Select LAN to reply to in c[...]

Prestige 660H/HW Series User’s Guide 163 Chapter 13 Firewall Configu r ation 13.12.1 Threshold V alues T une these para meters when some thing is not working and after y ou have checked the firewall counters. These default values sh ould work fine for most small offices. Factors influencing choices for threshold values are: • The maximum number[...]

Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 164 Whenever the number of half-o pen sessions with the same destin ation host address rises above a threshold ( TCP Maximum Incomplete ), the Prestige starts deleting half-open sessions according to one of the following methods: • If the Blocking Time timeout is 0 (the def[...]

Prestige 660H/HW Series User’s Guide 165 Chapter 13 Firewall Configu r ation One Minute High This is the rate of new h alf-open sessions that causes the firewall to start deleting half-open sessions. When the rate of new connecti on attempts rises above this number , the Prestige deletes half-open sessions as required to accommodate new connectio[...]

Prestige 660H/HW Series User’s Guide Chapter 14 Content Filtering 166 C HAPTER 14 Content Filtering This chapter covers how to configure content filtering. 14.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering gives you the ab ility to block w[...]

Prestige 660H/HW Series User’s Guide 167 Chapter 14 Conte nt Filtering The following table describes the labels in this screen. Table 48 Content Filter: Keywor d LABEL DESCRIPTION Enable Keyword Blocking Select this check box to enabl e this feature. Block Websites that cont ain these keywords in the URL: This box contains the list o f all the ke[...]

Prestige 660H/HW Series User’s Guide Chapter 14 Content Filtering 168 The following table describes the labels in this screen. Table 49 Content Filter: Sched ule LABEL DESCRIPTION Days to Block: Select a check box to configure wh ich days of the week (or eve ryday) you want the content filtering to be active. T ime of Day to Block: Use the 24 hou[...]

Prestige 660H/HW Series User’s Guide 169 Chapter 14 Con tent Filter ing[...]

Prestige 660H/HW Series User’s Guide Chapter 15 Remote Management Configura tion 170 C HAPTER 15 Remote Management Configuration This chapter provides information on config uring remote management. 15.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) from [...]

Prestige 660H/HW Series User’s Guide 171 Chapter 15 Remote Manageme n t Configuration • A filter in SMT menu 3.1 (LAN) or in menu 1 1.5 (W AN) is applied to block a T elnet, FTP or W eb service. • Y ou have disabled that service in one of the remote management screens. • The IP address in the Secured Client IP field does not match th e clie[...]

Prestige 660H/HW Series User’s Guide Chapter 15 Remote Management Configuration 172 15.4 W e b Y ou can use the Prestige’ s embedded web configurator for co nfiguration and file management. See the online help for details. 15.5 Configuring Remote Management Click Remote Management to open the following screen. Figure 80 Remote Manageme nt The f[...]

Prestige 660H/HW Series User’s Guide 173 Chapter 15 Remote Manag ement Configuration[...]

Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 174 C HAPTER 16 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor . 16.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-pe[...]

Prestige 660H/HW Series User’s Guide 175 Chapter 16 Universal Plug-and-Play (UPnP) All UPnP-enabled devices may communicate freely with eac h other without additional configuration. Disable UPnP if this is not your intention. 16.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from th e Universal Plug and Play Forum Creates UPnP™ Implemen[...]

T able 52 Configuring UPnP LABEL DESCRIPTION Enable the Universal Plug and Play (UPnP) Service Select this checkb ox to activate UPnP . Be aware that anyone co uld use a UPnP application to open the web co nfigurator' s login screen without entering the Presti ge's IP address (although you must still e nter the password to access the web [...]

Prestige 660H/HW Series User’s Guide 177 Chapter 16 Universal Plug-and-Play (UPnP) Figure 82 Add/Remove Programs: Windo ws Setup: Communication 3 In the Communications window , select the Universal Plug and Play check bo x in the Components selection box. Figure 83 Add/Remove Programs: Windo ws Setup: Communication: Component s 4 Click OK to go b[...]

Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 178 Inst alling UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP . 1 Click St a r t and Control Panel . 2 Double-click Network Connections . 3 In the Network Connections window , click Advanced in the main menu and select Optional Networking[...]

Prestige 660H/HW Series User’s Guide 179 Chapter 16 Universal Plug-and-Play (UPnP) Figure 85 Windows O ptional Netwo rking Comp onents Wizard 5 In the Networking Services window , select the Universal Plug and Play check box.[...]

Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 180 Figure 86 Networking Servic es 6 Click OK to go back to the W indows Optional Networking Component W izard window and click Next . 16.4 Using UPnP in Windows XP Example This section shows yo u how to use the UPnP feature in W indows XP . Y ou must al ready have UP[...]

Prestige 660H/HW Series User’s Guide 181 Chapter 16 Universal Plug-and-Play (UPnP) Figure 87 Network Connections 3 In the Internet Connection Properties window , click Settings to see the port mappings there were automatically created.[...]

Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 182 Figure 88 Internet Co nnection Prop erties 4 Y ou may edit or delete the port mappings o r click Add to manually add port mappings.[...]

Prestige 660H/HW Series User’s Guide 183 Chapter 16 Universal Plug-and-Play (UPnP) Figure 89 Internet Connection Properties: Advanced Settin gs Figure 90 Internet Connection Properties: Advanced Settin gs: Add 5 When the UP nP-enabled device is disco nnected from your computer , all port mapping s will be deleted automatically . 6 Select Show ico[...]

Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 184 Figure 91 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet co nnection status. Figure 92 Internet Conne ction S tat us Web Configurator Eas y Access W ith UPnP , you can access the web-bas ed configur ator on the Prestige w ithout fi[...]

Prestige 660H/HW Series User’s Guide 185 Chapter 16 Universal Plug-and-Play (UPnP) Figure 93 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for your Prestige and select Invoke . The web configurator login screen displays.[...]

Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 186 Figure 94 Network Con nections: M y Network Places 6 Right-click on the icon for your Prestige and select Pr operties . A properties window displays with basic information about the Prestige. Figure 95 Network Conn ections: My N etwork Places: Properties: Example[...]

Prestige 660H/HW Series User’s Guide 187 Chapter 16 Universal Plug-and-Play (UPnP)[...]

Prestige 660H/HW Series User’s Guide Chapter 17 Logs Scre ens 188 C HAPTER 17 Logs Screens This chapter contains inform ation about configuring genera l log settings and viewing the Prestige’ s logs. Refer to the appendix for example log message explanations. 17.1 Logs Overview The web confi gurator allows you to choose which c ategories of eve[...]

Prestige 660H/HW Series User’s Guide 189 Chapter 1 7 Logs Scre ens Figure 96 Log Settings The following table describes the fields in this screen. Table 53 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below . If this field is left blan k, logs[...]

Prestige 660H/HW Series User’s Guide Chapter 17 Logs Scre ens 190 17.3 Displaying the Logs Click Logs and then Vi e w L o g to open the Vi e w L o g s screen. Use the Vi e w L o g s screen to see the logs for the categorie s that you selected in the Log Settings screen (s ee Section 17.2 on page 188 ). Log entries in red indicate alerts . The log[...]

Prestige 660H/HW Series User’s Guide 191 Chapter 1 7 Logs Scre ens Figure 97 Vi ew Logs The following table describes the fields in this screen. Table 54 View Logs LABEL DESCRIPTION Display Th e categories that you select in the Log Settings screen (see Section 17.2 on page 188 ) display in the drop-down list box. Select a category of logs to vie[...]

Prestige 660H/HW Series User’s Guide Chapter 17 Logs Scre ens 192 17.4.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edit the subject title. • The date format here is Day-Month-Y ear . • The date format her[...]

Prestige 660H/HW Series User’s Guide 193 Chapter 1 7 Logs Scr eens[...]

Prestige 660H/HW Series User’s Guide Chapter 18 Media Bandwid th Manage ment Advan ced Setup 194 C HAPTER 18 Media Bandwid th Management Advanced Setup This chapter describes the functions and advan ced configuration of bandwidth man agement. 18.1 Bandwid th Management Advanced Setup Overview Bandwidth management allo ws you to allocate an interf[...]

Prestige 660H/HW Series User’s Guide 195 Chapter 18 Media Bandwidth Manag ement Advanced Setup you configure child-classes with filters for any classes that you configure without filters. The Prestige leaves the bandwidth bud get allocated and unused for a class that does not have a filter itself or child-classes with filters. V iew your configur[...]

Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 196 Figure 100 Subnet-based Ba ndwidt h Management Example 18.4.3 Application and Subn et-based Bandwid th Management Example The following example uses bandw idth classes based on LAN subnets and applications (specific applications in each subnet ar e al[...]

Prestige 660H/HW Series User’s Guide 197 Chapter 18 Media Bandwidth Manag ement Advanced Setup 18.5 Scheduler The scheduler divides up an interface’ s bandwi dth among the bandwidth classes. The Prestige has two types of schedule r: fair ness-based and priority-based. 18.5.1 Priority-based Scheduler W ith the priority-based scheduler , the Pres[...]

Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 198 18.6.2 Maximize Ba ndwid th Usag e Example Here is an example of a Prestige that has ma xi mized bandwidth usage ena bled on an interface. The first figure shows each bandwidth class’ s bandwidth bu dget and pr iority . The classes are set up based [...]

Prestige 660H/HW Series User’s Guide 199 Chapter 18 Media Bandwidth Manag ement Advanced Setup Figure 103 Maximize Bandwid th Usage Example 18.7 Bandwid th Borrowing Bandwidth borrowing allows a child-class to borrow unused bandwidth from its parent class, whereas maximize bandwidth usage allows bandwidth classes to bo rrow any unused or unbudget[...]

Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 200 Figure 104 Bandwidth Borrowing Example • The Administration and Sales classes canno t borrow unused bandwidt h from the Root class because the Administration and Sale s classes has bandwidth borrowing disabled. • The Marketing and R&D clas ses[...]

Prestige 660H/HW Series User’s Guide 201 Chapter 18 Media Bandwidth Manag ement Advanced Setup Figure 105 Media Bandwid th Management: Summary The following table describes the labels in this screen. Table 57 Media Bandwid th Management: Summary LABEL DESCRIPTION LAN WLAN WA N These read-only labels represent the physical inte rfaces. Select an i[...]

Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 202 18.9 Configuring Class Setup The class setup screen displays the configured band width classes by individual interface. Select an interface and click the buttons to pe rform the actions described n ext. Click “+” to expand the class tree or click [...]

Prestige 660H/HW Series User’s Guide 203 Chapter 18 Media Bandwidth Manag ement Advanced Setup 18.9.1 DiffServ DiffServ is a class of service (CoS) mode l that ma rks packets so that the y receive specific per- hop treatment at DiffServ-compliant network de vices along the route based on the application types and traf fic flow . Packets are marke[...]

Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 204 Figure 108 Media Bandwid th Management: Class Configuration The following table describes the labels in this screen Table 59 Media Bandwid th Management: Class Configuration LABEL DESCRIPTION Class Name Use the auto-generated name or en ter a descript[...]

Prestige 660H/HW Series User’s Guide 205 Chapter 18 Media Bandwidth Manag ement Advanced Setup Enable DiffSer v Marking Select this option to enable DiffServ marking on the Presti ge. DiffSer v Mark Select the marking ru le from the drop -down list. The first three digits are the DiffServ code point. A packet with the lo west priority mark will b[...]

Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 206 18.9.3 Media Bandwid th Management St atistics Use the Media Bandwidth Management S tatistics screen to view network performance information. Click the S tatistics button in the Clas s Setup screen to open the St a t i s t i c s screen. Apply Click Ap[...]

Prestige 660H/HW Series User’s Guide 207 Chapter 18 Media Bandwidth Manag ement Advanced Setup Figure 109 Media Bandwid th Management S tatistics The following table describes the labels in this screen. T able 61 Media Bandwidth Management S tatistics LABEL DESCRIPTION Class Name This field displays the name of the class the statistics p age is s[...]

Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 208 Figure 1 10 Media Bandwid th Management: Monito r The following table describes the labels in this screen. T able 62 Media Bandwidth Mana gement: Monitor LABEL DESCRIPTION Interface Select an interface from the drop-down li st box to view the bandwidt[...]

Prestige 660H/HW Series User’s Guide 209 Chapter 18 Media Bandwidth Manag ement Advanced Setup[...]

Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 210 C HAPTER 19 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 19.1 Maintenance Overview The maintenanc e screens can help you view system inform a tion, upload new firmware, manage configuratio n and restart yo[...]

Prestige 660H/HW Series User’s Guide 211 Chapter 19 Maintenance Figure 1 1 1 System S tatus The following table describes the fields in this screen. Table 63 System S tatus LABEL DESCRIPTION System S tatus System Name This is the name of your Prestige. It is for identification purposes.[...]

Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 212 19.2.1 System St atistics Click Show S tatistics in the System S tatus scre en to open the following screen. Read-only information here includes port status and packet specific statistics. Also provided are "system up time" and "poll interval(s)". The Poll Interva[...]

Prestige 660H/HW Series User’s Guide 213 Chapter 19 Maintenance Figure 1 12 System S tatus: Show S tatistics The following table describes the fields in this screen. Table 64 System S tatus: Show S tatistics LABEL DESCRIPTION System up T ime This is the elapsed time the system has been up. CPU Load This fie ld specifies the pe rcentage of CPU uti[...]

Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 214 19.3 DHCP T able Screen DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at star t-up from a server . Y ou can configure the Prestige as a DHCP server or disable it. When configured as a server, the Prestige p[...]

Prestige 660H/HW Series User’s Guide 215 Chapter 19 Maintenance 19.4 Any IP T able Screen Click Maintenance , Any IP . The Any IP table shows cu rrent read-only information (including the IP address and the MAC addr ess) of all network devices that use the Any IP feature to communicate with the Prestige. Refer to Section 6.5 on page 76 for more i[...]

Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 216 Figure 1 15 Association List The following table describes the fields in this screen. T able 67 Association Lis t LABEL DESCRIPTION # This is the index number of an associ ated wireless station. MAC Address This field displays the MAC (Media Access Control) address of an associated w[...]

Prestige 660H/HW Series User’s Guide 217 Chapter 19 Maintenance Figure 1 16 Diagnostic: General The following table describes the fields in this screen. T able 68 Diagnostic: General LABEL DESCRIPTION TCP/IP Address T ype the IP address of a computer that you w ant to ping in order to test a conn ection. Ping Click this button to ping the IP add [...]

Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 218 Figure 1 17 Diagnostic: DSL Line The following table describes the fields in this screen. Table 69 Diagnostic: DSL Line LABEL DESCRIPTION Reset ADSL Line Click this button to reinitialize the ADSL line. The large text box above then displays the progress and results of this operation[...]

Prestige 660H/HW Series User’s Guide 219 Chapter 19 Maintenance 19.7 Firmware Screen Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a .bin extension, for example, "Prestige.bin" . The upload process uses HTTP (Hypertext T ransfer Protocol) and may take up to two minu tes. After a successful uplo[...]

Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 220 The Prestige automatically restarts in this time causing a temporary networ k disconnect. In some operating systems, you may see the following icon on your desktop. Figure 1 19 Network T emporarily Disconnec ted After two minutes, log in again and check your new fi rmware version in [...]

Prestige 660H/HW Series User’s Guide 221 Chapter 19 Maintenance[...]

Prestige 660H/HW Series User’s Guide Chapter 20 Intro ducing the SMT 222 C HAPTER 20 Introducing the SMT This chapter explains how to access and na viga te the System Management T erminal and gives an overview of its menus. 20.1 SMT Introduction T he Prestige’ s SMT (System Managem ent T ermin al) is a menu-driven inte rface that you can access[...]

Prestige 660H/HW Series User’s Guide 223 Chapter 20 Intro ducing the SMT Figure 121 Enter Password : **** Login Screen 20.1.3 Prestige SMT Menu Overview W e use the Prestige 660HW -61 SMT menus in this guide as an example. The SMT menus vary slightly for dif ferent Prestige models. The following figure gives you an overview of the various SMT men[...]

Prestige 660H/HW Series User’s Guide Chapter 20 Intro ducing the SMT 224 Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below . Table 71 Navigati ng the SMT Interface OPERATION KEY STROKE DESCRIPTION Move down to another menu [ENTER] T o move forward to a submenu, type [...]

Prestige 660H/HW Series User’s Guide 225 Chapter 20 Intro ducing the SMT 20.2.1 System Manage ment T erminal Interface Summary T able 73 Main Menu Summary # MENU TITLE DESCRIPTION 1 General Setup Use this menu to set up your general information. 2 W AN Backup Setup Use this menu to setup traffic redirect and dial-back up. 3 LAN Setup Use this men[...]

Prestige 660H/HW Series User’s Guide Chapter 20 Intro ducing the SMT 226 Figure 123 Menu 23.1 - System Security - Change Password Old Password= ? New Password= ? Retype to confirm= ? Enter here to CONFIRM or ESC to CANCEL: Menu 23.1 Change Passwo rd 4 T ype your new system password in the New Password field (up to 30 characters ), and press [ENTE[...]

Prestige 660H/HW Series User’s Guide 227 Chapter 20 Intr oducing the SMT[...]

Prestige 660H/HW Series User’s Guide Chapter 21 Menu 1 G eneral Setu p 228 C HAPTER 21 Menu 1 General Setup Menu 1 - General Setup contains administra tive an d system-related information. 21.1 General Setup Menu 1 — General Setup contains administrative and system-related information (shown next). The System Name field is for identification pu[...]

Prestige 660H/HW Series User’s Guide 229 Chapter 21 Menu 1 G eneral Setup Figure 124 Menu 1 General Setup Menu 1 General Setup System Name= ? Location= Contact Person's Name= Domain Name= Edit Dynamic DNS = No Route IP= Yes Bridge= No Press ENTER to Confirm or ES C to Cancel: Fill in the required fields. Refer to the tabl e shown next for mo[...]

Prestige 660H/HW Series User’s Guide Chapter 21 Menu 1 G eneral Setu p 230 Figure 125 Menu 1.1 Configure Dyn amic DNS Menu 1.1 - Configure Dynamic DNS Service Provider= WWW.Dyn DNS.ORG Active= No Host= EMAIL= USER= Password= ******** Enable Wildcard= No Press ENTER to Confi rm or ESC to Cancel: Follow the instructions in the next tabl e to config[...]

Prestige 660H/HW Series User’s Guide 231 Chapter 21 Menu 1 G eneral Setup[...]

Prestige 660H/HW Series User’s Guide Chapter 22 M enu 2 WAN Backu p Setup 232 C HAPTER 22 Menu 2 W AN Backup Setup This chapter describes how to co nfigure traffic redirect and dial-backup using menu 2 and 2.1. 22.1 Introduction to W AN Backup Setup This chapter explains how to configure the Pr estige for traf fic redirect and dial backup connect[...]

Prestige 660H/HW Series User’s Guide 233 Chapter 22 Menu 2 WAN Backup Setup 22.2.1 T raffic Redirect Setup Configure parameters that determine when th e Prestige will forward W AN traffic to the backup gateway using Menu 2.1 — T raffic Redir ect Setup . Figure 127 Menu 2.1 - Traffi c Redirect Setup Active= No Configuration: Backup Gateway IP A [...]

Prestige 660H/HW Series User’s Guide Chapter 22 M enu 2 WAN Ba ckup Setup 234 Metric This field sets this route's priori ty among the routes the Prestige uses. The metric represents the "cost of transm ission". A router determine s the best route for transmission by choosing a path with th e lowest "cost". RIP routing use[...]

Prestige 660H/HW Series User’s Guide 235 Chapter 22 Menu 2 WAN Backup Setup[...]

Prestige 660H/HW Series User’s Guide Chapter 23 Menu 3 L AN Setup 236 C HAPTER 23 Menu 3 LAN Setup This chapter covers how to configure your wired Local Area Network (LAN) settings. 23.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 — LAN Setup . From the main menu, enter 3 to display menu 3. Figure 128 Menu 3 - LA[...]

Prestige 660H/HW Series User’s Guide 237 Chapter 23 Menu 3 LAN Setup 23.2 Protocol Dependent Ethernet Setup Depending on the proto cols for your applications, yo u need to configure the respective Ethernet Setup, as outlined below . • For TCP/IP Ethernet setup refer to Section 25.6 on page 247 . • For bridging Ethernet setup refer to Chapter [...]

Prestige 660H/HW Series User’s Guide Chapter 23 Menu 3 L AN Setup 238 Follow the instructions in the following table on how to configure th e DHCP fields. Table 78 DHCP Ethernet Setu p FIELD DESCRIPTION DHCP Setup DHCP If set to Server , you r Prestige can assign IP a ddresses, an IP defau lt gateway and DNS servers to Windows 95, Windows NT and [...]

Prestige 660H/HW Series User’s Guide 239 Chapter 23 Menu 3 LAN Setup[...]

Prestige 660H/HW Series User’s Guide Chapter 24 Wirele ss LAN Setup 240 C HAPTER 24 W ireless LAN Setup This chapter covers how to configure wireless LAN settings in SMT menu 3.5. 24.1 Wireless LAN Overview Refer to the chapter on the wireless LAN scr eens for wireless LAN background information. 24.2 Wireless LAN Setup Use menu 3.5 to set up you[...]

Prestige 660H/HW Series User’s Guide 241 Chapter 24 Wireless LAN Setup 24.2.1 Wireless LAN MAC Address Filter The next layer of security is MAC address filter . T o allow a wireless st ation to associate with the Prestige, enter the MAC address of the wireless LAN ada pter on that wireless station in the MAC address table. Channel ID Press [SP AC[...]

Prestige 660H/HW Series User’s Guide Chapter 24 Wirele ss LAN Setup 242 Figure 132 Menu 3.5.1 WLAN MAC Address Filtering Menu 3 .5.1 - WLAN MAC Address Filter Active= No Filter A ction= Allowed Association --------------------------- ----------------------------------------- ------ 1= 00:00:00:00:00:00 13= 00:00:00:00:00:00 25= 00:00:00:00:00:00 [...]

Prestige 660H/HW Series User’s Guide 243 Chapter 24 Wireless LAN Setup[...]

Prestige 660H/HW Series User’s Guide Chapter 25 In ternet Access 244 C HAPTER 25 Internet Access This chapter shows you how to configure the LAN and W AN of your Prestige for Int ernet access . 25.1 Internet Access Overview Refer to the chapters on the web configurat or’ s wizard, LAN and W AN scre ens for more background information on fields [...]

Prestige 660H/HW Series User’s Guide 245 Chapter 25 Internet Access Figure 133 IP Alias Network Example Use menu 3.2.1 to configure IP Alias on your Prestige. 25.4 IP Alias Setup Use menu 3.2 to configure the first netw ork. Move the cursor to Edit IP Alias field and press [ SP ACEBAR] to choose Ye s and press [ENTER] to configure the second an d[...]

Prestige 660H/HW Series User’s Guide Chapter 25 In ternet Access 246 Figure 135 Menu 3.2.1 IP Alias Setup Menu 3.2.1 - IP Alias Setup IP Alias 1= No IP Address= N/A IP Subnet Mask= N/A RIP Direction= N/A Version= N/A Incoming protocol filter s= N/A Outgoing protocol filter s= N/A IP Alias 2= No IP Address= N/A IP Subnet Mask= N/A RIP Direction= N[...]

Prestige 660H/HW Series User’s Guide 247 Chapter 25 Internet Access Figure 136 Menu 1 General Setup Menu 1 - General Setup System Name= ? Location= locatio n Contact Person's Name= Domain Name= Edit Dynamic DNS= No Route IP= Yes Bridge= No Press ENTER to Confirm or ES C to Cancel: 25.6 Internet Access Configuration Menu 4 allows you to enter[...]

Prestige 660H/HW Series User’s Guide Chapter 25 In ternet Access 248 . Table 83 Menu 4 Internet Access Setup FIELD DESCRIPTION ISP’s Name Enter the name of your Internet Service Provider (ISP). This information is for identification purposes only . Encapsulation Press [ SP ACE BAR ] to select the method of encap sulation used by your ISP . Choi[...]

Prestige 660H/HW Series User’s Guide 249 Chapter 25 Internet Access[...]

Prestige 660H/HW Series User’s Guide Chapter 26 Remot e Node Configur ation 250 C HAPTER 26 Remote Node Configuration This chapter covers remo te node configuration. 26.1 Remote Node Setup Overview This section describes the protocol-independent parameters for a remote node. A remote node is required for placing calls to a remote gateway . A remo[...]

Prestige 660H/HW Series User’s Guide 251 Chapter 26 Remote Node Configuration Figure 138 Menu 1 1 Remote Node Setup Menu 11 - Remote N ode Setup 1. MyISP (ISP, SUA) 2. ________ 3. ________ 4. ________ 5. ________ 6. ________ 7. ________ 8. ________ Enter Node # to Edit: 26.2.2 Encap sulation and Multiplexing Scenarios For Internet access you shou[...]

Prestige 660H/HW Series User’s Guide Chapter 26 Remot e Node Configur ation 252 Figure 139 Menu 1 1.1 Remote Node Profile Menu 11.1 - Re mote Node Profile Rem Node Name= MyISP Route= IP Active= Yes Bridge= No Encapsulation= RFC 1483 Edit IP/Bridge= No Multiplexing= LLC-based Edit ATM Options= No Service Name= N/A Edit Advance Options= N/A Incomin[...]

Prestige 660H/HW Series User’s Guide 253 Chapter 26 Remote Node Configuration 26.2.3 Outgoing Au thentication Protocol For obvious reasons, you sho uld employ the strongest authentication protocol possible. However , some vendors’ implementation includ es specific authentication protocol in the user profile. It will disconnect if the negotiated[...]

Prestige 660H/HW Series User’s Guide Chapter 26 Remot e Node Configur ation 254 26.3 Remote Node Network Layer Options For the TCP/IP parameters, perf orm the following steps to edit Menu 1 1.3 – Remote Node Network Layer Options as shown next. 1 In menu 1 1.1, make sure IP is among the protocols in the Route fi eld. 2 Move the cu rs or to the [...]

Prestige 660H/HW Series User’s Guide 255 Chapter 26 Remote Node Configuration 26.3.1 My W AN Addr Sample IP Addresses The following figure uses sample IP addresses to help you understand the field of My W AN Addr in menu 1 1.3. Refer to the previous Figure 21 on page 72 in the web configurator chapter on LAN setup for a brief review of what a W A[...]

Prestige 660H/HW Series User’s Guide Chapter 26 Remot e Node Configur ation 256 Figure 141 Sample IP Addresses for a TC P/IP LAN-to-LAN Connection 26.4 Remote Node Filter Move the cu rs or to the Edit Filter Sets field in menu 1 1 .1, then press [SP ACE BAR] to select Ye s . Press [ENTER] to di splay Menu 1 1.5 – Remote Node Filter . Use Menu 1[...]

Prestige 660H/HW Series User’s Guide 257 Chapter 26 Remote Node Configuration Figure 143 Menu 1 1.5 Remote Node Filter (PPPoA or PPPoE Encapsulation) Menu 11.5 - Remote Node Filter Input Filter Sets: protocol filters= device filters= Output Filter Sets: protocol filters= device filters= Call Filter Sets: protocol filters= device filters= Enter he[...]

Prestige 660H/HW Series User’s Guide Chapter 26 Remot e Node Configur ation 258 Figure 145 Menu 1 1.6 for LLC-based Multip lexing or PPP Encapsulation Menu 11.6 - Remote Node ATM Layer Options VPI/VCI (LLC-Multiplexing or PPP-Encapsulation) VPI #= 0 VCI #= 38 ATM QoS Type= UBR Peak Ce ll Rate (PCR)= 0 Sustain Cell Rate (SCR)= 0 Maximum Burst Size[...]

Prestige 660H/HW Series User’s Guide 259 Chapter 26 Remote Node Configuration Figure 147 Menu 1 1.8 Advance Setu p Options Menu 11.8 - Ad vance Setup Options PPPoE pass-through = No Press ENTER to Con firm or ESC to Cancel: The following table describes the fields in this menu. T able 86 Menu 1 1.8 Advance Setup Optio ns FIELD DESCRIPTION PPPoE p[...]

Prestige 660H/HW Series User’s Guide Chapter 27 Static Route Setup 260 C HAPTER 27 S t atic Route Setup This chapter shows how to setup IP static routes. 27.1 IP S tatic Route Overview Stat ic routes tell the Prestige ro uting information that it cann ot learn automatically through other means. This can arise in cases where RIP is disabled on the[...]

Prestige 660H/HW Series User’s Guide 261 Chapter 27 Static Route Setup Figure 149 Menu 12 S ta tic Route Setup Menu 12 - Static Route Setup 1. IP Static Route 3. Bridge Static Route Please enter s election: From menu 12, select 1 to open Menu 12.1 — IP S tatic Route Setup (show n next). Figure 150 Menu 12.1 IP S tatic Route Setup Menu 12.1 - IP[...]

Prestige 660H/HW Series User’s Guide Chapter 27 Static Route Setup 262 The following table describes the fields for Menu 12.1.1 – Edit IP S tatic Route Setup . T able 87 Menu12.1.1 Edit IP S tatic Route FIELD DESCRIPTION Route # This is the index number of the static route that you chose in menu 12.1. Route Name T ype a descriptive name for thi[...]

Prestige 660H/HW Series User’s Guide 263 Chapter 27 Static Route Setup[...]

Prestige 660H/HW Series User’s Guide Chapter 28 Bridgin g Setup 264 C HAPTER 28 Bridging Setup This chapter shows you how to configure the bridgin g parameters of your Prestige. 28.1 Bridging in General Bridging bases the forwarding decision on th e MAC (Media Access Control), or ha rdware address, while routing does it on the network layer (IP) [...]

Prestige 660H/HW Series User’s Guide 265 Chapter 28 Bridging Setu p Figure 152 Menu 1 1.1 Remote Node Profile Menu 11.1 - Remote Node Profile Rem Node Name= ? Route= IP Active= Yes Bridge= Yes Encapsulation= ENET ENCA P Edit IP/Bridge= No Multiplexing= VC-based Edit ATM Options= No Service Name= N/A Edit Advance Options= N/A Incoming: Telco Optio[...]

Prestige 660H/HW Series User’s Guide Chapter 28 Bridgin g Setup 266 28.2.2 Bridge St atic Route Setup Similar to network layer static routes, a bridging static route tells the Prestige the route to a node before a connectio n is established. Y o u c onfigure b ridge static routes in menu 12.3.1 (go to menu 12, choose option 3, then choose a stati[...]

Prestige 660H/HW Series User’s Guide 267 Chapter 28 Bridging Setu p[...]

Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 268 C HAPTER 29 Network Address T ranslation (NA T) This chapter discusses how to configure NA T on the Prestige. 29.1 Using NA T Y ou must create a firewall rule in addition to setting up SUA/NA T , to allow traffic from the W AN to be forwarded through the Prestig[...]

Prestige 660H/HW Series User’s Guide 269 Chapter 29 Network Addr ess Translation (NAT) Figure 155 Menu 4 Applying NA T for Internet Access Menu 4 - Internet Access Set up ISP's Name= MyIS P Encapsulation= R FC 1483 Multiplexing= LL C-based VPI #= 8 VCI #= 35 ATM QoS Type= UB R Peak Cell Rate (PCR)= 0 Sustain Cell R ate (SCR)= 0 Maximum Burst[...]

T able 90 Applying NA T in Menus 4 & 1 1.3 FIELD DESCRIPTION NA T Press [SP ACE BAR] and th en [ENTER] to select Full Feature if you have multi ple public W AN IP add resses for your Prestige. The SMT uses the address mapping set that you configure and e nter in the A ddress Mapp ing Set field (see Figure 158 on page 271 ). Select None to disab[...]

Prestige 660H/HW Series User’s Guide 271 Chapter 29 Network Addr ess Translation (NAT) Figure 158 Menu 15.1 Addr ess Mapping Sets Menu 15.1 - Address Mapping Sets 1. 2. 3. 4. 5. 6. 7. 8. 255. SUA (read only) Enter Menu Selection Number: 29.3.1.1 SUA Address Mapping Set Enter 255 to display th e next screen (see also Sect ion 29.1.1 on page 268 ).[...]

Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 272 29.3.1.2 User-Defined Address Mapping Set s Now let’ s look at option 1 in menu 15.1. En ter 1 to bring up this menu. W e’ll just look at the differences from the previous menu. Note the extra Action and Select Rule fields mean yo u can configure rules in th[...]

Prestige 660H/HW Series User’s Guide 273 Chapter 29 Network Addr ess Translation (NAT) 29.3.1.3 Ordering Y our Rules Ordering your rules is important because the Pr estige applies the rules in the order that you specify . When a rule matches the current pack et, the Prestige takes the corresponding action and the remaining rules are ignored. If t[...]

Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 274 The following table explains the fields in t his menu. Table 93 Menu 15.1.1.1 Editi ng/Configuring an Individual Rule in a Set FIELD DESCRIPTION Ty p e Press [SP ACE BAR] and then [ENTER] to select from a total of five types. These are the mapping types discusse[...]

Prestige 660H/HW Series User’s Guide 275 Chapter 29 Network Addr ess Translation (NAT) Figure 163 Menu 15.2.1 NA T Server Setup Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address ---------------------- ----------------------------- 1. Default Default 0.0.0.0 2. 21 21 192.168.1.33 3. 0 0 0.0.0.0 4. 0 0 0.0.0.0 5. 0 0 0.0.0.0 [...]

Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 276 29.5.1 Example 1: Internet Access Only In the following Internet access example, you only need one rule where your ILAs (Inside Local addresses) all map to one dynamic IGA (In side Global Address) assigned by your ISP . Figure 165 NA T Exam ple 1 Figure 166 Menu[...]

Prestige 660H/HW Series User’s Guide 277 Chapter 29 Network Addr ess Translation (NAT) Figure 167 NA T Examp le 2 In this case, you do exactly as above (use the convenient pre-configured SUA Only set) and also go to menu 15.2 to specify the Inside Server behind the NA T as shown in the next figure. Figure 168 Menu 15.2.1 S pecifying an Inside Ser[...]

Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 278 Map the other outgoing LAN traffic to IGA3 ( Many : 1 mapping). Y ou also map your third IGA to the web server and mail server on the LAN. T ype Server allows you to specify multiple se rvers, of dif ferent types, to other computers behind NA T on the LAN. The e[...]

Prestige 660H/HW Series User’s Guide 279 Chapter 29 Network Addr ess Translation (NAT) Figure 170 Example 3: Menu 1 1.3 Menu 11.3 - Remote Node Netw ork Layer Options IP Options: Bridge Options: IP Address Assignment= S tatic Ethernet Addr Timeout (min)= 0 Rem IP Addr: 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.0 NAT= Full Feature Addres[...]

Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 280 Figure 172 Example 3: Final Menu 15.1.1 Menu 15.1.1 - Address Mappin g Rules Set Name= Example3 Idx Local Start IP Local End IP Global Start IP Global End IP T ype --- --------------- ------------- --------------- ------- ------- ---- 1. 192.168.1.10 10.132.50.1[...]

Prestige 660H/HW Series User’s Guide 281 Chapter 29 Network Addr ess Translation (NAT) 29.5.4 Example 4: NA T Unfr iendly Application Programs Some applications do not support NA T Mapping using TCP or UDP port address translation. In this case it is better to use Many-to-Many No Overload mapping as port numbers do not change for Many-to-Many No [...]

Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 282 Figure 176 Example 4: Menu 15.1.1 Addre ss Mapping Rules Menu 15.1.1 - Address Mappin g Rules Set Name= Example4 Idx Local Start IP Local End IP Global Start IP Global End IP T ype --- --------------- ------------ --------------- ----------- ---- ---- 1. 192.168[...]

Prestige 660H/HW Series User’s Guide 283 Chapter 29 Network Addr ess Translation (NAT)[...]

Prestige 660H/HW Series User’s Guide Chapter 30 Enablin g the Firewall 284 C HAPTER 30 Enabling the Firewall This chapter shows you how to get started with the Prestige firewall. 30.1 Remote Management and the Firewall When SMT menu 24.1 1 is configured to allow m anagement (see Chapter 37 on page 338 ) and the firewall is enabled: • The firewa[...]

Prestige 660H/HW Series User’s Guide 285 Chapter 30 Enablin g the Firewall Figure 177 Menu 21.2 Firewa ll Setup Menu 21.2 - Firewall Setup The firewall protects against Denial of Service (DOS) attacks w hen it is active. The defa ult Policy sets 1. allow all sessi ons originating from the LAN to the WAN a nd 2. deny all sessio ns originating from[...]

Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 286 C HAPTER 31 Filter Configuration This chapter shows you how to create and apply filters. 31.1 About Filtering Y our Prestige uses filters to deci de whether or not to allow passage of a data packet and/or to make a call. There are two types of fi lter appli cations: data fil[...]

Prestige 660H/HW Series User’s Guide 287 Chapter 31 Filter Configuration Figure 179 Filter Rule Process Y ou can apply up to four filter sets to a partic ular port to block various types of packets. Because each filter set can have up to six rules, you can have a maximum of 24 rules active for a single port. For incoming packets, yo ur Prestige a[...]

Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 288 31.2 Configuring a Filter Set for the Prestige T o configure a filter set, follow the steps shown ne xt. 1 Enter 21 in the main menu to display Menu 21 – Filter and Fir ewall Setup . 2 Enter 1 to display Menu 21.1 – Filt er Set Configuration as shown next. Figure 180 Men[...]

Prestige 660H/HW Series User’s Guide 289 Chapter 31 Filter Configuration Figure 182 NetBIOS_LAN Filter Rules Summary Menu 21.1.3 - Filter Rules S ummary # A Type Filter Rules M m n - - ---- ----------------- ---------------------------------------- --- - - - 1 Y IP Pr=17, SA=0.0.0. 0, SP=137, DA=0.0.0.0, DP=53 N D F 2 N 3 N 4 N 5 N 6 N Enter Filt[...]

Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 290 The protocol dependent filter rules abbreviation are listed as follows: Table 95 Rule Abbreviations Used FILTER TYPE DESCRIPTION IP Pr Protocol SA Source Address SP Source Port Number DA Destination Address DP Destination Port Number GEN Off Offset Len Length 31.4 Configurin[...]

Prestige 660H/HW Series User’s Guide 291 Chapter 31 Filter Configuration 31.4.1 TCP/IP Filter Rule This section shows you how to configure a TCP/IP filter rule. TCP/IP rules allow you to base the rule on the fiel ds in the IP and the upper layer protocol, for example, UDP and TCP headers. T o configure TCP/IP rules, select TCP/IP Filter Rule from[...]

Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 292 The following figure illustrates th e logic flow of an IP filter. Port # T ype the desti nation port of the packets you want to filter . The fie ld range is 0 to 65535. A 0 field i s ignored. Port # Comp Select the comparison to apply to the d est ination port in the packet [...]

Prestige 660H/HW Series User’s Guide 293 Chapter 31 Filter Configuration Figure 185 Executing an IP Filter 31.4.2 Generic Filter Rule This section shows you how to co nfigure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP , it is generally easier to us e the IP rules directly . For generic rul[...]

Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 294 T o configure a generic rule select an empty filter set in menu 21, for example 5. Select Generic Filter Rule in the Filter T ype field and press [ENTER] to open Menu 21.1.5.1 – Generic Filter Rule , as shown in th e following figure. Figure 186 Menu 21.1.5.1 Gener ic Filt[...]

Prestige 660H/HW Series User’s Guide 295 Chapter 31 Filter Configuration 31.5 Filter T ypes and NA T There are two classes of filter rules, Generic Filter Device rules and Protocol Filter ( TCP/IP ) rules. Generic Filter rules act on the raw data from/ to LAN and W AN. Protocol Filter rules act on IP packets. When NA T (Network Address T ranslati[...]

Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 296 Figure 188 Sample T elnet Filter 1 Enter 1 in the menu 21 to display Menu 21.1 — Fi lter Set Configuration . 2 Enter the index number of th e filter set you want to configure (in this case 6) . 3 T ype a descriptive name or comment in the Edit Comments field (for example, [...]

Prestige 660H/HW Series User’s Guide 297 Chapter 31 Filter Configuration 2 Go to the Edit Filter Sets field, press [SP ACE BAR] to choose Ye s and press [ENTER]. This brings you to menu 1 1.5. Apply the example filter set (for example, filter set 3) in this menu as shown in the next section. This shows you that you have configured and activated ([...]

Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 298 31.7.1 Ethernet T raffic Y ou seldom need to filter Ethernet traffic; however , the filter sets may be useful to block certain packets, reduce traffic and prevent secur ity breaches. Go to me nu 3.1 (shown next ) and type the number(s) of the filter set (s) that you want to [...]

Prestige 660H/HW Series User’s Guide 299 Chapter 31 Filter Configuration[...]

Prestige 660H/HW Series User’s Guide Chapter 32 SNMP Configuration 300 C HAPTER 32 SNMP Configuration This chapter explains SNMP Configuratio n menu 22. 32.1 About SNMP Simple Network Management Protocol (SNM P) i s a protocol u sed for exchanging management information b etween network devices. SNMP is a member of the TCP/IP protocol suite. Y ou[...]

Prestige 660H/HW Series User’s Guide 301 Chapter 32 SNMP Configu ration The managed devices cont ain object variables/ managed objects that define each piece of information to be collected ab out a device. Examples of vari ables include the number of packets received, node port status etc. A Ma nagement Information Ba se (MIB) is a collection of [...]

Prestige 660H/HW Series User’s Guide Chapter 32 SNMP Configuration 302 Figure 194 Menu 22 SNMP Configura tion Menu 22 - SNMP Configuration SNMP: Get Community= public Set Community= public Trusted Host= 0.0.0.0 Trap: Community= public Destination= 0.0.0.0 Press ENTER to Confirm or ES C to Cancel: The following table describes the SNMP configurati[...]

Prestige 660H/HW Series User’s Guide 303 Chapter 32 SNMP Configu ration The port number is its interface index under the interface group. T able 101 Ports and Pe rmanent V irtual Circuit s PORT PVC (PERMANENT VIRTUAL CIRCUIT) 1 Ethernet LAN 2 1 3 2 … … 13 12 14 xDSL 5 authenticationFailure ( defined in RFC-1215 ) A trap is sent to the manager[...]

Prestige 660H/HW Series User’s Guide Chapter 33 Sy stem Security 30 4 C HAPTER 33 System Security This chapter describes how to configur e the system security on the Prestige. 33.1 System Security Y ou can configure the system password.. 33.1.1 System Password Enter 23 in the main menu to display Menu 23 – System Security . Y ou should change t[...]

Prestige 660H/HW Series User’s Guide 305 Chapter 33 System Security Figure 196 Menu 23.2 System Security: RADIUS Server Menu 23.2 - System Security - RADIUS Server Authentication Server: Active= No Server Addre ss= 10.11.12.13 Port #= 1812 Shared Secre t= ******** Accounting Ser ver: Active= No Server Addre ss= 10.11.12.13 Port #= 1813 Shared Sec[...]

Prestige 660H/HW Series User’s Guide Chapter 33 Sy stem Security 30 6 33.1.3 IEEE802.1x The IEEE802.1x standards outline enhanced secur ity methods for both the authentication of wireless stations and en cryption key managemen t. Follow the steps below to enable EA P authentication on your Prestige. 1 From the main menu, enter 23 to display Menu2[...]

Prestige 660H/HW Series User’s Guide 307 Chapter 33 System Security T able 103 Menu 23.4 System Se curity : IEEE802.1x FIELD DESCRIPTION Wireless Port Control Press [SP ACE BAR] and select a securi ty mode for the wireless LAN access. Select No Authentication Required to allow any wi reless st ations access to your wired network without entering [...]

Prestige 660H/HW Series User’s Guide Chapter 33 Sy stem Security 30 8 Once you enable user authenticatio n, you need to specify an exte rnal RADIUS server or create local user accounts on the Prestige for authentication. 33.2 Creating User Account s on the Prestige By storing user profiles locally , your Prestige is able to authenticate wireless [...]

Prestige 660H/HW Series User’s Guide 309 Chapter 33 System Security Figure 199 Menu 14 Dial-in User Setup Menu 14 - D ial-in User Setup 1. ________ 9. ____ ____ 17. ________ 25. _____ ___ 2. ________ 10. ____ ____ 18. ________ 26. _____ ___ 3. ________ 11. ____ ____ 19. ________ 27. _____ ___ 4. ________ 12. ____ ____ 20. ________ 28. _____ ___ 5[...]

Prestige 660H/HW Series User’s Guide Chapter 34 System Information and Diagnosis 310 C HAPTER 34 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. 34.1 Overview These tools include updates on system status , port status, log and trace capabiliti es and upgrades for the system sof[...]

Prestige 660H/HW Series User’s Guide 311 Chapter 34 System Information and Diagnosis The following table describes the fields present in Menu 24.1 — System Maintenance — St a t u s which are read-only and meant for diagnostic p urposes. Figure 202 Menu 24.1 System Maintena nce : S tatus Menu 24.1 - System Maintenance - Status 03:53:21 Sat. Ja[...]

Prestige 660H/HW Series User’s Guide Chapter 34 System Information and Diagnosis 312 34.3 System Information T o get to the System Information: 1 Enter 24 to display Menu 24 — System Maintenance . 2 Enter 2 to display Menu 24.2 — System Information a nd Console Port Speed. From this menu you have two ch oices as shown in the ne xt figure: Fig[...]

Prestige 660H/HW Series User’s Guide 313 Chapter 34 System Information and Diagnosis Figure 204 Menu 24.2.1 System Maintena nce: Information Menu 24.2.1 - System Maintenance - Information Name: P6 60HW Routing: IP ZyNOS F/ W Version: V3.40(PE.8) | 12/23/2004 ADSL Chi pset Vendor: TI AR7 03.00.09.00 Standard : Multi-Mode LAN Ethern et Address: 00:[...]

Prestige 660H/HW Series User’s Guide Chapter 34 System Information and Diagnosis 314 Figure 205 Menu 24.2.2 System Maintena nce : Change Console Port S peed Menu 24.2.2 – System Mainten ance – Change Console Port Speed Console Port Speed : 9600 Press ENTER to Confirm or ES C to Cancel: Once you change the Prestige console port speed , you mus[...]

Prestige 660H/HW Series User’s Guide 315 Chapter 34 System Information and Diagnosis Figure 207 Sample Error an d Informat ion Message s 53 Sat Jan 01 00:00:03 200 0 PP01 -WARN SNMP TRAP 0: cold start 54 Sat Jan 01 00:00:03 200 0 PP01 INFO main: init completed 55 Sat Jan 01 00:00:03 200 0 PP01 INFO Starting Connectivity Monit or 56 Sat Jan 01 00:[...]

Prestige 660H/HW Series User’s Guide Chapter 34 System Information and Diagnosis 316 Figure 209 Syslog Example 1 - CDR SdcmdSyslogSend ( SYSLOG_CDR, SYSLOG _INFO, String); String = board xx line xx channel xx , call xx, str board = the hardware board ID line = the WAN ID in a board Channel = channel ID within the WAN call = the call reference nu [...]

Prestige 660H/HW Series User’s Guide 317 Chapter 34 System Information and Diagnosis 34.5 Diagnostic The diagnostic facility allows you to test the di f ferent aspects of your Prestige to determine if it is working properly . Menu 24.4 allows y o u to choose among v arious types of diagnostic tests to evaluate your system, as shown in the followi[...]

Prestige 660H/HW Series User’s Guide Chapter 34 System Information and Diagnosis 318 The following table describes the diagnostic tests available in menu 24.4 for and the connections. T able 108 Menu 24.4 System Maintenance Menu: Diagnostic FIELD DESCRIPTION Reset xDSL Re-initialize the xDSL link to the telephone company . Ping Host Ping th e hos[...]

Prestige 660H/HW Series User’s Guide 319 Chapter 34 System Information and Diagnosis[...]

Prestige 660H/HW Series User’s Guide Chapter 35 Firm ware and Configuration File Maintenance 320 C HAPTER 35 Firmware and Configuration File Maintenance This chapter tells y ou how to backup and restor e your configuration file as well as upload new firmware and configuration files. 35.1 Filename Conventions The configuration file (often ca lled [...]

Prestige 660H/HW Series User’s Guide 321 Chapter 35 Firmw are and Configu ration File Mainten ance The following table is a summary . Please note that the internal filename refe rs to the filename on the Prestige and the external filename refers to the filename not on the Prestige, that is, on your computer , local network or FTP site and so the [...]

Prestige 660H/HW Series User’s Guide Chapter 35 Firmwa re and Configuration F ile Maintenance 322 Figure 21 1 T elnet in Menu 24.5 Menu 24.5 - System Maintenan ce - Backup Configuration To transfer the configurati on file to your workstation, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and th[...]

Prestige 660H/HW Series User’s Guide 323 Chapter 35 Firmw are and Configu ration File Mainten ance Figure 212 FTP Session Example 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel.rom 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 16384 bytes sent in 1.1 0Sec[...]

Prestige 660H/HW Series User’s Guide Chapter 35 Firm ware and Configuration File Maintenance 324 35.2.6 Backup Configuration Using TFTP The Prestige support s the up/downloading of the firmware and the configuration file using TFTP (T rivial File T ransfer Protocol) over LA N. Although TFTP should work over W AN as well, it is not recommended. T [...]

Table 111 General Commands for GUI-based TFTP Clients COMMAND DESCRIPTION Host Enter the IP address of the Prestige. 192 .168. 1.1 is the Prestige’s default IP address when shipped. Send/Fetch Use “Send” to upload the file to the Prestige and “Fetch” to back up the file on your computer . Local File En ter the path and name of the firmwar[...]

Prestige 660H/HW Series User’s Guide Chapter 35 Firmwa re and Configuration F ile Maintenance 326 Figure 213 T elnet into M enu 24.6 Menu 24.6 -- System Maintena nce - Restore Configuration To transfer the firmware and configuration file to your workstation, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "o[...]

Prestige 660H/HW Series User’s Guide 327 Chapter 35 Firmw are and Configu ration File Mainten ance 35.4 Uploading Firmware and Configuration Files This section shows yo u how to upload firmware and co nfiguration files. Y ou can upload configuration files by following the procedure in Section 35.2 on page 321 or by following the instructions in M[...]

Prestige 660H/HW Series User’s Guide Chapter 35 Firmwa re and Configuration F ile Maintenance 328 Figure 216 T elnet Into Menu 24.7.2 System Maintenance Menu 24.7.2 - System Mainten ance - Upload System Configuration File To upload the system configu ration file, follow the procedure below: 1. Launch the FTP client o n your workstation. 2. Type &[...]

Prestige 660H/HW Series User’s Guide 329 Chapter 35 Firmw are and Configu ration File Mainten ance 35.4.4 FTP Session Exampl e of Firmware File Upload Figure 217 FTP Session Example of Firmware File Upload 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> put firmware.bin ras 200 Port command okay 150 Opening data c[...]

Prestige 660H/HW Series User’s Guide Chapter 35 Firm ware and Configuration File Maintenance 330 35.4.6 TFTP Upload Command Example The following is an example TFTP command: tftp [-i] host put firmware.bin ras where “ i ” specifies binary image transfer mode (use this mode when transferring binary files), “ host ” is the Prestige’ s IP [...]

Prestige 660H/HW Series User’s Guide 331 Chapter 35 Firmw are and Configu ration File Maint enance[...]

Prestige 660H/HW Series User’s Guide Chapter 36 System Main tenance 332 C HAPTER 36 System Maintenance This chapter leads you through SM T menus 24.8 to 24.10. 36.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the ma in system firmware. The CI provides much of the same functionality as the SMT , while a dding some low-level [...]

Prestige 660H/HW Series User’s Guide 333 Chapter 36 System Mainte nance 36.2 Call Control Support Call Control Support is only applicable when Encapsulation is set to PPPoE in menu 4 or menu 1 1 .1. The budget management func tion allows you to set a limit on the total outgoing call time of the Prestige within certain times. When the to tal outgo[...]

Prestige 660H/HW Series User’s Guide Chapter 36 System Main tenance 334 The total budget is the time li mit on the accumulated time for ou tgoing calls to a remo te node. When this limit is reached, th e call will be dropped and further outgoing calls to that remote node will be blocked. After each period, the total budget is re set. The default [...]

Prestige 660H/HW Series User’s Guide 335 Chapter 36 System Mainte nance Figure 223 Menu 24.10 System Maintenance : T ime and Date Setting Menu 24.10 - System Maintena nce - Time and Date Setting Use Time Server when B ootup= None Time Server Address= N /A Current Time: 00 : 51 : 24 New Time (hh:mm:ss): 00 : 51 : 19 Current Date: 2000 - 01 - 01 Ne[...]

Prestige 660H/HW Series User’s Guide Chapter 36 System Mainte nance 336 • 24-hour intervals after starting.[...]

Prestige 660H/HW Series User’s Guide 337 Chapter 36 System Main tenance[...]

Prestige 660H/HW Series User’s Guide Chapter 37 Remo te Management 338 C HAPTER 37 Remote Management This chapte r covers re mote mana gement (SM T menu 24. 11). 37.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) from which computers. When you configure [...]

Prestige 660H/HW Series User’s Guide 339 Chapter 37 Remote Manageme nt Figure 224 Menu 24.1 1 Remote Ma nagement Control Menu 24.11 - Remote Manageme nt Control TELNET Server: Server Port = 23 Server Access = LAN only Secured Client IP = 0.0.0 .0 FTP Server: Server Port = 21 Server Access = LAN only Secured Client IP = 0.0.0 .0 Web Server: Server[...]

Prestige 660H/HW Series User’s Guide Chapter 37 Remo te Management 340 37.3 Remote Management and NA T When NA T is enabled: • Use the Prestige’ s W A N IP address when configuring from the W AN. • Use the Prestige’ s LAN IP address when configurin g from the LAN. 37.4 System T imeout There is a default system management idle tim eout of [...]

Prestige 660H/HW Series User’s Guide 341 Chapter 37 Remote Manag ement[...]

Prestige 660H/HW Series User’s Guide Chapter 38 IP Policy Routing 342 C HAPTER 38 IP Policy Routing This chapter covers setting and appl ying policies used for IP routing. 38.1 IP Policy Routing Overview T raditionally , routing is based on the destinatio n address only and the IAD takes the shortest path to forward a packet. IP Routing Polic y ([...]

Prestige 660H/HW Series User’s Guide 343 Chapter 38 IP Policy Routing • routing the packet to a dif ferent gateway (and hence the outgoing interface). • setting the TO S and precedence fields in the IP header . IPPR follows the existing packet filtering facility of RAS in st yle and in impl ementation. The policies are divided into sets, wher[...]

Prestige 660H/HW Series User’s Guide Chapter 38 IP Policy Routing 344 Figure 226 Menu 25.1 IP Routing Po licy Setup Menu 25.1 - IP Routing Polic y Setup # A Criteria/Action - - ----------------------- ----------------------------------------- ------ 1 Y SA=1.1.1.1-1.1.1.1,DA=2 .2.2.2-2.2.2.5 SP=20-25,DP=20-25,P=6,T =NM,PR=0 |GW=192.168.1.1,T=M T,[...]

Prestige 660H/HW Series User’s Guide 345 Chapter 38 IP Policy Routing Figure 227 Menu 25.1.1 IP Routing Po licy Menu 25.1.1 - IP Routing Pol icy Policy Set Name= test Active= No Criteria: IP Protocol = 0 Type of Service= Don't C are Packet length= 0 Precedence = Don't C are Len Comp= N/A Source: addr start= 0.0.0.0 end= N/A port start= [...]

Prestige 660H/HW Series User’s Guide Chapter 38 IP Policy Routing 346 38.5 Applying an IP Policy This section shows yo u where to apply the IP policies after you design them. 38.5.1 Ethernet IP Policies From Menu 3 — Ethernet Setup , type 2 to go to Menu 3.2 — TCP/IP and DHCP Ethernet Setup . Y ou can choose up to four IP policy sets (from 12[...]

Prestige 660H/HW Series User’s Guide 347 Chapter 38 IP Policy Routing Figure 228 Menu 3.2 TCP/IP and DHCP Ethernet Se tup Menu 3.2 - TCP/IP and DHCP S etup DHCP Setup DHCP= Server Client IP Pool Sta rting Address= 192.168.1.33 Size of Client IP Pool= 32 Primary DNS Server = 0.0.0.0 Secondary DNS Serv er= 0.0.0.0 Remote DHCP Server = N/A TCP/IP Se[...]

Prestige 660H/HW Series User’s Guide Chapter 38 IP Policy Routing 348 Route 1 represents the default IP route and route 2 represents the configured IP route. Figure 230 Example of IP Policy Routing T o force packets coming from clients with IP addresses of 192.168.1.33 to 192.16 8.1.64 to be routed to the Internet via the W AN port of the Prestig[...]

Prestige 660H/HW Series User’s Guide 349 Chapter 38 IP Policy Routing Figure 231 IP Routing Policy Example Menu 25.1.1 - IP Ro uting Policy Policy Set Name= s et1 Active= Yes Criteria: IP Protocol = 6 Type of Service= Don't Care Precedence = Don't Care Source: addr start= 19 2.168.1.2 port start= 0 Destination: addr start= 0.0.0.0 port [...]

Prestige 660H/HW Series User’s Guide Chapter 38 IP Policy Routing 350 Figure 232 IP Routing Policy Example Menu 25.1.1 - IP Routing Pol icy Policy Set Name= s et2 Active= Yes Criteria: IP Protocol = 6 Type of Service= Don't Care Precedence = Don't Care Source: addr start= 0.0.0.0 port start= 0 Destination: addr start= 0.0.0.0 port start[...]

Prestige 660H/HW Series User’s Guide 351 Chapter 38 IP Policy Routing[...]

Prestige 660H/HW Series User’s Guide Chapter 39 Call Scheduling 352 C HAPTER 39 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulati on only) allows you to dictate when a remote node should be called and for how long. 39.1 Introduction The call scheduling feature allows the Prestige to manage a remote node and dictate when a[...]

Prestige 660H/HW Series User’s Guide 353 Chapter 39 Call Scheduling T o setup a schedule set, select the schedule set you want to setup from menu 26 (1-12) and press [ENTER] to see Menu 26.1 — Schedule Set Setup as shown next. Figure 235 Menu 26.1 Schedule Set Setup Menu 26.1 Schedule Set Setup Active= Yes Start Date(yyyy-mm-dd)= 2 000 - 01 - 0[...]

Prestige 660H/HW Series User’s Guide Chapter 39 Call Scheduling 354 Once your schedule sets are conf igured, yo u must then apply them to the desired remote node(s). Enter 1 1 from the Main Menu and then enter the tar get remote node index. Using [SP ACE BAR] , select PPPoE or PPPoA in the Encapsulation field and then press [ENTER] to make the sc[...]

Prestige 660H/HW Series User’s Guide 355 Chapter 39 Call Scheduling[...]

Prestige 660H/HW Series User’s Guide Chapter 40 Internal SPTGEN 356 C HAPTER 40 Internal SPTGEN 40.1 Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configuration text file useful for efficient configuration of multiple Prestiges. In ternal SP TGEN lets you configure, save and upload multiple menus at the same [...]

Prestige 660H/HW Series User’s Guide 357 Chapter 40 Inte rnal SPTGEN 40.2.1 Internal SPTGEN File Mo dification - Import ant Point s to Remember Each paramete r you enter must be pr eceded by one “=”sign and one space. Some parameters are dependent on othe rs. For example, if you disable the Configur ed field in menu 1 (see Figure 237 on page [...]

Prestige 660H/HW Series User’s Guide Chapter 40 Internal SPTGEN 358 Figure 240 Internal SP TGEN FTP Download Example c:ftp 192.168.1.1 220 PPP FTP version 1.0 read y at Sat Jan 1 03:22:12 2000 User (192.168.1.1:(none)): 331 Enter PASS command Password: 230 Logged in ftp>bin 200 Type I OK ftp> get rom-t ftp>bye c:edit rom-t (edit the ro[...]

Prestige 660H/HW Series User’s Guide 359 Chapter 40 Intern al SPTGEN[...]

Prestige 660H/HW Series User’s Guide Chapter 41 Trou bleshooting 360 C HAPTER 41 T roubleshooting This chapter covers potential proble ms and the corresponding remedies. 41.1 Problems St arting Up the Prestige Table 118 Troubleshooting the Start-Up of Your Prestige PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I turn on the Prestige. Ma[...]

Prestige 660H/HW Series User’s Guide 361 Chapter 41 Trou bleshooting 41.3 Problems with the DSL LED Table 120 Troubleshooting the DSL LED PROBLEM CORRECTIVE ACTION The DSL LED is off. Check the telepho ne wire and connections between the Prestige DSL port a nd the wall jack. Make sure that the telephone company has checked your phone line and set[...]

Prestige 660H/HW Series User’s Guide Chapter 41 Trou bleshooting 362 41.6 Problems with Internet Access Table 123 Troubleshooting Internet Access PROBLEM CORRECTIVE ACTION I cannot access the Intern et. Make sure the Prestige is turned on and connected to the network. If the DSL LED is off, refer to Section 41.3 on page 361 . V erify your W AN se[...]

Prestige 660H/HW Series User’s Guide 363 Chapter 41 Trou bleshooting 41.8 Problems with the W eb Configurator Table 125 Troubleshooting the Web Configu rator PROBLEM CORRECTIVE ACTION I cannot access the web configurator . Refer to the Quick S tart Gui de for hardware connection s. Make sure that there is not an SMT console session running. Check[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 364 A PPENDIX A S plitters and Microfilters This appendix tells you how to install a POTS splitter or a telephone microfilter . Connecting a POTS S p litter When you use the Full Rate (G .dmt) ADSL standard, you ca n use a POTS (Plain Old T elephone Service) splitter to separate th e[...]

Prestige 660H/HW Series User’s Guide 365 Splitters and Microfilters T elephone Microfilters T elephone voice transmissions take place in the lower frequency ra nge, 0 - 4KHz, while ADSL transmissions take place in the higher bandwidth range, above 4KHz. A microfilter acts as a low-pass filter , for your telephone, to ensu re that ADSL transmissio[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 366 Figure 244 Prestige with ISDN[...]

Prestige 660H/HW Series User’s Guide 367 Splitters and Microfilters[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 368 A PPENDIX B Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you n[...]

Prestige 660H/HW Series User’s Guide 369 Splitters and Microfilters Figure 245 WIndows 95/98 /Me: Networ k: Configu ration Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks. If you need the adapter: 1 In the Net[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 370 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect. Configuring 1 In the Network window Configuration tab, select your network [...]

Prestige 660H/HW Series User’s Guide 371 Splitters and Microfilters Figure 247 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do no t know your gateway’ s IP address, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway field and click Add . 5 Click [...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 372 Figure 248 Windows XP: S tar t Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 249 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

Prestige 660H/HW Series User’s Guide 373 Splitters and Microfilters Figure 250 Windows XP: Control Panel: Network Connections: Proper ties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and click Properties . Figure 251 Windows XP: Local Area Conne ction Properties 5 The Internet Pr otocol TCP/IP Properties window opens ([...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 374 • If you have a static IP address click Use the following IP Address and fill in the IP addr ess , Subnet mask , and Default gateway fields. Click Advanced . Figure 252 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP address , remove any previou[...]

Prestige 660H/HW Series User’s Guide 375 Splitters and Microfilters • Click Obtain D NS server address automatically if you do not know your DNS server IP address(es ). • If you know your DNS server IP address(es), click Use the following DNS server addresses , and type them in the Pr eferred DNS server and Alternate DNS server fields. If you[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 376 Figure 254 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 255 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configur e: list.[...]

Prestige 660H/HW Series User’s Guide 377 Splitters and Microfilters 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address bo x. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your Prestige in the Router address bo x. 5 Clo[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 378 Figure 257 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address bo x. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your Prest[...]

Prestige 660H/HW Series User’s Guide 379 Splitters and Microfilters[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 380 A PPENDIX C IP Subnetting IP Addressing Routers “route” based on the network number . The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (ei ght bits), wri tten in dotted decimal notati[...]

Prestige 660H/HW Series User’s Guide 381 Splitters and Microfilters Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a clas s “B” must begi n with “10”, therefore the first octet of a class “B” address has a[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 382 Since the mask is always a continuous number of ones begin ning from the left, followe d by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writin[...]

Prestige 660H/HW Series User’s Guide 383 Splitters and Microfilters Note: In the following chart s, shaded/bolded last octet bit values indicate host ID bit s “borrowed” to form network ID bit s. The number of “borrowed” host ID bits determines the number of sub nets y ou can have. The remaining number of host ID bits (af ter “borrowing[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 384 Example: Four Subnet s The above exampl e illustrated using a 25-bit subne t mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations [...]

Table 137 Subnet 4 NETWORK NUMBER LAST OCTET BIT V ALUE IP Address 192.168.1. 192 IP Address (Binary) 1 1000000.10101 000.00000001. 11 000000 Subnet Mask (Binary) 11111111 . 11111 111 . 11111111 . 11 000000 Subnet Address: 192.168.1.192 Lowest Host ID: 192.168.1.19 3 Broadcast Address: 192.168.1.255 Highest Host ID: 192.16 8.1.254 Prestige 660H/HW [...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 386 Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet ma sk also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets ava ilable for subnetting and a[...]

Prestige 660H/HW Series User’s Guide 387 Splitters and Microfilters[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 388 A PPENDIX D PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP ov er Ethernet, RFC 2516) from your computer to an A TM PVC (Permanent V irt ual Circuit) whic h connects to a DSL Access Concentrator where th e PPP session terminates ( Figure 258 on page 3[...]

Prestige 660H/HW Series User’s Guide 389 Splitters and Microfilters Figure 258 Single-Compute r per Router Hardwa re Configuration How PPPoE W orks The PPPoE driver makes the Ethernet appea r as a serial link to the computer and the computer runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC). Between the[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 390 A PPENDIX E V irtual Circuit T opology A TM is a connection-oriented te chnology , meaning that it sets up virtual circuits over which end systems communi cate. The terminology for virt ual circuits is as follows: • V irtual Channel Logical connections between A TM switches •[...]

Prestige 660H/HW Series User’s Guide 391 Splitters and Microfilters[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 392 A PPENDIX F Wireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pe ndent (Ad-hoc) WLAN that connects a set of computers with wireless statio[...]

Prestige 660H/HW Series User’s Guide 393 Splitters and Microfilters Figure 262 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This ty[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 394 Figure 263 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.1 1a/b/g wireless devices. Channels available depend on your g eographical area. Y ou may have a choice o f channels (for your region) so you should use a di fferent ch annel th an an ad[...]

Prestige 660H/HW Series User’s Guide 395 Splitters and Microfilters Figure 264 RTS / CT S When station A sends data to the AP , it might no t know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss [...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 396 A large Fragmentation Thr eshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks tha t are prone to interference. If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previous[...]

Prestige 660H/HW Series User’s Guide 397 Splitters and Microfilters IEEE 802.1x In June 2001, the IEEE 802.1x st andard was designed to extend th e features of IEEE 802.1 1 to support extended authentication as well as providing additional accounting and control features. It is supported by W indows XP and a number of network devices. So me advan[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 398 • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access- Request message. The following types of RADIUS messages are exchanged between the a ccess point[...]

Prestige 660H/HW Series User’s Guide 399 Splitters and Microfilters 3 The wireless station replies with identity info rmation, including username and password. The RADIUS server checks the user informa tion against its user profile database and determines whether or not to au thenticate the wireless station. T ypes of Authentication This appendix[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 400 PEAP (Protected EAP) Like EAP-TTLS, server-side certific ate authentication is used to establish a secure connection, then use simple username and p assword methods thro ugh the secured co nnection to authenticate the clients, thus hiding client identity . However , PEAP only sup[...]

Prestige 660H/HW Series User’s Guide 401 Splitters and Microfilters Shared key authentication involves a four -mess age procedure. A wire less station sends a shared key authentication request to the AP , which will then reply with a challenge text message. The wireless station must then use the AP’ s default WEP key to encrypt the challenge te[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 402 WP A User Authentication WP A applies IEEE 802.1x and Extensible Auth entication Protocol (EAP) to authenticate wireless stations using an external RADIUS database. Encryption WP A impr oves data encryption by using T emporal Key Integrity Protoc ol (TKIP) or Advanced Encryption [...]

Prestige 660H/HW Series User’s Guide 403 Splitters and Microfilters Security Parameters Summary Refer to this table to see what other secur ity parameters you shou ld configure for each Authentication Method/ key management prot ocol type. MAC address filters are not dependent on how you config ure these security features. Table 143 Wireless Secu[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 404 Figure 267 Roaming Example The steps below describe the roaming process. 1 As wireless station Y moves from the coverage area of access point P1 to that of access point 2 P2 , it scans and uses the si gnal of access point P2 . 3 Access point P2 acknowledges the presence of wirele[...]

Prestige 660H/HW Series User’s Guide 405 Splitters and Microfilters[...]

Prestige 660H/HW Series User’s Guide Splitters and Microfilters 406 A PPENDIX G Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air . A tran smitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air . The antenna also operates in reverse by capturing RF sign[...]

Prestige 660H/HW Series User’s Guide 407 Splitters and Microfilters T ypes of Antennas For WLAN There are two types of antennas used for wireless LAN applications. • Omni-directional antennas send the RF signal out in all directions on a horizontal p lane. The covera ge area is torus -shaped (lik e a donut) which makes these antennas ideal for [...]

Prestige 660H/HW Series User’s Guide 408 A PPENDIX H Example Internal SPTGEN Screens This appendix covers Prestig e Internal SP TGEN screens. Table 144 Abbreviations Used in the Exam ple Internal SPTGEN Screens Table ABBREVIA TION MEANING FIN Field Identifica tion Number (not seen in SMT screens) FN Field Name PV A Parameter V alues Allowed INPUT[...]

Prestige 660H/HW Series User’s Guide 409 30100007 = Input device filters Set 3 = 256 30100008 = Input device filters Set 4 = 256 30100009 = Output protocol filters Set 1 = 256 30100010 = Output protocol filters Set 2 = 256 30100011 = Output protocol filters Set 3 = 256 30100012 = Output protocol filters Set 4 = 256 30100013 = Output device filter[...]

Prestige 660H/HW Series User’s Guide 410 30201003 = IP Subnet Mask = 0 30201004 = RIP Direction <0(None) | 1(Both) | 2(In Only) | 3(Out Only)> = 0 30201005 = Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 0 30201006 = IP Alias #1 Incoming protocol filters Set 1 = 256 30201007 = IP Alias #1 Incoming protocol filters Set 2 = 256 30201008 =[...]

Prestige 660H/HW Series User’s Guide 411 30201025 = IP Alias #2 Outgoing protocol filters Set 3 = 256 30201026 = IP Alias #2 Outgoing protocol filters Set 4 = 256 */ Menu 3.5 Wireless LAN Setup (SMT Me nu 3.5) 30500001 = ESSID Wireless 30500002 = Hide ESSID <0(No) | 1(Yes)> = 0 30500003 = Channel ID <1|2|3|4|5|6|7 |8|9|10|11|12| 13> =[...]

Prestige 660H/HW Series User’s Guide 412 Table 147 Menu 4 Internet Access Setup ( SMT Menu 4) / Menu 4 Internet Access Setup (SMT Menu 4) FIN FN PVA INPUT 40000000 = Configured <0(No) | 1(Yes)> = 1 40000001 = ISP <0(No) | 1(Yes)> = 1 40000002 = Active <0(No) | 1(Yes)> = 1 40000003 = ISP's Name = ChangeMe 40000004 = Encapsul[...]

Prestige 660H/HW Series User’s Guide 413 40000027 = ATM QoS Type <0(CBR) | (1 (UBR)> = 1 40000028 = Peak Cell Rate (PCR) = 0 40000029 = Sustain Cell Rate (SCR) = 0 40000030 = Maximum Burst Size(MBS) = 0 40000031= RIP Direction <0(None) | 1(Both) | 2(In Only) | 3(Out Only)> = 0 40000032= RIP Ve rsion <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)[...]

Prestige 660H/HW Series User’s Guide 414 120103002 = IP Static Route set #3, Active <0(No) |1(Yes)> = 0 120103003 = IP Static Route set #3, Destination IP address = 0.0.0.0 120103004 = IP Static Route set #3, Destination IP subnetmask = 0 120103005 = IP Static Route set #3, Gateway = 0.0.0.0 120103006 = IP Static Route set #3, Metric = 0 12[...]

Prestige 660H/HW Series User’s Guide 415 FIN FN PVA INPUT 120107001 = IP Static Route set #7, Name <Str> = 120107002 = IP Static Route set #7, Active <0(No) |1(Yes)> = 0 120107003 = IP Static Route set #7, Destination IP address = 0.0.0.0 120107004 = IP Static Route set #7, Destination IP subnetmask = 0 120107005 = IP Static Route set[...]

Prestige 660H/HW Series User’s Guide 416 120110007 = IP Static Route set #10, Private <0(No) |1(Yes)> = 0 */ Menu 12.1.11 IP Static Route Setu p (SMT Menu 12.1.11) FIN FN PVA INPUT 120111001 = IP Static Route set #11, Name <Str> = 120111002 = IP Static Route set #11, Active <0(No) |1(Yes)> = 0 120111003 = IP Static Route set #11[...]

Prestige 660H/HW Series User’s Guide 417 120114004 = IP Static Route set #14, Destination IP subnetmask = 0 120114005 = IP Static Route set #14, Gateway = 0.0.0.0 120114006 = IP Static Route set #14, Metric = 0 120114007 = IP Static Route set #14, Private <0(No) |1(Yes)> = 0 */ Menu 12.1.15 IP Static Route Set up (SMT Menu 12.1. 15) FIN FN [...]

Prestige 660H/HW Series User’s Guide 418 150000007 = SUA Server #3 Active <0(No) | 1(Yes)> = 0 150000008 = SUA Server #3 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000009 = SUA Server #3 Port Start = 0 150000010 = SUA Server #3 Port End = 0 150000011 = SUA Server #3 Local IP addre ss = 0.0.0.0 150000012 = SUA Server #4 Active <0(No) [...]

Prestige 660H/HW Series User’s Guide 419 150000041 = SUA Server #9 Local IP address = 0.0.0.0 150000042 = SUA Server #10 Active <0(No) | 1(Yes)> = 0 150000043 = SUA Server #10 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000044 = SUA Server #10 Port Start = 0 150000045 = SUA Server #10 Port End = 0 150000046 = SUA Server #10 Local IP ad d[...]

Prestige 660H/HW Series User’s Guide 420 210101011 = IP Filter Set 1,Rule 1 Src Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 0 210101013 = IP Filter Set 1,Rule 1 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210101014 = IP Filter Set 1,Rule 1 Act Not Match <1(check next)|2(forward)| 3(drop)> = 1 / Menu 21[...]

Prestige 660H/HW Series User’s Guide 421 210103007 = IP Filter Set 1,Rule 3 Dest Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 1 210103008 = IP Filter Set 1,Rule 3 Src IP address = 0.0.0.0 210103009 = IP Filter Set 1,Rule 3 Src Subnet Mask = 0 210103010 = IP Filter Set 1,Rule 3 Src Port = 0 210103011 = IP Filter Set 1,Rul[...]

Prestige 660H/HW Series User’s Guide 422 210105002 = IP Filter Set 1,Rule 5 Active <0(No)|1(Yes)> = 1 210105003 = IP Filter Set 1,Rule 5 Protocol = 17 210105004 = IP Filter Set 1,Rule 5 Dest IP address = 0.0.0.0 210105005 = IP Filter Set 1,Rule 5 Dest Subnet Mask = 0 210105006 = IP Filter Set 1,Rule 5 Dest Port = 138 210105007 = IP Filter S[...]

Prestige 660H/HW Series User’s Guide 423 210106013 = IP Filter Set 1,Rule 6 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210106014 = IP Filter Set 1,Rule 6 Act Not Match <1(check next)|2(forward)| 3(drop)> = 2 Table 150 Menu 21.1 Filter Set #1 (SMT Men u 21.1) (continued) Table 151 Menu 21.1 Filer Set #2 , (SMT Menu 21.1) / Menu [...]

Prestige 660H/HW Series User’s Guide 424 210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 Active <0(No)|1(Yes)> = 1 210202003 = IP Filter Set 2, Rule 2 Protocol = 6 210202004 = IP Filter Set 2, Rule 2 Dest IP address = 0.0.0.0 210202005 = IP Filter Set 2, Rule 2 Dest Subnet Mask = 0 [...]

Prestige 660H/HW Series User’s Guide 425 210203011 = IP Filter Set 2, Rule 3 Src Port Comp <0(none)|1(equal)|2 (not equal)|3(less)|4(gr eater)> = 0 210203013 = IP Filter Set 2, Rule 3 Act Match <1(check next)|2(forward)|3( drop)> = 3 210203014 = IP Filter Set 2,Rule 3 Act Not Match <1(check next)|2(forward)|3( drop)> = 1 / Menu [...]

Prestige 660H/HW Series User’s Guide 426 210205004 = IP Filter Set 2, Rule 5 Dest IP address = 0.0.0.0 210205005 = IP Filter Set 2, Rule 5 Dest Subnet Mask = 0 210205006 = IP Filter Set 2, Rule 5 Dest Port = 138 210205007 = IP Filter Set 2, Rule 5 Dest Port Comp <0(none)|1(equal)|2 (not equal)|3(less)|4(gr eater)> = 1 210205008 = IP Filter [...]

Prestige 660H/HW Series User’s Guide 427 210206013 = IP Filter Set 2,Rule 6 Act Match <1(check next)|2(forward)|3( drop)> = 3 210206014 = IP Filter Set 2,Rule 6 Act Not Match <1(check next)|2(forward)|3( drop)> = 2 */ Menu 23.1 System Password Setup ( SMT Menu 23.1) FIN FN PVA INPUT 230000000 = System Password = 1234 */ Menu 23.2 Syst[...]

Prestige 660H/HW Series User’s Guide 428 Command Examples The following are example Internal SP TGEN scr eens associated with the Prestige’ s command interpreter commands. Table 152 ci command (for annex a): wan ad sl opencmd /ci command (for annex a): w an adsl opencmd FIN FN PVA INPUT 990000001 = ADSL OPMD <0(glite)|1(t1.413) |2(gdmt)|3(mu[...]

Prestige 660H/HW Series User’s Guide 429[...]

Prestige 660H/HW Series User’s Guide 430 A PPENDIX I Command Interpreter The following describes how to use the comman d interpreter . Enter 24 in the main menu to bring up the system maintena nce menu. Enter 8 to go to Menu 24.8 - Command Interpr e ter Mode . See the included disk or zyxel.com for more detailed information on these commands. Not[...]

Prestige 660H/HW Series User’s Guide 431[...]

Prestige 660H/HW Series User’s Guide 432 A PPENDIX J Firewall Commands Sys Firewall Commands The following describes th e firewall commands. See Appendix I on page 430 for information on the command structure. Each of th ese commands must be preceded by sys firewall when you us e them. For example, typ e sys firewall active yes to turn on the fir[...]

Prestige 660H/HW Series User’s Guide 433[...]

Prestige 660H/HW Series User’s Guide 434 A PPENDIX K Brute-Force Password Guessing Protection The following describes the commands for enablin g, disabling and configuring the brute-force password guessing protect ion m echanism for the password. See Appendix I on page 430 for information on the command structure. Table 154 Brute-Force Pas sword [...]

Prestige 660H/HW Series User’s Guide 435[...]

Prestige 660H/HW Series User’s Guide 436 A PPENDIX L Boot Commands The BootModule A T commands execute fro m wi thin the router ’ s bootup software, when debug mode is selected before the main router firmware is start e d. When you start up your Prestige, you are given a choice to go into deb ug mode by pressing a key at the prompt shown in the[...]

Prestige 660H/HW Series User’s Guide 437 Figure 269 Boot Module Commands AT just answer OK ATHE print help ATBAx chan ge baudrate. 1:38.4k, 2:19.2k, 3:9.6k 4:57.6k 5:115.2k ATENx,(y) set BootExtens ion Debug Flag (y=password) ATSE show the seed of password generator ATTI(h,m,s) change system time to hour:min:sec or show current time ATDA(y,m,d) c[...]

Prestige 660H/HW Series User’s Guide 438 A PPENDIX M Log Descriptions This appendix provides descrip tions of example log messages. Table 155 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on informati on from the time server . Time calibration failed The router failed to get [...]

Prestige 660H/HW Series User’s Guide 439 Table 157 Access Control Log s LOG MESSAGE DESCRIPTION Firewall default policy: [ TC P | UDP | IGMP | ESP | GRE | OSP F ] <Packet Direction> Attempted TCP/UDP/IGMP/ ESP/GRE/OSPF access matched the default po licy and was blocked or fo rwarded according to the default policy’s setting. Firewall rule[...]

Prestige 660H/HW Series User’s Guide 440 Table 158 TCP Reset Lo gs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a TCP reset packet when a host was unde r a SYN flood attack (the TCP incompl ete count is per d estination host.) Exceed TCP MAX incomplete, sent TCP RST The router sent a TCP reset packet when the numbe[...]

Prestige 660H/HW Series User’s Guide 441 Table 161 CDR Logs LOG MESSAGE DESCRIPTION board %d line %d channel %d, call %d, %s C01 Outgoing C all dev=%x ch=%x %s The router received the setup requirements for a cal l. “call” is the reference (count) number of the call. “dev” is the device type (3 is for dial-up, 6 is for PPPoE, 10 is for PP[...]

Prestige 660H/HW Series User’s Guide 442 Table 163 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can pass through the firewall. Table 164 Content Filtering Logs LOG MESSAGE DESCRIPTION %s: Keyword blocking The content of a requested web p age ma tched a user defined keyword. %s: Not in trusted web list The web site is [...]

Prestige 660H/HW Series User’s Guide 443 Table 165 Attack Logs LOG MESSAGE DESCRIPTION attack [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The firewall detected a TC P/UDP/IGMP/ESP/GRE/OSPF attack. attack ICMP (type:%d, code:%d) The firewall detecte d an ICMP attack. For type and code details, T abl e 168 on page 445 . land [ TCP | UDP | IGMP | ESP | [...]

Prestige 660H/HW Series User’s Guide 444 Table 166 802.1X Logs LOG MESSAGE DESCRIPTION Local User Database accepts user. A user was authenticated by the local user database. Local User Database repo rts user credential error. A user was not authenticated by the local user database because of an incorrect user password. Local User Database does no[...]

Prestige 660H/HW Series User’s Guide 445 (L to L/Prestige) LAN to LAN/ Prestige ACL set for packet s traveling from the LAN to the LAN or the Prestige. (W to W/Prestige) WAN t o WA N / Prestige ACL set for packet s traveling from the W AN to the W AN or the Prestige. Table 168 ICMP Notes TYPE CODE DESCRIPTION 0 Echo Reply 0 Echo reply message 3 D[...]

Prestige 660H/HW Series User’s Guide 446 Table 169 Syslog Logs LOG MESSAGE DESCRIPTION <Facility*8 + Severity>Mon d d hr:mm:ss hostname src="<srcIP:srcPort>" dst="<dstIP:dstPort>" msg="<msg>" note="<note>" devID="<mac address last th ree numbers>" cat="<[...]

Prestige 660H/HW Series User’s Guide 447 Log Commands Go to the command in terpreter interface ( Appendix I on page 43 0 explains how to access and use the commands). Configuring What Y ou W ant the Prestige to Log 1 Use the sys logs load command to load the log setting buffer that allows you to configure which logs the Prestige is to record. 2 U[...]

Prestige 660H/HW Series User’s Guide 448 Log Command Example This example shows how to set the Prestige to re cord the access logs and alerts and then view the results. Figure 272 Log Command Exampl e ras> sys logs load ras> sys logs category acces s 3 ras> sys logs save ras> sys logs display access # .time sou rce destination notes m[...]

Prestige 660H/HW Series User’s Guide 449[...]

Prestige 660H/HW Series User’s Guide 450 Index Numerics 11 0 V A C 4 230V AC 4 A Abnormal Working Conditions 5 AC 4 Access methods 284 Accessories 4 Acts of God 5 Address Assignment 73 Address mapping 122 Address Resolution Protocol (ARP) 76 ADSL, what is it? 40 ADSLstandards 42 Airflow 4 ALG 11 9 Alternative Subnet Mask Notation 382 American Wir[...]

Prestige 660H/HW Series User’s Guide 451 C CA 399 Cables, Connecting 4 Call filtering 286 Call filters Built-in 286 User-defined 286 Call Scheduling 35 2 Maximum Number of Schedule Sets 352 PPPoE 354 Precedence 352 Precedence Example 352 CBR (Continuous Bit Rate) 108 CDR 316 CDR (Call Detail Record) 315 Certificate Authority 399 Certifications 3 [...]

Prestige 660H/HW Series User’s Guide 452 DiffServ marking rule 203 Disclaimer 2 Discretion 5 Distribution System (DS) 90 DNS 238 Domain Name 73 , 11 9 domain name 228 Domain Name Sy stem 73 DoS 132 Basics 132 Ty p e s 133 DoS (Denial of Service) 43 DoS attacks, types of 133 DS Field 203 DS field 203 DSCPs 203 DSL (Digital Subscriber Line) 40 DSL [...]

Prestige 660H/HW Series User’s Guide 453 Guidelines For Enhancing Security 139 Introduction 131 LAN to W AN Rul es 147 Policies 144 Remote Management 284 Rule Checklist 145 Rule Logic 145 Rule Security Ra mificati ons 145 Services 159 SMT menus 284 Ty p e s 130 When T o Use 141 firmware 219 , 320 upgrade 219 upload 219 upload error 220 Fitness 5 [...]

Prestige 660H/HW Series User’s Guide 454 IP Packet 293 IP Policies 346 IP policy 244 IP policy routing 342 IP Policy Routing (IPPR) 46 , 244 Applying an IP Policy 346 Ethernet IP Policies 346 Gateway 346 IP Protocol 345 IP protocol 342 IP protocol type 159 IP Routing Policy (IPPR) 342 Benefits 342 Cost Savings 342 Criteria 342 Load Sharing 342 Se[...]

Prestige 660H/HW Series User’s Guide 455 Application 11 6 Applying NA T in the SMT Menus 268 Configuring 270 Definitions 11 4 Examples 275 How it works 11 5 Mapping T ypes 11 7 Non NA T Friendly Applicati on Programs 281 Ordering Rules 273 What it does 11 5 What NA T does 11 5 NA T (Network Address Translation) 11 4 NA T mode 120 NA T Traversal 1[...]

Prestige 660H/HW Series User’s Guide 456 Protocol filter 295 Protocol Filter Rules 295 PSK 307 Purchase, Proof of 5 Purchaser 5 Q Qualified Service Personnel 4 Quality of Service 342 Quick S tart Guide 39 R Radio Communicati ons 3 Radio frequency 86 Radio Frequency Energy 3 Radio Interfere nce 3 Radio Reception 3 Radio T echnician 3 RADIUS 397 Co[...]

Prestige 660H/HW Series User’s Guide 457 Summary 149 S Safety W arnings 4 Sample IP Addresses 255 Saving the S tate 136 Schedule Sets Duration 353 Scheduler 197 SCRSee Sustain Cell Rate 248 Security In General 140 Security Parameters 403 Security Ramifications 145 Separation Between Equipment and Receiver 3 Serial Number 6 Server 11 7 , 270 , 272[...]

Prestige 660H/HW Series User’s Guide 458 T T amperin g 5 TCP Maximum Incomplete 163 , 164 TCP Security 138 TCP/IP 132 , 133 , 171 , 295 , 318 T eardro p 133 T ele communication L ine Cord. 4 T ele phone 6 T ele vision Interference 3 T ele vision Reception 3 Te l n e t 17 1 , 222 T eln et Configuration 171 T emporal Ke y Integrity Protocol (TKIP) [...]

Prestige 660H/HW Series User’s Guide 459 WEP encryption 84 Wet B a se me n t 4 Wi-Fi Protected Access 89 Wi-Fi Protected Access (WP A) 48 Wireless Client WP A Supp licants 91 Wireless LAN 240 Configuring 84 Wireless LAN MAC Address Filtering 48 Wireless LAN Setup 240 Wireless port control 92 , 307 Wireless security 82 Wizard Setup 67 WLAN Interfe[...]