ZyXEL Communications P-335WT manuale d’uso

P-335 Firewall Router w i th Print Server P-335WT 802.1 1g Wireless Firewall Router with Print Server User ’ s Guide V ersi on 3.60 9/2005[...]

[...]

P-335 Series User’s Guide Copyright 2 Copyright Copyright © 2005 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, transcribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mechanical , magnetic, optical[...]

P-335 Series User’s Guide 3 Federal Communications Commission (F CC) Interference Statement Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rul es. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any inte[...]

P-335 Series User’s Guide Safety Warnings 4 Safety W arnings For your safety , be sure to read and fo llow all warning notices and instructions. • T o reduce the risk of fire, use only No. 26 A WG (American W ire Ga uge) or larger telecommunication line cord. • Do NOT open the device or un it. Opening or removi ng covers can expose you to dan[...]

P-335 Series User’s Guide 5 ZyXEL Limited Warranty ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase . During the warranty period, and upon proof of purchase, should the product have ind ica[...]

P-335 Series User’s Guide Customer Support 6 Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps yo u took to solve i t . METHOD LOCATION SUPPOR T[...]

P-335 Series User’s Guide 7 Customer Suppo rt UNITED KINGDOM support@zyxel.co.uk +44 (0) 1344 303044 08707 555779 (UK only) www .zyxel.co.uk ZyXEL C ommunication s UK Ltd.,1 1 The Courtyard, Eastern Road, Bracknell, Berkshire, RG12 2XB, United Kingdom (UK) sales@zyxel.co.uk +44 (0) 1344 303034 ftp.zyxel.co.uk a. “+” is the (prefi x) number yo[...]

P-335 Series User’s Guide Table of Contents 8 T able of Content s Copyright .................................................. ................................................................ 2 Federal Communications Commissi on (FCC) Interference St atement ............... 3 Safety W arnings ......................................................[...]

P-335 Series User’s Guide 9 Table of Contents 2.4.8 Summary: VPN Monitor .................... ............. ................ ............. ............... 58 Chapter 3 Connection Wizard ........................................................ ......................................... 60 3.1 Wizard Setup ... ............. ................ ........[...]

P-335 Series User’s Guide Table of Contents 10 5.3 Configuring Wireless LAN on the Presti ge .......... ............. ............. ................ ..... 83 5.4 General Wireless LAN Screen ........... ............. ................ ................ ............. ..... 84 5.4.1 No Security ...... ................ ............. ............. .....[...]

P-335 Series User’s Guide 11 Table of Contents Chapter 7 LAN ................................................. ..................................................... .................. 122 7.1 LAN Overview ........ ............ ............. ................. ............ ............. ................ ....... 122 7.1.1 IP Pool Setup .............[...]

P-335 Series User’s Guide Table of Contents 12 9.7 T rigger Port Forwarding Screen .......... ................ ................ ............. ................ 144 Chapter 10 Firewall ........................................... ..................................................... .................. 146 10.1 Introduction to Firewall ......... ....[...]

P-335 Series User’s Guide 13 Table of Contents Chapter 13 VPN Screens ..................................................... .................................................. 164 13.1 VPN/IPSec Ov erview ....... ................. ................ ............. ................ ............. ...164 13.2 IPSec Algorithms ..... ................ ....[...]

P-335 Series User’s Guide Table of Contents 14 Chapter 15 St atic Route Screens ......................................................................... .................. 202 15.1 S tatic Route Overview .......... ............. ............. ................ ............. ............ .......202 15.2 IP S tatic Route Screen ............... ....[...]

P-335 Series User’s Guide 15 Table of Contents 18.3 UPnP Screen ................ ................ ............. ................ ............. ................ ....... 229 18.4 Installing UPnP in Windows Example ............... ............. ................ ............. ...230 18.4.1 Installing UPnP in Windows Me .. ................... ........[...]

P-335 Series User’s Guide Table of Contents 16 23.1.2 Entering Passw ord ......... ................ ............. ............. ................ ............. 260 23.1.3 Prestige SMT Menu Overview ................. ................ ............. ................ 261 23.2 Navigating the S MT Interface ........ ................. ............ ......[...]

P-335 Series User’s Guide 17 Table of Contents 28.4 Remote Node Filter . ...... ............. ............. ................ ............. ............. ............. 290 28.4.1 T raffic Redirect Setup . ............. ................ ................ ................ ............. 291 Chapter 29 St atic Route Setup ..............................[...]

P-335 Series User’s Guide Table of Contents 18 Chapter 34 Filter Configuration ............................................ .................................................. 332 34.1 Introduction to Filters ..... ............. ................ ................ ............. ................ .......332 34.1.1 The Filter S tructure of the Presti g[...]

P-335 Series User’s Guide 19 Table of Contents 37.2.1 Backup Config uration .... ............. ............. ................ ............. ................ 363 37.2.2 Using the FTP Command from th e Command Line ........... ................... 364 37.2.3 Example of FTP Co mmands from the Command Line ......... ................ 365 37.2.4 GUI-bas[...]

P-335 Series User’s Guide Table of Contents 20 41.3 Problems with the WAN ............. ............. ............. ................ ............. ............. 391 41.4 Problems Accessing the Prestige ..... ...... ................ ............. ............. ............. 392 41.5 Problems with Restricted Web Pages and Keyword Blocking .........[...]

P-335 Series User’s Guide 21 Table of Contents[...]

P-335 Series User’s Guide List of Fi gures 22 List of Figures Figure 1 Prestige Print Server Applicat ion ................ ................ ............. ................ ............. 44 Figure 2 Secure Internet Acce ss via Cable, DSL or Wireless Modem ............................. ... 45 Figure 3 VPN Application .......... ............ ........[...]

P-335 Series User’s Guide 23 List of Figures Figure 37 Wireless ............ ............. ............. ... ............. ................ ............. ............. ........... .. 85 Figure 38 Wireless: No Security ... ............. ................ ............. ................ ............. ............. ... 86 Figure 39 Wireless: S tatic W[...]

P-335 Series User’s Guide List of Fi gures 24 Figure 80 Schedule ............... ................ ............. ................. ............ ................. ............ ...... .1 5 5 Figure 81 Encryption and Decryption .............. ............. ............. ................ ............. ............. 159 Figure 82 IPSec Architecture ...[...]

P-335 Series User’s Guide 25 List of Figures Figure 123 SNMP Management Model .............. .......... ............. ................ ............. ............. 223 Figure 124 SNMP Remote Management ........... .......... ................ ............. ................ .......... 225 Figure 125 DNS Remote Management .............. .......... ..[...]

P-335 Series User’s Guide List of Fi gures 26 Figure 166 Menu 4 Applying NA T for Internet Access . ................ ............. ................ .......... 297 Figure 167 Menu 1 1.3 Applying NA T to the Re mote Node . ................ ................ ............. ... 298 Figure 168 Menu 15 NA T Setup ................ ............. ..........[...]

P-335 Series User’s Guide 27 List of Figures Figure 209 SNMP Management Model .............. .......... ............. ................ ............. ............. 346 Figure 210 Menu 22 SNMP Configuration ......... ....... ............. ................ ............. ............. ... 348 Figure 21 1 Menu 24 System Maintenance ............. .....[...]

P-335 Series User’s Guide List of Fi gures 28 Figure 252 Example Message Ex change betw een Computer and an ANT ................. ....... 410 Figure 253 Network Print Server Setup Wizard . ................. ................ ............. ................ ... 413 Figure 254 Network Print Server Setup Wizard : Welcome ......... ................ ...[...]

P-335 Series User’s Guide 29 List of Figures Figure 295 Windows XP: Local Area Connection Properties . ............. ................ ............. ... 449 Figure 296 Windows XP: Advanced TCP/ IP Sett ings .. ................ ............. ................ .......... 450 Figure 297 Windows XP: Internet P rotocol (TCP /IP) Properties .............[...]

P-335 Series User’s Guide List of Tables 30 List of T ables T able 1 Front Panel LEDs ........... ................ ............. ................ ................ ............. ............. 46 T able 2 S tatus Screen Icon Key .. ................ ................ ................ ............. ................ .......... 50 T able 3 Web Configura[...]

P-335 Series User’s Guide 31 List of Tables T able 37 OTIST ........... ................ ............. ................ ............. ................ ............. ............. ... 99 T able 38 MAC Address Filter ......................... ................ ................ ............. ................ ....... 101 T able 39 Advanced ...... ....[...]

P-335 Series User’s Guide List of Tables 32 T able 80 Virus Protection ............... ............. ................ ................ ............. ................ .......... 1 97 T able 81 Parental Controls ............................. ............. ................ ................ ............. .......... 19 9 T able 82 IP S tatic Route ...[...]

P-335 Series User’s Guide 33 List of Tables T able 123 Applying NA T in Menus 4 & 1 1.3 .......... ................ ............. ................ ................ 298 T able 124 SUA Address Mapping Rules .................. ................ ................ ................ .......... 300 T able 125 Menu 15.1.1 First Set .......... ..........[...]

P-335 Series User’s Guide List of Tables 34 T able 166 System Error logs .......... ............. ................ ............. ................ ................ .......... 442 T able 167 System Maintenance Logs ............ ................ ................ ................. ............ ....... 442 T able 168 UPnP Logs .................... ...[...]

P-335 Series User’s Guide 35 List of Tables[...]

P-335 Series User’s Guide Preface 36 Preface Congratulations on your pu rchase of the P-335, Firewall Router with Print Server or the P-335WT , 802.1 1g Wireless Firewall Router w ith Print Server . This manual is designed to guide you through the configurati on of yo ur Prestige for its various applications. Note: Use the web configurator , Syst[...]

P-335 Series User’s Guide 37 Pref ace User Guide Feedback Help us help you! E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The T echnical W riting T eam, ZyXEL Communications Corp., 6 Innovatio n Road II, Science-Based Industrial Park, Hsinchu, 300, T aiwan. Tha[...]

P-335 Series User’s Guide Chapter 1 Getting to K now Your Prestig e 38 C HAPTER 1 Getting to Know Y our Prestige This chapter introduces the main featur es and applications of the Prestige. 1.1 Prestige Overview The Prestige is the ideal secure firewall router for all data passing between the Internet and LAN’ s or WLAN’ s (P-335WT). By integ[...]

P-335 Series User’s Guide 39 Chapter 1 G etting to Know Your Pres tige 10/100 Mbp s Auto-negotiating Ethe rnet/Fast Ethernet Interface(s) This auto-negotiation feature allows the Prestige to detect the speed of incoming transmissions and adjust appropriately without manual intervention. It allows data transfer of either 10 Mbps or 100 Mbps in eit[...]

P-335 Series User’s Guide Chapter 1 Getting to K now Your Prestig e 40 IPSec VPN Cap ability Establish a V irtual Private Network (VPN) to connec t with business partne rs and branch offices using data encryption an d the Internet to provide secu re communications without the expense of leased site-to-site lines. The Prestig e VPN is based on the[...]

P-335 Series User’s Guide 41 Chapter 1 G etting to Know Your Pres tige PPTP Encapsulation Point-to-Point T unneling Protocol (PP TP) is a ne twork protocol that enables secure transfer of data from a remote client to a private server , creating a V irtual Private Network (VPN) using a TCP/IP-based network. PP TP supports on-dem and, multi-protoco[...]

P-335 Series User’s Guide Chapter 1 Getting to K now Your Prestig e 42 Port Forwarding Use this feature to forward incoming service re quests to a server on your local ne twork. Y ou may enter a single port number or a range of port numbers to be forwarded, and the lo cal IP address of the desired server . DHCP (Dynamic Host Configuration Protoco[...]

P-335 Series User’s Guide 43 Chapter 1 G etting to Kn ow Your Pres tige 1.2.3 Wireless Features (P-335WT) Wireless LAN The Prestige supports the IEEE 802.1 1g standard , which is fully compat ible with the IEEE 802.1 1b standard, meaning that you can have both IEEE 802.1 1b and IEEE 802.1 1 g wireless clients in the same wireless network. Note: T[...]

P-335 Series User’s Guide Chapter 1 Getting to K now Your Prestig e 44 G-Plus G-plus is an enhancement to the IEEE 802. 1 1g wireless standard . It increases wireless transmission speeds by allowing larger frames to be sent. Wireless List W ith the W ireless List, you can see the list of th e wireless stations that are currently using the Prestig[...]

P-335 Series User’s Guide 45 Chapter 1 G etting to Kn ow Your Pres tige Figure 2 Secure Internet Access via Cable, DSL or Wireless Modem 1.3.3 VPN Application Prestige VPN is an ideal cost-effective way to connect branch offices and business partners over the Internet without the need (and expense) for leased lines between sites. Figure 3 VPN App[...]

P-335 Series User’s Guide Chapter 1 Getting to K now Your Prestig e 46 Figure 4 Internet Access Application Exa mple 1.4 Front Panel LEDs Figure 5 P-335 Front Panel Figure 6 P-335WT Front Panel The following table describes the LEDs. Table 1 Front Panel LEDs LED COLOR ST ATUS DESCRIPTION PWR Green On The Prestige is receiving power and functionin[...]

P-335 Series User’s Guide 47 Chapter 1 G etting to Know Your Pres tige LAN 1-4 Green On The Prestige has a successful 10Mb Ethernet connection. Blinking The Prestige is sending/receiving data. Amber On The Prestige has a successful 100Mb Ethernet connection. Blinking The Prestige is sending/receiving data. None Off The LAN is not connected. WA N [...]

P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configur ator 48 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access the Prestige web config urator and provides an overview of its screens. 2.1 W eb Configurator Overview The web configurator is an HTML-based mana gement interface that allows easy Prestige set[...]

P-335 Series User’s Guide 49 Chapter 2 Introducing the Web Configurator Figure 7 Change Password Screen Note: The management session automatically time s out when the time period set in the Administrator Inactivity T imer field expi res (default five minutes). Simply log back into the Prestige if this happens to you . 2.3 Resetting the Prestige I[...]

P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configurator 50 Figure 8 Web Configur ator S tatus Scre en The following table describ es the icons shown in the St a t u s sc reen. Table 2 Status Screen Icon Key ICON DESCRIPTION Select a language from the drop-down list box to have the the web configurator display in that language. Click[...]

P-335 Series User’s Guide 51 Chapter 2 Introducing the Web Configurator The following table describes the labels shown in the St a t u s screen. Table 3 Web Configurator Status Screen LABEL DESCRIPTION Device Information System Name This is the System Name you enter in the Maintenance , System , General screen. It is for identific ation purposes.[...]

P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configur ator 52 2.4.1 Navigation Panel After you enter the password, use the sub-menus on the navigation panel to configure Prestige features. The navigation The following table describes the sub-menus. Summary Any IP T able Use this screen to view a list of IP add resses and MAC addresses[...]

P-335 Series User’s Guide 53 Chapter 2 Introducing the Web Configurator DHCP Server General Use this screen to enable the Prestige’s DHCP server and to have DNS servers assigned by the DHCP server . S tatic DHCP Use this screen to assign IP addresses on the LAN to specific individual computers based on their MAC ad dresses. Client List Use this[...]

P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configurator 54 2.4.2 Summary: Any IP T able Click the Any IP T able (Details...) hyperlink in the St a t u s screen. The Any IP table shows current read-only information (i ncluding the IP address and the MAC address) of all network devices that use the Any IP featur e to communicate with [...]

P-335 Series User’s Guide 55 Chapter 2 Introducing the Web Configurator 2.4.3 Summary: DHCP T able DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at star t-up from a server . Y ou can configure the Pre stige as a DHCP server or disable it. When configured as a server, th[...]

P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configurator 56 Figure 1 1 Summary: Parental Control S tatistics The following table describes the labels in this screen. Table 7 Summary: Parental Control Statistics LABEL DESCRIPTION Category All Parental Control categories are displayed as shown. Access Attempts This field displays the n[...]

P-335 Series User’s Guide 57 Chapter 2 Introducing the Web Configurator The following table describes the labels in this screen. Table 8 Summary: Wireless Association List LABEL DESCRIPTION # This is the index number of an associated wireless station. MAC Address This field displays the MAC address of an associated wireless station. Association T[...]

P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configurator 58 The following table describes the labels in this screen. Table 9 Summary: Packet Statistics LABEL DESCRIPTION Port This is the WA N , LAN or WLAN port. S tatus This displays th e port speed and duplex setting if you're using Ethernet encap sulation an d down (line is do[...]

P-335 Series User’s Guide 59 Chapter 2 Introducing the Web Configurator IPSec Algorithm This field displays the security protocol s used for an SA. Both AH and ESP increase Prestige processing requirement s and communications late ncy (delay). Poll Interval(s) Enter the time interval for refres hing statistics in this field. Set Interval Click th[...]

P-335 Series User’s Guide Chapter 3 Connection Wizard 60 C HAPTER 3 Connection W izard This chapter provides informa tion o n the W izard setup screens in the web configurato r . 3.1 Wizard Setup The web confi gurator ’ s W izard setup helps you co nfigure your device to access the Internet. Refer to your ISP (Internet Serv ice Provider) checkl[...]

P-335 Series User’s Guide 61 Chapter 3 Connection Wizard Figure 17 Select a Languag e 6 Read the on-screen in formation and click Next . Figure 18 Welcome to the Con nection Wizard 3.2 Connection Wizard: System Information System Information contains administrative and system-related information. 3.2.1 System Name System Name is for identificatio[...]

P-335 Series User’s Guide Chapter 3 Connection Wizard 62 Figure 19 Connection Wizard: System Information The following table describes the labels in this screen. Table 11 Connection Wizard: System Infor mation LABEL DESCRIPTION System Name System Name is a unique name to identify the Prestige in an Ethe rnet network. Enter a descriptive name. T h[...]

P-335 Series User’s Guide 63 Chapter 3 Connection Wizard Figure 20 Connection Wizard: Wire less LAN The following table describes the labels in this screen. Table 12 Connection Wiza rd: Wireless LAN LABEL DESCRIPTION Name(SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII character s) for the wireless LAN. If you change this field on [...]

P-335 Series User’s Guide Chapter 3 Connection Wizard 64 Figure 21 Basic(WEP) Security The following table describes the labels in this screen. Table 13 Basi c(WEP) Se curity LABEL DESCRIPTION Passphrase T ype a Passphrase (up to 32 printable characters) and click Generate . The Prestige automatically generates a WEP key . WEP Encryption Select 6[...]

P-335 Series User’s Guide 65 Chapter 3 Connection Wizard 3.3.2 Extend(WP A-PSK) and (WP A2-PSK) Security Choose Extend(WP A-PSK) or Extend(WP A2-PSK) security in the W ireless LAN setup screen to set up a Pr e-Shared Key . Figure 22 Extend(WP A2-PSK) and (WP A2-PSK) Security The following table describes the labels in this screen. Table 14 Extend[...]

P-335 Series User’s Guide Chapter 3 Connection Wizard 66 Figure 23 OTIST The following table describes the labels in this screen. Table 15 OTIST LABEL DESCRIPTION Do you want to enable OTIST? Select the Ye s radio button and click Next to proce ed with the setup wi zard and enable OTIST only when you click Finish in the final wizard screen. Click[...]

P-335 Series User’s Guide 67 Chapter 3 Connection Wizard Figure 24 Connection Wizard: W AN Connection T ype. The following table describes the labels in this screen, Table 16 Connection Wiza rd: W AN Connection T ype CONNECTION T YPE DESCRIPTION Ethernet Select the Ethernet option when the WAN port is used as a regular Ethernet. PPPoE Select the [...]

P-335 Series User’s Guide Chapter 3 Connection Wizard 68 Operationally , PPPoE saves significant effort for bo th the subscriber and the ISP/carrier , as it requires no specifi c configuration of the broadb and modem at the subscriber ’ s site. By implementing PPPoE directly on the Prestig e (rather than individual computers), the computers on [...]

P-335 Series User’s Guide 69 Chapter 3 Connection Wizard Figure 27 PPTP Connection T ype The following table describes the fields in this screen Table 18 PPTP Connection T ype LABEL DESCRIPTION ISP Parameters fo r Internet Access User Name T ype the user name given to you by your ISP . Password T ype the password associated with the User Name abo[...]

P-335 Series User’s Guide Chapter 3 Connection Wizard 70 Figure 28 Y our IP Addres s The following table describes the labels in this screen Table 19 Your IP Addr ess LABEL DESCRIPTION Get automatically from ISP Select this option If your ISP did not assign you a fixed IP address. This is the default selection. Use fixed IP address Select this op[...]

P-335 Series User’s Guide 71 Chapter 3 Connection Wizar d 3.4.6 IP Address and Subnet Mask Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number . Where you obtain your netwo rk number depends on your particular situation. If the ISP or your network administrator assigns yo [...]

P-335 Series User’s Guide Chapter 3 Connection Wizard 72 Figure 29 IP and DNS Server Address Assignment The following table describes the labels in this screen Table 21 IP and DNS Server Address Assignment LABEL DESCRIPTION W AN IP Address Assignmen t My W AN IP Address Enter a W AN IP address and WAN IP Subnet Mask of the neighboring device, if [...]

P-335 Series User’s Guide 73 Chapter 3 Connection Wizard Y ou can configure the W AN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN. Onc e it is successfully configured, the address will be copied to the "r om" file (ZyNOS configuration f ile). It will not change unless[...]

P-335 Series User’s Guide Chapter 3 Connection Wizard 74 Figure 31 Connection Wizard Complete W ell done! Y ou have successfully set up your Pr estige to operate on your network and access the Internet.[...]

P-335 Series User’s Guide 75 Chapter 3 Connection Wizar d[...]

P-335 Series User’s Guide Chapter 4 Bandwidth Management Wizard 76 C HAPTER 4 Bandwid th Management W izard This chapter shows you h ow to configure basic bandwidth management usin g the wizard screens. 4.1 Introduction Click the Bandwidth Mana gement wizar d option in the wiz ard language se lection screen or click the hyperlink in the final Con[...]

P-335 Series User’s Guide 77 Chapter 4 Bandwidth Man agement Wizard 4.3 Bandwid th Management Wizard: General Click Next in the We l c o m e to the Bandwidth Manage ment Wizard screen to display the first wizard screen. Figure 33 Bandwidt h Management Wizard: General Information The following fields describe the label in this screen. Table 25 Ban[...]

P-335 Series User’s Guide Chapter 4 Bandwidth Management Wizard 78 4.4 Bandwid th Manage ment Wizard: Services Use the second wizard screen to select the se rvices that you want to apply bandwidth management. Figure 34 Bandwidt h Management Wizard: Services The following table describes the labels in this screen. Table 26 Bandwid th Management Wi[...]

P-335 Series User’s Guide 79 Chapter 4 Bandwidth Man agement Wizard Figure 35 Bandwidt h Management Wizard : Priority The following table describes the fields in this screen. Table 27 Bandwid th Management Wizard : Priority LABELS DESCRIPTION Service These fields display the services selected in the previous screen. Priority Select High , Mid or [...]

P-335 Series User’s Guide Chapter 4 Bandwidth Management Wizard 80[...]

P-335 Series User’s Guide 81 Chapter 4 Bandwidth Man agement Wizard[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 82 C HAPTER 5 Wireless LAN (P-335WT) This chapter discusses how to configure W ireless LAN. 5.1 Introduction A wireless LAN can be as simple as two computers with wireless LAN adapters communicating in a peer-to-p eer network or as complex as a number of computers with wireless LAN adapte[...]

P-335 Series User’s Guide 83 Chapter 5 Wireles s LAN (P-335WT) 5.2.3 Restricted Access The MAC Filter screen allows you to configure the AP to give exclusive access to devices ( Allow ) or exclude them from accessing the AP ( Deny ). 5.2.4 Hide Prestige Identity If you hide the ESSID, then th e Prestige ca nnot be seen when a wireless client scan[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 84 4 If you have OTIST -enabled clients, configure OTIST in the OTIST screen. OTIST transfers device SSID and WEP or WP A-PSK key settings (if enabled) to wireless clients. The following figure shows th e relative effectiveness of th ese wireless security methods available on your Prestig[...]

P-335 Series User’s Guide 85 Chapter 5 Wireles s LAN (P-335WT) Figure 37 Wirel ess The following table describes the general wireless LAN labels in this screen. Table 29 Wirel ess LABEL DESCRIPTION Enable Wireless LAN Click the check box to activate wireless LAN. Name(SSID) (Service Set IDentity) The SSID identifies the Service Set with which a w[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 86 Note: If you do not enable any wireless security on your Prestige, your network is accessible to any wireless network ing device that is within range . Figure 38 Wireless: No Security The following table describes the labels in this screen. Table 30 Wireless No Security LABEL DESCRIPTI[...]

P-335 Series User’s Guide 87 Chapter 5 Wireles s LAN (P-335WT) Figure 39 Wireless: S tatic WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 31 Wireless: Static WEP Encryption LABEL DESCRIPTION Passphrase Enter a Passphrase (up to 32 printable characters) and clicking Generate . The Prestige autom[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 88 5.4.4 Introduction to WP A and WP A2 W i-Fi Protected Access (WP A ) is a subset of th e IEEE 802.1 1i standard. WP A is preferred to WEP as WP A has user authentication and improv ed data encryption. See the ap pendix for more information on WP A user authentication and WP A encryptio[...]

P-335 Series User’s Guide 89 Chapter 5 Wireles s LAN (P-335WT) Figure 41 Wireless: WP A-PSK The following table describes the labels in this screen. Table 32 Wireless: WPA-PSK LABEL DESCRIPTION Pre-Shared Key The encryption mechanisms used for WP A and WP A-PSK are the same. The only difference between the two is that WP A-PSK uses a simple commo[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 90 The Funk Software's Odyssey client is bundle d free (at the time of wr iting) with the Prestige client adaptor(s). This adds WP A capability to W indows XP's built-in "Zero Configuration" wireless client. 5.4.8 WP A(2) with RADI US Application Example Y ou need the [...]

P-335 Series User’s Guide 91 Chapter 5 Wireles s LAN (P-335WT) Figure 43 Wirel ess: W P A The following table describes the labels in this screen. Table 33 Wirel ess: WPA LABEL DESCRIPTION ReAuthentication T imer (in seconds) S pecify how often wireless stations have to reenter usernames and passwords in order to stay connected. Enter a time inte[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 92 5.4.10 802.1x Overview Y ou need the following for IEEE 802.1x authentication. • A computer with an IEEE 802.1 1 a/b/g wi reless LAN adapter and equipped with a web browser (with JavaScript enabled) and/or T elnet. • A wireless station computer must be runn ing IEEE 802.1x-complian[...]

P-335 Series User’s Guide 93 Chapter 5 Wireles s LAN (P-335WT) Figure 44 Wireless: 802.1x and Dynamic WE P The following table describes the labels in this screen. Table 34 Wireless: 80 2.1x and Dynamic W EP LABEL DESCRIPTION ReAuthentication T imer (in seconds) S pecify how often wireless stations have to reenter usernames and passwords in order[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 94 5.4.12 802.1x and St atic WEP Key Exch ange Screen In order to configure and enable 8 02.1x and S tatic WEP Key Exchange; click the Wire l e s s LAN link under Network to display the W ireless screen. Select 802.1x + S tatic WEP from the Security list. Accounting Server Active Select Y[...]

P-335 Series User’s Guide 95 Chapter 5 Wireles s LAN (P-335WT) Figure 45 Wireless: 802.1x and S tatic WEP The following table describes the labels in this screen. Table 35 Wireless: 80 2.1x and St atic WEP LABEL DESCRIPTION Passphrase Enter a Passphrase (up to 32 printable characters) and clicking Generate . The Prestige automatically generates a[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 96 Key 1 to Key 4 The WEP keys are used to encrypt data. Both the Prestige and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP , then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F"). If you chose 1[...]

P-335 Series User’s Guide 97 Chapter 5 Wireles s LAN (P-335WT) 5.4.13 802.1x Screen In order to configure and enable 802.1x; click the Wireless LAN link under Network to display the Wire l es s screen. Select 802.1x + No WEP from the Security list. Figure 46 Wireless: 80 2.1x The following table describes the labels in this screen. Table 36 Wirel[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 98 5.5 OTIST OTIST (One-T ouch Intelligent Security T echnology ) allows your Prestige to set the wireless client to use the same wireless settings as the Prestige. Note: The wireless client must support OTIST and have OT IST enabled. The following are the wireless sett ings that the Pres[...]

P-335 Series User’s Guide 99 Chapter 5 Wireles s LAN (P-335WT) Figure 47 OTIST The following table describes the labels in this screen. Table 37 OTIST LABEL DESCRIPTION Setup Key T ype an OTIST Setup Key of exactly eight ASCII characters in leng th. The default OTIST setup key is "01234567". Note: If you change the OTIST setup key here,[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN ( P-335WT) 100 Figure 48 OTIST S tart Note: The process takes thre e minutes. During this time the Prestige assigns its security settings to OTIST -enabled wireless clients within range that have selected to associate with this Prestige. Figure 49 OTIST Proces s When the previous screen closes, you[...]

P-335 Series User’s Guide 101 Chapter 5 Wireless LAN ( P-335WT) Figure 50 MAC Addres s Filter The following table describes the labels in this menu. Table 38 MAC Address F ilter LABEL DESCRIPTION Active Select Ye s from the drop down list box to enable MAC address filtering. Filter Action Define the filter action for th e list of MAC addresses in[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN ( P-335WT) 102 Figure 51 Advanced The following table describes the labels in this screen. Table 39 Advanced LABEL DESCRIPTION Roaming Configuration Enable Roaming Select the check box to enable ro aming on the Prestige if you have two or more Prestiges on the same subnet. Note: All APs on the same[...]

P-335 Series User’s Guide 103 Chapter 5 Wireless LAN ( P-335WT) 5.8 WMM QoS WMM (W i-Fi MultiMedia) QoS (Qua lity of Service) ensures quality of ser vice in wireless networks for multimed ia applications. WMM allows you to prioritize wireless traf fic according to the deliver y requirements of the individual and applications . WMM is a part of th[...]

P-335 Series User’s Guide Chapter 5 Wireless LAN ( P-335WT) 104 5.8.3 Services The commonly used services and port numbers ar e shown in the following table. Please refer to RFC 1700 for further information about port numbers. Next to the name of the service, two fields appear in brackets. The first field indicat es the IP protocol type (TCP , UD[...]

P-335 Series User’s Guide 105 Chapter 5 Wireless LAN ( P-335WT) 5.9 QoS Screen The QoS screen by default allows you to au tomatically give a service a priority level according to the T o S value in the IP header of the packets it sends. PING(ICMP:0) Packet INternet Groper i s a protocol that sends o ut ICMP echo requests to test whether or not a [...]

P-335 Series User’s Guide Chapter 5 Wireless LAN ( P-335WT) 106 5.9.1 T oS (T ype of Service) and WMM QoS T oS defines the DS(Differentiated Service) fiel d in the IP packet header . The T oS value of outgoing packe ts is between 0 and 255. 0 is the lowest priority . WMM QoS checks the T oS in the header of transm itted data packets. It gives the[...]

P-335 Series User’s Guide 107 Chapter 5 Wireless LAN ( P-335WT) 5.10 Application Priority Configuration Screen T o edit a WMM QoS application entry , click the edit icon under Modify . The following screen displays. Figure 53 Application Priority Configuration The following table describes the fields in this screen. Modify Click the Edit icon to [...]

P-335 Series User’s Guide Chapter 5 108 Service The following is a description of the applications you can p rioritize with WMM QoS. Select a service from the drop-down list b ox. • FTP File Transfer Program enables fast transf er of files, including large files tha t may not be possible by e-mail. FTP uses port number 21. • E-Mail Electronic[...]

P-335 Series User’s Guide 109 Chapter 5[...]

P-335 Series User’s Guide Chapter 6 WAN 110 C HAPTER 6 WA N This chapter describes how to configure W AN settings. 6.1 W AN Overview See the Connection W izard chapter for more information on the fields in the W AN screens. 6.2 TCP/IP Priority (Metric) The metric represents the "cost of transmissi on". A router determines the best route[...]

P-335 Series User’s Guide 111 Chapter 6 WA N 6.4 W AN ISP Screen T o change your Prestige’ s W AN ISP settings, clic k WA N , then the WA N I S P tab. The screen differs by the encapsulation. 6.4.1 Ethernet Encap sulation The screen shown next is for Ethernet encapsulation. Figure 54 Ethernet Encapsulation The following table describes the labe[...]

P-335 Series User’s Guide Chapter 6 WAN 112 6.4.2 PPPoE Encap sulation The Prestige supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.) connection. The PPP over Ethernet option is for a dial- up conn[...]

P-335 Series User’s Guide 113 Chapter 6 WA N Figure 55 PPPoE Encapsulation The following table describes the labels in this screen. Table 45 PPPoE Encapsulation LABEL DESCRIPTION ISP Parameters fo r Internet Access Encapsulation The PPP over Ethernet choice is for a dial-up connection using PPPoE. The Prestige supports PPPoE (Point-to-P oint Pr o[...]

P-335 Series User’s Guide Chapter 6 WAN 114 6.4.3 PPTP Encap sulation Point-to-Point T unneling Protocol (PP TP) is a ne twork protocol that enables secure transfer of data from a remote client to a private server , creating a V irtual Private Network (VPN) using TCP/IP-based networks. PP TP supports on-dem and, multi-protocol and virtu al privat[...]

P-335 Series User’s Guide 115 Chapter 6 WA N Figure 56 PPTP Encapsulation The following table describes the labels in this screen. Table 46 PPTP Encapsulation LABEL DESCRIPTION ISP Parameters for Internet Access Encapsulation Point-to-Point T unne ling Protocol (PPTP) is a netw ork protocol that e nables secure transfer of data from a remote clie[...]

P-335 Series User’s Guide Chapter 6 WAN 116 6.5 Advanced W A N Screen T o change your Prestige’ s ad vanced W AN settings, click the WA N link under Network , and the Advan ced tab. The screen appears as shown. PPTP Configuration My IP Address T ype the (static) IP a ddress assigned to you by your ISP . My IP Subnet Mask Y our Prestige will aut[...]

P-335 Series User’s Guide 117 Chapter 6 WA N Figure 57 Advanced The following table describes the labels in this screen. Table 47 Advanced LABEL DESCRIPTION DNS Servers First DNS Server Second DNS Server Third DNS Server Select From ISP if your ISP dyn amically assigns DNS server information (and the Prestige's WAN IP address). The field to [...]

P-335 Series User’s Guide Chapter 6 WAN 118 6.6 T raffic Redirect T raffic redirect forwards W AN traffic to a ba ckup gateway when the Pr estige cannot connect to the Internet through its norm al gateway . Connect the backup gateway on the W AN so that the Prestige still provid es firewall protection. Figure 58 T raffic Re direct W AN Setup The [...]

P-335 Series User’s Guide 119 Chapter 6 WA N Figure 59 T raffic Redirect LAN Setup 6.7 T raffic Redirect Screen T o change your Prestige’ s T raf fic Redirect settings, click the W AN link under Network and the T raffic Redirect tab. The screen appears a s shown. Figure 60 W AN: Traffic Redirect The following table describes the labels in this [...]

P-335 Series User’s Guide Chapter 6 WAN 120 Check W AN IP Address Configuration of this field is optional. If you do not enter an IP address here, the Prestige will use the default gateway IP a ddress. Configure this field to test your Prestige's W AN accessibility . T ype the IP address of a reliable nea rby computer (for example, your ISP&[...]

P-335 Series User’s Guide 121 Chapter 6 WA N[...]

P-335 Series User’s Guide Chapter 7 LAN 122 C HAPTER 7 LAN This chapter describes how to configure LAN settings. 7.1 LAN Overview Local Area Network (LAN) is a shared communic ation system to which many computers are attached. The LAN screens can help you config ure a LAN DHCP server, ma nage IP addresses, and partition your physical netw ork int[...]

P-335 Series User’s Guide 123 Chapter 7 LAN 7.2.2 IP Address and Subnet Mask Refer to the IP Addr ess and Subnet Mask section in the Wizard Setup chapter for this information. 7.2.3 RIP Setup RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to exchange routing information with other routers. RIP Dir ection controls the se[...]

P-335 Series User’s Guide Chapter 7 LAN 124 The Prestige support s both IGMP version 1 ( IGMP-v1 ) and IGMP version 2 ( IGMP-v2 ). At start up, the Prestige queries all directly conn ected networks to gather group membership. After that, the Prestige periodically updates this information. IP multicasting can be enabled/ disabled on the Prestige L[...]

P-335 Series User’s Guide 125 Chapter 7 LAN 7.3.1 How Any IP Works Address Resolution Protocol (ARP) is a prot ocol for mapping an Internet Protocol address (IP address) to a physical machine address, al so known as a Media Access Control or MAC address, on the local area network. IP routing table is defined on IP Ethernet d evices (the Prestige)[...]

P-335 Series User’s Guide Chapter 7 LAN 126 Figure 62 LAN IP The following table describes the labels in this screen. Table 49 LAN IP LABEL DESCRIPTION LAN TCP/IP IP Address T ype the IP address of your Prestige in dotted decimal notation 192.168.1.1 (factory defau lt). IP Subnet Mask The subne t mask specifies the network number portion of an IP[...]

P-335 Series User’s Guide 127 Chapter 7 LAN Figure 63 IP Alias The following table describes the labels in this screen. Table 50 IP Alias LABEL DESCRIPTION IP Alias 1,2 Select the check box to configure another LAN network fo r the Prestige. IP Address Enter the IP address of your Pres tige in do tted decimal notation. IP Subnet Mask Y our Presti[...]

P-335 Series User’s Guide Chapter 7 LAN 128 7.6 Advanced LAN Screen T o change your Prestige’ s advanced IP settings, click the LAN link under Network and the Advanced tab. The screen appears as shown. Figure 64 Advanced The following table describes the labels in this screen. Table 51 Advanced LABEL DESCRIPTION RIP Direction RIP (Routing Infor[...]

P-335 Series User’s Guide 129 Chapter 7 LAN Active Select this option to acti vate the Any-IP feature. This allows a comp uter to access the Internet without chan ging the network settings (such as IP address and subnet mask) of the computer, even when the IP addresses of the computer and the Prestige are not in the same subnet. When you disable [...]

P-335 Series User’s Guide Chapter 8 DHCP Server 130 C HAPTER 8 DHCP Server 8.1 DHCP DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at star t-up from a server . Y ou can configure the Pre stige as a DHCP server or disable it. When configured as a server, the Prestige prov[...]

P-335 Series User’s Guide 131 Chapter 8 DHCP Server 8.3 St atic DHCP Screen This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pairs of hexadec [...]

P-335 Series User’s Guide Chapter 8 DHCP Server 132 Figure 66 S tatic DHCP The following table describes the labels in this screen. Table 53 Static DHCP LABEL DESCRIPTION # This is the index number of the S tatic IP table entry (row). MAC Address T ype the MAC address (with colo ns) of a computer on your LAN. IP Address T ype the LAN IP address o[...]

P-335 Series User’s Guide 133 Chapter 8 DHCP Server Figure 67 Client List The following table describes the labels in this screen. Table 54 Client List LABEL DESCRIPTION # This is the index number of the host computer . IP Address This field displays the IP address relative to the # field liste d above. Host Name This fie ld displays the computer[...]

P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 134 C HAPTER 9 Network Address T r anslation (NA T) This chapter discusses how to configure NA T on the Prestige. 9.1 NA T Overview NA T (Netw ork Address T rans lation - NA T , RFC 1631) is the translation of the IP address of a host in a packet. For example, the source addr[...]

P-335 Series User’s Guide 135 Chapter 9 Network Addr ess Translation (NAT) 9.1.2 What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side. When the respon se comes back, NA T trans[...]

P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 136 Figure 68 How NA T Works 9.1.4 NA T Application The following figure illustrates a possible NA T application, wher e three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct W AN networks. More examples follow at the end of t[...]

P-335 Series User’s Guide 137 Chapter 9 Network Addr ess Translation (NAT) • One to One : In One-to-One mode, the Prestige maps one local IP address to one global IP address. • Many to One : In Many-to-One mode, the Prestige maps multiple local IP addresses to one global IP address. This is equivalent to SUA (i.e., P A T , port address transl[...]

P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 138 9.2.1 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server . The Prestige also supports Full Feature NA T to map multiple global IP addresses to multiple [...]

P-335 Series User’s Guide 139 Chapter 9 Network Addr ess Translation (NAT) In addition to the servers for specified servic es, NA T supports a default server . A service request that does not have a server explicitly d esignated for it is forwarded to the default server . If the default is not de fined, the service request is simply discarded. No[...]

P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 140 Figure 70 Multiple Servers Be hind NA T Example 9.4 General NA T Screen Click the NA T link under Network to open the Gene ral screen. Figure 71 General The following table describes the labels in this screen. Table 58 General LABEL DESCRIPTION Network Address T ransla ti[...]

P-335 Series User’s Guide 141 Chapter 9 Network Addr ess Translation (NAT) 9.5 Port Forwarding Screen Ordering your rules is important because the Pr estige applies the rules in the order that you specify . When a rule matche s the current pack et, the Prestige takes the corresponding action and the remaining rules are ignored. If there are an y [...]

P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 142 9.5.1 Rule Setup Screen T o edit a port forwarding rule, click the edit icon under Modify . The following screen displays. Figure 73 Rule Setup The following table describes the labels in this screen. Active This icon is turned on when the port forwarding entry is enabled[...]

P-335 Series User’s Guide 143 Chapter 9 Network Addr ess Translation (NAT) 9.6 T rigger Port Forwarding Some services use a dedicated range of ports on the client side and a dedica ted range of ports on the server side. W ith regular port forwarding you set a forwarding port in NA T to forward a service (coming in from the server on the W AN) to [...]

P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 144 2 Port 7070 is a “trigger” port and causes the Pr estige to record Jane’ s computer IP address. The Prestige associates Jane 's computer IP ad dress with the "incoming" port range of 6970-7170. 3 The Real Audio server resp onds using a port numb er ra[...]

P-335 Series User’s Guide 145 Chapter 9 Network Addr ess Translation (NAT) Figure 75 T rigger Port The following table describes the labels in this screen. Table 61 Trigger Port LABEL DESCRIPTION # This is the rule index number (read-on ly). Name T ype a unique name (up to 15 characters) for identification purposes. All characters are permitted -[...]

P-335 Series User’s Guide Chapter 10 Firewall 146 C HAPTER 10 Firewall This chapter gives some bac kground information on firewalls and explains how to get started with the Prestige firewall. 10.1 Introduction to Firewall 10.1.1 What is a Firewall? Originally , the term fir ewall referred to a construction tech nique designed to prevent the sprea[...]

P-335 Series User’s Guide 147 Chapter 10 Firewall The Prestige has one Ethernet W AN port and fo ur Ethernet LAN ports, which are used to physically separate the network into two areas .The W AN (W ide Area Network) port attaches to the broadband (cab le or DSL) modem to the Internet. The LAN (Local Area Network) port attac hes to a network of co[...]

P-335 Series User’s Guide Chapter 10 Firewall 148 Figure 76 General The following table describes the labels in this screen. Table 62 General LABEL DESCRIPTION Enable Firewall Select this check box to activate the fi rewall. The Prestige performs access control and protects against Denial of Service (DoS) attacks when the fire wall is activated. [...]

P-335 Series User’s Guide 149 Chapter 10 Firewall Figure 77 Services The following table describes the labels in this screen. Table 63 Servic es LABEL DESCRIPTION Enable Services Blocking Select this ch eck box to enabl e this feature. Available Service This is a list of pre-defined services (ports) you may prohibit your LAN computers from using.[...]

P-335 Series User’s Guide Chapter 10 Firewall 150 T ime of Day to Block (24-Hour Format) Select the time of day you want service blocking to take effect. Configure blocking to take ef fect all day by selecting the All Day check box. Y ou can also configure specific times that by en tering the start time in the Start (hr) and St a rt (min) fields [...]

P-335 Series User’s Guide 151 Chapter 10 Firewall[...]

P-335 Series User’s Guide Chapter 11 Content Filtering 152 C HAPTER 11 Content Filtering This chapter provides a brief overview of co ntent filtering using the embedded W ebGUI. 1 1.1 Introduction to Content Filtering Internet content filtering allows you to create and enforce Internet access policies tailored to their needs. Content filtering is[...]

P-335 Series User’s Guide 153 Chapter 11 Content Filter ing Figure 79 Filter The following table describes the labels in this screen. Table 64 Filter LABEL DESCRIPTION T rusted IP Setup T o enable this feature, type an IP addre ss of any one of the computers in your network that you want to have as a trus ted computer . This allows the truste d c[...]

P-335 Series User’s Guide Chapter 11 Content Filtering 154 1 1.5 Schedule Click the Content Filter link under Security and the Schedule tab. The following screen displays. Keyword List This list displays the keywords alread y added. Add Click Ad d after you have typed a keyword. Repeat this procedure to add other keyword s. Up to 64 keywords are [...]

P-335 Series User’s Guide 155 Chapter 11 Content Filter ing Figure 80 Schedule The following table describes the labels in this screen. Table 65 Schedule LABEL DESCRIPTION Day to Block Select check boxes for the days that you want the Prestige to perform conte nt filtering. Select the Everyday check box to have co ntent filtering turned on all da[...]

P-335 Series User’s Guide Chapter 11 Content Filtering 156 1 1.6.2 Full Path URL Checking Full path URL checking has the Prestige check the c haracters that come be fore the last slash in the URL. For example, with th e URL www .zyxel.com.tw/news/ pressroom.php , full path URL checking searches for keywords within www .zyxel.com.tw/news/ . Use th[...]

P-335 Series User’s Guide 157 Chapter 11 Content Filt ering[...]

P-335 Series User’s Guide Chapter 12 Introd uction to IPSec 158 C HAPTER 12 Introduction to IPSec This chapter introduces the basics of IPSec VPNs 12.1 VPN Overview A VPN (V irtual Private Network) provides sec ure communications between sites without the expense of leased site-to-site lines. A secure VP N is a combination of tunneling, encryptio[...]

P-335 Series User’s Guide 159 Chapter 12 Introdu ction to IPSec Figure 81 Encryption and Decryption 12.1.3.2 Dat a Confidentiality The IPSec sender can encrypt packets befo re transmitting them across a network. 12.1.3.3 Dat a Integrity The IPSec receiver can validate packets sent by the IPSec sender to ensure that the data has not been altered d[...]

P-335 Series User’s Guide Chapter 12 Introd uction to IPSec 160 Figure 82 IPSec Architecture 12.2.1 IPSec Algorithms The ESP (Encapsulating Security Payload) Protocol (RFC 2406) and AH (Authentication Header) protocol (RFC 24 02) describe the packe t formats and the default standards for packet structure (including implemen tation algorit hms). T[...]

P-335 Series User’s Guide 161 Chapter 12 Introdu ction to IPSec Figure 83 T ransport and T unnel Mode IPSec Encapsulation 12.3.1 T ransport Mode Tr a n s p o r t mode is used to pro tect upper layer prot ocols and only af fects the data in the IP packet. In Tr a n s p o r t mode, the IP packet contains the security protocol ( AH or ESP ) located [...]

P-335 Series User’s Guide Chapter 12 Introd uction to IPSec 162 A NA T device in between the IPSec endpoints w ill rewrite either the source or destination address with one of it s own choosing. The VPN d evice at the receiving end wil l verify the integrity of the incoming packet by computing its own hash value, and complain that the hash value [...]

P-335 Series User’s Guide 163 Chapter 12 Introdu ction to IPSec[...]

P-335 Series User’s Guide Chapter 13 VPN Screens 164 C HAPTER 13 VPN Screens This chapter introduces the VPN W eb Co nfigurator . See the Logs chapter for information on viewing logs and the Appendices for IPSec log descriptions. 13.1 VPN/IPSec Overview Use the screens documented in this chapter to configure rules for VPN connections and manage V[...]

P-335 Series User’s Guide 165 Chapter 13 VPN Screens . Table 67 AH and ESP ESP AH Encryption DES (default) Data Encryption S tandard (DES) is a widely used method of data encryption using a secret key . DES applies a 56 -bit key to each 64-bit block of data. 3DES T riple DES (3DES) is a variant of DES, which it erates three times w ith three sepa[...]

P-335 Series User’s Guide Chapter 13 VPN Screens 166 Y ou can also enter a remote secure gateway’ s domain name in the Secure Gateway Addr ess field if the remote secure gateway has a dyna mic W AN IP address and is using DDNS. The Prestige has to rebuild the VPN tunnel each time the remote secure gateway’ s W AN IP address changes (there may[...]

P-335 Series User’s Guide 167 Chapter 13 VPN Screens Figure 85 Summary The following table describes the labels in this screen. Table 68 Summary LABEL DESCRIPTION # The VPN po licy index number . Active This field displays whether the VPN policy is active or not. The icon is turned on when this VPN policy is active. Click the edit icon under Modi[...]

P-335 Series User’s Guide Chapter 13 VPN Screens 168 13.6 Keep Alive When you initiate an IPSec tunnel with keep alive enabled, the Prestige automatically renegotiates the tunnel when the IPSec SA lif etime period expires ( the IPSec Algorithms section for more on the IPSec SA lifetime). In ef fect, the IPSec tunne l becomes an “always on” co[...]

P-335 Series User’s Guide 169 Chapter 13 VPN Screens In order for IPSec router A (see the figure) to receive an initiating IPSec packet from IPSec router B, set the NA T router to forward UDP port 500 to IPSec router A. 13.7.2 Remote DNS Server In cases where you want to use domain names to access Intranet servers on a remote network that has a D[...]

P-335 Series User’s Guide Chapter 13 VPN Screens 170 Note: Regardless of the ID t ype and content configuration, t he Prestige does not allow you to save multiple active rules with overlapping local and remote IP addresses. W ith main mode (s ee Section Negotiation Mode ), the ID type and content are encrypted to provide identity protection. In t[...]

P-335 Series User’s Guide 171 Chapter 13 VPN Screens The two Prestiges in this example can complete negotiation and establish a VPN tunnel Table 71 Matching ID Type and Cont en t Configuration Example PRESTIGE A PRESTIGE B Local ID type: E-mail Local ID type: IP Local ID content: tom@yourcompany .com Local ID content: 1.1.1.2 Peer ID type: IP Pee[...]

P-335 Series User’s Guide Chapter 13 VPN Screens 172 Figure 89 Rule Setup The following table describes the labels in this screen. Table 72 Rule Setup LABEL DESCRIPTION Active Select this check box to ac tivate this VPN tunnel. This option determi nes whether a VPN rule is applied before a packet leaves the firewall. Keep Alive Select th is check[...]

P-335 Series User’s Guide 173 Chapter 13 VP N Screens DNS Server (for IPSec VPN) If there is a private DNS server that se rvices the VPN, type its IP address here. The Prestige assigns this addition al DNS server to the Prestige’s DHCP clients that have IP addresses in this IPSec rule's range of local addre sses. A DNS server allows client[...]

P-335 Series User’s Guide Chapter 13 VPN Screens 174 Peer ID T ype Select IP to identify th e remote IPSec router by its IP address. Select DNS to identify the remote IPSec router by a domain name . Select E-mail to identify the remote IPSec router by an e-mail address. Peer Cont ent The configuration of the peer cont ent depends on the peer ID t[...]

P-335 Series User’s Guide 175 Chapter 13 VPN Screens 13.1 1 IKE Phases There are two phases to every IKE (Internet Key Excha nge) negotiation – phase 1 (Authentication) and ph ase 2 (Key Exchange). A phase 1 exchange establishes an IKE SA and the second one uses that SA to negotiate SAs for IPSe c. Figure 90 T wo Phases to Set Up the IPSec SA I[...]

P-335 Series User’s Guide Chapter 13 VPN Screens 176 • Choose whether to enable Perfect Forward Secrecy (PFS) using Dif fie-Hellman public- key cryptograp hy – see Section Perfect Forward Secrecy (PFS) . Select None (the default) to disable PFS. Choose T unnel mode or T ransport mode. Set the IPSec SA lifetime. This field allows y ou to deter[...]

P-335 Series User’s Guide 177 Chapter 13 VP N Screens This may be unnecessary for data that does not require such security , so PFS is disabled ( None ) by default in the Prestige. Disabling PF S means new authenti cation and encryption keys are derived from the same root secret (which may have secu rity im plications in the long run) but allows [...]

P-335 Series User’s Guide Chapter 13 VPN Screens 178 Figure 91 Advanced Rule Setup The following table describes the labels in this screen. Table 73 Advanced Rule Setup LABEL DESCRIPTION Active Select this check box to activate this VPN policy . Keep Alive Select this check box to turn on the Keep Alive feature fo r this SA. T urn on Keep Alive t[...]

P-335 Series User’s Guide 179 Chapter 13 VP N Screens NA T Traversal Select this check box to enabl e NA T traversal. NA T traversal al lows you to set up a VPN connection when there are NA T routers between the two IPSec routers. The remote IPSec router must also have NA T traversal enabled. Y ou can use NA T traversal with ESP protocol using T [...]

P-335 Series User’s Guide Chapter 13 VPN Screens 180 Remote Port S tart 0 is the default and signifies an y po rt. T ype a port number from 0 to 65535. Some of the most common IP ports ar e: 21, FTP; 53, DNS; 23, T elnet; 80, HTTP; 25, SMTP; 1 10, POP3 Remote Port End Enter a port number in this field to define a po rt range. This p ort number mu[...]

P-335 Series User’s Guide 181 Chapter 13 VP N Screens Encryption Algorithm Select DES or 3DES from the drop-down list box . The Prestige's encryption algorithm shou ld be identical to the secure remote gateway . Whe n DES is used for data communications, both sender and receiver must kno w the same secret key , which can be use d to encrypt [...]

P-335 Series User’s Guide Chapter 13 VPN Screens 182 13.13 Manual Key Manual key managemen t is useful if you have pro blems with IKE key managemen t. 13.13.1 Security Pa rameter Index (SPI) An SPI is used to distinguish dif ferent SAs te rminating at the same de stination and using the same IPSec protocol. This data allows for the multiplexing o[...]

P-335 Series User’s Guide 183 Chapter 13 VPN Screens Figure 92 Rule Setup with Manual Key The following table describes the labels in this screen. Table 74 Rule Setup with Manual Key LABEL DESCRIPTION Active Select this check box to activate this VPN policy . IPSec Keying Mode Select IKE or Manual from the drop-down list box. Manu al is a useful [...]

P-335 Series User’s Guide Chapter 13 VPN Screens 184 Remote Addr ess S tart Remote IP addresses must be static and correspond to the remote IPSec router's configured l ocal IP addresse s. The remote address fields do no t apply when the Secure Gateway IP Address field is co nfigured to 0.0.0.0 . In this case only the remote IPSe c router can[...]

P-335 Series User’s Guide 185 Chapter 13 VP N Screens 13.15 SA Monitor Screen In the web configurator , click the VPN link under Security and the SA Monitor tab. Use this screen to display and manage active VPN connections. A Security (SA) is the group of security settings related to a specific VPN tunnel. This screen displays active VPN connecti[...]

P-335 Series User’s Guide Chapter 13 VPN Screens 186 Figure 93 SA Monitor The following table describes the labels in this screen. Table 75 SA Monitor LABEL DESCRIPTION # This is the security index number . Name This field displays the identifi cation name for this VPN policy . Encapsulation This field displays T unnel or Transport mode. IPSec Al[...]

P-335 Series User’s Guide 187 Chapter 13 VPN Screens Figure 94 Global Setting The following table describes the labels in this screen. Table 76 Global Setting LABEL DESCRIPTION Windows Networking (NetBIOS over TCP/IP) NetBIOS (Network Basic Input/Output System) are TCP or UDP broadcast packets that enable a computer to find other computers. It ma[...]

P-335 Series User’s Guide Chapter 13 VPN Screens 188 Having everyone use the same pre-shared key ma y create a vulnerability . If the pre-shared key is compromised, all of the VPN connections using that VPN rule are at risk. A recommended alternative is to use a dif ferent VPN rule for each telecommuter and identify them by unique IDs (see the T [...]

P-335 Series User’s Guide 189 Chapter 13 VPN Screens See the following graphic for an example where three telecommut ers each use a different VPN rule to initiate a VPN connection to a Prestig e l ocated at headquarters. The Prestige at headquarters identifies each by its secure gate way address (a dynamic domain name ) and uses the appropria te [...]

P-335 Series User’s Guide Chapter 14 Trend Micro Security Serv ices 190 C HAPTER 14 T rend Micro Security Services This chapter contains informa tion about configuring T rend Micr o Security Services (TMSS). 14.1 T rend Micro Security Services Overview TMSS helps protect computers on a network th at access the Internet through the Prestige. TMSS [...]

P-335 Series User’s Guide 191 Chapter 14 Trend Micro Security Se rvices Figure 98 Download Active X to View TMSS Web Page 2 In the TMSS web page, click Service Summary . Figure 99 TMSS Web Page (Dashboard) 3 Click Activate My Services to begin a 3-step process to activate TMSS. Figure 100 TMSS Service Summary 4 Click Next to begin the process as [...]

P-335 Series User’s Guide Chapter 14 Trend Micro Security Serv ices 192 Figure 101 TMSS 3 S teps 5 Fill in the registration form and submit it. Figure 102 TMSS Registration Form 6 After you submit the registration form, you w ill receive an e-mail w ith instructions for validating your e-mail address. Follow the instructions. 7 Download TMSS to e[...]

P-335 Series User’s Guide 193 Chapter 14 Trend Micro Security Se rvices Figure 103 Example TMSS Activated Service Summary Screen Yo u n e e d a Parental Contr ol license to activate configure Parental Contr ol categories on the Prestige (see Figure 108 on page 198 ). The following screen is an example of the Parental Control screen with TMSS acti[...]

P-335 Series User’s Guide Chapter 14 Trend Micro Security Serv ices 194 2 Use the V irus Protection screen to configur e if and how often u p dates are checked and to display the status of computers under TMSS monitoring. 3 Use the Parental Contr ols screen to schedule and block we b pages based on pre-defined web site categories such as pornogra[...]

P-335 Series User’s Guide 195 Chapter 14 Trend Micro Se curity Services 14.3 Exception List Screen Click the TMSS link under Security and the Exception List tab. Use the Exception List to specify which computers should not to be restrict ed by Parental Controls. The default setting is to have Parental Controls enabled on all computers. Automatica[...]

P-335 Series User’s Guide Chapter 14 Trend Micro Security Serv ices 196 Figure 106 Exception List The following table describes the labels in this screen. Table 79 Exception List LABEL DESCRIPTION Exclude computer(s) fro m displaying Trend Micro Home Network Security Services Computer(s) that will display T rend Micro Home Network Security Servic[...]

P-335 Series User’s Guide 197 Chapter 14 Trend Micro Security Se rvices 14.4 V irus Protection Screen Select the V irus Protection tab in the TMSS main screen ( Figure 99 on page 191 ) to display the following screen. The anti-virus software is part of the TIS packag e (see the footnote on page 193 ). The virus pattern and the scan engine ar e bo[...]

P-335 Series User’s Guide Chapter 14 Trend Micro Security Serv ices 198 14.5 Parent al Controls Screen Select the Parent al Controls tab from the TMSS main screen. The following screen displays. Figure 108 Parent al Controls Scan Engine This field displays the current TMSS anti-virus scan engine version number of a TMSS client. S tatus This field[...]

P-335 Series User’s Guide 199 Chapter 14 Trend Micro Se curity Services The following table describes the labels in this screen. Table 81 Parental Controls LABEL DESCRIPTION Restrict Web Features Select the box(es) to restrict a feature. When you download a page containing a restricted feature, that part of the web page will appear blank or graye[...]

P-335 Series User’s Guide Chapter 14 T rend Micro Security Serv ices 200 Alcohol/T obacco Selecting this category excludes pages that pro mote or offer the sale alcohol/tobacco products, or provide the means to create them. It also includes pages that glorify , tout, or otherwise encourage the consumption of alcohol/tobacco. It does not in clude [...]

P-335 Series User’s Guide 201 Chapter 14 Trend Micro Se curity Services[...]

P-335 Series User’s Guide Chapter 15 Static Route Screens 202 C HAPTER 15 S t atic Route Screens This chapter shows you how to config ure static routes for your Prestige. 15.1 S tatic Route Overview Each remote node specifies only the network to which the gateway is di rectly connected, and the Prestige has no knowledge of the networks b eyond. F[...]

P-335 Series User’s Guide 203 Chapter 15 Static Route Screens Figure 1 10 IP S tatic Route The following table describes the labels in this screen. Table 82 IP Static Route LABEL DESCRIPTION # Number of an individual static route. Name Name that describes or identifies this route. Active This icon is turned on when th is static route is active. C[...]

P-335 Series User’s Guide Chapter 15 Static Route Screens 204 Figure 1 1 1 S tatic Route Setup The following table describes the labels in this screen. Table 83 Static Route Setup LABEL DESCRIPTION Route Name Enter the name of the IP static route. Leave this field blank to delete this static route. Active This field allows you to activa te /deact[...]

P-335 Series User’s Guide 205 Chapter 15 Static Route Screens[...]

P-335 Series User’s Guide Chapter 16 Bandwidth Management 206 C HAPTER 16 Bandwid th Management This chapter contains information about configuri ng bandwidth management, editing rules and viewing the Prestige’ s bandwidth ma nagement logs . 16.1 Bandwid th Management Overview ZyXEL ’ s Bandwidth Management allows you to specify b a ndwidth m[...]

P-335 Series User’s Guide 207 Chapter 16 Bandwidth Manag ement Figure 1 12 Application-based Bandwidth Manageme n t Example 16.1.2 Subnet-based Band wid th Management Example The following example uses ba ndwidth rules b ased solely on LAN subn ets. Each bandwidth rule (Subnet A and Subn et B) is allotted 320 Kbps. Figure 1 13 Subnet-based Bandwi[...]

P-335 Series User’s Guide Chapter 16 Bandwidth Managemen t 208 Figure 1 14 Application and Subnet-based Bandwid th Management Example Table 84 Application and Subnet- based Bandwidth Management Example T RAFFIC T YPE FROM SUBNET A FROM SUBNET B Vo I P 64 Kbps 64 Kbps Web 64 Kbps 64 Kbps FTP 64 Kbps 64 Kbps E-mail 64 Kbps 64 Kbps Vid e o 64 Kbps 6[...]

P-335 Series User’s Guide 209 Chapter 16 Bandwidth Manag ement Figure 1 15 Bandwidth Usage Example The following figure shows the bandwidth usage with the maximize b andwidth usage opti on enabled. The Prestige div ides up the unbud geted 64 Kbps among the ru les that require more bandwidth. If the administration dep artment only uses 32 Kbps of [...]

P-335 Series User’s Guide Chapter 16 Bandwidth Managemen t 210 Figure 1 16 Maximize Bandwid th Usage Example 16.1.5 Bandwid th Management Priorities The following table describes the priorities that you can apply to traf fic that the Prestige forwards out through an interface. Table 85 Bandwidth M anagement Priorities PRIORITY LEVELS: T RAFFIC WI[...]

P-335 Series User’s Guide 211 Chapter 16 Bandwidth Ma nagement V oIP (SIP ) Sending voice signals over the Internet is ca lled V oice over IP or V oIP . Session Initiated Protocol (SIP) is an internationally recogni zed standa rd for implem enting V oIP . SIP is an application-layer control (signaling) protocol th at handles the setting up, alter[...]

P-335 Series User’s Guide Chapter 16 Bandwidth Management 212 IPSEC_TUNNEL(AH:0) The IPSEC AH (Authentication Header) tunneling protocol use s this service. IPSEC_TUNNEL(ESP:0) The IPSEC ESP (Encapsulation Securi ty Protocol) tun neling protocol uses this service. IRC(TCP/UDP:6667) This is another popula r Internet chat program. MSN Messenger(TCP[...]

P-335 Series User’s Guide 213 Chapter 16 Bandwidth Manag ement 16.2 Bandwid th Management Configuration Screen Click the Bandwidth MGMT link under Management to open the bandwidth management Configuration screen. Figure 1 17 Bandwidth Managemen t Configuration The following table describes the labels in this screen. TELNET(TCP:23) T elnet is the [...]

P-335 Series User’s Guide Chapter 16 Bandwidth Management 214 16.3 Bandwid th Management Rule and Filter Use the Bandwidth Management Rule Configuration screen to configure a bandwid th management rule. Use bandwidth rul es to allo cate specific amounts of bandwidth capacity (bandwidth budgets) to specific applications and/or subnets. 16.3.1 Band[...]

P-335 Series User’s Guide 215 Chapter 16 Bandwidth Manag ement Figure 1 18 Bandwidth Management Rule and Filter Configur ation The following table describes the labels in this screen. Table 88 Bandwidth Management Edit LABEL DESCRIPTION Active Select this check box to have the Pr estige apply this bandwidth management rule. Enable a bandwidth man[...]

P-335 Series User’s Guide Chapter 16 216 Source Port Enter the port number of the source. See T able 86 for some common services and port numb ers. Protocol Enter the protocol (service type) number , for example: 1 for ICMP , 6 for TCP or 17 for UDP . Apply Click Apply to save your customized se ttings and exit this screen. Reset Click Reset to b[...]

P-335 Series User’s Guide 217 Chapter 16[...]

P-335 Series User’s Guide Chapter 17 Remote Management Screens 218 C HAPTER 17 Remote Management Screens This chapter provides information on the Remote Management screens. 17.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) from which computers. Note: Wh[...]

P-335 Series User’s Guide 219 Chapter 17 Remot e Manageme nt Screens 3 The IP address in the Secured Client IP field does not match th e client IP address. If it does not match, the Prestige will disconnect the session immediately . 4 There is already another remote management session with an equal or higher priority running. Y ou may only have o[...]

P-335 Series User’s Guide Chapter 17 Remote Management Screens 220 17.3 T elnet Y ou can configure your Prestige for remote T e lnet access as shown next. The administrator uses T elnet from a computer on a remo te network to access the Presti ge. Figure 120 T e lnet Configuration on a TCP/IP Network 17.4 T elnet Screen T o change your Prestige?[...]

P-335 Series User’s Guide 221 Chapter 17 Remot e Manageme nt Screens Figure 121 T elnet Remote Manag ement The following table describes the labels in this screen. Table 90 Telnet Remote Management LABEL DESCRIPTION Server Port Y ou may change the server port numb er fo r a service if needed, however you must use the same port number in order to [...]

P-335 Series User’s Guide Chapter 17 Remote Management Screens 222 Figure 122 FTP Remote Manage ment The following table describes the labels in this screen. Table 91 FTP Remote Manageme nt LABEL DESCRIPTION Server Port Y ou may change the server port number for a service if need ed, however you must use the same port number in order to us e that[...]

P-335 Series User’s Guide 223 Chapter 17 Remot e Manageme nt Screens Figure 123 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent: agen ts and a manager . An agent is a management software module th at resi des in a managed device (the Prestige). An agent translates the local management info rmation from the[...]

P-335 Series User’s Guide Chapter 17 Remote Management Screens 224 17.6.1 Supported MIBs The Prestige support s MIB II that is defined in RFC-1213 and RFC-1 215. The focus of the MIBs is to let administrators collect statistical data and monitor status and performance. 17.6.2 SNMP T rap s The Prestige will send traps to the SNMP mana ger when any[...]

P-335 Series User’s Guide 225 Chapter 17 Remot e Manageme nt Screens Figure 124 SNMP Remote Manag ement The following table describes the labels in this screen. Table 93 SNMP Remote Manage ment LABEL DESCRIPTION SNMP Configuration Get Community Enter the Get Community , which is th e password for the incoming Get and GetNext requests from the man[...]

P-335 Series User’s Guide Chapter 17 Remote Management Screens 226 17.8 DNS Screen Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa. Refer to the chapter on W izard Setup for background information. T o change your Prestige’ s DNS settings, click the Remote MGMT link under Management and the DNS t[...]

P-335 Series User’s Guide 227 Chapter 17 Remot e Manageme nt Screens Figure 126 Security Remote Mana gement The following table describes the labels in this screen. Table 95 Security Remote Management LABEL DESCRIPTION ICMP Internet Control Message Protocol is a message control and error-repo rting protocol between a host server and a gateway to [...]

P-335 Series User’s Guide Chapter 18 UPnP 228 C HAPTER 18 UP N P This chapter introduces the Universal Plug and Play feature. 18.1 Universal Plug and Play Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices. A UPnP device can dynamically [...]

P-335 Series User’s Guide 229 Chapter 18 UPnP All UPnP-enabled devices may communicate freely with eac h other without additional configuration. Disable UPnP if this is not your intention. 18.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from th e Universal Plug and Play Forum Creates UPnP™ Implementers Corp. (UIC). ZyXEL' s UPnP [...]

P-335 Series User’s Guide Chapter 18 UPnP 230 18.4 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . Allow UPnP to pass through Firewall UPnP broadcasts are only allowed on the LAN. If you block LAN-to- LAN/Prestige traffic using the firewa ll, then you need to select this check box to al[...]

P-335 Series User’s Guide 231 Chapter 18 UPnP 18.4.1 Inst alling UPnP in Windows Me Follow the steps below to in stall UPnP in W indows Me. 1 Click St a r t and Control Panel . Double- click Add/Remove Programs . 2 Click on the Win d ow s S et u p ta b and select Communication in the Components selection box. Click Details . 3 In the Communicatio[...]

P-335 Series User’s Guide Chapter 18 UPnP 232 18.4.2 Inst alling UPnP in Windows XP Follow the steps below to install UPnP in W indows XP . 1 Click St a r t and Control Panel . 2 Double-click Network Connections . 3 In the Network Connections window , click Advanced in the main menu and select Optional Networking Components … .The Windows Optio[...]

P-335 Series User’s Guide 233 Chapter 18 UPnP Make sure the computer is co nnected to a LAN port of the ZyXEL device. Tu rn on your computer and the ZyXEL device.[...]

P-335 Series User’s Guide Chapter 18 UPnP 234 18.5.1 Auto-discover Y our UPnP-enabled Network Device 1 Click St a r t and Control Panel . Double-click Network Connections . An icon displays under Internet Gateway . 2 Right-click the icon and select Prop erties . 3 In the Internet Connection Properties window , click Settings to see the port mappi[...]

P-335 Series User’s Guide 235 Chapter 18 UPnP 18.5.2 We b Configurator Easy Access W ith UPnP , you can access the web-based configur ator on the ZyXEL device without finding out the IP address of the ZyXEL device first. This is helpful if you do not know the IP address of the ZyXEL device. Follow the steps below to access the web configurator . [...]

1 Click St a r t and then Control Panel . 2 Double-click Network Connections . 3 Select My Network Places under Other Places . 4 An icon with the d escription for each UPnP-enabled device display s under Local Network . 5 Right-click the icon for your ZyXEL device and select Invoke . The web configurator login screen displays. 6 Right-click the ico[...]

P-335 Series User’s Guide 237 Chapter 18 UPnP Follow the steps below to access the web configurator . 1 Click Start and then Control Panel. 2 Double-click Network Connections . 3 Select My Network Places under Other Places . 4 An icon with the d escription for each UPnP-enabled device display s under Local Network . 5 Right-click the icon for you[...]

P-335 Series User’s Guide Chapter 18 UPnP 238[...]

P-335 Series User’s Guide 239 Chapter 18 UPnP[...]

P-335 Series User’s Guide Chapter 19 Pr int Server 240 C HAPTER 19 Print Server This chapter discusses how to configur e the print server on the Prestige. 19.1 Print Server Overview A print server is a device or software that pr ovides users on a network with shared access to one or more printers. The print server acts as a buf fer , holding the [...]

P-335 Series User’s Guide 241 Chapter 19 Print Server The print server must be set up on each comput er in your network that you want to use the print server . Before you set up the print server , make sure the USB printe r is connected to the Prestige using the USB cable and that both the Prestige and the USB printer are turned on. 19.3 Prestige[...]

P-335 Series User’s Guide Chapter 20 Syste m 242 C HAPTER 20 System This chapter provides informa tion on the System screens. 20.1 System Overview See the W izard Setup chapter for more information on the next few screens. 20.2 General Screen Click the System link under Maintenance and the General tab. The following screen displays. Figure 129 Ge[...]

P-335 Series User’s Guide 243 Chapter 20 System 20.3 Dynamic DNS Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU-SeeMe, etc.). Y ou can also access your FTP server or W eb site on your own computer using a domain name (for instance myhost.d[...]

P-335 Series User’s Guide Chapter 20 Syste m 244 Figure 130 Dynamic DNS The following table describes the labels in this screen. Table 99 Dynamic DNS LABEL DESCRIPTION Enable Dynamic DNS Select this check box to use dy namic DNS. Service Provider Select the name of your Dy namic DNS service provider . Dynamic DNS T ype Select the type of se rvice[...]

P-335 Series User’s Guide 245 Chapter 20 System 20.5 T ime Setting Screen T o change your Prestige’ s time and date, click the System link under Maintenance and the Time Setting tab. The screen appears as shown. Use this screen to configure the Prestige’ s time based on your local time zone. Figure 131 T ime Setting The following table descri[...]

P-335 Series User’s Guide Chapter 20 System 246 New Date (yyyy-mm-dd) This field displays the last updated date from the time server or the last date configured manually . When you set Time and Date Setup to Manual , enter the new da te in this fiel d and then click Apply . Get from Time Server Select this radio button to have the Prestige get th[...]

P-335 Series User’s Guide 247 Chapter 20 System End Date Configure the day and time when Da ylight Saving Time ends if you selected Daylight Saving . The o'clock field uses the 24 hour format. Here are a couple of examples: Daylight Saving Time ends in the United S tates on the last Sunday of October . Each time zone in the Uni ted S tates s[...]

P-335 Series User’s Guide Chapter 21 Logs 248 C HAPTER 21 Logs This chapter contains inform ation about configuring genera l log settings and viewing the Prestige’ s logs. Refer to the appendices for example log message explanations. 21.1 V iew Log The web confi gurator allows you to look at all of the Prestige’ s logs in one location. Click [...]

P-335 Series User’s Guide 249 Chapter 21 Logs Figure 132 Vi ew Log The following table describes the labels in this screen. Table 101 View Logs LABEL DESCRIPTION Display The categories that you select in the Log Settings p a ge (see section ) display in the drop-do wn list box. Select a category of logs to view; select All Logs to view logs from [...]

P-335 Series User’s Guide Chapter 21 Logs 250 Use the Log Settings screen to configure to where the Prestig e is to send logs; the schedule for when the Prestige is to send the logs and which logs a nd/or im mediate alerts the Prestige to send. An alert is a type o f log that warrants more serious attention. They include system errors, attacks (a[...]

P-335 Series User’s Guide 251 Chapter 21 Logs Figure 133 Log Settings The following table describes the labels in this screen. Table 102 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP ad dress of the mail server for the e-mail addresses specified below . If thi s field is left blank, logs and alert message[...]

P-335 Series User’s Guide Chapter 21 Logs 252 Send Alerts T o Alerts are real-time notificatio ns that are sent as soon as an event, such as a DoS attack, system error , or forbidden web a ccess attempt occurs. Enter the E-mail address where the alert messages will be sent. Alerts include system errors, attacks and attempted access to blocked web[...]

P-335 Series User’s Guide 253 Chapter 21 Logs[...]

P-335 Series User’s Guide Chapter 22 Tools 254 C HAPTER 22 To o l s This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the Prestige. 22.1 Firmware Upload Screen Find firmware at www .zyxel .com in a file that (usually) uses the system model name with a "*.bin" extension, e.g., &quo[...]

P-335 Series User’s Guide 255 Chapter 22 Tools Figure 135 Upload W arning The Prestige automatically restarts in this time causing a temporary networ k disconnect. In some operating systems, you may see the following icon on your desktop. Figure 136 Network T e mporarily Disconnected After two minutes, log in again and check your new fi rmware ve[...]

P-335 Series User’s Guide Chapter 22 Tools 256 Figure 138 Configuration 22.2.1 Backup Configuration Backup configuration allows yo u to back up (s ave) the Prestige’ s current configuration to a file on your computer . Once y our Prestige is co nfigured and functioning prop erly , it is highly recommended tha t you back up your configuratio n f[...]

P-335 Series User’s Guide 257 Chapter 22 Tools Figure 139 Configuration Restore Su ccessful The Prestige automatically restarts in this time causing a temporary networ k disconnect. In some operating systems, you may see the following icon on your desktop. Figure 140 T e mporarily Disconnected If you uploaded the default config uration file you m[...]

P-335 Series User’s Guide Chapter 22 Tools 258 Figure 142 System Restart[...]

P-335 Series User’s Guide 259 Chapter 22 Tools[...]

P-335 Series User’s Guide Chapter 23 Intro ducing the SMT 260 C HAPTER 23 Introducing the SMT This chapter explains how to access and na viga te the System Management T erminal and gives an overview of its menus. 23.1 SMT Introduction T he Prestige’ s SMT (System Managem ent T erminal) is a men u-driven interface that you can access from a term[...]

P-335 Series User’s Guide 261 Chapter 23 Intr oducing the S MT Figure 143 Login Screen Enter Password : **** 23.1.3 Prestige SMT Menu Overview The following figure gives you an overview of the various SMT menu screens of your Prestige.The following table gives you an over view of your Prestige’ s various SMT menus. Table 105 SMT Menus Overview [...]

P-335 Series User’s Guide Chapter 23 Intro ducing the SMT 262 23.2 Navigating the SMT Interface The SMT(System Management T e rminal) is the interface that you use to configu re your Prestige. Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below . 24 System Maintenance [...]

P-335 Series User’s Guide 263 Chapter 23 I ntroducing the S MT After you enter the password, the SMT di splays the main menu, as shown next. Move the cursor [ENTER] or [UP]/ [DOWN] arrow keys. Within a menu, press [ENTER] to move to the next field. Y ou can also use the [UP]/[DOWN] arrow keys to move to the previous and the next field, respective[...]

P-335 Series User’s Guide Chapter 23 Intro ducing the SMT 264 Figure 144 SMT Main Menu Copyright (c) 199 4 - 2005 ZyXEL Communications Corp. P -335/P-335WT Main Menu Getting Started Advanced Management 1. General Setup 21. Filter and Firewall S etup 2. WAN Setup 22. SNMP Configuration 3. LAN Setup 23. System Password 4. Internet Access Se tup 24.[...]

P-335 Series User’s Guide 265 Chapter 23 Intr oducing the S MT 23.3 Changing the System Password Change the P restige defa u lt password by following the steps show n next. 1 Enter 23.1 in the ma in menu to display Menu 23.1 - System Security - Change Password. 2 T ype your existing system password in the Old Password field, for example “1234?[...]

P-335 Series User’s Guide Chapter 24 Menu 1 G eneral Setu p 266 C HAPTER 24 Menu 1 General Setup Menu 1 - General Setup contains administrative and system-related informa tion. 24.1 General Setup Menu 1 — General Setup contains administrative and system-related information (shown next). The System Name field is for identification purpo ses. How[...]

P-335 Series User’s Guide 267 Chapter 24 Menu 1 G eneral Setup Figure 146 Menu 1 General Setup. Menu 1 - General Setup System Name= Domain Name= zyxel. com.tw First System DNS Se rver= From ISP IP Address= N/A Second System DNS S erver= From ISP IP Address= N/A Third System DNS Se rver= From ISP IP Address= N/A Edit Dynamic DNS= N o Press ENTER t[...]

P-335 Series User’s Guide Chapter 24 Menu 1 G eneral Setu p 268 24.2.1 Procedure to Configure Dynamic DNS Note: If you have a private W AN IP address, then you cannot use Dynamic DNS. T o configure Dynamic DNS, go to Menu 1 — General Setup and select Ye s in the Edit Dynamic DNS field. Press [ ENTER ] to display Menu 1.1— Configur e Dynamic D[...]

P-335 Series User’s Guide 269 Chapter 24 Menu 1 G eneral Setup Note: The IP address updates when you reconfigu re menu 1 or perform DHCP client renewal. Edit Update IP Address: Y o u can select Ye s in either the Use Server Detected IP field (recommended) or the User Specified IP Addr field, but not both. With the Use Server Detected IP and User [...]

P-335 Series User’s Guide Chapter 25 Menu 2 WAN Setup 270 C HAPTER 25 Menu 2 W AN Setup This chapter describes how to config ure the W AN using menu 2. 25.1 Introduction to W AN This chapter explains how to configure settings for your W A N port. 25.2 W AN Setup From the main menu, enter 2 to open menu 2. Figure 148 Menu 2 W AN Setu Menu 2 - WAN [...]

P-335 Series User’s Guide 271 Chapter 25 Menu 2 WAN Setup[...]

P-335 Series User’s Guide Chapter 26 Menu 3 L AN Setup 272 C HAPTER 26 Menu 3 LAN Setup This chapter covers how to configure your wired Local Area Network (LAN) settings. 26.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 — LAN Setup . From the main menu, enter 3 to display menu 3. Figure 149 Menu 3 LAN Setup Menu [...]

P-335 Series User’s Guide 273 Chapter 26 Menu 3 LAN Setup 26.2 Protocol Dependent Ethernet Setup Depending on the proto cols for your applications, yo u need to configure the respective Ethernet Setup, as outlined below . • For TCP/IP Ethernet setup refer to the Internet Access Application chapter . • For bridging Ethernet setup refer to the [...]

P-335 Series User’s Guide Chapter 26 Menu 3 L AN Setup 274 Use the instructions in the following table to configure TCP/IP parameters for the LAN port. Table 112 Menu 3.2: LAN TCP/IP Setup Fields FIELD DESCRIPTION TCP/IP Setup: IP Address Enter the IP address of your Pr estige in dotted deci mal notation IP Subnet Mask Y our Prestige will automat[...]

P-335 Series User’s Guide 275 Chapter 26 Menu 3 LAN Setup 26.3.1 IP Alias Setup IP alias allows you to partition a physical network into dif fer ent logical networks over the same Ethernet interface. The Prestige supports three logical LAN interfaces via its single physical Ethernet interface with the Prestige itself as the gateway for ea ch LAN [...]

P-335 Series User’s Guide Chapter 26 Menu 3 LA N Setup 276 IP Subnet Mask Y our Prestige will automatically calc ula te the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the Prestige. RIP Direction Press [SP ACE BAR] and then [ENTER] to se lect the RIP direction. Optio[...]

P-335 Series User’s Guide 277 Chapter 26 Menu 3 LAN Setup[...]

P-335 Series User’s Guide Chapter 27 In ternet Access 278 C HAPTER 27 Internet Access This chapter shows you how to config ure your Prestige for Internet access . 27.1 Introduction to Internet Access Setup Use information from your ISP along with the in st ructions in this chapter to set up your Prestige to access the Internet. There are three di[...]

P-335 Series User’s Guide 279 Chapter 27 Internet Access Figure 154 Menu 4 - Internet Access Setup ISP's Name= MyISP Encapsulation= Ethe rnet Service Type= Stand ard My Login= N/A My Password= N/A Retype to Confirm = N/A Login Server= N/A Relogin Every (mi n)= N/A IP Address Assignme nt= Dynamic IP Address= N/A IP Subnet Mask= N /A Gateway I[...]

P-335 Series User’s Guide Chapter 27 In ternet Access 280 27.3 Configuring the PPTP Client Note: The Prestige supports only one PP TP server connection at any given time T o configure a PP TP client, you must configure the My Login and Password fields for a PPP connection and the PP TP parame ters for a PP TP connection. After configuring My Logi[...]

P-335 Series User’s Guide 281 Chapter 27 Internet Access Figure 155 Internet Access Setup (PPTP) Menu 4 - Internet Access Set up ISP's Name= MyISP Encapsulation= PPTP Service Type= N/A My Login= My Password= ****** ** Retype to Confirm= ******** Idle Timeout= 100 IP Address Assignment = Dynamic IP Address= N/A IP Subnet Mask= N/A Gateway IP [...]

P-335 Series User’s Guide Chapter 27 In ternet Access 282 Figure 156 Menu 4 - Internet Access Setup ISP's Name= MyIS P Encapsulation= P PPoE Service Type= N/A My Login= My Password= * ******* Retype to Conf irm= ******** Idle Timeout= 100 IP Address Assig nment= Dynamic IP Address= N/ A IP Subnet Mask = N/A Gateway IP Add ress= N/A Network A[...]

P-335 Series User’s Guide 283 Chapter 27 Internet Access[...]

P-335 Series User’s Guide Chapter 28 Remot e Node Configur ation 284 C HAPTER 28 Remote Node Configuration This chapter covers remo te node configuration. 28.1 Introduction to Remote Node Setup A remote node is required for placing calls to a remote gatewa y . A remote node represents both the remote gateway an d the network behind it across a W [...]

P-335 Series User’s Guide 285 Chapter 28 Remote Node Configu r ation Figure 157 Menu 11.1 - Remote Node Profile Rem Node Name= MyISP Route= IP Active= Yes Encapsulation= Ethernet Edit IP= No Service Type= Standard Session Options: Service Name= N/A Edit Filter Sets= No Outgoing: My Login= N/A My Password= N/A Edit Traffic Redirect= No Retype to C[...]

P-335 Series User’s Guide Chapter 28 Remot e Node Configur ation 286 28.2.2 PPPoE Encap sulation The Prestige supports PPPoE (Point-to-Point Pr otocol over Ethernet). Y ou can only use PPPoE encapsulation when you’re using the Prestige with a DSL modem as the W AN device. If you change the Encap sulation to PPPoE, then you will see the next scr[...]

P-335 Series User’s Guide 287 Chapter 28 Remote Node Configu r ation 28.2.2.2 Nailed-Up Connection A nailed-up connection is a dial-u p line where the connectio n is always up regardless of tra ffic demand. The Prestige does two things when you specify a nailed-up connection. The first is that idle timeout is disabled. Th e second is that the Pre[...]

P-335 Series User’s Guide Chapter 28 Remot e Node Configur ation 288 Figure 159 Menu 11 .1 - Remote Node Profile Rem Node Name= MyISP Route= IP Active= Yes Apply Alias= None Encapsulation= PPTP Edit IP= No Service Type= Standard Telco Option: Service Name= N/A Allocated Budget(min)= 0 Outgoing: Period(hr)= 0 My Login= Schedules= My Password= ****[...]

P-335 Series User’s Guide 289 Chapter 28 Remote Node Configu r ation Figure 160 Menu 1 1.3 Remote Node Network Layer Options for Ether net Encapsulation Menu 11.3 - Remote Node Net work Layer Options IP Address Assi gnment= Dynamic IP Address= N/A IP Subnet Mask= N/A Gateway IP Addr = N/A Network Address Translation= SUA Only Metric= 1 Private= N[...]

P-335 Series User’s Guide Chapter 28 Remot e Node Configur ation 290 28.4 Remote Node Filter Move the cu rsor to the field Edit Filter Sets in menu 1 1 .1, and then press [SP ACE BAR] to set the value to Ye s . Press [ENTER] to open Menu 1 1.5 - Remote Node Filter . Use menu 11.5 to specify the filter set(s) to apply to the incomi ng and outgoing[...]

P-335 Series User’s Guide 291 Chapter 28 Remote Node Configu r ation Figure 161 M Menu 11.5 - Remote Node Filt er Input Filter Sets: protocol filters= device filters= Output Filter Sets: protocol filters= device filters= Enter here to CONFIRM or ESC to CANCEL: enu 1 1 .5: Remote Node Filter (Ethernet Encap sulation) Figure 162 Menu 11.5 - Remote [...]

P-335 Series User’s Guide Chapter 28 Remot e Node Configur ation 292 Figure 163 Menu 11 .6 - Traffic Redirect Setup Active= Yes Configuration : Backup Gate way IP Address= 0.0.0.0 Metric= 15 Check WAN I P Address= 0.0.0.0 Fail Tole rance= 2 Period(se c)= 5 Timeout(s ec)= 3 Press ENTER to Confirm or ESC to Cancel: Menu 1 1.6: T raffic Redirect Set[...]

P-335 Series User’s Guide 293 Chapter 28 Remote Node Configu ration[...]

P-335 Series User’s Guide Chapter 29 Static Route Setup 294 C HAPTER 29 S t atic Route Setup This chapter shows how to setup IP static routes. 29.1 IP S tatic Route Setup T o configure an IP static route, use Menu 12 – S tatic Routing Setup (shown next). Figure 164 Menu 12 IP S tatic Route Setup Menu 12 - IP Static Route S etup 1. ________ 2. _[...]

P-335 Series User’s Guide 295 Chapter 29 Static Route Setup Figure 165 Menu12.1 Edit IP S tatic Route Menu 12.1 - Edit IP Static R oute Route #: 1 Route Name= ? Active= No Destination IP Addr ess= ? IP Subnet Mask= ? Gateway IP Address= ? Metric= 2 Private= No Press ENTER to Confirm or ES C to Cancel: The following table describes the fields for [...]

P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 296 C HAPTER 30 Network Address T ranslation (NA T) This chapter discusses how to configure NA T on the Prestige. 30.1 Using NA T Note: Y ou must create a firewall rule in ad dition to setting up SUA/NA T , to allow traffic from the W AN to be forwarded through the Prestige 30[...]

P-335 Series User’s Guide 297 Chapter 30 Network Addr ess Translation (NAT) Figure 166 Menu 4 Applying NA T for Internet Access M enu 4 - Internet Access Setup ISP's Name= M yISP Encapsulation = Ethernet Service Typ e= Standard My Login= N /A My Password = N/A Retype to C onfirm= N/A Login Serve r= N/A Relogin Eve ry (min)= N/A IP Address As[...]

P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 298 Figure 167 Menu 11.3 - R emote Node Network Layer Options IP Address Assig nment= Dynamic IP Address= N/A IP Subnet Mask= N/A Gateway IP Addr= N/A Network Address Translation= SUA Only Metric= 1 Private= N/A RIP Direction= N one Version= N/A Multicast= None Enter here to C[...]

P-335 Series User’s Guide 299 Chapter 30 Network Addr ess Translation (NAT) Figure 168 Menu 15 - NAT Setup 1. Address Mappin g Sets 2. Port Forwardin g Setup 3. Trigger Port S etup Enter Menu Selection Number: Menu 15 NA T Setup 30.3.1 Address Mapping Set s Enter 1 to bring up Menu 15.1 — Addr ess Mapping Sets . Figure 169 Menu 15.1 Addr ess Ma[...]

P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 300 Figure 170 Menu 15.1.255 SUA Address Mapping Rule s Menu 15.1 .255 - Address Mapping Rules Set Name= SUA Idx Local Start IP Local E nd IP Global Start IP Global End IP Type --- -------------- ------- -------- --------------- --------------- ------ 1. 0.0.0.0 255.255 .255.2[...]

P-335 Series User’s Guide 301 Chapter 30 Network Addr ess Translation (NAT) Figure 171 Menu 15.1.1 - Address Mappin g Rules Set Name= NAT_SET Idx Local Start IP Local End IP Global Start IP Global End IP Type --- --------------- -------------- ---- ----------- --------------- ------ 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Action= E dit Select Rule= Press [...]

P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 302 Note: Y ou must press [ENTER] at the bottom of the screen to save the whole set. Y ou must do this again if you make any cha nges to the set – including deleting a rule. No changes to the set t ake place until this action is taken Selecting Edit in the Action field and t[...]

P-335 Series User’s Guide 303 Chapter 30 Network Addr ess Translation (NAT) 30.4 Configuring a Server behind NA T Follow these steps to config ure a server behind NA T : 1 Enter 15 in the main menu to go to Menu 15 - NA T Setup. 2 Enter 2 to display Menu 15.2 - NA T Server Setup as shown next. Figure 173 Menu 15.2 - NAT Server Setup Rule Start Po[...]

P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 304 Figure 174 Multiple Servers Behind NA T Example 30.5 General NA T Examples The following are some exam ples of NA T configuration. 30.5.1 Example 1: Internet Access Only In the following Internet access example, you onl y need one rule where the ILAs (Inside Local Addresse[...]

P-335 Series User’s Guide 305 Chapter 30 Network Addr ess Translation (NAT) Figure 175 NA T Example 1 Figure 176 Menu 4 - In ternet Access Setup ISP's Name= MyISP Encapsulation= Et hernet Service Type= S tandard My Login= N/A My Password= N/ A Retype to Confi rm= N/A Login Server= N /A Relogin Every ( min)= N/A IP Address Assign ment= Dynami[...]

P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 306 Figure 177 NA T Example 2 In this case, you do exactly as above (use the convenient pre-configured SUA Only set) and also go to menu 15.2 to specify the Inside Server behind the NA T as shown in the next figure. Figure 178 Menu 15.2.1 S pecifying an Inside Server Menu 15. [...]

P-335 Series User’s Guide 307 Chapter 30 Network Addr ess Translation (NAT) 4 Y ou also map your th ird IGA to the web server and mail serv er on the LAN. T ype Server allows you to specify multiple servers, of different t ypes, to other computers behind NA T on the LAN. The exampl e situation lo oks somewhat like this: Figure 179 NA T Example 3 [...]

P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 308 Figure 180 Menu 11.3 - Remote Node Netw ork Layer Options IP Address Assign ment= Dynamic IP Address= N/A IP Subnet Mask= N /A Gateway IP Addr= N/A Network Address Translati on = Full Feature Metric= 1 Private= N/A RIP Direction= No ne Version= N/A Multicast= None Enter he[...]

P-335 Series User’s Guide 309 Chapter 30 Network Addr ess Translation (NAT) Figure 181 Example 3: Menu 15.1.1.1 Menu 15.1.1.1 Address Mappin g Rule Type= One-to-One Local IP: Start= 192.168.1.10 End = N/A Global IP: Start= 10.132.50.1 End = N/A Press ENTER to Confirm or ES C to Cancel: Press Space Bar to Toggle. Figure 182 Example 3: Final Menu 1[...]

P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 310 Figure 183 Example 3: Menu 15.2 Menu 15.2 - NAT Server Setup Rule Start Port N o. End Port No. IP Address ------------------- -------------------------------- 1. Default Default 0.0.0.0 2. 80 80 192.168.1.21 3. 25 25 192.168.1.20 4. 0 0 0.0.0.0 5. 0 0 0.0.0.0 6. 0 0 0.0.0.[...]

P-335 Series User’s Guide 311 Chapter 30 Network Addr ess Translation (NAT) Figure 185 Example 4: Menu 15.1.1.1 Addre ss Mapping Rule. Menu 15.1.1.1 Address Mappin g Rule Type= Many-One-to-One Local IP: Start= 192.168.1.10 End = 192.168.1.12 Global IP: Start= 10.132.50.1 End = 10.132.50.3 Press ENTER to Confirm or ES C to Cancel: After you’ve c[...]

P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 312 Figure 187 Menu 15.3 T rigger Port Setup Menu 15.3 - Trigger Po rt Setup Incoming Trigger Rule Name St art Port End Port Start Port End Po rt -------------------------- ----------------------------------------- --- 1. Real Audio 6970 7170 7070 707 0 2. 0 0 0 0 3. 0 0 0 0 4[...]

P-335 Series User’s Guide 313 Chapter 30 Network Addr ess Translation (NAT)[...]

P-335 Series User’s Guide Chapter 31 Enablin g the Firewall 314 C HAPTER 31 Enabling the Firewall This chapter shows you how to get started with the Prestige firewall. 31.1 Remote Management and the Firewall When SMT menu 24.1 1 is configured to allow managem ent (see the Remote Mana gement chapter) and the firewall is enabled: • The firewall b[...]

P-335 Series User’s Guide 315 Chap ter 31 Enabling the Fir ewall Figure 188 Menu 21.2 Firewa ll Setup Menu 21.2 - Firewall Setup The firewall protects a gainst Denial of Service (DoS) attacks wh en it is active. Your network is vulnera ble to attacks when the firewall is turne d off. Refer to the User's Gui de for details about the firewall [...]

P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 316 C HAPTER 32 VPN/IPSec Setup This chapter introduces the VPN SMT menus. 32.1 VPN/IPSec Overview The VPN/IPSec main SMT menu has these main submenus: 1 Define VPN policies in menu 27.1 submenus, including security po licies, endpoint IP addresses, peer IPSec router IP address and ke y managem[...]

P-335 Series User’s Guide 317 Chapter 32 VPN/IPSec Setup Figure 190 Menu 27 - VPN/IPSec Setup 1. IPSec Summary 2. SA Monitor Enter Menu Selection Number: Menu 27 VPN/IPSec Setup 32.2 IPSec Summary Screen T ype 1 in menu 27 and the n press [ENTER] to display Menu 27.1 IPSec Summary . This is a summary read-only menu of your IPSec rules (t unnels).[...]

P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 318 Local Addr St a r t When the Addr T ype field i n Menu 27.1.1 IPSec Setup is configured to Single , this is a static IP address on the LAN behind your Prestige. When the Addr T y pe field in Menu 27.1.1 IPSec Setup is configured to Range , this is the beginning (static) IP address, in a ran[...]

P-335 Series User’s Guide 319 Chapter 32 VPN/IPSec Setup Remote Addr End When the Addr T y pe field in Menu 27.1.1 IPSec Setup is configured to Single , this is the same (static) IP address as in the Remote Addr S t art field. When the Addr T y pe field in Menu 27.1.1 IPSec Setup is configured to Range , this is the end (static) IP address, in a [...]

P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 320 Figure 192 Menu 27.1.1 IPSec Setup Menu 27.1.1 – IPSec Setup Index= 1 Name= Taiwa n Active= Yes Keep Alive= No Nat Traversal= No Local ID type Con tent= My IP Addr= 0.0.0.0 Peer ID type= IP Con tent= Secure Gateway Address= zw50 test.zyxel.com.tw Protocol= 0 DNS Server= 0.0.0.0 Local: Rem[...]

P-335 Series User’s Guide 321 Chapter 32 VPN/IPSec Setup Content When you select IP in the Local ID T ype fi eld, type the IP addre ss of your computer or leave the field blank to have the Pres tige automatically use its own IP address. When you select DNS in the Local ID T ype field, type a domain name (up to 31 char - acters) by which to identi[...]

P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 322 Port S tart 0 is the default and signifies any port. T y pe a port number from 0 to 65535. Y ou cannot create a VPN tunnel if you try to connect using a port number that does no t match this port number or range of port numbers. Some of the most common IP ports are: 21, FTP; 53, DNS; 23, T [...]

P-335 Series User’s Guide 323 Chapter 32 VPN/IPSec Setup 32.3 IKE Setup T o edit this menu, the Key Management field in Menu 27.1.1 – IPSec Setup must be set to IKE . Move the cursor to the Edit Key Management Setup field in Menu 27.1.1 – IPSec Setup ; press [SP ACE BAR] to select Ye s and then press [ENTER] to display Menu 27.1.1.1 – IKE S[...]

P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 324 Figure 193 Menu 27.1.1.1 - IKE Setu p Phase 1 Negotiation Mode= Ma in Pre-Shared Key= ? Encryption Algorithm = DES Authentication Algor ithm= MD5 SA Life Time (Second s)= 28800 Key Group= DH1 Phase 2 Active Protocol= ESP Encryption Algorithm = DES Authentication Algor ithm= SHA1 SA Life Tim[...]

P-335 Series User’s Guide 325 Chapter 32 VPN/IPSec Setup 32.4 Manual Setup Y ou only configure Menu 27.1.1.2 – Manual Setup when you select Manual in the Key Management field in Menu 27.1.1 – IPSec Setup . Manual key mana gement is useful if you have problem s with IKE key management. Authentication Algorithm MD5 (Message Digest 5) and SHA1 ([...]

P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 326 32.4.1 Active Protocol This field is a combination of mode and secu rity protocols used for the VPN. See the W eb Configurator part on VPN for more information on these parameters. Table 131 Active Protocol: Encapsulation an d Security Protocol MODE SECURITY PROTOCOL T unn el ESP T ranspo r[...]

P-335 Series User’s Guide 327 Chapter 32 VPN/IPSec Setup Encryption Algorithm Press [SP ACE BAR] to choose from NULL , 3DES or DES and then press [ENTER]. Fill in the Key1 field below wh en you choose DES and fill in fields Key1 to Key3 when you choose 3DES . Select NULL to set up a tunnel witho ut encryption. When you select NULL , you do not en[...]

P-335 Series User’s Guide Chapter 33 SA Monitor 328 C HAPTER 33 SA Monitor This chapter teaches you h ow to manage your SAs by using the SA Monitor in SMT menu 27.2. 33.1 SA Monitor Overview A Security (SA) is the group of security settin gs related to a specific VPN tunnel. This menu (shown next) displays active VPN connections. Note: When there[...]

P-335 Series User’s Guide 329 Chapter 33 SA Monitor Figure 195 Me nu 27.2 - SA Monitor # --- 001 002 003 004 005 006 007 008 009 010 Name -------------------------------- Taiwan : 3.3.3.1 – 3.3.3.100 Encap. --------- Tunnel IPSec ALgorithm ---------------- ESP DES MD5 Select Command= Refresh Select Connection= N/A Press ENTER to Confirm or ESC [...]

P-335 Series User’s Guide Chapter 33 SA Monitor 330 Select Command Press [SP ACE BAR] to choose from Re fresh , Disco nnect , None , Next Page , or Previ - ous Page and then press [ENTER]. Y ou must select a conne ction in the next field when you choose the Disconne ct command. Refresh displays current active VPN connec - tions. None allows you t[...]

P-335 Series User’s Guide 331 Chapter 33 SA Monitor[...]

P-335 Series User’s Guide Chapter 34 Filter Configuration 332 C HAPTER 34 Filter Configuration This chapter shows you how to create and apply filters. 34.1 Introduction to Filters Y our Prestige uses filters to decide whether to a llow passage of a data packet and/or to make a call. There are two types of filter applications : data filtering and [...]

P-335 Series User’s Guide 333 Chapter 34 Filter Configuration 34.1.1 The Filter St ructure of the Prestige A filter set consists of one or more filter rules. Usually , you would group related rules, e.g., all the rules for NetBIOS, into a single set and gi ve it a descriptive name. The P restige allows you to configure up to twelve filter sets wi[...]

P-335 Series User’s Guide Chapter 34 Filter Configuration 334 Figure 197 Filter Rule Process Y ou can apply up to four filter sets to a particular port to block multiple types of packets. W ith each filter set having up to six rules, you can have a maximum of 24 rules active for a single port. 34.2 Configuring a Filter Set The Prestige includes f[...]

P-335 Series User’s Guide 335 Chapter 34 Filter Configuration Figure 198 Menu 21: Filter and Firewa ll Setup Menu 21 - Filter and Firewal l Setup 1. Filter Setup 2. Firewall Setup Enter Menu Selection Number: 2 Enter 1 to bring up the following menu. Figure 199 Menu 21.1: Filter Set Configuration Menu 21.1 - Filter Set Configuration Filter Filter[...]

P-335 Series User’s Guide Chapter 34 Filter Configuration 336 The protocol dependent filter rules abbreviation are listed as follows: Table 135 Rule Abbreviations Used ABBREVIA TION DESCRIPTION IP Pr Protocol SA Source Address SP Source Port number DA Destination Address DP Destination Port number GEN Of f Offset Len Length Refer to the next sect[...]

P-335 Series User’s Guide 337 Chapter 34 Filter Configuration T o configure TCP/IP rules, select TCP/IP Filter Rule from the Filter T ype field and press [ENTER] to open Menu 21.1.1.1 - TCP/IP Filter Rule , as shown next Figure 200 Menu 21.1.1.1 TCP/IP Filter Rule. Menu 21.1.1.1 - TCP/IP Fi lter Rule Filter #: 1,1 Filter Type= TCP/I P Filter Rule[...]

P-335 Series User’s Guide Chapter 34 Filter Configuration 338 The following figure illustrates th e logic flow of an IP filter . Source IP Address Enter the source IP Address of th e packet you wish to filter . This field is ignored i f it is 0.0.0.0. 0.0.0.0 IP Mask Enter th e IP mask to apply to the Source: IP Addr . 0.0.0.0 Port # Enter the so[...]

P-335 Series User’s Guide 339 Chapter 34 Filter Configuration Figure 201 Executing an IP Filter 34.2.3 Configuring a Generic Filter Rule This section shows y ou how to configure a gen e ri c filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP , it is generally easier to us e the IP rules directly . For gener[...]

P-335 Series User’s Guide Chapter 34 Filter Configuration 340 Figure 202 Menu 21.1.4.1 Gener ic Filter Rule Menu 21.1.4.1 - Generic F ilter Rule Filter #: 4,1 Filter Type= Generi c Filter Rule Active= No Offset= 0 Length= 0 Mask= N/A Value= N/A More= No Log= None Action Matched= Che ck Next Rule Action Not Matched= Check Next Rule Press ENTER to [...]

P-335 Series User’s Guide 341 Chapter 34 Filter Configuration 34.3 Example Filter Let’ s look at an example to block outside use rs from accessing the Prestige via telnet. Figure 203 T elnet Filter Example 1 Enter 21 from the main menu to open Menu 21 - Filter and Firewall Setup . 2 Enter 1 to open Menu 21.1 - Filter Set Configuration . 3 Enter[...]

P-335 Series User’s Guide Chapter 34 Filter Configuration 342 Figure 204 Example Filter: Menu 21 .1.3.1 Menu 21.1.3.1 - TCP/IP Filte r Rule Filter #: 3,1 Filter Type= TCP /IP Filter Rule Active= Yes IP Protocol= 6 IP S ource Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 23 Por t # Comp= Equal Source: IP Addr= 0.0.0.0 IP Mask= 0[...]

P-335 Series User’s Guide 343 Chapter 34 Filter Configuration Figure 205 Menu 21.1.3 - Filter Rules Summary # A Type Filter Rules M m n - - ---- ------------------ --------------------------------------- - - - 1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F 2 N 3 N 4 N 5 N 6 N Enter Filt er Rule Number (1-6) to Configure: Example Filter Rules Su[...]

P-335 Series User’s Guide Chapter 34 Filter Configuration 344 Figure 206 Protocol and Device Filter Set s 34.5 Firewall V ersus Filters Firewall configuration is discussed in the firewall chapters of this manual. Furt her comparisons are also made between filtering, NA T and the firewall. 34.6 Applying a Filter This section shows you where to app[...]

P-335 Series User’s Guide 345 Chapter 34 Filter Configuration Figure 207 Filtering LAN T raffic Menu 3.1 - LAN Port Filter S etup Input Filter Set s: protocol filte rs= device filte rs= Output Filter Se ts: protocol filte rs= device filte rs= Press ENTER to Confirm or ES C to Cancel: 34.6.2 Applying Re mote Node Filters Go to menu 1 1.5 (shown be[...]

P-335 Series User’s Guide Chapter 35 SNMP Configuration 346 C HAPTER 35 SNMP Configuration This chapter explains SNMP Configuratio n menu 22. 35.1 About SNMP Simple Network Management Protocol is a protocol used for exchanging man agement information between network devices. SNMP is a member of the TCP/IP pro tocol suite. Y our Prestige supports [...]

P-335 Series User’s Guide 347 Chapter 35 SNMP Configuration The managed devices cont ain object variables/ managed objects that define each piece of information to be collected ab out a device. Examples of vari ables include the number of packets received, node port status etc. A Ma nagement Information Ba se (MIB) is a collection of managed obje[...]

P-335 Series User’s Guide Chapter 35 SNMP Configuration 348 Figure 210 Menu 22 SNMP Configura tion Menu 22 - SNMP Configuration SNMP: Get Community= publ ic Set Community= publ ic Trusted Host= 0.0.0 .0 Trap: Community= public Destination= 0.0. 0.0 Press ENTER to Confirm or ES C to Cancel: The following table describes the SNMP configuration para[...]

P-335 Series User’s Guide 349 Chapter 35 SNMP Configuration The port number is its interface index under the interface group. Table 140 Ports and Permanent Virtua l Circuits PORT PVC (PERMANENT VIRTUAL CIRCUIT) 1 Ethernet LAN 2 1 3 2 … … 13 12 14 xDSL 4 linkUp ( defined in RFC-1215 ) A trap is sent with the port number . 5 authenticationFailu[...]

P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 350 C HAPTER 36 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status , port status, log and trace capabiliti es and upgrades for the system software. This chapte r desc[...]

P-335 Series User’s Guide 351 Chapter 36 System Information and Diagnosis Figure 212 Menu 24.1 System Maintena nce : S tatus Menu 24.1 - System Maintenance - Status 01:55:23 Sat. Jan. 01, 2000 Port Status TxPkts RxPkts Cols Tx B/s Rx B/s Up Time WAN Down 0 0 0 0 0 0:00:00 LAN 1000M/Full 0 0 0 0 0 1:21:23 Port Ethernet Address IP Address IP Mask D[...]

P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 352 36.2 System Information T o get to the System Information: 1 Enter 24 to display Menu 24 — System Information a nd Console Port Speed . 2 Enter 2 to display Menu 24.2 — System Information . 3 From this menu you have two ch oices as shown in the ne xt figure: Figure 213 [...]

P-335 Series User’s Guide 353 Chapter 36 System Information and Diagnosis Figure 214 Menu 24.2.1 System Maintenance : Information Menu 24.2.1 - System Maintenance - Information Name: P- 335/P-335WT.zyxel.com.tw Routing: IP ZyNOS F/ W Version: V3.60(JO.3) | 8/13/2004 Country Code: 255 LAN Ethern et Address: 00:A0:C5:01:21:80 IP Add ress: 192.168.1[...]

P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 354 Figure 215 Menu 24.2.2 – System Mainten ance – Change Console Port Speed Console Port Speed: 9600 Press ENTER to Confirm or ES C to Cancel: Menu 24.2.2 System Maintenance : Change Co nsole Port S peed 36.3 Log and T race There are two logging faci lities in the Prestige[...]

P-335 Series User’s Guide 355 Chapter 36 System Information and Diagnosis 36.3.1.1 CDR CDR Message Format SdcmdSyslogSend ( SYSLOG_CDR , SYSLOG_INFO, String); String = board xx line xx ch annel xx, call xx, str board = the hardware board I D line = the WAN ID in a board Channel = channel ID within the WAN call = the call refer ence number which s[...]

P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 356 36.3.1.3 Filter log Filter log Message Format SdcmdSyslogSend(SYSLOG_FILLO G, SYSLOG_NOTICE, String ); String = IP[Src=xx.xx.xx.xx Dst=xx.xx.xx.xx prot spo=xxxx dpo=xxxx] S04>R01mD IP[…] is the packet header and S04>R01mD means filte r set 4 (S) and rule 1 (R), matc[...]

P-335 Series User’s Guide 357 Chapter 36 System Information and Diagnosis 36.3.1.5 Firewall log Firewall Log Message Format SdcmdSyslogSend(SYSLOG_FIREW ALL, SYSLOG_NOTICE, buf); buf = IP[Src=xx.xx.xx.xx : s po=xxxx Dst=xx.xx.xx.xx : dpo=xxxx | pro t | rule | action] Src: Source Address spo: Source port (empty mean s no source port information) D[...]

P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 358 Figure 217 IP Frame: ENET0-RECV Size: 44/ 44 Time: 17:02:44.262 Frame Type: IP Header: IP Version = 4 Header Length = 20 Type of Service = 0x00 (0) Total Length = 0x002C (44) Identification = 0x0002 (2) Flags = 0x00 Fragment Offset = 0x00 Time to Live = 0xFE (254) Protocol [...]

P-335 Series User’s Guide 359 Chapter 36 System Information and Diagnosis Figure 218 Menu 24.4 System Maintenance : Diagnostic Menu 24.4 - System Maintena nce - Diagnostic TCP/IP 1. Ping Host 2. WAN DHCP Release 3. WAN DHCP Renewal 4. Internet Setup T est System 11. Reboot System Enter Menu Selectio n Number: Host IP Address= N/ A 36.4.1 W AN DHC[...]

P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 360 W AN D HCP Renewal Enter 3 to renew your W AN DHCP settings. Internet Setu p T est Enter 4 to test the Internet setup. Y o u can also test the Internet setup in Menu 4 - Internet Access . Please refer to the Internet Access chap ter for more details. This feature is only av[...]

P-335 Series User’s Guide 361 Chapter 36 System Information and Diagnosis[...]

P-335 Series User’s Guide Chapter 37 Firm ware and Configuration File Maintenance 362 C HAPTER 37 Firmware and Configuration File Maintenance This chapter tells y ou how to backup and restor e your configuration file as well as upload new firmware and configuration files. 37.1 Filename Conventions The configuration file (often ca lled the romfile[...]

P-335 Series User’s Guide 363 Chapter 37 Firmw are and Configu ration File Mainten ance The following table is a summary . Please note that the internal filename refe rs to the filename on the Prestige and the external filename refers to the filename not on the Prestige, that is, on your computer , local network or FTP site and so the name (but n[...]

P-335 Series User’s Guide Chapter 37 Firmwa re and Configuration F ile Maintenance 364 Figure 220 T e lnet in Menu 24.5 Menu 24.5 - System Maintenan ce - Backup Configuration To transfer the configuration file to your workstation , follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP ad dre[...]

P-335 Series User’s Guide 365 Chapter 37 Firmw are and Configu ration File Mainten ance 37.2.3 Example of FTP Comm ands from the Command Line Figure 221 FTP Session Example 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel.rom 200 Port command okay 150 Opening data connection for STOR ras 226 File re[...]

P-335 Series User’s Guide Chapter 37 Firm ware and Configuration File Maintenance 366 37.2.6 Backup Configuration Using TFTP The Prestige support s the up/downloading of the firmware and the configuration file using TFTP (T rivial File T ransfer Protocol) over LA N. Although TFTP should work over W AN as well, it is not recommended. T o use TFTP [...]

P-335 Series User’s Guide 367 Chapter 37 Firmw are and Configu ration File Mainten ance 37.2.8 GUI-based TFTP Client s The following table describes some of the fiel ds that you may see in GUI-based TFTP clients. Table 147 General Commands for GUI-based TFTP Clients COMMAND DESCRIPTION Host Enter the IP address of the Prestige. 192.168 .1.1 is th[...]

P-335 Series User’s Guide Chapter 37 Firmwa re and Configuration F ile Maintenance 368 Figure 222 T elnet into Menu 24.6. Menu 24.6 -- System Maintena nce - Restore Configuration To transfer the firmware and con figuration file to your workstation, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" [...]

P-335 Series User’s Guide 369 Chapter 37 Firmw are and Configu ration File Mainten ance 37.3.2 Restore Usin g FTP Session Ex ample Figure 223 ftp> put config.rom rom-0 200 Port command okay 150 Opening data connection for STOR rom-0 226 File received OK 221 Goodbye for writing flash ftp: 16384 bytes sent in 0.0 6Seconds 273.07Kbytes/sec. ftp&g[...]

P-335 Series User’s Guide Chapter 37 Firmwa re and Configuration F ile Maintenance 370 Figure 224 Menu 24.7.1 - System Mainten ance - Upload System Firmware To upload the system firmwar e, follow the procedure below: 1. Launch the FTP client o n your workstation. 2. Type "open" and the IP address of your system. Then type "root&quo[...]

P-335 Series User’s Guide 371 Chapter 37 Firmw are and Configu ration File Mainten ance 4 Enter your password as requested (the default is “1234”). 5 Enter “bin” to set transfer mode to binary . 6 Use “put” to transfer files from the comp uter to the Prestige, for example, “p ut firmware.bin ras” transfers the firmware on your com[...]

P-335 Series User’s Guide Chapter 37 Firm ware and Configuration File Maintenance 372 3 Enter the command “sys stdio 0” to disable th e console t imeout, so the TFTP transfer will not be interrupted. Enter “co mmand sys stdio 5” to restore the five-minute console timeout (default) when the f ile transfer is complete. 4 Launch the TFTP cli[...]

P-335 Series User’s Guide 373 Chapter 37 Firmw are and Configu ration File Maint enance[...]

P-335 Series User’s Guide Chapter 38 System Main tenance 374 C HAPTER 38 System Maintenance This chapter leads you through SM T menus 24.8 to 24.10. 38.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the ma in system firmware. The CI provides much of the same functionality as the SMT , while a dding some low-level se tup and [...]

P-335 Series User’s Guide 375 Chapter 38 System Mainte nance 38.1.2 Command Usage A list of commands can be found b y typing help or ? at the command prompt. Always type the full command. T ype exit to return to the SMT ma in menu when finished. Figure 228 Copyright (c) 1994 - 2005 Zy XEL Communications Corp. P-335/P-335WT> ? Valid commands ar[...]

P-335 Series User’s Guide Chapter 38 System Main tenance 376 Figure 230 Budget Management Menu 24.9.1 - Budget Management Remote Node Connecti on Time/Total Budget Elapsed Time/Total Period 1.MyISP No Budget No Budget The total budget is the time li mit on the accumulated time for ou tgoing calls to a remo te node. When this limit is reached, th [...]

P-335 Series User’s Guide 377 Chapter 38 System Mainte nance Figure 231 Menu 24.9.2 - Call History M enu 24.9.2 - Call History Phone Number Dir Rate #call Max Min Total 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Ente r Entry to Delete(0 to exit): The following table describes the fields in this menu. Table 149 Call History Fields FIELD DESCRIPTION Phone Numb[...]

P-335 Series User’s Guide Chapter 38 System Main tenance 378 Figure 232 Menu 24: System Maintenan ce Menu 24 - System Maintenance 1. System Status 2. System Information and C onsole Port Speed 3. Log and Trace 4. Diagnostic 5. Backup Configuration 6. Restore Configuration 7. Upload Firmware 8. Command Interpreter Mode 9. Call Control 10. Time and[...]

P-335 Series User’s Guide 379 Chapter 38 System Mainte nance Figure 233 Menu 24.10 - System Maintenance - Time and Date Setting Time Protocol= NTP (RF C-1305) Time Server Address= t ime-b.nist.gov Current Time: 08 : 07 : 14 New Time (hh:mm:ss): 08 : 06 : 48 Current Date: 2003 - 12 - 24 New Date (yyyy-mm-dd): 2003 - 12 - 24 Time Zone= GMT Daylight[...]

P-335 Series User’s Guide Chapter 38 System Mainte nance 380 38.3.1 Resetting the T ime The Prestige resets the time in three instances: 1 On leaving menu 24.10 after making changes. 2 When the Prestige starts up, if there is a timeserver configured in menu 24.10. 3 24-hour intervals after starting. End Date Enter the month a nd day that your day[...]

P-335 Series User’s Guide 381 Chapter 38 System Main tenance[...]

P-335 Series User’s Guide Chapter 39 Remo te Management 382 C HAPTER 39 Remote Management This chapter covers remote ma nagement (SMT menu 24.1 1). 39.1 Remote Management Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) from which computers. Y ou may manage your Prestige from a remo [...]

P-335 Series User’s Guide 383 Chapter 39 Remote Manageme nt Figure 234 Menu 24.11 - Remote Management Control TELNET Server: Port = 23 Access = ALL Secure Client IP = 0.0.0.0 FTP Server: Port = 21 Access = ALL Secure Client IP = 0.0.0.0 Web Server: Port = 80 Access = ALL Secure Client IP = 0.0.0.0 SNMP Service: Port = 161 Access = LAN only Secure[...]

P-335 Series User’s Guide Chapter 39 Remo te Management 38 4 3 The IP address in the Secure Client IP field (menu 24.1 1) does not ma tch the client IP address. If it does not match, the Prestig e will disconnect the session immediately . 4 There is an SMT console session running. 5 There is already another remote management session with an equal[...]

P-335 Series User’s Guide 385 Chapter 39 Remote Manag ement[...]

P-335 Series User’s Guide Chapter 40 Call Scheduling 386 C HAPTER 40 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulati on only) allows you to dictate when a remote node should be called and for how long. 40.1 Introduction to Call Scheduling The call scheduling feature allows the Prestige to manage a remote node and dictat[...]

P-335 Series User’s Guide 387 Chapter 40 Call Scheduling Y ou can design up to 12 schedule sets but you can only apply up to fo ur schedule sets for a remote node. Note: T o delete a schedule set, enter the set number and press [SP ACE BAR] and then [ENTER ] (or delete) in the Edit Name field. T o setup a schedule set, select the schedule set you[...]

P-335 Series User’s Guide Chapter 40 Call Scheduling 388 Once your schedule sets are conf igured, yo u must then apply them to the desired remote node(s). Enter 1 1 from the Main Menu and then enter the tar get remote node index. Using [SP A CE BAR] , select PPPoE or PPPoA in the Encapsulation field and then press [ENTER] to make the schedule set[...]

P-335 Series User’s Guide 389 Chapter 40 Call Scheduling[...]

P-335 Series User’s Guide Chapter 41 Trou bleshooting 390 C HAPTER 41 T roubleshooting This chapter covers potential proble ms and the corresponding remedies. 41.1 Problems St arting Up the Prestige Table 153 Troubleshooting Starting Up Your Prestige PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I turn on the Prestige. Make sure that th[...]

P-335 Series User’s Guide 391 Chapter 41 Trou bleshooting 41.3 Problems with the W AN Table 155 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The W AN LED is off. Check the connections between the Pre stige WAN port and the cable/DSL modem or ethernet jack. Check whether your ca ble/DSL device requires a crossover or straight-throu gh cable. [...]

P-335 Series User’s Guide Chapter 41 Trou bleshooting 392 41.4 Problems Accessing the Prestige Table 156 Troubleshooting Accessing the Prestig e PROBLEM CORRECTIVE ACTION I cannot access the Prestige. The username is “admin”. The default password is “1234”. The Password and Username fields are case-sensitive. Make sure that you enter the [...]

P-335 Series User’s Guide 393 Chapter 41 Trou bleshooting Problems with the Password Problems with Remote Management 41.5.1 Pop-up Windows, Ja vaScript s and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-up windows from your dev ice. • JavaScripts (enabled by default). Parental Control is configu[...]

P-335 Series User’s Guide Chapter 41 Trou bleshooting 394 • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here. Screens for other Internet Explorer versions may vary . 41.5.1.1 Internet Explorer Pop-up Blockers Y ou may have to disable po p-up blocking to log into your device. Either disable pop-up blocking ([...]

P-335 Series User’s Guide 395 Chapter 41 Trou bleshooting Figure 239 Intern et Options 3 Click Apply to save this setting. 41.5.1.1.2 Enable pop-up Blockers with Exceptions Alternatively , if you only want to allow pop-up win d ows from your de vice, see the following steps. 1 In Internet Explorer , select To o l s , Internet Options and then the[...]

P-335 Series User’s Guide Chapter 41 Trou bleshooting 396 Figure 240 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites . Note: If you change the IP address o f you[...]

P-335 Series User’s Guide 397 Chapter 41 Trou bleshooting Figure 241 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 41.5.1.2 JavaScript s If pages of the web configurat or do not display properly in Inte rnet Explorer , check that JavaScripts are allowed. 1 In Internet Explorer , click T[...]

P-335 Series User’s Guide Chapter 41 Trou bleshooting 398 Figure 242 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting . 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is sele cted (the default). 6 Click OK to clos e the window .[...]

P-335 Series User’s Guide 399 Chapter 41 Trou bleshooting Figure 243 Security Settings - Java Scripting 41.5.1.3 Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions ma ke sure that a safety level is sel[...]

P-335 Series User’s Guide Chapter 41 Trou bleshooting 400 Figure 244 Security Settings - Java 41.5.1.3.1 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Adva nced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected. 3 Click OK to clos e the window .[...]

P-335 Series User’s Guide 401 Chapter 41 Trou bleshooting Figure 245 Java (Sun) 41.5.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX cont rols or to use T rend Micro Security Serivces. Make sure that ActiveX controls are allowed in Internet Explorer . Screen shots for Internet Explorer 6 ar[...]

P-335 Series User’s Guide Chapter 41 Trou bleshooting 402 Figure 246 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins . 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected. 6 Then click the OK button.[...]

P-335 Series User’s Guide 403 Chapter 41 Trou bleshooting Figure 247 Security Setting ActiveX Controls[...]

P-335 Series User’s Guide Appendix A Prod uct Specification s 404 Appendix A Product S pecifications See also the Introduction chapter for a general ov erview of the key featur es. S p ecification T a bles Table 160 Device Default IP Address 192.168 .1.1 Default Subnet Mask 255.255 .255.0 (24 bits) Default Password 1234 DHCP Pool 192.168.1.32 to [...]

P-335 Series User’s Guide 405 Appendix A Product Sp ecifications Management Embedded Web Configurator Menu-driven SMT (System Manag ement T erminal) mana gement CLI (Command Line Interpreter) Remote Management via T elnet or Web SNMP manageable FTP for firmware downloading, config uration ba ckup and restoration. Syslog. Built-in Diagnostic T ool[...]

P-335 Series User’s Guide Appendix B PPPoE 406 Appendix B PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP ov er Ethernet, RFC 2516) from your computer to an A TM PVC (Permanent V irt ual Circuit) whic h connects to a DSL Access Concentrator where the PPP session terminates (see the next figure). One PVC can support an[...]

P-335 Series User’s Guide 407 Appendix B PPPoE Figure 248 Single-Compute r per Router Hardwa re Configuration How PPPoE W orks The PPPoE driver makes the Ethernet appea r as a serial link to the computer and the computer runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC). Between the AC and an ISP , the [...]

P-335 Series User’s Guide Appendix C PPTP 408 Appendix C PPTP What is PPTP? PP TP (Point-to-Point T unneling Protocol) is a Microsoft proprietary pro tocol (RFC 2637 for PP TP is informational only) to tunnel PPP frames. How can we transport PP P frames from a computer to a broadband modem over Ethernet? A solution is to build PP TP in to the ANT[...]

P-335 Series User’s Guide 409 Appendix C PPTP PPTP Protocol Overview PP TP is very similar to L2TP , since L2TP is based on both PP TP and L2F (Cisco’ s Layer 2 Forwarding). Conceptually , there are three pa rties in PP TP , namely the PNS (PP TP Network Server), the P AC (PP TP Access Concentrator) a nd the PP TP user . The PNS is the box that[...]

P-335 Series User’s Guide Appendix C PPTP 410 Figure 252 Example Message Exchange between Computer and an ANT PPP Dat a Connection The PPP frames are tunneled between the PN S and P AC over GRE (General Routing Encapsulation, RFC 1701, 1702 ). The individual calls within a tunnel are distingu ished using the Call ID field in the GRE header .[...]

P-335 Series User’s Guide 411 Appendix C PPTP[...]

P-335 Series User’s Guide Appendix D Print Server 412 Appendix D Print Server This appendix shows you h ow to set up a pr int server for the follo wing op erating systems: •W i n d o w s 9 5 •W i n d o w s 9 8 • Windows 98 SE (S econd Edition) •W i n d o w s M E • Wind o ws 2000 • W indows XP • W indows NT 4.0 • MAC OS X •U s e [...]

P-335 Series User’s Guide 413 Appendix D Print Server Inst allation Requirement s T o install the print server driver you will need the following requir ements • Microsoft W indows 95, W i ndows 98 SE (Second Edition) , W indows ME, W indows NT 4.0, W indow s 2000, W indo ws XP or Macintosh OS X • A computer with an Ethernet port • RJ-45 ca[...]

P-335 Series User’s Guide Appendix D Print Server 414 Figure 254 Network Print Server Se tup Wizard : Welcome 4 The Select A Print Server screen displays. The wizard auto matically detect s whether or not a print server is connected to your computer . Make sure that your Prestige is correctly connected and a compatible USB printer is co nnected t[...]

P-335 Series User’s Guide 415 Appendix D Print Server Figure 255 Network Print Server Setup Wi zard : Select A Print Server 5 The Change Set tings screen displa ys. Select the Y es, I want to change settings radio button, type a password and click Next to change your print ser ver settings. Alternatively select No, I don’t want to change settin[...]

P-335 Series User’s Guide Appendix D Print Server 416 Figure 256 Network Print Server Setup Wizard : Change Settings 6 Select the printer which is connected to the Prestige USB port. 7 Click Next to continue.[...]

P-335 Series User’s Guide 417 Appendix D Print Server Figure 257 Network Print Server Setup Wizard : Select A Printer 8 If your printer is not listed , you can use the pop-up help dialog box to guide you through the add printer process . After you have added a printer , the Select A Printer screen displays again. Select the printer you have adde [...]

P-335 Series User’s Guide Appendix D Print Server 418 Figure 259 Network Print Server Setup Wizard : Summary 10 Click Finish to save and close your Network Print Server Setup W izard . Y our print server setup is complete. Figure 260 Network Print Server Setup Wi zard : Installation Complete[...]

P-335 Series User’s Guide 419 Appendix D Print Server Windows 95/98/ME/NT/2000/XP : Print Server Setup Wi zard The following Setup Wizard for Windows 98/ME/NT/2000/XP uses a print server protocol called Line Printer Daemon (LPD ). Y ou must use this wizard if yo u want to set up your network print server on the following operating systems: •W i[...]

P-335 Series User’s Guide Appendix D Print Server 420 Figure 262 Network Print Monitor Setup : W elcome 4 The Choose Destination Lo cation screen displays. C hoose a f ile location to install your print monitor and click Next to continue. Figure 263 Network Print Monitor Setup : L o cation 5 The Setup Complete screen displays. Click Finish to sav[...]

P-335 Series User’s Guide 421 Appendix D Print Server Figure 264 Network Print Monito r Setup : Complete Windows 2000/NT/XP : Computer W izard Use the following wizard if you do not want to use the provided setup wizards.W i ndows 95, W indows 98, W indows 98 SE (Sec ond Edition) and W indows ME have similar print server setups. 1 Click St a r t [...]

P-335 Series User’s Guide Appendix D Print Server 422 Figure 266 Add Printer Wizard W e lcome Screen 4 Select the Local printer radio button. 5 Click Next to continue. Figure 267 Local Printer Screen 6 Select the Create a new port radio b utton. 7 Choose S tandard TCP/IP Port from the Ty p e drop-down list box. 8 Click Next to continue.[...]

P-335 Series User’s Guide 423 Appendix D Print Server Figure 268 Select Printer Port Screen 9 Follow the on-screen instructions and click Next to continue. Figure 269 Add S tandard TCP/IP Printer Port Screen 10 T ype the IP Addr e ss of your Prestige. A default Port Name displays as you type the IP Address . Alternatively type a dif f erent name [...]

P-335 Series User’s Guide Appendix D Print Server 424 Figure 270 Add Port Screen 12 Select the Custom radio button and click the Setti ngs… button. Fill in additional print server port information in the following screen. Figure 271 Additional Port Infor mation Screen 13 Select the LPR radio button as the printing Pr otocol . 14 Ty p e LP1 in t[...]

P-335 Series User’s Guide 425 Appendix D Print Server Figure 272 Port Settings Screen 16 Make sure that your printer po rt settings are correct. Click the Finish button to complete printer TCP/IP and port set up and then return to the Add Printer Wizard . Figure 273 Add S tandard TCP/IP Printer Port Complete 17 Select the make of the printer that[...]

P-335 Series User’s Guide Appendix D Print Server 426 Figure 274 Add Printer Screen 21 If the following screen displays, select Keep existing driver radio button if you already have a printer driver installed on your comput er and you do not want to change it. 22 Click Next to continue. Figure 275 Use Existing Driver Screen 23 T ype a name to ide[...]

P-335 Series User’s Guide 427 Appendix D Print Server Figure 276 Name Y our Printer Screen 24 Select the Do not share this printer radio button. 25 Click Next to proceed to the following screen. Figure 277 Printer Sharing Screen 26 These fields are optional. T ype wher e your printer is located in the Location field. T ype additional information [...]

P-335 Series User’s Guide Appendix D Print Server 428 Figure 278 Location and Comme nt Screen 28 Select the Ye s radio button and then click the Next button if you want to print a test page. A pop-up screen displays to ask if the test page printed correctly . Otherwise select the No radio button and then click Nex t to continue. Figure 279 Print [...]

P-335 Series User’s Guide 429 Appendix D Print Server Figure 280 Add Printer Wi zard Complete Macintosh OS X Use the following steps to set up a pr int server on your Macintosh co mputer . 1 Click the Print Center icon located in the Macintosh Do ck. Proceed to step 6 to continue. If the Print Center ic on is not in the Macintosh Do c k proceed t[...]

P-335 Series User’s Guide Appendix D Print Server 430 Figure 283 Applications Folder 5 Double-click the Print Center icon. Figure 284 Utilities Folder 6 Click the Add icon at the top of the screen. Figure 285 Printer List Folder 7 Set up your printer in the Printer List configuration screen. Select IP Printing from the drop-down list box. 8 In th[...]

P-335 Series User’s Guide 431 Appendix D Print Server Figure 286 Printer Configuration 12 Click Add to select a printer model, save a nd close the Printer List configuration screen. Figure 287 Printer Model 13 The Name “ LP1 on 192.168.1.1 ” di splays in the Printer List field. The default printer Name displays in bold ty pe.[...]

P-335 Series User’s Guide Appendix D Print Server 432 Figure 288 Print Server 14 Y our Macintosh print server set up is comp lete. Y ou can now use the Prestige’ s print server to print from a M acintosh computer . Refer to the “Print Server” on page 249 for information on yo ur Prestige print serv er configuration screen.[...]

P-335 Series User’s Guide 433 Appendix D Print Server[...]

P-335 Series User’s Guide Appendix E Print Serv er Specifications 434 Appendix E Print Server S pecifications This appendix provides details on the pr int server interface and system requirements. Table 162 Print Server Interface PRINT SERVER INTERFACE USB USB 1.1 (full speed) - compliant port, 1.5Mbps (low speed) and 12Mbps (full speed) data tra[...]

P-335 Series User’s Guide 435 Appendix E Print Server Specifica tions CANON i255 Inkjet CANON i320 Inkjet CANON i355 Inkjet CANON i450 Inkjet CANON i455 Inkjet CANON i470D Inkjet CANON i475D Inkjet CANON i550 Inkjet CANON i560 Inkjet CANON i6100 Inkjet CANON i6500 Inkjet CANON i850 Inkjet CANON i865 Inkjet CANON i9100 Inkjet CANON i950 Inkjet CAN[...]

P-335 Series User’s Guide Appendix E Print Serv er Specifications 436 EPSON S tylus C40 Inkjet Disable bi-directional support on printer. EPSON S tylus C43UX Inkjet EPSON S tylus C60 Inkjet Disable bi-directional support on printer. EPSON S tylus C63 Inkjet EPSON S tylus C83 Inkjet EPSON S tylus Color 1 160 Inkjet Di sable bi-directional support [...]

P-335 Series User’s Guide 437 Appendix E Print Server Specifica tions HP DeskJet 930C Inkjet HP LaserJet 1200 Lase r Disable bi-directional support on printer. HP LaserJet 1220 Lase r Disable bi-directional support on printer. HP LaserJet 1300 La ser HP LaserJet 2200 Lase r Disable bi-directional support on printer. HP LaserJet 2200D Laser Disabl[...]

P-335 Series User’s Guide Appendix E Print Serv er Specifications 438 LEXMARK T420 Laser LEXMARK T620 Laser LEXMARK W812 Laser LEXMARK Z42 Inkjet LEXMARK Z43 Inkjet LEXMARK Z45 Inkjet LEXMARK Z55 Inkjet LEXMARK Z705 Inkjet LEXMARK E230 Laser LEXMARK X6170 MFP LEXMARK Z515 Inkjet OKI B4350 Laser SAMSUNG ML-1710 Lase r SAMSUNG ML-1750 Lase r SAMSUN[...]

P-335 Series User’s Guide 439 Appendix E Print Server Specifica tions[...]

P-335 Series User’s Guide Appendix F Print Se rver Specifications 440 Appendix F NetBIOS Filter Commands The following describes the Ne tBIOS packet filter commands. Introduction NetBIOS (Network Basic Input/Output System ) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a LAN. For some dial-up services [...]

P-335 Series User’s Guide 441 Appendix F Print Server Specifications The filter types and their defa ult settings are as follows. Table 165 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE Between LAN and WAN This field displays whether NetBIOS packets are blocked or forwarded between the LAN and the WAN. Block IPSec Packets This field di[...]

P-335 Series User’s Guide Appendix G Log Descriptions 442 Appendix G Log Descriptions Configure centralized logs using the embedded web configurator; see online help for details. This appendix provides descrip tions of example log messages. Table 166 System Error logs LOG MESSAGE DESCRIPTION %s exceeds the max. number of session per host! This at[...]

Table 168 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can pass through the firewall. Table 169 ICMP Type and Code Explanations TYPE CODE DESCRIPTION 0 Echo Reply 0 Echo reply message 3 Destination Unreachable 0 Net unreachable 1 Host unreachable 2 Protocol unreachable 3 Port unreachable 4 A packet that needed fragment [...]

P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Addr ess 444 Appendix H Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software com[...]

P-335 Series User’s Guide 445 Appendix H Setting up Your Compu ter’s IP Address Figure 289 WIndows 95/98 /Me: Networ k: Configu ration Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks. If you need the adapter[...]

P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Address 446 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect. Configuring 1 In the Network window Configuration tab, select [...]

P-335 Series User’s Guide 447 Appendix H Setting up Your Compu ter’s IP Address Figure 291 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’ s IP address, remove previ ously installed gateways. • If you have a gate way IP address, type it in the New gateway field and click[...]

P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Address 448 Figure 292 Windows XP: S tart Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 293 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .[...]

P-335 Series User’s Guide 449 Appendix H Setting up Your Compu ter’s IP Address Figure 294 Windows XP: Control Panel: Network Connections: Proper ties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and click Properties . Figure 295 Windows XP: Local Area Conne ction Properties 5 The Internet Pr otocol TCP/IP Properties [...]

P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Address 450 • If you have a static IP address click Us e the following IP Address and fill in the IP addr ess , Subnet mask , and Default gateway fields. Click Advanced . Figure 296 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP address , remo[...]

P-335 Series User’s Guide 451 Appendix H Setting up Your Compu ter’s IP Address 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain DNS se rver address automatically if you do not know your DNS server IP address(es ). • If you know your DNS se rver IP address(es), click Use the following DNS[...]

P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Address 452 Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Contr ol Panel . Figure 298 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list.[...]

P-335 Series User’s Guide 453 Appendix H Setting up Your Compu ter’s IP Address Figure 299 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configur e: list. 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP[...]

P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Address 454 • Selec t Built-in Ethernet from the Show list. • Click the TCP/IP tab. 3 For dynamically assigned settings, select Using DHCP from the Configure list . Figure 301 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Co[...]

P-335 Series User’s Guide 455 Appendix H Setting up Your Compute r’s IP Address[...]

P-335 Series User’s Guide Appendix I Wireless LANs 456 Appendix I Wireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pe ndent (Ad-hoc) WLAN that connects a set of computers with wireless stations (A, B, C). [...]

P-335 Series User’s Guide 457 Appendix I Wireless LANs Figure 303 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This type of wireles[...]

P-335 Series User’s Guide Appendix I Wireless LANs 458 Figure 304 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.1 1a/b/g wireless devices. Channels available depend on your g eographical area. Y ou may have a choice of channels (for your region) so you should use a di fferent ch annel th an an adjacent AP (acc[...]

P-335 Series User’s Guide 459 Appendix I Wireless LANs Figure 305 RTS / CT S When station A sends data to the AP , it might no t know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss of me ssages [...]

P-335 Series User’s Guide Appendix I Wireless LANs 460 A large Fragmentation Thr eshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks tha t are prone to interference. If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previously) you set t[...]

P-335 Series User’s Guide 461 Appendix I Wireless LANs IEEE 802.1x In June 2001, the IEEE 802.1x st andard was designed to extend th e features of IEEE 802.1 1 to support extended authentication as well as providing additional accounting and control features. It is supported by W indows XP and a number of network devices. So me advantages of IEEE[...]

P-335 Series User’s Guide Appendix I Wireless LANs 462 • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access- Request message. The following types of RADIUS messages are exchanged between the a ccess point and the RADI[...]

P-335 Series User’s Guide 463 Appendix I Wireless LANs 3 The wireless station replies with identity info rmation, including username and password. The RADIUS server checks the user informa tion against its user profile database and determines whether or not to au thenticate the wireless station. T ypes of Authentication This appendix discusses so[...]

P-335 Series User’s Guide Appendix I Wireless LANs 464 PEAP (Protected EAP) Like EAP-TTLS, server-side certific ate authentication is used to establish a secure connection, then use simple username and p assword methods thro ugh the secured co nnection to authenticate the clients, thus hiding client identity . However , PEAP only supports EAP met[...]

P-335 Series User’s Guide 465 Appendix I Wireless LANs Shared key authentication involves a four -mess age procedure. A wire less station sends a shared key authentication request to the AP , which will then reply with a challenge text message. The wireless station must then use the AP’ s default WEP key to encrypt the challenge text and return[...]

P-335 Series User’s Guide Appendix I Wireless LANs 466 Key differences between WP A(2) and WEP are improved data encryption and user authentication. Encryption Both WP A and WP A2 improve data encryption by using T emporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IE EE 802.1x. In addition to TKIP , WP A2 also uses Advanced[...]

P-335 Series User’s Guide 467 Appendix I Wireless LANs Security Parameters Summary Refer to this table to see what other secur ity parameters you shou ld configure for each Authentication Method/ key management prot ocol type. MAC address filters are not dependent on how you config ure these security features. Table 172 Wireless Security Relation[...]

P-335 Series User’s Guide Appendix I Wireless LANs 468 Figure 308 Roaming Example The steps below describe the roaming process. 1 As wireless station Y moves from the coverage area of access point P1 to that of access point 2 P2 , it scans and uses the si gnal of access point P2 . 3 Access point P2 acknowledges the presence of wireless station Y [...]

P-335 Series User’s Guide 469 Appendix I Wireless LANs[...]

P-335 Series User’s Guide Appendix J Antenna Selection and Positioning Recommen dation 470 Appendix J Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air . A tran smitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air . The antenna also operates in revers[...]

P-335 Series User’s Guide 471 Appendix J Antenna Sele ction and Positioning Recom mendation • Omni-directional antennas send the RF signal out in all directions on a horizontal p lane. The covera ge area is torus -shaped (lik e a donut) which makes these antennas ideal for a room environment. W ith a wide coverage area, it is possible to make c[...]

P-335 Series User’s Guide Appendix K Br ute-Force Password G uessing Prot ection 472 Appendix K Brute-Force Password Guessing Protection The following describes the commands for enablin g, disabling and configuring the brute-force password guessing protect ion mechanism for the password. Table 173 Brute-Force Pas sword Gu essing Prot ection Comm [...]

P-335 Series User’s Guide 473 Appendix K Brute-Force Password Guessing Pro tection[...]

P-335 Series User’s Guide Appendix L Triang le Route 474 Appendix L T riangle Route The Ideal Setup When the firewall is on, your Prestige acts as a secure gateway between your LAN and the Internet. In an ideal network topology , all incoming and outgoing network traffic passes through the Prestige to protect your LAN against attacks. Figure 309 [...]

P-335 Series User’s Guide 475 Appendix L Triangle Route Figure 310 “T riangle Route” Problem The “T riangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface. Y our Prestige supports [...]

P-335 Series User’s Guide Appendix L Triang le Route 476 Figure 31 1 IP Alias Gateways on the W AN Side A second solution to the “triangle route” problem is to put all of your network gateways on the W AN side as the following figure shows. This en sure s that all incoming network traffic passes through your Prestige to your LAN. The refore y[...]

P-335 Series User’s Guide 477 Appendix L Triangle Route[...]

P-335 Series User’s Guide Index 478 Index Numerics 11 0 V A C 4 230V AC 4 802.1x 92 A Abnormal Working Conditions 5 AC 4 Accessories 4 Active 285 ActiveX 153 , 19 9 Acts of God 5 Address Resolution Protocol (ARP) 125 Airflow 4 Allocated Bu dget 287 American Wire Gauge 4 Antenna Directional 471 Omni-directional 471 Antenna gain 470 Any IP summary [...]

P-335 Series User’s Guide 479 Index Contact Information 6 Cont acting Cust omer Support 6 Content Filtering 152 Days and T imes 152 Restrict Web Features 152 Cookies 153 , 199 Copyright 2 Correcting Interference 3 Corrosive Liquids 4 Cost Of T ransmission 295 Covers 4 CTS (Clear to Send) 459 Customer Support 6 D Damage 4 Dampness 4 Danger 4 Deale[...]

P-335 Series User’s Guide Index 480 G Gas Pipes 4 Gateway 295 Gateway IP Addr 289 Gateway IP Address 280 General Setup 242 General wireless LAN screen 84 Germany , Contac t Informat ion 6 Global 134 God, act of 5 H Harmful Interfere nce 3 Hidden Menus 262 Hidden node 458 High V oltage Points 4 Hop Count 295 Host 243 HTTP 139 , 322 I IBSS 456 Idle[...]

P-335 Series User’s Guide 481 Index My Password 279 , 285 My Server IP Addr 288 N Nailed-Up Connectio n 287 Nailed-up Connecti on 287 NA T 138 , 13 9 , 289 , 343 Applying NA T in the SMT Menus 296 Configuring 298 Definitions 134 Examples 304 How NA T Works 135 Mapping T ypes 136 Non NA T F riendly Applicati on Programs 310 Ordering Rules 301 Serv[...]

P-335 Series User’s Guide Index 482 Register ed 2 Registered Trademark 2 Regular Mail 6 Related Documentation 36 Relocate 3 Rem Node Name 285 Re-manufact ured 5 Remote Management Firewall 314 Remote Management and NA T 219 Remote Management Limitations 218 , 383 Remote Node Filter 290 Removing 4 Reorient 3 Repair 4 , 5 Replace 5 Replacement 5 Rep[...]

P-335 Series User’s Guide 483 Index System Maintenance 249 , 350 , 352 , 359 , 363 , 366 , 371 , 374 , 375 , 37 6 , 379 System Name 267 System T imeout 21 9 T T ampering 5 TCP/IP 126 , 336 , 337 , 343 TCP/IP filter rule 336 T elecommu nication Line Co rd. 4 T elephone 6 T elevision Interfer ence 3 T elevision Rece ption 3 Te l n e t 22 0 TFTP Fil[...]

P-335 Series User’s Guide Index 484 WP A 88 Writ ten Permission 2 WWW 108 www .dyndns.org 268 Z ZyNOS 2 , 352 , 363 ZyNOS F/W V ersi on 352 , 363 ZyXEL Communications Corporation 2 ZyXEL Home Page 3 ZyXEL Limi ted Warranty Note 5 ZyXEL Network Operating System 2[...]