ZyXEL Communications Prestige 28641 manuel d'utilisation

Prestige 2864I User’s Manual Version 2.0 ZyXEL A CCESSING T HE I NTERNET & I NTRANET[...]

ii ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or ma[...]

iii you specific legal rights, and you may also have other rights which vary from state to state. Copyright © 1997 b y ZyXEL The contents of this book may not be reproduced (in any part or as a whole) or transmitted in any form or by any means without the written permission of the publisher. Published by ZyXEL Communications Corporation. All right[...]

iv interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. If this equipment do es cause harmful interference to radio/television reception, which can be determined by t[...]

v method of connection. In some cases, the company’s inside wiring associated with a single line individual service may be extended by means o f a certified connector assembly. The customer should be aware that the compliance with the above conditions may not prevent degradation of service in some situations. Repairs to certified equipment should[...]

vi • The Council Directive 89/336/EEC of 3 May 1992 on the approximation of the laws of the member states relation to Electro Magnetic Compatibility. (EMC Directive) • Council Directive 91/263/EEC of 29 April 1991 on the approximation of the laws of the Member States concerning telecommunication terminal equipment. (The Telecom Terminal Equipme[...]

vii • Techn ical support : support@zyxel.com in North America. support@zyxel.hinet.net outside North America. • Product information : Visit our site on the World Wide Web: http://www.zyxel.com. • FTP : Information , such as ZyXEL software and ROM updates for North America can be found at this FTP address: ftp.zyxel.com For European and Asian [...]

viii Contents ZyXEL Limited Warranty ii Copyright © 1997 by ZyXEL iii Acknowledgments iii FCC Part 15 Information iii Information for Canadian Users iv Contacting ZyXEL vi 1 Introduction 1 Features 1 Ease of Installation 1 ISDN Basic Rate Interface (BRI) 2 Built - in V.34 Modem 2 Multiple Networking Protocol Support 2 Standard Phone Jack 2 Dial On[...]

ix Mobile Users with V.34 Modems 5 What This Manual Covers 5 What Th is Manual Doesn’t Cover 6 Other Resources 6 Packing List 7 Additional Installation Requirements 7 2 Before You Begin 9 Road Map and Flow 9 Completing the Worksheet 10 Ordering Your ISDN Line 10 Collecting General Setup Information 11 Collecting ISDN Phone Line Information 12 Col[...]

x General Ethernet Setup 36 TCP/IP Ethernet Setup and DHCP 37 Novell IPX Ethernet Setup 40 Bridge Ethernet Setup 40 4 Configuring for Internet Access 41 IP Addresses and the Internet 42 Internet Access Configuration 43 Single User Account 46 Configuration for Single User Account 48 Configuring Backup ISP Accounts 48 5 Remote Node Configuration 51 B[...]

xi Prestige on LAN without Server 80 IPX Spoofing 81 IPX Ethernet Setup 81 LAN - to - LAN Application 83 Remote Node Setup 83 Static Route Setup 85 9 Bridging Configuration 89 IPX Spoofing 89 Bridge Ethernet Setup 89 LAN - to - LAN Application 91 Remote Node Setup 91 Default Dial - In Setup for Bridge 92 Bridge Static Route Setup 93 10 Filter Confi[...]

xii Using RADIUS Authentication for CLID 114 Configuring the SMT Password 115 13 Telnet Configuration and Capabilities 117 About Telnet Configuration 117 Telnet Capabilities 118 Single Administrator 118 System Timeout 118 14 System Maintenance 119 System Status 119 Terminal Baud Rate 122 Log and Trace 123 View Error Log 123 Syslog And Accounting 12[...]

xiii Problems with the LAN Interface 137 Can’t PING any station on the LAN 137 Problems Connecting to a Remote Node or ISP 137 Problems Connecting to a Remote User 138 16 ISDN Switch Types 139 Provisioning For U.S. Switches 139 Prov isioning For the AT&T 5ESS Switches 140 Provisioning For the Northern Telecom Switch 141 17 Index 143[...]

xiv[...]

Introduction 1 1 Introduction Congratulations on your purchase of the ZyXEL Prestige 2864I Remote Access Router. The Prestige is the first device to integrate a Router and Bridge into a single package. In a modem - sized box, the Prestige offers inexpensive yet complete telecommunications and internetworking solutions for your home or branch office[...]

2 Introduction ISDN Basic Rate Interface (BRI) Using either a standard S/T or U Int erface the Prestige supports a full range of switch types . The switch type depends on the CO (Central Office) switch your ISDN line is connected to. See Chapter 16 for more information on North American, European, and Asian ISDN firmware and switch types supported [...]

Introduction 3 Bandwidth On Demand The Prestige supports bandwidth up to 128Kbps over a single ISDN BRI line. It incorporates PPP/MP (Point - to - Point Protocol/Multilink Protocol ) to bundle two B channels over a BRI line. In addition, the Prestige dynamically allocates bandwidth between the two B channels, increasing or decreasing speeds as need[...]

4 Introduction Call Control The Prestige provides budget management for outgoing calls and maintains a blacklist for unreachable phone numbers in order to save you the expense of unnecessary charges. Data Compression The Prestige incorporates Stac data compressi on and CCP (Compression Control Protocol). Networking Compatibility The Prestige is com[...]

Introduction 5 Multiprotocol LAN - to - LAN Connection The Prestige can dial to or answer calls from another remote access router connected to a different network. The Prestige supports TCP/IP , Novell IPX , and has the capability to bridge any Ethernet protocol. Telecommuting Server The Prestige allows Remote Dial - in Users to dial - in and gain [...]

6 Introduction 4. Part Four - Advanced Management (Ch apters 11 - 14) - provides information on advanced management features for network managers. 5. Part Five - System Maintenance (Chapters 15 - 16) - describes maintenance features for checking system status and logging errors. Regardless of the application, it is important that you follow the ste[...]

Introduction 7 Packing List Before you proceed further, check all items you received with your Prestige against this list to make sure nothing is missing. The complete package should include: • One Prestige 2864I. • One power adapter. • One RJ - 45 phone cable. • One RJ - 11 phone cable. • One 25 pin female - 9 pin male adapter. • One L[...]

8 Introduction • A computer equipped with communications software configured to the following parameters: • VT100 terminal emulation. • 9600 Baud rate. • No parity, 8 Data bits, 1 Stop bit. After the Prestige has been successfully connected to your network, you can make future changes to the configuration by using a Telnet application.[...]

Before You Begin 9 2 Before You Begin To ensure successful installation of your Prestige, we strongly recommend that you carefully follow the steps outlined in Chapters 2 and 3 . These chapters are designed as a guide for you to collect the necessary information about your ISDN phone line, and the LAN which you will be connec ted to. Once this info[...]

10 Before You Begin Figure 2 - 1 Installation Guide Completing the Worksheet Before you continue locate the worksheet at the end of this chapter. This information worksheet has been provided to help you get through setup and installation of your Prestige as easily as possible. Ordering Your ISDN Line If you do not have the ISDN line installed alrea[...]

Before You Begin 11 long waits common when ordering a new line. Use the information in this section to place the order (see Chapter 16 for information o n provisioning your ISDN line). If you have already installed your ISDN line, you can check the following section to make sure that you can use all the features of your Prestige. 1. Contact your lo[...]

12 Before You Begin management protocol and will be displayed as the prompt when the user enters the Command Mode. • Route IP Field - For Internet access, you will need to enable the Route IP Field. See Chapter 4 for more details on configuring your Prestige for Internet access. To support Novell IPX , or Bridging , enable the appropriate protoco[...]

Before You Begin 13 • B Channel Usage - Determine which connection is appropriate for your B channel and check the corresponding option on the worksheet . If your Prestige is the only device using the ISDN line, then configure B Channel Usage to Switch/Switch so that your device will use both B channels to communicate. If your Prestige is sharing[...]

14 Before You Begin Collecting Ethernet Setup Information This section assumes that you are setting up your Prestige for a TCP/IP connection. If you want to configure the Prestige for other protocols (e.g., IPX ), refer to the ap propriate chapters. • Ethernet Interface - The first step is to determine the type of Ethernet interface you will be u[...]

Before You Be gin 15 IP Subnet Mask Number of Host IDs Number of Bits 255.255.255.0 254 24 255.255.255.128 126 25 255.255.255.192 62 26 255.255.255.224 30 27 255.255.255.255 1 32[...]

16 Before You Begin Prestige Setup and Installation Worksheet General Setup Information • System Name (for identification purposes): _______________________________________ • Protocol Routing: ___TCP/IP ___IPX ___Bridging ISDN Setup Information • Switch Type (check one): ___AT&T 5ESS NI - 1 ___AT&T Point to Point ___AT&T 5ESS Mult[...]

Before You Begin 17 ___Switch/Unused North America ISDN • 1 st Telephone Number: _______________________________________ • Analog Call (check one): ___Modem ___A/B Adapter ___Ignore • 1 st SPID Number: _______________________________________ • 2 nd Telephone Number: _______________________________________ • Analog Call (check one): ___Mod[...]

18 Before You Begin • A/B Adapter Number & Subaddress: _______________________________________ • Outside Line Prefix Number: _______________________________________ • PBX Number (S/T Bus Number): _______________________________________ • Incoming Number Matching: ___MSN ___CDSA ___Don’t Care • Analog Call Routing: ___Modem ___A/B Ad[...]

Before You Begin 19 • Outside Line Prefix Number: _______________________________________ • PBX Number (S/T Bus Number): _______________________________________ • Incoming Number Matching: ___EAZ ___Don’t Care • Analog Call Routing: ___Modem ___A/B ___Ignore Ethernet Setup Information • Ethernet Interface (check one): ___AUI ___UTP • [...]

20 Before You Begin[...]

Installation 21 3 Installation This ch apter outlines how to connect your Prestige to the LAN and ISDN line. A diagram of the right panel and rear panel of the Prestige are shown below. Please refer to this diagram to identify all of the ports on your device when you attempt to make the various connections. Figure 3 - 1 Rear Panel Diagram[...]

22 Installation A Warning On Connection Cables The RS - 232 , ISDN line, and Ethernet cable, are very similar to each other. It is important that yo u use the correct cable for each connection; otherwise, your Prestige could be damaged. Connecting Your Computer and Your Prestige For the initial setup of your Prestige, you must use an RS - 232 cable[...]

Installation 23 • U interface - This allows you to connect directly to your ISDN wall jack. O N OTE : T HE ISDN JACK IS FOR ISDN LINE CONNECTION ONLY . C ONNECTION OF A PHONE LINE MAY RESUL T IN DAMAGE TO YOUR P RESTIGE . A TTENTION : L A FICHE ISDN EST DESTINÉE UNIQUEM ENT POUR LA CONNEXIO N SUR UNE LIGNE RNIS. L A CONNEXION SUR UNE LIGNE TÉL?[...]

24 Installation connectors that look like a bigger telephone plug with 8 pins. Two types of gray Ethernet cables come with the package: • Straight through cable (white tag): Connect your Prestige to a 10Base - T hub. • Crossover cable (re d tag): Connect your Prestige to your computer directly without a hub. O N OTE : I F THIS CABLE IS USED TO [...]

Installation 25 Figure 3 - 2 Front Panel PWR - This LED (power) comes on as soon as you connect you Prestige to the power supply and switch it to the ‘I’ (on) position. RDY - The ready LED will come on once the Prestige has been turned on and initialized. If this LED is blinking, there is an error and you need to contact technical support. LAN [...]

26 Installation Powering On Your Prestige When you power on your Prestige, the Prestige will perform several internal tests and will also do an ISDN line initialization. After this initialization, the Prestige will ask you to press ENTER to continue as shown below: Figure 3 - 3 Power on Messages If you press ENTER , the Prestige will display a logi[...]

Installation 27 Enter the default password, 1234 to get into the Main Menu of System Management Terminal (SMT ). Note that once you are in the SMT and if there is no activity for longer than 5 minutes, the Prestige will automatically log you out and will display a blank screen. If you see a blank screen, press ENTER to bring up the password screen.[...]

28 Installation indicating that the information must be filled in before that menu can be saved. • N/A Fields. Some of the fields in the SMT will show a N/A. This symbol refers to an option that is not available. • Saving Your Configuration. You can save your configuration by pressing ENTER at the message: Press ENTER to confirm or ESC to cance[...]

Installation 29 # Menu Title Description 2 ISDN Setup Setup ISDN configuration 3 Ethernet Setup Setup Ethernet configura tion 4 Internet Access Setup A quick and easy way to setup Internet connection 11 Remote Node Setup Setup Remote Node for LAN - to - LAN connection including Internet connection. Prestige has four Remote Nodes. 12 Static Routing [...]

30 Installation Figure 3 - 6 Menu 1 - General Setup 1. System Name - Choose a descriptive name for the Prestige for identification purposes, e.g., p2864. This name should be no more than 8 alphanumeric characters. Spaces are not allowed, but “ - ” and “_” are a ccepted. This name can be retrieved remotely via SNMP , used for CHAP authentica[...]

Installation 31 ISDN Setup Menu 2 is for entering information about your ISDN line. Different telephone companies deploy different types of switches for ISDN service. Depending on the switch for your particular installation, you will have a different number of telephone numbers, and i f you are in North America, you may also have SPIDs . Make sure [...]

32 Insta llation 2. B Channel Usage - If you are using one B channel of your Prestige with another device on the S/T bus, then select Switch/Unused . If not choose Switch/Switch . 3. Telephone Number(s) - Enter the telephone number(s) assigned to your ISDN line by your telephone company. Some switch types only have one telephone number. For North A[...]

Installation 33 DSS1 & 1TR6 ISDN Figure 3 - 8 Menu 2 - ISDN Setup for DSS1 Figure 3 - 9 Menu 2 - ISDN Setup for 1TR6 1. Switch Type - This field is fixed as DSS1 or 1TR6 . 2. B Channel Usage - This field is fixed as Switch/Switch. 3. ISDN Data & Subaddress - Enter the telephone number and subaddress assigne d to the ISDN data call for the P[...]

34 Installation 19 digits for the number and 5 digits for the Subaddress. The Subaddress is only applicable to DSS1 . 4. Modem & Subaddress - Enter the telephone number and subaddress assigned to the internal Modem data call for the Prestige. It will be used as outg oing CGPN(Calling Party Number) setting for the internal Modem data call. 5. A/[...]

Installation 35 The analog call will be answered as a modem call when there is a match for the modem subaddress. Or it will be answered as A/B Adapter call when there is a match for the A/B Adapter subaddress. If no modem or A/B Adapter subaddress is specified, then the analog call will not be answered. This option is only available for DSS1. Don?[...]

36 Installation select Yes, the Prestige will perform a loop - back test to check the ISDN line. If the loop - back test fails, note the error message that you receive and take the appropriate troubleshooting action. Figure 3 - 10 ISDN Loop - Back Test Screen Ethernet Setup Menu 3 is used to enter Ethernet related information. Depending on the prot[...]

Installation 37 Figure 3 - 11 Menu 3.1 - General Ethernet Setup 1. Ethernet Interface - The Prestige supports two types of Ethernet connections, the AUI (15 - pin) or the connection for the 10BaseT network (looks like a bigger telephone plug). Determine which type you are using and select the appropriate option in this field. 2. Input and Output Fi[...]

38 Installation Figure 3 - 12 Menu 3.2 - TCP/IP Ethernet Setup 1. DHCP - This field determines what mode of DHCP (Dynamic Host Configuration Protocol ) support the Prestige should use. If it is set to None, DHCP will not be used. If it is set to Server, the Prestige will act as a DHCP server, capable of automatically assigning IP addresses to Windo[...]

Installation 39 first address in the block, and the remaining addresses in the pool are assigned to clients. 4. Primary DNS Server/Secondary DNS Server - These two fields are used by DHCP clients (such as Windows 95 and Windows NT systems) for Domain Name Servers. Usually your Internet provider will provide one or more name service hosts. 5. IP Add[...]

40 Installation Novell IPX Ethernet Setup Refer to the chapter on Novell IPX configuration. Bridge Ethernet Setup Refer to the chapter on Bridging configuration.[...]

Configuring for Internet Access 41 4 Configuring for Internet Access Menu 4 of the SMT allows you to configure Internet access on one screen. Before you configure the Prestige for Internet access, you need to collect the following information from your ISP (Internet Service Provide r). • IP address of the ISP’s gateway (optional). • Telephone[...]

42 Configuring for Internet Access Figure 4 - 1 Internet Access IP Addresses and the Internet Conventionally, the Internet (with a capital I) refers the large - scale interconnected networks across the world that was originally developed by the US Department of Defense. The Internet uses exclusively the TCP/I P suite of protocols. The term “inter[...]

Configuring for Internet Access 43 192.168.0.0 - 192.168.255.255 For this reason, it is recommended that you choose your network number from the above list. You can obtain your IP address from the IANA , from an ISP, or assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can pro[...]

44 Configuring for Internet Access Figure 4 - 2 Menu 4 - Internet Access Setup 1. From the Main Menu, enter 4 to go to Menu 4 - Internet Access Setup as seen above. 2. ISP’s Name - Enter the name of your Internet Service Provider, e.g., myisp. This information is for identification purposes only. 3. ISP IP Addr - Ente r the IP Address of the remo[...]

Confi guring for Internet Access 45 applications, e.g., FTP, to access the Internet from your workstation, you will need a separate login name and password for each server. 7. Single User Account - See the following section for a more detailed discussion on the Single User Account feature. The default is No. 8. Telco Options: Transfer Rate - This f[...]

46 Configuring for Internet Access the Internet connection. If the test fails, note the error message that you receive and take the appropriate troubleshooting steps. Single User A ccount Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, they will have to subscribe to multiple IP addresses or a Class C s[...]

Configuring for Internet Access 47 In summary: 1. SUA is an ideal, cost - effective solution for small offices with less than 20 hosts using a LAN to concurrently access the Internet or other remote TCP/IP network. 2. SUA can provide one server address to be accessed by Remote Dial - in Users , thus controlling the incoming packets. 3. SUA can prov[...]

48 Configuring for Internet Access Configuration for Single User Account The steps for configuring your Prestige for Single User Internet Access are identical to conventional Internet Access with the exception that you need to fill in three extra fields. Follow steps 1 - 8 from the previous section, Interne t Access Configuration . 1. Single User A[...]

Configuring for Internet Access 49 1. Configure your primary ISP using Menu 4, as described earlier in this chapter. 2. Enter Menu 11, then sel ect the number of an unused remote node. 3. In Menu 11.1, choose a name for your backup ISP account, set the Active field to No, and enter your outgoing login name, password, and phone number(s). The Remote[...]

50 Configuring for Internet Access[...]

Remote Node Configuration 51 5 Remote Node Configuration A Remote Node represents both a remote gateway and the internet behind it, across an ISDN connection. A Remote Node is required for placing calls to or answering calls from a remote network. Note that when you use Menu 4 to configure the Internet, the Pr estige will automatically add a Remote[...]

52 Remote Node Configuration Figure 5 - 1 Menu 11 - Remote Node Setup Enter the Remote Node number to edit and you will go to the next submenu: 11.1 - Remote Node Profile as shown below: Figure 5 - 2 Menu 11.1 - Remote Node Profile 1. Rem Node Name - This is a required field. Enter a descriptive name for the Remote Node , e.g., SJHQ. This field can[...]

Remote No de Configuration 53 activated in the future. Deactivated nodes are displayed with a - (minus sign) at the beginning of the name in Menu 11. 3. Call Direction - If this parameter is set to Both, the Prestige can both place and receive calls to/from this Remote Node . If set to Incoming, the Prestige will not place a call to this Remote Nod[...]

54 Remote Node Configuration 8. Outgoing: My Login Nam e - This is a required field if Call Direction is either Both or Out. Enter the login name for the Prestige when it calls this Remote Node . 9. Outgoing: My Password - This is a required field if Call Direction is either Both or Out. Enter the password for the Prestige when it calls this Remote[...]

Remote Node Configuration 55 if available. Once connected, the Prestige will use the BACP (Bandwidth Allocation Control Protocol ) to establish the second B - channel if Multilink PPP is enabled, and the Remote Node supports MP and BACP. Some areas require dialing # before the phone number for local calls. A # symbol may be included at the beginnin[...]

56 Remote Node Configuration 17. Telco Options : Transfer Rate - Thi s field (which only applies to outgoing calls) controls the rate at which the data is transferred between your Prestige and the Remote Node . The options for this field are: • 64K - The Prestige will place 64Kbps (bits per second) digital data calls. (Default) • Modem - The Pr[...]

Remote Node Configuration 57 For more information on customizing your filter sets, see Chapter 10 . The default is blank, i.e., no filters defined. 21. Session Option: Idle Timeout (sec) - This value specifies the number of idle seconds that elapses before the Remote Node is automatically disconnected. Idle seconds is the period of time where no da[...]

58 Remote Node Configuration Utility number for longer than the specified Add Persist value. Similarly, the second channel will be dropped if the traffic level falls below the low Target Utility number for longer than the Subtract Persist value. The Target Utility specifies the line utilization range at which you want the Prestige to add or subtrac[...]

Remote Node Configuration 59 Editing PPP Options Figure 5 - 3 Remote Node PPP Options 1. Encapsulation - Select CCP (Compression Control Protocol) for the PPP or MP link. There ar e two options in this field. • Standard PPP - Standard PPP options will be used. • CISCO PPP - Cisco PPP options will be used. 2. Compression - Turn on the Stac Compr[...]

60 Remote Node Configuration 5. Multiple Link Options: Max Trans Rate - Enter the maximum data transfer rate allowed for this Remote Node . This parameter is in kilobits per second. There are two options for this field: • 64 - At most one channel can be used. • 128 - A maximum of two channels can be used. 6. Multip le Link Options: Target Utili[...]

Dial - In Configuration 61 6 Dial - In Configuration You can configure the Prestige to receive calls from Remote Dial - in Users (e.g. telecommuters) and Remote Node s. There are several differences between R emote Dial - in Users and Remote Nodes: 1. The Prestige can make calls to or answer calls from the Remote Node . However, the Prestige will o[...]

62 Dial - In Configuration Telecommuting Telecommuting enables people to work at remote sites and yet still have access to the resources in the business office. Typically, a telecommuter will uses a client workstation with TCP/IP or IPX and dial - out capabilities, e.g., a Windows 95 PC or a Macintosh and an ISDN Terminal Adapter (TA). For telecomm[...]

Dia l - In Configuration 63 5 ). An example of the Prestige being used as a dial - in server is shown below: Figure 6 - 2 Example of a Dial - In Server Application Default Dial - In Setup This section covers the default dial - in parameters. The parameters in Menu 13 affect incoming calls from all Remote Dial - in Users and Remote Node s before aut[...]

64 Dial - In Configuration Figure 6 - 3 Menu 13 - Default Dial - in Setup From the Main Menu, enter 13 to go to Menu 13 - Default Dial - in Setup. This section will describe how to configure the protocol - independent fields in this menu. For th e protocol - dependent fields, refer to the appropriate chapters. 1. Telco Options : CLID Authen. - This[...]

Dial - In Configuration 65 • None - No authentication required. 3. PPP Options: Mutual Authen. - Some vendors, e.g. Cisco, implement a type of mutual authentication. That is, the nod e that initiates the call will request a user name and password from the far end that they are dialing to. If the Remote Node that is dialing in implements this type[...]

66 Dial - In Configuration address. This is to prevent the remote host from using an invalid IP address and potentially disrupting the whole network. If set to No, the remote host must use the IP address assigned by the Prestige from the IP pool, configured below. The default is Yes. 10. Dial - In IP Address Supplied By: IP Pool - This field tells [...]

Dial - In Configuration 67 number is 12345678, and the count is 2, then the pool will have 12345678 and 12345679. 16. Session Options: Input Filter Sets and Session Options: Output Filter Sets - In these fie lds, you need to select the filter set(s) to filter the incoming and outgoing traffic between your Prestige and the Remote Dial - in User. Kee[...]

68 Dial - In Configuration Figure 6 - 4 Menu 14 - Dial - in User Setup After selecting one of eight users by number and pressing enter you will see Menu 14.1 - Edit Dial - in User as seen below: Figure 6 - 5 Menu 14.1 - Edit Dial - in User 1. User Name - This is a required field. This will be used as the login name for authentication. Choose a desc[...]

Dial - In Configuration 69 3. Password - Enter the password for the Remote Dial - in User. 4. Callback - This field determines if the Prestige will allow call back to the Remote Dial - in User upon dial - in. If this option is enabled, the Prestige will be able to call back to the Remote Dial - in User if they request it. In such a c ase, the Prest[...]

70 Dial - In Configuration More on CLID CLID allows the Prestige to authenticate the caller before a call is answered, thus saving the cost of a connection. The Prestige uses the caller ID in the ISDN call setup message to match against the CLID in the database. However, CLID may not be available due to your switch configuration. Besides authentica[...]

TCP/IP Configuration 71 7 TCP/IP Configuration This chapter shows you how to configure the Prestige for TCP/IP . Depending on your particul ar applications, you will need to configure different menus. For instance, Internet access is the most common application of TCP/IP. For this application, you should configure Menu 4. We will illustrate the con[...]

72 TCP/IP Configuration to partition your class C network 204.247.203.0 with subnet mask 255.255.255.0 into 16 subnets (4 bits), the new subnet mask becomes 255.255.255.240. Number of Bit s Dot Decimal 1 128 2 192 3 224 4 240 5 248 6 252 7 254 8 255 LAN - to - LAN Application A typical LAN - to - LAN application is to use the Prestige to call from [...]

TCP/IP Configuration 73 configure Static Routes if some services reside beyond the immediate remote LAN . Remote Node Setup Follow the procedure in Chapter 5 to fill the protocol - independent parameters in Menu 11, Remote Node Profile. For the protocol - dependent parameters, follow the instructions below. If you are configuring the Prestige to re[...]

74 TCP/IP Configuration 5. Rem IP Subnet Mask - Enter the subnet mask for the remote network. 6. My WAN Addr - Some implementations, especially the UNIX derivatives, require hosts on both ends of the ISDN link to have separate addresses from the LAN , and that the addresses must have th e same network number. If this is the case, enter the IP addre[...]

TCP/IP Configuration 75 9. Metric - The metric represents the “cost” of transmission for routing purpose. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Enter a number that approximates the cost for this link. The number need not be precise, but it must be between 1 and 16. In practice[...]

76 TCP/IP Configuration packets can be forwarded to their destinations. A static route is used to resolve this problem by providing the Prestige with some static routing information. As a matter of fact, when you configure the Internet Access or a Remote Node , a static route is implicitly created by the Prestige. An example is given below. In the [...]

TCP/IP Configuration 77 Figure 7 - 5 Menu 12 - Static Route Setup - Main Menu Figure 7 - 6 IP Static Route Setup 1. Route Name - Enter a descriptive name for this route. This is for identification purpose only. 2. Active - This fields allows you to activate/deactivate this static route. 3. Destination IP Addr ess - This parameter specifies the IP n[...]

78 TCP/IP Configuration 4. IP Subnet Mask - Enter the subnet mask for this destination. Follow the discussion on IP subnet mask in this chapter. 5. Gateway IP Address - Enter the IP address of the gateway. The gateway is an i mmediate neighbor of the Prestige that will forward the packet to the destination. On the LAN , the gateway must be a router[...]

Novell IPX Configuration 79 8 Novell IPX Configuration This chapter shows you how to configure the Prestige for IPX . Depending on your particular applications, you will need to configure different menus. We will illustrate the configuration for some applications in the following sections. IPX Network Environment Frame Type The stations on an IPX n[...]

80 Novell IPX Configuration Figure 8 - 1 Prestige Operating in IPX Environment Prestige on LAN with Server When the Prestige is being connected to a LAN with an existing NetWare server station, you will not need to configure the Prestige as a seed router, and hence the network number parameter in the Ethernet Setup Menu for the Prestige. Rather, th[...]

Novell IPX Configuration 81 IPX Spoofing The Prestige comes with several pre - defined call filters designed to prevent certain IPX packets from triggering a call to a Remote Node . These filters should inform your Prestige which packets should be ignored as traffic. When you are routing IPX packets, the default call filters are defined as follows:[...]

82 Novell IPX Configuration Figure 8 - 2 Menu 3.3 - Novell IPX Ethernet Setup 1. Seed Router - Determine if the Prestige is to act as a seed router. This value depends on the existing network. If there is a NetWare server providing the network number, select No. If there is no NetWare server providing the network number, select Yes. 2. Frame Type -[...]

Novell IPX Configuration 83 Once you have completed filling in the Menu 3.3, press ENTER the save message to save your selections, or press ESC at any time to cancel your selections. LAN - to - LAN Application A typical LAN - to - LAN application is to use the Prestige to call from a branch office to headquarters such that all of the stations on th[...]

84 Novell IPX Configuratio n configured to receive an incoming call, you can configure the default dial - in parameters in menu 13 (see Chapter 6 ). 1. Route - Make sure IP X is among the protocols in the Route field. 2. Edit IP/IPX /Bridge - Press the space bar to change it to Yes and press Enter to go to the network layer options menu. Figure 8 -[...]

Novell IPX Configuration 85 6. Hop Count - This field indicates the number of intermediate networks that must be passed through to reach the Remote Node . The default is one (1). 7. Tick Count - This field indicates the time - ticks required to reach the Remote Node . The default is two (2). 8. W/D Spoofing (min) - This field is used for the Presti[...]

86 Novell IPX Configuration Figure 8 - 5 NetWare Servers on Both Sides of the Link This may present a problem if you desire your client station to access a server at a remote site. For example, in the above diagram, suppose that a client station on the network on the left wishes to access the NetWare server on the right (internal network number = 1[...]

Novell IPX Configuration 87 Figure 8 - 6 Menu 12.2 - Edit IPX Static Route 1. Server Name - In this field, enter in the name that has been configured for the se rver. This name must be the exact name configured in the NetWare server. 2. Network # - This field contains the internal network number of the remote server which you wish to access. Do not[...]

88 Novell IPX Configuration Once you have completed filling in the menu , press ENTER at the message: Press ENTER to Confirm ... to save your selections, or press ESC at any time to cancel your selections.[...]

Bridging Configuration 89 9 Bridging Configuration This chapter shows you how to configure the Bridging options for the Prestige. Depending on your particular applications, you will need to configure different menus. We will illustrate the configuration for some applications in the following sections. IPX Spoofing The Prestige comes with several pr[...]

90 Bridging Configuration Basically, all non - local packets are bridged to the WAN , however, the Prestige applies a special handling for certain IPX packets to reduce the number of calls, depending on the setting of the “Handle IPX” field”. • If it is set to None, nothing is done to IPX traffic. • If it is set to Client, all RIP and SAP[...]

Bridging Configuration 91 IPX. Set it to Client if there are only client workstations on the LAN. Set to Server if there are only IPX servers on the LAN. If there are both clients and servers on the LAN , then the setting depends on if the local clients will access the remote servers. If they do, set to Client and set Dial - On - Broadcast in menu [...]

92 Bridging Configuration Figure 9 - 2 Remote Node Bridging Configuration 3. Dial - On - Broadcast - This field is necessary for the Prestige on the caller side LAN . When set to Yes, any broadcasts coming from the LAN will trigger the Prestige to make a call to that Remote Node . If it is set to No, the Prestige will not make the outgoing call. 4.[...]

Bridging Configuration 93 • PPP Options: Recv. Authen. - verify that this field is not set to None Bridging applications must have some sort of authentication turned on in order to match to a Remote Node . Once you have completed filling in the menu, press ENTER at the message: Press ENTER to Confirm ... to save your selections, or press ESC at a[...]

94 Bridging Configuration Ether (MAC) address matches the value entered above, then it will trigger a call to this Remote Node. Once you have completed filling in the menu, press ENTER at the message: Press ENTER to Confirm ... to save your selections, or press ESC at any time to cancel your selections.[...]

Filter Configuration 95 10 Filter Configuration About Filtering The Prestige uses filters to decide whether or not to allow passage of a data packet and/or to make a call over the ISDN line. There are three types of filters involved: incoming data filters, outgoing data filters, and call filters. Data filters screen the data to determine if the pac[...]

96 Filter Configuration For incoming packets, the Prestige applies data filters only. Packets are processed d epending upon whether a match is made. The Prestige allows you to customize the filter sets that you wish to use. This following sections describe how to configure the Prestige’s filter sets. Prestige’s Filter Structure You can configur[...]

Filter Configuration 97 information will now be displayed in the read - only section of Menu 21 - Filter Set Configuration as shown below: Figure 10 - 2 Menu 21 - Filter Set Configuration Once you press ENTER, you will be taken to Menu - 21.1 - Filter Rules Summary as seen below. The information displayed in this menu is read - only. From here, you[...]

98 Filter Configuration • m - Refers to Action Matched. F means to forward the packet, D means to drop the packet, and N means check the next rule. • n - Refers to Act ion Not Matched. F means to forward the packet, D means to drop the packet, and N means check the next rule. Figure 10 - 3 Menu 21.1 - Filter Rules Summary If the filter type is [...]

Filter Configuration 99 • SS - Source Socket. • DS - Destination Socket. For more information on configuring the filter rule parameters, refer to the next section. To configure a specific filter rule, simply select the number of the filter rule (1 - 6) you wish to configure and press ENTER. This will take you to Menu 21.1.1 - TCP/IP Filter Rule[...]

100 Filter Configuration Figure 10 - 4 Menu 21.1.1 - TCP/IP Filter Rule 1. Active - In this field, you can make the filter rule active or inactive. There are two options: • Yes. • No. 2. IP Protocol - Protocol refers to the IP specific number of the protocol. The range for this value should be between 0 and 255. For example, 6 refers to the TCP[...]

Filter Configuration 101 7. Destination: Port # Comp - In this field, you can select what comparison quantifier you wish to enable to compare to the value given in Destination: Port #. There are five options for this field: • None. • Less. • Greater. • Equal. • Not Equal. 8. Source: IP Addr - In this field, enter the source IP Address of [...]

102 Filter Configuration • Yes - filter match only established TCP connections. • No - filter match both initial and established TCP connections . 13. More - In this field, you can determine if you want to pass the packet through the next filter rule before an action is taken. There are two options for this field: • Yes. • No. If More is Ye[...]

Filter Configuration 103 • Check Next Rule . • Forward. • Drop. Once you have completed filling in Menu 21.1.1 - TCP/IP Filter Rule, press ENTER at the message: Press ENTER to Con firm ... to confirm your selections, or press ESC at any time to cancel your selections. This data will now be displayed on Menu 21.1 - Filter Rules Summary. Generi[...]

104 Filter Configuration 2. Length - This field refers to the length (in bytes) of the data in the packet that the Prestige should use for comparison and masking. The starting point of this data is determined by Offset . The range for this field is 0 to 8. Default = 0 3. Mask - In this field, specify (in Hexadecimal) the value that the Prestige sho[...]

Filter Configuration 105 Figure 10 - 6 Menu 21.1.3 - IPX Filter Rule 1. IPX Packet Type - Enter the IPX packet type value of the packet you wish to filt er. This value should be two hex - bytes. 2. Destination/Source Network # - Enter the four hex - byte destination/source network numbers of the packet that you wish to filter. 3. Destination/Source[...]

106 Filter Confi guration • RIP Request. • RIP Response. • SAP Request. • SAP Response. • SAP Get Nearest Server Request. • SAP Get Nearest Server Response. Once you have completed filling in Menu 21.1.3 - IPX Filter Rule, press ENTER at the message: Press ENTER to Confirm ... to confirm your selections, or press ESC at any time to canc[...]

SNMP 107 11 SNMP About SNMP The Simple Network Management Protocol (SNMP ) is a protocol governing network management and the monitoring of network devices and their functions. The Pre stige supports the utilization of SNMP to regulate the communication that occurs between the manager station and the agent stations in a network. Basically, the Pres[...]

108 SNMP Figure 11 - 1 Menu 22 - SNMP Configuration 1. From the Main Menu, select option 22. SNMP Configuration. This will bring you to Figure 12.1 Menu 22 - SNMP Configuration. 2. You will then be prompted to enter the following information. Steps 3 - 7 will describe the specific parameters involved in the configuration. The parameters you will ha[...]

SNMP 109 leave the field blank (default), then the Prestige will respond to all SNMP messages it receives, regardless of origin. 6. Trap: Community - In this field, enter the community name that is sent with each trap to the SNMP manager. This should be treated like a passwor d and match what the SNMP manager is expecting. The default is public. 7.[...]

110 SNMP[...]

System Security 111 12 System Security The Prestige incorp orates a number of security measures to prevent unauthorized access to your network. For example, the Prestige supports both PAP (Password Authentication Protocol ) and CHAP (Challenge Handshake Authentication Protocol ) in authenticating a Remote Node . More information on CHAP and PAP can[...]

112 System Security obtain a copy of the RADIUS software, along with documentation for the server, at http://www.livingston.com/Tech/FTP/p ub - le - radius.shtml or at ftp://ftp.livingston.com/pub/le/radius/ Follow the included instructions to install the server on your UNIX - based server. Once you have installed the server, you will need to edit [...]

System Security 113 this menu, select option 2, External Server. This will bring you to Menu 23.2 - System Security - External Server. Figure 12 - 1 Menu 23.2 - System Security - External Server The fields in the System Security - External Server menu are as follows: 1. Active - Determines whether the external security facility is enabled. If this [...]

114 System Security #----------------------------- 192.168.0.1 1234 should be added to the client file. The Client Name field in the file gives the IP address of the Prestige router, and the Key field should be the same as the Key field in Menu 23.2. After a RADIUS server has been configured, the Pres tige will use it to authenticate all users that[...]

System Security 115 Zyxel-Callback-Option = Mandatory, Zyxel-Callback-Phone-Source = Preconfigured Dialback-No = “5551212” Note that if CLID is turned off in the Prestige, you still need to have a separate user record for joeuser so the regular user name/password mechanism still works. Configuring the SMT Password Figure 12 - 2 Menu 23.1 - Syst[...]

116 System Security You will now need to enter in this password when you try to get into the SMT . In addition, this password will also be used when a network administrator attempts to telnet to the Prestige.[...]

Telnet Configuration and Capabilities 117 13 Telnet Configuration and Capabilities About Telnet Configuration When you first configure your Prestige, it must be done via a computer connected to the RS - 232 port. However, once the Prestige has been initially configured, you can use telnet to configure the device remotely as shown below: Figure 13 -[...]

118 Telnet Configuration and Capabilities menu 1, telnet will still be available provided you assign the Prestige an IP address. Telnet Capabilities Single Administrator To prevent confusion and discrepancy on the configuration, Prestige will only allow one terminal connection at any time. Prestige also gives priority to the RS - 232 connection ove[...]

System Maintenance 119 14 System Maintenance The Prestige provides diagnostic tools that you can use to maintain your dev ice. Some of these tools include updates on system status, ISDN B channel status, log and trace capabilities and upgrades to the system software. This chapter will describe how to use these tools in greater detail. System Status[...]

120 System M aintenance Figure 14 - 2 Example of Menu 24.1 - System Maintenance - Status 1. To get to the System Status, select option 24. System Maintenance. This will bring you to Menu 24 - System Maintenance. 2. From this menu, select option 1. System Status. 3. There are four (4) possible commands in Menu 24.1 - System Maintenance - Status. Ent[...]

System Maintenance 121 10. Error - the number of error packets on this channel. 11. CLU - (Current Line Utilization) - percentage of current bandwidth used on this channel. 12. ALU - (Average Line Utilization) - average CLU for this channel. 13. Up Time - time this channel has been connected to the current Remote Node . 14. Total Outgoing call Time[...]

122 System Maintenance 25. LAN Packet Which Triggered Last Call - shows the first 48 octets of the L AN packet that triggered the last outgoing call. There are three different types of packets: IP, IPX , and RAW. By viewing the packet information, you can determine which station has sent a packet to cause the Prestige to make an outgoing call. Two [...]

System Maintenance 123 Figure 14 - 4 Menu 24.2 - System Maintenance - Chang e Terminal Baud Rate Log and Trace Log and trace tools allow users of the Prestige to view the error logs and trace records to troubleshoot any errors that may occur. The Prestige is also able to generate syslogs to send to other machines. 1. To get to the Log and Trace, se[...]

124 System Maintenance You can also clear the Error Log on your Prestige. After each display, you are prompted with an option to do so. Enter the appropriate choice and press ENTER. Syslog And Accounting Syslog and Accounting can be configured in Menu 24.3.2 - System Maintenance - Syslog and Accounting. This menu configures the Prestige to send UNI[...]

System Maintenance 125 Session information messages. Some examples of these messages ar e shown below: Call Information Messages: line 1 channel 1, call 41, C01, Incoming Call, 40001 line 1 channel 1, call 41, C01, ANSWER Connected, 64K 40001 line 1 channel 1, call 41, C01, Incoming Call, Call Terminated Error Information Messages: line 1, channel [...]

126 System Maintenance Figure 14 - 6 Menu 24.4 - System Maintenance - Diagnostic 1. From the Main Menu, select option 24. System Maintenance. This will bring you to Menu 24 - System Maintenance. 2. From this menu, select option 4. Diagnostic. This will bring you to Figure 15.4 Menu 24.4 - System Maintenance - Diagnostic. 3. Items 4 - 12 will descri[...]

System Maintenance 127 working properly, the test will succeed. Otherwise, note the error message that you receive and consult your network administrator. 8. Manual Call - This provides a way for the users of the Prestige to place a manual call to a Remote Node . This tests the connectivity to that Remote Node. When you use this command, you will s[...]

128 System Maintenance Figure 14 - 8 Trace Display for a Failed IPCP Connection via Manual Call 1. Internet Setup Test - This test checks to see if your Internet access configuration has been done correctly. When this option is chosen, the Prestige will PING the Internet IP Address. If everything is working properly, you will receive an appropriate[...]

System Maintenance 129 You need to download the configuration onto disk. Procedure for downloading varies depending on the type of software used to access the Prestige but you must use the XMODEM protocol to perform the download. Restore Configuration Selecting option 6 from Menu 24 - Maintenance will restore backup configuration from disk to the P[...]

130 System Maintenance Figure 14 - 9 Example of uploading RAS using PCPLUS • ISDN code update - Type ‘atrs’, ‘atis’, and then ‘atupx’ at the command prompt before uploading the new firmware (upload procedure varies depending on the type of software used to access the Prestige). You must use the XMODEM protocol to perform the upload. A[...]

System Maintenance 131 Call Control The Prestige provides two Call Control Management functions for the Remote Node and Remote Dial - in User. They are the Budget Manage ment and Blacklist . The Budget Management function provides the budget control for the outgoing call and a way for users to set a limit on their ISDN utilization to prevent any ac[...]

132 System Maint enance • Dialer Timeout: Digital Call (sec) - The Prestige will timeout if it can not set up an outgoing digital call within the timeout value. The default is 30. • Dialer Timeout: Analog Call (sec) - The Prestige will timeout if it can not set up an outgoing Modem call within the timeout value . The default is 50. • Retry Co[...]

System Maintenance 133 Budget Management Figure 14 - 12 Budget Management The total budget is the time limit for an outgoing call to a Remote Node or Dial - in User. When this limit is reached, the call will be dropped and further outgoing calls to that Remote Node or Remote Dial - in User (callback) will fail. After each period, the total budget i[...]

134 System Maintenance[...]

Troubleshooting 135 15 Troubleshooting This chapter contains some problems you may run into when using your Prestige. After each problem description, we have provided some instructions to help you diagnose and solve the problem. Problems Starting Up the Prestige None of the LEDs are on when you power up the Prestige • Check the power cord and the[...]

136 Troubleshooting Problems With the ISDN Line The ISDN initialization failed This problem occurs when you attempt to save the parameters entered in menu 2, b ut receive the message, “Save successful, but Failed to initialize ISDN; Press ESC to exit”. 1. Check the error log (in menu 24.3.1), you should see a log entry for the ISDN initializati[...]

Troubleshooting 137 you may only need to enter the last four or five digits (according to your internal dialing plan), e.g., 51212. Pro blems with the LAN Interface Can’t PING any station on the LAN 1. Check the LAN LED on the front panel of your Prestige. If it is on, then the link is up. If it is off, then check the cables connecting your Prest[...]

138 Troubleshooting 4. If you check the error log in menu 24.3.1, this will usually give you some logs regarding why the call was dropped. If there is nothing in the log, the call may have been dropped by the remote device that you dialed in to. Make sure that the configuration parameters between these two devices are consistent. Problems Connectin[...]

ISDN Switch Types 139 16 ISDN Switch Types The following table summarizes the different type of switch types supported by the Prestige and some related information on the switch types (number of phone n umbers and SPID numbers). It should be noted that the information in this table is for the common case and is recommended for those cases. Exceptio[...]

140 ISDN Switch Types Provisioning For the AT&T 5ESS Switches The AT&T 5ESS switch type supports three types of ISDN service. These are: National ISDN - 1 (NI - 1), Multipoint, and Point - to - Point. For AT&T 5ESS National ISDN - 1 Provisioning Feature Setting Term Type A Circuit Switched Voice (CSV) 1 CSV Additional Call Offering (ACO[...]

ISDN Switch Types 141 Provisioning Feature Setting Term Type A Call Appearances (CA) 1 CA Quantity 1 Circuit Switched Voice (CSV) 1 CSV Flexible Call Offering (FCO) Unrestricted CSV limit 2 CSV Notification Busy (NB) limit 1 Circuit Switched Data (CSD) 1 CSD Flexible Call Offering (FCO) Unrestricted CSD limit 2 CSD Notification Busy (NB) limit 1 MT[...]

142 ISDN Switch Types Provisioning Feature Setting Release key No Ringing indicator No Electronic Key Telephone System (EKTS) Yes or No (set to opposite of ACO) Additional Call Offering (ACO) Yes or No (set to opposite of EKTS)[...]

Index 143 17 Index 10Base2, 14, 24 10Base5. See AUI 10Base - T, 14, 23, 24 1TR6, 13, 33, 139 A/B Adapter, 1 Accounting, 123, 124 AUI, 14, 24 , 37, 121, 137 BACP. See Bandwidth Allocation Control Protocol Bandwidth Allocation Control Protocol, 3, 44, 55, 57 Bandwidth Allocation Protocol, 3 Bandwidth On Demand. See BOD BAP. See Bandwidth Allocation P[...]

144 Index IP Address, 14, 39 IP Subnet Mask, 15, 39, 71, 74, 78 IPX, 1, 2, 5, 12, 14, 36, 40, 51, 55, 62, 66, 67, 73, 79, 80, 81, 82, 84, 86, 87, 89, 90, 91, 92, 97, 98, 99, 103, 104, 105, 106, 117, 122, 138 ISDN connecting the line, 22 ISDN Ordering Code, 11, 139 LAN, 1, 2, 4, 5, 6, 7, 9, 29, 39, 42, 46, 47, 51, 61, 62, 72, 73, 74, 78, 79, 80, 81,[...]

Index 145 Simple Network Management Protocol. See SNMP Single User Account, 1, 4, 45, 46, 47, 48 SMT, 26, 27, 28, 29, 41, 45, 111, 115, 116, 135 SNMP, 3, 12, 29, 30, 107, 108, 109 SPID, 11, 13, 14, 30, 136, 139 Spoofing, 81, 85, 89 SUA. See Single User Account s witch types, 2, 13, 31, 136, 139 System Management Terminal, 26 Target Utility, 58, 60 [...]