ZyXEL Communications 2602HWNLI-D7A manuale d’uso

Prestige 2602HWNLI- D7A Support Notes V ersion 3. 40 Aug. 2007[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 2 INDEX APPLICA TION NOTES .............................................................................................................................................................. 8 G ENERAL A PPLICA TION N OT ES .....................[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 3 Phone port sett ings .......................................................................................................................................................... 138 Advanced vo ice settings configuration ...................[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 4 Why can't I ma ke Telnet to Prestige from WAN? ............................................................................................................. 181 What should I do if I forget the system pa ssword? .....................[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 5 What is DDNS wi ldcard? ................................................................................................................................................... 191 Does the Prestige support DDNS wildcard? .....................[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 6 Why do you n eed a firewall when you r router has packe t filtering and NAT built -in? ..................................................... 198 What is Denials o f Service (DoS)atta ck? ...................................................[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 7 W i ll ZyXEL support Sec ure Remote Management? .......................................................................................................... 209 Does Pres tige VPN suppo rt NetBIOS broadcast? ................................[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 8 How do I secu re the data across an Acce ss Point's radio link ? ........................................................................................ 218 What is WEP ? .............................................................[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 9  Troubleshooting  Before you begin The Prestige is shipped with the following factory default: 1. IP address = 192.168.1.1, subnet mask = 255.255.255.0 (24 bits) 2. DHCP server enabled with IP pool starting fro m 192.168.1.33 3. Def[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 10  In the Select Network Component T yp e windows, select Pr otocol and click Add .  In the Select Network Protocol windows, select Micr osoft from the manufacturers, then select TCP/IP from the Network Pr otocols and click OK . 3. T[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 11 The default User Name and password are the default SMT password, 'admin' . 3. Configure Prestige for Internet access by using WIZARD SETUP The Web screen shown below takes PPPoE as the example.[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 12 Setup the Prestige as a DHCP Relay What is DHCP Relay ? DHCP stands for Dynamic Host Configuration Protocol. In addition to the DHCP server feature, the P2602 supports the DHCP relay function. When it is configured as DHCP s erver, it as[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 13  Setup the Prestige as a DHCP Client 1. Toggle the DHCP to Relay in menu 3.2 and enter the IP address of the DHCP server in the 'Relay Server Address' field. Menu 3.2 - TCP/IP and DHCP Setup DHCP Setup DHCP= Relay Client IP [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 14 Press ENTER to Confirm or ESC to Cancel: Configure an Internal Server Behind SUA  Introduction If you wis h, you can make internal servers (e.g., Web, ftp or mail server) acc essible for outside users, even though SUA makes your LAN a[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 15  For example (Configuring an internal W eb server for outside access) : Me nu 15.2 - NAT Server Setup Ru le Start Port No. End Port No. IP Addre ss --- ------------------ --------------------- --------- 1. Default De fault 0 .0.0.0 2.[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 16 Configure a PPTP ser ver Behind SUA  Introduction PPTP is a tunneling protocol defined by the PPTP forum that allows PPP packets to be encapsulated within Internet Protocol (IP) packets and forwarded over any IP network, including the[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 17 The PPTP is supported in Windows NT and Windows 98 already. For Windows 95, it needs to be upgraded by the Dial-Up Networking 1.2 upgrade.  Configuration This application note expl ains how to establish a PP TP connection with a remot[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 18  Set the Internet gateway to the router that is connecting to ISP o Prestige router setup  Before making a VPN connection from W in9x to W inNT server , you ne ed to connect Prestige router to your ISP first.  Enter the IP addre[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 19 C: ping 203.66.113.2 When a dial-up connection to ISP is established, a default gateway is assigned to the router traffic through that connection. Therefore, the output below shows the default ga teway of the Win9x clie nt after the dia[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 20 Using NA T / Multi-NA T  What is Multi-NA T? NAT (Network Addres s Translation-NAT RFC 16 31) is the translation of an Internet P rotocol address used within one network to a different I P address known within another network. One ne [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 21 1. NA T Mapping T y pes NAT supports five types of IP/port mapping. They are: 2. One to One In One- to -One mode, the Prestige maps one ILA to one IGA. 3. Many to One In Many- to -One mode, the Prestige maps multiple ILA to one IGA. This[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 22 The following table summarizes these types. NA T T ype IP Mapping Mapping Dir ection One- to -One ILA1<--->IGA1 Both Many- to -One (SUA/P A T) ILA1---->IGA1 ILA2---->IGA1 ... Outgoing Many- to -Many Overload ILA1---->IGA1 [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 23 You apply NAT via menus 4 and 11.3 as displayed next. The next figure how you apply NAT for Internet access in menu 4. Enter 4 from the Main Menu to go to Menu 4- Internet Ac cess Setup . Menu 4 - Intern et Acces s Setup ISP's Name=[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 24 Overload mappin g. Select Full Featur e when you require other mapping t ypes. It is a convenient, pre-configured, read onl y , Man y- to -One mappin g set, suf ficient fo r most pur poses and helpful to people already familiar with SUA [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 25 Menu 15.1 - Addres s Mappin g Sets 1. 2. 3. 4. 5. 6. 7. 8. 255. SUA (r ead on ly) Enter Set Number to Edi t: Let's first look at Option 255. Option 255 is equivalent to SUA in previous ZyXEL routers. The fields in this menu cannot b[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 26 The following table explains the fields in this screen. Please note that the fields in this menu are read -only. Field Description Option/Example Set Name This is the name of the set you selected in Menu 15.1 or enter the name of a new s[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 27 9. 10. A ction= Edit , S elect Rule= 0 P ress ENTER to Conf irm or ES C to Cancel: We will jus t look at the differences from the previous menu. Note that, this screen is not read only, so we have extra Action and Select Rule fields. Not[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 28 L ocal IP: Start= 0.0.0.0 End = N/A G lobal IP: Start= 0.0.0.0 End = N/A P ress ENTER to Conf irm or ESC to Canc el: The following table describes the fields in this screen. Field Description Option/Example T ype Press [SP ACEBAR] to tog[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 29 The NAT Server Set is a list of LAN side servers mappe d to external ports (similar to the old SUA menu of before). If you wish, you can make ins ide servers for different service s, e. g., Web or FT P, visible to the outside users, even[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 30 2. 21 21 192. 168.1.33 3. 80 80 19 2.168.1.36 4. 0 0 0 .0.0.0 5. 0 0 0 .0.0.0 6. 0 0 0 .0.0.0 7. 0 0 0 .0.0.0 8. 0 0 0 .0.0.0 9. 0 0 0 .0.0.0 10. 0 0 0 .0.0.0 11. 0 0 0 .0.0.0 12. 0 0 0 .0.0.0 Press ENTER to Co nfirm or ESC to Ca ncel: T[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 31 Menu 4 - Intern et Acces s Setup ISP's Name= MyISP Encapsul ation= PP PoE Multiplexin g= LLC-based VPI #= 0 VCI #= 33 ATM QoS Typ e= UBR Peak Cell Rate (PCR)= 0 Sustain C ell Ra te (SCR)= 0 Maximum B urst S ize (MBS) = 0 My Login= c[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 32 From Menu 4 shown above simply choose the SUA Only option from the NAT field. This is the Many - to -One mapping discussed earlier. The SUA read only option from the NAT field in menu 4 and 11.3 is specifically pre-configured to handle t[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 33 8. 0 0 0 .0.0.0 9. 0 0 0. 0.0.0 10. 0 0 0 .0.0.0 11. 0 0 0 .0.0.0 12. 0 0 0 .0.0.0 Press ENTER to Co nfirm or ESC to Ca ncel: 3. Using Multiple Global IP addresses for clients and s ervers (One - to -One, Many- to -One, Server Set mappin[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 34 Step 1: In this case, we need to configure Addres s Mapping Set 1 from Menu 15.1-Address Mapping Sets . Therefore we must choos e the Fu ll Feature option from the NAT field in menu 4 or menu 11.3, and assign IGA3 to Prestige WAN IP Addr[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 35 St art= 192.168.1.10 End = N/A G lobal IP: St art= [Enter IGA1] End = N/A P ress ENTER to Conf irm or ESC to Canc el: Rule 2 Setup: Selecting One- to -One type to map the FTP Server 2 with ILA2 (192.168.1.11) to IGA2. M enu 15.1.1.2 - - [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 36 P ress ENTER to Conf irm or ESC to Canc el: Rule 4 Setup: Select Server type to map our web server and mail server with ILA3 (192.168.1.20) to IGA3. M enu 15.1.1.4 - - Rule 4 Typ e: Server L ocal IP: Start= N/A End = N/A G lobal IP: St a[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 37 9. 10. Press ESC or RETURN to Exit: Step 3: Now we configure all other incoming traffic to go to our web server aand mail server from Menu 15.2 - NAT Server Setup (not Set 1, Set 1 is used for SUA Only case). Menu 15.2 - NAT S erver Setu[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 38 Some s ervers providing Internet applications suc h as some mIRC s ervers do not allow users to login using the same IP address. In this case it is better to u se Many- to -Many No Overload or One- to -One NAT mapping types, thus each us[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 39 L ocal IP: St art= 192.168.1.10 End = N/A G lobal IP: St art= [Enter IGA1] End = N/A P ress ENTER to Conf irm or ESC to Canc el: M enu 15.1.1.2 - - Rule 2 Typ e: One-to - One L ocal IP: St art= 192.168.1.11 End = N/A G lobal IP: St art= [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 40 P ress ENTER to Conf irm or ESC to Canc el: Prestige supports multiple type of NA T mapping rules  SUA  One to One  Many to One  Many to Many overload  Many One to One  Server The following table summarizes these ty pes[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 41 ... Server (SUA) Server 1 IP< --- >IGA1 Server 2 IP< --- >IGA1 A bout Filter & Fi lter Examples How does ZyXEL filter wo rk?  Filter S tructure The Prestige allows you to configure up to twelve filter sets with six rul[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 42  Filter T ypes and SUA Conceptually, there are two categories of filter rules: device and p rotocol . The Generic filter rules belong to the device category; they act on the raw da ta from/to LAN and WAN. The IP and IPX filter rules b[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 43 In order to allow users to specify the local network IP address and port number in the filter rules with SUA connections, the TCP/IP filter function has to be executed be fore SUA for WAN outgoing packets and after the SUA for WAN incomi[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 44 same error if you try to activate a Generic filter rule in a filter set that has already ha d one or more active TCP/IP (or IPX) filter rules. Menu 21.1.1: Menu 21.1.1 - Generi c Filter Rule F ilter #: 1,1 F ilter Type= Generi c Filter R[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 45 M ore= No Log= No ne A ction Matched= Check Next Rul e A ction Not Matched= Check Next Rule P ress ENTER to Conf irm or ESC to Canc el: Saving to ROM. Please wait. .. Protocol and d evice ru le cannot be active toge ther To separate the [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 46 Outgoing: Session Options: My Login= te stt Edit Filter Se ts= Yes My Passwor d= *** ** Authen= CH AP/PAP Press ENTER to Confirm or ESC to Cancel : Menu 11.5: Menu 11.5 - Remote Node F ilter I nput Filter Sets: protocol filters= device f[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 47 1. The outbound packet type (protocol & port number) 2. The source IP address Generally, the outbound packets for Web service could be as following: a. HTTP packet, TCP (06) protocol with port number 80 b. DNS packet, TCP (06) protoc[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 48 2. Rule one for (a). http packet, TCP(06)/Port number 80 Menu 21. 1.1 - TCP/IP Filter Rule F ilter #: 1,1 F ilter Type= TCP/IP Filter Rule A ctive= Yes I P Protocol= 6 IP Sou rce Route= No D estination: IP Add r= 0.0.0.0 IP Mask= 0.0.0.0[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 49 Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port # = Port # Comp= None T CP Estab= No M ore= No Log= N one A ction Matched= Dro p A ction Not Matched= Check Next Rule P ress ENTER to Conf irm or ESC to Canc el: 4. Rule 3 for (c). DNS packe[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 50 Menu 21.1 - Filter Rules S ummary # A Type Filte r Rules M m n - - - --- ---------------- ---------------- ------ - - - 1 Y IP Pr= 6, SA= 0.0.0.0, DA=0.0.0. 0, DP= 80 N D N 2 Y IP Pr= 6, SA= 0.0.0.0, DA=0.0.0. 0, DP= 53 N D N 3 Y IP Pr= [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 51 2. One rule for blocking all packets from this client Menu 21. 1.1 - TCP/IP Filter Rule F ilter #: 1,1 F ilter Type= TCP/IP Filter Rul e A ctive= Yes I P Protocol= 0 IP Sou rce Route= No D estination: IP Add r= 0.0.0.0 IP Mask= 0.0.0.0 P[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 52 This co nfiguration example shows you how to use a Generic Filter to block a s pecific MAC address of the LAN. Before you Begin Before you configure the filter, you need to know the MAC address of the client first. The MAC addres s can b[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 53 + Internet Proto col - Version (MSB 4 bits): 4 - Head er length (LSB 4 b its): 5 - Serv ice type: Precd=Ro utine, De lay=No rmal, Thr put=Norma l, Rel i=Normal - Total length: 60 (Oct ets) - Fragment ID: 60172 - Flag s: May be fragment e[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 54 Me nu 21.1.1 - Generic Filter Ru le F ilter #: 1,1 F ilter Type= Generi c Filter Rule A ctive= Yes O ffset= 6 L ength= 6 M ask= ffffffffffff V alue= 0080c84cea63 M ore= No Log= N one A ction Matched= Dro p A ction Not Matched= Forward Ke[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 55  Action Matched= Enter the action you want if the masked packet matches the ' V alue'. In this case, we will drop it.  Action Not Matched= Enter the a ction you want if the masked packet does not mat ch the 'V alue&a[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 56 A filter for blocking the NetBIOS packets  Introduction The NETBIOS protocol is used to share a Microsoft comupter of a workgroup. For the s ecurity concern, the NetBIOS connection to a outside host is blocked by Prestige router as fa[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 57 S et # Comme nts Set # Com ments - ----- ------------- ---- --- --- ------- ---------- 1 NetBIOS _WAN 7 ______ _________ 2 NetBIOS _LAN 8 ______ _________ 3 _______ ________ 9 ______ _________ 4 _______ ________ 10 _______________ 5 ____[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 58  Rule 2-Destination port number 137 with protocol number 17 (UDP) Menu 21. 1.2 - TCP/IP Filter Rule F ilter #: 1,2 F ilter Type= TCP/IP Filter Rule A ctive= Yes I P Protocol= 17 IP Sou rce Route= No D estination: IP Add r= 0.0.0.0 IP [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 59 I P Protocol= 6 IP Sou rce Route= No D estination: IP Add r= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 138 Port # Comp= Equa l Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 0 Port # Comp= None T CP Estab= No M ore= No Log= N one A ction Match[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 60 A ction Matched= Dro p A ction Not Matched= Check Next Rule P ress ENTER to Conf irm or ESC to Canc el:  Rule 5-Destination port number 139 with protocol number 6 (TCP) Menu 21. 1.5 - TCP/IP Filter Rule F ilter #: 1,5 F ilter Type= TC[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 61 F ilter Type= TCP/IP Filter Rule A ctive= Yes I P Protocol= 17 IP Sou rce Route= No D estination: IP Add r= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 139 Port # Comp= Equa l Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 0 Port # Comp= None T [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 62  Apply the first filter set 'NetBIOS_W AN' to the 'Ou tput Pr otocol Filter' in the remote node setup. Configure the second filter set 'NetBIOS_LAN' by selecting the Filter Set number 2.  Rule 1-Source[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 63 I P Protocol= 17 IP Sou rce Route= No D estination: IP Add r= 0.0.0.0 IP Mask= 0.0 .0.0 Port #= 53 Port # Comp= Equa l Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 137 Port # Comp= Equa l T CP Estab= N/A M ore= No Log= N one A ction[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 64 protocol filt ers= 2 device f ilters= O utput Filter Sets : protocol filt ers= device f ilters= Using the Dynamic DNS (DDNS) 1. What is DDNS? The DDNS service, an I P Registry provides a p ublic central d atabase where information such a[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 65 Menu 1 - Gener al Se tup System Name = Pres tige Location= Contact Per son's Name= Do main Name = Edit Dynami c DNS= Yes Route IP= Y es Bridge= No Menu 1.1 - Con figure D ynamic DNS Servi ce Provid er= WWW.D ynDNS. ORG Activ e= Yes [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 66 Password Enter the password that the DDNS server gives to you. Enable W ildcard Enter the host name for the wildcard function that the WWW .DYNDNS.ORG supports. Note that W ildcard option is available only when the provider is WWW .DYNDN[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 67 The current Internet-stand ard MIB, MIB-II, is define d in RFC 1213 and contains 171 objects. These objects are grouped by protocol (including TCP, IP, UDP, SNMP, and other categories, including 'system' and 'interface.&ap[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 68 2. SNMPv1 Operations SNMP itself is a simple request/response protocol. 4 SNMPv1 operations are defi ned as below.  Get Allows the NMS to retrieve an object variable from the agent.  GetNext Allows the NMS to retrieve the next obje[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 69 so on) and the objec t values involved in the operation. The following figur e shows the SNMPv1 message format. The SNMP PDU contains the following fields:  PDU type Specifies the t ype of PDU.  Request ID Associates requests with [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 70  warmS tart (defined in RFC-1215) : If the machine warmstarts, the trap will be sent after booting.  linkDown (defined in RFC-1215) : If any link of IDSL or WAN is down, the trap will be sent with the port number . The port number [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 71 4. Configure the Pres tige for SNMP The SNMP related settings in Prestige are configured in menu 22, SN MP Configuration. The following steps describe a simple setup procedure for configuring all SNMP settings. Menu 22 - SNMP Configurati[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 72 Tra p: Community= public Destination= 192. 168.1.33 Pre ss ENTER to Confir m or ESC to Cancel: Key Settings: Option Descriptions Get Community Enter the correct Get Communit y . This Get Communit y must match the 'Get -' and &a[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 73 Configuration: 1. Active , use the space bar to turn on the syslog option. 2. Syslog IP Address , enter the IP address of the UNIX server that you wish to send the syslog. 3. Log Facility, use the space bar to toggle between the 7 differ[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 74 L 02 Call Terminated C02 Call Terminated Example: Feb 14 16:57:17 192.168.1.1 ZyXEL Communications Corp.: board 0 line 0 channel 0, c all 18, C01 Incoming Call OK Feb 14 17:07:18 192.168 .1.1 ZyXEL Communications Corp.: board 0 line 0 ch[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 75 pr ot: Protocol (TCP,UDP,ICMP) spo: Sour ce port dpo: Destination port Example: Jul 19 14: 44:09 192.168. 1.1 ZyXEL Communica tions Corp.: IP [Src=202. 132.1 54.1 Dst=1 92.168.1. 33 UD P spo=0035 dpo =05d4] }S03>R01m F Jul 19 14: 44:1[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 76 Using IP Alias  What is IP Alias ? In a typical environment, a LAN rout er is required to connect two local networks. The Prestige can connect three local networks to the ISP or a remote node, we ca ll this function as ' IP Alias[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 77 Two new protocol filter interfaces in menu 3.2.1 allow you to accept or deny LAN packets from/to the IP alias 1 and IP alias 2 go through the Pres tige. The filter set in menu 3.1 is used for main network configured in menu 3.2.  IP A[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 78 Edit IP Alias T oggle to 'Y es' to enter menu 3.2.1 for setting up the second and third networks. 2. Edit the sec ond and third networks in menu 3 .2.1 by configuring the Pres tige's s econd and third LAN IP addresses. Men[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 79 Call scheduling enables the mechanisim for the Pres tige to run the remote node connection according to the pre-defined schedule.This feature is just like the scheduler ina video recorder which records the program according to the specif[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 80 4 ___ ____________ 10 _______________ 5 ___ ____________ 11 ___________ ____ 6 ___ ____________ 12 _______________ Enter Schedule Set Number to Configu re= 1 Edit Name= ZyXEL Press ENTER to Con firm or ESC to Can cel: 3. The Menu 26.1 Sc[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 81 S tart Date Star t date of this schedule rule. It can be un matched with weekda y setting. For example, if Start Date is 2004/10/ 02(Monday), but Monday setting in weekday can be No. How Often If once is sele cted, all weekday settings w[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 82 Session Op tions: Edit Fil ter Sets= No Idle Tim eout(sec) = 100 Edit Traff ic Red irect= No Press ENTER to Confi rm or ES C to Cance l:  T ime Service in Prestige There is no RTC (Real -Time Clock) chip so the Pres tige should launch[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 83 Press ENTER to Con firm or ESC to Can cel: Using IP Multicast  What is IP Multicast ? T raditionall y , IP p ackets are transmitted in two wa ys - unicast or broadcast. Multi cast is a third way to deliver IP packets to a group of hos[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 84 IP Subnet Mask= 255.255. 255.0 RIP Direc tion= Both Version = RIP- 2B Multicast = IGMP- v2 IP Polici es= Edit IP A lias= No Press ENTER to Co nfirm or ESC to Ca ncel: Enable IGMP in Prestige's remote node in menu 11.3: Menu 11.3 - R[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 85 Using Prestige traffic redirect  What is T raffic Redirect ? Traffic redirect fo rwards WAN traffic to a back up gatew ay when Prestige ca nnot connect to the Intern et through it's normal gateway . Thus make your backup gateway [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 86 Check Mec hanism = DSL Link Check WAN IP Ad dress1 = 0.0.0.0 Check WAN IP Ad dress2 = 0.0.0.0 Check WAN IP Ad dress3 = 0.0.0.0 KeepAli ve Fail T oleran ce = 5 Recover y Interva l(sec) = 60 ICMP Ti meout(sec ) = 0 Traffic R edirec t = Yes[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 87 Label Description Redirect Active Select this check box to have the Prestige use traffic redirect if the nor mal WAN connection goes down. If you activate traffic redirect, y ou must configure at least one Check W AN IP Address . Metric [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 88  Devices : Netwo rk devices, such as networking gatewa ys, TV , refrigerators, printers...etc, which provides services.  Services : Services are provided b y devices, such as time services provi ded b y alarm clocks. In UPnP , serv[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 89  Eventing : Devices can send event message to notify control points if there is any update on services provided.  Presentation : Each device can provide their own con trol interface by URL link . So that users can go to the device&[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 90 Go to Advanced->UPnP , check two boxes, Ac tive UPnP feature and Allow users to make configuration changes through UPnP. The first check box enables UPnP function in this devic e. The second check box allows users' application to[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 91 3. Start a Video conversation with one online user. 4. On the opposite side, your partner selects Accept to accept your conversation request.[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 92 5. Finally, your video conversation is achieved.[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 93 Wireless Appli cation Notes Infrastructure mode What is Infrastructure mode? Infrastructure mode, sometimes referred to as Access Point mode, is an operating mode of an 802.11b/Wi-Fi client unit. In infrastructure mode, the client unit c[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 94 Configuration Pres tige Wireless using S MT. To configure Infrastructure mode of your Prestige wireless VoIP IAD please follow the steps below. 1. From the SMT main menu, enter 3 to display Menu 3 – LAN Setup. 2. Enter 5 to display Men[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 95 Edit MAC Ad dress Filter= N o Press ENTER to Con firm or ESC to Cancel : 3. Configure ESSID, Channel ID, WEP, Default Key and Keys as yo desire. Configuration Wireles s Access Point to Infras tructure mode using Web con figurator. To con[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 96  Configuration Wireles s Station to Infrastructu re mode To configure Infrastructure mode on your Z yAIR B-100/B-200/B-300 wireless NIC card please follow the following steps. 1. Double click on the utility icon in your windows task b[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 97 5. Double click on the AP you want to associated with.[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 98 6. After the client have associated with the selected AP. T he linked AP's channel, current linkup rate, SSID, link quality, and signal strength will show on the Link I nfo page. You now successfully associate with the selected AP w[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 99 not knowing what your MAC address is, please enter a command " ipconfig /all " after DOS prompt to get the MAC (physical) address of your wireless client. If you use SMT management, the MAC Address Filter configuration are as s[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 100 MAC Address This field specifies those MAC Addresses that you want to add in the list. If you use WEB configuration, the MAC Address Filter configuration are as shown below. 1. Using a web browser, login AP by giving the LAN IP address [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 101 WEP configuration (Wired Equivalent Privacy) Introduction The 802.11 standard describes the communication that occurs in wireless LANs. The Wired Equivalent Privacy (WEP) algorithm is used to protect wireless communication from eavesdro[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 102 Setting up the Access Point Mo st access points and clients have the ability to hold up to 4 W EP key s simultaneousl y. You need to specify one of the 4 keys as default Key for data encryption. To set up the Access Point, you will need[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 103 You can set up the Access Point by SMT or Web configurator  Setting up the Access Point from SMT Menu 3.5 B1000 hold up to 4 WEP Keys. You have to specify one of the 4 ke ys as default Key which be used to encrypt wireless data trans[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 104 Key3= 0x 3456789ABC Key4= 0x 456789ABCD 128-bit WEP with 13 characters Key1= 2e3f4w345ytre Key2= 5y7jse8r4i038 Key3= 24fg70okx3fr7 Key4= 98jui2wss35u4 128-bit WEP with 26 hexadecimal digits ('0-9', 'A-F') Key1= 0x 1 [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 105 Key settings Enter exactly 5, 13 or 29 characters to match the security strength 40/64bit, 128-bit, 256-nit respectively. Setting up the S tation 1. Double click on the utility icon in your windows task bar or right click the utility ic[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 106 Note: If the utility icon doesn't exist in y our task bar, click Start -> Programs -> IEEE802.11b WLAN Card -> IEEE802.11b WLAN Card. 2. Select the 'Encryption' tab. Select encryption type corre sponds with acces[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 107[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 108 Key settings The WEP Encryption type of station has to equal to the access point. Check 'ASCII' field for characters WEP key or un check 'ASCII' field for Hexadec imal digits WEP key. Hexadecimal digits don't ne[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 109 IEEE 802.1x authentication is a client-server architecture delivered with EAPOL (Extensible Authentication Protocol over LAN). The authentication server authenticates each client connected to a Access Point (For Wireless LAN) or switch [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 1 10 The device (i.e. RADIUS server) provides an authentication service to an authenticator. This service determines, from the credentials provided by the supplicant, whether the supplicant is authorized to access the services provided by t[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 111 1. Force Authorized : Disables 802.1x and causes the port to transition to the authorized state without any authentication exchange required. The port transmits and receives normal traffic without 802.1x-based authentication of the clie[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 1 12 The EAP protocol can support multiple authentication mechanisms, such as MD5-challenge, One-Time Passwords, Generic Token Card, TLS and TTL S etc. Typically, the authenticator will send an initial Identity Request followed by one or mo[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 1 13 The EAPOL packet contains the following fields: protocol version, packet type, packet body length and packet body. Most of the fields are obvious. The packet type can have four different values, and these values are described below:[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 1 14  EAP-Packet : Both the supplicant and the authenticator se nd this packet when authentication is taking place. This is the packet that contains either the MD5-Challenge or TLS information required for authentication.  EAPOL-S tar[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 1 15 Me nu 23.4 - Sy stem Security - IEEE802.1x Wireles s Port Control= No Authenticati on Required ReAuthe nticat ion Timer (in seco nd)= N /A Idle Ti meout (in secon d)= N/A Key Man agemen t Protoco l= N/A Dynamic WEP K ey Exchan ge= N/A [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 1 16  Using Internal Authentication Server ZyXEL Wireless Access Point has an internal authentication server for authenti cating the wireless 802.1x client users. It builds total 32-users database and allows up to 32 authorized users to [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 1 17 2. ________ 10. ________ 18. ________ 26. ________ 3. ________ 1 1. ________ 19. ________ 27. ________ 4. ________ 12. ________ 20. ________ 28. ________ 5. ________ 13. ________ 21. ________ 29. ________ 6. ________ 14. ________ 22. _[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 1 18  Using External RADIUS A uthentication Server In addition to the internal authentication server inside ZyXEL AP, you can use external RADIUS authentication server to centrally manage the user account profile. RADIUS is based on a cl[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 1 19 between the supplicant and the authentication server until authentication succeeds or fails. If the authentication succeeds, the switch port becomes authorized. The specific exchange of EAP f rames depends on the authentication method [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 120 Shared Secret= ***** Accounting Server: Active= Y es Server Address= 192.168. 1.100 Port #= 1813 Shared Secret= ****** Press ENTER to Confirm or ESC to Cancel: Key settings for authentication server: Option Descriptions User Name Enter [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 121 Site Survey Introduction What is Site Survey? An RF site survey is a MAP to RF contour of RF coverage in a particular facility. With wireless system it is very difficult to predict the propagation of radio waves and detect the presence [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 122 3. Identify user's area, when doing so ask a question where is wireles s coverage needed and where doe s not, and note and take note on the diagram this is information is needed to determine the number of AP required. 4. Determine [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 123 5. When you reach the farthest point of connection mark the spot. Now you mo ve the access point to this new spot as have already determine the farthest point of the access point installation spot if wireless service is required from co[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 124 Note: If there are more than one access point is needed be sure to make the adjacent access point service area over lap one another. So the wireless station are able to roam. For more infor mation please refer to roaming at PSTN Lifelin[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 125 Furthermore, when the P2602HWNLI – D1A experience power loss such as in case of earthquake and other natural hazard that cause power loss, it will automatically switch to PSTN line and you can dial a regular phone number without diali[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 126 Relay to PSTN The Relay to PSTN field ca n be f ound under PSTN configuration WEB GUI in Relay to PS TN section. This field is used to specify phone numbers to which the Prestige will always send calls through the regular PSTN phone ser[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 127 1. The P2602HWNLI-D1A includes a DSL cable and a RJ-11 cable. C onnect the DSL cable to the DSL port and connect RJ-11 to Lifeline port. 2. Connect the RJ11 to the splitter phone jack or a telephone wall jack 3. Connect the DSL cable to[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 128 ISDN Lifeline Appli cation Notes Usage of ISDN Lifeline By using the ISDN lifeline function, you can make and receive regular ISDN phone calls in coexistence with VoIP service on the same set of phone. This ca n be done by simply assign[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 129 dial tone from ISDN again. At this state you can dial out to ISDN as you would on a regular ISDN system. Re la y to ISDN The Relay to ISDN field can be found under ISDN configur ation WEB GUI in Relay to ISDN section. This field is used[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 130 Figure 1 Splitter type 1. The P2602WNLI includes a DSL cable and a RJ-45 cable. Connect the DSL cable to the DSL port and connect RJ-45 to Lifeline port. 2. Connect the RJ45 to the splitter phone jack or a telephone wall jack 3. Connect[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 131 Figur e 2 Splitterless type 1. The P2602WNLI includes a DSL cable and a RJ-45 cable. Connect the DSL cable to the DSL port and connect RJ-45 to Lifeline port. 2. You need to obtain a regular ISDN Y connector from regular phone shop. 3. [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 1 32 The Ses sion Initiation Protocol (SIP) is an application -layer control (signaling) protocol that handles the setting up, altering and tearing down of voice and multimedia sessions over the Internet. SIP si gna ling is separate from th[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 133 Step 3. On the left column click on Vo IP to bring you to VoIP configuration menu than click on SIP. While in the SIP Settings page use the acco unt selector on upper right of the page to select the SIP ac c ount you will like to config[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 134 REGISTER Server A ddress A SIP register server ma intains a database of SIP identity - to -IP address (or domain name) mapping. The register server checks your u ser na me and password when you register. Enter the SIP register server’[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 135 Peer to Peer call Topology Topology Explanation 1. Device A and B located at Internet. 2. Device A and B WAN interface is Public Static IP (220.130.46.197 and 220.130.46.198). 3. SIP number for device A and B is 197 and 198. Preparation[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 136[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 137 1. Setup WEB GUI VoIP, enter device A’s number in the SIP number col umn. 2. Fill in device B’s IP into SIP server address, Register server address… as example. 3. Setup speed dial, put device B’s information into the column. Se[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 138 1. Setup WEB GUI VoIP, enter de vice B’s number in the SIP number column. 2. Fill in device A’s IP into SIP server address, Register server address… as example. 3. Setup speed dial, put device A’s information into the column. Af[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 139 To configure the phone port setting, please follow the below step. Step 1. Open the we b browser from your workstation to connect to the Prestige by entering the Management IP address of the Prestige. T he default management IP of Prest[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 140 quietest and 1 is the loudest. G.168 Activ e Select th is check box to cancel the e cho caused b y the sound of your voice reverberating in the telephone receiver w hile you talk. VAD Support Select this check box to use Vo ice Activity[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 141 Each field's detail description of the page is listed below. Label Description SIP Account This read-only field displays the number of the SIP account that yo u are configuring. The changes that you save in this page affect the Pre[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 142 URL Type Select SIP to have the Prestige include the domain name with the SI P number in the SIP messages that it sends. Select TEL to have the Prestige use the SIP number without a domain name in the SIP messages that it sends. Expirat[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 143 Select RFC 2833 to send the DTMF tones in RTP packets. Select PCM (Pulse Code Modulation) to include the DTMF tones in the voice data stream. T his method w orks best when y ou ar e using a codec tha t does not use compression (like G.7[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 144 To configure phone book for speed dial please follow the below step. Step 1. Open the we b browser from your workstation to connect to the Prestige by entering the Management IP address of the Prestige. T he default management IP of Pre[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 145 Label Description Speed Dial Select a speed dial key combination from the drop-down list box. SIP Number Enter the SIP number of the party th at you will call (use the number or text that comes before the @ symbol in a full SIP UR I). Y[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 146 Voice – Common Settings Click VoIP -> Phone -> Common to display the following screen. Use this screen to configure Immediate Dial Click VoIP -> Phone -> Region to display the following screen. Use this screen to configure[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 147 phones). Call Service Mode Use this field to set how the Prestige handles supplementary phone services (call hold, call waiting, call transfer and three-way confe rence calls). Select the mode that your voice service provider suppo rts.[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 148 Each field's detail description of the page is listed below. Label Description SIP TOS Priority Type a priority for voice transmissions. The Prestige applies Type o f Service priority tags with this priority to voice traffic that i[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 149 Unconditional Forward to Num ber Enable this feature to have the Prestige forward incoming calls to the number that you configure. Busy Forward to Number Enable this feature to have the Prestige forward i ncoming c alls to the number th[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 150 Label Description Table Number Select which call forwarding table you want to configure. You can c onfigure a different call forwarding table for each SIP account or use the sa me call forwarding table for both. The following applies to[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 151 Number specify here. Condition Select under what circumstances you want the Prestige to use this call forwarding entry. Select Unconditional to have the Prestige immediately forward any calls from the number specified in the Incoming Ca[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 152 If there is a second call to your telephone number, you will hear a call waiting tone. Scenario A calls B and start conversation C calls A In this scenario, there are 3 kinds of action available: Below call flow graphs could help you be[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 153 Scenario 2 : If A press es flash key + 1, A will disconnect B and answer C. Scenario 3 : If A press es flash key + 2, A will put B on hold and answer C.[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 154 Three W a y Conference setup Three Way Conference function makes it possible to set up a conference call with three subscribers all able to participate at the same time. T o configure Thr ee W a y Conference , please foll ow the below s[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 155 Call T ransfer setup This feature allows transfer an incoming call (that you have answered) to another phone. Note: The primary call between user A and user B must be answered before transfer can be initiated. Three kinds of call transf[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 156 If user A does not want to communicate with user B or user C after call transfe r, user A could choose Blind Transfer. T o active Blind T ransf er please follow the below step: Step 1: A flash, B MOH (Music On Hold). Step 2: A dial *98#[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 157 T o active Consult On - hold T ransfer please follow the belo w step: Step 1: A flash, B MOH (M usic On Hold). Step 2: A dial *98# + C’s Number . Step 3: C rings, A hears the ring back tone. Step 4: C off hook, A and C start conversat[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 158 T o active Attendant T ransf er please follow the below step: Step 1: A flash, B MOH (Music On Hold). Step 2: A dial to C. Step 3: C rings, A hears the ring back tone. Step 4: C off hook, A and C start Conversation. Step 5: A flash + *9[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 159 PSTN network if the DSL line is unplugged or SI P acco unt cannot be registered, or relay outgoing ca lls to I P network when PSTN line is unplugged. You may set up Call Fallback easily on web GUI: VoIP > Phone > Common Call Park [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 160 Call Park Call Flow When a call has established between A and the caller: To Call Park the call please follow the below steps: Step 1: User A Press *97# + park number (5000) to park the call Step 2: Then A hang up the phone Call Pickup [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 161 Call Return With call return, you can place a call to the last number that called you (either answered or missed). The last incoming call can be through either SIP or PSTN. Two application scenario: 1. A missed a call from B. 2. A made [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 162 Distinctive Ringing With the dis tinctive ring feature, you can assign different ringing tones to different incoming calls, based either on the number that calls you or from where the call originates (SIP, PSTN or internal). Us e this f[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 163 Do Not Disturb (DND) This feature allows you to set your phone not to ring when someone calls you. You can set each phone independently using its keypad, or configure global setting for all phones using the command line. How to configur[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 164 #95# Disable Do not Distur b *95#SIP Number*Active T imer# For example, if you need t o block the call from 3333 (SIP Number) for 2 hours, just n eed to input *95#3333*2# on phone keypad, it will implement this feature. Hot Line (Auto D[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 165 ras> voice config fxs save 1 Music on hold This feature allows you to put a call on hold and have the other person hear a piece of audio (music, speec h, etc.) you previously recorded. Application Scenarios: When one side (A) presses[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 166 MWI Message Waiting Indication is a common feature of telephone networks. It typically involves an audible or visible indication that messages are waiting, such as playing a special dial tone (which in telephone networks is called messa[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 167 You may configure MWI feature easily on P2602 R L-D1A web GUI: VoIP > SIP > SIP setting > Advanced Caller ID enable/disable This feature is used for u se r to display or hide his Caller ID for a specific outgoing call. Phone co[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 168 Caution: When Region Settings are changed, you need to reboot the device for the settings to take ef fect. Trunking VoIP trunking connects an IP network (like the Internet) and the Public Switche d Telephone Ne twork (PSTN). PSTN includ[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 169 T runking Ca tegory Hop off without Auto Attendant (Peer to Peer) Hop off with Auto Attendant (SIP to FXO) Hop on with Auto Attendant (FXO to SIP) Hop on and hop off with Auto Attendant (FXO to FXO) T runking: Peer to Peer User X uses p[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 170 In this graph, User X uses Phone 1 to make a Speed Dial to call user Y who is located in the another side PSTN network. Once dials #01 on phone 1, phone 3 will ring. Configuration details Note: In order for remote de vice to forward cal[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 171 On Device B: Step 1: Choose “Activate Trunking” in P2602HWNLI-D1A we b GUI: VoIP > Trunking > General , then click “Apply” button. Step 2: In P2602HWNLI-D1A web GU I: VoIP > Trunkin g > Peer Call , Set Outgoing Authe[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 172 Step 3: In P2602HWNL I-D1A web GUI: Vo IP > Phone Book > Speed Dia l , Choos e #01, input number 103, name 103, choose Non-Proxy in Type and input IP 172.25.2 4.131, then click “Add” button.[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 173 T runking: SIP to FXO User X uses phone 1 (SIP number: 33333) to make a call to the ZyXEL Device A via VoIP. A forwards the call to User Y PSTN phone (103) . Application Scenario: Device A is P2602HWNLI-D1A, WAN IP: 172.25.24.131, SIP 2[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 174 On Device B: No special configuration needed. T runking: FXO to SIP User Y uses PSTN phone (103) to make a call to the ZyXEL Device A FXO (101) . Device A connects B over IP network . Application Scenario: Device A is P2602HWNLI-D1A, WA[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 175 Phone 1 number: 33333, it is an analog phone, which connects to P2602HWNLI-D1A phone 1 port. Phone 2 number: 22222. Phone 3 number: 103, it is a PTSN phone. In this graph, user Y use PSTN Phone (103) to di al P2602HWNLI-D1A FXO number 1[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 176 T runking: FXO to FXO User X uses PSTN phone (203) to make a call to the Device B FXO (201) , Device B co nnects to a peer device A over Internet, and A forwards the call to User Y PSTN phone (103). Application Scenario: Device A is P26[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 177 Step 2: Set Auto Attendant Timeout 10 sec, Dialing Interval 3 sec on P2602HWNLI-D1A web GUI: VoIP > Trunking > Gene ral. Step 3: Choose Active Auto Attendant Authentic ation and set password 123456 on P2602HWNLI-D1A we b GUI: VoIP[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 178 On Device B: Step 1: Choose “Activate Trunking” on P2602HWNLI-D1A web GUI: VoIP > Trunking > General , then click “Apply” button. Step 2: Set an Outgoing Authenticatio n account , it co nsist of the IP address of a remote [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 179 Step 3: Create a Call Rul e, this rule tell s P2602HWNLI-D1A which remote peer device it should connect to in order to complete the call. On P2602HWNLI-D1A web GUI: Vo IP > Trunking > Call Rule , in Peer Call Outgoing Table, item [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 180 How do I access the embedded web configurator? The Web configurator a user friendly configuration interface via user's web browser, which can be access by typing in the LAN IP address of the Prestige in users web browser. To access[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 181 itself. Note: Do not power off the unit after upload the file via ftp until the system LED have become steady light up. Fail to due so may result in update fail and requir e RMA. b. To backup your firmware, use the FTP client program to[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 182 a. You have not enable Telnet service on WAN interface in Menu 24.11. b. Telnet service is en abled but your host IP is not the secur ed host entered in Menu 24.11. In this case, the error message 'Client IP is not allowed!' w[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 183 Basically, NAT is a process of translating one address to another. A NAT implementation can be as simple as substituting an IP address with an other. This allows a network to rectify the ill egal address problem mentioned above without [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 184 Virtually all-popular applications over Internet, such as Web, E-Mail, FTP, Telnet, Gopher, are s upported. Prestige is designed for SOHO, branch offices, workgroups, and educational users. Will the Prestige work with my Internet connec[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 185 Why does my pro vider use PPPoE? PPPoE emulates a familiar Dial -Up connection. It allows you r ISP to provide services us ing their existing network configuration over the broadband connections. Besides, PPPoE supports a broad range of[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 186 How does e-mail work through the Prestige ? It depends on wha t kind of IP you have: Static or Dynamic. If your company has a domain name, it means that you have a static IP address. Suppo se your c ompany's e-mail address is xxx@m[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 187 What network interface does the new Prestige series support? The new Prestige series support auto MDX/MDIX 10/100M Ethernet LAN port to conne ct to the comp uter or Switch on LAN and ADSL port on WAN. How does the Prestige support TFTP?[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 188 To create the appearance of faster network access, service companies plan to store or "cache" frequently requested web sites and Usenet newsgroup s on a server at their head-end. Storing data locally will remove some of the bo[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 189 What IP/Port mapping does Multi-NA T support? NAT supports five types of IP/port mapping. They are: One to One, Many to One, Many to Many Overload, Many to Many No Overload and Server. The details of the mapping between ILA and IGA are [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 190 Overload ILA2<--->IGA2 ILA3<--->IGA1 ILA4<--->IGA2 ... Many- to -Many No Overload ILA1<--->IGA1 ILA2<--->IGA2 ILA3<--->IGA3 ILA4<--->IGA4 ... Server Server 1 IP< --- >IGA1 Server 2 IP< [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 191 (e.g., www.zyxel.com.tw) for your server (e.g., We b server) from a DDNS server. The outside us ers can always access the web server using the www.zyxel.com.tw regardless of the WAN IP of the 312. When the ISP ass igns the Prestige a ne[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 192 How do I setup my Prestige for routing IPsec p acket s over SUA? For outgoing IPsec tunnels, no extra setting is required. For forwarding the inbound IPsec ESP tunnel, A 'Default' server set in menu 15 is required. I t is beca[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 193 Can I make an outgoing PSTN call through P2602HW NLI – D7A ? Yes, P2602HWNLI – D7A allows you to make outgoing PSTN call via a prefix number that is defined in the configurable lifeline table. It allows you to store up to 9 pre-stor[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 194 What advantage does Voice over IP can provide ? The advantage of VoIP is it ca n provide advance services such as joining e -mail, ins tant messaging, video, voice mail all together. Whe re current circuit switching (PSTN) can not. What[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 195 What is the relation of codec and VoIP ? As VoIP is a general term send voice information in digital form in discrete packets over digital network and this digital ne twork is public network, thus there maybe other packet such data pack[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 196 Unable to register with the SIP server? If you are unable to register with SIP server. 1. Make sure the Internet is reachable and the SIP register server is reachable. If your register server uses domain name make sure DNS name can be r[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 197 1. Serial number of the device. 2. SIP Call server type and vendor. 3. Your device firmware version and romfile with password. 4. Detail information what you have tried to resolve the problem. I suspect there is a hardware problem with [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 198 Packet Filtering Firewalls ge nerall y make their decisions based on the he ader information in individual packets. These header information include the source, destination addresses and ports of the packets. Application-level Firewalls[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 199 What is Denials of Service (DoS)attack? Denial of Service (DoS) attacks are aimed a t devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or ne twork so users no longer[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 200 What is LAND attack? In a LAN attack, hackers flood SYN packe ts to the network with a spoofed source IP address of the targeted system. This makes it appear as if the host computer sent the packets to itself, making the system unavaila[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 201 How can I protect against IP spoofing atta cks? The Prestige's firewall will automatically detect the IP spoofing and drop it if the firewall is turned on. If the firewall is not turned on we can configure a filter set to block the[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 202 Content Filter FAQ What types of content filter does Prestige provide? Can I have different policies in effect for different times of the day or week? Y es, but onl y one blocking period of time is supported currently on ZyXEL appliance[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 203 With encryption, VPN guarantees the confidentiality of the original user data. Cost 1). Cut long distance phone charges Because users typically dial the their local ISP for VPN, thus, long distance phone cha rg e is reduced than making [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 204 provides cr yptographic securit y services. These s ervices allow for authentication, integrity, access control, and confidentiality. IPSec allows for the information exchanged be tween remote sites to be encrypted and verified. You can[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 205 What is Pre-Shared Key? A pre-shared key identifies a communicating party during a phase 1 IKE negotiation. It is called 'Pre-shared' because you have to share it with another party before you can communicate w ith them over a[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 206 E-mail support@zyxel.com.tw Please note that, in Prestige, if "DNS" or "E -mail" t ype is choosen, you ca n still use a random string as the content, such as "this_is_Prestige". It's not neccessary to [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 207 What VPN protocols are supported by Pre stige? All Prestige series support ESP (protocol number 50) and AH (protocol number 51). What types of encryption does Prestige VPN support? Prestige supports 56-bit DES and 168-bit 3DES and AES. [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 208 172.16.0.0 - 172.31.255.255 (these address ranges are reserved by internet standard for private LAN numberings behind NA T devices). It is usually a static I P so t hat we can pre- configure it in Prestige for making VPN connections. If[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 209  W indows 2000, W indows XP IPSec Will Zy XEL support Secure Remote Management? Yes, we will support it and we are working on it currently. Does Prestige VPN support NetBIOS broadcast? The current 3.50 firmware release does not suppo[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 210 If I hav e NA T router bet ween two VPN g ateways, and I would like to use IP type as Phase 1 ID, what should I know? We presume your environment may look like this,[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 211 VPN client: 10.1.33.33 NAT router WAN IP: 202.132.154.2 Prestige WAN: 202.132.154.3 Since the VPN client is behind a NAT r outer, it must have a private IP address in most case. This may cause the VPN client to send it's private I [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 212 Can Prestige behave as a NA T router supporting IPSec p assthrough and an IPSec gateway simult aneously? No, Prestige can't support them simultaneously. You need to choose either one. If Pres tige is to support IPSec passthrough, y[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 213 LAN hardware, ov erall installat ion expenses and life-c ycle costs can be significantly lowe r . Long -term cost benefits are greatest in dynamic environments requiring frequent moves and change s. e. Scalability: W ireless LAN systems[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 214 What is 802.11b ? 802.1 1b is the first revisi on of 802.1 1 standard allowing data rates up to 1 1Mbps in the 2.4GHz ISM band. Also known as 802.1 1 High-Rate and W i-Fi. 802.1 1b only uses DSS S, the maximum speed of 1 1Mbps has fallb[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 215 What is Wi-Fi ? The W i-Fi logo signifies that a product is interopera ble with wireless networking equipment from other vendors. A Wi-Fi logo product has been tested and certified b y the W ireless Ethern et Compatibility Alliance (WEC[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 216 Solution : 1.Minimizing the number of walls and ceilings 2.Antenna is positioned for best reception 3.Keep WLAN products away from electrical devices, eg: micro waves, monitors, electric motors,…, etc. 4. Add additional APs if necessa[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 217 bit-pattern at the sendin g st ation into a hi gher data rate bit sequence using a "chipping" code. Th e chipping code (also known as processing gain) introduces redundanc y whic h allows d ata recover y if certain bit errors [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 218 How do I secure the data across an A ccess Point's radio link ? Enable Wire d Equivalency Protocol (WEP) or W i-Fi Protected Access (WP A) to encrypt th e payload of packets sent across a radio link. What is WEP ? W ired Equivalent[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 219 WEP is turned on. The SSID goes ov er the air in clear t ext. This makes obtaining the SSID easy by sniffing 802.1 1 wireless t raf fic. By turning off the broadcast of SSID, can someone still sniff the SSID ? Many APs by default have b[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 220 users' access to IEEE 80 2 networks such as Ether net ( IEEE 802.3) and W ireless LAN ( IEEE 802.11). For IEEE 802.1 1 WLAN, IEEE 802.1x authentication can be based on username/password or digital certificate. What is the differenc[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 221 What is WPA-PSK? WP A-PS K (W i-Fi Protected Access P re-Shared K ey) can be used if user d o not have a R adius server but still want to benefit from it . Because WP A-PSK only r equires a single pass word to be entered on wireless AP/[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 222 Online Trace 1. Trace LAN packet 2. Trace WAN packet 1. Trace LAN packet 1.1 Disable to capture the WAN packet by entering: sys trcp channel enet1 n one 1.2 Enable to capture the LAN packet by entering: sys trcp channe l enet0 bothway 1[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 223 Frame Type : TCP 192.168. 1.2:1116->192.31 .7.130:8 0 Ethernet Header: Desti nation MAC Addr = 00 A0C5921311 Sourc e MAC Addr = 00 80C84CEA63 Netwo rk Type = 0x 0800 (TCP/IP) IP Header: IP Ve rsion = 4 Heade r Length = 20 Type of Ser[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 224 0020: 07 82 04 5C 00 5 0 00 BD-15 A7 00 00 00 0 0 70 02 ....P. ...... .p. 0030: 20 00 BE C3 00 0 0 02 04-05 B4 01 01 04 0 2 ... ......... . --- <0001>- --------- --------- ------ --------- --------- --------- ------ ------ LAN Fr[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 225 RAW DATA: 0000: 00 80 C8 4C EA 6 3 00 A0-C5 92 13 11 08 0 0 45 00 ...L .c....... .E. 0010: 00 2C 57 F3 40 0 0 ED 06-AC 8C C0 1F 07 8 2 C0 A8 .,W. @........ ... 0020: 01 02 00 50 04 5 C 4A D1-B5 7F 00 BD 15 A 8 60 12 ...P .J.......` . 0[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 226 Urgen t Ptr = 0x 0000 (0) TCP Data : (Length =6, C aptured=6) 0000: 20 20 20 20 20 20 RAW DATA: 0000: 00 A0 C5 92 13 1 1 00 80-C8 4C EA 63 08 0 0 45 00 .... .....L.c. .E. 0010: 00 28 35 0B 40 00 80 06-3C 79 C0 A8 01 0 2 C0 1F .(5. @...&[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 227 LAN Frame: ENET1-RECV Size:11 81/ 96 Time: 1 2387.260 s ec Frame Type : TCP 192.31.7 .130:80->202.132 .155.97: 10270 Ethernet Header: Desti nation MAC Addr = 00 A0C5921312 Sourc e MAC Addr = 00 A0C5012345 Netwo rk Type = 0x 0800 (TCP[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 228 RAW DATA: 0000: 00 A0 C5 92 13 1 2 00 A0-C5 01 23 45 08 0 0 45 00 .... ......#E. .E. 0010: 04 8B B1 39 40 0 0 EE 06-A9 AB C0 1F 07 8 2 CA 84 ...9 @........ ... 0020: 9B 61 00 50 28 1 E D3 E9-59 85 00 C1 8F 6 3 50 19 .a.P (...Y.... cP. 0[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 229 Wi ndow Size = 0x1DD5 ( 7637) Check sum = 0x 7A12 (31250) Urgen t Ptr = 0x 0000 (0) RAW DATA: 0000: 00 A0 C5 01 23 4 5 00 A0-C5 92 13 12 08 0 0 45 00 .... #E....... .E. 0010: 00 28 7A 0C 40 0 0 7F 06-54 3C CA 84 9B 6 1 C0 1F .(z. @...T&[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 230 Heade r Length = 20 Flags = 0x 11 (.A...F) Windo w Size = 0x 1DD5 (7637) Check sum = 0x 7A11 (31249) Urgen t Ptr = 0x 0000 (0) RAW DATA: 0000: 00 A0 C5 01 23 45 00 A0-C5 92 13 12 08 0 0 45 00 .... #E....... .E. 0010: 00 28 7B 0C 40 0 0 [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 231 Prestige> sys trcl sw on Prestige> sys trcp sw off Prestige> sys trcl sw off Prestige> sys trcp brief 0 10855 .790 E NET0-T[0141] TCP 192. 31.7.1 30:80->192.168. 1.2:1102 1 10855 .800 E NET0-R[0060] TCP 192. 168.1. 2:1102[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 232 TCP Header : Sourc e Port = 0x 0050 (80) Desti nation Port = 0x 044F (1103) Seque nce Number = 0x D91B1826 (36424315 26) Ack N umber = 0x 00AA405F (11157599 ) Heade r Length = 24 Flags = 0x 12 (.A..S.) Windo w Size = 0x FAF0 (64240) Che[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 233 Prestige> sys trcp sw off Prestige> sys trcp brief 0 12864 .800 E NET1-T[0411] TCP 202. 132.155.97:1 0278->204 .217.0.2: 80 1 12864 .890 E NET1-R[0247] TCP 204. 217.0. 2:80->202.132.1 55.97:102 82 2 12864 .900 E NET1-T[0416][...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 234 Heade r Length = 20 Flags = 0x 18 (.AP...) Windo w Size = 0x 2238 (8760) Check sum = 0x AB57 (43863) Urgen t Ptr = 0x 0000 (0) TCP Data : (Length =193, Captured= 42) 0000: 48 54 54 50 2F 3 1 2E 31-20 33 30 34 20 4 E 6F 74 HTTP /1.1 304 [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 235 Heade r Checksum = 0x D59C (54684) Sourc e IP = 0x CA849B61 (202.132. 155.97) Desti nation IP = 0x CCD90002 (204.217. 0.2) TCP Header : Sourc e Port = 0x 2826 (10278) Desti nation Port = 0x 0050 (80) Seque nce Number = 0x 00C8C015 (1315[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 236 The P restige supports traces when there is problem to connect your ISP using PPPoE protocol. Please follow the procedure below to collect the trace f or our troubleshooting. 1. Remove the LAN cable attached on the Prestige 2. Enter SMT[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 237 poePut1SrvcName: '' len 0 host- uniq 31303030 len 4 putPoeHdr: ver 1 type 1 code x09 sess-id 0 len 12(x000C) ### Hit any key to continue.### $$$ DIALING dev=6 ch=0.......... poeI/C: ver 1 type 1 code x07 sessId x0000 len 274(x[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 238 r0= 0xE3F045C4 r1= 0x0001FFC0 r2= 0x000000E5 r3= 0x56FF54FF r4= 0xE3F045C4 r5= 0xE5BDBFEC r6= 0x0001C468 r7= 0x60000093 r8= 0x00000000 r9= 0xE3550000 r10=0xE3550000 fp= 0x00000000 r12=0x56FF54FF sp= 0x0001EDBC lr= 0x00004F64 pc= 0x00013[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 239 ........................................ done VC5402 Init...OK Press ENTER to continue... Ente r Password : XXXX LAN/WAN Packet Tra ce The Prestige packet trace records and analyzes packets running on LAN and WAN interfaces. It is des i[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 240 1.1 Disable to capture the WAN packet by entering: sys trcp channel mpoa00 none 1.2 Enable to capture the LAN packet by entering: sys trcp channe l enet0 bothway 1.3 Enable the trace log by entering: sys trcp sw on & sys trcl sw on [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 241 Heade r Length = 20 Type of Service = 0x 00 (0) Total Length = 0x 0030 (48) Ideti fication = 0x 330B (13067) Flags = 0x 02 Fragm ent Offset = 0x 00 Time to Live = 0x 80 (128) Proto col = 0x 06 (TCP) Heade r Checksum = 0x 3E71 (15985) So[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 242 Netwo rk Type = 0x 0800 (TCP/IP) IP Header: IP Ve rsion = 4 Heade r Length = 20 Type of Service = 0x 00 (0) Total Length = 0x 002C (44) Ideti fication = 0x 57F3 (22515) Flags = 0x 02 Fragm ent Offset = 0x 00 Time to Live = 0x ED (237) P[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 243 Ethernet Header: Desti nation MAC Addr = 00 A0C5921311 Sourc e MAC Addr = 00 80C84CEA63 Netwo rk Type = 0x 0800 (TCP/IP ) IP Header: IP Ve rsion = 4 Heade r Length = 20 Type of Service = 0x 00 (0) Total Length = 0x 0028 (40) Ideti ficat[...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 244 0030: 2 2 38 E8 ED 00 00 20 2 0- 20 20 20 20 "8.... 2. Trace WAN packet 1.1 Disable the capture of the LAN packet by entering: sys trcp chann el enet0 none 1.2 Enable to capture the WAN packet by entering: sys trcp chann el mpoa00 [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 245 Fragm ent Offset = 0x 00 Time to Live = 0x EE (238) Proto col = 0x 06 (TCP) Heade r Checksum = 0x A9AB (43435) Sourc e IP = 0x C01F0782 (192.31.7 .130) Desti nation IP = 0x CA849B61 (202.132. 155.97) TCP Header : Sourc e Port = 0x 0050 [...]

Pr estige 2602H WNLI-D7 A Support N otes All contents cop yright (c) 2007 ZyXEL Co mmunications Corp oration. 246 1. Trace LAN packet 1.1 Disable the capture of the WAN packet by entering: sys trcp chann el mpoa00 none 1.2 Enable the capture of the LAN packet by entering: sys trcp chann el enet0 bothway 1.3 Enable the trace log by entering: sys trc[...]