ZyXEL Communications P-660H-D Series manual

P-660R/H-D Series ADSL 2+ Gateway User ’ s Guide V ersion 3.40 1 1/2005 Edition 1[...]

[...]

P-660R/H-D Series User’s Guide Copyright 2 Copyright Copyright © 2005 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mechanical , magnetic, op[...]

P-660R/H-D Series User’s Guide 3 Federal Communications Commission (FCC) Interfer ence Statement Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rul es. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any[...]

P-660R/H-D Series User’s Guide Federal Com munications Commission (FCC) Interf erence St atement 4 Certifications 1 Go to www .zyxel.com 2 Select your product from t he drop-down list box on the ZyXEL home page to g o to that product's page. 3 Select the certification you wish to view from this page.[...]

P-660R/H-D Series User’s Guide 5 Safety Warnings Safety W arnings For your safety , be sure to read and fo llow all warning notices and instructions. • T o reduce the risk of fire, use only No. 26 A WG (American W ire Gauge) or larger telecommunication line cord. • Do NOT open the device or un it. Opening or removing covers can expose yo u to[...]

P-660R/H-D Series User’s Guide ZyXEL Limited Warranty 6 ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase . During the warranty period, and upon proof of purchase, should the product have in[...]

P-660R/H-D Series User’s Guide 7 Customer Suppo rt Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your device. • Brief description of the problem and the steps yo u took to solve it. METHOD LOCATION SUPPO[...]

P-660R/H-D Series User’s Guide Customer Support 8 POLAND info@pl.zyxel.com +48-22-5286603 www .pl.zyxel.com ZyXEL Communications ul.Emilli Plater 53 00-1 13 W arszawa Poland +48-22-5206701 RUSSIA http://zyxel.ru/support +7-095-542- 89-29 www .zyxel.ru ZyXEL Russia Ostrovityanova 37a S tr . Moscow , 1 17279 Russia sales@zyxel.ru +7-095-542-89-25 S[...]

P-660R/H-D Series User’s Guide 9 Customer Suppo rt[...]

P-660R/H-D Series User’s Guide Table of Contents 10 T able of Content s Copyright ....................................... ........................................... ................................ 2 Federal Communications Commissi on (FCC) Interference St atement ............... 3 Safety W arnings ...............................................[...]

P-660R/H-D Series User’s Guide 11 Table of Contents Chapter 4 Wizard Setup for Media Bandwid th Management ............................................... 58 4.1 Introduction ............................ ............. ............. ............ ............. ................ ......... 58 4.1.1 Predefined Media Bandwidth Management Services ......[...]

P-660R/H-D Series User’s Guide Table of Contents 12 6.4 T r affic Shaping ....................... ............. ............. ................ ............. ............ ......... 73 6.5 Zero Configuration Internet Access ........ ............. ............. ............. ............ ......... 74 6.6 The Main WAN Screen .......... ............. [...]

P-660R/H-D Series User’s Guide 13 Table of Contents 10.3.1 Denial of Service Attacks ..... .... ......... ............. ............. ............. ............. 100 10.4 Denial of Service .. ............ ............. ............. ................ ............. ............. .......... 100 10.4.1 Basics ..................... ............. .....[...]

P-660R/H-D Series User’s Guide Table of Contents 14 1 1.1 1 Anti-Probing ....... ............ ............. ................. ............ ............. ............. .......... 128 1 1.12 DoS Thres holds ................. ............. ................ ............. ............. ............ .......129 1 1.12.1 Threshold V alues ...... ........[...]

P-660R/H-D Series User’s Guide 15 Table of Contents 15.4 SMTP Error Messages ............... .................... ................ ................ ................ 157 15.4.1 Example E-mail Log .... ................ ... .......... ............. ............. ................ ...158 Chapter 16 Media Bandwid th Management Advanced Setup...........[...]

P-660R/H-D Series User’s Guide Table of Contents 16 Chapter 18 Introducing the SMT ........... .......................................... ....................................... 186 18.1 SMT Introduction ........................ ................ ................ .................... ................ 186 18.1.1 Procedure for SMT Co nfiguration via[...]

P-660R/H-D Series User’s Guide 17 Table of Contents 23.2.2 Encapsulation and Multiplexing Scenarios . ................ ............. ............. 21 1 23.2.2.1 Scenario 1: One VC, Multiple P rotocols ............ ................ .......... 21 1 23.2.2.2 Scenario 2: One VC, One Prot ocol (IP) ............ ............. ............. 21 1 23.2.2.[...]

P-660R/H-D Series User’s Guide Table of Contents 18 Chapter 27 Enabling the Firewall ......................................................................... .................. 246 27.1 Remote Management and the Firewall ... ................... ................. ................ ...246 27.2 Access Methods ... ............ ............. .........[...]

P-660R/H-D Series User’s Guide 19 Table of Contents 31.2 Backup Configuration . ................ ............. ............. ............. ................ ............. 277 31.2.1 Backup Config uration . ................ ............. ............. ............. ................ ...277 31.2.2 Using the FTP Command from th e Command Line ........[...]

P-660R/H-D Series User’s Guide Table of Contents 20 34.5 Applying an IP Policy ........................ ................ ................ ................ ............. 302 34.5.1 Ethernet IP Policie s ....... ............. ............. ............. ................ ............. ...302 34.6 IP Policy Routing Example ................ ... ......[...]

P-660R/H-D Series User’s Guide 21 Table of Contents Appendix F IP Subnetting ............................................................................ ............................ 350 IP Addressing ................... ............. ............. ................ ............. ............. ............ ...... 350 IP Classes ........... .......[...]

P-660R/H-D Series User’s Guide Table of Contents 22 Command Examples .............. ................ ............. ............. ............. ................ ......... 395 Appendix M Log Descriptions ........................... ........................................... ............................ 396 Log Commands ...................... .....[...]

P-660R/H-D Series User’s Guide 23 Table of Contents[...]

P-660R/H-D Series User’s Guide List of Figures 24 List of Figures Figure 1 Protected Internet A ccess Applications ................................ ................ ................ 42 Figure 2 LAN-to-LAN Applicat ion Example ............ ................ ............. ............. ............ ....... 42 Figure 3 Front Panel ....... ...........[...]

P-660R/H-D Series User’s Guide 25 List of Figures Figure 39 SYN Flood .......... ............. ............. ............. ................ ............. ............. ............. ... 102 Figure 40 Smurf Attack ...................... ............. ................ ............. ............. ............. ............. 1 03 Figure 41 S tateful [...]

P-660R/H-D Series User’s Guide List of Figures 26 Figure 82 Dif fServ: Differentiated Service Fiel d .................. ............ ............. ................ ....... 170 Figure 83 Media Bandwidth Management: Class Configuration ..... ................. ................ ... 171 Figure 84 Media Bandwidth Management S tatis tics ............. .[...]

P-660R/H-D Series User’s Guide 27 List of Figures Figure 125 Menu 12 S tatic Route Setup ................... ................ ................... ................ ....... 223 Figure 126 Menu 12.1 IP S tatic Route Setup .. .......... ................ ............. ............. ............. ... 223 Figure 127 Menu12.1.1 Edit IP St atic Route ....[...]

P-660R/H-D Series User’s Guide List of Figures 28 Figure 168 Filtering Remote Node T raffic . ...... ............. ............. ............. ................ ............. 260 Figure 169 SNMP Management Model . ............. ............. ................ ............. ............. .......... 262 Figure 170 Menu 22 SNMP Configuration .........[...]

P-660R/H-D Series User’s Guide 29 List of Figures Figure 21 1 Internet Options ................... ....... .......... ............. ............ ............. ................ ....... 31 8 Figure 212 Security Settings - Java Scripting .... ................. ................ ................ ................ 319 Figure 213 Security Settings - Java[...]

P-660R/H-D Series User’s Guide List of Figures 30 Figure 254 Displaying Log Cat egories Example ................. ................ ................... ............. 410 Figure 255 Displaying Log Parameters Example ................... ............. ............. ................ ... 410[...]

P-660R/H-D Series User’s Guide 31 List of Figures[...]

P-660R/H-D Series User’s Guide List of Tables 32 List of T ables T able 1 ADSL S tandards ................ ............. ............. ................ ............. ............. ............. ... 38 T able 2 Model S p ecific Features .............. ................ ................ ................ ................ .......... 39 T able 3 Front [...]

P-660R/H-D Series User’s Guide 33 List of Tables T able 39 Firewall: Threshold .......... ................ ................ ............. ............. ............. ............. 132 T able 40 ......... ............. ............. ............ ................. ............. ............ ............. ............. . .. ....... 134 T able 41 Con[...]

P-660R/H-D Series User’s Guide List of Tables 34 T able 82 Menu12.1.1 Edit IP S tatic Route ................ ................ ................ ................ .......... 224 T able 83 Remote Node Network Layer Options: Br idge Fields ................... ................ ....... 227 T able 84 Menu 12.3.1 Edit B ridge S tatic Route ..... .........[...]

P-660R/H-D Series User’s Guide 35 List of Tables T able 125 S ubnet 3 .............. ............. ............. ............. ................ ............. ............. ............ .3 5 4 T able 126 S ubnet 4 .............. ............. ............. ............. ................ ............. ............. ............ .3 5 5 T able 127 E [...]

P-660R/H-D Series User’s Guide Preface 36 Preface Congratulations on you r purchase of the P-66 0R/H-D series ADSL 2+ gateway . The P-660H has a 4-port switch that allows you to conn ect up to 4 computers to the Prestige without purchasing a switch/hub. Note: Register your product online to receive e-mail notices of firmwa re upgrades and informa[...]

P-660R/H-D Series User’s Guide 37 Preface Embedded web help for descriptions of individual screens and supplementary information. • ZyXEL Glossary and W eb Site Please refer to www .zyxel.com for an online gl ossary of networking terms and additional support documentatio n. User Guide Feedback Help us help you. E-mail all User Guide-related com[...]

P-660R/H-D Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 38 C HAPTER 1 Getting T o Know Y our Prestige This chapter describes the key features and applications of your Prestige . 1.1 Introducing the Prestige The Prestige is an ADSL2+ gateway that allows super-fast, secure Internet access over analog (POTS) or digital (ISDN) telepho[...]

P-660R/H-D Series User’s Guide 39 Chapter 1 Getting To Know Your Pr estige Note: See the product specifications in t he appendix for deta iled features and standards support. T able Key: An O in a mode’ s column shows that the device mode has the specified feature. The information in this table was correct at th e time of writing, although it m[...]

P-660R/H-D Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 40 Content Filtering Content filtering allows you to block access to fo rbidden Internet web sit es, schedule when the Prestige should perform the filtering and give trusted LAN IP addresses unfiltered Internet access. T raffic Redirect T raffic redirect forwards W A N traffi[...]

P-660R/H-D Series User’s Guide 41 Chapter 1 Getting To Know Your Pr estige DHCP DHCP (Dynamic Host Configuration Protocol ) al lows the individual clients (computers) to obtain the TCP/IP configuration at start-up from a centralized DHCP server . The Prestige has built-in DHCP server capability enab led by default. It can assign IP addresses, an [...]

P-660R/H-D Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 42 1.3.1 Protected Internet Access The Prestige is the ideal high-speed Internet acc ess solution. It is comp atible with all major ADSL DSLAM (Digital Subscriber Line Acces s Multiplexer) provider s and supports the ADSL standards as shown in T able 1 on pa ge 38 . The Prest[...]

P-660R/H-D Series User’s Guide 43 Chapter 1 Getting To Know Your Pr estige Figure 3 Front Panel The following table describes the LEDs. 1.5 Hardware Connection Refer to the Quick S tart Guide for in formation on hard ware connection. Table 3 Front Panel LEDs LED COLOR ST ATUS DESCRIPTION PWR/SYS Green On T he Prestige is receiv ing power and func[...]

P-660R/H-D Series User’s Guide Chapter 2 Introducing the Web Configur ator 44 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access and navigate the web configurator . 2.1 W eb Configurator Overview The web configurator is an HTML-based mana gement interface that allows easy Prestige setup and management via Internet b[...]

P-660R/H-D Series User’s Guide 45 Cha pter 2 Introducing the Web Configurator 6 It is highly recommended you change th e default password! Enter a new password between 1 and 30 characters, re type it to confirm and click Apply ; alternatively click Ignore to proceed to the main menu if you do not want to change the password now . Note: If you do [...]

P-660R/H-D Series User’s Guide Chapter 2 Introducing the Web Configur ator 46 • Click a link un der Maintenance to se e Prestige performance statistics, upload firmware and back up, rest ore or upload a configura tion file. • Click Site Map to go to the Site Map screen. • Click Logout in the navigation panel when you have finished a Prestig[...]

P-660R/H-D Series User’s Guide 47 Cha pter 2 Introducing the Web Configurator Firewall (P-660H-D only) Default Policy Use this screen to activate /deactivate the fire wall and the direction of network traffic to which to apply the rule. Rule Summary This screen shows a summary of the fi rewall rules, and allows you to edit/add a firewall rule. An[...]

P-660R/H-D Series User’s Guide Chapter 2 Introducing the Web Configur ator 48 2.2 Change Login Password It is highly recommended that you periodic ally change the password for accessing the Prestige. If you didn’ t change the default one after yo u logged in or yo u want to change to a new password again, then click Password in the Site Map scr[...]

P-660R/H-D Series User’s Guide 49 Cha pter 2 Introducing the Web Configurator[...]

P-660R/H-D Series User’s Guide Chapter 3 Wizard Setup for Internet Access 50 C HAPTER 3 W izard Setup for Internet Access This chapter provides informatio n on the W izard Setup screens for Internet access in the web configurator . 3.1 Introduction Use the W izard Setup screens to configure your system for Internet access with the information giv[...]

P-660R/H-D Series User’s Guide 51 Chapter 3 W izard Set up for Inte rnet Access 2 The next wizard screen varies depending on wh at mode and encapsulation ty pe you use. All screens shown are with routing mode. Configure the fields and click Next to continue. Figure 9 Internet Connection with PPPoE The following table describes the fields in this [...]

P-660R/H-D Series User’s Guide Chapter 3 Wizard Setup for Internet Access 52 Figure 10 Internet Connection with RFC 1483 The following table describes the fields in this screen. Table 7 Internet Connection with PPPoE LABEL DESCRIPTION Service Name T ype the name of your PPPoE service here. User Name Enter the user name exactly as your ISP assigne[...]

P-660R/H-D Series User’s Guide 53 Chapter 3 W izard Set up for Inte rnet Access Figure 1 1 Internet Connectio n with ENET ENCAP The following table describes the fields in this screen. Back Click Back to g o back to the first wizard screen. Next Click Next to continue to the next wizard screen. Table 9 Internet Connection with ENET ENCAP LABEL DE[...]

P-660R/H-D Series User’s Guide Chapter 3 Wizard Setup for Internet Access 54 Figure 12 Internet Connection with PPPoA The following table describes the fields in this screen. Table 10 Internet Connection with PPPoA LABEL DESCRIPTION User Name Ente r the login name that your ISP gi ves you. Password Enter the password associated with the user name[...]

P-660R/H-D Series User’s Guide 55 Chapter 3 W izard Set up for Inte rnet Access 3 V erify the settings in the screen shown next. T o change the LAN information on the Prestige, click Change LAN Configurations . Otherwise cli c k Save Settings to save the configuration and skip to the section 3.13. Figure 13 Internet Access Wizard Setup: Third Scr[...]

P-660R/H-D Series User’s Guide Chapter 3 Wizard Setup for Internet Access 56 The following table describes the fields in this screen. 4 The Prestige automatically tests the connectio n to the computer(s) connected to the LAN ports. T o test the connection from the Prestige to the ISP , click S tart Diagnose . Otherwise click Return to Main Menu t[...]

P-660R/H-D Series User’s Guide 57 Chapter 3 W izard Set up for Inte rnet Access[...]

P-660R/H-D Series User’s Guide Chapter 4 Wiza rd Setup fo r Media Ban dwidth Ma nagement 58 C HAPTER 4 Wizard Setup for Media Bandwid th Management This chapter shows you h ow to configure basic bandwidth management usin g the wizard screens. This chapter applies to the P-660H-D. 4.1 Introduction The web configurator’ s Media Bandwidth Magnt. s[...]

P-660R/H-D Series User’s Guide 59 Chapter 4 Wizard Setup for Media Ban dwidth Management 4.2 Media Bandwid th Management Setup 1 Click Media Bandwidth Mgnt. under Wizard Set up in the SITE MAP screen. Figure 16 Media Bandwid th Mgnt. Wizard Setup E-Mail Electronic mail consists of messages se nt through a computer network to specific groups or in[...]

P-660R/H-D Series User’s Guide Chapter 4 Wiza rd Setup fo r Media Ban dwidth Ma nagement 60 The following table describes the labels in this screen. 2 The Prestige automatically creates the band width class for each service you select. Y ou may set the priority for each bandwidt h class in the second wiza rd screen. Figure 17 Media Bandwid th Mgn[...]

P-660R/H-D Series User’s Guide 61 Chapter 4 Wizard Setup for Media Ban dwidth Management 3 W ell done! Y ou have finished config uratio n of Media Bandwidth Managemen t. Y ou m ay now continue configu ring your device. Click Return to Main Menu to return to the Site Map screen. Figure 18 Media Bandwid th Mgnt. Wizard Setup: Finish Back Click Back[...]

P-660R/H-D Series User’s Guide Chapter 5 LAN Setup 62 C HAPTER 5 LAN Setup This chapter describes how to configure LAN settings. 5.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached. A LAN is a computer network lim ited to the immediate area, usually the same building or floor of a bu [...]

P-660R/H-D Series User’s Guide 63 Chapter 5 LAN Setup 5.1.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at star t-up from a server . Y ou can configure the Prestige as a DHCP server or disable it. When configured as a server, the Prestige provides the TCP/I[...]

P-660R/H-D Series User’s Guide Chapter 5 LAN Setup 64 There are two ways that an ISP disseminates the DNS se rver addresses. • The ISP tells you the DNS server addresses, us ually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the LAN Setup screen. • Th[...]

P-660R/H-D Series User’s Guide 65 Chapter 5 LAN Setup 5.2.1.1 Private IP Addresses Every machine on the Internet must ha ve a unique address. If your ne tworks are isolate d from the Internet, for example, only between your two branch of fice s, you can assign any IP addresses to the hosts without problems. However , the Internet Assigned Numbers[...]

P-660R/H-D Series User’s Guide Chapter 5 LAN Setup 66 5.2.3 Multicast T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of ho sts on the n etwork - not everybo dy and not just 1. IGMP (Internet Group [...]

P-660R/H-D Series User’s Guide 67 Chapter 5 LAN Setup Figure 20 Any IP Example The Any IP fe ature does not apply to a computer using either a dynami c IP address or a static IP address that is in the same subnet as the Prestige’ s IP address. Note: Y ou must enable NA T/SUA to use the Any IP feature on the Prest ige. 5.2.4.1 How Any IP Works A[...]

P-660R/H-D Series User’s Guide Chapter 5 LAN Setup 68 5.3 Configuring LAN Click LAN to open the LAN Setup screen. See Section 5.1 on page 62 for background information. Figure 21 LAN Setup The following table describes th e fields in this screen. Table 15 LAN Setup LABEL DESCRIPTION DHCP DHCP If set to Server , your Prestige can assign IP ad dres[...]

P-660R/H-D Series User’s Guide 69 Chapter 5 LAN Setup Size of Client IP Pool This field specifies the size or count of the IP address pool. Primary DNS Server Enter the IP addresses of the DNS se rvers. The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask. Secondary DNS Server As above. Remote DHCP Server I[...]

P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 70 C HAPTER 6 W AN Setup This chapter describes how to configure W AN settings. 6.1 W AN Overview A W AN (W ide Area Network) is an outside conn ection to another network or the Internet. 6.1.1 Encap sulation Be sure to use the encapsulat ion method required by your IS P . The Prestige supports t[...]

P-660R/H-D Series User’s Guide 71 Chapter 6 WAN Setup 6.1.1.4 RFC 1483 RFC 1483 describes two methods for Multipro tocol Encapsulation over A TM Adaptation Layer 5 (AAL5). The first method allows mult iplexing of multiple protocols over a single A TM virtual circuit (LLC-based multiplexing ) and the second method assumes that each protocol is car[...]

P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 72 6.1.4.2 IP Assignment wi th RFC 1483 Encap sulation In this case the IP Address Assignment must be static with the same requirements for the IP Address an d ENET ENCAP Gateway fiel ds as stated above. 6.1.4.3 IP Assignment with ENET ENCAP Encap sulation In this case you can have either a stati[...]

P-660R/H-D Series User’s Guide 73 Chapter 6 WAN Setup For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric of "2" and dial-backup route has a metric of "3", then the normal route acts as the primary default route. If the normal rout e fails to connect to the Intern et, the [...]

P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 74 Sustained Cell Rate (SCR) is the mean cell rate of each bursty traf fic source. It specifies the maximum average rate at whic h cells can be sent over the virtual connection. SCR may not be greater than the PCR. Maximum Burst Size (MBS) is the maximum numb er of cells that can be sent at the P[...]

P-660R/H-D Series User’s Guide 75 Chapter 6 WAN Setup Figure 23 WA N The following table describes the links in this screen. 6.7 Configuring W AN Setup T o change your Prestige’ s W A N remote node settings, click WA N and W AN Setup . The screen dif fers by the encapsulation. See Section 6.1 on page 7 0 for more information. Table 16 WAN LINK [...]

P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 76 Figure 24 W AN Setup (PPPoE) The following table describes th e fields in this screen. Table 17 WAN Se tu p LABEL DESCRIPTION Name Enter the name of your Internet Service Provider , e.g., MyISP . This information is for identification purpose s only . Mode Select Routing (default) from the dro[...]

P-660R/H-D Series User’s Guide 77 Chapter 6 WAN Setup Encapsulation Select th e method of encapsulatio n used by your ISP from the drop-down list box. Choices vary depending on the mode you select in th e Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483 . If you select Routing in the Mode field, select PPPoA , R[...]

P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 78 6.8 T raffic Redirect T raffic redirect forwards traffic to a backup gateway when the Prestige cannot connect to the Internet. An exampl e is shown in th e figure below . Max Idle Timeout S pecify an idle time-out in the Max Id le Timeout field when you select Connect on Demand . The defaul t [...]

P-660R/H-D Series User’s Guide 79 Chapter 6 WAN Setup Figure 25 T raffic Redirect Example The following network topology allows you to avoid triangle route security issues when the backup gateway is conn ected to the LAN. Use IP alias to configure the LAN into two or three logical networks with the Prestige itself as the gateway for each LAN netw[...]

P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 80 Figure 27 W AN Backup The following table describes th e fields in this screen. Table 18 WAN Ba ck up LABEL DESCRIPTION Backup T ype Select the method tha t the Pr estige uses to check the DSL con nection. Select DSL Link to have the Prestige check if the connection to the DSLAM is up. Select [...]

P-660R/H-D Series User’s Guide 81 Chapter 6 WAN Setup T imeout T ype the number of seconds (3 recommended) for your Prestige to wait for a ping response from one of the IP addresses in the Check W AN IP Address field before timing out the request. The W AN connection is con sidered "down" after the Prestige times out the number of times[...]

P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 82 C HAPTER 7 Network Address T ranslation (NA T) Screens This chapter discusses how to configure NA T on the Prestige. 7.1 NA T Overview NA T (Network Address Translation - NA T , RFC 1631) is the translation of the IP address of a host in a packet, for example, [...]

P-660R/H-D Series User’s Guide 83 Chapter 7 Network Address Transla tion (NAT) Scr eens 7.1.2 What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W A N side. When the resp onse comes ba[...]

P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 84 7.1.4 NA T Ap plication The following figure illustrates a possible NA T application, wher e three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct W AN networks. More examples follow at the end of this chapter .[...]

P-660R/H-D Series User’s Guide 85 Chapter 7 Network Address Transla tion (NAT) Scr eens Port numbers do NOT change for One-to-One and Many-to-Many No Overload NA T mapping types. The following table summarizes these types. 7.2 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supp[...]

P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 86 Y ou may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server . The port number identifies a service; for example, web service is on port 80 and FTP on port 21. In some cases, such as for unknown [...]

P-660R/H-D Series User’s Guide 87 Chapter 7 Network Address Transla tion (NAT) Scr eens 7.3.3 Configuring Ser vers Behind SUA (Example) Let's say you want to assign po rts 21-25 to one FTP , T elnet and SMTP server (A in the example), port 80 to another (B in the exam ple) and assign a default server IP address of 192.168.1.35 to a third (C [...]

P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 88 The following table describes the labels in this screen. 7.5 Configuring SUA Server Set If you do not assign an IP address in Server Set 1 (default server) the Prestige discards all packets received for ports that are not specif ied here or in the remote manage[...]

P-660R/H-D Series User’s Guide 89 Chapter 7 Network Address Transla tion (NAT) Scr eens Figure 32 Edit SUA/NA T Server Set The following table describes th e fields in this screen. T able 23 Edit SUA/NA T Server Set LABEL DESCRIPTION S tart Port No. Enter a port number in this field. T o forward only one port, enter the port number again in the E[...]

P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 90 7.6 Configuring Address Mapping Rules Ordering your rules is important because the Pr estige applies the rules in the order that you specify . When a rule matches the current pack et, the Prestige takes the corresponding action and the remaining rules are ignor[...]

P-660R/H-D Series User’s Guide 91 Chapter 7 Network Address Transla tion (NAT) Scr eens 7.7 Editing an Address Mapping Rule T o edit an address mapping rule, click the rule’ s link in the NA T Address Mapping Rules screen to display the screen sh own next. Figure 34 Edit Address Mapping Rule Ty p e 1-1 : One-to-one mode maps one loca l IP addre[...]

P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 92 The following table describes th e fields in this screen. Table 25 Edit Address Ma pping Rule LABEL DESCRIPTION Ty p e Choose the port mappi ng type from one of the follow ing. • One-to-One : One-to-One mode maps one local IP address to o ne global IP address[...]

P-660R/H-D Series User’s Guide 93 Chapter 7 Network Address Transla tion (NAT) Scr eens[...]

P-660R/H-D Series User’s Guide Chapter 8 Dynamic DNS Setup 94 C HAPTER 8 Dynamic DNS Setup This chapter discusses how to configure your Prestige to use Dynamic DNS. 8.1 Dynamic DNS Overview Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU-Se[...]

P-660R/H-D Series User’s Guide 95 Chapter 8 Dynamic DNS Setup Figure 35 Dynamic DNS The following table describes th e fields in this screen. Table 26 Dynamic DNS LABEL DESCRIPTION Active Select this check box to use dynamic DNS. Service Provider This is the name of yo ur Dynamic DNS service p rovider . Host Names T yp e the domain n ame assigned[...]

P-660R/H-D Series User’s Guide Chapter 9 Time and Date 96 C HAPTER 9 T ime and Date This screen is not available on all models. Us e this screen to configur e the Prestige’ s time and date settings. 9.1 Configuring T ime and Date T o change your Prestige’ s time and date, click Time And Date . The screen appears as shown. Use this screen to c[...]

P-660R/H-D Series User’s Guide 97 Chapter 9 Time and Date Table 27 T ime and Date LABEL DESCRIPTION T ime Server Use Protocol when Bootup Select the time service protocol that your time server sends w hen you turn on the Prestige. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use tri a[...]

P-660R/H-D Series User’s Guide Chapter 10 Firewalls 98 C HAPTER 10 Firewalls This chapter gives some backgr ound information on firewalls and introduces the Prestige firewall. This chapter ap plies to the P-660H-D. 10.1 Firewall Overview Originally , the term fir ewall referred to a construction techni que designed to prevent the spread of fire f[...]

P-660R/H-D Series User’s Guide 99 Chapter 10 Firewalls 10.2.2 Application-level Firewalls Application-level firewalls restrict access by serv ing as proxies for e xternal servers. Since they use programs written for specific Internet servic es, such as HTTP, FTP and tel net, they can evaluate network packets for valid applicatio n-sp ecific data.[...]

P-660R/H-D Series User’s Guide Chapter 10 Firewalls 100 • The LAN (Local Area Network) port attaches to a network of computers, which ne eds security from the outside world. These computer s will have access to Internet services such as e-mail, FTP , and the W orld W ide W e b. However , “inbound access” will not be allowed unless you co nf[...]

P-660R/H-D Series User’s Guide 101 Chapter 10 Firewalls 10.4.2 T ypes of DoS Attacks There are four types of DoS attacks: 1 Those that exploit bugs in a TCP/IP implementation. 2 Those that exploit weaknesses in the TCP/IP specification. 3 Brute-force attacks that flood a network with useless data. 4 IP Spoofing. 5 " Ping of Death " and [...]

P-660R/H-D Series User’s Guide Chapter 10 Firewalls 102 Figure 38 Three-W ay Handshake Under normal circumstances, the applica tion that initiates a session sends a SYN (synchronize) packet to the receiving server . The receiver sends back an ACK (acknowledgment) packet and its own SYN, and then the in itiator responds with an ACK (acknowledgment[...]

P-660R/H-D Series User’s Guide 103 Chapter 10 Firewalls the broadcast address of the network, the router will broadcast the ICMP echo request packet to all hosts on the network. If there are numerous hosts, this will create a large amount of ICMP echo request and response traffic. If a hacker chooses to spoof the source IP address of the ICMP ech[...]

P-660R/H-D Series User’s Guide Chapter 10 Firewalls 104 All SMTP commands are illegal except for tho se displayed in the following tables. 10.4.2.3 T racero ute T raceroute is a utility used to determine th e path a packet takes between two endpoints. Sometimes when a packet filter firewall is conf igured incorrectly an at tacker can traceroute t[...]

P-660R/H-D Series User’s Guide 105 Chapter 10 Firewalls Figure 41 S tateful Inspection The previous figure shows the Prestige’ s default firewall rules in action as well as demonstrates how stateful inspection works. User A can initiate a T elnet session from within the LAN and responses to this request are allowe d. However other T elnet tra f[...]

P-660R/H-D Series User’s Guide Chapter 10 Firewalls 106 temporary entries might be modified, in order to permit only packets that a re valid for the current state of the co nnection. 8 Any additional inbound or outb ound packets that belong to the connection are inspected to update the state table entry and to modify the temporary inbound access [...]

P-660R/H-D Series User’s Guide 107 Chapter 10 Firewalls When the Prestige receives any subsequent packet (from the In ternet or from the LAN), its connection information is extracted and checked against the cache. A packet is only allowed to pass through if it corresponds to a valid connection (that is, if i t is a response to a connection which [...]

P-660R/H-D Series User’s Guide Chapter 10 Firewalls 108 • Limit who can telnet into your router . • Don't enable any local service (such as SN MP or NTP) that you don't use. An y enabled service could present a potential sec urity risk. A determined hacker might be able to find creative ways to misuse the enabled services to access [...]

P-660R/H-D Series User’s Guide 109 Chapter 10 Firewalls • Always shred confidential in formation, particularly about your computer , before throwing it away . Some hackers dig through the trash of companies or individuals for information that might he lp them in an attack. 10.7 Packet Filtering Vs Firewall Below are some comparisons between the[...]

P-660R/H-D Series User’s Guide Chapter 10 Firewalls 110 • A range of source and destination IP ad dress es as well as port numbers can be specified within one firewall rule making the fire wall a better choice when complex rules are required. • T o selectively block/allow inbound o r outbound traf fic between inside host/networks and outside [...]

P-660R/H-D Series User’s Guide 111 Chapter 10 Firewalls[...]

P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 12 C HAPTER 11 Firewall Configuration This chapter shows you how to enable and configure the Prestige firewall. 1 1.1 Access Methods The web configurator is, by far , the most co mprehensive firewall configuration tool your Prestige has to offer . For this reason, it is reco mmend[...]

P-660R/H-D Series User’s Guide 113 Chapter 11 Firewall Configuration Note: If you configure firewall rules wit hout a good underst anding of how they work, you might inadvertently introduce securi ty risks to the f irewall and to the protected network. Make sure you test your rules af ter you configure them. For example, you may create rules to: [...]

P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 14 4 Does a rule that allows Internet users acces s to resources on the LAN create a security vulnerability? For example, if FTP ports (TCP 20, 21) are al lowed from the Internet to the LAN, Internet users may be able to connect to computers with running FTP servers. 5 Does this r[...]

P-660R/H-D Series User’s Guide 115 Chapter 11 Firewall Configuration The default rule for W AN to LAN traffic bloc ks all incoming connections (W AN to LAN). If you wish to allow certain W A N users to have access to your LAN, you will need to create custom rules to allow it. 1 1.4.2 Alert s Alerts are reports on events, su ch as attacks, that yo[...]

P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 16 Figure 42 Firewall: Default Policy The following table describes the labels in this screen. 1 1.6 Rule Summary Note: The ordering of your rule s is very important as rules are applie d in turn. Refer to Section 10.1 on page 98 for more information. Table 32 Firewall: Default Po[...]

P-660R/H-D Series User’s Guide 117 Chapter 11 Firewall Configuration Click on Fire wall , then Rule Summary to bring up the following screen. This screen is a summary of the existing rules. Note the order in which the rules are listed. Figure 43 Firewall: Rule Summary The following table describes the labels in this screen. Table 33 Rule Summary [...]

P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 18 1 1.6.1 Configuring Firewall Rules Refer to Section 10.1 on page 98 for more information. Follow these directions to create a new rule. 1 In the Rule Summary screen, type the index number for where you want to put the rule. For example, if you type “6”, your new rule become[...]

P-660R/H-D Series User’s Guide 119 Chapter 11 Firewall Configuration Figure 44 Firewall: Edit Rule The following table describes the labels in this screen.[...]

P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 20 Table 34 Firewall: Edit Rule LABEL DESCRIPTION Active Select this option to ena ble this firewall rule. Action for Matched Packet Use the radio button to select whether to discard ( Block ) or allow th e passage of ( Forward ) packets that match this rule. Source/Destination Ad[...]

P-660R/H-D Series User’s Guide 121 Chapter 11 Firewall Configuration 1 1.7 Customized Services Configure customized services and port numbers not predefined by the Prestige. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. For further inform ation on these services, please read Se[...]

P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 22 Refer to Section 10.1 on page 98 for more information. Figure 46 Firewall: Configure Customized Services The following table describes the labels in this screen. 1 1.9 Example Firewall Rule The following Internet firewa ll rule example allows a hypot hetical “My Service” co[...]

P-660R/H-D Series User’s Guide 123 Chapter 11 Firewall Configuration Figure 47 Firewall Example: Rule Summary 3 In the Rule Summary screen, type the index number for where you want to put the rule. For example, if you type “6”, your new rule becomes number 6 and the previous rule 6 (i f there is one) becomes rule 7. 4 Click Inser t to display[...]

P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 24 Figure 48 Firewall Example: Edit Ru le: Des tination Addres s 7 In the Edit Rule screen, click the Customized Servic es link to open the Customized Service screen. 8 Click an index numb er to display the Customized Services -Config screen and configure the screen as follows an [...]

P-660R/H-D Series User’s Guide 125 Chapter 11 Firewall Configuration Figure 50 Firewall Example: Edit Rule: Select Customized Services Note: Custom ports show up with an “*” before their names in the Services list box and the Rule Summary list box. Click Apply af ter you’ve created your custom port. On completing the configuration procedure[...]

P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 26 Rule 2 allows a “My Service” connection fro m the W AN to IP addresses 10.0.0.10 through 10.0.0.15 on the LAN. Figure 51 Firewall Example: Rule Summary: My Service 1 1.10 Predefined Services The A vailable Services list box in the Edit Ru le screen (see Section 1 1.6.1 on p[...]

P-660R/H-D Series User’s Guide 127 Chapter 11 Firewall Configuration CU-SEEME(TCP/UDP:7648, 24032) A popular videocon ferencing so lution from White Pines So ftware. DNS(UDP/TCP:53) Domain Name Server , a servi ce that matches web names (e.g. www .zyxel.com ) to IP numbers. FINGER(TCP:79) Finger is a UNIX or Internet rela ted command that can be [...]

P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 28 1 1.1 1 Anti-Probing If an outside user attempts to probe an unsupp orted port on your Prestige, an ICMP respon se packet is automatically returned. This allows the outside user to know the Prestige exists. The Prestige supports anti-probing, which prevents the ICMP response pa[...]

P-660R/H-D Series User’s Guide 129 Chapter 11 Firewall Configuration Figure 52 Firewall: Anti Probing The following table describes the labels in this screen. 1 1.12 DoS Thresholds For DoS attacks, the Prestige uses thresholds to determine whe n to drop sessions that do not become fully established. These threshol ds apply globally to all session[...]

P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 30 1 1.12.1 Threshold V alues T une these para meters when some thing is not working and after y ou have checked the firewall counters. These default values sh ould work fine for most small offices. Factors influencing choices for threshold values are: • The maximum number of op[...]

P-660R/H-D Series User’s Guide 131 Chapter 11 Firewall Configuration Whenever the number of half-o pen sessions with the same destin ation host address rises above a threshold ( TCP Maximum Incomplete ), the Prestige starts deleting half-open sessions according to one of the following methods: • If the Blocking Time timeout is 0 (the default), [...]

P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 32 Table 39 Firewall: Thre shold LABEL DESCRIPTION DEF AUL T V ALUES Denial of Service Thresholds One Minute Low This is the rate of new half-open sessions that causes the firewall to stop deleting hal f-open sessions. The Prestige continues to delete half-open sessions as necessa[...]

P-660R/H-D Series User’s Guide 133 Chapter 11 Firewall Configuration Deny new connection request for Select this radio button and specify for how long the Prestige should block new connection requests when TCP Maximum Incomplete is reached. Enter the length of blocking time in minutes (between 1 and 256). Back Click Back to return to the previous[...]

P-660R/H-D Series User’s Guide Chapter 12 Content Filtering 134 C HAPTER 12 Content Filtering This chapter covers how to configure content f iltering. This chapter ap plies to the P-660H-D. 12.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering[...]

P-660R/H-D Series User’s Guide 135 Chapter 12 Content Filtering 12.3 Configuring Keyword Blocking Use this screen to block sites containing certai n keywords in the URL. For example, if you enable the keyword "bad", the Prestige blocks all sites contai ning this keyword including the URL http://www .website.com/bad.html, even if it is n[...]

P-660R/H-D Series User’s Guide Chapter 12 Content Filtering 136 12.4 Configuring the Schedule T o set the days and times for the Prestige to perform content filtering, click Content Filter and Schedule . The screen appears as shown. Figure 56 Content Filter: Schedule The following table describes the labels in this screen. 12.5 Configuring T rust[...]

P-660R/H-D Series User’s Guide 137 Chapter 12 Content Filtering Figure 57 Content Filter: T rusted The following table describes the labels in this screen. Table 43 Content Filter: T rusted LABEL DESCRIPTION T rusted User IP Ran ge From T ype the IP add ress of a computer (or the beginnin g IP address of a spe cific range of computers) on the LAN[...]

P-660R/H-D Series User’s Guide Chapter 13 Remote Management Configura tion 138 C HAPTER 13 Remote Management Configuration This chapter provides information on config uring remote management. 13.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) from which [...]

P-660R/H-D Series User’s Guide 139 Chapter 13 Remote Manag ement Configuration • A filter in SMT menu 3.1 (LAN) or in menu 1 1.5 (W AN) is applied to block a T elnet, FTP or W eb service. • Y ou have disabled that service in one of the remote management screens. • The IP address in the Secured Client IP field does not match th e client IP a[...]

P-660R/H-D Series User’s Guide Chapter 13 Remote Management Configura tion 140 13.3 FTP Y ou can upload and download Prestige firmware and configuration files using FTP . T o use this feature, your computer must have an FTP client. 13.4 W e b Y ou can use the Prestige’ s embedded web configurator for config uration and file management. See the [...]

P-660R/H-D Series User’s Guide 141 Chapter 13 Remote Manag ement Configuration[...]

P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 142 C HAPTER 14 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor . 14.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer net[...]

P-660R/H-D Series User’s Guide 143 Chapter 14 Universa l Plug-and-Play (UPnP) 14.1.3 Cautions with UPnP The automated nature of NA T traversal applications in establishing their own services and opening firewall ports ma y present network security issues. Network information and configuration may also be obtained and modifi ed by users in some ne[...]

P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 144 14.3 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me. 1 Click St a r t and Control Panel . Double-click Add/Remove Prog[...]

P-660R/H-D Series User’s Guide 145 Chapter 14 Universa l Plug-and-Play (UPnP) Figure 61 Add/Remove Programs: Windo ws Setup: Communication 3 In the Communications window , select the Universal Plug and Play check bo x in the Components selection box. Figure 62 Add/Remove Programs: Windo ws Setup: Communication: Component s 4 Click OK to go back t[...]

P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 146 Inst alling UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP . 1 Click St a r t and Contr ol Panel . 2 Double-click Network Connections . 3 In the Network Connections window , click Advanced in the main menu and select Optional Networking Comp[...]

P-660R/H-D Series User’s Guide 147 Chapter 14 Universa l Plug-and-Play (UPnP) 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 65 Networking Servic es 6 Click OK to go back to the W indows Optional Networking Component W izard window and click Next . 14.4 Using UPnP in Windows XP Example This section show[...]

P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 148 Figure 66 Network Connections 3 In the Internet Connection Properties window , click Settings to see the port mappings there were automatically created.[...]

P-660R/H-D Series User’s Guide 149 Chapter 14 Universa l Plug-and-Play (UPnP) Figure 67 Internet Co nnection Prop erties 4 Y ou may edit or delete the port mappings o r click Add to manually add port mappings.[...]

P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 150 Figure 68 Internet Connection Properties: Advanced Settin gs Figure 69 Internet Connection Properties: Advanced Settin gs: Add 5 When the UP nP-enabled device is disco nnected from your computer , all port mapping s will be deleted automatically . 6 Select Show icon in [...]

P-660R/H-D Series User’s Guide 151 Chapter 14 Universa l Plug-and-Play (UPnP) Figure 70 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet co nnection status. Figure 71 Internet Conne ction S tat us Web Configurator Eas y Access W ith UPnP , you can access the web-based configur ator on the Prestige w ithout finding o[...]

P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 152 Figure 72 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for your Prestige and select Invoke . The web configurator login screen displays.[...]

P-660R/H-D Series User’s Guide 153 Chapter 14 Universa l Plug-and-Play (UPnP) Figure 73 Network Con nections: M y Network Places 6 Right-click on the icon for your Prestige and select Pr operties . A properties window displays with basic information about the Prestige. Figure 74 Network Conn ections: My N etwork Plac es: Properties: Example[...]

P-660R/H-D Series User’s Guide Chapter 15 Logs Scr eens 154 C HAPTER 15 Logs Screens This chapter contains inform ation about configuring genera l log settings and viewing the Prestige’ s logs. Refer to the appendix for ex ample log message e xplan ations. This chapter applies to the P-660H-D. 15.1 Logs Overview The web confi gurator allows you[...]

P-660R/H-D Series User’s Guide 155 Chapter 15 Logs Scree ns Figure 75 Log Settings The following table describes the fields in this screen. Table 46 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below . If this field is left blan k, logs and al[...]

P-660R/H-D Series User’s Guide Chapter 15 Logs Scr eens 156 15.3 Displaying the Logs Click Logs and then Vi e w L o g to open the Vi e w L o g s screen. Us e the Vi e w L o gs screen to see the logs for the categorie s that you selected in the Log Settings screen (s ee Section 15.2 on page 154 ). Log entries in red indicate alerts . The log wraps[...]

P-660R/H-D Series User’s Guide 157 Chapter 15 Logs Scree ns Figure 76 Vi ew Logs The following table describes the fields in this screen. 15.4 SMTP Error Messages If there are d iffic ulties in se nding e-mail th e following erro r messages appear . E-mail error messages appear in SMT menu 24.3.1 as "SMTP action request failed. ret= ??"[...]

P-660R/H-D Series User’s Guide Chapter 15 Logs Scr eens 158 15.4.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edit the subject title. • The date format here is Day-Month-Y ear . • The date format here is M[...]

P-660R/H-D Series User’s Guide 159 Chapter 15 Logs Scree ns[...]

P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 160 C HAPTER 16 Media Bandwid th Management Advanced Setup This chapter describes bandwidth management wi th one level of child class. This chapte r applies to the P-660H-D. 16.1 Media Bandwid th Management Overview Bandwidth management allo ws you to allocate[...]

P-660R/H-D Series User’s Guide 161 C hapter 16 Media Bandwidth Man agement Advanced Setup 16.2 Bandwid th Classes and Filters Use bandwidth classes and child-classes to alloca te spe cific amounts of bandwidth capacity (bandwidth budgets). Configure a bandwidth filte r to define a bandwidt h class (or child-class) based on a specific application [...]

P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 162 Figure 78 Subnet-based Bandwid th Management Example 16.6 Application and Subnet-based Bandwid th Management Y ou could also create bandwidth clas ses based on a combination of a subnet and an application. The following exam ple table shows bandwidth alloc[...]

P-660R/H-D Series User’s Guide 163 C hapter 16 Media Bandwidth Man agement Advanced Setup 16.7.2 Fairness-based Scheduler The Prestige divides b andwidth equally among bandwidth classes when using the fairness- based scheduler; thus preventing one bandwidth class from using all of the interface’ s bandwidth. 16.7.3 Maximize Bandwid th Usage The[...]

P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 164 16.7.5 Maximize Ba ndwid th Usag e Example Here is an example of a Prestige that has ma ximize bandwidth usage enabled on an interface. The following table shows each bandwidth class’ s bandwidth budget. The classes are set up based on subnets. The inter[...]

P-660R/H-D Series User’s Guide 165 C hapter 16 Media Bandwidth Man agement Advanced Setup • Research requires more bandwidth but only gets its budgeted 20 48 kbps because all of the unbudgeted and unu sed bandwidth go es to the higher priority sales and marketing classes. 16.7.5.2 Fairness-based Allotment of Unused and Unbudgeted Bandwidth The [...]

P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 166 16.8.1 Bandwid th Borrowing Example Here is an example of bandw idth manageme nt with cla sses configured for bandwidth borrowing. The classes are set up based on de partments and individuals within certain departmen ts. • The Research Software and Hardw[...]

P-660R/H-D Series User’s Guide 167 C hapter 16 Media Bandwidth Man agement Advanced Setup Figure 79 Media Bandwid th Mgnt. The following table describes the links in this screen. 16.1 1 Configuring Summary Click Media Bandwidth Management , Summary to open the screen as shown next. Enable bandwidth manage ment on an interface and set the maximum [...]

P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 168 The following table describes the labels in this screen. 16.12 Configuring Class Setup The class setup screen displays the configured band width classes by individual interface. Select an interface and click the buttons to pe rform the actions described n [...]

P-660R/H-D Series User’s Guide 169 C hapter 16 Media Bandwidth Man agement Advanced Setup Figure 81 Media Bandwid th Management: Class Setup The following table describes the labels in this screen. 16.12.1 DiffServ DiffServ is a class of service (CoS) mode l that ma rks packets so that the y receive specific per- hop treatment at DiffServ-complia[...]

P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 170 DSCP is backward compatible with the three precedence bits in the T oS octet so that non- DiffServ compliant , T oS-enabled network device will not conflict with the DSCP mapping. Figure 82 Diff Serv: Diff erentiated Service Field The DSCP value determines[...]

P-660R/H-D Series User’s Guide 171 C hapter 16 Media Bandwidth Man agement Advanced Setup Figure 83 Media Bandwid th Management: Class Configuration The following table describes the labels in this screen. Table 57 Media Bandwid th Management: Class Configuration LABEL DESCRIPTION Class Name Use the auto-generated name or enter a descripti ve nam[...]

P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 172 Enable DiffServ Marking Select this option to enable DiffServ marking on the Prestige. DiffServ Mark Select the marking rule from the drop-do wn list. The first three digits are the DiffServ code point. A packet with the lowest priority mark will be droppe[...]

P-660R/H-D Series User’s Guide 173 C hapter 16 Media Bandwidth Man agement Advanced Setup 16.12.3 Media Ba ndwidth Ma nagement S tatis tics Use the Media Bandwidth Management S tatistics screen to view network performance information. Click the S tatistics button in the Clas s Setup screen to open the St a t i s t i c s screen. Figure 84 Media Ba[...]

P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 174 The following table describes the labels in this screen. 16.13 Bandwid th Monitor T o view the Pres tige’ s bandwidt h usage and allotments, click Media Bandwidth Management , then Monitor . The screen appears as shown. Figure 85 Media Bandwid th Managem[...]

P-660R/H-D Series User’s Guide 175 C hapter 16 Media Bandwidth Man agement Advanced Setup The following table describes the labels in this screen. T able 60 Media Bandwidth Mana gement: Monitor LABEL DESCRIPTION Interface Select an interface from the drop-down li st box to view the bandwidth usage of its bandwidth classes. Class Name This field d[...]

P-660R/H-D Series User’s Guide Chapter 17 Maintenance 176 C HAPTER 17 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 17.1 Maintenance Overview The maintenanc e screens can help you view system inform a tion, upload new firmware, manage configuratio n and restart your Pre[...]

P-660R/H-D Series User’s Guide 177 Chapter 17 Maintenance Figure 86 System S tatus The following table describes th e fields in this screen. Table 61 System S tatus LABEL DESCRIPTION System S tatus System Name This is the name of yo ur Prestige. It is for identification purposes. ZyNOS Firmware Ve r s i o n This is the ZyNOS firmware version and [...]

P-660R/H-D Series User’s Guide Chapter 17 Maintenance 178 17.2.1 System St atistics Click Show S tatistics in the System S tatus scre en to open the following screen. Read-only information here includes port status and packet specific statistics. Also provided are "system up time" and "poll interval(s)". The Poll Interval(s) f[...]

P-660R/H-D Series User’s Guide 179 Chapter 17 Maintenance The following table describes th e fields in this screen. 17.3 DHCP T able Screen DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at star t-up from a server . Y ou can configure the Prestige as a DHCP server or dis[...]

P-660R/H-D Series User’s Guide Chapter 17 Maintenance 180 Figure 88 DHCP T able The following table describes th e fields in this screen. 17.4 Any IP T able Screen Click Maintenance , Any IP . The Any IP table sho ws cu rrent read-only information (including the IP address and the MAC add ress) of all network devices th at use the Any IP feature [...]

P-660R/H-D Series User’s Guide 181 Chapter 17 Maintenance 17.5 Diagnostic Screens These read-only screens display information to help you identify proble ms with the Prestige. 17.5.1 General Diagnostic Click Diagnostic and then General to open the screen sho wn next. Figure 90 Diagnostic: Ge neral MAC Address This field displays the MAC (Media Ac[...]

P-660R/H-D Series User’s Guide Chapter 17 Maintenance 182 The following table describes th e fields in this screen. 17.5.2 DSL Line Diagnostic Click Diagnostic and then DSL Line to o pen the screen shown next. Figure 91 Diagnostic: DSL Line T able 65 Diagnostic: General LABEL DESCRIPTION TCP/IP Address T ype the IP address of a computer that you [...]

P-660R/H-D Series User’s Guide 183 Chapter 17 Maintenance The following table describes th e fields in this screen. 17.6 Firmware Upgrade Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a.bin extension, for example, "Prestige.bi n". The upload proce ss uses HTTP (Hypertext T ransfer Protocol) and[...]

P-660R/H-D Series User’s Guide Chapter 17 Maintenance 184 Figure 92 Firmware Upg rade The following table describes the labels in this screen. Note: Do NOT turn off th e Prestige while firmware upload is in progress! After you see the Firmware Upload in Pr ocess screen, wait two minutes before logging into the Prestige again. The Prestige automat[...]

P-660R/H-D Series User’s Guide 185 Chapter 17 Maintenance Figure 94 Error Message[...]

P-660R/H-D Series User’s Guide Chapter 18 Intro ducing the SMT 186 C HAPTER 18 Introducing the SMT This chapter explains how to access and naviga te the System Management T erminal and gives an overview of its menus. 18.1 SMT Introduction T he Prestige’ s SMT (System Managem ent T erminal) is a menu-driven interface that you can access from a t[...]

P-660R/H-D Series User’s Guide 187 C hapter 18 In troducing the SM T 18.1.3 Prestige SMT Menus Overview The following table gi ves you an overview o f your Prestige’ s various SMT menus. Table 68 SMT Menus Overview MENUS SUB MENUS 1 General Setup 1 .1 Configure Dynamic DNS 2 W A N Backup Setup 2.1 T raffic Redirect Setup 3 LAN Setup 3.1 LAN Por[...]

P-660R/H-D Series User’s Guide Chapter 18 Intro ducing the SMT 188 18.2 Navigating the SMT Interface The SMT (System Manage ment T erminal) is the interface that you use to configure your Prestige. Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below . 24 System Mainten[...]

P-660R/H-D Series User’s Guide 189 C hapter 18 In troducing the SM T After you enter the password, the SMT di splays the main menu, as shown next. 18.2.1 System Manage ment T erminal Interface Summary Entering information T ype in or press [SP ACE BAR], then press [ENTER]. Y ou need to fill in two types of fields. The first requires you to type i[...]

P-660R/H-D Series User’s Guide Chapter 18 Intro ducing the SMT 190 18.3 Changing the System Password Change the P restige defa u lt password by following the steps show n next. 1 Enter 23 in the main menu to display Menu 23 - System Password as shown next. 2 T ype your existing system password in the Old Password field, for example “ 1234 "[...]

P-660R/H-D Series User’s Guide 191 C hapter 18 In troducing the SM T[...]

P-660R/H-D Series User’s Guide Chapter 19 Menu 1 General Setup 192 C HAPTER 19 Menu 1 General Setup Menu 1 - General Setup contains administra tive an d system-related information. 19.1 General Setup Menu 1 — General Setup contains administrative and system-related information (shown next). The System Name field is for identification purpo ses.[...]

P-660R/H-D Series User’s Guide 193 Chapter 19 Menu 1 General Setup Figure 98 Menu 1 General Setup Fill in the required fields. Refer to the tabl e shown next for more information about these fields. 19.2.1 Procedure to Configure Dynamic DNS Note: If you have a private W AN IP address, then you can not use dynamic DNS. T o configure dy namic DNS, [...]

P-660R/H-D Series User’s Guide Chapter 19 Menu 1 General Setup 194 Figure 99 Menu 1.1 Configure Dynamic DNS Follow the instructions in the next tabl e to configure dynamic DNS parameters. Menu 1.1 - Configure Dynamic DNS Service Provider= WWW.Dyn DNS.ORG Active= No Host= EMAIL= USER= Password= ******** Enable Wildcard= No Press ENTER to Confi rm [...]

P-660R/H-D Series User’s Guide 195 Chapter 19 Menu 1 General Setup[...]

P-660R/H-D Series User’s Guide Chapter 20 Menu 2 WAN Backup Setup 196 C HAPTER 20 Menu 2 W AN Backup Setup This chapter describes how to co nfigure traffic redirect and dial-backup using menu 2 and 2.1. 20.1 Introduction to W AN Backup Setup This chapter explains how to configure the Pr estige for traf fic redirect and dial backup connections. 20[...]

P-660R/H-D Series User’s Guide 197 Chapter 20 Menu 2 WAN Backup Setup 20.2.1 T raffic Redirect Setup Configure parameters that determine when th e Prestige will forward W AN traffic to the backup gateway using Menu 2.1 — T raffic Redir ect Setup . Figure 101 Menu 2.1 T raffic Redirect Setup The following table describes the fields in this menu.[...]

P-660R/H-D Series User’s Guide Chapter 20 Menu 2 WAN Backup Setup 198 Metric Th is field sets this route's prio rity among the routes the Prestige uses. The metric represents the "cost of transm ission". A router determines the best route for transmission by choosing a path with th e lowest "cost". RIP routing uses hop co[...]

P-660R/H-D Series User’s Guide 199 Chapter 20 Menu 2 WAN Backup Setup[...]

P-660R/H-D Series User’s Guide Chapter 21 Menu 3 LAN Setup 200 C HAPTER 21 Menu 3 LAN Setup This chapter covers how to configure your wired Local Area Network (LAN) settings. 21.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 — LAN Setup . From the main menu, enter 3 to display menu 3. Figure 102 Menu 3 LAN Setup 2[...]

P-660R/H-D Series User’s Guide 201 C hapter 21 Men u 3 LAN Setup 21.2 Protocol Dependent Ethernet Setup Depending on the proto cols for your applications, you need to co nfigure the respective Ethernet Setup, as outlined below . • TCP/IP Ethernet setup • Bridging Ethernet setup 21.3 TCP/IP Ethernet Setup and DHCP Use menu 3.2 to con figure yo[...]

P-660R/H-D Series User’s Guide Chapter 21 Menu 3 LAN Setup 202 Follow the instructions in the following table on how to configure th e DHCP fields. Follow the instructions in the following tabl e to configure TCP/IP parameters for the Ethernet port. Table 75 DHCP Ethernet Setu p FIELD DESCRIPTION DHCP Setup DHCP If set to Server , your Prestige c[...]

P-660R/H-D Series User’s Guide 203 C hapter 21 Men u 3 LAN Setup[...]

P-660R/H-D Series User’s Guide Chapter 22 Internet Access 204 C HAPTER 22 Internet Access This chapter shows you how to configure the LAN and W AN of your Prestige for Int ernet access . 22.1 Internet Access Overview Refer to the chapters on the web configurat or’ s wizard, LAN and W AN screens for more background information on fields in th e [...]

P-660R/H-D Series User’s Guide 205 Chapter 22 Internet Access Figure 105 IP Alias Network Example Use menu 3.2.1 to configure IP Alias on your Prestige. 22.4 IP Alias Setup Use menu 3.2 to configure the first netw ork. Move the cursor to Edit IP Alias field and press [ SP ACEBAR] to choose Ye s and press [ENTER] to configure the second and third [...]

P-660R/H-D Series User’s Guide Chapter 22 Internet Access 206 Figure 107 Menu 3.2.1 IP Alias Setup Follow the instructions in the following table to configure IP Alias parameters. 22.5 Route IP Setup The first step is to en able the IP routing in Menu 1 — General Setup . T o edit menu 1, type 1 in the main menu and press [ ENTER ]. Set the Rout[...]

P-660R/H-D Series User’s Guide 207 Chapter 22 Internet Access Figure 108 Menu 1 General Setup 22.6 Internet Access Configuration Menu 4 allows you to enter the Internet Access information in one screen. Menu 4 is actually a simplified setup for one of t he remote nodes that you can access in menu 1 1. Before you configure your Prestige for Intern[...]

P-660R/H-D Series User’s Guide Chapter 22 Internet Access 208 . If all your settings are correct your Prestige shou ld connect automatically to the Internet. If the connection fails, note the error message that you receive on the screen and take the appropriate troubleshooting steps. Table 78 Menu 4 Internet Access Setup FIELD DESCRIPTION ISP’s[...]

P-660R/H-D Series User’s Guide 209 Chapter 22 Internet Access[...]

P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 210 C HAPTER 23 Remote Node Configuration This chapter covers remo te node configuration. 23.1 Remote Node Setup Overview This section describes the protocol-independent parameters for a remote node. A remote node is required for placing calls to a remote gateway . A remote n o[...]

P-660R/H-D Series User’s Guide 211 Chapte r 2 3 Remote Node Configuration Figure 1 10 Menu 1 1 Remote No de Setup 23.2.2 Encap sulation and Multiplexing Scenarios For Internet access you should use the encapsulation and multiple xing methods used by your ISP . Consult your telephone company for informat ion on en capsulation and multiplexing meth[...]

P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 212 Figure 1 1 1 Menu 1 1.1 Remote Node Profile In Menu 1 1 .1 – Remote Node Pr ofile , fill in the fields as describ ed in the following table. Menu 11.1 - Re mote Node Profile Rem Node Name= MyISP Route= IP Active= Yes Bridge= No Encapsulation= RFC 1483 Edit IP/Bridge= No M[...]

P-660R/H-D Series User’s Guide 213 Chapte r 2 3 Remote Node Configuration 23.2.3 Outgoing Au thentication Protocol For obvious reasons, you sho uld employ the strongest authentication protocol possible. However , some vendors’ implementation includ es specific authentication protocol in the user profile. It will disconnect if the negotiated pro[...]

P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 214 1 In menu 1 1.1, make sure IP is among the protocols in the Route fi eld. 2 Move the cu rs or to the Edit IP/Bridge field, press [ SP ACE BAR ] to select Ye s , then press [ ENTER] to display Menu 1 1.3 – Remote Node Network Layer Options. Figure 1 12 Menu 1 1.3 Remote No[...]

P-660R/H-D Series User’s Guide 215 Chapte r 2 3 Remote Node Configuration 23.3.1 My W AN Addr Sample IP Addresses The following figure uses sample IP addresses to help you understand the field of My W AN Addr in menu 1 1.3. My W AN Addr indicates the local Prestige W AN IP (172.16.0.1 in the following figure) while Rem IP Addr indicates the peer [...]

P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 216 Figure 1 13 Sample IP Addresses for a TC P/IP LAN -to-LAN Connection 23.4 Remote Node Filter Move the cu rs or to the Edit Filter Sets field in menu 1 1 .1, then press [SP ACE BAR] to select Ye s . Press [ENTER] to display Menu 1 1.5 – Remote Node Filter . Use Menu 1 1.5 [...]

P-660R/H-D Series User’s Guide 217 Chapte r 2 3 Remote Node Configuration Figure 1 15 Menu 1 1.5 Remote Node Filter (PPPoA or PPPoE Encapsulation) 23.4.1 W eb Configurator Inte rnet Security Filter Rules In the web configurator , open the Security screen as shown next. Sele ct the predefined filter rules and click Apply . This section applies to [...]

P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 218 Figure 1 17 Menu 21 Filer Set Configuration The following figures display the filte r rules in filter sets 1 1 and 12. Figure 1 18 Menu 21.1 1 We bSet 1 1 Figure 1 19 Menu 21.12 W ebSet 12 Menu 2 1 - Filter Set Configuration Filter Filter Set # Comments Set # Comments -----[...]

P-660R/H-D Series User’s Guide 219 Chapte r 2 3 Remote Node Configuration Note: Do not edit filter sets 1 1 and 12. They are used exclusively by the web configurator . Any rules you configured in sets 1 1 and 12 will be erased and replaced when you apply the web configura tor-generated filter rules. 23.5 Editing A TM Layer Options Follow the step[...]

P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 220 Figure 121 Menu 1 1.6 for LLC-based Multip lexing or PPP Encapsulation In this case, only one set of VPI and VCI numb ers need be specified for all protocols. The valid range for the VPI is 0 to 25 5 a nd for the VC I is 32 to 65535 (1 to 31 is reserved for local management[...]

P-660R/H-D Series User’s Guide 221 Chapte r 2 3 Remote Node Configuration Figure 123 Menu 1 1.8 Advance Setu p Options The following table describes the fields in this menu. Menu 11.8 - Ad vance Setup Options PPPoE pass-through = No Press ENTER to Con firm or ESC to Cancel: T able 81 Menu 1 1.8 Advance Setup Optio ns FIELD DESCRIPTION PPPoE pass-[...]

P-660R/H-D Series User’s Guide Chapter 24 Static Route Setup 222 C HAPTER 24 S t atic Route Setup This chapter shows how to setup IP static routes. 24.1 IP S tatic Route Overview Stat ic routes tell the Prestige ro uting information that it cann ot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN o[...]

P-660R/H-D Series User’s Guide 223 Chapter 24 Static Route Setup Figure 125 Menu 12 S ta tic Route Setup From menu 12, select 1 to open Menu 12.1 — IP S tatic Route Setup (show n next). Figure 126 Menu 12.1 IP S tatic Route Setup Now , type the route number of a st atic route you want to configure. Figure 127 Menu12.1.1 Edit IP S tatic Route Me[...]

P-660R/H-D Series User’s Guide Chapter 24 Static Route Setup 224 The following table describes the fields for Menu 12.1.1 – Edit IP S tatic Route Setup . T able 82 Menu12.1.1 Edit IP S tatic Route FIELD DESCRIPTION Route # This is the index number of the stat ic route that you chose in menu 12.1. Route Name T ype a descriptive name for thi s ro[...]

P-660R/H-D Series User’s Guide 225 Chapter 24 Static Route Setup[...]

P-660R/H-D Series User’s Guide Chapter 25 Bridgin g Setup 226 C HAPTER 25 Bridging Setup This chapter shows you how to configure the brid ging parameters of your Prestig e. 25.1 Bridging in General Bridging bases the forwarding decision on th e MAC (Media Access Control), or ha rdware address, while routing does it on the network layer (IP) addre[...]

P-660R/H-D Series User’s Guide 227 Chapter 25 Bridging Setup Figure 128 Menu 1 1.1 Remote Node Profile 3 Move the cursor to the Edit IP/Bridge field, then press [ SP ACE BAR ] to set the value to Ye s and press [E NTER] to edit Menu 1 1.3 – Remote Node Network Layer Options . Figure 129 Menu 1 1.3 Remote Node Network Laye r Options The followin[...]

P-660R/H-D Series User’s Guide Chapter 25 Bridgin g Setup 228 25.2.2 Bridge St atic Route Setup Similar to network layer static routes, a bridging static route tells the Prestige the route to a node before a connectio n is established. Y ou c onfigure bridge static routes in menu 12.3.1 (go to menu 12, choose option 3, then choose a static route [...]

P-660R/H-D Series User’s Guide 229 Chapter 25 Bridging Setup[...]

P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 230 C HAPTER 26 Network Address T ranslation (NA T) This chapter discusses how to configure NA T on the Prestige. 26.1 Using NA T Y ou must create a firewall rule in addition to setting up SUA/NA T , to allow traffic from the W AN to be forwarded through the Prestige. 26.[...]

P-660R/H-D Series User’s Guide 231 Chapter 26 Network Address Translat ion (NAT) Figure 131 Menu 4 Applying NA T for Internet Access The following figure shows how you apply NA T to the remote node in menu 1 1.1. 1 Enter 1 1 from the main menu. 2 When menu 1 1 appears, as shown in th e follo wing figure, type the number of the remote node that yo[...]

P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 232 26.3 NA T Setup Use the address mapping sets me nus and submenus to create the mapping table used to assign global addresses to computers on the LAN. Set 255 is used for SUA. When you select Full Feature in menu 4 or 1 1.3, the SMT will use Set 1 . When you select SUA[...]

P-660R/H-D Series User’s Guide 233 Chapter 26 Network Address Translat ion (NAT) Figure 134 Menu 15.1 Addr ess Mapping Sets 26.3.1.1 SUA Address Mapping Set Enter 255 to display th e next screen (see also Sect ion 26.1.1 on page 230 ). The fields in this menu cannot be changed. Figure 135 Menu 15.1.255 SUA Address Mapping Rule s The following tab[...]

P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 234 26.3.1.2 User-Defined Address Mapping Set s Now let’ s look at option 1 in menu 15.1. En ter 1 to bring up this menu. W e’ll just look at the differences from the previous menu. Note the extra Action and Select Rule fields mean you can configure rules in this scre[...]

P-660R/H-D Series User’s Guide 235 Chapter 26 Network Address Translat ion (NAT) 26.3.1.3 Ordering Y our Rules Ordering your rules is important because the Pr estige applies the rules in the order that you specify . When a rule matches the current pack et, the Prestige takes the corresponding action and the remaining rules are ignored. If there a[...]

P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 236 The following table explains the fields in t his menu. 26.4 Configuring a Server behind NA T Follow these steps to config ure a server behind NA T : 1 Enter 15 in the main menu to go to Menu 15 - NA T Setup . 2 Enter 2 to display Menu 15.2 - NA T Server Sets as shown [...]

P-660R/H-D Series User’s Guide 237 Chapter 26 Network Address Translat ion (NAT) Figure 139 Menu 15.2.1 NA T Server Setup 4 Enter a port number in an unused St a r t P o r t N o field. T o forward only one port, enter it again in the End Port No field. T o specify a range of po rts, enter the last port to be forwarded in the End Port No field. 5 [...]

P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 238 26.5.1 Example 1: Internet Access Only In the following Internet access example, you only need one rule where your ILAs (Inside Local addresses) all map to one dynamic IGA (In side Global Address) assigned by your ISP . Figure 141 NA T Examp le 1 Figure 142 Menu 4 Int[...]

P-660R/H-D Series User’s Guide 239 Chapter 26 Network Address Translat ion (NAT) Figure 143 NA T Examp le 2 In this case, you do exactly as above (use the convenient pre-configured SUA Only set) and also go to menu 15.2 to specify the Inside Server behind the NA T as shown in the next figure. Figure 144 Menu 15.2.1 S pecifying an Inside Server 26[...]

P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 240 Map the other outgoing LAN traffic to IGA3 ( Many : 1 mapping). Y ou also map your third IGA to the web server and mail server on the LAN. T ype Server allows you to specify multiple se rvers, of dif ferent types, to other computers behind NA T on the LAN. The example[...]

P-660R/H-D Series User’s Guide 241 Chapter 26 Network Address Translat ion (NAT) Figure 146 Example 3: Menu 1 1.3 The following figures show how to configure the first rule Figure 147 Example 3: Menu 15.1.1.1 Menu 11.3 - Remote Node Netw ork Layer Options IP Options: Bridge Options: IP Address Assignment= S tatic Ethernet Addr Timeout (min)= 0 Re[...]

P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 242 Figure 148 Example 3: Final Menu 15.1.1 Now configure the IGA3 to map to our web server and mail server on the LAN. 1 Enter 15 from the main menu. 2 Enter 2 in Menu 15 - NA T Setup . 3 Enter 1 in Menu 15.2 - NA T Server Sets to see the following menu. Configure it as [...]

P-660R/H-D Series User’s Guide 243 Chapter 26 Network Address Translat ion (NAT) 26.5.4 Example 4: NA T Unfr iendly Application Programs Some applications do not support NA T Mapping using TCP or UDP port address translation. In this case it is better to use Many-to-Many No Overload mapping as port numbers do not change for Many-to-Many No Overlo[...]

P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 244 Figure 152 Example 4: Menu 15.1.1 Addre ss Mapping Rules Menu 15.1.1 - Address Mappin g Rules Set Name= Example4 Idx Local Start IP Local End IP Global Start IP Global End IP T ype --- --------------- ------------ --------------- ----------- ---- ---- 1. 192.168.1.10 [...]

P-660R/H-D Series User’s Guide 245 Chapter 26 Network Address Translat ion (NAT)[...]

P-660R/H-D Series User’s Guide Chapter 27 Enabling the Firewall 246 C HAPTER 27 Enabling the Firewall This chapter shows you how to ge t started with the Prestige fire wall. This chapter applies to the P-660H-D. 27.1 Remote Management and the Firewall When SMT menu 24.1 1 is configured to allo w management and the firewall is enabled: • The fir[...]

P-660R/H-D Series User’s Guide 247 Chapte r 27 Enabling the Fir ewall Figure 153 Menu 21.2 Firewa ll Setup Use the we b configurator or the co mmand in terpreter to confi gure the firewall rules Menu 21.2 - Firewall Setup The firewall protects against Denial of Service (DOS) attacks w hen it is active. The defa ult Policy sets 1. allow all sessi [...]

P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 248 C HAPTER 28 Filter Configuration This chapter shows you how to create and apply filters. 28.1 About Filtering Y our Prestige uses filters to deci de whether or not to allow passage of a data packet and/or to make a call. There are two types of fi lter appli cations: data filtering[...]

P-660R/H-D Series User’s Guide 249 Chapter 28 Filter Configuration Figure 155 Filter Rule Process Y ou can apply up to four filter sets to a partic ular port to block various types of packets. Because each filter set can have up to six rules, you can have a maximum of 24 rules active for a single port. For incoming packets, yo ur Prestige applies[...]

P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 250 28.2 Configuring a Filter Set for the Prestige T o configure a filter set, follow the steps shown ne xt. 1 Enter 21 in the main menu to display Menu 21 – Filter and Fir ewall Setup . 2 Enter 1 to display Menu 21.1 – Filt er Set Configuration as shown next. Figure 156 Menu 21 F[...]

P-660R/H-D Series User’s Guide 251 Chapter 28 Filter Configuration Figure 158 NetBIOS_LAN Filter Rules Summary Figure 159 IGMP Filter Rules Summary 28.3 Filter Rules Summary Menus The following tables briefly descri be the abbreviations used in menus 21.1.1 and 21.1.2. Menu 21.1.3 - Filter Rules S ummary # A Type Filter Rules M m n - - ---- -----[...]

P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 252 The protocol dependent filter rules abbreviation are listed as follows: 28.4 Configuring a Filter Rule T o configure a filter rule , type its number in Menu 21.1.x – Filter Rules Summary and press [ENTER] to open menu 21.1 .x.1 for the rule. There are two types of filter rules: [...]

P-660R/H-D Series User’s Guide 253 Chapter 28 Filter Configuration 28.4.1 TCP/IP Filter Rule This section shows you how to configure a TCP/IP filter rule. TCP/IP rules allow you to base the rule on the fiel ds in the IP and the upper layer protocol, for example, UDP and TCP headers. T o configure TCP/IP rules, select TCP/IP Filter Rule from the F[...]

P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 254 The following figure illustrates th e logic flow of an IP filter. Port # T ype the desti nation port of the packets you want to filter . The fie ld range is 0 to 65535. A 0 field i s ignored. Port # Comp Select the comparison to apply to the dest inatio n port in the packet agains[...]

P-660R/H-D Series User’s Guide 255 Chapter 28 Filter Configuration Figure 161 Executing an IP Filter 28.4.2 Generic Filter Rule This section shows you how to co nfigure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP , it is generally easier to us e the IP rules directly . For generic rules, th[...]

P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 256 T o configure a generic rule select an empty filter set in menu 21, for example 5. Select Generic Filter Rule in the Filter T ype field and press [ENTER] to open Menu 21.1.5.1 – Generic Filter Rule , as shown in th e following figure. Figure 162 Menu 21.1.5.1 Gener ic Filter Rul[...]

P-660R/H-D Series User’s Guide 257 Chapter 28 Filter Configuration 28.5 Filter T ypes and NA T There are two classes of filter rules, Generic Filter Device rules and Protocol Filter ( TCP/IP ) rules. Generic Filter rules act on the raw data from/ to LAN and W AN. Protocol Filter rules act on IP packets. When NA T (Network Address T ra nslation) i[...]

P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 258 Figure 164 Sample T elnet Filter 1 Enter 1 in the menu 21 to display Menu 21. 1 — Filter Set Configuration . 2 Enter the index number of th e filter set you want to configure (in this case 6) . 3 T ype a descriptive name or comment in the Edit Comments field (for example, TELNET[...]

P-660R/H-D Series User’s Guide 259 Chapter 28 Filter Configuration 2 Go to the Edit Filter Sets field, press [SP ACE BAR] to choose Ye s and press [ENTER]. This brings you to menu 1 1.5. Apply the example filter set (for example, filter set 3) in this menu as shown in the next section. This shows you that you have configured and activated ( A = Y[...]

P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 260 28.7.1 Ethernet T raffic Y ou seldom need to filter Ethernet traffic; however , the filter sets may be useful to block certain packets, reduce traffic and prevent secur ity breaches. Go to me nu 3.1 (shown nex t) and type the number(s) of the filter set (s) that you want to apply [...]

P-660R/H-D Series User’s Guide 261 Chapter 28 Filter Configuration[...]

P-660R/H-D Series User’s Guide Chapter 29 SNMP Configuration 262 C HAPTER 29 SNMP Configuration This chapter explains SNMP Configuratio n menu 22. 29.1 About SNMP Simple Network Management Protocol (SNM P) i s a protocol u sed for exchanging management information b etween network devices. SNMP is a member of the TCP/IP protocol suite. Y our Pres[...]

P-660R/H-D Series User’s Guide 263 Chapter 29 SNMP Configuration The managed devices cont ain object variables/ managed objects that define each piece of information to be collected ab out a device. Examples of vari ables include the number of packets received, node port status etc. A Ma nagement Information Ba se (MIB) is a collection of managed[...]

P-660R/H-D Series User’s Guide Chapter 29 SNMP Configuration 264 Figure 170 Menu 22 SNMP Configura tion The following table describes the SNMP configuration parameters. 29.4 SNMP T rap s The Prestige will send traps to the SNMP mana ger when any one of t he following events occurs: Menu 22 - SNMP Configuration SNMP: Get Community= public Set Comm[...]

P-660R/H-D Series User’s Guide 265 Chapter 29 SNMP Configuration The port number is its interface index under the interface group. 6 whyReboot (defin ed in ZYXEL-MIB) A trap is sent with the reason of restart before rebooting when the system is going to restart (warm start). 6a For intentional reboot : A trap is sent with the message "System[...]

P-660R/H-D Series User’s Guide Chapter 30 System Inform ation and Diagnosis 266 C HAPTER 30 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. 30.1 Overview These tools include updates on system status , port status, log and trace capabiliti es and upgrades for the system software[...]

P-660R/H-D Series User’s Guide 267 Chapter 30 System Information and Diagnosis The following table describes the fields present in Menu 24.1 - System Maintenance - St a t u s which are read-only and mean t for diagnostic purposes. Figure 172 Menu 24.1 System Maintena nce : S tatus The following table describes the fields present in Menu 24.1 - Sy[...]

P-660R/H-D Series User’s Guide Chapter 30 System Inform ation and Diagnosis 268 30.3 System Information T o get to the System Information: 1 Enter 24 to display Menu 24 - System Maintenance . 2 Enter 2 to display Menu 24.2 - System Information and Console Port Speed . From this menu you have two ch oices as shown in the ne xt figure: Figure 173 M[...]

P-660R/H-D Series User’s Guide 269 Chapter 30 System Information and Diagnosis Figure 174 Menu 24.2.1 System Maintena nce: Information The following table describes the fields in this menu. 30.3.2 Console Port Speed Note: The console port is intern al and reserved for technician use only . Y ou can set up different port speeds for the console por[...]

P-660R/H-D Series User’s Guide Chapter 30 System Inform ation and Diagnosis 270 Figure 175 Menu 24.2.2 System Maintena nce : Change Console Port S peed Once you change the Prestige console port speed , you must also set the speed parameter for the communication software you are using to connect to the Prestige. 30.4 Log and T race There are two l[...]

P-660R/H-D Series User’s Guide 271 Chapter 30 System Information and Diagnosis Figure 177 Sample Error an d Informat ion Message s 30.4.2 Syslog and Accounting The Prestige uses the syslog fa cility to log the CDR (Call Deta il Record) and system messages to a syslog server. Syslog and accounting can be configured in Menu 24.3.2 - System Maintena[...]

P-660R/H-D Series User’s Guide Chapter 30 System Inform ation and Diagnosis 272 Figure 179 Syslog Example 1 - CDR SdcmdSyslogSend ( SYSLOG_CDR , SYSLOG_INFO, String); String = board xx line xx ch annel xx, call xx, str board = the hardware board I D line = the WAN ID in a board Channel = channel ID within the WAN call = the call refer ence number[...]

P-660R/H-D Series User’s Guide 273 Chapter 30 System Information and Diagnosis 30.5 Diagnostic The diagnostic facility allows you to test the di f ferent aspects of your Prestige to determine if it is working properly . Menu 24.4 allows y o u to choose among v arious types of diagnostic tests to evaluate your system, as shown in the following fig[...]

P-660R/H-D Series User’s Guide Chapter 30 System Inform ation and Diagnosis 274 The following table describes the diagnostic tests available in menu 24.4 for and the connections. T able 100 Menu 24.4 System Maintenance Menu: Diagnostic FIELD DESCRIPTION Reset xDSL R e-initialize the xDSL link to the tel ephone company . Ping Host Ping the host to[...]

P-660R/H-D Series User’s Guide 275 Chapter 30 System Information and Diagnosis[...]

P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 276 C HAPTER 31 Firmware and Configuration File Maintenance This chapter tells you how to backup an d restor e your configuration file as well as upload new firmware and configuration files. 31.1 Filename Conventions The configuration file (often ca lled the r[...]

P-660R/H-D Series User’s Guide 277 Chapter 31 Firm ware and Config uration File Main tenance The following table is a summary . Please note that the internal filename refe rs to the filename on the Prestige and the external f ilename refers to the filename not on the Prestige, that is, on your computer , local network or FTP site and so the name [...]

P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 278 Figure 181 T elnet in Menu 24.5 31.2.2 Using the FTP Command from the Comman d Line 1 Launch the FTP client on your computer . 2 Enter “ open ”, followed by a space and the IP address of your Prestige. 3 Press [ENTER] when prompted for a username. 4 En[...]

P-660R/H-D Series User’s Guide 279 Chapter 31 Firm ware and Config uration File Main tenance Figure 182 FTP Session Example 31.2.4 GUI-based FTP Clients The following table describes some of the commands that you may see in GUI-based FTP clients. 31.2.5 TFTP and FTP over W AN Management Limit ations TFTP , FTP and T elnet over W AN will not work [...]

P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 280 31.2.6 Backup Configuration Using TFTP The Prestige support s the up/downloading of the firmware and the configuration file using TFTP (T rivial File T ransfer Protocol) over LA N. Although TFTP should work over W AN as well, it is not recommended. T o use[...]

P-660R/H-D Series User’s Guide 281 Chapter 31 Firm ware and Config uration File Main tenance Refer to Section 31.2.5 on page 279 to read about configurations that disallow TFTP and FTP over W AN. 31.3 Restore Configuration This section shows you how to restore a previ ously saved configuration. Note that this function erases the current configura[...]

P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 282 Figure 183 T elnet into M enu 24.6 1 Launch the FTP client on your computer . 2 Enter “ open ”, followed by a space and the IP address of your Prestige. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default is ?[...]

P-660R/H-D Series User’s Guide 283 Chapter 31 Firm ware and Config uration File Main tenance 31.4 Uploading Firmware and Configuration Files This section shows you how to upload firmware and configuratio n files. Y ou can upload configuration files by following the procedure in Section 31.2 on page 277 or by following the instructions in Menu 24.[...]

P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 284 Figure 186 T elnet Into Menu 24.7.2 System Maintenance T o upload the firmware and the configuration file, follow these examples 31.4.3 FTP File Upload Comman d from the DOS Prompt Example 1 Launch the FTP client on your computer . 2 Enter “ open ”, fo[...]

P-660R/H-D Series User’s Guide 285 Chapter 31 Firm ware and Config uration File Main tenance 31.4.4 FTP Session Exampl e of Firmware File Upload Figure 187 FTP Session Example of Firmware File Upload More commands (found in GUI-based FTP clie nts) are listed earlier in this chapter . Refer to Section 31.2.5 o n page 279 to read about configuratio[...]

P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 286 31.4.6 TFTP Upload Command Example The following is an example TFTP command: tftp [-i] host put firmware. bin ras where “ i ” specifies binary image transfer mode (use this mode when transferring binary files), “ host ” is the Prestige’ s IP addr[...]

P-660R/H-D Series User’s Guide 287 Chapter 31 Firm ware and Config uration File Main tenance[...]

P-660R/H-D Series User’s Guide Chapter 32 System Maintenance 288 C HAPTER 32 System Maintenance This chapter leads you through SM T menus 24.8 to 24.10. 32.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the ma in system firmware. The CI provides much of the same functionality as the SMT , while a dding some low-level se tup [...]

P-660R/H-D Series User’s Guide 289 Chapter 32 System Maintena nce 32.2 Call Control Support Call Control Support is only applicable when Encapsulation is set to PPPoE in menu 4 or menu 1 1 .1. The budget management func tion allows you to set a limit on the total outgoing call time of the Prestige within certain times. When the to tal outgoing ca[...]

P-660R/H-D Series User’s Guide Chapter 32 System Maintenance 290 The total budget is the time li mit on the accumulated time for ou tgoing calls to a remo te node. When this limit is reached, th e call will be dropped and further outgoing calls to that remote node will be blocked. After each period, the total budget is re set. The default for the[...]

P-660R/H-D Series User’s Guide 291 Chapter 32 System Maintena nce Figure 193 Menu 24.10 System Maintenance : T ime and Date Setting 32.3.1 Resetting the T ime • The Prestige resets the time in three instances: Menu 24.10 - System Maintena nce - Time and Date Setting Use Time Server when B ootup= None Time Server Address= N /A Current Time: 00 :[...]

P-660R/H-D Series User’s Guide Chapter 32 System Maintenance 292 • On leaving menu 24.10 after making changes. • When the Prestige starts up, if there is a timeserver co nfigured in menu 24.10 . • 24-hour intervals after starting.[...]

P-660R/H-D Series User’s Guide 293 Chapter 32 System Maintena nce[...]

P-660R/H-D Series User’s Guide Chapter 33 R emote Managem ent 294 C HAPTER 33 Remote Management This chapter covers re mote mana gement (SM T menu 24. 11). 33.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) from which computers. When you configure remote[...]

P-660R/H-D Series User’s Guide 295 Chapter 33 Remote Manageme nt Figure 194 Menu 24.1 1 Remote Ma nagement Control The following table describes the fields in this menu. 33.2.2 Remote Management Limit ations Remote management over LAN or W AN will not work when: • A filter in menu 3.1 (LAN) or in menu 1 1.5 (W AN) is applied to block a T elnet,[...]

P-660R/H-D Series User’s Guide Chapter 33 R emote Managem ent 296 33.3 Remote Management and NA T When NA T is enabled: • Use the Prestige’ s W A N IP address when configuring from the W AN. • Use the Prestige’ s LAN IP address when configuring from the LAN. 33.4 System T imeout There is a default system management idle tim eout of five m[...]

P-660R/H-D Series User’s Guide 297 Chapter 33 Remote Manageme nt[...]

P-660R/H-D Series User’s Guide Chapter 34 IP Policy Routing 298 C HAPTER 34 IP Policy Routing This chapter covers setting and appl ying policies used for IP routing. 34.1 IP Policy Routing Overview T raditionally , routing is based on the destinatio n address only and the IAD takes the shortest path to forward a packet. IP Routing Polic y (IPPR) [...]

P-660R/H-D Series User’s Guide 299 Chapter 34 IP Policy Routing • routing the packet to a dif ferent gateway (and hence the outgoing interface). • setting the TO S and precedence fields in the IP header . IPPR follows the existing packet filtering facility of RAS in st yle and in impl ementation. The policies are divided into sets, where rela[...]

P-660R/H-D Series User’s Guide Chapter 34 IP Policy Routing 300 Figure 196 Menu 25.1 IP Routing Po licy Setup T ype a number from 1 to 6 to display Menu 25.1.1 – IP Routing Policy (see the next figure). This menu allows you to configure a policy rule. Menu 25.1 - IP Routing Polic y Setup # A Criteria/Action - - ----------------------- ---------[...]

P-660R/H-D Series User’s Guide 301 Chapter 34 IP Policy Routing Figure 197 Menu 25.1.1 IP Routing Po licy The following table describes the fields in this menu. Menu 25.1.1 - IP Routing Pol icy Policy Set Name= test Active= No Criteria: IP Protocol = 0 Type of Service= Don't C are Packet length= 0 Precedence = Don't C are Len Comp= N/A [...]

P-660R/H-D Series User’s Guide Chapter 34 IP Policy Routing 302 34.5 Applying an IP Policy This section shows yo u where to apply the IP policies after you design them. 34.5.1 Ethernet IP Policies From Menu 3 - Ethern et Setup , type 2 to go to Menu 3.2 - TCP/IP and DHCP Ethernet Setup . Y ou can choose up to four IP policy sets (from 12) by typi[...]

P-660R/H-D Series User’s Guide 303 Chapter 34 IP Policy Routing Figure 198 Menu 3.2 TCP/IP and DHCP Ethernet Se tup Go to menu 1 1.3 (shown next) and typ e the number(s) of the IP Rout ing Policy set(s) as appropriate. Y ou ca n cascade up to four polic y sets by typing their numbers separated by commas. Figure 199 Menu 1 1.3 Remote Node Network [...]

P-660R/H-D Series User’s Guide Chapter 34 IP Policy Routing 304 Route 1 represents the default IP route and route 2 represents the configured IP route. Figure 200 Example of IP Policy Routing T o force packets coming from clients with IP addresses of 192.168.1.33 to 192.16 8.1.64 to be routed to the Internet via the W AN port of the Prestige, fol[...]

P-660R/H-D Series User’s Guide 305 Chapter 34 IP Policy Routing 1 Check Menu 25.1 — IP Routing Po licy Setup to see if the rule is added correctly . 2 Create another policy set in menu 25. 3 Create a rule in menu 25.1 for this set to route packets from any host ( IP=0.0.0.0 means any host) with protocol TCP and port FTP access through another g[...]

P-660R/H-D Series User’s Guide Chapter 34 IP Policy Routing 306 Figure 203 Applying IP Policies Example Menu 3.2 - TCP/IP and DHCP E thernet Setup DHCP Setup DHCP= Server Client IP Pool Starti ng Address= 192.168.1.33 Size of Client IP Poo l= 64 Primary DNS Server= 0 .0.0.0 Secondary DNS Server= 0.0.0.0 Remote DHCP Server= N /A TCP/IP Setup: IP A[...]

P-660R/H-D Series User’s Guide 307 Chapter 34 IP Policy Routing[...]

P-660R/H-D Series User’s Guide Chapter 35 Call Scheduling 308 C HAPTER 35 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulati on only) allows you to dictate when a remote node should be called and for how long. 35.1 Introduction The call scheduling feature allows the Prestige to manage a remote node and dictate when a remot[...]

P-660R/H-D Series User’s Guide 309 Chapter 35 Call Scheduling T o setup a schedule set, select the schedule set you want to setup from menu 26 (1-12) and press [ENTER] to see Menu 26.1 - Schedule Set Setup as shown next. Figure 205 Menu 26.1 Schedule Set Setup If a connection has been already established, your Prestige will not drop it. Once the [...]

P-660R/H-D Series User’s Guide Chapter 35 Call Scheduling 310 Once your schedule sets are conf igured, yo u must then apply them to the desired remote node(s). Enter 1 1 from the Main Menu and then enter the tar get remote node index. Using [SP ACE BAR] , select PPPoE or PPPoA in the Encapsulation field and then press [ENTER] to make the schedule[...]

P-660R/H-D Series User’s Guide 311 Chapter 35 Call Scheduling[...]

P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 312 C HAPTER 36 T roubleshooting This chapter covers potential proble ms and the corresponding remedies. 36.1 Problems St arting Up the Prestige 36.2 Problems with the LAN Table 110 Troubleshooting Starting Up Your Prestige PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I turn on [...]

P-660R/H-D Series User’s Guide 313 Chapter 36 Trouble shooting 36.3 Problems with the W AN Table 112 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The DSL LED is off. Check the telephone wire and connections betwee n the Prestige DSL port and the wall jack. Make sure that the telephone company has checked your phone line and set it up for DSL[...]

P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 314 36.4 Problems Accessing the Prestige 36.4.1 Pop-up Windows, Ja vaScript s and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-u p windows from your device. • JavaScripts (enabled by default). • Java permissions (enabled by default). No[...]

P-660R/H-D Series User’s Guide 315 Chapter 36 Trouble shooting Figure 207 Pop-up Blocker Y ou can also chec k if pop-up blocking is disable d in the Pop-up Blocker section in the Privacy tab. 1 In Internet Explorer , select To o l s , Internet Options , Privacy . 2 Clear the Block pop-ups check box in the Pop-up Block er section of the screen. Th[...]

P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 316 Figure 209 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites .[...]

P-660R/H-D Series User’s Guide 317 Chapter 36 Trouble shooting Figure 210 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 36.4.1.2 JavaScript s If pages of the web configurat or do not display properly in Inte rnet Explorer , ch eck that JavaScripts are allowed. 1 In Internet Explorer , c[...]

P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 318 Figure 21 1 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting . 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is sele cted (the default). 6 Click OK to clos e the window .[...]

P-660R/H-D Series User’s Guide 319 Chapter 36 Trouble shooting Figure 212 Security Settings - Java Scripting 36.4.1.3 Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions ma ke sure that a safety level i[...]

P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 320 Figure 213 Security Settings - Java 36.4.1.3.1 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 make sure that Use Java 2 for <applet> u nder Java (Sun) is selected. 3 Click OK to clos e the window .[...]

P-660R/H-D Series User’s Guide 321 Chapter 36 Trouble shooting Figure 214 Java (Sun) 36.4.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX cont rols or to use T rend Micro Security Services. Make sure that ActiveX controls are allowed in Internet Explorer . Screen shots for Internet Explorer[...]

P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 322 Figure 215 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins . 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected. 6 Then click the OK button.[...]

P-660R/H-D Series User’s Guide 323 Chapter 36 Trouble shooting Figure 216 Security Setting ActiveX Controls[...]

P-660R/H-D Series User’s Guide Appendix A Product Specificat ions 324 Appendix A Product S pecifications See also the Introduction chapter for a general ov erview of the key featu res. S p ecification T ables Table 114 Device Default IP Address 192.168 .1.1 Default Subnet Mask 255.255 .255.0 (24 bits) Default Password 1234 DHCP Pool 1 92.168.1.32[...]

P-660R/H-D Series User’s Guide 325 Appendix A Product Specifications Table 115 Firmware ADSL S tandards Multi-Mode st andard (ANSI T1.413,Issu e 2; G .dmt(G .992.1); G .lite(G992.2)). ADSL2 G .dmt.bis (G .992 .3) ADSL2 G .lite.bis (G .992.4) ADSL2+ (G .992.5) Reach-Extended ADSL (RE ADSL) SRA (Seamless Rate Adaptation) Auto-negotiating rate adapt[...]

P-660R/H-D Series User’s Guide Appendix A Product Specificat ions 326 NA T/SUA Port Forwarding 1024 NA T sessions Multimedia application PPTP under NA T/SUA IPSec passthrough SIP ALG passthrough VPN passthrough Content Filtering (P-660H-D only) Web page blocking by URL keyword. S tatic Routes 16 IP and 4 Bridge Other Features An y IP Zero Configu[...]

P-660R/H-D Series User’s Guide 327 Appendix A Product Specifications[...]

P-660R/H-D Series User’s Guide Appendix B About ADSL 328 Appendix B About ADSL Introduction to DSL DSL (Digital Subscriber Line) te chnology enhances the data ca pacity of the existing twisted- pair wire that runs betwee n the local telephone co mpany switching offi ces and most homes and offices. While the wire itself can handle higher frequenci[...]

P-660R/H-D Series User’s Guide 329 Appendix B About ADSL cable modems, transmission sp eeds drop significantly as mo re users go on-line because the line is shared. 3 ADSL can be "always on" (connect ed). This means that there is no time wasted dialing up the service several times a day and waiting to be connec ted; ADSL is on standby ,[...]

P-660R/H-D Series User’s Guide Appendix C Virtual Circuit Topology 330 Appendix C V irtual Circuit T opology A TM is a connection-oriented techno logy , meaning that it sets up virt ual circuits over which end systems communicate. The terminology for virtual circuits is as follows: Figure 217 Virtual Circuit T opology Think of a virtu al path as [...]

P-660R/H-D Series User’s Guide 331 Appendix C Virtual Circuit Topology[...]

P-660R/H-D Series User’s Guide Appendix D Wa ll-mounting Instructions 332 Appendix D W all-mounting Instructions Do the following to hang your Prestige on a wall. Note: See the product specifications appe ndix for the size of screws to use and how far apart to place them. 1 Locate a high posit ion on wall that is free of obstructions. Use a sturd[...]

P-660R/H-D Series User’s Guide 333 Appendix D Wall-mounting In structions[...]

P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 334 Appendix E Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the softwa [...]

P-660R/H-D Series User’s Guide 335 Appendix E Setting up Your Compute r’s IP Address Figure 219 WIndows 95/98 /Me: Networ k: Configu ration Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks. If you need the ad[...]

P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 336 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect. Configuring 1 In the Network window Configuration tab, s[...]

P-660R/H-D Series User’s Guide 337 Appendix E Setting up Your Compute r’s IP Address Figure 221 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’ s IP address, remove previou sly installed gateways. • If you have a gateway IP addr ess, type it in the New gateway field an d[...]

P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 338 Figure 222 Windows XP: S tar t Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W indow s 2000/NT). Figure 223 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

P-660R/H-D Series User’s Guide 339 Appendix E Setting up Your Compute r’s IP Address Figure 224 Windows XP: Control Panel: Network Connections: Proper ties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties . Figure 225 Windows XP: Local Area Conne ction Properties 5 The Internet Pr otocol TCP/IP P[...]

P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 340 • Click Advanced . Figure 226 Windows XP: Internet Protocol (TCP/IP) P roperties 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK . Do one or more of the fo llowing if you want t[...]

P-660R/H-D Series User’s Guide 341 Appendix E Setting up Your Compute r’s IP Address Figure 227 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain DNS ser ver address automatically if you do not know your DNS server IP address(es). • If you know your D[...]

P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 342 Figure 228 Windows XP: Internet Protocol (TCP/IP) P roperties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click Close ( OK in W ind ows 2000/NT) to close the Local Area Connection Properties window . 10 Close the Network Connections[...]

P-660R/H-D Series User’s Guide 343 Appendix E Setting up Your Compute r’s IP Address Figure 229 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 230 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configur e: list.[...]

P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 344 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Addr ess box. • T ype your subnet mask in the Subnet mask box. • T ype the IP address of your Prestige in the Router [...]

P-660R/H-D Series User’s Guide 345 Appendix E Setting up Your Compute r’s IP Address Figure 232 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Addr ess box. • T ype your subnet mask in the Subnet mask box. • T ype the IP ad[...]

P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 346 Note: Make sure you are logged in as the ro ot administrator . Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE. 1 Click the Red Hat button (located on the bottom left corner), select System Settin[...]

P-660R/H-D Series User’s Guide 347 Appendix E Setting up Your Compute r’s IP Address • If you have a dynamic IP address click Automatically obtain IP addr ess settings with and select dhcp from the drop down list. • If you have a static IP address click S tatically set IP Addresses and fill in the Address , Sub net mask , and Default Gatewa[...]

P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 348 1 Assuming that you have only one network card on th e computer , locate the ifconfig- eth0 configuration file (where eth0 is the name of the Ethernet card). Open the configuration file with any plain text editor . • If you have a dynamic IP address, enter dh[...]

P-660R/H-D Series User’s Guide 349 Appendix E Setting up Your Compute r’s IP Address Figure 240 Red Hat 9.0: Resta rt Ethernet Card V erifying Settings Enter ifconfig in a terminal screen to ch eck your TCP/IP properties. Figure 241 Red Hat 9.0: Checking TCP/IP Properties [root@localhost init.d]# net work restart Shutting down interface eth0 : [...]

P-660R/H-D Series User’s Guide Appendix F IP S ubnetting 350 Appendix F IP Subnetting IP Addressing Routers “route” based on the network number . The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (ei ght bits), wri tten in dotted decimal notation, for [...]

P-660R/H-D Series User’s Guide 351 Appendix F IP Subnetting Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127. Similarly the first octet of a clas s “B” must begi n with “10”, therefore the first octet of a class “B” address has a valid r[...]

P-660R/H-D Series User’s Guide Appendix F IP S ubnetting 352 Since the mask is always a continuous number of ones begin ning from the left, fo llowed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet. This is usually specified by writing a “[...]

P-660R/H-D Series User’s Guide 353 Appendix F IP Subnetting Note: In the following chart s, shaded/bolded last octet bit values indicate host ID bit s “borrowed” to form network ID bits. The number of “borrowed” host ID bits determin es the number of subnets you can have. The remaining number of h ost ID bits (after “borrowing”) deter[...]

P-660R/H-D Series User’s Guide Appendix F IP S ubnetting 354 Example: Four Subnet s The above exampl e illustrated using a 25-bit subne t mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations of 00 ,[...]

P-660R/H-D Series User’s Guide 355 Appendix F IP Subnetting Example Eight Subnet s Similarly use a 27-bit mask to create 8 subnets (001, 010, 01 1, 100, 101, 1 10). The following table shows class C IP ad dress last octet values for each subnet. The following table is a summary for class “C” subnet planning. Table 126 Subnet 4 IP/SUBNET MASK [...]

P-660R/H-D Series User’s Guide Appendix F IP S ubnetting 356 Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet ma sk also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets ava ilable for subnetting and a class [...]

P-660R/H-D Series User’s Guide 357 Appendix F IP Subnetting[...]

P-660R/H-D Series User’s Guide Appendix G B oot Comma nds 358 Appendix G Boot Commands The BootModule A T commands execute fro m wi thin the router ’ s bootup software, when debug mode is selected before the main router firmware is start e d. When you start up your Prestige, you are given a choice to go into deb ug mode by pressing a key at the[...]

P-660R/H-D Series User’s Guide 359 Appendix G Boo t Commands Figure 243 Boot Module Commands AT just answer OK ATHE print help ATBAx change baudrat e. 1:38.4k, 2:19.2k, 3:9.6k 4:57.6k 5:115 .2k ATENx,(y) set BootExtens ion Debug Flag (y=password) ATSE show the seed of password generator ATTI(h,m,s) change system time to hour:min:sec or show curre[...]

P-660R/H-D Series User’s Guide Appendix H Com mand Interpreter 360 Appendix H Command Interpreter The following describes how to use the comman d interpreter . Enter 24 in the main menu to bring up the system maintena nce menu. Enter 8 to go to Menu 24.8 - Command Interpr e ter Mode . See the included disk or zyxel.com for more detailed informati[...]

P-660R/H-D Series User’s Guide 361 Appendix H Command Interpreter[...]

P-660R/H-D Series User’s Guide Appendix I Firewall Commands 362 Appendix I Firewall Commands The following describes the firewall commands. Table 130 Firewall Commands FUNCTION COMMAND DESCRIPTION Firewall Se tUp config edit firewall active <yes | no> This command turns the firewall on or off. config retrieve firewall This command returns t[...]

P-660R/H-D Series User’s Guide 363 Appendix I Firewall Commands config edit firewall e-mail return-addr <e-mail address> This command sets the source e-mail add ress of the firewall e-mails. config edit firewall e-mail email-to <e-mail address> This command sets the e-mail address to which the fire wall e-mails ar e sent. config edit [...]

P-660R/H-D Series User’s Guide Appendix I Firewall Commands 364 config edit firewall attack minute-low <0-255> This command sets the threshold of half-open sessions where the Prestige stops deleting half-opened sessions. config edit firewall attack max-incomplete-high <0-255> This command sets the threshold of half-open sessions where[...]

P-660R/H-D Series User’s Guide 365 Appendix I Firewall Commands Config edit firewall set <se t #> log <yes | no> This command sets whether or not the Prestige creates logs for packet s that match the firewall’s default rule set. Rules Config edit firewall set <set #> rule <rule #> permit <forward | block> This comm[...]

P-660R/H-D Series User’s Guide Appendix I Firewall Commands 366 config edit firewall set <se t #> rule <rule #> destaddr- range <start ip address> <en d ip address> This command sets a rule to have the Prestige check for traffic going to this range of addresses. config edit firewall set <se t #> rule <rule #> T[...]

P-660R/H-D Series User’s Guide 367 Appendix I Firewall Commands[...]

P-660R/H-D Series User’s Guide Appendix J Splitters and Microfilters 368 Appendix J S plitters and Microfilters This appendix tells you how to install a POTS splitter or a telephone microfilter . Connecting a POTS S p litter When you use the Full Rate (G .dmt) ADSL standard, you ca n use a POTS (Plain Old T elephone Service) splitter to separate [...]

P-660R/H-D Series User’s Guide 369 Appen dix J Splitters and Micr ofilters 2 Connect a cable from the double jack end of the Y -Connector to th e “wall side” of the microfilter . 3 Connect another cable from the double jack end of the Y -Connec tor to the Prestige. 4 Connect the “phone side” of the microfilter to your telephone as sh own [...]

P-660R/H-D Series User’s Guide Appendix K PPPoE 370 Appendix K PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP ov er Ethernet, RFC 2516) from your computer to an A TM PVC (Permanent V irt ual Circuit) whic h connects to a DSL Access Concentrator where the PPP session ter minates (see Figure 247 on p age 371 ). One PVC[...]

P-660R/H-D Series User’s Guide 371 Appendix K PPPoE Figure 247 Single-Compute r per Router Hard ware Configuration How PPPoE W orks The PPPoE driver makes the Ethernet appea r as a serial link to the computer and the computer runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC). Between the AC and an ISP ,[...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 372 Appendix L Internal SPTGEN Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configuration text file useful for efficient configuration of multiple Prestiges. In ternal SP TGEN lets you configure, save and upload multiple menus at the same time using j[...]

P-660R/H-D Series User’s Guide 373 Appendix L Internal SPTGEN Some parameters are dependent on othe rs. For example, if you disable the Configur ed field in menu 1 (see Figure 249 on page 372 ), then you disable every field in this menu. If you enter a parameter that is invalid in the In put column, the Prestige will not save the configuration an[...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 374 Figure 252 Internal SP TGEN FTP Download Example Note: Y ou can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you uplo ad it to your Prestige. Internal SPTGEN FTP Upload Example 1 Launch your FTP application. 2 Enter " bin[...]

P-660R/H-D Series User’s Guide 375 Appendix L Internal SPTGEN This section covers Prestige Internal SP TGEN sc reens. The following ar e Internal SP TGEN screens asso ciated with the SMT screens of your Prestige. Table 131 Abbreviations Used in the Exam ple Internal SPTGEN Screens Table ABBREVIA TION MEANING FIN F ield Identification Num ber (not[...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 376 30100014 = Outp ut device filters Set 2 = 256 30100015 = Outp ut device filters Set 3 = 256 30100016 = Outp ut device filters Set 4 = 256 / Menu 3.2 TCP/IP and DHCP E thernet Setup (SMT Menu 3.2) FIN FN PVA INPUT 30200001 = DHCP <0(None) | 1(Server) | 2(Relay)> = 0 30200002 = Cli[...]

P-660R/H-D Series User’s Guide 377 Appendix L Internal SPTGEN 30201006 = IP Ali as #1 Incoming protocol filters Set 1 = 256 30201007 = IP Ali as #1 Incoming protocol filters Set 2 = 256 30201008 = IP Ali as #1 Incoming protocol filters Set 3 = 256 30201009 = IP Ali as #1 Incoming protocol filters Set 4 = 256 30201010 = IP Ali as #1 Outgoing proto[...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 378 Table 134 Menu 4 Internet Acce ss Setup (SMT Menu 4) / Menu 4 Internet Access Set up (SMT Menu 4) FIN FN PVA INPUT 40000000 = Conf igured <0(No) | 1(Yes)> = 1 40000001 = ISP <0(No) | 1(Yes)> = 1 40000002 = Acti ve <0(No) | 1(Yes)> = 1 40000003 = ISP' s Name = Cha[...]

P-660R/H-D Series User’s Guide 379 Appendix L Internal SPTGEN 40000027 = ATM Qo S Type <0(CBR) | (1 (UBR)> = 1 40000028 = Peak C ell Rate (PCR) = 0 40000029 = Sustai n Cell Rate (SCR) = 0 40000030 = Maximu m Burst Size(MBS) = 0 40000031= RIP Direction <0(None) | 1(Both) | 2(In Only) | 3(Out Only)> = 0 40000032= RIP Version <0(Rip-1[...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 380 120103002 = IP Static Route set #3, Active <0(No) |1(Yes)> = 0 120103003 = IP Static Route set #3, Destination IP address = 0.0.0.0 120103004 = IP Static Route set #3, Destination IP subnetmask = 0 120103005 = IP Static Route set #3, Gateway = 0.0.0.0 120103006 = IP Static Route [...]

P-660R/H-D Series User’s Guide 381 Appendix L Internal SPTGEN FIN FN PVA INPUT 120107001 = IP Static Route set #7, Name <Str> = 120107002 = IP Static Route set #7, Active <0(No) |1(Yes)> = 0 120107003 = IP Static Route set #7, Destination IP address = 0.0.0.0 120107004 = IP Static Route set #7, Destination IP subnetmask = 0 120107005 [...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 382 120110007 = IP Static Route set #10, Private < 0(No) |1(Yes)> = 0 */ Menu 12.1.11 IP Static Ro ute Setup (SMT Menu 12.1.11) FIN FN PVA INPUT 120111001 = IP Static Route set #11, Name <Str> = 120111002 = IP Static Route set #11, Active < 0(No) |1(Yes)> = 0 120111003 = [...]

P-660R/H-D Series User’s Guide 383 Appendix L Internal SPTGEN 120114005 = IP Static Route set #14, Gateway = 0.0.0.0 120114006 = IP Static Route set #14, Metric = 0 120114007 = IP Static Route set #14, Private < 0(No) |1(Yes)> = 0 */ Menu 12.1.15 IP Static R oute Setup (SMT Menu 12.1. 15) FIN FN PVA INPUT 120115001 = IP Static Route set #15[...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 384 150000008 = SUA Server #3 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000009 = SUA Server #3 Port Start = 0 150000010 = SUA Server #3 Port End = 0 150000011 = SUA Server #3 Local IP address = 0.0.0.0 150000012 = SUA Server #4 Active <0(No) | 1(Yes)> = 0 150000013 = SUA Server [...]

P-660R/H-D Series User’s Guide 385 Appendix L Internal SPTGEN 150000042 = SUA Server # 10 Active <0(No) | 1(Yes)> = 0 150000043 = SUA Server #10 Protocol <0(All)| 6(TCP)|17(U DP)> = 0 150000044 = SUA Server #10 Port Start = 0 150000045 = SUA Server #10 Port End = 0 150000046 = SUA Server #10 Local IP address = 0.0.0.0 150000047 = SUA [...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 386 210101011 = IP Filter Set 1,Rule 1 Src Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 0 210101013 = IP Filter Set 1,Rule 1 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210101014 = IP Filter Set 1,Rule 1 Act Not Match <1(check next)|2(forward)| 3(dr[...]

P-660R/H-D Series User’s Guide 387 Appendix L Internal SPTGEN 210103007 = IP Filter Set 1,Rule 3 Dest Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 1 210103008 = IP Filter Set 1,Rule 3 Src IP address = 0.0.0.0 210103009 = IP Filter Set 1,Rule 3 Src Subnet Mask = 0 210103010 = IP Filter Set 1,Rule 3 Src Port = 0 210103011 [...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 388 210105002 = IP Filter Set 1,Rule 5 Active <0(No)|1(Yes)> = 1 210105003 = IP Filter Set 1,Rule 5 Protocol = 17 210105004 = IP Filter Set 1,Rule 5 Des t IP address = 0.0.0.0 210105005 = IP Filter Set 1,Rule 5 Dest Subnet Mask = 0 210105006 = IP Filter Set 1,Rule 5 Dest Port = 138 2[...]

P-660R/H-D Series User’s Guide 389 Appendix L Internal SPTGEN 210106013 = IP Filter Set 1,Rule 6 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210106014 = IP Filter Set 1,Rule 6 Act Not Match <1(check next)|2(forward)| 3(drop)> = 2 Table 137 Menu 21.1 Filter Set #1 (SMT Men u 21.1) (continued) Table 138 Menu 21.1 Filer Set #2 , (S[...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 390 210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 Active <0(N o)|1(Yes)> = 1 210202003 = IP Filter Set 2, Rule 2 Protocol = 6 210202004 = IP Filter Set 2, Rule 2 Dest IP address = 0.0.0.0 210202005 = IP Filter Set 2, Rule 2[...]

P-660R/H-D Series User’s Guide 391 Appendix L Internal SPTGEN 210203011 = IP Filter Set 2, Rule 3 S rc Port Comp <0(none)|1(equal)|2 (not equal)|3(less)|4(gr eater)> = 0 210203013 = IP Filter Set 2, Rule 3 A ct Match <1(check next)|2(forward)|3( drop)> = 3 210203014 = IP Filter Set 2,Rule 3 Ac t Not Match <1(check next)|2(forward)|[...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 392 210205004 = IP Filter Set 2, Rule 5 Dest IP address = 0.0.0.0 210205005 = IP Filter Set 2, Rule 5 Dest Subnet Mask = 0 210205006 = IP Filter Set 2, Rule 5 Dest Port = 13 8 210205007 = IP Filter Set 2, Rule 5 Dest Port Comp <0(none)|1(equal)|2 (not equal)|3(less)|4(gr eater)> = 1 [...]

P-660R/H-D Series User’s Guide 393 Appendix L Internal SPTGEN 210206013 = IP Filter Set 2,Rule 6 Ac t Match <1(check next)|2(forward)|3( drop)> = 3 210206014 = IP Filter Set 2,Rule 6 Ac t Not Match <1(check next)|2(forward)|3( drop)> = 2 241100005 = FTP Server Access <0(all)|1(none)|2(L an)|3(Wan)> = 0 241100006 = FTP Server Sec[...]

P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 394 230400001 = Wireless Port Control <0(Authentication Required) |1(No Access Allowed) |2(No Authentication Required)> = 2 230400002 = ReAuthentication Timer (in second) = 555 230400003 = Idle Timeout (in second) = 99 9 230400004 = Authentication Databases <0(Local User Database [...]

P-660R/H-D Series User’s Guide 395 Appendix L Internal SPTGEN Command Examples The following are example Internal SP TGEN scr eens associated with the Prestige’ s command interpreter commands. Table 141 Command Examples FIN FN PV A INPUT /ci command (for annex A): w an adsl opencmd FIN FN PVA INPUT 990000001 = ADSL OPMD <0(glite)|1(t1.413 )|[...]

P-660R/H-D Series User’s Guide Appendix M Log Descriptions 396 Appendix M Log Descriptions This appendix provides descrip tions of example log messages. Table 142 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on informati on from the time server . Time calibration failed The [...]

P-660R/H-D Series User’s Guide 397 Appendix M Lo g Descriptions Configuration Change: PC = 0x%x, Task ID = 0x%x The router is saving configuration changes. Successful SSH login Someone has logged on to the router ’s SSH server . SSH login failed Someone has failed to log on to the router ’s SSH server . Successful HTTPS login Someone has logg[...]

P-660R/H-D Series User’s Guide Appendix M Log Descriptions 398 Table 145 TCP Reset Lo gs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a TCP reset packet when a host was unde r a SYN flood attack (the TCP incompl ete count is per d estination host.) Exceed TCP MAX incomplete, sent TCP RST The router sent a TCP reset[...]

P-660R/H-D Series User’s Guide 399 Appendix M Lo g Descriptions Table 147 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICM P <Packet Direction>, <type:%d >, <code:%d> ICMP access matched the default policy and was blocked or forwarded according to the user's setting. For type and code details, see T able 159 o[...]

P-660R/H-D Series User’s Guide Appendix M Log Descriptions 400 ppp:LCP Closing Th e PPP connection’s Link Control Protocol stage is closing. ppp:IPCP Closing The PPP connection’s Internet Protocol Control Protoc ol stage is closing. Table 150 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can pass through the firewa[...]

P-660R/H-D Series User’s Guide 401 Appendix M Lo g Descriptions Connecting to content filter server fail The connection to the external content fi ltering server failed. License key is invalid The external content filter in g license key is invalid. Table 152 Attack Logs LOG MESSAGE DESCRIPTION attack [TCP | UDP | IGMP | ESP | GRE | OSPF] The fir[...]

P-660R/H-D Series User’s Guide Appendix M Log Descriptions 402 Table 153 IPSec Logs LOG MESSAGE DESCRIPTION Discard REPLAY packet The router re ceived and discarded a packet with an incorrect sequence number . Inbound packet authentication failed The router received a packet that has been altered. A third party may have altered or tampered with t[...]

P-660R/H-D Series User’s Guide 403 Appendix M Lo g Descriptions Cannot resolve Secure Gate way Addr for rule <%d> The router couldn’t resolve t he IP address from the domain name that was used for the secure gateway address. Peer ID: <peer id> <My rem ote type> -<My local type> The displayed ID information did not match [...]

P-660R/H-D Series User’s Guide Appendix M Log Descriptions 404 XAUTH fail! Username: <Username> The router was not able to use extended authentication to authenticate the listed username. Rule[%d] Phase 1 negotiation mode mismatch The listed rule’s IKE phase 1 negotiation mode did not ma tch between the router and the peer . Rule [%d] Pha[...]

P-660R/H-D Series User’s Guide 405 Appendix M Lo g Descriptions Rule [%d] phase 2 mismatch The l isted rule’s IKE phase 2 di d not ma tch betwe en the router and the peer . Rule [%d] Phase 2 key len gth mismatch The listed rule’s IKE phase 2 key lengths (with the AES encryption algorithm) di d not match between the router and the peer . Table[...]

P-660R/H-D Series User’s Guide Appendix M Log Descriptions 406 Rcvd data <size> too large! Max size allowed: <max size> The router received dire ctory data that was too large (the size is listed) from the LDAP server whose address and port are recorded in the Source field. The maximu m size of di rectory data that the router all ows i[...]

P-660R/H-D Series User’s Guide 407 Appendix M Lo g Descriptions 26 Database method failed. 27 Path was not verified. 28 Maximum path length reached. Table 157 802.1X Logs LOG MESSAGE DESCRIPTION Local User Database accepts user. A user was authenticated by the local user database. Local User Database repo rts user credential error. A user was not[...]

P-660R/H-D Series User’s Guide Appendix M Log Descriptions 408 Table 158 ACL Setting Notes P ACKET DIRECTION DIRECTION DESCRIPTION (L to W) LAN to W AN ACL set for packets traveling from the LAN to the W AN. (W to L) W AN to LAN ACL set for packets traveling from the W AN to the LAN. (D to L) DMZ to LAN ACL set for packets traveling from the DM Z[...]

P-660R/H-D Series User’s Guide 409 Appendix M Lo g Descriptions The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for detailed information on each type. 11 T ime Exceeded 0 T ime to live exceed ed in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 Pointer indicates the error [...]

P-660R/H-D Series User’s Guide Appendix M Log Descriptions 410 Log Commands Go to the command in terpreter interface. Configuring What Y ou W ant the Prestige to Log 1 Use the sys logs load command to load the log setting buffer that allows you to configure which logs the Prestige is to record. 2 Use sys logs category to view a list of the log ca[...]

P-660R/H-D Series User’s Guide 411 Appendix M Lo g Descriptions Use 0 to not record logs for that cate g ory , 1 to record only logs for that category , 2 to record only alerts for that category , and 3 to record both logs and alerts for that category . No t every parameter is available with every category . 5 Step 5.Use the sys logs save command[...]

P-660R/H-D Series User’s Guide Index 412 Index Numerics 11 0 V A C 5 230V AC 5 A Abnormal Working Conditions 6 AC 5 Access methods 246 Accessories 5 Acts of God 6 Address Assignment 63 Address mapping 90 Address Resolution Protocol (ARP) 67 ADSLstandards 38 Airflow 5 Alternative Subnet Mask Notation 352 American Wire Gauge 5 Any IP 39 , 66 How it[...]

P-660R/H-D Series User’s Guide 413 Index Charge 6 Circuit 3 Class B 3 Class Name 171 Class of Service 169 Class of Service (CoS) 169 Collision 268 Command Interpreter Mode 288 Communications 3 Community 263 compact 41 compact guide 44 Compliance, FCC 3 Components 6 Computer Name 192 Condition 6 Conditions that prevent TF TP and FTP from working o[...]

P-660R/H-D Series User’s Guide Index 414 Electric Shock 5 Electrical Pipes 5 Electrocution 5 E-mail Log Example 158 embedded help 46 Encapsulated Routing Link Protocol (ENET ENCAP) 70 Encapsulation 70 , 208 , 21 1 ENET ENCAP 70 PPP over Ethernet 70 PPPoA 70 RFC 1483 71 Equal V alue 6 Error Log 270 Ethernet 325 Europe 5 Exposure 5 F Failure 6 Fair[...]

P-660R/H-D Series User’s Guide 415 Index High V oltage Points 5 Hop Count 215 , 224 Host 48 Host IDs 350 HTTP 86 , 99 , 10 0 , 101 HTTP (Hypertext Transfer Protocol) 183 I IANA 65 IANA (Internet Assigned Number Authority) 121 ICMP echo 103 Idle timeout 213 IGMP 66 IGMP support 215 Indirect Damages 6 Install UPnP 144 Windows Me 144 Windows XP 146 [...]

P-660R/H-D Series User’s Guide Index 416 Login 212 Logs 154 M MAC (Media Access Control) 180 MAC address 228 Main Menu 189 maintenance 176 management idle timeout period 45 Management Information Ba se (MIB) 263 Materials 6 Maximize Bandwidth Usage 163 Maximum Burst Size (MBS) 74 , 77 Max-incomplete High 130 Max-incomplete Low 130 MBSSee Maximum [...]

P-660R/H-D Series User’s Guide 417 Index Point-to-Point 328 Point-to-Point Tunneling Protocol 86 policy-based routing 298 Pool 5 POP3 86 , 100 , 10 1 Port Numbers 86 Postage Prepaid. 6 Power Adaptor 5 Power Cord 5 Power Outlet 5 Power Supply 5 Power Supply , repair 5 PPP Encapsulation 219 PPP Log 273 PPP session over Ethernet (PPP over Ethernet, [...]

P-660R/H-D Series User’s Guide Index 418 Rights 2 Rights, Legal 6 RIP 202 , 215 RIPSee Routing Information Protocol 65 Risk 5 Risks 5 RMA 6 romfile 276 Root Class 168 Routing 204 Routing Information P rotocol 65 Direction 65 Ve r s i o n 65 Routing Policy 298 Rule Summary 11 6 Rules 11 4 Checklist 11 3 Key Fields 11 4 LAN to W A N 11 4 Logic 11 3[...]

P-660R/H-D Series User’s Guide 419 Index System Management T erminal 188 System Parameter T able Generator 37 2 System S tatus 267 System T imeout 13 9 , 296 T T ampering 6 TCP Maximum Incomplete 130 , 131 TCP Security 106 TCP/IP 100 , 101 , 139 , 257 , 274 T eardrop 101 T elecommunication Line Cord. 5 T elephone 7 T elevision Interference 3 T el[...]

P-660R/H-D Series User’s Guide Index 420 Web Configurator 44 , 45 , 46 , 99 , 107 , 11 4 , 24 7 web configurator screen summary 46 Web Site 7 Wet B a se me n t 5 Wizard Setup 59 Workmanship 6 Worldwide Contact Information 7 Writ ten Permission 2 X XMODEM protocol 277 Z Zero Configurati on Internet Access 39 Zero configuratio n Internet a ccess 74[...]