ZyXEL Communications Prestige100 manuel d'utilisation

Pres t ige 1 00 Us e r ’ s Manua l Version 3.0 JiH5< A CCESSING I NTERNET & I NTRANET[...]

ii Zy X EL Li m ite d Wa r r a nty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship [...]

iii legal rights, and you may also have other rights which vary from state to state. Copyright © 1997 by ZyXEL The contents of this book may not be reproduced (in any part or as a whole) or transmitted in any form or by any means without the written permission of the publisher. Published by ZyXEL Communications Corporation. All rights reserved. No[...]

iv installed and used in accordance with the instructions, may cause harmful interference to radio communications. If this equipment does cause harmful interference to radio/television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following mea[...]

v installed using an acceptable method of connection. In some cases, the company’s inside wiring associated with a single line individual service may be extended by means of a certified connector assembly. The customer should be aware that the compliance with the above conditions may not prevent degradation of service in some situations. Repairs [...]

vi 1. The Council Directive 89/336/EEC of 3 May 1992 on the approximation of the laws of the member states relation to Electro Magnetic Compatibility. (EMC Directive) 2. Council Directive 91/263/EEC of 29 April 1991 on the approximation of the laws of the Member States concerning telecommunication terminal equipment. (The Telecom Terminal Equipment[...]

vii • Product information : Visit our site on the World Wide Web: http://www.zyxel.com. • FTP : Information, such as ZyXEL software and ROM updates for North America can be found at this FTP address: ftp.zyxel.com For European and Asian versions and related files, use the address: ftp.zyxel.co.at • Postal Service : You can send written commun[...]

viii C onte nts ZyXEL Limited Warranty i i FCC Part 15 Information i ii Information for Canadian Users iv Contacting ZyXEL vi 1 Introduction 1 Features 1 Ease of Installation 1 ISDN Basic Rate Interface (BRI) 1 Networking Protocol Support 2 Standard Phone Jack 2 Dial On Demand 2 Bandwidth On Demand 2 Network Management 3 DHCP Support (Dynamic Host [...]

ix Completing the Worksheet 10 Ordering Your ISDN Line 10 Collecting General Setup Information 11 Collecting ISDN Phone Line Information 12 Collecting Ethernet Setup Information 14 3 Installation 21 A Warning On Connection Cables 21 Connecting Your Computer and Your Prestige 22 Connecting the RS-232 Cable to your Prestige 22 Connecting an ISDN Line[...]

x Telecommuting 59 Dial-In Server Application 60 Default Dial-In Setup 61 Dial-In Users Setup 65 More on CLID 67 7 TCP/IP Configuration 69 IP Subnet Mask 69 LAN-to-LAN Application 70 Remote Node Setup 71 Static Route Setup 73 8 Filter Configuration 77 About Filtering 77 Prestige’s Filter Structure 78 Configuring a Filter Set 79 Configuring a Filt[...]

xi Diagnostic 99 Backup Configuration 102 Restore Configuration 103 Software Update 103 Command Interpreter Mode 104 Call Control 104 Call Control Parameters 105 Blacklist 106 Budget Management 107 12 Troubleshooting 109 Problems Starting Up the Prestige 109 None of the LED's are on when you power up the Prestige 109 Connecting the RS-232 cabl[...]

xii[...]

Introduction 1  Intr oduc tion Congratulations on your purchase of a ZyXEL Prestige 100 Remote Access Router. In a modem-sized box, the Prestige offers inexpensive yet complete telecommunications and internetworking solutions for your home or branch office. The Prestige is ideal for everything from surfing the Internet to receiving calls from[...]

2 Introduction the Prestige supports a full range of switch types. The switch type depends on the CO (Central Office) switch your ISDN line is connected to. Please see Chapter 13 for more information on North American, European, and Asian ISDN firmware and switch types supported by the Prestige. The two B-channels can be used independently for two [...]

Introduction 3 Ne tw ork M a na ge m e nt The Prestige supports menu-driven network management via an RS-232 or Telnet connection. The Prestige is also equipped with a Call Detail Record (CDR) to help analyze and manage your telephone bill. DHCP S uppor t (Dyna m i c Host Configura tion P rotoc ol) DHCP (Dynamic Host Configuration Protocol) allows [...]

4 Introduction Applications For Your Prestige Some applications for the Prestige include: In ter n et A cces s The Prestige supports the TCP/IP protocol, which is the language used for the Internet. It is also compatible with access servers manufactured by major vendors such as Cisco and Ascend. Inte rne t S ingl e User A cc ount (SUA ) For a small[...]

Introduction 5 3. Part Three - Setting Up Advanced Applications (Chapter 5- 10) - describes how to use the Prestige for more advanced applications such as TCP/IP. 4. Part Four - Advanced Management (Chapter 11-14) - provides information on advanced management features for network managers. 5. Part Five - System Maintenance (Chapter 15-16) - describ[...]

6 Introduction Packing List Before you proceed further, please check all items you received with your ISDN router against this list to make sure nothing is missing. The complete package should include: • One Prestige 100. • One power adapter. • One RJ-45 phone cable. • One RJ-11 phone cable. • One 25 pin female - 9 pin male adapter. • O[...]

Introduction 7 • A computer equipped with communications software configured to the following parameters: • VT100 terminal emulation. • 9600 Baud rate. • No parity, 8 Data bits, 1 Stop bit. After the Prestige has been successfully connected to your network, you can make future changes to the configuration by using a Telnet application. Plea[...]

8 Introduction[...]

Before You Begin 9  Befo re Y o u Begi n To ensure successful installation of your Prestige, we strongly recommend that you carefully follow the steps outlined in Chapters 2 and 3. These chapters are designed as a guide for you to collect the necessary information about your ISDN phone line, and the LAN which you will be connected to. Once th[...]

10 Before You Begin Figure 2- 1 Installation G uide Completing the Worksheet Before you continue locate the worksheet at the end of this chapter. This information worksheet has been provided to help you get through setup and installation of your Prestige as easily as possible. O rde ring Y our I S DN Line If you do not have the ISDN line installed [...]

Before You Begin 11 information in this section to place the order (see Chapter 13 for information on provisioning your ISDN line). If you have already installed your ISDN line, you can check the following section to make sure that you can use all the features of your Prestige. 1. Contact your local telephone company’s ISDN Ordering Center. 2. Fi[...]

12 Before You Begin • Route IP Field - For Internet access, you will need to enable the Route IP Field. Please see Chapter 4 for more details on configuring your Prestige for Internet access. You have now collected all of the general setup information you need. Please make sure that you have entered all the values onto the worksheet before procee[...]

Before You Begin 13 • B Channel Usage - Determine which connection is appropriate for your B channel and check the corresponding option on the worksheet. If your Prestige is the only device using the ISDN line, then configure B Channel Usage to ‘Switch/Switch’ so that your device will use both B channels to communicate. If your Prestige is sh[...]

14 Before You Begin Coll e c ti ng E therne t Se tup Inform a tion • Ethernet Interface - The first step is to determine the type of Ethernet interface you will be using on the Prestige. There are two options: AUI or UTP. Record the interface type onto the worksheet. If you have a 10Base2 (BNC), you should choose AUI. • IP Address - An IP Addre[...]

Before You Begin 15 IP Subnet Mask Number of Host ID’s Number of Bits 255.255.255.224 30 27 255.255.255.255 1 32[...]

16 Before You Begin P restige S etu p an d I n stallation W o rksh eet General Setup Information • System Name (for identification purposes) : _______________________________________ • • Protocol Routing: ___TCP/IP ISDN Setup Information • • Switch Type (check one): ___AT&T 5ESS NI-1 ___AT&T Point to Point ___AT&T 5ESS Multipo[...]

Before You Begin 17 • 1st Telephone Number: _______________________________________ • • Analog Call (check one): ___Phone1 ___Phone2 ___DOVBS • 1st SPID Number: _______________________________________ • 2nd Telephone Number: _______________________________________ • • Analog Call (check one): ___Phone1 ___Phone2 ___DOVBS • 2nd SPID [...]

18 Before You Begin • Outside Line Prefix Number: _______________________________________ • PABX Number (S/T Bus Number): _______________________________________ • • Incoming Number Matching: ___MSN ___CDSA ___Don’t Care • • Analog Call Routing: ___A/B #1 ___A/B #2 ___Ignore • • Global Analog Call: ___Accept ___Ignore 1 T R6 I S D[...]

Before You Begin 19 • Outside Line Prefix Number: _______________________________________ • PABX Number (S/T Bus Number): _______________________________________ • • Incoming Number Matching: ___EAZ ___Don’t Care • • Analog Call Routing: ___A/B #1 ___A/B #2 ___Ignore Ethernet Setup Information • • Ethernet Interface (check one): _[...]

20 Before You Begin[...]

Installation 21  Ins ta lla tion This chapter outlines how to connect your Prestige to the LAN and ISDN line. A diagram of the rear panel of the Prestige is shown below. Refer to this diagram to identify all of the ports on your device when you attempt to make the various connections. Figure 3- 1 Rear Panel Diagram A Warning On Connection Cab[...]

22 Installation the correct cable for each connection; otherwise, your Prestige could be damaged. Connecting Your Computer and Your Prestige For the initial setup of your Prestige, you must use RS-232 an d communication software to configure the Prestige. After the Prestige has been successfully installed, you can modify the configuration through a[...]

Installation 23 $WWHQWLRQ $WWHQWLRQ  /DILFKH,6'1HVWGHVWLQpHXQLTXHPHQWSRXUODFRQQH[LRQVXUXQHOLJQH 51,6/DFRQQH[LRQVXUXQHOLJQHWpOpSKRQLTXHSHXWHQGRPPDJHUYRWUH 3UHVWLJH Conne c ting a T el ephone /Fa x to y our Pre stige If you wish, you can connect a regular telephone, fax machine[...]

24 Installation • Crossover cable (red tag): Connect your Prestige to your computer directly without a hub. :DUQLQJ :DUQLQJ ,IWKLVFDEOHLVXVHGWRFRQQHFW,6'1LWPDGDPDJHRXU3UHVWLJH • AUI The AUI port (the connector with 15 pins) is used to connect the Prestige to a 10Base5 (thicknet) network. If[...]

Installation 25 ISDN: LNK - This LED indicates that the Prestige has an ISDN line connected to the WAN interface and it has been successfully initialized. ISDN: B1 and B2 - These LEDs are on if there is an active WAN session on that channel or if that channel is making or receiving a call. ETHERNET: LNK - This LED indicates that the Prestige has be[...]

26 Installation Figure 3- 3 Power on M essages If you press ENTER, the Prestige will display a login screen and ask you to enter the password as shown in below: Figure 3- 4 Login S creen Enter the default password, ‘1234’ to get into the Main Menu of System Management Terminal (SMT). Note that once you are in the SMT and if there is no activity[...]

Installation 27 Navigating Through the SMT The SMT (System Management Terminal) i s the interface that you use to configure your Prestige. Several operations that you should be familiar with before you attempt to modify the configuration of your Prestige are listed below: • Moving Forward to Another Menu. To move forward to a sub-menu below the c[...]

28 Installation • Saving Your Configuration. You can save your configuration by pressing ENTER at the message: ‘Press ENTER to confirm or ESC to cancel’: Saving the data on the screen will take you in most cases to the previous menu. The SMT main menu is shown below: Figure 3- 5 SMT Main M enu SMT Summary This section summarizes all major SMT[...]

Installation 29 # Menu Title Description Remote Node and Remote Dial-in User. 14 Dial-in User Setup Setup Remote Dial-in User. Prestige has eight Remote Dial-in Users. 21 Filter Set Configuration Setup filters to be used in Menu 3 and Menu 11 to provide security, call control, etc. 23 System Security Setup security related parameters. 24 System Mai[...]

30 Installation 3. Contact Person’s Name - Enter the name (up to 8 characters) of the person in charge of this Prestige, e.g., Peter Housel. The Location and the Contact Person fields are optional. ISDN Setup Menu 2 is for you to enter information about your ISDN line. Different telephone companies deploy different types of switches for ISDN serv[...]

Installation 31 switch; repeat until you see the correct switch type. The Prestige will not be able to place or to receive calls if the wrong switch type is specified. If you are not sure, contact your telephone company to confirm the exact switch type. 2. B Channel Usage - In general, this will be ‘Switch/Switch’. If you are only using one B c[...]

32 Installation DS S 1 & 1 T R6 I S DN Figure 3- 8 Menu 2 - ISDN S etup for DSS1 Figure 3- 9 Menu 2 - ISDN S etup for 1TR6 1. Switch Type - This field is fixed as DSS1 or 1TR6. 2. B Channel Usage - This field is fixed as Switch/Switch. 3. ISDN Data & Subaddress - Enter the telephone number and subaddress assigned to the ISDN data call for t[...]

Installation 33 field should be no longer than 19 digits for the number and 5 digits for the Subaddress. The Subaddress is only available for DSS1. 4. A/B Adapter 1 & Subaddress - Enter the telephone number and subaddress assigned to the A/B Adapter 1 (POTS port 1) call for the Prestige. It will be used as outgoing CGPN(Calling Party Number) se[...]

34 Installation Adapter 1 call when there is a match for the A/B Adapter 1 subaddress. Or it will be answered as A/B Adapter 2 call when there is a match for the A/B Adapter 2 subaddress. If A/B Adapter 1 or 2 subaddress is specified, then the analog call will not be answered. This option is only available for DSS1. • Don’t care - all numbers a[...]

Installation 35 check the ISDN line. If the loop-back test fails, please note the error message that you receive and take the appropriate troubleshooting action. Figure 3- 1 0 ISDN Loop-back Test Screen T CP/IP Ethe rne t Se tup a nd DHCP Menu 3 is used to enter Ethernet related information as seen below: Figure 3- 1 1 Menu 3 - Ethernet Setup[...]

36 Installation If you are setting up your network for the first time, please read Chapter 4 Configuring for Internet Access before proceeding. The chapter contains important information on how to assign IP addresses for your network. 1. Ethernet Interface - The Prestige supports two types of Ethernet connections, the AUI (15-pin) or the connection[...]

Installation 37 5. Size of Client IP Pool - Gives the size of the block of addresses reserved for DHCP address assignment. The Prestige itself uses the first address in the block, and the remaining addresses in the pool are assigned to clients. 6. Primary DNS Server/Secondary DNS Server - These two fields are used by DHCP clients (such as Windows 9[...]

38 Installation When you are finished, press ENTER at the message: ‘Press ENTER to Confirm...’ to save your selections, or press ESC at any time to cancel them.[...]

Configuring for Internet Access 39  C onfigur ing for Inte r ne t A ccess Menu 4 of the SMT allows you to configure Internet access on one screen. Before you configure the Prestige for Internet access, you need to collect the following information from your ISP (Internet Service Provider). • IP address of the ISP’s gateway (optional). •[...]

40 Configuring for Internet Access Figure 4- 1 Internet Access IP Addresses and the Internet Conventionally, the Internet (with a capital I) refers the large-scale interconnected networks across the world that was originally developed by the US Department of Defense. The Internet uses exclusively the TCP/IP protocols. The term “internet” (lower[...]

Configuring for Internet Access 41 For this reason, it is recommended that you choose your network number from the above list. You can obtain your IP address from the IANA, from an ISP, or assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addr[...]

42 Configuring for Internet Access Figure 4- 2 Men u 4 - Internet Access Setup 1. From the Main Menu, enter ‘4’ to go to ‘Menu 4 - Internet Access Setup’ as seen above. 2. ISP’s Name - Enter the name of your Internet Service Provider, e.g., myisp. This information is for identification purposes only. 3. ISP IP Addr - Enter the IP Address [...]

Configuring for Internet Access 43 6. My Password - Enter the password associated with the login name above. Please note that this login name/password pair is only for the Prestige to connect to the ISP’s gateway. When you use TCP/IP applications, e.g., FTP, to access the Internet from your workstation, you will need a separate login name and pas[...]

44 Configuring for Internet Access Single User Account Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, they will have to subscribe to multiple IP addresses or a Class C subnetwork from the ISP. In either case, these two approaches will cost more than a single user account. The Single User Account (SUA)[...]

Configuring for Internet Access 45 1 . SUA i s a n ideal, cost-effective solution for small offices with less than 20 hosts using a LAN to concurrently access the Internet or other remote TCP/IP network. 2 . SUA can provide one server address to be accessed by Remote Dial-in Users, thus controlling the incoming packets. 3 . SUA can provide firewall[...]

46 Configuring for Internet Access Configuration for Single User Account The steps for configuring your Prestige for Single User Internet Access are identical to conventional Internet Access with the exception that you need to fill in three extra fields. Follow steps 1-8 from the previous section, Internet Access Configuration. 1. Single User Accou[...]

Configuring for Internet Access 47 1. Configure your primary ISP using Menu 4, as described earlier in this chapter. 2. Enter Menu 11, then select the number of an unused remote node. 3. In Menu 11.1, choose a name for your backup ISP account, set the Active field to No, and enter your outgoing login name, password, and phone number(s). The Remote [...]

48 Configuring for Internet Access[...]

Remote Node Configuration 49  Remo t e No de C onfigur a tion A Remote Node represents both a remote gateway and the internet behind it, across an ISDN connection. A Remote Node is required for placing calls to or answering calls from a remote network. Note that when you use Menu 4 to configure the Internet, the Prestige will automatically ad[...]

50 Remote Node Configuration Figure 5- 1 Menu 11 - Remote Node Profile Enter the Remote Node number to edit and you will go to the next submenu: ‘11.1 - Remote Node Profile’ as shown below: Figure 5- 2 Menu 11.1 - Remote Node Profile 1. Rem Node Name - This is a required field. Enter a descriptive name for the Remote Node, e.g., SJHQ. This fiel[...]

Remote Node Configuration 51 operation of the Prestige, even though it is still kept in the database, and can be activated in the future. Deactivated nodes are displayed with a - (minus sign) at the beginning of the name in Menu 11. 3. Call Direction - If this parameter is set to ‘Both’, the Prestige can both place and receive calls to/from thi[...]

52 Remote Node Configuration from this node and call it back at the Outgoing Primary Phone Number (see below). 8. Outgoing: My Login Name - This is a required field if Call Direction is either ‘Both’ or ‘Out’. Enter the login name for the Prestige when it calls this Remote Node. 9. Outgoing: My Password - This is a required field if Call Di[...]

Remote Node Configuration 53 Remote Node using the Primary Phone number first. If the Primary Phone number is busy or does not answer, the Prestige will call the Secondary Phone number if available. Once connected, the Prestige will use the BACP (Bandwidth Allocation Control Protocol) to establish the second B-channel if Multilink PPP is enabled, a[...]

54 Remote Node Configuration • DOVBS - (For North America only) The Prestige will place 56Kbps Data Over Voice Bearer Service (DOVBS) call. Some phone companies in North America charge less if calls are made with DOVBS option. 17. Telco Options: Allocated Budget (min) - This field will set a ‘budget’ outgoing call time for the Remote Node. Th[...]

Remote Node Configuration 55 Bandwidth on Demand The Bandwidth on Demand (BOD) feature allows you to bundle both B channels in one logical connection. The second channel is added and subtracted dynamically according to traffic demand. The Prestige uses the Bandwidth Allocation Control Protocol (BACP) and the Multilink Protocol (MP) i n implementing[...]

56 Remote Node Configuration determination, and ‘Receive’ will only use incoming traffic to make this determination. If, after making the call to bring up a second channel, the second channel does not succeed in joining the Multilink Protocol bundle (because the remote device does not recognize the second call as coming from the same device), t[...]

Remote Node Configuration 57 4. Multiple Link Options: Base Trans Rate - Select the base data transfer rate for this Remote Node. This parameter is in kilobits per second (Kbps). There are two options for this field: • 64 - Only one channel will be used. • 128 - Two channels will be used when a packet triggers a call. 5. Multiple Link Options: [...]

58 Remote Node Configuration[...]

Dial-In Configuration 59  D ial- In C onfigur at ion You can configure the Prestige to receive calls from Remote Dial- in Users (e.g. telecommuters) and Remote Nodes. There are several differences between R emote Dial-in Users and Remote Nodes: 1. The Prestige can make calls to or answer calls from the Remote Node. But the Prestige will only [...]

60 Dial-In Configuration telecommuter. Additionally, you need to configure the Default Dial-In Setup to set the operational parameters for all dial-in users. You can configure up to eight Remote Dial-in Users for the Prestige. An example of Remote Dial-in User application, telecommuting, is shown below: Figure 6- 1 Example of Remote User: Telecommu[...]

Dial-In Configuration 61 Figure 6- 2 Example of a Dial-In Server Application Default Dial-In Setup This section covers the default dial-in parameters. The parameters in Menu 13 affect incoming calls from all Remote Dial-in Users and Remote Nodes before authentication is completed. Once authentication is completed, and if it matches a Remote Node, t[...]

62 Dial-In Configuration Figure 6-3 Menu 13 - Default Dial-in Setup From the Main Menu, enter ‘13’ to go to ‘Menu 13 - Default Dial- in Setup’. This section will describe how to configure the protocol- independent fields in this menu. For the protocol-dependent fields, please refer to the appropriate chapters. 1. Telco Options: CLID Authen.[...]

Dial-In Configuration 63 • None - no authentication required. 3. PPP Options: Mutual Authen. - Some vendors, e.g. Cisco, implement a type of ‘mutual authentication’. That is, the node that initiates the call will request a user name and password from the far end that they are dialing to. If the Remote Node that is dialing in implements this t[...]

64 Dial-In Configuration address. This is to prevent the remote host from using an invalid IP address and potentially disrupting the whole network. If set to No, the remote host must use the IP address assigned by the Prestige from the IP pool, configured below. The default is ‘Yes’. 10. Dial-In IP Address Supplied By: IP Pool - This field tell[...]

Dial-In Configuration 65 sets, please see Chapter 8 on Filter Configuration. The default is blank, i.e., no filters. 14. Session Options: Idle Timeout - This value is the number of idle seconds that elapses before the dial-in user is automatically disconnected. Idle Timeout is the period of time when there is no data traffic between the dial-in use[...]

66 Dial-In Configuration Select one of eight users by number, this will bring you to Figure 6- 2‘Menu 14.1 - Edit Dial-in User’. Figure 6- 5 Menu 14.1 - Edit Dial-in User 1. User Name - This is a required field. This will be used as the login name for authentication. Choose a descriptive word for login, e.g., brentharper. 2. Active - You can di[...]

Dial-In Configuration 67 5. Callback Phone # - If Callback is ‘Yes’, then this is a required field. Otherwise, an ‘N/A’ will appear in the field. Enter the telephone number to which the Prestige will call back. 6. Callback Override - If Callback is ‘No’, an ‘N/A’ will appear in the field. The callback override allows the Remote Dial[...]

68 Dial-In Configuration However, CLID may not be available due to your switch configuration. Besides authentication, another application of CLID is to combine it with call back. For instance, your company pays for the connection charges for telecommuting employees, and you are using the Prestige as the dial in server. You can turn on both the CLID[...]

TCP/IP Configuration 69  T C P/IP Conf igura t ion This chapter shows you how to configure the Prestige for TCP/IP. Depending on your particular applications, you will need to configure different menus. For instance, Internet access is the most common application of TCP/IP. For this application, you should configure Menu 4. We will illustrate[...]

70 TCP/IP Configuration network 204.247.203.0 with subnet mask 255.255.255.0 into 16 subnets (4 bits), the new subnet mask becomes 255.255.255.240. Number of Bits Dot Decimal 1 128 2 192 3 224 4 240 5 248 6 252 7 254 8 255 LAN-to-LAN Application A typical LAN-to-LAN application is to use the Prestige to call from a branch office to the headquarters[...]

TCP/IP Configuration 71 need to configure Static Routes if some services reside beyond the immediate remote LAN. Re m ote Node S e tu p Follow the procedures in Chapter 5 to fill the protocol-independent parameters in Menu 11, Remote Node Profile. For the protocol- dependent parameters, follow the instructions below. If you are configuring the Pres[...]

72 TCP/IP Configuration 5. Rem IP Subnet Mask - Enter the subnet mask for the remote network. 6. My WAN Addr - Some implementations, especially the UNIX derivatives, require hosts on both ends of the ISDN link to have separate addresses from the LAN, and that the addresses must have the same network number. If this is the case, enter the IP address[...]

TCP/IP Configuration 73 9. Metric - The metric represents the “cost” of transmission for routing purpose. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Enter a number that approximates the cost for this link. The number need not be precise, but it must be between 1 and 16. In practice[...]

74 TCP/IP Configuration used to resolve this problem by providing the Prestige with some static routing information. As a matter of fact, when you configure the Internet Access or a Remote Node, a static route is implicitly created by the Prestige. An example is given below. In the example, stations on the ‘204.5.1.0/24’ subnetwork can access t[...]

TCP/IP Configuration 75 Figure 7- 5 Menu 12 - Static Route Setup - Main Menu Figure 7- 6 IP Static Route Setup 1. Route Name - Enter a descriptive name for this route. This is for identification purpose only. 2. Active - This fields allows you to activate/deactivate this static route. 3. Destination IP Address - This parameter specifies the IP netw[...]

76 TCP/IP Configuration mask field to force the network number to be identical to the host ID. 4. IP Subnet Mask - Enter the subnet mask for this destination. Please follow the discussion on IP subnet mask in this chapter. 5. Gateway IP Address - Enter the IP address of the gateway. The gateway is an immediate neighbor of the Prestige that will for[...]

Filter Configuration 77  Filte r C onfigur at ion About Filtering The Prestige uses filters to decide whether or not to allow passage of a data packet and/or to make a call over the ISDN line. There are three types of filters involved: incoming data filters, outgoing data filters, and call filters. Data filters screen the data to determine if[...]

78 Filter Configuration Figure 8- 1 Outgoing Packet Filtering Process For incoming packets, the Prestige applies data filters only. Packets are processed depending upon whether a match is made. The Prestige allows you to customize the filter sets that you wish to use. This following sections describe how to configure the Prestige’s filter sets. P[...]

Filter Configuration 79 Configuring a Filter Set In order to distinguish between the 12 filter sets, each filter set should have a name or some comments. You can edit these comments in the following way. 1. From the Main Menu, select option ‘21. Filter Set Configuration’. This will bring you to ‘Menu 21 - Filter Set Configuration’. 2. From [...]

80 Filter Configuration menu is read-only. From here, you can examine the parameters of each rule that you have configured for that set. The following is a brief description of the abbreviations used in this menu. • # - Refers to the filter rule number (1-6) • A - Refers to Active. ‘Y’ means the filter rule is active and ‘N’ means the f[...]

Filter Configuration 81 Figure 8- 3 Menu 21.1 - Filter Rules Summary If the filter type is ‘IP’ (TCP/IP), the following abbreviations will be used: • Pr - Protocol. • SA - Source Address. • SP - Source Port number. • DA - Destination Address. • DP - Destination Port number. If the filter type is ‘GEN’ (generic), the following abbr[...]

82 Filter Configuration Configuring a Filter Rule There are four types of filter rules that you can configure. Some of the parameters will differ depending on the type of rule. When you first enter the filter rule menu, you will be presented with ‘Menu 21.1.1 - TCP/IP Filter Rule’. If you wish to configure another type of filter rule, you need [...]

Filter Configuration 83 3. IP Source Route - Determine, ‘Yes’ or ‘No’, whether to check the source route. 4. Destination: IP Addr - In this field, enter the destination IP Address of the packet you wish to filter. The address is usually written in dotted decimal notation such as a.b.c.d where a, b, c, and d are numbers between 0 and 255. 5.[...]

84 Filter Configuration 11. Source: Port # Comp - In this field, you can select what comparison quantifier you wish to use to compare to the value given in Source: Port #. There are five options for this field: • None. • Less. • Greater. • Equal. • Not Equal. 12. TCP Estab - This field is dependent upon the IP Protocol field. This field w[...]

Filter Configuration 85 • Action Not Matched - Only packets that do not match the rule parameters will be logged. • Both - All packets will be logged. 15. Action Matched - If the conditions for the filter rule are met, you can specify what to do with the packet. There are three options for this field: • Check Next Rule. • Forward. • Drop.[...]

86 Filter Configuration Figure 8- 5 Menu 21.1.1 - Generic Filter Rule 1. Offset - Offset refers to the value of the byte that you want to use as your starting offset. That is, in the data packet, at what point do you want to begin the comparison. The range for this field is from 0 to 255. Default = 0 2. Length - This field refers to the length (in [...]

Filter Configuration 87 ‘1155ABF8’. If the result from the masked packet matches Value , then the packet is considered matched. Once you have completed filling in ‘Menu 21.1.1 - Generic Filter Rule’, press ENTER at the message: ‘Press ENTER to Confirm ...’ to confirm your selections, or press ESC at any time to cancel your selections. T[...]

88 Filter Configuration[...]

System Security 89  Syst em S ecu rit y About System Security For the Prestige The Prestige incorporates a number of security measures to prevent unauthorized access to your network. For example, the Prestige supports both PAP (Password Authentication Protocol) and CHAP (Challenge Handshake Authentication Protocol) in authenticating a Remote [...]

90 System Security The following steps describe a simple setup procedure for configuring the SMT password. From the Main Menu, select option ‘23. System Security’. This will bring you to ‘Menu 23 - System Security’. 1. From this menu, you can select option ‘1. Change Password’. This will bring you to ‘Menu 23.1 - System Security - Cha[...]

Telnet Configuration and Capabilities 91  T e lne t C onfigur a tion a nd C apa bilit ies About Telnet Configuration When you first configure your Prestige, it must be done via a computer connected to the RS-232 port. However, once the Prestige has been initially configured, you can use telnet to configure the device remotely as shown belo[...]

92 Telnet Configuration and Capabilities LAN or remote network that has TCP/IP installed can use telnet remote management. Telnet Capabilities Si ngle A dm i ni s tra tor To prevent confusion and discrepancy on the configuration, Prestige will only allow one terminal connection at any time. Prestige also gives priority to the RS-232 connection over[...]

System Maintenance 93  Syst em Main ten ance The Prestige provides diagnostic tools that you can use to maintain your device. Some of these tools include updates on system status, ISDN B channel status, log and trace capabilities and upgrades to the system software. This chapter will describe how to use these tools in greater detail. Syste[...]

94 System Maintenance Figure 11 - 2 Example of Menu 24.1 - System Maintenance - Status 1. To get to the System Status, select option ‘24. System Maintenance. This will bring you to ‘Menu 24 - System Maintenance’. 2. From this menu, select option ‘1. System Status’. 3. There are four (4) possible commands in ‘Menu 24.1 - System Maintenan[...]

System Maintenance 95 9. RXPkt - the number of received packets on this channel. 10. Error - the number of error packets on this channel. 11. CLU - (Current Line Utilization) - percentage of current bandwidth used on this channel. 12. ALU - (Average Line Utilization) - average CLU for this channel. 13. Up Time - time this channel has been connected[...]

96 System Maintenance 24. Country Code - refers to the one byte country code value (in decimal notation), e.g., 225 indicates North America. 25. LAN Packet Which Triggered Last Call - shows the first 48 octets of the LAN packet that triggered the last outgoing call. Two example figures are shown below. the first of an ICMP Ping packet (Type: IP) tr[...]

System Maintenance 97 Figure 11- 4 Menu 24.2 -System Maintenance - Change Terminal Baud Rate Log and Trace Log and trace tools allow users of the Prestige to view the error logs and trace records to troubleshoot any errors that may occur. The Prestige is also able to generate syslogs to send to other machines. 1. To get to the Log and Trace, select[...]

98 System Maintenance V ie w Error Lo g Selecting the first option from ‘Menu 24.3 - System Maintenance - Log and Trace’ will display the Error Log in the system. The Error Log does not only provide the error messages but it is also a source of information about your Prestige. You can also clear the Error Log on your Prestige. After each displa[...]

System Maintenance 99 decimal notation such as a.b.c.d where a, b, c, and d are numbers between 0 and 255. 3. Log Facility - Use the space bar to toggle between the 7 different Local options. This feature is used for UNIX application. The Prestige will send three different types of syslog messages: Call information messages (i.e. CDR), Error inform[...]

100 System Maintenance Figure 11 - 6 Menu 24.4 - System Maintenance - Diagnostic 1. From the Main Menu, select option ‘24. System Maintenance’. This will bring you to ‘Menu 24 - System Maintenance’. 2. From this menu, select option ‘4. Diagnostic’. This will bring you to Figure 15.4 ‘Menu 24.4 - System Maintenance - Diagnostic’. 3. [...]

System Maintenance 101 your line is working properly, the test will succeed. Otherwise, note the error message that you receive and consult your network administrator. 8. Manual Call - This provides a way for the users of the Prestige to place a manual call to a Remote Node. This tests the connectivity to that Remote Node. When you use this command[...]

102 System Maintenance Figure 11- 8 Trace Display for a Failed IPCP Connection via Manual Call 1. Internet Setup Test - This test checks to see if your Internet access configuration has been done correctly. When this option is chosen, the Prestige will PING the Internet IP Address. If everything is working properly, you will receive an appropriate [...]

System Maintenance 103 highly recommended once your Prestige configuration is functioning. You need to download the configuration onto disk. Procedure for downloading varies depending on the type of software used to access the Prestige but you must use the XMODEM protocol to perform the download. Restore Configuration Selecting option 6 from ‘Men[...]

104 System Maintenance successful, type ‘atgo’ to start your Prestige. Below is an example of downloading RAS and ISDN using PCPLUS . Figure 11 -9 Example of Uploading RAS Using PCPLUS Command Interpreter Mode This option allows the user to enter the command interpreter mode. This mode allows you to diagnose, test, and configure your Prestige u[...]

System Maintenance 105 Prestige over a period of time for each Remote Node & Remote Dial-in User (callback only). If the total outgoing call time exceeds the set limit, future outgoing calls will not be made and the current call will be dropped. The Blacklist function prevents the Prestige from re-dialing to an ‘unreachable’ phone number. I[...]

106 System Maintenance • Retry Timer (sec) - Elapse time after a call fails before another call may be retried. Applies before a phone number is blacklisted. B lacklis t Figure 11 - 11 Blacklist The phone numbers on this list cannot be entered directly, instead, they are numbers which have had problems connecting in the past. The user can take a [...]

System Maintenance 107 B udge t M a nage m e nt Figure 11- 12 Budget Management The total budget is the time limit for an outgoing call to a Remote Node or Dial-in User. When this limit is reached, the call will be dropped and further outgoing calls to that Remote Node or Remote Dial-in User (callback) will fail. After each period, the total budget[...]

108 System Maintenance[...]

Troubleshooting 109  T r oubles hoot ing This chapter contains some problems you may run into when using your Prestige. After each problem description, we have provided some instructions to help you diagnose and solve the problem. Problems Starting Up the Prestige None of the LE D's a r e on w he n y ou pow e r up t he P res t ige •[...]

110 Troubleshooting Problems With the ISDN Line T he ISDN init ialization failed This problem occurs when you attempt to save the parameters entered in menu 2, but receive the message, “Save successful, but Failed to initialize ISDN; Press ESC to exit”. 1. Check the error log (in menu 24.3.1), you should see a log entry for the ISDN initializat[...]

Troubleshooting 111 Problems with the LAN Interface Ca n’ t PING a ny s tati on on the LA N 1. Check the LAN LED on the front panel of your Prestige. If it is on, then the link is up. If it is off, then check the cables connecting your Prestige to your LAN. 2. The type of Ethernet interface that you have configured in menu 3.1. Verify that you ar[...]

112 Troubleshooting nothing in the log, the call may have been dropped by the remote device that you dialed in to. Make sure that the configuration parameters between these two devices are consistent. Problems Connecting to a Remote User 1. First verify that you have configured the authentication parameters in menu 13. These would be CLID Authen, R[...]

ISDN Switch Types 113  ISD N Sw itc h T y pe s The following table summarizes the different type of switch types supported by the Prestige and some related information on the switch types (number of phone numbers and SPID numbers). It should be noted that the information in this table is for the ‘common’ case and is recommended for tho[...]

114 ISDN Switch Types P rov is ion ing F or t he A T&T 5ESS Sw itch es The AT&T 5ESS switch type supports three types of ISDN service. These are: National ISDN-1 (NI-1), Multipoint, and Point-to-Point. For AT&T 5ESS National ISDN-1 Provisioning Feature Setting Term Type A Circuit Switched Voice (CSV) 1 CSV Additional Call Offering (ACO)[...]

ISDN Switch Types 115 Provisioning Feature Setting CSV Notification Busy (NB) limit 1 Circuit Switched Data (CSD) 1 CSD Flexible Call Offering (FCO) Unrestricted CSD limit 2 CSD Notification Busy (NB) limit 1 MTERM 2 P rovisioning For the Nor the rn T e le com Sw itc h The Northern Telecom switch type supports two types of ISDN service. These are: [...]

116 Index  Inde x 10Base2, 14, 24 10Base5. See AUI 10Base-T, 14, 23 1TR6, 12, 32, 34, 113 A/B Adapter, 1, 13, 31, 33, 34 Accounting, 97, 98 AUI, 14, 24, 36, 95, 111 BACP. See Bandwidth Allocation Control Protocol Bandwidth Allocation Control Protocol, 3, 42, 53, 55 Bandwidth Allocation Protocol, 3 Bandwidth On Demand. See BOD BAP. See Band[...]

Index 117 IP Subnet Mask, 14, 37, 69, 72, 76 ISDN connecting the line, 22 ISDN Ordering Code, 11, 113 LAN, 1, 2, 4, 5, 6, 9, 21, 25, 28, 38, 40, 44, 45, 49, 59, 60, 70, 71, 72, 76, 92, 95, 96, 111, 112 Local Area Network. See LAN MAC address, 96 Max. Transmission Rate, 55 MP, 42, 45, 53, 55, 56 Multilink Protocol. See MP North American ISDN, 31 PAB[...]

118 Index worksheet, 10, 11, 12, 13, 14[...]