ZyXEL Communications 652H/HW manual

Pr estige 652H/HW ADSL Security/Wireless LAN Router Compact Guide Version 3.40 May 2003[...]

Prestige 652H/HW 1 T able of Content s 1 Introducing the Prestige ..................................................................................................... ........... 1 2 Hardware ........................................................................................................................................ 2 2.1 Rear Pane l Co[...]

Prestige 652H/HW 2 You should ha ve an Internet account already set up a nd have been given m ost of the following information. INTERNET ACCOUNT INFORMATION Your device’s WAN IP A ddress (if given): __________________ DNS Server IP Address (if given): Primary __________________, Secondary _________________ Virtual Path Identifier ( VPI ): _______[...]

Prestige 652H/HW 3 2.1 Rear Panel Connections Figure 1 Prestige Hardware Connecti ons Table 1 Prestige Rear Panel Descripti on LA BEL DESCRIPTION 1. DSL Connect to a telephone jack using the included phone wire. 2. LAN 1/DMZ-4 Connect to a computer/external hub using an Ether net cable. Con nect the DMZ port to servers that you want visible to the [...]

Prestige 652H/HW 4 Table 1 Prestige Rear Panel Descripti on LA BEL DESCRIPTION CON/AUX switch CON/AUX port Only connect this port if you want to configur e the Prestige using the SMT via console port or set up a backup WAN connection; see your User’s Guide for details. Set this switch to the “CON” side to use the CON/AUX port as a console por[...]

Prestige 652H/HW 5 Figure 2 Prestige Front Panel Refer to the following t able for m ore detailed LED descripti ons. Table 2 Front Panel LED Description LED COLOR STATUS DESCRIPTION On The Prestige is receiving power. PWR Green Off The Prestige is not receiving power. On The Prestige is functioning properly. Blinking The Prestige is restarting. Gre[...]

Prestige 652H/HW 6 Table 2 Front Panel LED Description LED COLOR STATUS DESCRIPTION On The CON/AUX port has a dial-up connection. Orange Off The CON/AUX port does not have a dial-up connection. On The CON/AUX port has a console connection. AUX Green Off The CON/AUX port does not have a console connection. On The Prestige is linked successfully to a[...]

Prestige 652H/HW 7 5. The Internet Protocol TCP/IP Pr operties screen opens (the General tab in Windows XP). - To have your computer assigned a dynamic IP address, click Obtain an IP address auto matically . If you know your DNS sever IP address(es), type t hem in the Preferred DNS serve r and/or Alternate DNS server fields. -To configure a static [...]

Prestige 652H/HW 8 Refer to your User’s Guide for deta iled IP a ddress configurati on for other Windows and Macintosh computer ope rating system s. 3.3 T esting the Connection to the Prestige 1. Click Start , ( Al l ) Programs , Accessories and then Command Pro mpt . 2. In the Command Prompt window, type "ping” followed by a space and the[...]

Prestige 652H/HW 9 Figure 4 Web Configurator: Pass word Screen Step 3. You shoul d now see t he web confi gurator SITE MAP sc reen.  Click Wizard Setup to begin a series of screens to configure your Prestige for the firs t time.  Click a link und er Advanced Setup to confi gure advanced Prestige features.  Click a link und er Maintenance t[...]

Prestige 652H/HW 10 The Prestige automatically logs you out if it is left idle for fiv e minutes; press ENTER to log back in again. 4.2 Common Screen Command Buttons The following table shows commo n command buttons found on many web configu rator screens. Back Click Back to return to the previous screen. Apply Click App l y to save your changes ba[...]

Prestige 652H/HW 11 Figure 7 Internet Connection with PPPoE If your ISP provides the name of your PPPoE service provider, enter it in the Service Name field. Enter the user name and password exactly as your ISP assigned them. Select Obtain an IP Address Automatically if you have a d ynamic IP address; otherwise select Static IP Address and type you[...]

Prestige 652H/HW 12 Figure 9 Internet Connection with ENET ENCAP In the ENET ENCAP Gateway field, enter the gateway IP address given by your ISP. Refer to Figure 7 for other field de scriptions . Figure 10 Internet Connection w ith PPPoA Refer to Figure 7 for field descriptions. The IP Addre ss and Network Address T ranslation fields are not availa[...]

Prestige 652H/HW 13 Figure 11 Wizard Screen 3 Step 4. If you want to change your Prestige LAN settings, click Change L AN Configurati on to display the screen as shown nex t. Figure 12 Wizard: LAN Configuration Enter the IP address of your Prestige in dotted decimal notation in the LAN IP Address field. For example, 192.168.1.1 (factory default). I[...]

Prestige 652H/HW 14 Step 5. The Prestige automatically tests th e connection to the computer(s) co nnected to the LAN ports. To test the connection from the Prestige to the ISP, click Start Diagnose . Otherwise click Return to Main Menu to go back to the Site Map screen. Figure 13 Wizard Screen 4 4.4 T est Y our Internet Connection Launch your we b[...]

Prestige 652H/HW 15 Figure 14 Wireless LAN: Wireless The following table describes the fields in this screen. Table 3 Wireless LAN: Wireless LA BEL DESCRIPTION ESSID (Extended Service Set IDentity) The ESSID is a unique name to identify the Prestige in the wireless LAN. Wireless clients associating to an Access Point (the Prestige) must have the sa[...]

Prestige 652H/HW 16 Table 3 Wireless LAN: Wireless LA BEL DESCRIPTION RTS/CTS Threshold Select this option to enable the RTS (Request To Send)/CTS (Clea r To Send) threshold to minimize collisions. Enter a value between 0 and 2432. The default is 2432. Request To Send is the threshold (number of b ytes) for enabling the RTS/CTS handshake. Data with[...]

Prestige 652H/HW 17 Figure 15 Wireless LAN: MAC Addr ess Filter The following table describes the fields in this screen. Table 4 Wireless LAN: MAC Address Filter LA BEL DESCRIPTION Active Select Yes from the drop down list box to enable MAC address filtering.[...]

Prestige 652H/HW 18 Table 4 Wireless LAN: MAC Address Filter LA BEL DESCRIPTION Action Define the filter action for the list of MAC addresses in the M AC A ddress table. Select Deny Association to block access to the router, MA C addresses not listed will be allowed to access the router Select Allow Association to permit access to the router , MAC [...]

Prestige 652H/HW 19 Step 1. From the main screen click Advanced Setup and t hen NAT to open t he NAT-Mode screen. Select SUA Only . Figure 16 NAT: Mode Step 2. Click Edit Details . Figure 17 SUA/NAT Server The following table describes the fields in this screen.[...]

Prestige 652H/HW 20 Table 5 SUA/NAT Server LABEL DESCRIPTION Start Port No. Type a port number in this field. To forward only on e port, type the port number again in the End Port field. To forward a series of ports, t ype the start port number here and the end port number in the End Port field. End Port No. Type a port number in this field. To for[...]

Prestige 652H/HW 21 Figure 18 Prestige Firewall Application 5.6 Enabling the Firewall From the main screen, click Advanced Setup , Firewall and then Config to open the Configuration screen. Enable (or activate) the firewall by selecting th e Enable Firewall check box as seen in the following screen. Figure 19 Enabling the Fire wall[...]

Prestige 652H/HW 22 5.7 Procedure for Configuring Firewall Rules From the main screen, click Advanced Setup , Firewall and then Rule Summary (for either local network to Internet rules or Internet to local netwo rk rules) to open the Summary screen. The following table describes th e fields in this screen. Table 6 Summary Screen LA BEL DESCRIPTION [...]

Prestige 652H/HW 23 Table 6 Summary Screen LA BEL DESCRIPTION Source IP This drop-down list box displays the source addresses or ranges of a ddresses to which this firewall rule applies. Please note that a blank source or destination address is equivalent to An y . Destination IP This drop-down list box displays the destination addresses or ranges [...]

Prestige 652H/HW 24 Figure 20 Creating/Editing A Fire w all Rule The following table describes the fields in this screen. Table 7 Creating/Editing A Fire w all Rule LA BEL DESCRIPTION Source Address Click SrcAdd to add a new address, SrcEdit to edit an existing one or SrcDelete to delete one. Please see the next section for more i nformation on add[...]

Prestige 652H/HW 25 Table 7 Creating/Editing A Fire w all Rule LA BEL DESCRIPTION Edit Available Service Click this button to go to the lis t of available custom services. Action for Matched Packets Should packets that match this rule be block ed or forwarded? Make your choice from the drop down list box. Note that Bloc k means the firewall silentl[...]

Prestige 652H/HW 26 Table 8 Adding/Editing Source and Destination Addresses LA BEL DESCRIPTION End IP Address Enter the ending IP address in a range here. Subnet Mask Enter the subnet mask here, if applicable. 5.9 VPN Overview A VPN (Virt ual Private Net work) provi des secure communications between sites without the expense of leased site-to-site [...]

Prestige 652H/HW 27 From the main screen, click Advanced Setup , VPN , and Setup to open the Summary screen. This is a read-only menu of your IPSec rules (tunnels). Figure 23 VPN Summary The following table describes the fields in this screen. Table 9 VPN Summary LABEL DESCRIPTION No. The VPN policy index number Name This field displays the identif[...]

Prestige 652H/HW 28 Table 9 VPN Summary LABEL DESCRIPTION Remote Address This is the IP address(es) of co mputer(s) on the remote network behind the remote IPSec router. This field displays N/A when the Secure Gateway IP Address field displays 0.0.0.0 . In this case only the remote IPSec router can initiate the VPN. The same (static) IP address is [...]

Prestige 652H/HW 29 Figure 24 VPN IKE The following table describes the fields in this screen.[...]

Prestige 652H/HW 30 Table 10 VPN IKE LABEL DESCRIPTION Active Select this check box to activate th is VPN tunnel. This option determines whether a VPN rule is applied before a packet leaves the firewall. Keep Alive Select either Yes or No from the drop-down list box. Select Yes to have the Prestige automatically re-initiate the SA after the SA life[...]

Prestige 652H/HW 31 Table 10 VPN IKE LABEL DESCRIPTION Remote Address Type Use the drop-down menu to choose Single , Ra nge , or Subnet . Select Single with a single IP address. Select Range for a specific range of IP addresses. Select Subnet to specify IP addresses on a network by their subnet mask. IP Address Start When the Address Ty pe field is[...]

Prestige 652H/HW 32 Table 10 VPN IKE LABEL DESCRIPTION Content When you select IP in the Peer ID Type field, type the IP address of the computer with which you will make the VPN connection or l eave the field blank to have the Prestige automatically use the address in the Secure Gatew ay IP A ddress field. When you select DNS in the Peer ID Type fi[...]

Prestige 652H/HW 33 Table 10 VPN IKE LABEL DESCRIPTION Authentication Algorithm Select SHA1 or MD5 from the drop-down list box. MD5 (Message Digest 5) and SHA1 (Secure Hash Algorithm) are hash algorithms used to authenticate packet data. The SHA1 algorithm is generally considered stronger than MD5 , but is slower. Select MD 5 for minimal security a[...]

Prestige 652H/HW 34 Figure 25 UPnP The following table describes the fields in this screen. Table 11 UPnP FIELD DESCRIPTION Enable the Universal Plug and Play (UPnP) Service Select this checkbox to activate UPnP . Be aware that anyone could use a UPnP application to open the web configurator 's login screen without ente ring the Prestige'[...]

Prestige 652H/HW 35 6 T roubleshooting Table 12 Troubleshooting PROBLEM CORRECTIVE ACTION None of the LEDs turn on when you turn on the Prestige. Make sure that you have the correct power adapter connected to th e Prestige and plugged in to an appropriate power s ource. Check all cable connections. If the LEDs still do not turn on, you may hav e a [...]