ZyXEL Communications P-324 manuale d’uso

Pr estige 324 Intelligent Broadband Sharing Gateway User’s Guide Version 3.60 January 2003[...]

Prestige 324 Intelligent Broadband Sha ring Gateway ii Copyright Copyright Copyright © 2 003 by ZyXEL Com munications Corporati on. The contents of this publi cation ma y not be reprod uced in any part or as a w hole, transcr ibed, stored in a retrieval system, translated into any langu age, or tr ansmitted in any form or by any means, electronic,[...]

Prestige 324 Intelligent Broadband Sha ring Gateway FCC Statement iii Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rules. Operation is subject to the following two cond itions: • This device m ay not cause harm ful interferen ce. • This device must accept any interference received, in[...]

Prestige 324 Intelligent Broadband Sha ring Gateway iv Information For Canadian Users Information for Canadian Users The Industry Canada label identifies certified equipmen t. This certification means that the equipment meets certain telecom munications ne twork prot ective operatio n and safet y requirem ents. The I ndustry Ca nada label does not [...]

Prestige 324 Intelligent Broadband Sha ring Gateway Declaration of Conformity v Declaration of Conformity We, the Manufacturer/Im porter, ZyXEL Communications Corp . No. 6, Innovation Rd. II, Science-Based Industrial Park, Hsinchu, Taiwan, 300 R.O.C declare that the product Prestige 324 is in conformity with: STANDARD STANDA RD ITEM VERSION EN 5502[...]

Prestige 324 Intelligent Broadband Sha ring Gateway vi Warranty ZyXEL Limited W arranty ZyXEL warrants to the original end us er (purchaser) that this product is free from any defects in materials or workm anship fo r a period of up to tw o years fr om the da te of purc hase. Duri ng the warrant y period, and upon proof of purchase, should the prod[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Customer Support vii Customer Support Please have th e following i nformation re ady when you c ontact customer s upport. • Product model and serial num ber. • Information in Menu 24.2.1 –System Informa tion . • Warranty Information. • Date that you received your device. • Brief descri[...]

Prestige 324 Intelligent Broadband Sha ring Gateway viii Table of Contents T able of Content s Copyright ...................................................................................................................... .............................. ii Federal Communications C ommission (F CC) I nterference S tatem ent ........................[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Table of Contents ix 4.2 Wizard Set up: Screen 2 ......................................................................................................... ... 4-2 4.3 Wizard Set up: Screen 3 ......................................................................................................... .[...]

Prestige 324 Intelligent Broadband Sha ring Gateway x Table of Contents Chapter 10 IP S ta tic Route Setup............................................................................................... ............ 10-1 10.1 IP Static Ro ute Setup ......................................................................................................[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Table of Contents xi 14.3 Installing UPnP in Wi ndows Exam ple .............................................................................. 14-4 14.4 Using UPnP in Windows XP Example.............................................................................. 14- 6 Chapter 15 SNMP Configuration[...]

Prestige 324 Intelligent Broadband Sha ring Gateway xii Table of Contents 19.3 Remote Managem ent an d the Fire wall............................................................................... 19-4 19.4 Remote Managem e nt and NAT ......................................................................................... 19-4 19.5 System Tim eout [...]

Prestige 324 Intelligent Broadband Sha ring Gateway List of Figures xiii List of Figures Figure 1-1 Internet Access App lication......................................................................................... .............. 1-5 Figure 2-1 Prestige R ear Panel Co nnections ....................................................................[...]

Prestige 324 Intelligent Broadband Sha ring Gateway xiv List of Figures Figure 7-6 Menu 3.2 — TCP/IP and DHCP Ethernet Setup ........................................................................ 7-7 Figure 7-7 Menu 3.2. 1 — IP Alia s Setup......................................................................................... ............ 7[...]

Prestige 324 Intelligent Broadband Sha ring Gateway List of Figures xv Figure 11-14 NA T Example 1..................................................................................................... ............ 11-21 Figure 11-15 Menu 4 — Internet Access & NAT Ex ample .................................................................... 11-[...]

Prestige 324 Intelligent Broadband Sha ring Gateway xvi List of Figures Figure 14-1 Configuring UP nP ................................................................................................... ............... 14-3 Figure 15-1 Menu 22 — SNMP Conf iguration ...................................................................................[...]

Prestige 324 Intelligent Broadband Sha ring Gateway List of Figures xvii Figure 18-1 Command Mode i n Menu 24 ............................................................................................ ..... 18-1 Figure 18-2 Valid Comm ands ..................................................................................................... ......[...]

Prestige 324 Intelligent Broadband Sha ring Gateway xviii List of Diagrams and Chart s List of Diagrams Diagram 1 Single-PC per Mode m Hardware Co nfiguration ........................................................................... 2 Diagram 2 Prestige as a PPPoE Client ............................................................................[...]

Prestige 324 Intelligent Broadband Sha ring Gateway List of Tables xix List of T ables Table 1-1 Internet Access Configuratio n Check list .............................................................................. ...... 1-5 Table 2-1Prestige Rear Panel Co nnections ...............................................................................[...]

Prestige 324 Intelligent Broadband Sha ring Gateway xx List of Tables Table 9-2 Fields i n Menu 11.1 (PPTP En capsula tion) ............................................................................. .... 9-4 Table 9-3 Fields i n Menu 11.1 (PPP oE Encaps ulation Specific Only) ........................................................ 9-6 Table 9-4[...]

Prestige 324 Intelligent Broadband Sha ring Gateway List of Tables xxi Table 18-1 Budge t Management ................................................................................................... ............ 18-3 Table 18-2 Call History Fields ....................................................................................................[...]

[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Preface xxiii Preface Congratulations on your purchase of the Prestige 324 Broadband Sharing Gateway with four-por t switch. Don’t forget to register your Prestige (fast, easy online registration at www. zyxel.com ) for fr ee future product up dates and information. Your Prestige is easy to inst[...]

Prestige 324 Intelligent Broadband Sha ring Gateway xxiv Preface Synt ax Conventions • Mouse action s equences are denote d using a comma. For e xampl e, click Start , Settings , Co ntrol Panel , Network m eans first you click Start , move the m ouse pointer over Settings , then move the mouse pointe r over Contr ol Panel and finally click Networ[...]

[...]

Getting Started I P P a a r r t t I I : : Getting Started This section help s you connect, inst all and setup your Prestige to operate on your net work and access the Internet.[...]

[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Getting to Know Your Prestige 1-1 Chapter 1 Getting to Know Your Prestige This chapter introduces the main applications of the Prestige as well as a list of key features. 1.1 Intelligent Broadband Sharing Gateway The Prestige is a dual Etherne t Br oadband Sharing Ga teway with an integr ated 4-po[...]

1-2 Getting to Know Your Prestige 1.2.2 Firmware Features Full Network Management Your Prestige offers you a variety of options f or network management . It supp orts password protected l ocal and remote net work ma nagement via t he console p ort or a tel net connection usi ng SMT (System Management Interface). Your Prestige includ es an intuitive[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Getting to Know Your Prestige 1-3 DHCP Support DHCP (Dynamic Host Configuration Protoco l) allows the individual clients (workstations) to obtain the TCP/IP configuration at start-up fro m a centralized DHCP server. The Prestig e has built-in DHCP server capability, enabled by default, wh ich mean[...]

1-4 Getting to Know Your Prestige Time and Date Setting This feature ( menu 24.10 ) allows you t o get the c urr ent time and date from an external server when yo u power up your Prestige. The real time is then displayed in the Prestige Menu 24 .1- Sys tem Statu s and error logs. If you do not choose a time service protoc ol that your timeserver wi[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Getting to Know Your Prestige 1-5 Figure 1-1 Internet Access Application 1.4 Internet Access Configuration Checklist The followin g table shows t he minim um SMT m enu configurati ons you’l l need to m ake (without changing the default Prestige val ues) in order to access the In te rnet. See you[...]

1-6 Getting to Know Your Prestige Table 1-1 Internet Access Configurat ion Checklist SMT # FIELD ACTION 4 Encapsulation Choose PPPoE if you have a dial-up connec tion to the Internet (or PPTP if you reside in France or Austria); other wise choose Ethernet . Choose from RR- Manager , RR-Telstra or RR- Toshiba if your ISP is Time Warner's RoadRu[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Hardware Installation & Initial Setup 2-1 Chapter 2 Hardware Installation & Initial Setup This chapter show s you how to connect hardware a nd perform the initial setup. 2.1 Front Panel Prestige. Panel CON/AUX Console/ Auxiliary Green On The port is in console mode (CON/AUX s witch set to [...]

2-2 Hardware Installa tion & Initial Setup Table 2-1Prestige Rear Panel Connections CONNECTION DESCRIPTION AND FUNCTION Power 9V AC Connect the included po wer adaptor to the power supply and connect the other end of the power adaptor cable to this socket. Do this step last. Use only the included power adapter! See the Power Adapter Specificati[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Hardware Installation & Initial Setup 2-3 CON/AUX swi tch CON/AUX port Just connect this port if you want to config ure the Prestige using the SMT via cons ole port or set up a backup WAN connection. Set this switch to the “CON” side to use the CON/AUX port as a regular console port for lo[...]

2-4 Hardware Installa tion & Initial Setup 2.4 Front Panel LEDs The LEDs on t he front pa nel indicate t he operati onal status of the Prestige. Figure 2-2 Front Panel The followin g table descri bes the LED f unctions. Table 2-2 LED Descriptions LED FUNCTION COLOR STATUS MEANING PWR Power Green On The Prestige is receiving po wer. Off The syst[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Hardware Installation & Initial Setup 2-5 Table 2-2 LED Descriptions LED FUNCTION COLOR STATUS MEANING Orange On The Prestige is connected to a 100Mbps LAN port(s). Flashing The 100M LAN port(s) is sending/rec eiving packets. WAN WAN Off T he WAN Link is not ready, or has failed. Green On The [...]

[...]

Prestige 324 Intelligent Broadband Sha ring Gateway WAN Setup 3-1Introducing the Web Configurator Chapter 3 Introducing the Web Configurator This chapter describes how to access the Prestige web configurator. 3.1 Accessing the Prestige W eb Configurator Step 1. Make sure your Prestige hardw are is properly connected (refer to instructions in the ha[...]

3-2 Introducing the Web Co nfigurator Figure 3-3 Change Password Step 3. You shoul d now see the web con figurator MAIN MENU screen.  Click WIZARD to b egin a series of screens to he lp you configure your Prestige fo r the first time.  Click a link und er SETUP in the navigati on panel to c onfigure adva nced Prestige feat ures.  Click MAI[...]

Prestige 324 Intelligent Broadband Sha ring Gateway WAN Setup 3-3Introducing the Web Configurator Figure 3-4 The MAIN MENU Screen of the Web Co nfigurator Follow the instructions you see in the MAIN MENU screen or click the icon (located in the top right corner of most screens) to v iew embedded help. The icon does not appear in the MAIN MENU scree[...]

[...]

Prestige 324 Intelligent Broadband Sha ring Gateway LAN Setup 4-1Wizard Setup Chapter 4 Wizard Setup This chapter shows you how to use the Wizard to access the Internet for the first time. 4.1 Introduction to Wizard Screens The Wizard consists of screens to help you configur e your device to access the Inte rnet. The second screen has three variati[...]

4-2 Wizard Setup Click Next to configure the Prestig e for internet access. Figure 4-1 Wizard 1 4.2 Wizard Setup: Screen 2 The Prestige offers three choices of encapsul ation. They are Ethernet , PPTP or PPPoE. 4.2.1 Ethernet Choose Eth erne t when the WAN port is used as a regula r Ethernet.[...]

Prestige 324 Intelligent Broadband Sha ring Gateway LAN Setup 4-3Wizard Setup Table 4-1 Wizard 2: Ethernet Enca psulation Table 4-2 Ethernet Encapsulation FIELD DESCRIPTION ISP Parameters fo r Internet Access Encapsulation You must choo se the Ethernet option when the WAN port is used as a reg ular Ethernet. Otherwise, choose PPPoE or PPTP for a di[...]

4-4 Wizard Setup PPTP supports on-demand, multi-protocol, an d virtual pr ivate network ing over public networks, such as th e Internet. For more infor mation on PPTP, please refer to the appendices The Prestige support s one PPTP server connectio n at any given time. Figure 4-2 Wizard 2: PPTP Encapsulation Table 4-3 PPTP Encapsulation FIELD DESCRI[...]

Prestige 324 Intelligent Broadband Sha ring Gateway LAN Setup 4-5Wizard Setup Table 4-3 PPTP Encapsulation FIELD DESCRIPTION Encapsulation Select PPTP from the pull-down list box. User Name T ype the user name given to you by your IS P. Password Type the password associated with the User Name above. Nailed Up Connection Select Nailed Up Connection [...]

4-6 Wizard Setup the existing M icrosoft Dial-Up Net working software can a ctivate, and t herefore re quires no new learni ng or procedur es for W indows u sers. One of the benefits of PPPoE is the ability to let end users access on e of multiple network services, a function kn own as dy namic service sel ection. This e n ables the service provide[...]

Prestige 324 Intelligent Broadband Sha ring Gateway LAN Setup 4-7Wizard Setup Table 4-4 PPPoE Encapsulation FIELD DESCRIPTION ISP Parameter for Internet Access Encapsulation Choose an encapsulation met hod from the pull-down list box. PPPoE form s a dial-up connection. Service Name (Optional) Type the name of your service provider. User Name Type t[...]

4-8 Wizard Setup Table 4-5 Private IP Address Ranges 10.0.0.0 - 10. 255.255.255 172.16.0.0 - 172.31.255.255 192.168.0.0 - 192. 168.255.2 55 You can obt ain your IP a ddress from the IANA, from an IS P or have i t assigned by a privat e network. I f you belong to a small orga nization and your Internet acces s is through an ISP, the ISP ca n provide[...]

Prestige 324 Intelligent Broadband Sha ring Gateway LAN Setup 4-9Wizard Setup Once you have decided o n the network n umber, pick an IP address that is e asy to remember, for i nstance, 192.168.1.1 , for your Prestige, but make sure that no ot her device o n your net work is usi ng that IP . The subnet mask s pecifies the networ k number portion of[...]

4-10 Wizard Setup Table 4-6 Example of Network Properties for LAN Serv ers with Fixed IP Addresses Choose an IP address 192.168.1.2-19 2.168.1. 32; 192.168.1. 65-192 .168.1.254. Subnet mask 255.255.255.0 Gateway (or default route) 192.168.1.1(Prestige LAN IP) Figure 4-4 Wizard 3 Table 4-7 WAN Setup FIELD DESCRIPTION WAN IP Address Assignment Get au[...]

Prestige 324 Intelligent Broadband Sha ring Gateway LAN Setup 4-11Wizard Setup Table 4-7 WAN Setup FIELD DESCRIPTION IP Address Enter your WAN IP address in this field when you selected Use Fixed IP Address. IP Subnet Mask Enter the IP subnet mask in this field if applicable when you selected Use Fixed IP Address . This field is not visibl e when y[...]

4-12 Wizard Setup 4.4 Basic Setup Complete Well done! You have successfully set up your Pre stige to operate on your network a nd access the Internet. The rest of this User’s Guide shows yo u how to con figure the SMT m enus except where n o SMT me nus exist for certain features such as UPnP a nd the fire wall. For web confi gurator scree ns that[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Introducing the SMT and General Setup 5-1 Chapter 5 Introducing the SMT and General Setup This chapter show s you how to access t he SMT menus via the co nsole port, how to navigate the SMT and how to configure SMT menu 1. 5.1 Accessing the Prestige via the Console Port Make sure you have the ph y[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 5-2 Introducing the SMT and General Setup Figure 5-1 Initial Screen 5.1.2 Entering the Password The login sc reen appea rs after yo u press [E NTER] , prom pting yo u to ent er the pas sword, as shown next. For your fir st login, e nter the defa ult passwo rd 1234. As y ou type the password, t he [...]

Prestige 324 Intelligent Broadband Sha ring Gateway Introducing the SMT and General Setup 5-3 Table 5-1 Main Menu Commands OPERATION DESCRIPTION Move down to another menu To move forward to a submenu, type in the number of the desire d submenu and press [ENTER]. Move up to a previous menu Press the [ESC] key to move back to the previous menu. Move [...]

Prestige 324 Intelligent Broadband Sha ring Gateway 5-4 Introducing the SMT and General Setup Figure 5-3 Prestige Main Menu 5.2.2 System Management T erminal Interface Summar y Table 5-2 Main Menu Summary NO. Menu Title FUNCTION 1 General Setup Use this menu to set up r outing/bridging and general inform ation. 2 WAN Setup Use this menu to clone a [...]

Prestige 324 Intelligent Broadband Sha ring Gateway Introducing the SMT and General Setup 5-5 Table 5-2 Main Menu Summary NO. Menu Title FUNCTION 24 System Maintenanc e From displaying system st atus to uploading firm ware, this menu provides comprehensive system mainte nance. 26 Schedule S etup Use this menu to schedule outgoing calls. 99 Exit Use[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 5-6 Introducing the SMT and General Setup 5.3.1 Resetting the Prestige If you forget your password or ca nnot access the SMT m enu, you will need to rel oad the factory-default configuration file or use the RESET button th e back of the Prestige. Uploading this configuratio n file replaces the cur[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Introducing the SMT and General Setup 5-7 Procedure To Use The RESET Button Make sure the PWR led is on (not bl inking) when you begin thi s proce dure. Step 1. Press the RESET button for ten seco nds, then rel ease it. If the PWR LED begins to blink, the defaults have been rest ored and the Prest[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 5-8 Introducing the SMT and General Setup 5.4.1 Dynamic DNS Dynamic DNS (Domain Nam e System ) allows you t o update y our current dy namic IP address with one or many dynam ic DNS ser vices so that any one can c ontact yo u (in NetMeeting , CU-SeeMe or ot her services). You can also a ccess your [...]

Prestige 324 Intelligent Broadband Sha ring Gateway Introducing the SMT and General Setup 5-9 Table 5-3 General Setup Menu Field FIELD DESCRIPTION EXAMPLE System Name Choose a descriptive na me for identific ation purposes. It is recommended you enter yo ur comput er ’s “Computer name” in this field. This name can be up to 30 alph anum eric c[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 5-10 Introducing the SMT and General Setup Figure 5-7 Configure Dynamic DNS Follow the instructions in the next tabl e to configure Dynamic DNS parame ters. Table 5-4 Configure Dynamic DNS Menu Fields FIELD DESCRIPTION EXAMPLE Service Provider This is the name of your Dynamic DNS service provider.[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Introducing the SMT and General Setup 5-11 Table 5-4 Configure Dynamic DNS Menu Fields FIELD DESCRIPTION EXAMPLE Enable Wildcard Your Prestige suppor ts DYNDNS Wildcard. Press [SPACE BAR] and then [ENTER] to select Yes or No This field is N/A when you choose DDNS client as your servic e provider. [...]

[...]

Prestige 324 Intelligent Broadband Sha ring Gateway WAN Setup and Dial Backup 6-1 Chapter 6 WAN Setup and Dial Backup This chapter describes ho w to configure the WAN using menu 2 and dial -backup using men us 2, 2.1 and 11.1. 6.1 Cloning The MAC Address The MAC address field allows users to confi gure the WAN po rt's MAC ad dress by usi ng ei[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 6-2 WAN Setup and Dial Backup Table 6-1 MAC Address Cloning in WAN Setup M enu FIELD DESCRIPTION EXAMPLE MAC Address: Assigned By Press [SPACE BAR] and then [ENTER] to choose one of t wo methods to assign a MAC Address. Choose Factory Default to select the factory assigned default MAC Address. Cho[...]

Prestige 324 Intelligent Broadband Sha ring Gateway WAN Setup and Dial Backup 6-3 Figure 6-2 Configuring Dial Backup in Menu 2 The followin g table contai ns instruction s on how t o configu re your WA N setup. Table 6-2 Configuring Dial Backup in Menu 2 FIELD DESCRIPTION EXAMPLE Dial-Backup: Active Use this field to turn the dial-backup feature on[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 6-4 WAN Setup and Dial Backup Table 6-2 Configuring Dial Backup in Menu 2 FIELD DESCRIPTION EXAMPLE Edit Advanced Setup To edit the advanced setup for the Dial Backup port, move the cursor to this field; press the [SPACE BAR] to select Yes and then press [ENTER] to go to Menu 2.1: Advanced Setup .[...]

Prestige 324 Intelligent Broadband Sha ring Gateway WAN Setup and Dial Backup 6-5 To edit the advanced setup for the Dial Backup port, move the cursor to the Edit Advanced Setup field in Menu 2 - WAN Setup , press the [SPACE BAR] to select Yes and then p ress [ENTER]. Figure 6-3 Menu 2.1 Advanced WAN Setup The followin g table descri bes fields i n[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 6-6 WAN Setup and Dial Backup Table 6-3 Advanced WAN Port Setup: AT Comma nds Fields FIELD DESCRIPTION DEFAULT AT Response String: CLID (Calling Line Identification) Enter the keyword that precedes the CLID (Calli ng Line Identification) in the AT response string. This lets the Prestige capture th[...]

Prestige 324 Intelligent Broadband Sha ring Gateway WAN Setup and Dial Backup 6-7 6.2.6 Configuring Remote Node Profile (Backup ISP) Enter 2 in Menu 11 Remote Node Se tup to open Menu 11.1 Rem ote Node Profile (Backup ISP) (sho wn below) and co nfigure the set up fo r your Dial Backup port connectio n. Not av ailable on all models. Figure 6-4 Menu [...]

Prestige 324 Intelligent Broadband Sha ring Gateway 6-8 WAN Setup and Dial Backup Table 6-5 Menu 11.1 Remote Node Profile (Backup ISP) FIELD DESCRIPTION EXAMPLE Authen This field sets the authenticat ion protoc ol used for outgoing calls. Options for this field are: CHAP / PA P - Your Prestige will accept either CHAP or PA P w hen requested by this[...]

Prestige 324 Intelligent Broadband Sha ring Gateway WAN Setup and Dial Backup 6-9 Table 6-5 Menu 11.1 Remote Node Profile (Backup ISP) FIELD DESCRIPTION EXAMPLE Allocated Budget Enter the maximum number of minutes that this remote node may be called within the time period config ured in the Period field. The default for this field is 0 meaning ther[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 6-10 WAN Setup and Dial Backup Figure 6-5 Menu 11.2 - Remote Node PPP Options Table 6-6 Menu 11.2 - Re mote Node PPP Options FIELD DESCRIPTION Select the vendor-specific encapsulation for t he link. There are two options in this field. Standard PPP - Standard PPP enc apsul ation is used. Encapsula[...]

Prestige 324 Intelligent Broadband Sha ring Gateway WAN Setup and Dial Backup 6-11 Password: To handle t he first prom pt, you s pecify “ogi n: ” as the Expect string and “m yLogin” as t he Send string in set. The reason for leaving out the leading “L” is to avoid having t o know exact ly whether it is uppe r or lower case. Similarly, y[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 6-12 WAN Setup and Dial Backup Figure 6-6 Remote Node Setup Script FIELD DESCRIPTION Active Press the spac e bar to toggle bet ween Yes and No. Set 1-6: Expect Enter an Expect string to match. After matching the Expect string, the Prestige returns the string in the Send field. Set 1-6: Send Enter [...]

Prestige 324 Intelligent Broadband Sha ring Gateway LAN Setup 7-1 Chapter 7 LAN Setup This chapter describes ho w to configure the WAN using menu 3. 7.1 Introduction From the m ain menu, e nter 3 t o display m enu 3 (shown next ). Figure 7-1 Menu 3 — LAN Setup 7.1.1 LAN Port Filter Setup This menu allows you to specify the filter sets that you wi[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 7-2 LAN Setup Figure 7-2 Menu 3.1 — LAN Port Filter Setup Menu 3.2 is discussed i n the next part of t he manual . Please read on. 7.2 TCP/IP and DHCP for LAN The Prestige has built-in DHCP server capability that a ssign s IP addresses and DNS servers to systems that support DHCP client capabili[...]

Prestige 324 Intelligent Broadband Sha ring Gateway LAN Setup 7-3 IP Pool Setup The Prestige is pre-configure d with a p ool of 32 IP address es starting fr om 192. 168.1.33 t o 192.168. 1.64. This configuration leaves 31 IP addresses (exclud ing the Prestige itself) in the lo wer ran ge for othe r server computers, e.g., ser ver for m ail, FTP, te[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 7-4 LAN Setup enable the Network Address Translation (NAT) featur e of the Prestige. The In ternet Assigne d Number Authority (IANA) reserve d this block of a ddr esses specifi cally for private use; please do not use any other number unle ss you are t old otherwi se. Let’s say you select 192.16[...]

Prestige 324 Intelligent Broadband Sha ring Gateway LAN Setup 7-5 assignment, please refer to RFC 15 97, Address Allocation for Private Internets and RFC 146 6, Guidelines for Management o f IP Address Space. 7.2.5 RIP Setup RIP (Routi ng Inform ation Protocol , RFC105 8 and RFC 1389) all ows a rout er to exchange routin g informat ion with ot her [...]

Prestige 324 Intelligent Broadband Sha ring Gateway 7-6 LAN Setup The address 22 4.0.0.1 is used for que ry me ssages and is assi gned to the permanent group of all IP hosts (including gateways). Al l hosts m ust join the 224.0.0.1 group in o rder to pa rticipate i n IGMP. The a ddress 224.0.0.2 i s assigne d to the multicast routers gro up. The Pr[...]

Prestige 324 Intelligent Broadband Sha ring Gateway LAN Setup 7-7 Figure 7-5 Menu 3 — LAN Setup (10/100 Mbps Etherne t) To edit the TCP/IP and DHCP configuration, enter 2 to display Menu 3.2 - TCP/ IP and DHCP Ethe rnet Setup as show n next. Figure 7-6 Menu 3.2 — TCP/IP and DHCP Ethernet Setup Follow the instructions in the following ta ble on [...]

Prestige 324 Intelligent Broadband Sha ring Gateway 7-8 LAN Setup T able 7-3 LAN DHCP Se tup Menu Fields FIELD DESCRIPTION EXAMPLE DHCP This field enables/disables the DHCP server. If it is set to Server , your Prestige will act as a DHCP server. If set to None , DHCP service will be disabled and you must have another DHCP sever on your LAN, or els[...]

Prestige 324 Intelligent Broadband Sha ring Gateway LAN Setup 7-9 FIELD DESCRIPTION EXAMPLE Edit IP Alias T he Prestige supports thr ee logical LAN inte rfaces via its single physical Ethernet interface with the Prestige itself as the gate way for each LAN network. Press the [SPACE BAR] to select Yes , then press [ENTER] to display menu 3.2.1 Yes W[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 7-10 LAN Setup Table 7-5 IP Alias Setup Menu Fields FIELD DESCRIPTION EXAMPLE IP Address Enter the IP ad dress of your Prestige in dotted decim al notation 192.168.2.1 IP Subnet Mask Your Prestige will automatically calculate the subnet mask based on the IP address that you assign . Unless you ar [...]

Prestige 324 Broadband Sharin g Gateway with 4-Port Switch IP Static Route Setup 8-1Internet Access 8-1 Chapter 8 Internet Access This chapter sho ws you how t o configur e your Prestige for Internet access. 8.1 Internet Access Setup You will see three different menu 4 screens depending on whether you chose Ethernet, PPTP or PPPoE encapsulation. In[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 8-2 Internet Access Figure 8-1 Internet Access Setup (Eth ernet) The following table describes this screen. Table 8-1 Internet Access Setup Menu Fields FIELD DESCRIPTION ISP’s Name Enter the name of your Intern et Service Provider, e.g., myISP. This information is for identi fication purposes on[...]

Prestige 324 Broadband Sharin g Gateway with 4-Port Switch IP Static Route Setup 8-3Internet Access 8-3 Table 8-1 Internet Access Setup Menu Fields FIELD DESCRIPTION IP Address Assignment If your ISP did not assign you a fixed IP address, select Dynamic , otherwise select Static and enter the IP address & subnet mask in the follo wing fields. I[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 8-4 Internet Access Figure 8-2 Internet Access Setup (PPTP) The following table contains instructions about the new fi elds when y ou choose PPTP in the Encapsulation fiel d in m enu 4. Table 8-2 New Fields in Menu 4 (PPTP) screen FIELD DESCRIPTION EXAMPLE Encapsulation Press the [SPACE BAR] and t[...]

Prestige 324 Broadband Sharin g Gateway with 4-Port Switch IP Static Route Setup 8-5Internet Access 8-5 procedur es for W indows u sers. One of the benefits of PPPoE is the ability to let end users access on e of multiple network services, a function kn own as dy namic service sel ection. This e n ables the service provider to easily create and off[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 8-6 Internet Access Table 8-3 New Fields in Menu 4 (PPPoE) screen FIELD DESCRIPTION EXAMPLE Encapsulation Press the [SPACE BAR] and then press [ENTER] to choose PPPoE . The encapsulation method i nfluences your choices for IP Address. PPPoE Idle Timeout This value specifies the time in seconds tha[...]

[...]

II P P a a r r t t I I I I : : Advanced Applications This section describes the advanced applications of your Prestige, such as NA T , Remote Node Setup and IP S tatic Route Setup.[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Remote Node Setup 9-1 Chapter 9 Remote Node Setup This chapter show s you how to configure m enu 11 and all its sub-menus in cluding traffic redirect. 9.1 Introduction A remote node is required for placing calls to a remote gateway. A remote node represents both the remote gateway and th e network[...]

9-2 Remote Node Setup Figure 9-1 Menu 11.1 Remote Node Profile for Ethernet Encap sulation Table 9-1 Fields in Menu 11.1 (Ethernet Encapsul ation) FIELD DESCRIPTION EXAMPLE Rem Node Name Enter a descriptive name for the remote node. This field can be up to eigh t characters. LAoffice Active Press [SPACE BAR] to select Yes (activate remote node) or [...]

Prestige 324 Intelligent Broadband Sha ring Gateway Remote Node Setup 9-3 Table 9-1 Fields in Menu 11.1 (Ethernet Encapsul ation) FIELD DESCRIPTION EXAMPLE Service Name This is valid only when you h ave chosen PPPoE encapsulat ion. If you are using PPPoE encapsulation, then t ype the name of your PPPoE service here. poellc Outgoing My Login This fi[...]

9-4 Remote Node Setup Figure 9-2 Remote Node Profile for PPTP Encapsulation Table 9-2 Fields in Menu 11.1 (PPTP Encapsulation) FIELD DESCRIPTION EXAMPLE Encapsulation Press the [SPACE BAR] to choose PPTP . You must also go to menu 11.3 to check the IP Address setting once you have selected the encapsulation method. PPTP My IP Addr Enter the IP addr[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Remote Node Setup 9-5 Nailed-Up Connection A nailed-up connection is a dial-up line where the conn ection is always up regardless of traffic demand. The Prestige does two things when you specify a n ailed-up connection. The first is that idle timeout is disabled. The seco nd is that the Prestige w[...]

9-6 Remote Node Setup Figure 9-3 Menu 11.1 Remote Node Profile for PPPoE Encapsulation The next tabl e describes t he fields NOT already descri bed in Table 9-1 already. Table 9-3 Fields in Menu 11.1 (PPPoE Encapsulation Specific Only ) FIELD DESCRIPTION EXAMPLE Authen This field sets the authenticat ion protoc ol used for outgoing calls. Options f[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Remote Node Setup 9-7 Table 9-3 Fields in Menu 11.1 (PPPoE Encapsulation Specific Only ) FIELD DESCRIPTION EXAMPLE Schedules You can apply up to four schedule sets here. F or more details please refer to the Call Scheduling chapter. Nailed-Up Connection This field specifies if you want to make the[...]

9-8 Remote Node Setup Table 9-4 Remote Node Net work Layer Options Menu Fields FIELD DESCRIPTION EXAMPLE IP Address Assignment If your ISP did not assign you an explicit IP address, select Dynamic ; otherwise select Static and enter the IP address & subnet mask in the following fields. Dynamic Rem IP Address If you have a Static IP Assignment, [...]

Prestige 324 Intelligent Broadband Sha ring Gateway Remote Node Setup 9-9 Table 9-4 Remote Node Net work Layer Options Menu Fields FIELD DESCRIPTION EXAMPLE broadcasts. RIP Press the [SPACE BAR] to select the RIP direction. Options are: Both , None , In Only , Out Only or None . Please see the RIP Setup section for more information on RIP. The defa[...]

9-10 Remote Node Setup Figure 9-5 Remote Node Filter (Ethernet Encapsu lation) Figure 9-6 Remote Node Filter (PPTP/PPPoE Encapsulation ) 9.5 T raffic Redirect Traffic redirect forwards WA N traffic to a backup gate way when the Presti ge canno t connect to the Internet through its normal gateway. Menu 11.5 - Remote Node Filter Input Filter Sets: pr[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Remote Node Setup 9-11 Figure 9-7 Traffic Redirect WAN Se tup The followin g network t opology all ows you to a void tria ngle route sec urity hol es when t he backup gat eway is connected to the LAN. Use IP alias to configure the LAN into two or three logical network s with the Prestige itself as[...]

9-12 Remote Node Setup 2. Traffic-redirec t route. 3. Dial-backup route. For example, if the norm al route has a m etric of "1" and the traffic-re direct rout e has a metric of "2" and dial-backup route has a me tric of "3", then the norm al route acts as the primary default route. If the normal route fails to connect [...]

Prestige 324 Intelligent Broadband Sha ring Gateway Remote Node Setup 9-13 9.5.2 T raffic Redirect Setup Configure parameters that determine when the Pres tige will forward WAN traffic to the backup gateway using Menu 11.6 — Traffic Redirect Setup . Figure 9-10 Menu 11.6 — Traffic Redi rect Setup Table 9-6 Traffic Redirect Setup FIELD DESCRIPTI[...]

9-14 Remote Node Setup Table 9-6 Traffic Redirect Setup FIELD DESCRIPTION EXAMPLE Metric Enter a numbe r from 1 to 15 to set this route’s priority among the Prestige’s routes (see Route Priorit y and Metric on page 9-11 ) T he smaller the number, the higher priority the r oute has. 15 (default) Check WAN IP Address Enter the IP address of a rel[...]

Prestige 324 Intelligent Broadband Sha ring Gateway IP Static Route Setup 10-1 Chapter 10 IP Static Route Setup This chapter sho ws you how t o configur e static routes with your Prestige. Static routes tell the Prestige routing information wh at it cannot learn automati cally through other means. This can arise in cases whe re RIP is disabled on t[...]

10-2 IP Static Route Setup 10.1 IP S t atic Route Setup You confi gure IP static r outes in m enu 12. 1, by selecting one of the IP static rout es as shown bel ow. En ter 12 from t he main m enu. Figure 10-2 Menu 12 — IP Static Rou te Setup Now, enter t he index number of one of the static routes y ou want t o configure . Figure 10-3 Menu 12. 1 ?[...]

Prestige 324 Intelligent Broadband Sha ring Gateway IP Static Route Setup 10-3 Table 10-1 IP Static Route Menu Fields FIELD DESCRIPTION Route # T his is the index number of the static route that y ou chose i n menu 12. Route Name Enter a descriptive name for this r oute. This is for identification pur poses only. Active This field allows you to act[...]

[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-1 Chapter 11 Network Address Translation (NAT) This chapter discusses ho w to configure NAT on the Prestige. 11.1 Introduction NAT (Network Address Tran slation - NAT, RFC 1631) is the translation of the IP addr ess of a host in a packet, e.g., the sou rce address of an ou tgoing packet, us[...]

11-2 NAT NA T never changes the IP address (e ither local or global) of an outsi de host. 11.1.2 What NA T Does In the simplest form, NAT changes the source IP address in a packet recei ved from a subscriber (t he inside local address) t o another (t he inside global ad dress) befo re forwardin g the packet t o the WAN si de. When the response come[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-3 Figure 11-1 How NAT Works 11.1.4 NA T Application The following figure illu strates a possible NAT applica tion, where three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct WAN net works. More exam ples follow at the end of this chapter.[...]

11-4 NAT Figure 11-2 NAT Application With IP Alias 11.1.5 NA T Mapping T ypes NAT supports five types o f IP/port m apping. They are: 1. One to One : In One -to-One m ode, the Prest ige maps one local IP address to one gl obal IP add ress. 2. Many to One : In Many-to-One mode, the Prestige maps multiple local IP addresses to one global IP address. [...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-5 3. Many to Many Overload : In Many-to-Many Overload mode, the Prestige maps the multip le local IP addresses to shared global IP addresses. 4. Many One-to-One : In Many One-to-One mode, the Prestige maps the each local IP addresses to unique gl obal IP add resses. 5. Server : This type al[...]

11-6 NAT Table 11-2 NAT Mapping Types TYPE IP MAPPING SMT ABBREVIATION Many-One-to-One ILA1 ÅÆ IGA1 ILA2 ÅÆ IGA2 ILA3 ÅÆ IGA3 … M-1-1 Server Server 1 IP ÅÆ IGA1 Server 2 IP ÅÆ IGA1 Server 3 IP ÅÆ IGA1 Server 11.2 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyXEL implementati on of a subset of NAT t hat suppor[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-7 Figure 11-3 Menu 4 — Applyi ng NAT for Internet Acc ess The following fig ure shows how you appl y NAT to the rem ote node in menu 11 .1. Step 1. Enter 11 from the main menu. Step 2. Move the cur sor to t he Edit IP field, press the [SPACE BAR] to select Yes and then press Step 3. [ENTE[...]

11-8 NAT Figure 11-4 Menu 11.3 — Apply ing NAT to the Remote Node The following table describes the op tions for Network Address Translation. Table 11-3 Applying NAT in Menus 4 & 11.3 FIELD OPTIONS DESCRIPTION Full Feature When you select this option the SMT will use Address Mapping Set 1 (menu 15.1 - see section 11.3.1 for further discussion[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-9 will use Set 1 , which supports all mapp ing types as outlined in Table 11-2. When you select SUA Only , the SMT will use the pre-configured Set 255 (read only). The Server Set is a list of LAN side servers mapped to external ports. To use this set (one set for the Prestige 10), a server [...]

11-10 NAT Figure 11-7 Menu 15.1.255 — SUA Address M apping Rules The following table explains th e fields in this screen. The fields in menu 15.1.255 are read-only . Table 11-4 SUA Address Mapping Rules FIELD DESCRIPTION EXAMPLE Set Name This is the name of the set you selected in menu 15.1 or enter the name of a new set you want to create. SUA I[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-11 Table 11-4 SUA Address Mapping Rules FIELD DESCRIPTION EXAMPLE Global Start IP This is the starting global IP address (IGA). If you have a dynamic IP, enter 0.0.0.0 as the Global Start IP . 0.0.0.0 Global End IP This is the ending global IP ad dress (IGA). N/ A Type These are the mapping[...]

11-12 NAT Figure 11-8 Menu 15.1.1 — First Set The T ype, Local and Global S t art/End IPs are configured in menu 15.1.1.1 (described later) and the v alues are displayed here. Ordering Your Rules Ordering your rules is important because th e Prestige applies the rules in the order that you specify. When a rule matches the current packet, the Pres[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-13 Table 11-5 Fields in Menu 15.1.1 FIELD DESCRIPTION EXAMPLE Action The default is Edit . Edi t means you want to edit a selected rule (see following field). Insert Before means to insert a rule before the rule selected. The rules after the s elected rule will then be moved down by one rul[...]

11-14 NAT Figure 11-9 Menu 15.1.1.1 — Editing/Con figuring an Individual Rule in a Set Table 11-6 Menu 15.1.1.1 — Editing/Conf iguring an Indiv idual Rule in a Set FIELD DESCRIPTION EX AMPLE Type Press the [SPACE BAR] to select one of five types. These are the mapping types discussed in Table 11-2 . Ser ver allows you to specify multiple server[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-15 Table 11-6 Menu 15.1.1.1 — Editing/Conf iguring an Indiv idual Rule in a Set FIELD DESCRIPTION EX AMPLE Once you have finished config uring a rule in this menu, press [ENTER] at the message “Press ENT ER to Confirm…” to save your configurat ion, or press [ESC] to cancel. When you[...]

11-16 NAT Table 11-7 Services & Port Numbers SERVICES PORT NUMBER ECHO 7 FTP (File Transfer Protocol) 21 Telnet 23 SMTP (Simple Mail Transfer Protocol) 25 DNS (Domain Name System) 53 Finger 79 HTTP (Hyper Text Transfer proto col or WWW, We b) 80 POP3 (Post Office Protocol) 110 NNTP (Network News Transport Protocol) 119 SNMP (Simple Network Mana[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-17 Figure 11-10 Menu 15.2 — NAT Server Setup Figure 11-11 Multiple Servers Behind NAT Ex ample Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address --------------------------------------------------- 1. Default Default 0.0.0.0 2. 0 0 0.0.0.0 3. 0 0 0.0.0.0 4. 0 0 0.0.0[...]

11-18 NAT 11.3.3 T rigger Port Setup The Prestige records t he IP address of a LAN computer t hat requests a service that you ha ve defined as a “trigger port”. The response from the Internet can then be forwar ded direc tly to the L AN com puter. Trigger ports are transient; they only exist while in use or ar e timed ou t. The following is a t[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-19 Enter 3 i n menu 15 to dis play Menu 15.3 — Tri gger Port Setup , shown next. Figure 11-13 Menu 15.3: Trigger Port Setup Menu 15.3 - Trigger Port Setup Incoming Trigger Rule Name Start Port End Port Start Port End Port -------------------------------------------------------------------[...]

11-20 NAT Table 11-8 Menu 15.3—Trigger Port Setup Description FIELD DESCRIPTION EX AMPLE Rule This is the rule index number. 1 Name Enter a unique name for identification purp oses. You may enter up to 15 characters in this field. All characters are permitted - includi ng spaces. Real Audio Incoming Incoming is a port (or a range of ports) that a[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-21 Figure 11-14 NAT Example 1 Figure 11-15 Menu 4 — Internet Acce ss & NAT Example From m enu 4 shown a bove, sim ply choose th e SUA Only option from the Network Address Translatio n field. This i s the Many -to-One mapping discussed i n section 11.1.5. The SUA Only read-only option [...]

11-22 NAT 11.4.2 Example 2: Internet A ccess w ith an Inside Server Figure 11-16 NAT Example 2 In this case, you do exactly as above (use the conve nient pre-configured S UA Only set) and also go to menu 15.2 t o specify the Inside Se rver behind the NAT as shown later. 11.4.3 Example 3: Multip le Public IP Addresses With Inside Servers In this exa[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-23 Rule 4. You also m ap your thir d IGA to the web server an d mail serve r on the LA N. Type Server allows you to specify multiple servers, of differen t types, to other computers behind NAT on the LAN. The example situation looks so mewhat like this: Figure 11-17 NAT Example 3 In this ca[...]

11-24 NAT Step 4. Select Type as One-to-One (di rect mappin g for packets going bot h ways) , and ente r the local Start IP as 192.168.1.10 (th e IP address of FTP Server 1), th e global Start IP as 10.132.50.1 (our first IGA). (See Figure 11-19). Step 5. Repeat the previous step for rules 2 to 4 as outlined abov e. Step 6. When finis hed, m enu 15[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-25 Figure 11-19 Example 3: Menu 15.1.1.1 Figure 11-20 Example 3: Final Menu 15.1.1 Now conf igure th e IGA3 to map to our web ser ver and ma il serv er on the LA N. Step 7. Enter 15 from the main menu. Step 8. Now enter 2 from this menu and configur e it as shown in Figure 11-21 . Menu 15.1[...]

11-26 NAT Figure 11-21 Example 3: Menu 15.2 11.4.4 Example 4: NA T Unfr iendly Application Programs Some applications do not support NAT Mapping using TC P or UDP port address translation. In this case it is better to use Many -One-to-One m apping as port num bers do not chang e for this m apping t ype. The following figure illustrates this. Menu 1[...]

Prestige 324 Intelligent Broadband Sha ring Gateway NAT 11-27 Figure 11-22 NAT Example 4 Other applications, for example, gaming programs are NA T unfriendly because they embed addressing information in the dat a stream. These application s still won’t work through NA T even when using One-to-One and Many One-to-One mapping types. Follow the step[...]

11-28 NAT Figure 11-24 Example 4: Menu 15.1.1 — Address Mapping Rules Menu 15.1.1 - Address Mapping Rules Set Name= Example4 Idx Local Start IP Local End IP Global Start IP Global End IP Type --- --------------- --------------- --------------- --------------- ------ 1. 192.168.1.10 192.168.1.12 10.132.50.1 10.132.50.3 M-1-1 2. 3. 4. 5. 6. 7. 8. 9[...]

[...]

III P P a a r r t t I I I I I I : : Advanced Management This section provides information on Firewall, Filt er Configuration, SNMP Configuration, System Information and Diagnosis, Firmwa re and Configurati on File Maintenance, System Maintena nce and Call Scheduling.[...]

[...]

Firewall 12-1 Chapter 12 Firewall This chapter gives som e background inf ormation on firewalls and e xplains how to get starte d with the Prestige firewall. 12.1 Introduction What is a Firewall? Originally, the term firewal l referred to a construction technique design ed to prevent the spread of fire from one room to another. T he networ king ter[...]

12-2 Firewall The Pr estige ca n be u sed to preven t theft, destructi on and m odification of data, as well as log events, which may be im portant to t he securit y of your net work. The Prestige is installed between th e LAN and a broadba nd modem connecting to th e Internet. This allows it to act as a secure gateway for all data passing between [...]

Firewall 12-3 12.2 SM T Firewall Menu Enter “21” from the main menu to display the following screen. Figure 12-1 Menu 21 - Filter and Firewall Setup Enter “2” to display the firewall setup menu. You may on ly enable or disable the firewall in this screen . Use the web configurator to configure the firewall. In the Active field press [SPACE [...]

12-4 Firewall Figure 12-2 Menu 21.2 - Fire wall Setup 12.3 Web Configurator Firewall Settings Screen From the MAIN MEN U , then FIREWALL . The screen as shown next is the Firewall Settings tab. Menu 21.2 - Firewall Setup The firewall protects against Denial of Service (DoS) attacks when it is active. Your network is vulnerable to attacks when the f[...]

Firewall 12-5 Figure 12-3 Fire wall Settings Table 12-1 Firewall Settings FIELD DESCRIPTION Enable Firewall Select this che ck box to activate the firewall. The Prestige p erforms access control and protects against Denial o f Service (DoS) attacks when the firewall is activated. LAN to WAN To log packets related to fire wall rules, make sure that [...]

12-6 Firewall Table 12-1 Firewall Settings FIELD DESCRIPTION Packets to Log Choose w hat LA N to WAN packets to log. Choose from:  No Log  Log Blocked (blocked LAN to WAN services appear in the Blocked Services textbox in the Services screen (with Enable Ser vices Blocking selected))  Log All (log all LA N to WA N packets) WAN to LAN To lo[...]

Firewall 12-7 Figure 12-4 Fire wall Rule Directions 12.4.1 LAN-to-W AN rules LAN-to-WAN rules are lo cal network to Internet firewall rule s. The default is to forward all traffic from your local network to the In ternet. How can you block certai n LAN to WAN traffi c? You may cho ose to bloc k certai n LAN-to-WAN traffic in the Services screen (cl[...]

12-8 Firewall what WAN-to-LAN packets to log, you a re in fact deciding what WAN-to-LAN and WA N-to - WAN/Prestige packets to log.  Allow NetBIOS traffic from the WAN to the LAN using the WAN IP web screen or SMT menu 24.8 com mands. Forwarde d WAN-to-LAN packets are not considered alerts. 12.5 Filter Click on the Filter tab. The screen appears [...]

Firewall 12-9 Table 12-2 Firewall Filter FIELD DESCRIPTION Restricted Web Features ActiveX ActiveX is a tool for building dynamic and act ive Web pages and distribute d object applications. When yo u visit an ActiveX Web site, ActiveX controls ar e downloaded to your browser, where they remain in case yo u visit the site again. Java Java is a progr[...]

12-10 Firewall 12.6 Services Click on the Service tab. The screen appea rs as shown ne xt. Use thi s screen to ena ble service bl ocking, enter/delete/ modify the services yo u want to block and the date/t ime you want to bl ock them . Figure 12-6 Fire wall Service[...]

Firewall 12-11 Table 12-3 Firewall Service FIELD DESCRIPTION Enable Services Blocking Select this check box to enable this feature. Available Service This is a list of pre-define d ser vices (ports) you may prohibit your LAN computers from using. Select the port you want to block using the dr op-do wn list and click Add to add the port to the Block[...]

[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Filter Configuration 13-1 Chapter 13 Filter Configuration This chapter sho ws you how to create and appl y filter(s). 13.1 About Fil tering Your Prestige uses filters to decide whether to allow pa ssage of a data packet and/or to make a call. There are two types of filter applications : data filte[...]

13-2 Filter Configuration Figure 13-1 Outgoing Packet Filtering Process For incoming packets, your Prestig e applies data f ilters only. Packets are processed depending upon whether a match is found. The following sections de scribe how to configure filter sets 13.1.1 The Filter Struct ure of the Prestige A filter set consists of one or more filter[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Filter Configuration 13-3 Start Packet into Filter Accept Packet Drop Packet Fetch Next Filter Set Next Filter Set Available? Yes Filter Set Fetch First Filter Rule Execute Filter Rule Next Filter Rule Available? Fetch Next Filter Rule No Fetch First Filter Set Yes Check Next Rule Drop No Forward [...]

13-4 Filter Configuration You can apply up to four filter sets to a particular port to block multiple typ es of packets. With each filter set having up to six rules, you can have a maximum of 24 rules active for a single por t. 13.2 Configuring a Filter Set To configure a filter set, follow the procedu re below. Select option 21 from the main menu [...]

Prestige 324 Intelligent Broadband Sha ring Gateway Filter Configuration 13-5 Press [ENTER] at the message: [Press ENTER to confirm] to open Menu 21.1.1 — Filter Rules Summary . Figure 13-5 Menu 21.1.1 – Filter Rules Summary 13.2.1 Filter Rules Summary Menu This screen shows the summary of th e existing rules in the filter set. The following ta[...]

13-6 Filter Configuration Table 13-1 Abbreviations Used in the Filter Rules Summary Menu FIELD DESCRIPTION m Action Matched. “F” means to forward the packet immediat ely and skip checking the remain ing rules. “D” means to drop the packet. “N“ means to check the next rule. n Action Not Matched. “F” means to forward the packet immedi[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Filter Configuration 13-7 separate menu fields are provided for protocol and device filter sets. If you include a protocol filter set in a device filter field or v ice versa, the Prestige will warn you and will not allow you to save. 13.2.3 TCP/IP Filter Rule This section shows you how to co nfigu[...]

13-8 Filter Configuration Table 13-3 TCP/IP Filter Rule Menu Fields FIELD DESCRIPTION EXAMPLE IP Protocol Protocol refers to the upper layer protocol, e.g., TCP is 6, UDP is 17 and ICMP is 1. This value must be bet ween 0 and 255 0-255 IP Source Route If Yes , the rule applies to packet with IP source route option; else the packet must not have sou[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Filter Configuration 13-9 Table 13-3 TCP/IP Filter Rule Menu Fields FIELD DESCRIPTION EXAMPLE More If Yes , a matching packet is passed to the next filter rule before an action is taken; else the packet is dispos ed of according to the action fields. If the More field is Yes , then Action Matched [...]

13-10 Filter Configuration Packet into IP Filter Matched Matched Yes Action Matched Action Not Matched More? No Filter Active? Check IP Protocol Drop Drop Packet Accept Packet Drop Forward Check Next Rule Check Next Rule Check Next Rule Forward Not Matched Yes No Check Src IP Addr Apply SrcAddrMask to Src Addr Matched Check Dest IP Addr Apply DestA[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Filter Configuration 13-11 13.2.4 Generic Filter Rule This section shows you how to co nfigure a generic filte r rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP, it is generally easier to use the IP rules directly. For generic rules, the Pre stige treats a packe[...]

13-12 Filter Configuration Table 13-4 Generic Filter Rule Menu Fields FIELD DESCRIPTION EXA MPLE Filter Type Use the [SPACE BAR] to se lect a rule. Parameters displayed below each type will be different. Options are: Generic Filter Rule or TCP/IP Filter Rule . Generic Filter Rule Active Select Yes to turn on the filter rule. No Offset Enter the sta[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Filter Configuration 13-13 Figure 13-9 Filter Example 13.3 Example Filter Let’s look at an example to block outside users from accessing the Prestige via telnet. See the included support CD for more example filters. 1. Enter 21 from the main menu t o open Menu 21 - Filter Se t Configuration . 2.[...]

13-14 Filter Configuration Figure 13-10 Example Filter — Menu 21.3.1 Press [ENTER] to confirm and display the next screen. Note th at there is only on e filter rule in this set. Menu 21.7.1 - TCP/IP Filter Rule Filter #: 7,1 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 6 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Filter Configuration 13-15 Figure 13-11 Example Filter Rules Su mmary — Menu 21.3 Ent er 2 in the abov e me nu to configur e the second rule . Configure this filter rule with port number as 23 (Telnet) as shown in the next screen (a fter you press [ENTER] to confirm. Menu 21.7 - Filter Rules Sum[...]

13-16 Filter Configuration Figure 13-12 Example Filter Rules Summary After you’ve created the filter set, you must apply it. 6. Enter 1 1 from the main m enu to dis play m enu 11. 7. Go to the Edit Filter Sets field, press the [SPACE BAR] to select Yes and press [ENTER]. 8. This brings you to menu 11.5. Apply th e TELN ET_FTP_WAN filter set (filt[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Filter Configuration 13-17 Figure 13-13 Protocol and Dev ice Filter Sets 13.5 Applying a Filter and Factory Default s This section shows you where to app ly the filter(s) after you design it ( them). 13.5.1 LAN traffic You seldom need to filter LAN traffi c; however, the filter sets may be useful [...]

13-18 Filter Configuration 13.5.2 Remote Node Filters Go to menu 11.5 (shown next – note that call filter se ts are only present for PPPoE encapsulation) and enter the number(s) of the filter set(s) as appropriate. You can cascade up to four filter sets by entering their numbers sepa rated by c omm as. Enter 1 i n prot ocol filters under Output F[...]

Prestige 324 Intelligent Broadband Sha ring Gateway UPnP 14-1 Chapter 14 UPnP This chapter introduces the UPnP feature. 14.1 Introduci ng Universal Plug and Play Universal Plug and Play (U PnP) is a distri buted, o pen networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between dev ices. A UP nP device can dynamically[...]

14-2 UPnP 14.1.3 Cautions with UPnP The automated nature of NAT Tran sv ersal application s in establishing their own services an d opening firewall ports may present network security issues. Network information and configuration may also be obtained a nd m odified by us ers in som e network e nvironm ents. All UPnP-enabled devices may communicate [...]

Prestige 324 Intelligent Broadband Sha ring Gateway UPnP 14-3 Figure 14-1 Configuring UPnP Table 14-1 Configuring UPnP FIELD DESCRIPTION Enable the Universal Plug and Play (UPnP) feature Select this checkbox to activate UPnP. Be aware that anyone cou ld use a UPnP application to open the web config urator' s login screen without entering the P[...]

14-4 UPnP Table 14-1 Configuring UPnP FIELD DESCRIPTION Allow UPnP to pass through firewall Select this check box to create a static LAN to LAN/ Prestige rule that allows forwarding of ports 1900 and 80. Selecting t his check box also creates a dynamic firewall rule every tim e a NAT forwarding port is reserved for UPn P. This setting remains activ[...]

Prestige 324 Intelligent Broadband Sha ring Gateway UPnP 14-5 In the Communications window, select the Universal Plug an d Play check box in the Components selection box. Click OK to go back to the Add/Remove Programs Properties window and click Next . Restart the computer when prom pted. Installing UPnP in Windows XP Follow the steps below to inst[...]

14-6 UPnP Select Networking Service in the Components selection box a nd click Details . In the Networking Ser vi ces window, select the Universal Plug and Play check box. Click OK to go back to the Window s Optional Networking Component Wizard window and click Next . 14.4 Using UPnP in Windows XP Example This section sh ows you ho w to use t he UP[...]

Prestige 324 Intelligent Broadband Sha ring Gateway UPnP 14-7 Auto-discover Your UPnP-enabled Network Device 14. Cli ck start and Control Panel . Double-click Network Connections . An icon display s under Internet Gateway. 15. Right-click the icon and sel ect Properties .[...]

14-8 UPnP In the Internet Connection P roperties window , click Settings to see the port mappi ngs that were automatically created. You may edit or delete the port mappings or click Add to manually add port mappings. When the UPnP-enabled device is disconn ected from your computer , all port mappings will be deleted automaticall y . Select Show ico[...]

Prestige 324 Intelligent Broadband Sha ring Gateway UPnP 14-9 Double-click on the icon to display you r current Internet connection status. Web Configurator Easy Access With UPnP, you can access the web-base d configurator on the ZyXEL device without fi nding out the IP address of the ZyXEL device firs t. This is helpful if you do not know the IP a[...]

14-10 UPnP An icon with the descri ption for each UP nP- enabled device display s under Local Network . Right-click on the icon for your ZyXEL d evice and select Invoke . The web configurator login screen displays. Right-click on the icon for your ZyXEL dev ice and select Properties . A properties window disp lays with basic information about t he [...]

Prestige 324 Intelligent Broadband Sha ring Gateway Chapter 15 SNMP Configuration This chapter explains SNMP configuration menu 22. SNMP is only available if TCP/IP is configured. 15.1 About SNMP Simple Netw ork Managem ent Prot ocol is a protocol used for e xchanging managem ent inform ation between network de vices. SNMP is a mem ber of TCP/IP pr[...]

15-2 SNMP Configuration Table 15-1 SNMP Commands COMMAND DESCRIPTION Get Allo ws the manager to retrieve an object variable from the agent. GetNext Allo ws the manager to retrieve the next object variable from a table or list within an agent. In SNMPv1, when a manager wants to retrieve all elements of a table from an agent, it initiates a Get opera[...]

Prestige 324 Intelligent Broadband Sha ring Gateway Table 15-2 SNMP Configuration Menu Fields FIELD DESCRIPTION EXAMPLE Get Community T ype the Get Community , which is the password for the incoming Get- and GetNext requests from the management station. Public Set Community Type the Set community, which is the password for inc oming Set requests fr[...]

15-4 SNMP Configuration Table 15-3 SNMP Traps TRAP # TRAP NAME DESCRIPTION 6a For intentional rebo ot: A trap is sent with the message "System reboot by user!" if reboot is done intentionally, (e.g. do wnload new files, CI command "sys reboot", etc.). 6b For fatal error: A trap is sent wi th the message of the fatal code if the [...]

A System Information & Diagnosis 16-1 Chapter 16 System Information & Diagnosis This chapter cove rs SMT menus 24.1 t o 24 .4. This chapter covers the diagnostic tools th at help you to maintain your Prestige. These tools include updates on system status, port status, log and trace capabilities and upgrades for t he system software. Select [...]

P GE 16-10 Call SchedulingRemote Management 16.1.1 T o get to the System St atus: • Enter 24 to display Menu 24 - System Maintenan ce. • In this menu, enter number 1 to open System Maintenance - Status . • There are three comm ands in Menu 24.1 - System Main tenance - Status . Enterin g 1 drops the WAN (PPTP/PPPoE) connection, 9 resets the co[...]

A System Information & Diagnosis 16-3 Table 16-1 System Maintenance — Status M enu Fields FIELD DESCRIPTION RxPkts T he number of received packe ts on this port. Cols The number of collis ions on this port. Tx B/s Shows the transmission speed in Bytes per second on this port. Rx B/s Shows the reception speed in Bytes per second on this por t.[...]

P GE 16-10 Call SchedulingRemote Management Enter 24 to go to Menu 24 - System Maintenance . Enter 2 to open Menu 24.2 - Syst em Informa tion an d Consol e Port Speed . From this m enu you ha ve two choi ces as shown in t he next fig ure: Figure 16-3 Menu 24.2 — Sy stem Information and Console Port Speed 16.2.1 System Information Menu 24.2.1 - Sy[...]

A System Information & Diagnosis 16-5 Table 16-2 Fields in System Maintenance FIELD DESCRIPTION Name This is the Prestige's system nam e + domain name assigned in menu 1. E.G., System Name= Prestige; Domain Name= zyxel.com Name= P324. zyxel.com Routing Refers to the routing protocol used. ZyNOS F/W Version Refers to the version of ZyXEL&ap[...]

P GE 16-10 Call SchedulingRemote Management 16.3 Log and T race There are three logging facilitie s in the Prestige. The firs t is the error logs and tr ace rec ords that are stored locally. The second is the UNIX sysl og facility for message logging. UNIX syslog is an external UNIX server used for stori ng log messages. 16.3.1 V iewing Error Log T[...]

A System Information & Diagnosis 16-7 Figure 16-7 Examples of Error and Information Messages 16.3.2 UNIX Syslog The Prestige uses the UNIX syslog facility to log th e CDR (Call Detail Record) and system messages to a syslog server. Sysl og and accounting ca n be configured in Menu 24.3.2 - Sys tem Maintenance - Syslog and Ac count ing , as show[...]

P GE 16-10 Call SchedulingRemote Management Table 16-3 System Maintenance Men u Syslog Parameters PARAMETER DESCRIPTION Syslog IP Address Enter the IP Address of the se rver that will log the CDR (C all Detail Record ) and system messages i.e., the syslog server. Log Facility Press the [SPACE BAR] to toggle between the 7 different Local opti ons. T[...]

A System Information & Diagnosis 16-9 Figure 16-9 Call-Triggering Packet Example 16.4 Diagnostic The diagnostic facility allows you to test the different aspects of your Prestige to determine if it is working properly. Menu 24.4 allows you to ch oose among va rious types of diagnostic tests to eva luate your system, as shown next. IP Frame: ENE[...]

P GE 16-10 Call SchedulingRemote Management Figure 16-10 Menu 24.4 — Sy stem Maintenance — Diagnosti c Follow the procedure below to get to Menu 24.4 - System Maintenance – Diagnostic. Step 4. From the m ain menu, select option 24 t o open Menu 24 - System Mainte nance . Step 5. From this menu, select option 4 (Diagnos tic). This will open Me[...]

A System Information & Diagnosis 16-11 Figure 16-11 WAN & LAN DHCP The following table describes the diagnostic tests av ailable in menu 24.4 for your Prestige and the connections. Table 16-4 System Maintenance Men u Diagnostic NUMBER FIELD DESCRIPTION 1 Ping Host Enter 1 to ping any machine (with an IP ad dress) on your LAN or WAN. Enter i[...]

[...]

Firmware and Configuration Maintenance 17-1 Chapter 17 Firmware and Configuration File Maintenance This chapter tells you how to back up an d restor e your configuratio n file as well as upload new firmware and a new config uration file. 17.1 Filename Convent ions The configu ration file ( often call ed the rom file or rom -0) contain s the fact or[...]

17-2 Firmware and Configuration Maintenance The following table is a summary. Please note that the internal filename refers to the filename on the Prestige and the external filename refers to the filename not on the Prestige, that is, on your com puter, local network or ftp site and so the name (but not the extension) will vary. After uploading new[...]

Firmware and Configuration Maintenance 17-3 Please note that terms “downl oad” and “u pload” are re lative to the computer. Downlo ad means to transfer from the Prestige to the computer, while upload means from your computer to the Prestige. Follow the instructions as shown in the next screen. Figure 17-1 Telnet in Menu 24.5 17.2.1 Using th[...]

17-4 Firmware and Configuration Maintenance Example of FTP Commands from the DOS Prompt Figure 17-2 FTP Session Example FTP GUI Clients The followin g table descri bes some of t he co mmands that you may see in FTP GUI clients. Table 17-2 General Commands for GUI Clients COMMAND DESCRIPTION Host Address Enter the address of the host server. Login T[...]

Firmware and Configuration Maintenance 17-5  There is a SMT consol e session runni ng. 17.2.2 Backup Confi guration Using TFTP The Prestige supports the up/download ing of the firmware and the configuration file using TFTP (Trivial File Transfer Protoc ol) over LAN. Althoug h TFTP s hould work over WAN as well, it is not reco mmended. To use TFT[...]

17-6 Firmware and Configuration Maintenance where “i” specifies binary image tra nsfer mode (use t his mode when transferring binary files), “host” is the Prestige IP address, “get” tr ansfers the file source on the P restige (rom -0 na me of the configuration file on the Prestige) to the file destination on th e computer and renames it[...]

Firmware and Configuration Maintenance 17-7 Figure 17-3 System Maintena nce — Backup Configuration Step 1. The followin g screen indicates t hat the Xm odem downloa d has started . Figure 17-4 System Maintena nce — Starting Xmodem Do wnload Screen Step 2. Run the Hype rTerm inal program by clicking Transfer , then Receive File as shown in the f[...]

17-8 Firmware and Configuration Maintenance Figure 17-6 Successful Bac kup Confirmation Screen 17.3 Restore Configuration This section sh ows you ho w to restore a previously save d configuration. Note that th is function erases th e current confi guration be fore restori ng a pre vious back up config uration; p lease do not att empt to rest ore un[...]

Firmware and Configuration Maintenance 17-9 Figure 17-7 Telnet into Menu 24.6 Step 14. Launch the FTP client on your c omputer. Step 15. Enter “open”, followe d by a space a nd th e IP address of y our Prestige. Step 16. Press [ENTER] when prom pted for a username . Step 17. Enter your pas sword as re quested (t he default is “1234”). Step [...]

17-10 Firmware and Configuration Maintenance Restore Using FTP or TFTP Session Example Figure 17-8 Restore Usi ng FTP or TFTP Session Example Refer to the TFTP and FTP over WAN Will Not Work When section to read about configurations t hat disallow TFTP and FTP to work over WAN. 17.3.2 Restore V ia Console Port Restore confi guration vi a console po[...]

Firmware and Configuration Maintenance 17-11 Figure 17-11 Restore Configuration Example Step 6. After a successful restoration y ou will see the following screen. Press any key to restart t he Prestige and return to the SMT menu. Figure 17-12 Successful Restoration Confirmation Screen 17.4 Uploa ding Firmware and Configuration Files This section s [...]

17-12 Firmware and Configuration Maintenance WA R N I N G ! DO NOT INTERUPT THE FILE TRAN SFER PROCESS AS THIS MA Y PERMANENTL Y DAMAGE YOUR PRESTIGE. 17.4.1 Firmware File Upload FTP is the pre ferred m ethod for u ploading th e firmware a nd configurati on. To use t his feature, y our computer m ust have an F TP client . When you telnet into the P[...]

Firmware and Configuration Maintenance 17-13 Figure 17-14 Telnet Into Menu 24.7.2 — Sy stem Maintenance To upload the firmware and the conf iguration file, follow these examples: FTP File Upload Command from the DOS Prompt Example Step 23. Launch the FTP client on your c omputer. Step 24. Enter “open”, followe d by a space a nd th e IP addres[...]

17-14 Firmware and Configuration Maintenance FTP Session Example of Firmware File Upload Figure 17-15 FTP Session Example of Firmware File Upload More command s (found in third party FTP c lien ts), are listed earlier in this chapter. Refer to the TFTP and FTP over WAN Will Not Work When section to read about configurations t hat disallow TFTP and [...]

Firmware and Configuration Maintenance 17-15 Step 34. Use the TFTP client (see the exam ple below) to transfer files bet ween the Prestige and the computer. The file nam e for the firm ware is “ras”. Note that the telnet connection must be activ e and the Prestige in CI mode before and during the TFTP transfer. For detail s on TFTP com mands (s[...]

17-16 Firmware and Configuration Maintenance Figure 17-16 Menu 24.7.1 as seen using the Cons ole Port Step 2. After the "St arting Xm odem upload" me ssage appears, activate t he Xmod em protoc ol on you r computer. Fol low the procedure as s hown p reviously for the Hype rTerminal p rogram. The procedure fo r other se rial comm unication[...]

Firmware and Configuration Maintenance 17-17 Uploading a Configuration File Via Console Port Step 1. Select 2 from Menu 24. 7 – System Maintenance – Upload Firmware to displa y Menu 24.7.2 - System Maintenance - Up load Router Configura tion File. Follo w the instructions as shown in the next screen. Figure 17-18 Menu 24.7.2 as seen using the C[...]

17-18 Firmware and Configuration Maintenance Figure 17-19 Example Xmodem Upload Step 2. After the co nfiguratio n upload process has c omplet ed, restart the Prestige by entering “at go”. Type the configuration file’s location, or click Browse to search for it. Choose the Xmodem p rotocol. Then click Send .[...]

System Maintenance & Information 18-1 Chapter 18 System Maintenance & Information This chapter leads yo u through SMT menus 24.8 to 24.11. 18.1 Command Interpreter Mode The Command I nterpreter (CI) is a pa rt of the main r outer firm ware. The C I provides much of the same functionality as the SMT, while adding some low-level setup and dia[...]

18-2 System Maintenance & Information Figure 18-2 Valid Commands 18.2 Call Control Support The Prestige pr ovides two cal l control funct ions: bu dget managem ent and call history. Pl ease note that thi s menu is only applicab le when Encapsulation is set to PPPoE or PPTP in me nu 4 or m enu 11.1. The budget management function allows you to s[...]

System Maintenance & Information 18-3 18.2.1 Budget Management Menu 24.9.1 shows the budget management statistics for ou tgoing calls. Enter 1 from Menu 24. 9 - System Maintenance - Call Contro l to br ing up th e fo llow ing men u. Figure 18-4 Budget Managemen t The total budget is the time limit on the accum ulated time for outgoing calls to [...]

18-4 System Maintenance & Information 18.2.2 Call History This is the second option in Menu 24.9 - System Main tenance - C all Control . It di splays i nformati on about past incom ing and outgoin g calls. Enter 2 from Menu 24.9 - Syste m Maintenance - Call Control to bring up the following menu. Figure 18-5 Call History Table 18-2 Call History[...]

System Maintenance & Information 18-5 18.3 Time and Date Setting Time and Date Setting is a software mechanism to set the time manually or get the current time and da te from an external server when you turn on your Prestige. Menu 24.10 allows yo u to update the time and date settings of your Prestige. The real time is then disp layed in the Pr[...]

18-6 System Maintenance & Information Figure 18-7 Menu 24.10 Sy stem Maintenance — Time and Date Setting Table 18-3 Time and Date Setting Fields FIELD DESCRIPTION Enter the time service protocol that your time server sends when you turn on the Prestige. Not all time servers support all pr otocols, so you may have to check with your ISP/networ[...]

System Maintenance & Information 18-7 Table 18-3 Time and Date Setting Fields FIELD DESCRIPTION Time Zone Press [SPACE BAR] to set the time difference between your time zone an d Greenwich Mean Time (GMT ). Daylight Saving Daylight Savin g Time is a period from late spring to early fall when many countries set their clocks ahead of normal local[...]

[...]

PPTP 19-1Remote Management 19-1 Chapter 19 Remote Management This chapter cove rs remote management (SMT m enu 24.11). 19.1 Introduction You may rest rict a service that can be used t o remote ly manage the Presti ge using SMT menu 11 and submenus. 19.1.1 T elnet First configure yo ur Prestige for r emote management through an SMT session u sing th[...]

19-2 Remote Management 19.1.3 Web You can use the Prestige’s em bedded web configurator f or configurat ion and file ma nagement. See the online hel p for details. 19.1.4 SNMP (Simple Network Management Protocol) Simple Netw ork Managem ent Prot ocol is a member of TC P/IP prot ocol sui te that is used for e xchanging management information betwe[...]

PPTP 19-3Remote Management 19-3 If you enable remote management of a serv ice, but have applied a filter to block the service, then you will not be able to remotely manage the service. To disable remot e managem ent of a service, sel ect Disable i n the corresp onding Ser ver Access field. Enter 11 from menu 24 to bring up Menu 24.11 – Remote Man[...]

19-4 Remote Management Table 19-1 Menu 24.11 – Remote Managemen t Control FIELD DESCRIPTION EXAMPLE Server Access Select the access interf ace (if an y) by pressing [SPACE BAR], then [ENTER] to choose from: LAN only , WAN only , ALL or Disable . LAN only Secured Client IP The default 0.0 .0.0 allows any client to use this service to remotel y man[...]

PPTP 19-5Remote Management 19-5  Use the Prestige’s WAN IP address wh en confi guring from the WA N.  Use the Prestige’s LAN IP address when c onfigu ring from the LAN. 19.5 System Timeout A managem ent session (eit her via the we b confi gurator or S MT) can be le ft idle for 5 minutes ( default) before the session times out. After it ti[...]

[...]

Call Scheduling 20-1 Chapter 20 Call Scheduling This chapter shows you how to setup call time periods for remote nodes. 20.1 Introduction The call scheduling feature allows the Prestige to mana ge a remote no de and dictate w hen a remote node should be called and fo r how long. This feature is sim ilar to the scheduler in a video-cassette recorder[...]

20-2 Call Scheduling Lower num bered sets take pre cedence over higher numbered set s thereby avoiding sc heduling co nflicts. For example, if sets 1, 2, 3 and 4 in are applied in the remote node then set 1 will take preced ence over set 2, 3 and 4 as the Prestige , by default, a pplies the lo west numbered set first. Set 2 will take precedence ove[...]

Call Scheduling 20-3 Table 20-1 Schedule Set Setup Fields FIELD DESCRIPTION EXAMPLE Active Choose Yes to activate and No to deactivate the schedule set. Yes (default) Start Date Enter the start dat e that you wish the set to take effect in year - month-day format. Valid dates are from the present to Februar y 5, 2036. 2000 – 07 – 01 How Often S[...]

20-4 Call Scheduling 20.4 Applying Schedule Sets to Remote Nodes Once your sche dule sets are c onfigure d, you m ust apply the m to the desire d remote node(s). Enter 11 from the main m enu and, usi ng the [SPACE BAR] , select PPP oE or PPTP in the Encapsulation field. Enter your target re mote node i ndex number(s) i n the Schedule s field, as s [...]

Call Scheduling 20-5 Figure 20-4 Apply ing Schedule Sets to a Re mote Node Example (PPTP Encapsulation) Menu 11.1 - Remote Node Profile Rem Node Name= ChangeMe Active= Yes Encapsulation= PPTP Service Type= Standard Service Name= Outgoing: Rem Login= Rem Password= ******** Athen= CHAP/PAP PPTP: My IP Addr= Server IP Addr= Connection ID/Name= Authen=[...]

[...]

Prestige 324 Intelligent Broadband Sha ring Gateway T roubleshooti ng 21-1 Chapter 21 Troubleshooting This chapter cove rs the potential pro blems and possible rem edies. After each p roblem description, some instructions are provi ded to hel p you to diagnose and to solve the problem. See the included CD for further inform ation. 21.1 Problems St [...]

Prestige 324 Intelligent Broadband Sha ring Gateway 21-2 Troubleshooting PROBLEM CORRECTIVE ACTION Check the 10M/100M LEDs on the front panel. One of these LEDs should be on. If they are both off, check the cables between your Prestige and hub or the station. Cannot ping any computer on the LAN. Verify that the IP addresses and subnet masks of the [...]

[...]

Prestige 324 Intelligent Broadband Sha ring Gateway IV P P a a r r t t I I V V : : Appendices and Index This section provides some Appendices and an Index.[...]

PPPoE 1 Appendix A PPPoE PPPoE in Action An ADSL m odem brid ges a PPP session over Ethe rnet (PPP o ver Etherne t, RFC 25 16) from your PC t o an ATM PVC (Permanent Virt ual Circuit) which c onnect s to a xDSL Acces s Concentrator where t he PPP session terminates (see the next figure). One PVC can suppor t any number of PPP sessions from your LAN[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 2 PPPoE Diagram 1 Single-PC per Modem Hardware Configuration How PPPoE Works The PPPoE driver m akes the Ethernet appear as a seri al link to the PC a nd the PC runs PPP over it, while the modem bridge s the Ethernet fram es to the Access C oncentrator (AC). Between the AC and an ISP, the AC is ac[...]

PPPoE 3 The Prestige as a PPPoE Client When using the Prestige as a PPPoE client, th e PCs on the LAN see only Ethernet and are not aware of PPPoE. This al leviates the ad ministrat or from having to ma nage the PPPoE cl ients on t he individu al PCs. Diagram 2 Prestige as a PPPoE Client[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 4 PPTP Appendix B PPTP What is PPTP? PPTP (Point -to-Point T unneling Pr otocol) i s a Microsoft propri etary proto col (RFC 2 637 for PPTP is informational only) to tunnel PPP frames. How can we transport PPP frames from a PC to a broadband modem over Ethernet? A solution is to build PPTP into th[...]

PPTP 5 When the Prest ige is depl oyed in such a set up, it appea rs as a PC t o the ANT (A DSL Netwo rk Termination). In Windows VPN o r PPTP Pass-Through feature, th e PPTP tunneling is created from W indows 95, 98 and NT clients to an NT server in a remote location. Th e pass-through feature allow s users o n the network to access a different re[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 6 PPTP Each PPTP session has distinct control co nnection and PP P data con nection. Call Connection The control connection runs over TCP. Similar to L2TP, a tunnel contro l connection is first established before call con trol messages c an be exchan ged. Pleas e note that a tunnel cont rol connec[...]

Boot Commands 7 Appendix C Boot Commands The BootMod ule AT comm ands execute fro m within t he router’s bo otup software, when debu g mode is selected before the m ain router firm ware (ZyNOS) is started. When you start up your Prestige, you are given a choi ce to go int o debug m ode by pres sing a key at t he prompt shown in the following scre[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 8 Boot Commands Diagram 7 Boot Module Commands ======= Debug Command Listing ======= AT just answer OK ATHE print help ATBAx change baudrate. 1:38.4k, 2:19.2k, 3:9.6k 4:57.6k 5:115.2k ATENx,(y) set BootExtension Debug Flag (y=password) ATSE show the seed of password generator ATTI(h,m,s) change sy[...]

NetBIOS Filter Commands 9 Appendix D NetBIOS Filter Commands The following describes the NetBIOS packet filter commands. Introduction NetBIOS (Network Basic Input/Output System) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a LAN. For some dial-up services such as PPPoE or PPTP, NetBIOS pac kets cause un[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 10 NetBIOS Filter Commands The filter types and their default settings are as follows. NAME DESCRIPTION EX AMPLE LAN to WAN This field displays whether NetBIOS packets are blocked or forwarded from the LAN to the WAN. Block WAN to the LAN This field displays whether NetBIOS packets are blocked or [...]

NetBIOS Filter Commands 11 This comm and blocks LAN to WA N NetBIOS packets Command: sys filter netbios config 1 off This comm and forwards WAN to the LAN NetBIOS packets Command: sys filter netbios config 2 on This comm and blocks IP Sec NetBIOS packets Command: sys filter netbios config 3 off This command stops NetBIOS commands from initiatin g c[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 12 Log Descriptions Appendix E Log Descriptions Configure centralized logs using the em bedded w eb configurator; see the o nline help for details. This appendix describ es some of the log m essages. Chart 1 System Error Logs LOG MESSAGE DESCRIPTION %s exceeds the max. number of session per host! [...]

Log Descriptions 13 Chart 2 System Maintena nce Logs TELNET Login Successfully Someone has logged on to the router via telnet. TELNET Login Fail Someone has failed to log on to the router via telnet. FTP Login Successfully Someone has logged on to the router via ftp. FTP Login Fail Someone has failed to log on to the router via ftp. NAT Session Tab[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 14 Log Descriptions Chart 4 Content Filtering Logs JAVBLK IP/Domain Name The Prestige bl ocked access to this IP address or domain name because of a forbidden service suc h as: ActiveX, a Java applet, a cookie, or a proxy. Chart 5 ICMP Type and Code Expla nations TYPE CODE DESCRIPTION 0 Echo Reply[...]

Log Descriptions 15 Chart 5 ICMP Type and Code Expla nations TYPE CODE DESCRIPTION 11 Time Exceeded 0 Time to live exceeded in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 Pointer indicates the error 13 Timestamp 0 Timestamp request message 14 Timestamp Reply 0 Timestamp reply message 15 Information Request 0 Information reque[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 16 Hardware Specifications Appendix F Power Adapter Specifications North American Plug Standards AC Power Adapter Model: MW41-0901000A AC Power Adapter Model: DV-9750-4 Input Power: AC120Volts/60Hz/13W Input Power: AC120Volts/60Hz/15W Output Power: AC 9Volts/1.0A Output Power: AC 9Volts/1.0A Power[...]

Power Adapter Specifications 17 Appendix G Hardware S pecifications SPECIFICATIONS Power Specification I/P AC 120V / 60Hz ; O/P DC 12V 1200 mA MTBF (Mean T ime Between Failure) 1000 00 hrs Operation Temperature 0º C ~ 40 degr ees Celsius Ethernet Specification for WAN 10Mb it Half / Full Manual Setting Ethernet Specification for LAN 10/100 Mbit Ha[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 18 Setting up Your Computer’s IP Address Appendix H Setting up Y our Computer ’ s IP Address All computers must have a 10M or 10 0M Ethe rnet adapte r card and TCP/IP installed. Windows 95/ 98/Me/NT/ 2000/XP, Maci ntosh OS 7 and la ter operat ing system s and all v ersions of UNIX/LINU X inclu[...]

Setting up Your Computer’s IP Address 19 1. Click Start , Settings , Control Panel and double- click the Network icon to open the Network window. 2. The Networ k window Configurati on tab displays a lis t of instal led com ponents. Yo u need a netw ork adapter, the T CP/IP prot ocol an d Client for Micros oft Network s. If yo u need th e adap ter[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 20 Setting up Your Computer’s IP Address d. Select Client for Microsoft Networks from the list of network clients and then cl ick OK . e. Restart your computer so t he changes you made take effect. In the Networ k window Configuration tab, select your network adapter's TCP/IP entr y and cli[...]

Setting up Your Computer’s IP Address 21 2. Click the DNS Configuration tab. -If you do not know your DNS information, select Disable DNS . -If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them a ll in). 3. Click the Gateway tab. -If you do not know your gateway’s IP add[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 22 Setting up Your Computer’s IP Address 5. Click OK to close the Network window. Insert the Windows CD if prompted. 6. Turn on your Prestige and restar t your com puter when prompted. Checking/Modifying Your Computer’s IP Address 1. Click Start a nd then Run . 2. In the Run window, type "[...]

Setting up Your Computer’s IP Address 23 Windows 2000/NT/XP 1. In Windows XP, click start , Control Panel . In Windows 2000/NT, click Start , Settings , Control Panel . 2. In Windows XP, click Network Connections . In Windows 2000/NT, click Netwo rk and Dial-up Connections . 3. Right-click Local A rea Connection and then click Properties .[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 24 Setting up Your Computer’s IP Address 4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties .[...]

Setting up Your Computer’s IP Address 25 5. The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). - To have your computer assigned a d ynamic IP address, click Obtain an IP address automatically . -If you have a static IP address click Use the following IP Address and fill in the IP address , Subnet mask , and Defa[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 26 Setting up Your Computer’s IP Address 6. -If you do not know your gateway's IP address, remove any previously installed gate ways in the IP Settin gs tab and click OK . Do one or more of the following if you want to configure additional IP addres ses: -In the IP Settings tab, in IP addre[...]

Setting up Your Computer’s IP Address 27 7. In the Internet Protocol TCP/IP Propertie s window (the Gene ral tab in Windows XP): -Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). -If you know your DNS server IP address(es), click Use the follow ing DNS server addresses , and type them in the Preferr[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 28 Setting up Your Computer’s IP Address Macintosh OS 8/9 1. Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel .[...]

Setting up Your Computer’s IP Address 29 2. Select Ethernet built-in from the Connect v ia list. 3. For d ynamically assigned settings, sel ect Using DHCP Server from the Configure: list. 4. For staticall y assigned settings, do the following: -From the Configure box, select Manually . -Type your IP address in the IP Address box. -Type your subne[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 30 Setting up Your Computer’s IP Address 1. Click the Apple menu, and click System Preferences to open the System Preferences wi nd o w. 2. Click Network in the icon bar. - Select Automatic from the Location list. - Select Built-in Ethernet from the Show list. - Click the TCP/IP tab. 3. For dyna[...]

Brute Force Password Guessing Protection 31 Appendix I Brute-Force Password Guessing Protection The followin g describes t he commands for enablin g, disabl ing and c onfiguri ng the brut e-force pas sword guessing pr otection m echanism for the pass word. See other appe ndices for information on the comman d structure. Chart 7 Brute-Force Pas swor[...]

Prestige 324 Intelligent Broadband Sha ring Gateway 32 Triangle Route Appendix J T riangle Route The Ideal Setup When the firewall is on, your Prestige acts as a secure gateway between your LA N and the Internet. In an ideal network t opology, all i ncomi ng and outgoin g network t raffic passes t hrough the P restige to pr otect your LAN against a[...]

Triangle Route 33 Diagram 11 “Triangle Route” Problem The “T riangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logi cal sections over the same Ethernet interface. Your Prestige supports up to three logi cal LAN interfaces with [...]

Prestige 324 Intelligent Broadband Sha ring Gateway 34 Triangle Route Diagram 12 IP Alias Gateways on the W AN Side A second sol ution to the “triangle route” pr oblem i s to put all of y our net work gate ways on the WAN side as the following figure sh ows. This ensures t hat a ll incoming network traffic p asses through your Prestige to your [...]

Triangle Route 35 Step 2. Enter “8” in m enu 24 t o enter CI c ommand mode. Step 3. Use the following commands to allow/disallo w triangle route. sys firewall ignore triangle all off This command allows trian gle route. sys firewall ignore triangle all on This comman d disallows triangle route.[...]

[...]

Index 37 Index 1 10/100 MB Auto- negotiation .......................... 1-1 A Active .............................................................. 6-7 Address Assignment ............................... 4-7, 4-9 Allocated Budget ............................................ 6-9 Applying Schedule Sets to Remote Nodes.... 20-4 AT comm and ............[...]

Header 38 Index DYNDNS Wildcar d ........................................ 5-8 E Edit IP ............................................................. 6-8 EMAIL.......................................................... 5-10 E-mail Address ............................................. 5-10 Enable Wildcard ........................................... 5[...]

Index 39 IP Alias Setup ................................................. 7-9 IP Multicast ............................................. 1-3, 7-5 Internet Gr oup Mana gement Pr otocol ( IGMP) ................................................................ 1-3 IP Network Num ber ........................................ 7-3 IP Pool..................[...]

Header 40 Index Q Quick Start Guide ........................................... 3-1 R Read Me First ............................................... xxiii Rear Panel ....................................................... 2-1 Related Docume ntation................................. xxiii Rem Node Na me............................................. 6-7[...]

Index 41 System Tim eout ............................................ 19-5 T TCP/IP 7-2, 7-6, 7-7, 7-8, 9-7, 13-7, 13-9, 13 -12, 13-16, 19 -1 TCP/IP filter rule........................................... 13-7 Telnet Configur ation ..................................... 19-1 Telnet Under NAT ........................................ 19-1 TFTP And FTP [...]