ZyXEL Communications 2602H Series инструкция обслуживания

Prestige 2602H Series ADSL V oIP IAD Prestige 2602HW Series 802.1 1g Wireless ADSL V oIP IAD User ’ s Guide V ersion 3.40 5/2005[...]

[...]

Prestige 2602H/HW Series User’s Guide Copyright 3 Copyright Copyright © 2005 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, tr anscribed, stored in a retrieval system, tran slated into any language, or transmitted in any form or by any means, el ectronic, mech anical , mag[...]

Prestige 2602H/HW Series User’s Guide 4 Federal Communications Commission (FCC) Interference Statement Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rul es. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must acce[...]

Prestige 2602H/HW Series User’s Guide Federal Com munications Commission ( FCC) Interf erence Statem ent 5 1 Select your product from t he drop-down list box on the Zy XEL home page to go to that product's page. 2 Select the certification you wish to view from this page.[...]

Prestige 2602H/HW Series User’s Guide 6 Safety Warnings Safety W arnings For your safety , be sure to read and fo ll ow all warning notices and instructions. • T o reduce the risk of fire, use only No. 26 A WG (American W ire Gauge) or larger telecommunication line cord. • Do NOT open the device or un it. Opening or removi ng covers can expos[...]

Prestige 2602H/HW Series User’s Guide ZyXEL Limited Warranty 7 ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase . During the warranty period, and upon proof of purchase, should the product [...]

Prestige 2602H/HW Series User’s Guide 8 Customer Suppo rt Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps yo u took to solve i t. METHOD LOCAT[...]

Prestige 2602H/HW Series User’s Guide Customer Support 9 UNITED KINGDOM support@zyxel.co.uk +44 (0) 1344 303044 08707 555779 (UK only) www .zyxel.co.uk ZyXEL Communications UK Ltd.,1 1 The Courtyard, Eastern Road, Bracknell, Berkshire, RG12 2XB, United Kingdom (UK) sales@zyxel.co.uk +44 (0) 1344 303034 ftp.zyxel.co.uk a. “+” is the (prefi x) [...]

Prestige 2602H/HW Series User’s Guide 10 Customer Suppo rt[...]

Prestige 2602H/HW Series User’s Guide Table of Contents 11 T able of Content s Copyright .................................................. .......................................... ...................... 3 Federal Communications Commissi on (FCC) Interference S t atement ............... 4 Safety W arnings .......................................[...]

Prestige 2602H/HW Series User’s Guide 12 Table of Contents Chapter 3 Wizard Setup .. .......................................... ..................................................... ......... 65 3.1 Wizard Setup Introduction .. ................. ............. ............ ............. ................ ......... 65 3.1.1 Wizard Setup: Firs t Scre[...]

Prestige 2602H/HW Series User’s Guide Table of Contents 13 5.2.3 Restricted Access .................. ............. ................ ............. ................ ......... 92 5.2.4 Hide Prestige Identity .... ............. ............. ................ ............. ................ ..... 92 5.2.5 Configuring Wireless LAN on the Pr estige ....[...]

Prestige 2602H/HW Series User’s Guide 14 Table of Contents Chapter 7 Network Address T ranslation (NA T) Screens .................................................... 121 7.1 NA T Overview ........... ................ ............. ............. ................ ............. ................ 121 7.1.1 NA T Definitions ................ ...........[...]

Prestige 2602H/HW Series User’s Guide Table of Contents 15 9.2 SIP Settings Configuration ..... ............. ................ ............. ................ ............. ...139 9.3 Advanced V oice Settings Configuration ................. ................ ................ .......... 140 9.4 Quality of Service (QoS) ........ ................ ....[...]

Prestige 2602H/HW Series User’s Guide 16 Table of Contents Chapter 1 1 Dynamic DNS Setup ................................................................. ............................ 161 1 1.1 Dynamic DN S .......... ................ ............. ................ ................ ............. ............. 161 1 1.1.1 DYNDNS Wildcard .........[...]

Prestige 2602H/HW Series User’s Guide Table of Contents 17 14.2 Firewall Policies Overvi ew ... ................ ............. ............. ................ ............. ...181 14.3 Rule Logic Overview ..... ................ .... ......... ............. ................ ............. .......... 182 14.3.1 Rule Checklist ...... ............. ...[...]

Prestige 2602H/HW Series User’s Guide 18 Table of Contents 16.1.4 VPN Applications .............. ............. ................ ................ ............. .......... 208 16.2 IPSec Architectu re .. ............. ............. ................ ............. ............. ................ ...209 16.2.1 IPSec Algorithms .... ................. .[...]

Prestige 2602H/HW Series User’s Guide Table of Contents 19 Chapter 18 Remote Management Configuration .................................................................. 241 18.1 Remote Management Overview ................. ............. ................ ................ ....... 241 18.1.1 Remote Management Limitations .. .......... ..............[...]

Prestige 2602H/HW Series User’s Guide 20 Table of Contents 21.6 Maximize Bandwidth Usage .............. ... ................ ............. ............. ................ 268 21.6.1 Reserving Bandwidth for Non-Band wid th Class T raffic . ................ .......268 21.6.2 Maximize Bandwidth Usage Exampl e .............. ............. ............[...]

Prestige 2602H/HW Series User’s Guide Table of Contents 21 Chapter 25 Menu 2 W AN Backup Setup .............................................................. .................. 301 25.1 Introduction to W AN Backup Setup ...... ............. ............. ............. ................ ...301 25.2 Configuring W A N Backup in Menu 2 .... ..........[...]

Prestige 2602H/HW Series User’s Guide 22 Table of Contents 29.5.2 LLC-based Multiplexing or PPP En capsulation .................... ............. ...327 29.5.3 Advance Setup Options .............. ................ ............. ............. ................ 327 Chapter 30 St atic Route Setup ... .......................................... .......[...]

Prestige 2602H/HW Series User’s Guide Table of Contents 23 34.3 Filter Rules Summary Menus ............... ............. ................ ............. ............. ...358 34.4 Configuring a Filter Ru le ......... ................ ............. ............. ............. ................ 359 34.4.1 TCP/IP Filter Rule .......... ............. ..[...]

Prestige 2602H/HW Series User’s Guide 24 Table of Contents 38.2.3 Example of FTP Co mmands from the Command Line ......... ................ 391 38.2.4 GUI-based FTP Clients .. ................ ............. ................ ............. ............. 392 38.2.5 TFTP and FTP over W AN Manageme nt Limitations ...... ................ .......392 38.[...]

Prestige 2602H/HW Series User’s Guide Table of Contents 25 Chapter 42 Call Scheduling .................................................................................. .................. 419 42.1 Introduction .......................... ............. ................ ............. ................ ............. ...419 Chapter 43 VPN/IPSec Setup .[...]

Prestige 2602H/HW Series User’s Guide 26 Table of Contents Macintosh OS 8/9 ... ............. ............. ................ ............. ................ ............. ............ 465 V erifying Settings .... ................ ............. ................ ................ ............. ............... 466 Macintosh OS X ..... ............. ..[...]

Prestige 2602H/HW Series User’s Guide Table of Contents 27 LEAP...... ............. ................ ............. ............. ................ ............. ................ ...... 486 Dynamic WEP Key Exchange ............................. ............. ................ ............... 486 WP A ............. ............. ............. .......[...]

Prestige 2602H/HW Series User’s Guide 28 Table of Contents Index ..................................... ..................................................... ............................ 537[...]

Prestige 2602H/HW Series User’s Guide List of Figure s 29 List of Figures Figure 1 Prestige Internet Access Applic ation ............. ............. ................ ............. 54 Figure 2 Internet T elephony Service Provid er Applicat ion ........................ ............. 54 Figure 3 Peer-to-peer Calling .................... ............[...]

Prestige 2602H/HW Series User’s Guide 30 List of Figures Figure 38 Local User Databa se ............ ................. ............ ............. ................ ....... 105 Figure 39 RADIUS ....................... ................ ............. ................ ................ ............. 106 Figure 40 Example of T raf fic Shaping ....... ..[...]

Prestige 2602H/HW Series User’s Guide List of Figure s 31 Figure 81 Firewall Example: Edit Rule: Sele ct Customized Servic es . ................ ... 195 Figure 82 Firewall Example: Rule Summary: My Servic e . ............. ................ ....... 196 Figure 83 Firewall: Anti Probing ............ .... ......... ............. ................ ....[...]

Prestige 2602H/HW Series User’s Guide 32 List of Figures Figure 123 Application-base d Bandwidth Management Example .......... ................ 266 Figure 124 Subnet-based Ba ndwidth Management Example ................ ................ 267 Figure 125 Application and Subnet-based Bandwid th Management Example ...... 267 Figure 126 Bandwidth Allotm[...]

Prestige 2602H/HW Series User’s Guide List of Figure s 33 Figure 166 Menu 1 1.6 for VC -based Multiplexing .............. ................. ................ ... 327 Figure 167 Menu 1 1.6 for LLC-based Mult iplexing or PP P Encapsulation .......... ... 327 Figure 168 Menu 1 1.1 Remote Node P rofile .......... ............ ............. ...........[...]

Prestige 2602H/HW Series User’s Guide 34 List of Figures Figure 209 Protocol and Device Filter Sets ............ ............ ............. ................ ....... 364 Figure 210 Sample T elnet Filter ................ ................ ................ ............. ................ 365 Figure 21 1 Menu 21.1.6.1 Sample Filter ........... ........[...]

Prestige 2602H/HW Series User’s Guide List of Figure s 35 Figure 252 Menu 1 1.3 Remote Node Net w ork Layer Options ............ ................ ... 416 Figure 253 Example of IP Polic y Routing .......... ............. ................ ............. .......... 417 Figure 254 IP Routing Policy Example ............... ................ ............[...]

Prestige 2602H/HW Series User’s Guide 36 List of Figures Figure 295 RTS/CTS ... ................ ............. ................ ............. ................ ............. ... 482 Figure 296 Ideal Setup .................... ............. ................ ................ ............. ............. 489 Figure 297 “T riangle Route” Problem ..[...]

Prestige 2602H/HW Series User’s Guide List of Tables 37 List of T ables T able 1 Models Cov ered ............................. ............. ................ ................ ............. 47 T able 2 ADSL S tandards ... ................ ............. ................ ................ ............. .......... 48 T able 3 IEEE 802.1 1g ........ ..[...]

Prestige 2602H/HW Series User’s Guide 38 List of Tables T able 39 QoS .............. ................ ............. ................ ............. ................ ............. ... 144 T able 40 Phone .... ................ ............. ................ ................ ............. ................ ....... 146 T able 41 S peed Dial ...........[...]

Prestige 2602H/HW Series User’s Guide List of Tables 39 T able 82 View Logs . ............. ................ ............. ................ ................. ............ ....... 262 T able 83 SMTP Error Messages .... ............. ................ ................ ................ .......... 263 T able 84 Application and Sub net-based Bandwidt h[...]

Prestige 2602H/HW Series User’s Guide 40 List of Tables T able 125 Menu 21.1.x.x TCP/IP Filter Rule ..... ................ ................. ................ ... 360 T able 126 Menu 21.1.5.1 Generic Filter Rule . ................ ................ ................ ....... 363 T able 127 Filt er Sets T able ............. ................ ..........[...]

Prestige 2602H/HW Series User’s Guide List of Tables 41 T able 168 Subnet 1 .............. ................ ................. ............ ................. ............ ....... 473 T able 169 Subnet 2 .............. ................ ................. ............ ................. ............ ....... 473 T able 170 Subnet 3 .............. .....[...]

Prestige 2602H/HW Series User’s Guide 42 List of Tables[...]

Prestige 2602H/HW Series User’s Guide Preface 43 Preface Congratulations on your p urchase of the Prestige 2602HW Series ADSL V oIP IAD with 802.1 1g Wireless. Note: Register your product online to receive e-mail notices of firmwa re upgrades and information at www .zyxel.com for global products, or at www .us.zyxel.com for North American product[...]

Prestige 2602H/HW Series User’s Guide 44 Preface Synt ax Conventions • “Enter” means for you to type one or more characters. “Select” or “Choose ” means for you to use one predefined choices. • The SMT menu titles and labels are in Bold Times New Roman font. Predefined field choices are in Bold Arial font. Command and arrow keys a[...]

Prestige 2602H/HW Series User’s Guide Introduction to DSL 45 Graphics Icons Key Introduction to DSL DSL (Digital Subscriber Line) te chnology enhances the data ca pacity of the existing twisted- pair wire that runs betwee n the local telephone co mpany switching of fi ces and most homes and offices. While the wire itself can handle higher frequen[...]

Prestige 2602H/HW Series User’s Guide 46 Introduction to DSL As data rates increase, the carrying distance d ecreases. That means that users who are beyond a certain distance from the telephone company’ s ce ntral office may not be able to obtain the higher spee ds. A DSL connection is a poin t-to-point dedicated circuit, meanin g that the link[...]

Prestige 2602H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 47 C HAPTER 1 Getting T o Know Y our Prestige This chapter describes the key features and applications of your Prestige. 1.1 Introducing the Prestige The Prestige 2602H/HL/HW/HWL-C a re ADSL V o IP IADs (Integrated Access Device) with a built-in switch. They combin e h[...]

Prestige 2602H/HW Series User’s Guide 48 Chapter 1 G etting To Know Your Pres tige The built-in Ethernet switch cons ists of four auto-negotiating 10/100BASE-T , auto-crossover RJ-45 ports (either a crossover or straight-throug h Ethernet cable can be used) for connecting to your local co mputers. Note: The Prestige is ideal for high-speed Intern[...]

Prestige 2602H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 49 Zero Configuration Internet Access Once you connect and turn on the Prestige, it automatically detects th e Internet connection settings (such as the VCI/VPI numbers and the encapsulation method) from the ISP and makes the necessary configuration changes. In cases w[...]

Prestige 2602H/HW Series User’s Guide 50 Chapter 1 G etting To Know Your Pres tige Content Filtering Content filtering allows you to block access to Internet web sites that contain key words (that you specify) in the URL. Y ou can also schedule when the Prestige should perform the filtering and give trusted LAN IP addresses unfiltered Internet ac[...]

Prestige 2602H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 51 SIP ALG The Prestige 2602HW is a SIP Ap plication Layer Gateway (ALG). It allows V oIP calls to pass through NA T for devices behind the Prestige (suc h as a SIP-based V oIP software application on a computer). T raffic Redirect T raffic redirect forwards W AN traf [...]

Prestige 2602H/HW Series User’s Guide 52 Chapter 1 G etting To Know Your Pres tige IP Policy Routing (IPPR) T raditionally , routing is based on the destination addre ss only and the router takes the shortest path to forward a packet. IP Policy Routin g (IPPR) provides a mechanism to override the default routing behavio r and alter the packet for[...]

Prestige 2602H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 53 External Antenna The Prestige is equipped with an antenna conn ector and comes with a detachable 5dBi antenna to provide clear radio signal between th e wireless stations and the acce ss points. Wireless LAN MAC Address Filtering Y our Prestige can check the MAC add[...]

Prestige 2602H/HW Series User’s Guide 54 Chapter 1 G etting To Know Your Pres tige Figure 1 Prestige Internet Access Application 1.2.1.1 Internet Single User Account For a SOHO (Small Office/Home Of fice) environmen t, your Prestige offers the Single User Account (SUA) feature that allows multiple u sers on the LAN (Local Area Network) to access [...]

Prestige 2602H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 55 The following figure shows a basic exa mple of how you would make a peer -to-peer V oIP call. Y ou use your analog phone (A in the figure) an d the Prestige (B) changes the call into V oIP . The Prestige then sends your call through the Internet to the peer V oIP de[...]

Prestige 2602H/HW Series User’s Guide 56 Chapter 1 G etting To Know Your Pres tige Figure 5 Prestige LAN-to-LAN Application 1.2.6 Front Panel LEDs Figure 6 P2602H-C Series Front Panel Figure 7 P2602HW -C Series Front Panel The following table describes the LEDs. Table 4 P2602H/HW-C Series F ront Panel LEDs LED COLOR ST ATUS DESCRIPTION PWR/SYS Gr[...]

Prestige 2602H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 57 Refer to the Quick S tart Guide for in formation on hard ware connections. LAN 1-4 Green On T he Prestige has a succe ssful Ethernet connection. Blinking The Prestige is sending/receiving data. None Off The LAN is not connecte d. WLAN (W models only) Green On The Pr[...]

Prestige 2602H/HW Series User’s Guide 58 Chapter 1 G etting To Know Your Pres tige[...]

Prestige 2602H/HW Series User’s Guide Chapter 2 Introducing the Web Configur ator 59 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access and navigate the web configurator . 2.1 W eb Configurator Overview The web configurator is an HTML-based mana gement interface that allows easy Prestige setup and management via Int[...]

Prestige 2602H/HW Series User’s Guide 60 Chapter 2 Introducing the Web Configurator Figure 8 Password Screen 6 It is highly recommended you change the de fault password. Enter a new password, retype it to confirm and click Apply ; alternatively click Ignor e to proceed to the main menu if you do not want to chang e the password now . Figure 9 Cha[...]

Prestige 2602H/HW Series User’s Guide Chapter 2 Introducing the Web Configur ator 61 2.1.3 Navigating the Pr estige Web Configurator The following summarizes how to navigate the web configurator from th e SITE MAP screen. W e use the Prestige 2602HW -61 web screens in this guide as an example. Screens vary slightly for different Prestige models. [...]

Prestige 2602H/HW Series User’s Guide 62 Chapter 2 Introducing the Web Configurator Figure 10 Web Configurator SITE MAP Scr een Note: Click the icon (located in the top right corner of most screens) to view embedded help. T able 5 Web Config urator Scre ens Summ ary LINK SUB-LINK FUNCTION Wizard Setup Con nection Setup Use these screens for initi[...]

Prestige 2602H/HW Series User’s Guide Chapter 2 Introducing the Web Configur ator 63 V oice SIP Settings Use this screen to configure your Prestige’s Session Initiation Protocol settings. QoS Use this screen to configure your Prestige’s Quality of Service settings. Phone Use this screen to configure your Prestige’s phone settings. S peed Di[...]

Prestige 2602H/HW Series User’s Guide 64 Chapter 2 Introducing the Web Configurator DHCP T abl e This screen displays DHCP (Dynamic Host Configuration Protocol) related information and is READ-ONL Y . Any IP T able This screen lists the devices that are using the Any IP feature to communicate with the Prestige. Wireless LAN Association List This [...]

Prestige 2602H/HW Series User’s Guide Chapter 3 Wizard Setup 65 C HAPTER 3 W izard Setup This chapter provides information on the W izard Setup screens for Internet access and V oIP in the web configurat or . 3.1 Wizard Setup Introduction Use the W izard Setup screens to configure your system for Internet access and V oice with the information pr[...]

Prestige 2602H/HW Series User’s Guide 66 Chapter 3 Wizard Setup The following table describes the fields in this screen. 3.1.2 Wizard Setup: Second Screen The second w izard screen varie s depending o n what mode and encapsula tion type you use. Al l screens shown are with routing mode . Configure the fields and click Next to continue. T able 6 W[...]

Prestige 2602H/HW Series User’s Guide Chapter 3 Wizard Setup 67 Figure 12 Internet Connection with PPPoE The following table describes the fields in this screen. Table 7 Internet Connection with PPPoE LABEL DESCRIPTION Service Name T ype the name of your PPPoE service here. User Name Enter the user name exactly as your ISP assigned. If assigned a[...]

Prestige 2602H/HW Series User’s Guide 68 Chapter 3 Wizard Setup Figure 13 Internet Connection with RFC 1483 The following table describes the fields in this screen. Figure 14 Internet Connection with ENET ENCAP The following table describes the fields in this screen. Table 8 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This fiel[...]

Prestige 2602H/HW Series User’s Guide Chapter 3 Wizard Setup 69 Figure 15 Internet Connection with PPPoA The following table describes the fields in this screen. Table 9 Internet Connection with ENET ENCAP LABEL DESCRIPTION IP Address A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not fixed; the ISP assigns you[...]

Prestige 2602H/HW Series User’s Guide 70 Chapter 3 Wizard Setup 3.1.3 Wizard Setup: Third Screen Use this screen to configure th e voi ce settings (for the Prestige’ s SIP account one) with the information from your voice service provider . Table 10 Internet Connection with PPPoA LABEL DESCRIPTION User Name Enter the login name that your ISP gi[...]

Prestige 2602H/HW Series User’s Guide Chapter 3 Wizard Setup 71 Figure 16 Wizard Setup: Third Screen Table 11 Wizard Setup: V o ice Configuration LABEL DESCRIPTION Active Select this check box to have the Prestige use this SIP account. Clear the check box to ha ve the Prestige not u se this SIP ac count. SIP Number Enter your SIP number in this f[...]

Prestige 2602H/HW Series User’s Guide 72 Chapter 3 Wizard Setup 3.1.4 Internet Access Wiza rd Setup: Fo urth Screen V erify the settings in the screen shown next. T o change the LAN information on the Prestige, click Change LAN Configurations . Otherwise click Save Settings to save the configuration and skip to the section 3.13. Authentication Pa[...]

Prestige 2602H/HW Series User’s Guide Chapter 3 Wizard Setup 73 Figure 17 Internet Access Wizard Setup: Fourth Screen If you want to change your Prestige LAN settings, click Change LAN Configuration to display the screen as shown next.[...]

Prestige 2602H/HW Series User’s Guide 74 Chapter 3 Wizard Setup Figure 18 Wizard Setu p: LAN Config uration The following table describes the fields in this screen. 3.1.5 Wizard Setup: Connection T est The Prestige automatically tests the connectio n to the computer(s) connected to the LAN ports. T o test the connection from the Prestige to the I[...]

Prestige 2602H/HW Series User’s Guide Chapter 3 Wizard Setup 75 Figure 19 Wizard Setup: Connection T e sts 3.1.5.1 T est Y our Internet Connection Launch your web brows er and navigate to www .zyxel.com . Internet access is just the beginning. Refer to the res t of this User ’ s Guide for more detailed information on the complete range of Prest[...]

Prestige 2602H/HW Series User’s Guide 76 Chapter 3 Wizard Setup 3.2.1 Predefined Media Ba ndwid th Management Services The following is a description of the services th at you can select and to which you ca n apply media bandwidth mana gement using the Wizard Setup screens. 3.2.2 Media Bandwid th Management Setup: First Sc reen In the SITE MAP sc[...]

Prestige 2602H/HW Series User’s Guide Chapter 3 Wizard Setup 77 Figure 20 Media Bandwid th Mgnt. Wiza rd Setup: First Screen The following table describes the labels in this screen. 3.2.3 Media Bandwid th Mgnt. Wizard Setup: Second Screen The Prestige automatically creates the bandwi dth class for each service you select. Y ou may set the priorit[...]

Prestige 2602H/HW Series User’s Guide 78 Chapter 3 Wizard Setup Figure 21 Media Bandwid th Mgnt. Wizard Setup: Second Screen ( all services selected) The following table describes th e fields in this screen. 3.2.4 Media Bandwid th Mgnt. Wizard Setup: Finish W ell done! Y ou have finis hed configuration of Media Bandwidth Managem ent. Y o u may no[...]

Prestige 2602H/HW Series User’s Guide Chapter 3 Wizard Setup 79 Figure 22 Media Bandwid th Mgnt. Wizard Setu p: Finish 3.3 Password Setup It is highly recommended that you ch ange the password for accessing the Prestige. 3.3.1 Configuring Password T o change your Prestige’ s password (recommended), click Password in the Site Map screen. Figure [...]

Prestige 2602H/HW Series User’s Guide 80 Chapter 3 Wizard Setup[...]

Prestige 2602H/HW Series User’s Guide Chapter 4 LAN Setup 81 C HAPTER 4 LAN Setup This chapter describes how to configure LAN settings. 4.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached. A LAN is a computer network lim ited to the immediate area, usually the same building or floor o[...]

Prestige 2602H/HW Series User’s Guide 82 Chapter 4 LAN Setup 4.1.2.1 IP Pool Setup The Prestige is pre-configured with a pool of IP addresses for the DHCP clients (DHCP Pool). See the product specifications in the appendic es. Do not assign static IP addresses from the DHCP pool to your LAN computers. 4.2 DNS Server Address DNS (Domain Name Syste[...]

Prestige 2602H/HW Series User’s Guide Chapter 4 LAN Setup 83 • The ISP tells you the DNS server addresses, us ually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in DHCP Setup. • The Prestige acts as a DNS proxy when the Primary and Secondary DNS Server f[...]

Prestige 2602H/HW Series User’s Guide 84 Chapter 4 LAN Setup told otherwise. Let's say you select 192.16 8.1.0 as the netwo rk number; which cover s 254 individual addresses, from 192.16 8.1.1 to 192.168.1.25 4 (zero and 255 are reserved). In other words, the first three numbers specify the networ k number while the last number identifies an[...]

Prestige 2602H/HW Series User’s Guide Chapter 4 LAN Setup 85 • Out Only - the Prestige will send out RIP packet s but will not accept any RIP packets received. • None - the Prestige will not send any RIP p ackets and will ignore any RIP packets received. The V ersion field controls the format and the broadc asting method of the RIP packets th[...]

Prestige 2602H/HW Series User’s Guide 86 Chapter 4 LAN Setup W ith the Any IP feature and NA T enabled, th e Prestige allows a computer to access the Internet without changing the network settings (such as IP address and subnet mask) of the computer , when the IP addresses of the computer and the Prestige are not in the same subnet. Whether a com[...]

Prestige 2602H/HW Series User’s Guide Chapter 4 LAN Setup 87 3 The Prestige receives the ARP request and re plies to the computer with its own MAC address. 4 The computer upd ates the MAC address for th e default gateway to the ARP table. Once the ARP table is updated, the computer is abl e to access the Inte rnet through the Prestige. 5 When the[...]

Prestige 2602H/HW Series User’s Guide 88 Chapter 4 LAN Setup The following table describes the fields in this screen. Table 17 LAN Setup LABEL DESCRIPTION DHCP DHCP If set to Server , your Prestige can assign IP addresses, an IP defau lt gateway and DNS servers to Windows 95, Windows NT and other systems that support the DHCP client. If set to No[...]

Prestige 2602H/HW Series User’s Guide Chapter 4 LAN Setup 89 4.8 Configuring S t atic DHCP This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Med ia Access Control) addre ss. The MAC address is assigned at the factory and consists of six pa[...]

Prestige 2602H/HW Series User’s Guide 90 Chapter 4 LAN Setup[...]

Prestige 2602H/HW Series User’s Guide Chapter 5 Wireless LAN ( P2602HW Models) 91 C HAPTER 5 W ireless LAN (P2602HW Models) This chapter discusses how to configure W ireless LAN. 5.1 Introduction A wireless LAN can be as simple as two computers with wireless LAN adapters communicating in a peer-to-p eer network or as complex as a number of comput[...]

Prestige 2602H/HW Series User’s Guide 92 Chapter 5 Wireless LAN ( P2602HW Models) • Use the Local User Database if you have less than 32 wireless client s in your network. The Prestige uses MD5 encryption when a clie nt authenticates with the Local User Database 5.2.3 Restricted Access The MAC Filter screen allows you to configure the AP to giv[...]

Prestige 2602H/HW Series User’s Guide Chapter 5 Wireless LAN ( P2602HW Models) 93 Figure 28 Wireless Secu rity Method s Note: Y ou must enable the same wireless se curi ty settings on the Prestige and on all wireless clients that you w ant to associate with it. If you do not enable any wireless security on your Prestige, your network is accessibl[...]

Prestige 2602H/HW Series User’s Guide 94 Chapter 5 Wireless LAN ( P2602HW Models) Figure 29 Wireless Sc reen The following table describes the labels in this screen. Table 19 Wirel ess LAN LABEL DESCRIPTION Enable Wireless LAN Y ou should configure some wireless security (see Figure 28 on page 93 ) when you enable the wireless LAN. Sele ct the ch[...]

Prestige 2602H/HW Series User’s Guide Chapter 5 Wireless LAN ( P2602HW Models) 95 Note: If you are configuring the Prestige from a computer connecte d to the wireless LAN and you change the Prestige’s ESSID or security settings (see F igure 28 on page 93 ), you will lose your wirele ss connection when you press Apply to confirm. Y ou must then [...]

Prestige 2602H/HW Series User’s Guide 96 Chapter 5 Wireless LAN ( P2602HW Models) Figure 30 MAC Addres s Filter The following table describes the fields in this menu. Table 20 MAC Address F ilter LABEL DESCRIPTION Active Select Ye s from the drop down list box to enable MAC address fil tering. Action Define the filter action for the list of MAC a[...]

Prestige 2602H/HW Series User’s Guide Chapter 5 Wireless LAN ( P2602HW Models) 97 5.5 Introduction to WP A W i-Fi Protected Access (WP A) is a subset of th e IEEE 802.1 1i standard. WP A is preferred to WEP as WP A has user authentication and improv ed data encryption. See the append ix for more information on WP A user authentication and WP A en[...]

Prestige 2602H/HW Series User’s Guide 98 Chapter 5 Wireless LAN ( P2602HW Models) Figure 31 WP A - PSK Authentication 5.5.2 WP A with RADIUS Application Example Y ou need the IP address, port number (default is 1812) and share d secret of a RADIUS server . A WP A application example with an external RADIUS server looks as follows. "A" i[...]

Prestige 2602H/HW Series User’s Guide Chapter 5 Wireless LAN ( P2602HW Models) 99 Figure 32 WP A with RADIU S Application Example2 5.5.3 Wireless Client WP A Supplicant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A. At the time of writing, the mo st widely availa bl[...]

Prestige 2602H/HW Series User’s Guide 100 Chapter 5 Wireless L AN (P2602HW Mode ls) Figure 33 Wireless LAN: 802.1x/WP A: No Acces s Allowed Figure 34 Wireless LAN: 802.1x/WP A: No Authentication The following table describes the label in these screens. 5.6.1 Authentication Required: 802.1x Y ou need the following for IEEE 802.1x authentication. ?[...]

Prestige 2602H/HW Series User’s Guide Chapter 5 Wireless LAN ( P2602HW Models) 101 • A wireless station computer must be runn ing IEEE 802.1x-compliant software. Not all W indows operating systems support IEEE 802.1x (see the Microsoft web site for details). For other operating systems, see their documentation . If your operating system does no[...]

Prestige 2602H/HW Series User’s Guide 102 Chapter 5 Wireless L AN (P2602HW Mode ls) Note: Once you enable user auth entication, y ou need to specify an external RADIUS server or create local user account s on the Prestige for authentication. 5.6.2 Authentication Required: WP A Select Authentication Required in the Wir eless Port Control field and[...]

Prestige 2602H/HW Series User’s Guide Chapter 5 Wireless LAN ( P2602HW Models) 103 Figure 36 Wireless LAN: 802.1x/WP A: WP A The following table describes the labels not previously discussed Table 23 Wireless LAN: 802.1x/WP A: WP A LABEL DESCRIPTION Key Management Protocol Choose WP A in this field. WP A Mi xed Mode The Prestige can operate in WP[...]

Prestige 2602H/HW Series User’s Guide 104 Chapter 5 Wireless L AN (P2602HW Mode ls) 5.6.3 Authentication Required: WP A-PSK Select Authentication Required in the Wireless Port Contr ol field and WP A-PSK in the Key Management Protocol field to display the next screen. Figure 37 Wireless LAN: 802.1x/WP A:WP A-PSK The following table describes the [...]

Prestige 2602H/HW Series User’s Guide Chapter 5 Wireless LAN ( P2602HW Models) 105 5.7 Configuring Local User Authentication By storing user profiles locally , your Prestige is able to authenticate wireless users without interacting with a network RADIUS server . However , there is a limit on the number of users you may authentica te in this way [...]

Prestige 2602H/HW Series User’s Guide 106 Chapter 5 Wireless L AN (P2602HW Mode ls) 5.8 Configuring RADIUS T o set up your Prestige’ s RADIUS server settings, click WIRELESS L AN , RADIUS . The screen appears as shown. Figure 39 RADIUS The following table describes th e fields in this screen. Password Enter a password of up to 31 printable char[...]

Prestige 2602H/HW Series User’s Guide Chapter 5 Wireless LAN ( P2602HW Models) 107 Shared Secret Enter a password (up to 31 alp hanumeric characters) as the key to be shared between the external authentication server and the access points. The key is not sent over the network. This key must be the same on the external authentication server and Pr[...]

Prestige 2602H/HW Series User’s Guide 108 Chapter 5 Wireless L AN (P2602HW Mode ls)[...]

Prestige 2602H/HW Series User’s Guide Chapter 6 WAN Setup 109 C HAPTER 6 W AN Setup This chapter describes how to configure W AN settings. 6.1 W AN Overview A W AN (W ide Area Network) is an outside conn ection to another network or the Internet. 6.1.1 Encap sulation Be sure to use the encapsulat ion method required by your IS P . The Prestige su[...]

Prestige 2602H/HW Series User’s Guide 110 Chapter 6 WAN Setup 6.1.1.4 RFC 1483 RFC 1483 describes two methods for Multipro tocol Encapsulation over A TM Adaptation Layer 5 (AAL5). The first method allows mult iplexing of multiple protocols over a single A TM virtual circuit (LLC-based multiplexing ) and the second method assumes that each protoco[...]

Prestige 2602H/HW Series User’s Guide Chapter 6 WAN Setup 111 6.1.4.2 IP Assignment wi th RFC 1483 Encap sulation In this case the IP Address Assignment must be static with the same requirements for the IP Address an d ENET ENCAP Gateway fie lds as stated above. 6.1.4.3 IP Assignment with ENET ENCAP Encap sulation In this case you can have either[...]

Prestige 2602H/HW Series User’s Guide 112 Chapter 6 WAN Setup IP Policy Routing overrides the de fault routing behavior and take s priority over all of the routes mentioned ab ove (see Chapter 41 on page 41 1 ). 6.3 PPPoE Encap sulation The Prestige supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF standard (RFC 2516) speci[...]

Prestige 2602H/HW Series User’s Guide Chapter 6 WAN Setup 113 The following figure illustrates the re lationship between PCR, SCR and MBS. Figure 40 Example of T raffic Shaping 6.5 Zero Configuration Internet Access Once you turn on and connect the Prestige to a telephone jack, it automatically detects the Internet connection settings (s uch as t[...]

Prestige 2602H/HW Series User’s Guide 114 Chapter 6 WAN Setup Figure 41 W A N Setup (PPPoE) The following table describes the fields in this screen. Table 27 WAN S e t u p LABEL DESCRIPTION Name Enter the name of your Internet Service Provider , e.g., MyISP . This info rmation is for identification purposes only . Mode Select Routing (default) fr[...]

Prestige 2602H/HW Series User’s Guide Chapter 6 WAN Setup 115 Encapsulation Select the meth od of encapsulatio n used by your ISP from the drop-down list box. Choices vary depending on the mode you select in th e Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483 . If you select Routing in the Mode field, select P[...]

Prestige 2602H/HW Series User’s Guide 116 Chapter 6 WAN Setup 6.7 T raffic Redirect T raffic redirect forwards traffic to a backup gateway when the Prestige cannot connect to the Internet. An exampl e is shown in the figu re below . Connect on Demand Select Connect on Demand when you don't want th e connection up all the time and specify an [...]

Prestige 2602H/HW Series User’s Guide Chapter 6 WAN Setup 117 Figure 42 T raffic Redirect Example The following network topology allows you to avoid triangle route security issues when the backup gateway is co nnected to the LAN. Use IP alias to configure the LAN into two or three logical networks with the Prestige itself as the gateway for each [...]

Prestige 2602H/HW Series User’s Guide 118 Chapter 6 WAN Setup Figure 44 W A N Backup The following table describes the fields in this screen. Table 28 WAN B a c k u p LABEL DESCRIPTION Backup T ype Select the method that the Pr esti ge uses to check the DSL connection. Select DSL Link to have the Prestige check if the connection to the DSLAM is u[...]

Prestige 2602H/HW Series User’s Guide Chapter 6 WAN Setup 119 T imeout T ype the number of seconds (3 recommended) for your Prestige to wait for a ping response from one of the IP addresses in the Check W AN IP Addres s field before timing out the request. The WAN connection is considered "down" after the Prestige times out the number o[...]

Prestige 2602H/HW Series User’s Guide 120 Chapter 6 WAN Setup[...]

Prestige 2602H/HW Series User’s Guide Chapter 7 Network Address Translatio n (NAT) Screens 121 C HAPTER 7 Network Address T ranslation (NA T) Screens This chapter discusses how to configure NA T on the Prestige. 7.1 NA T Overview NA T (Network Address Translation - NA T , RFC 1631) is the translation of the IP address of a host in a packet, for e[...]

Prestige 2602H/HW Series User’s Guide 122 Chapt er 7 Network Ad dress Transla tion (NAT) Scr eens 7.1.2 What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side. When the resp onse[...]

Prestige 2602H/HW Series User’s Guide Chapter 7 Network Address Translatio n (NAT) Screens 123 Figure 45 How NA T W orks 7.1.4 NA T Ap plication The following figure illustrates a possible NA T application, wher e three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct W AN networks. More examples f[...]

Prestige 2602H/HW Series User’s Guide 124 Chapt er 7 Network Ad dress Transla tion (NAT) Scr eens • One to One : In One-to-One mode, the Prestige maps one local IP address to one global IP address. • Many to One : In Many-to-One mode, the Prestige maps multiple local IP addresses to one global IP address. This is equivalent to SUA (for instan[...]

Prestige 2602H/HW Series User’s Guide Chapter 7 Network Address Translatio n (NAT) Screens 125 • Choose Full Featur e if you have multiple public W AN IP addresses for your Prestige. 7.3 SUA Server A SUA server set is a list of inside (behind NA T on the LAN) servers, for example, web or FTP, that you can make visible to t he outs ide world eve[...]

Prestige 2602H/HW Series User’s Guide 126 Chapt er 7 Network Ad dress Transla tion (NAT) Scr eens 7.3.3 Configuring Ser vers Behind SUA (Example) Let's say you want to assign po rts 21-25 to one FTP , T elnet and SMTP server (A in the example), port 80 to another (B in the exam ple) and assign a default server IP address of 192.168.1.35 to a[...]

Prestige 2602H/HW Series User’s Guide Chapter 7 Network Address Translatio n (NAT) Screens 127 Figure 48 NA T Mode The following table describes the labels in this screen. 7.5 Configuring SUA Server If you do not assign an IP address in Server Set 1 (default server) the Prestige discards all packets received for ports that are not specif ied here[...]

Prestige 2602H/HW Series User’s Guide 128 Chapt er 7 Network Ad dress Transla tion (NAT) Scr eens Figure 49 Edit SUA/NA T Server Set The following table describes the fields in this screen. T able 33 Edit SUA/NA T Server Set LABEL DESCRIPTION S tart Port No. Enter a port numbe r in this field. T o forward only one port, enter the port number agai[...]

Prestige 2602H/HW Series User’s Guide Chapter 7 Network Address Translatio n (NAT) Screens 129 7.6 Configuring Address Mapping Ordering your rules is important because the Pr estige applies the rules in the order that you specify . When a rule matches the c urrent pack et, the Prestige take s the corresponding action and the remaining rules are i[...]

Prestige 2602H/HW Series User’s Guide 130 Chapt er 7 Network Ad dress Transla tion (NAT) Scr eens 7.7 Editing an Address Mapping Rule T o edit an address mapping rule, click the rule’ s link in the NA T Addr ess Mapping Rules screen to display the screen sh own next. Figure 51 Address Mapping Rule Edit The following table describes the fields i[...]

Prestige 2602H/HW Series User’s Guide Chapter 7 Network Address Translatio n (NAT) Screens 131 Table 35 Address Mapping Rule Edit LABEL DESCRIPTION Ty p e Ch oose the port mapping type from one of the fo llowing. • One-to-One : One-to-One mode maps one local IP address to o ne global IP address. Note that port numbers do not change for One-to-o[...]

Prestige 2602H/HW Series User’s Guide 132 Chapt er 7 Network Ad dress Transla tion (NAT) Scr eens[...]

Prestige 2602H/HW Series User’s Guide Chapter 8 Introdu ction to VoIP 133 C HAPTER 8 Introduction to V oIP This chapter provides backgro und information on V oIP and SIP . 8.1 Introduction to V oIP V o IP is the sending of vo ice signals over th e Internet Protocol. This allow s you to make ph one calls and send faxes over the In ternet at a frac[...]

Prestige 2602H/HW Series User’s Guide 134 Chapter 8 Intr oduction to VoIP 8.2.1.2 SIP Service Domain The SIP service domain of the V oIP service provid er is the domain name in a SIP URI. For example, if the SIP address is 1 122334455@V oIP-provider .com , then “V oIP-provider .com” is the SIP service domain. 8.2.2 SIP Call Progression The fo[...]

Prestige 2602H/HW Series User’s Guide Chapter 8 Introdu ction to VoIP 135 8.2.3.1 SIP User Agent A SIP user agent can make and receive V oIP tele phone calls. This means that SIP can be used for peer-to-peer communications even though it is a client-server protocol. In the following figure, either A or B can act as a SIP user agent client to init[...]

Prestige 2602H/HW Series User’s Guide 136 Chapter 8 Intr oduction to VoIP Figure 53 SIP Proxy Server 8.2.3.3 SIP Re direct Server A SIP redirect server accepts SIP requests, translates the destination address to an IP address and sends the translated IP address back to th e device that sent the request. Then the client device that originally sent[...]

Prestige 2602H/HW Series User’s Guide Chapter 8 Introdu ction to VoIP 137 Figure 54 SIP Redirect Server 8.2.3.4 SIP Re gister Server A SIP register server maintains a database of SIP identity-to-IP address (or domain name) mapping. The register server checks your u ser name and password when you register . 8.2.4 RTP When you make a V oIP call usi[...]

Prestige 2602H/HW Series User’s Guide 138 Chapter 8 Intr oduction to VoIP 8.5 V oice Coding A codec (coder/decoder) codes anal og voice signals into digital signals and decodes the digital signals back into voice signals. The Prestige supports the following c odecs. 8.5.1 G .71 1 G .71 1 is a Pulse Code Mod ulation (PCM) waveform co dec. G .71 1 [...]

Prestige 2602H/HW Series User’s Guide Chapter 9 Voice Screens 139 C HAPTER 9 V oice Screens This chapter describes how to configure advanced V oIP , QoS, phone an d phone book setting s. 9.1 V oice Screens Introduction This chapter covers th e configuration of the Vo I P screens. 9.2 SIP Settings Configuration Click Vo i c e in the navigation pan[...]

Prestige 2602H/HW Series User’s Guide 140 Chapter 9 Voice Screens 9.3 Advanced V oice Settings Configuration Click Vo i c e in the navigation panel and then SIP Settings to open the SIP Settings screen. Select a SIP account and then click Settings to display the following screen. Table 37 SIP Settings LABEL DESCRIPTION SIP Account Y ou can config[...]

Prestige 2602H/HW Series User’s Guide Chapter 9 Voice Screens 141 Figure 56 V oice Advanc ed Setup The following table describes the labels in this screen. Table 38 Voice Advanced Setup LABEL DESCRIPTION SIP Account This re ad-only field displays the number of the SIP account that you are configuring. The changes that you save in this page af fec[...]

Prestige 2602H/HW Series User’s Guide 142 Chapter 9 Voice Screens Session Expires Use this field to set the longest time that the Prestige will allow a SIP session to remain idle (without traffic) before dropping it. Min-SE Wh en two SIP devices negotiate a SI P session, they must negotiate a common expiration time for idle SIP sessions. This fi [...]

Prestige 2602H/HW Series User’s Guide Chapter 9 Voice Screens 143 9.4 Quality of Service (QoS) Quality of Service (QoS) refers to both a networ k's ability to deliver data with minimum delay , and the networking methods used to provide ba ndwidth for real-time mu ltimedia applications. 9.4.1 T ype Of Service (T oS) Network traffic can be cla[...]

Prestige 2602H/HW Series User’s Guide 144 Chapter 9 Voice Screens Y our Prestige can add IEEE 802.1Q VLAN ID tags to voice frames that it sends to the network. This allows the Presti ge to communicate with a SIP server that is a member of the same VLAN group. Some ISPs use the VLAN tag to identify voice traf fic and give it priority over other tr[...]

Prestige 2602H/HW Series User’s Guide Chapter 9 Voice Screens 145 9.6 Phone Y ou can configure the volume, ec ho cancellation and V AD settings for each individual phone port on the Prestige. Y ou can also select whic h SIP account to use for making outgoing calls. 9.6.1 V oice Activity De tection/Silence Suppression V o ice Activity Detection (V[...]

Prestige 2602H/HW Series User’s Guide 146 Chapter 9 Voice Screens Figure 59 Phone The following table describes the labels in this screen. Table 40 Phone LABEL DESCRIPTION Phone Port Settings Use this field to select the p hone port that you want to configure. S peaking V olume Use this field to set the loudness th at the Prestige uses fo r the s[...]

Prestige 2602H/HW Series User’s Guide Chapter 9 Voice Screens 147 9.8 Speed Dial Speed dial provides shortcuts for dialin g frequently used (V oIP) phone numbers. 9.8.1 Peer-to-Peer Calls Y ou can call another V oIP device directly with out going through a SIP server . Y ou m ust set up a speed dial entry in the phone book in order to do this. Se[...]

Prestige 2602H/HW Series User’s Guide 148 Chapter 9 Voice Screens Figure 60 S peed Dial The following table describes the labels in this screen. Table 41 Speed Dia l LABEL DESCRIPTION Add New Entry Use this section of the screen to edit and save new or existing speed dial phone book entries. S peed D ial Select a spee d dial key combination from [...]

Prestige 2602H/HW Series User’s Guide Chapter 9 Voice Screens 149 9.10 Lifeline (Prestige 2602HL/HWL) W ith lifeline you can make and receive regula r phone calls. Use a prefix number to make a regular call. When the Prestige 2602HL/HWL does not have power , you can make regular calls without dialing a prefix number . Y ou can also specify phone [...]

Prestige 2602H/HW Series User’s Guide 150 Chapter 9 Voice Screens Figure 61 Lifeline The following table describes the labels in this screen. 9.12 Supplement ary Phone Services Overview Supplementary services such as call hold, call waiting, call tran sfer , … are generally available from your voice service provider . The Pr estige supports the[...]

Prestige 2602H/HW Series User’s Guide Chapter 9 Voice Screens 151 • Internal Calls (see Section 10.3 on page 159 ) Note: T o take full advantage of the supplemen tary phone services ava ilable though the Prestige's phone port s, you may need to subscribe to the services from your voice service provider . 9.12.1 The Flash Key Flashing means[...]

Prestige 2602H/HW Series User’s Guide 152 Chapter 9 Voice Screens Press the flash key and then “0” to disconnect th e call presently on hold and keep the current call on line. Press the flash key and then “1” to disconnect th e current call and resume the call on hold. If you hang up the phone but a caller is still on hold, there will be [...]

Prestige 2602H/HW Series User’s Guide Chapter 9 Voice Screens 153 9.12.3 USA T ype Supplement ary Services This section describes how to use su pplementary phone services with the USA T ype Call Service Mode . Commands for supplementary serv ices are listed in the table below . After pressing the flash key , if you do not issue the sub-command be[...]

Prestige 2602H/HW Series User’s Guide 154 Chapter 9 Voice Screens 1 When you are o n the phone talk ing to someone, place the fl ash key to put the caller on hold and get a di al tone. 2 Dial a phon e number dire ctly to make an other call. 3 When the second call is answered, press th e flash key , wait for the sub-command tone and press “3” [...]

Prestige 2602H/HW Series User’s Guide Chapter 9 Voice Screens 155 9.14 Call Forward Configuration Click Vo i c e in the navigation panel and th en Call Forward to display the following screen. Use this screen to configure the Prestige to block or redirect calls. Y ou can configure a different call forwarding table for each SIP account or use the [...]

Prestige 2602H/HW Series User’s Guide 156 Chapter 9 Voice Screens Figure 63 V oice Call Forward The following table describes the labels in this screen. Table 46 Voice Call Forward LABEL DESCRIPTION T abl e Number Select which call fo rwarding table you want to configure. Y ou can configure a different call forwarding table for each SIP account o[...]

Prestige 2602H/HW Series User’s Guide Chapter 9 Voice Screens 157 Unconditional Forward to Number Enable this feature to h ave the Prestige forward all incoming calls to the number that you configure reg ardle ss of whether or not the phone(s) connected to the phone port(s) is bu sy . Busy Forward to Number Enable this feature to have the Prestig[...]

Prestige 2602H/HW Series User’s Guide 158 Chapter 9 Voice Screens[...]

Prestige 2602H/HW Series User’s Guide Chapter 10 Phone Usage 159 C HAPTER 10 Phone Usage This chapter describes how to use a phone connected to your Prestige for basic tasks. 10.1 Dialing a T elephone Number The PHONE LED turns green when your SIP account is registered. Dial a SIP number like “12345” on your phone’ s keypad. Use speed dial [...]

Prestige 2602H/HW Series User’s Guide 160 Chapter 10 Phone Usage 10.5 Auto Firmware Upgrade During auto-provisioning, the Prestige c hecks to see if there is a newer firmwa re version. If newer firmware is available, the Prestige play s a recording when you pick up yo ur phone’ s handset. Press “*99#” to upgrade the Prestige’ s firmware. [...]

Prestige 2602H/HW Series User’s Guide Chapter 11 Dynamic DNS Setup 161 C HAPTER 11 Dynamic DNS Setup This chapter discusses how to configure your Prestige to use Dynamic DNS. 1 1.1 Dynamic DNS Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU[...]

Prestige 2602H/HW Series User’s Guide 162 Chapter 1 1 Dynamic DNS Setup Figure 64 Dynamic DNS The following table describes the fields in this screen. Table 47 Dynamic DNS LABEL DESCRIPTION Active Select this check box to use dynamic DNS. Service Provider This is the name of your Dynamic DNS servi ce provider . Host Names T ype the domain name a [...]

Prestige 2602H/HW Series User’s Guide Chapter 12 Time and Date 163 C HAPTER 12 T ime and Date Use this screen to configure the Prestige’ s time and date settings. 12.1 Pre-defined NTP T ime Servers List The Prestige uses the following pre-defined list of NTP time servers if you do not specify a time server or it cannot synch ronize with the tim[...]

Prestige 2602H/HW Series User’s Guide 164 Chapter 12 Time and Da te Figure 65 T ime and Date The following table describes the fields in this screen. Table 49 T ime and Date LABEL DESCRIPTION T ime Server Use Protocol when Bootup Select the time service protocol that your time server uses. Not all time servers support all protocols, so you may ha[...]

Prestige 2602H/HW Series User’s Guide Chapter 12 Time and Date 165 S tart Date Enter the month and day that your daylight -savin gs time start s on if you selected Daylight Savings . End Date Enter the month and day that your daylig ht-savings time ends on if you selected Daylight Savings . Synchronize system clock with T ime Server now . Select [...]

Prestige 2602H/HW Series User’s Guide 166 Chapter 12 Time and Da te[...]

Prestige 2602H/HW Series User’s Guide Chapter 13 Firewalls 167 C HAPTER 13 Firewalls This chapter gives some backgr ound information on firewalls and introduces the Prestige firewall. 13.1 Firewall Overview Originally , the term fir ewall referred to a construction techni que designed to prevent the spread of fire from one room to another . The n[...]

Prestige 2602H/HW Series User’s Guide 168 Chapter 13 Firewalls Information hiding prevents the names of in ternal systems from being made known via DNS to outside systems, since the ap plication gateway is the only ho st whose name must be mad e known to outside systems. Robust authentication and logging pre-authenticates application traffic befo[...]

Prestige 2602H/HW Series User’s Guide Chapter 13 Firewalls 169 13.3.1 Denial of Service Att acks Figure 66 Prestige Firewall Application 13.4 Denial of Service Denials of Service (DoS) attacks are aimed at devices and networks w ith a connection to the Internet. Their goal is not to st eal in formation, but to disabl e a device or netwo rk so use[...]

Prestige 2602H/HW Series User’s Guide 170 Chapter 13 Firewalls 13.4.2 T ypes of DoS Atta cks There are four types of DoS attacks: 1 Those that exploit bugs in a TCP/IP implementation. 2 Those that exploit weaknesses in the TCP/IP specification. 3 Brute-force attacks that flood a network with useless data. 4 IP Spoofing. 5 " Ping of Death &qu[...]

Prestige 2602H/HW Series User’s Guide Chapter 13 Firewalls 171 Figure 67 Three-W ay Handshake Under normal circumstances, the applica tion that initiates a session sends a SYN (synchronize) packet to the receiving server . The receiver sends back an ACK (acknowledgment) packet and its own SYN, and then the in itiator responds with an ACK (acknowl[...]

Prestige 2602H/HW Series User’s Guide 172 Chapter 13 Firewalls amount of ICMP echo request and response traffic. If a hacker chooses to spoof the source IP address of the ICMP echo request packet, the resulting ICMP traffic will not only clog up the "intermedi ary" network, but w ill also congest the network of the spoofed source IP add[...]

Prestige 2602H/HW Series User’s Guide Chapter 13 Firewalls 173 13.4.2.3 T raceroute T raceroute is a utility used to determine th e path a packet takes between two endpoints. Sometimes when a packet filter firewall is conf igured incorrectly an at tacker can traceroute the firewall gaining knowledge of the network topology inside the firewall. Of[...]

Prestige 2602H/HW Series User’s Guide 174 Chapter 13 Firewalls Figure 70 S tateful Inspection The previous figure shows the Prestige’ s default firewall rules in action as well as demonstrates how stateful inspection works. User A can initiate a T elnet session from within the LAN and responses to this request are allowe d. However other T elne[...]

Prestige 2602H/HW Series User’s Guide Chapter 13 Firewalls 175 temporary entries might be modified, in order to permit only packets that are valid for the current state o f the conn ection. 8 Any additional inbound or outb ound packets that belong to the connection are inspected to update the state table entry and to modify the temporary inbound [...]

Prestige 2602H/HW Series User’s Guide 176 Chapter 13 Firewalls When the Prestige receives any subsequent packet (from the In ternet or from the LAN), its connection information is extracted and checked against the cache. A packet is only allowed to pass through if it corresponds to a valid connection (that is, if i t is a response to a connection[...]

Prestige 2602H/HW Series User’s Guide Chapter 13 Firewalls 177 • Limit who can telnet into your router . • Don't enable any local service (such as SN MP or NTP) that you don't use. An y enabled service could present a potential sec urity risk. A determined hacker might be able to find creative ways to misuse the enabled services to [...]

Prestige 2602H/HW Series User’s Guide 178 Chapter 13 Firewalls • Always shred confidential in formation, particularly about your computer , before throwing it away . Some hackers dig through the trash of companies or individuals for information that might he lp them in an attack. 13.7 Packet Filtering Vs Firewall Below are some comparisons betw[...]

Prestige 2602H/HW Series User’s Guide Chapter 13 Firewalls 179 • A range of source an d destination IP address es as well as port numbers can be specified within one firewall rule making the fire wall a better choice when complex rules are required. • T o selectively block/allow inbound o r outbound traf fic between inside host/networks and o[...]

Prestige 2602H/HW Series User’s Guide 180 Chapter 13 Firewalls[...]

Prestige 2602H/HW Series User’s Guide Chapter 14 Firewall Configurat ion 181 C HAPTER 14 Firewall Configuration This chapter shows you how to enable and configure the Prestige firewall. 14.1 Access Methods The web configurator is, by far , the most co mprehensive firewall configuration tool your Prestige has to offer . For this reason, it is reco[...]

Prestige 2602H/HW Series User’s Guide 182 Chapter 14 Firewall Configuration Note: If you configure firewall rules wit hout a good understan ding of how they work, you might inadvertently introduce securi ty risks to the f irewall and to the protected network. Make sure you test your rules af ter you configure them. For example, you may create rul[...]

Prestige 2602H/HW Series User’s Guide Chapter 14 Firewall Configurat ion 183 4 Does a rule that allows Internet users acces s to resources on the LAN create a security vulnerability? For example, if FTP ports (TCP 20, 21) are al lowed from the Internet to t he LAN, Internet users may be able to connect to computers with running FTP servers. 5 Doe[...]

Prestige 2602H/HW Series User’s Guide 184 Chapter 14 Firewall Configuration 14.4.1 LAN to W AN Rules The default rule for LAN to W AN traf fic is that all users on the LAN are allowed non- restricted access to the W AN. When you config ure a LAN to W AN rule, you in essenc e want to limit some or all users from accessing cer tain services on the [...]

Prestige 2602H/HW Series User’s Guide Chapter 14 Firewall Configurat ion 185 14.4.3 Alert s Alerts are reports on events, such as attacks, that you may want to know about right away . Y ou can choose to generate an alert when an attack is detected in the Edit Rule screen ( select the Send Alert Message to Administrator When Matched check box) or [...]

Prestige 2602H/HW Series User’s Guide 186 Chapter 14 Firewall Configuration 14.6 Rule Summary Note: The ordering of your rule s is very import ant as rules are applie d in turn. Click on Fire wall , then Rule Summary to bring up the following screen. This screen is a summary of the existing rules. Note the order in which the rules are listed. Pac[...]

Prestige 2602H/HW Series User’s Guide Chapter 14 Firewall Configurat ion 187 Figure 74 Firewall: Rule Summary Table 55 Rule Summary LABEL DESCRIPTION Firewall Rules S torage Sp ace in Use This read-only bar shows how much of the Prestige' s memory for recording fire wall rules it is currently using. The bar turn s from green to red when the [...]

Prestige 2602H/HW Series User’s Guide 188 Chapter 14 Firewall Configuration 14.6.1 Configuring Firewall Rules Follow these directions to create a new rule. 1 In the Rule Summary screen, type the index number for where you want to put the rule. For example, if you type “6”, your new rule becomes number 6 and th e previous rule 6 (i f there is [...]

Prestige 2602H/HW Series User’s Guide Chapter 14 Firewall Configurat ion 189 Figure 75 Firewall: Edit Rule The following table describes the labels in this screen.[...]

Prestige 2602H/HW Series User’s Guide 190 Chapter 14 Firewall Configuration Table 56 Firewall: Edit Rule LABEL DESCRIPTION Active Select this option to ena ble this firewall rule. Action for Matched Packet Use the radio button to select whether to disca rd ( Block ) o r allow the passage of ( Forward ) packets that match this rule. Source/Destina[...]

Prestige 2602H/HW Series User’s Guide Chapter 14 Firewall Configurat ion 191 14.7 Customized Services Configure customized services and port numb ers not predefined by the Prestige. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website. For further inform ation on these services, please[...]

Prestige 2602H/HW Series User’s Guide 192 Chapter 14 Firewall Configuration Figure 77 Firewall: Configure Customized Services The following table describes the labels in this screen. 14.9 Example Firewall Rule The following Internet firewa ll rule example allows a hypot hetical “My Service” connection from the Internet. 1 Click Fir ewall in t[...]

Prestige 2602H/HW Series User’s Guide Chapter 14 Firewall Configurat ion 193 Figure 78 Firewall Example: Rule Summary 3 In the Rule Summary screen, type the index number for where you want to put the rule. For example, if you type “6”, your new rule becomes number 6 and th e previous rule 6 (i f there is one) becomes rule 7. 4 Click Inser t t[...]

Prestige 2602H/HW Series User’s Guide 194 Chapter 14 Firewall Configuration Figure 79 Firewall Example: Edit Ru le: Des tination Addres s 7 In the Edit Rule screen, click the Edit Customized Services link to open the Customized Services screen. 8 Click the number of a customized service to open the configuratio n screen. Configure it as follows a[...]

Prestige 2602H/HW Series User’s Guide Chapter 14 Firewall Configurat ion 195 Figure 81 Firewall Example: Edit Rule: Select Customized Services Note: Custom ports show up with an “*” before their names in the Services list box and the Rule Summary list box. Click Apply af ter you’ve created your custom port. On completing the configuration p[...]

Prestige 2602H/HW Series User’s Guide 196 Chapter 14 Firewall Configuration Figure 82 Firewall Example: Rule Summary: My Service 14.10 Predefined Services The A vailable Services list box in the Edit Ru le screen (see Section 14.6.1 on page 188 ) displays all predefined services that the Prestig e already supports. Next to the name of th e servic[...]

Prestige 2602H/HW Series User’s Guide Chapter 14 Firewall Configurat ion 197 HTTP(TCP:80) Hyper T ext Transfer Protocol - a cl ient/server protocol for the wo rld wide web. HTTPS HTTPS is a secured ht tp session of ten used in e-commerce. ICQ(UDP:4000) This is a popular Internet chat program. IKE(UDP:500) The Internet Key Exchange algorithm is us[...]

Prestige 2602H/HW Series User’s Guide 198 Chapter 14 Firewall Configuration 14.1 1 Anti-Probing If an outside user attempts to probe an unsupp orted port on your Prestige, an ICMP respon se packet is automatically returned. This allows the outside user to know the Prestige exists. The Prestige supports anti-probing, which prevents the ICMP respon[...]

Prestige 2602H/HW Series User’s Guide Chapter 14 Firewall Configurat ion 199 Figure 83 Firewall: Anti Probing The following table describes the labels in this screen. 14.12 DoS Thresholds For DoS attacks, the Prestige uses thresholds to determine when to drop s essions that do not become fully established. These threshol ds apply globally to all [...]

Prestige 2602H/HW Series User’s Guide 200 Chapter 14 Firewall Configuration 14.12.1 Threshold V alues T une these parameters when some thing is not working and after you have checked the firewall counters. These default values sh ould work fine for most small offices. Factors influencing choices for threshold values are: • The maximum number of[...]

Prestige 2602H/HW Series User’s Guide Chapter 14 Firewall Configurat ion 201 The Prestige also sends alerts whenever TCP Maximum Incomplete is exceeded. The global values specified for the threshold and timeout apply to a ll TCP connections. Click Fir ewall , and Threshold to bring up the next screen. Figure 84 Firewall: Threshold The following t[...]

Prestige 2602H/HW Series User’s Guide 202 Chapter 14 Firewall Configuration Maximum Incomplete High This is the number of existing half-open sessions that causes the firewall to start deleting half-open sessions. Whe n the number of existing half-open sessio ns rises above this number , th e Prestige deletes half- open sessions as require d to ac[...]

Prestige 2602H/HW Series User’s Guide Chapter 15 Content Filtering 203 C HAPTER 15 Content Filtering This chapter covers how to configure content filtering. 15.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering gives you the ab ility to block [...]

Prestige 2602H/HW Series User’s Guide 204 Chapter 15 Content Filtering Figure 85 Content Filter: Keyword The following table describes the labels in this screen. 15.3 Configuring the Schedule T o set the days and times for the Prestige to perform content filtering, click Content Filter and Schedule . The screen appears as shown. Table 62 Content [...]

Prestige 2602H/HW Series User’s Guide Chapter 15 Content Filtering 205 Figure 86 Content Filter: Schedule The following table describes the labels in this screen. 15.4 Configuring T rusted Computers T o exclude a range of users on the LAN from content filtering on your Prestige, click Content Filter and Tr u s t e d . The screen appears as shown.[...]

Prestige 2602H/HW Series User’s Guide 206 Chapter 15 Content Filtering Figure 87 Content Filter: T rusted The following table describes the labels in this screen. Table 64 Content Filter: T rusted LABEL DESCRIPTION T rusted User IP Range From T ype the IP address of a computer (or the beginning IP address of a sp ecific range of computers) on the[...]

Prestige 2602H/HW Series User’s Guide Chapter 16 Introduction to IPSec 207 C HAPTER 16 Introduction to IPSec This chapter introduces the basics of IPSec VPNs. 16.1 VPN Overview A VPN (V irtual Private Network) provides sec ure communications betw een sites without the expense of leased site-to-site lines. A secure VP N is a combination of tunneli[...]

Prestige 2602H/HW Series User’s Guide 208 Chapter 1 6 Introduc tion to IPSec Figure 88 Encryption and Decryption 16.1.3.2 Dat a Confidentiality The IPSec sender can encrypt packets befo re transmitting them across a network. 16.1.3.3 Dat a Integrity The IPSec receiver can validate packets sent by the IPSec sender to ensure that the data has not b[...]

Prestige 2602H/HW Series User’s Guide Chapter 16 Introduction to IPSec 209 16.2 IPSec Architecture The overall IPSec architect ure is shown as follows. Figure 89 IPSec Architecture 16.2.1 IPSec Algorithms The ESP (Encapsulating Security Payload) Protocol (RFC 2406) an d AH (Authentication Header) protocol (RFC 2402 ) describe the packe t formats [...]

Prestige 2602H/HW Series User’s Guide 210 Chapter 1 6 Introduc tion to IPSec Figure 90 T ransport and T unnel Mode IPSec Encaps ulation 16.3.1 T ransport Mode Tr a n s p o r t mode is used to pro tect upper layer prot ocols and only af fects the data in the IP packet. In Tr a n s p o r t mode, the IP packet contains the security protocol ( AH or [...]

Prestige 2602H/HW Series User’s Guide Chapter 16 Introduction to IPSec 211 NA T is incompatible with the AH protocol in both Tr a n s p o r t and T unnel mode. An IPSec VPN using the AH protocol digitally sig ns the outbound packet, both data p ayload and headers, with a hash value appe nded to the pack et. When using AH protoc ol, packet content[...]

Prestige 2602H/HW Series User’s Guide 212 Chapter 1 6 Introduc tion to IPSec[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 213 C HAPTER 17 VPN Screens This chapter introduces the VPN screens. See th e chapter on logs for information on viewing logs and the appendix on l ogs for IPSec log descriptions. 17.1 VPN/IPSec Overview Use the screens documented in this chapter to configure rules for VPN connections a[...]

Prestige 2602H/HW Series User’s Guide 214 Chapter 17 VP N Screens 17.2.2 ESP (Encap sulating Security Payload) Protocol The ESP protocol (RFC 2406) provides encryptio n as well as the services offered by AH . ESP authenticating properties are limited compared to the AH due to the non-inclusion of the IP header information during the au thenticati[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 215 • If the W AN connection goes down, the Prestige uses the dial backup IP address for the VPN tunnel when usin g dial backup or the LAN IP address when using traffic redirect. See the chapter on W AN for details on dial backup and traf fic redirect. 17.4 Secure Gateway Address Secu[...]

Prestige 2602H/HW Series User’s Guide 216 Chapter 17 VP N Screens Click VPN and Setup to open the VPN Summary screen. This is a re ad-only menu of your IPSec rules (tunnels). The IPSec summa ry menu is read-only . Edit a VPN by selecting an index number and then con figuring its associated su bmenus. Figure 92 VPN Summary The following table desc[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 217 17.6 Keep Alive When you initiate an IPSec tunnel with keep alive enabled, the Prestige automatically renegotiates the tunnel wh en the IPSec SA lifetime period expires (see Section 17.12 on page 226 for more on the IPSec SA lifetime). In ef fe ct, the IPSec tunnel becomes an “alw[...]

Prestige 2602H/HW Series User’s Guide 218 Chapter 17 VP N Screens The following figure depicts an example wher e three VPN tunnels are created from Prestige A; one to branch of fice 2, one to branch office 3 and another to headqu arters. In order to access computers that use private domain na mes on the headquarters (HQ) network, the Prestige at [...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 219 17.8.1 NA T T raversal Configuration For NA T traversal to work you must: • Use ESP security protocol (in either transport or tunnel mode). • Use IKE keying mode. • Enable NA T traversal on both IPSec endpoints. In order for IPSec router A (see Figure 94 on page 218 ) to recei[...]

Prestige 2602H/HW Series User’s Guide 220 Chapter 17 VP N Screens 17.9.1 ID T ype and Content Examples T wo IPSec routers must have matching ID type and content configuration in order to set up a VPN tunnel. The two Prestiges in this ex ample can complete negotiation and establish a VPN tunnel. T able 68 Local ID T ype and Content Fields LOCAL ID[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 221 The two Prestiges in this ex ample cannot complete their negotiation because Prestige B’ s Local ID type is IP , but Prestige A ’ s Peer ID type is set to E-mail . An “ID mismatche d” message displays in the IPSEC LOG . 17.10 Pre-Shared Key A pre-shared key identifies a comm[...]

Prestige 2602H/HW Series User’s Guide 222 Chapter 17 VP N Screens Figure 95 VPN IKE The following table describes the fields in this screen.[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 223 Table 72 VPN IKE LABEL DESCRIPTION IPSec Setup Active Select this check box to activate this VPN policy . This option determines whether a VPN rule is applied before a packet leaves the firewall. Keep Alive Select either Ye s or No from the drop-d own list box. Select Ye s to have t[...]

Prestige 2602H/HW Series User’s Guide 224 Chapter 17 VP N Screens IP Address S tart When the Local Addres s T ype fi eld is configured to Singl e , enter a (static) IP address on the LAN behind your Prestige. When the Lo cal Address T ype field is configured to Range , enter the beginning (static) IP address, in a range of computers on your LAN b[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 225 My IP Address Enter the W AN IP address of your Prestige. The VPN tu nnel has to be rebuilt if this IP address changes. The following applies if this field is configured as 0.0.0.0 : The Prestige uses the current Prestige WAN IP address (static or dynamic) to set up the VPN tunnel. [...]

Prestige 2602H/HW Series User’s Guide 226 Chapter 17 VP N Screens 17.12 IKE Phases There are two phases to every IKE (Internet Key Exchange) ne gotiation – phase 1 (Authentication) and ph ase 2 (Key Exchange). A phase 1 exchange establishes an IKE SA and the second one uses that SA to negotiate SAs for IPSe c. Pre-Shared Key T ype your pre-shar[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 227 Figure 96 T wo Phases to Set Up the IPSec S A In phase 1 you must: • Choose a negotiation mode. • Authenticate the connection by entering a pre-shared key . • Choose an encryption algorithm. • Choose an authentication algorithm. • Choose a Dif fie-Hellman public-key cry pt[...]

Prestige 2602H/HW Series User’s Guide 228 Chapter 17 VP N Screens 17.12.1 Negotiation Mode The phase 1 Negotiation Mode you select determines how the Security Association (SA) will be established for each con n ection through IKE negotiations. • Main Mode ensures the highest level of security when the communi cating parties are negotiating auth[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 229 Figure 97 VPN IKE: Advanced Setup The following table describes the fields in this screen. Table 73 VPN IKE: Advanced Setup LABEL DESCRIPTION VPN - IKE Protocol Enter 1 for ICMP , 6 for TCP , 1 7 for UDP , etc. 0 is the default and signi fies any protocol. Enable Replay Protec tion [...]

Prestige 2602H/HW Series User’s Guide 230 Chapter 17 VP N Screens Remote S tart Port 0 is the default and signifies any p ort. T y pe a p ort number from 0 to 65535. Some of the mo st common IP ports are: 21, FTP; 53, DNS; 23, T elnet; 80, HTTP; 25, SMTP; 1 10, POP3. End Enter a port number in this field to defin e a port range. This port number [...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 231 17.14 Manual Key Setup Manual key managemen t is useful if you have pro blems with IKE key managemen t. 17.14.1 Security Parameter Index (SPI) An SPI is used to distinguish dif ferent SAs te rminating at the same de stination and using the same IPSec protocol. This data allows for t[...]

Prestige 2602H/HW Series User’s Guide 232 Chapter 17 VP N Screens 17.15 Configuring Manual Key Y ou only configure VPN Man ual Key when you select Manual in the IPSec Key Mode field on the VPN IKE screen. This is the VPN Manual Key screen as shown next. Figure 98 VPN: Manual Key The following table describes the fields in this screen.[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 233 Table 74 VPN: Manual Key LABEL DESCRIPTION IPSec Setup Active Select this check box to activate this VPN policy . Name T ype up to 32 characters to identify this VPN policy . Y ou may use any ch aracter , including spaces, but the Prestige drops trailing spaces. IPSec Key Mode Selec[...]

Prestige 2602H/HW Series User’s Guide 234 Chapter 17 VP N Screens End / Subnet Mask When the Remote Addr ess T ype field is configured to Single , this field is N/A. When the Remote Ad dress T ype field is co nfigured to Range , en ter the end (static) IP address, in a range of computers on the network behind the remote IPSec router . When the Re[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 235 17.16 V iewing SA Monitor Click VPN and Monitor to open the SA Monitor screen as shown. Use this screen to display and manage activ e VPN connec tions. A Security Association (SA) is the group of se cu rity settings related to a specific VPN tunnel. This screen displays active VPN c[...]

Prestige 2602H/HW Series User’s Guide 236 Chapter 17 VP N Screens Figure 99 VPN: SA Monitor The following table describes the fields in this screen. Table 75 VPN: SA Monitor LABEL DESCRIPTION No. This is the security association index number . Name This field displays the identifi cation name for this VPN policy . Encapsulation This field display[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 237 17.17 Configuring Global Setting T o change your Prestige’ s global settings, click VPN and the n Global Setting . The screen appears as shown. Figure 100 VPN: Global Setting The following table describes the fields in this screen. 17.18 T elecommuter VPN/IPSec Examples The follow[...]

Prestige 2602H/HW Series User’s Guide 238 Chapter 17 VP N Screens Figure 101 T elecommuters Sharing One VPN Rule Example 17.18.2 T elecommuters Usin g Unique VPN Rules Example In this example the telecommuters (A, B and C in the figure) use IPSec routers with domain names that are mapped to their dynamic W AN IP addresses (use Dynamic DNS to do t[...]

Prestige 2602H/HW Series User’s Guide Chapter 17 VPN Screens 239 Figure 102 T elecommuters Using Uniq ue VPN Rules Example Table 78 T elecommuters Using Unique VPN Rules Example T ELECOMMUTERS HEADQUARTERS All T ele commuter Rules: All Headquarters Rules: My IP Address 0.0.0. 0 My IP Address: bigcompanyhq.com Secure Gateway Address: bigcompanyhq.[...]

Prestige 2602H/HW Series User’s Guide 240 Chapter 17 VP N Screens 17.19 VPN and Remote Management If a VPN tunnel uses T e lnet, FTP , WWW , then you should co nfigure remote management ( Remote Management ) to allow access for that service.[...]

Prestige 2602H/HW Series User’s Guide Chapter 18 Remote M anagement Configuratio n 241 C HAPTER 18 Remote Management Configuration This chapter provides information on config uring remote management. 18.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) fro[...]

Prestige 2602H/HW Series User’s Guide 242 Chapter 18 Remote Ma nagement Configuration • A filter in SMT menu 3.1 (LAN) or in menu 1 1.5 (W AN) is applied to block a T elnet, FTP or W eb service. • Y ou have disabled that service in one of the remote management screens. • The IP address in the Secured Client IP field does not match th e clie[...]

Prestige 2602H/HW Series User’s Guide Chapter 18 Remote M anagement Configuratio n 243 18.4 W eb Y ou can use the Prestige’ s embedded web configurator for co nfiguration and file management. See the online help for details. 18.5 Configuring Remote Management Click Remote Management to open the following screen. Figure 104 Remote Mana gement Th[...]

Prestige 2602H/HW Series User’s Guide 244 Chapter 18 Remote Ma nagement Configuration[...]

Prestige 2602H/HW Series User’s Guide Chapter 19 Universa l Plug-and-Play (UPnP) 245 C HAPTER 19 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor . 19.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-p[...]

Prestige 2602H/HW Series User’s Guide 246 Chapter 19 Univer sal Plug-and-Play (UPnP) All UPnP-enabled devices may communicate freely with eac h other without additional configuration. Disable UPnP if this is not your intention. 19.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from th e Universal Plug and Play Forum Creates UPnP™ Implem[...]

Prestige 2602H/HW Series User’s Guide Chapter 19 Universa l Plug-and-Play (UPnP) 247 19.3 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me. 1 Click St a r t and Control Panel . Double-click Add/Remo[...]

Prestige 2602H/HW Series User’s Guide 248 Chapter 19 Univer sal Plug-and-Play (UPnP) Figure 106 Add/Remove Programs: Wind ows Setup: Communication 3 In the Communications window , select the Universal Plug and Play check bo x in the Components selection box. Figure 107 Add/Remove Programs: Wind ows Setup: Communication: Component s 4 Click OK to [...]

Prestige 2602H/HW Series User’s Guide Chapter 19 Universa l Plug-and-Play (UPnP) 249 Inst alling UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP . 1 Click St a r t and Control Panel . 2 Double-click Network Connections . 3 In the Network Connections window , click Advanced in the main menu and select Optional Networkin[...]

Prestige 2602H/HW Series User’s Guide 250 Chapter 19 Univer sal Plug-and-Play (UPnP) Figure 109 Windows Optiona l Networking Component s Wizard 5 In the Networking Services window , select the Universal Plug and Play check box.[...]

Prestige 2602H/HW Series User’s Guide Chapter 19 Universa l Plug-and-Play (UPnP) 251 Figure 1 10 Networking Services 6 Click OK to go back to the W indows Optional Networking Component W izard window and click Next . 19.4 Using UPnP in Windows XP Example This section shows yo u how to use the UPnP feature in W indows XP . Y ou must al ready have [...]

Prestige 2602H/HW Series User’s Guide 252 Chapter 19 Univer sal Plug-and-Play (UPnP) Figure 1 1 1 Network Connections 3 In the Internet Connection Properties window , click Settings to see the port mappings there were automatically created.[...]

Prestige 2602H/HW Series User’s Guide Chapter 19 Universa l Plug-and-Play (UPnP) 253 Figure 1 12 Internet Connection Properties 4 Y ou may edit or delete the port mappings o r click Add to manually add port mappings.[...]

Prestige 2602H/HW Series User’s Guide 254 Chapter 19 Univer sal Plug-and-Play (UPnP) Figure 1 13 Internet Connection Properties: Advanced Settings Figure 1 14 Internet Connection Properties: Advanced Setting s: Add 5 When the UP nP-enabled device is disconn ected from your computer , all port mappings will be deleted automatically . 6 Select Show[...]

Prestige 2602H/HW Series User’s Guide Chapter 19 Universa l Plug-and-Play (UPnP) 255 Figure 1 15 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet co nnection sta tus. Figure 1 16 Internet Connection S tatus Web Configurator Eas y Access W ith UPnP , you can access the web-based configur ator on the Prestige w ithout[...]

Prestige 2602H/HW Series User’s Guide 256 Chapter 19 Univer sal Plug-and-Play (UPnP) Figure 1 17 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for your Prestige and select Invoke . The web configurator login screen displays.[...]

Prestige 2602H/HW Series User’s Guide Chapter 19 Universa l Plug-and-Play (UPnP) 257 Figure 1 18 Network Connections: My Network Places 6 Right-click on the icon for your Prestige and select Pr operties . A properties window displays with basic information about the Prestige. Figure 1 19 Network Connections: My Network Places: Properties: Exa mpl[...]

Prestige 2602H/HW Series User’s Guide 258 Chapter 19 Univer sal Plug-and-Play (UPnP)[...]

Prestige 2602H/HW Series User’s Guide Chapter 20 Logs Scree ns 259 C HAPTER 20 Logs Screens This chapter contains inform ation about configuring genera l log settings and viewing the Prestige’ s logs. Refer to the appendix for example log message explanations. 20.1 Logs Overview The web confi gurator allows you to choose which categories of eve[...]

Prestige 2602H/HW Series User’s Guide 260 Chapter 20 Log s Screens Figure 120 Log Settings[...]

Prestige 2602H/HW Series User’s Guide Chapter 20 Logs Scree ns 261 The following table describes the fields in this screen. Table 81 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e -mail addresses specified below . If this field is le ft blank, logs and alert messages wi[...]

Prestige 2602H/HW Series User’s Guide 262 Chapter 20 Log s Screens 20.3 Displaying the Logs Click Logs and then Vi e w L o g to open the Vi e w L o g s screen. Use the Vi e w L o g s screen to see the logs for the categorie s that you selected in the Log Settings screen (s ee Section 20.2 on page 259 ). Log entries in red indicate alerts . The lo[...]

Prestige 2602H/HW Series User’s Guide Chapter 20 Logs Scree ns 263 E-mail error messages appear in SMT menu 24.3.1 as "SMTP action request failed. ret= ??". The “??"are described in the following table. 20.4.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The f[...]

Prestige 2602H/HW Series User’s Guide 264 Chapter 20 Log s Screens Figure 122 E-mail Log Example Subject: Firewall Alert From Prestige Date: Fri, 07 Apr 2000 10:05:42 From: user@zyxel.com To: user@zyxel.com 1| Apr 7 00 |From:192.168.1.1 To:192.168.1.255 |default polic y |forward | 09:54:03 |UDP src port:00520 dest port:00520 |<1,00> | 2|Apr[...]

Prestige 2602H/HW Series User’s Guide Chapter 21 M edia Bandwidth Managemen t Advanced Setup 265 C HAPTER 21 Media Bandwid th Management Advanced Setup This chapter describes the functions and advan ced configuration of bandwidth man agement. 21.1 Bandwid th Management Advanced Setup Overview Bandwidth management allo ws you to allocate an interf[...]

Prestige 2602H/HW Series User’s Guide 266 Chapter 21 Med ia Bandwidth Management Advanced Setu p you configure child-classes with filters for any classes that you configure without filters. The Prestige leaves the bandwidth bud get allocated and unused for a class that does not have a filter itself or child-classes with filters. V iew your config[...]

Prestige 2602H/HW Series User’s Guide Chapter 21 M edia Bandwidth Managemen t Advanced Setup 267 Figure 124 Subnet-based Ba ndwidt h Management Example 21.4.3 Application and Subn et-based Bandwid th Management Example The following example uses bandwidth classes based on LAN subnets and applications (specific applications in each subnet ar e all[...]

Prestige 2602H/HW Series User’s Guide 268 Chapter 21 Med ia Bandwidth Management Advanced Setu p 21.5 Scheduler The scheduler divides up an interface’ s bandwi dth among the bandwidth classes. The Prestige has two types of schedule r: fair ness-based and priority-based. 21.5.1 Priority-based Scheduler W ith the priority-based scheduler , the Pr[...]

Prestige 2602H/HW Series User’s Guide Chapter 21 M edia Bandwidth Managemen t Advanced Setup 269 21.6.2 Maximize Ba ndwid th Usage Example Here is an example of a Prestige that has ma xi mized bandwidth usage ena bled on an interface. The first figure shows each bandwidth class’ s bandwidth budget and pr iority . The classes are set up based on[...]

Prestige 2602H/HW Series User’s Guide 270 Chapter 21 Med ia Bandwidth Management Advanced Setu p Figure 127 Maximize Bandwid th Usage Example 21.7 Bandwid th Borrowing Bandwidth borrowing allows a child -class to borrow unused bandwidth from its paren t class, whereas maximize bandwidth usage allows bandwidth classes to bo rrow any unused or unbu[...]

Prestige 2602H/HW Series User’s Guide Chapter 21 M edia Bandwidth Managemen t Advanced Setup 271 Figure 128 Bandwidth Borrowing Example • The Administration and Sales classes canno t borrow unused bandwidt h from the Root class because the Administration and Sale s classes has bandwidth borrowing disabled. • The Marketing and R&D clas ses[...]

Prestige 2602H/HW Series User’s Guide 272 Chapter 21 Med ia Bandwidth Management Advanced Setu p Figure 129 Media Bandwid th Management: Summa ry The following table describes the labels in this screen. Table 85 Media Bandwid th Management: Summary LABEL DESCRIPTION LAN WLAN WA N These read-only labels repres ent the physical interfaces. Active S[...]

Prestige 2602H/HW Series User’s Guide Chapter 21 M edia Bandwidth Managemen t Advanced Setup 273 21.9 Configuring Class Setup The class se tup screen displays the configured band width classes by individual interface. Select an interface and click the buttons to pe rform the actions describe d next. Click “+” to expand the class tree or click[...]

Prestige 2602H/HW Series User’s Guide 274 Chapter 21 Med ia Bandwidth Management Advanced Setu p 21.9.1 Media Bandwid th Mana gement Class Configuration Configure a bandwidth management class in the Class Configuration scre en. Y ou must use the Media Bandwidth Management - Summary screen to enable bandwidth management on an interface before you [...]

Prestige 2602H/HW Series User’s Guide Chapter 21 M edia Bandwidth Managemen t Advanced Setup 275 Borrow bandwidth from parent class Select this option to allow a chi ld-class to borrow band width from its p aren t class if the parent class is not using up its bandwidth budget. Bandwidth borrowing is governed by the priori ty of the child-classes.[...]

Prestige 2602H/HW Series User’s Guide 276 Chapter 21 Med ia Bandwidth Management Advanced Setu p 21.9.2 Media Bandwid th Management St atistics Use the Media Bandwidth Management S tatistics screen to view network performance information. Click the S tatistics button in the Clas s Setup screen to open the St a t i s t i c s screen. Apply Click Ap[...]

Prestige 2602H/HW Series User’s Guide Chapter 21 M edia Bandwidth Managemen t Advanced Setup 277 Figure 132 Media Bandwid th Management S tatistics The following table describes the labels in this screen. 21.10 Bandwid th Monitor T o view the Pres tige’ s bandwidt h usage and al lotments, click Media Bandwidth Management , then Monitor . The sc[...]

Prestige 2602H/HW Series User’s Guide 278 Chapter 21 Med ia Bandwidth Management Advanced Setu p Figure 133 Media Bandwid th Management: Moni tor The following table describes the labels in this screen. T able 90 Media Bandwidth Mana gement: Monitor LABEL DESCRIPTION Interface Select an interface from the drop-d own list box to view the bandwidth[...]

Prestige 2602H/HW Series User’s Guide Chapter 22 Maintenance 279 C HAPTER 22 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 22.1 Maintenance Overview The maintenanc e screens can help you view system inform a tion, upload new firmware, manage configuratio n and restart y[...]

Prestige 2602H/HW Series User’s Guide 280 Chapter 22 Maintenance Figure 134 System S tatus[...]

Prestige 2602H/HW Series User’s Guide Chapter 22 Maintenance 281 The following table describes the fields in this screen. Table 91 System S tatus LABEL DESCRIPTION System S tatus System Name This is the name of your Prestige. It is for identification purposes. ZyNOS Firmware Ve r s i o n This is the ZyNOS firmware version and the date created. Zy[...]

Prestige 2602H/HW Series User’s Guide 282 Chapter 22 Maintenance 22.2.1 System St atistics Click Show S tatistics in the System S tatus screen to open the following screen. Read-only information here includes port status and packet specific statistics. Also provided are "system up time" and "poll interval(s)". The Poll Interva[...]

Prestige 2602H/HW Series User’s Guide Chapter 22 Maintenance 283 22.3 DHCP T able Screen DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows indiv idual clients to obtain TCP/IP configuration at star t-up from a server . Y ou can configure the Prestige as a DHCP server or disable it. When configured as a server, the Prestige[...]

Prestige 2602H/HW Series User’s Guide 284 Chapter 22 Maintenance Figure 136 DHCP T able The following table describes the fields in this screen. 22.4 Any IP T able Screen Click Maintenance , Any IP . The Any IP table shows cu rrent read-only information (including the IP address and the MAC address) of all network devices that use the Any IP feat[...]

Prestige 2602H/HW Series User’s Guide Chapter 22 Maintenance 285 22.5 Wireless Screen The read-only screen displays informa tion about the Prestige’ s wireless LAN. 22.5.1 Association List This screen displays the MAC address(es) of the wireless stations that are currently logged in to the network. Click Wir eless LAN and then Association List [...]

Prestige 2602H/HW Series User’s Guide 286 Chapter 22 Maintenance 22.6 Diagnostic Screens These read-only screens display information to help you identify proble ms with the Prestige. 22.6.1 Diagnostic General Screen Click Diagnostic and then General to open the screen show n next. Figure 139 Diagnostic: General The following table describes the f[...]

Prestige 2602H/HW Series User’s Guide Chapter 22 Maintenance 287 Figure 140 Diagnostic: DSL Line The following table describes the fields in this screen. Table 97 Diagnostic: DSL Line LABEL DESCRIPTION Reset ADSL Line Click this button to reinitialize the ADSL line. The large text box above then displays the progress and results of this operation[...]

Prestige 2602H/HW Series User’s Guide 288 Chapter 22 Maintenance 22.7 Firmware Screen Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a "*.bin" extension, e.g., "Prestige.bin". The upload process uses HTTP (Hypertext T ransfer Protocol) and may take up to two minutes. Afte r a successfu[...]

Prestige 2602H/HW Series User’s Guide Chapter 22 Maintenance 289 The Prestige automatically restarts in this time causing a temporary networ k disconnect. In some operating systems, you may see the following icon on your desktop. Figure 142 Network T emporarily Disconnected After two minutes, log in again an d check your new firmware version in t[...]

Prestige 2602H/HW Series User’s Guide 290 Chapter 22 Maintenance[...]

Prestige 2602H/HW Series User’s Guide Chapter 23 Intro ducing the SMT 291 C HAPTER 23 Introducing the SMT This chapter explains how to access and na viga te the System Management T erminal and gives an overview of its menus. 23.1 Introduction to the SMT T he Prestige’ s SMT (System Ma nagement T e rminal) is a menu-driven in terface that you ca[...]

Prestige 2602H/HW Series User’s Guide 292 Chapter 23 In troducing the SM T Figure 144 Login Screen 23.2 Navigating the SMT Interface The SMT (System Manage ment T erminal) is the interface that you use to co nfigure your Prestige. Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in th[...]

Prestige 2602H/HW Series User’s Guide Chapter 23 Intro ducing the SMT 293 After you enter the password, the SMT di splays the main menu, as shown next. 23.2.1 System Manage ment T erminal Interface Summary T able 100 SMT Main Menu Copyright (c) 1994 - 2004 ZyXEL Comm unications Corp. Prestige 2602HW-61C Main M enu Getting Started Advanced Managem[...]

Prestige 2602H/HW Series User’s Guide 294 Chapter 23 In troducing the SM T 23.2.2 SMT Menus Overview The following table gi ves you an overview of y our Prestige’ s various SMT menus. Table 102 SMT Menus Overvi ew MENUS SUB MENUS 1 General Setup 1.1 Configure Dynamic DNS 2 W AN Backup Setup 2.1 T raffic Redirect Setup 3 LAN Setup 3.1 LAN Port F[...]

Prestige 2602H/HW Series User’s Guide Chapter 23 Intro ducing the SMT 295 23.3 Changing the System Password Change the P restige defau lt password by following the steps shown next. 1 Enter 23 in the main menu to display Menu 23 - System Securi ty . 2 Enter 1 to display Menu 23.1 - System Security - Change Password as shown next. 3 T ype your exi[...]

Prestige 2602H/HW Series User’s Guide 296 Chapter 23 In troducing the SM T Figure 145 Menu 23.1 Chang e Password 4 T ype your new system password in the New Password field (up to 30 characters), and press [ENTER] . 5 Re-type your new system password in the Retype to confirm field for confirmation and press [ENTER] . Note: Note that as you type a [...]

Prestige 2602H/HW Series User’s Guide Chapter 24 Menu 1 General Setup 297 C HAPTER 24 Menu 1 General Setup Menu 1 - General Setup contains administra tive an d system-related information. 24.1 General Setup Menu 1 — General Setup contains administrative and system-related information (shown next). The System Name field is for identification pur[...]

Prestige 2602H/HW Series User’s Guide 298 Chapter 24 Menu 1 General Setup Figure 146 Menu 1 General Setu p Fill in the required fields. Refer to the tabl e shown next for more information about these fields. 24.2.1 Procedure to Configure Dynamic DNS Note: If you have a private W AN IP address, then you cannot use dynamic DNS. T o configure dy nam[...]

Prestige 2602H/HW Series User’s Guide Chapter 24 Menu 1 General Setup 299 Figure 147 Menu 1.1 Configure Dyn amic DNS Follow the instructions in the next tabl e to configure dynamic DNS parameters. Menu 1.1 - Configure Dynamic DNS Service Provider= WWW.DynDNS.ORG Active= No Host= EMAIL= USER= Password= ******** Enable Wildcard= No Press ENTER to C[...]

Prestige 2602H/HW Series User’s Guide 300 Chapter 24 Menu 1 General Setup[...]

Prestige 2602H/HW Series User’s Guide Chapter 25 Menu 2 WAN Backup Setup 301 C HAPTER 25 Menu 2 W AN Backup Setup This chapter describes how to co nfigure traffic redirect and dial-backup using me nu 2 and 2.1. 25.1 Introduction to W AN Backup Setup This chapter explains how to configure the Prestige for traf fic redirect connections. 25.2 Config[...]

Prestige 2602H/HW Series User’s Guide 302 Chapter 25 Menu 2 WAN Backup Setup 25.2.1 T raffic Redirect Setup Configure parameters that determine when th e Prestige will forward W AN traffic to the backup gateway using Menu 2.1 — T raffic Redir ect Setup . Figure 149 Menu 2.1 T raffic Redirect Setup The following table describes the fields in thi[...]

Prestige 2602H/HW Series User’s Guide Chapter 25 Menu 2 WAN Backup Setup 303 Metric This field set s this route's prio rity among the routes the Prestige uses. The metric represents the "cost of transm ission". A router determine s the best route for transmission by choosing a path with th e lowest "cost". RIP routing use[...]

Prestige 2602H/HW Series User’s Guide 304 Chapter 25 Menu 2 WAN Backup Setup[...]

Prestige 2602H/HW Series User’s Guide Chapter 26 Menu 3 LAN Setup 305 C HAPTER 26 Menu 3 LAN Setup This chapter covers how to configure your wired Local Area Network (LAN) settings. 26.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 — LAN Setup . From the main menu, enter 3 to display menu 3. Figure 150 Menu 3 LAN [...]

Prestige 2602H/HW Series User’s Guide 306 C hapter 26 Men u 3 LAN Setup • For TCP/IP Ethernet setup refer to Section 28. 6 on page 316 . • For bridging Ethernet setup refer to Chapter 31 on page 333 . 26.3 TCP/IP Ethernet Setup and DHCP Use menu 3.2 to con figure your Prestige fo r TCP/IP . T o edit menu 3.2, enter 3 fro m the main menu to di[...]

Prestige 2602H/HW Series User’s Guide Chapter 26 Menu 3 LAN Setup 307 Follow the instructions in the following tabl e to configure TCP/IP parameters for the Ethernet port. Size of Client IP Pool This field speci fies the size or count of the IP address pool. Primary DNS Server Secondary DNS Server Enter the IP addresses of the DNS serv ers. T he [...]

Prestige 2602H/HW Series User’s Guide 308 C hapter 26 Men u 3 LAN Setup[...]

Prestige 2602H/HW Series User’s Guide Chapter 27 Wireless LAN Setup 309 C HAPTER 27 W ireless LAN Setup This chapter covers how to configure wireless LAN settings in SMT menu 3.5. 27.1 Wireless LAN Overview Refer to the chapter on the wireless LAN scr eens for wireless LAN background information. 27.2 Wireless LAN Setup Use menu 3.5 to set up you[...]

Prestige 2602H/HW Series User’s Guide 310 Chapter 27 Wirele ss LAN Setup 27.2.1 Wireless LAN MAC Address Filter The next layer of security is MAC address filter . T o allow a wireless st ation to associate with the Prestige, enter the MAC address of the wireless LAN ada pter on that wireless station in the MAC address table. Channel ID Press [SP [...]

Prestige 2602H/HW Series User’s Guide Chapter 27 Wireless LAN Setup 311 Figure 154 Menu 3.5.1 WLAN MAC Address Filtering The following table describes the fields in this menu. Menu 3.5.1 - W LAN MAC Address Filter Active= No Filter Action= A llowed Association ----------------------------------- --------------------------------- ------ 1= 00:00:0[...]

Prestige 2602H/HW Series User’s Guide 312 Chapter 27 Wirele ss LAN Setup[...]

Prestige 2602H/HW Series User’s Guide Chapter 28 Internet Access 313 C HAPTER 28 Internet Access This chapter shows you how to configure the LAN and W AN of your Prestige for Int ernet access . 28.1 Internet Access Overview Refer to the chapters on the web configurat or’ s wiz ard, LAN and W AN screens for more background information on fields [...]

Prestige 2602H/HW Series User’s Guide 314 Chapter 28 Internet Access Figure 155 IP Alias Network Example Use menu 3.2.1 to co nfigure IP Alias on your Prestige. 28.4 IP Alias Setup Use menu 3.2 to configure the first netw ork. Move the cursor to Edit IP Alias field and press [ SP ACEBAR] to choose Ye s and press [ENTER] to configure the second an[...]

Prestige 2602H/HW Series User’s Guide Chapter 28 Internet Access 315 Figure 157 Menu 3.2.1 IP Alias Setup Follow the instructions in the following table to configure IP Alias parameters. 28.5 Route IP Setup The first step is to en able the IP routing in Menu 1 — General Setup . T o edit menu 1, type 1 in the main menu and press [ ENTER ]. Set t[...]

Prestige 2602H/HW Series User’s Guide 316 Chapter 28 Internet Access Figure 158 Menu 1 General Setu p 28.6 Internet Access Configuration Menu 4 allows you to enter the Internet Access information in one screen. Menu 4 is actually a simplified setup for one of t he remote nodes that you can access in menu 1 1. Before you configure your Prestige fo[...]

Prestige 2602H/HW Series User’s Guide Chapter 28 Internet Access 317 . If all your settings are correct your Prestige shou ld connect automatically to the Internet. If the connection fails, note the error message that you receive on the screen and take the appropriate troubleshooting steps. Table 112 Menu 4 Internet Access Setup FIELD DESCRIPTION[...]

Prestige 2602H/HW Series User’s Guide 318 Chapter 28 Internet Access[...]

Prestige 2602H/HW Series User’s Guide Chapter 29 Remot e Node Configur ation 319 C HAPTER 29 Remote Node Configuration This chapter covers remo te node configuration. 29.1 Remote Node Setup Overview This section describes the protocol-independent parameters for a remote node. A remote node is required for placing calls to a remote gateway . A rem[...]

Prestige 2602H/HW Series User’s Guide 320 Chap ter 29 Remote Node Configuratio n Figure 160 Menu 1 1 Remote Node Setup 29.2.2 Encap sulation and Multiplexing Scenarios For Internet access you should use the encapsulation and multiple xing methods used by your ISP . Consult your telephone company f or information on en capsulation and multiplexing[...]

Prestige 2602H/HW Series User’s Guide Chapter 29 Remot e Node Configur ation 321 Figure 161 Menu 1 1.1 Remote Node Profile In Menu 1 1 .1 – Remote Node Profile , fill in the fields as describ ed in the following table. Menu 11.1 - Remote Node Profile Rem Node Name= MyISP Route= IP Active= Yes Bridge= No Encapsulation= RFC 1483 Edit IP/Bridge= N[...]

Prestige 2602H/HW Series User’s Guide 322 Chap ter 29 Remote Node Configuratio n 29.2.3 Outgoing Au thentication Protocol For obvious reasons, you sho uld employ the strongest authentication protocol possible. However , some vendors’ implementation includes specific authentication protocol in the user profile. It will disconnect if the negotiat[...]

Prestige 2602H/HW Series User’s Guide Chapter 29 Remot e Node Configur ation 323 29.3 Remote Node Network Layer Options For the TCP/IP parameters, perf orm the following steps to edit Menu 1 1.3 – Remote Node Network Layer Options as shown next. 1 In menu 1 1.1, make sure IP is among the protocols in the Route field. 2 Move the cu rs or to the [...]

Prestige 2602H/HW Series User’s Guide 324 Chap ter 29 Remote Node Configuratio n 29.3.1 My W AN Addr Sample IP Addresses The following figure uses sample IP addresses to help yo u understand the field of My W AN Addr in menu 1 1.3. Refer to the previous Figure 24 on page 81 in the web configurator chapter on LAN setup for a brief review of what a[...]

Prestige 2602H/HW Series User’s Guide Chapter 29 Remot e Node Configur ation 325 Figure 163 Sample IP Addresses for a TC P/IP LAN-to-LAN Connection 29.4 Remote Node Filter Move the cu rs or to the Edit Filter Sets field in menu 1 1 .1, then press [SP ACE BAR] to select Ye s . Press [ENTER] to di splay Menu 1 1.5 – Remote Node Filter . Use Menu [...]

Prestige 2602H/HW Series User’s Guide 326 Chap ter 29 Remote Node Configuratio n Figure 164 Menu 1 1.5 Remote Node Filter (RFC 1483 or ENET Encap sulation) Figure 165 Menu 1 1.5 Remote Node Filter (PPPoA or PPPoE Encapsulation) 29.5 Editing A TM Layer Options Follow the steps shown next to edit Menu 1 1.6 – Remote Node A TM Layer Options . In m[...]

Prestige 2602H/HW Series User’s Guide Chapter 29 Remot e Node Configur ation 327 Figure 166 Menu 1 1.6 for VC-based Multiplexing 29.5.2 LLC-based Multiplexing or PPP Encap sulation For LLC-based multiplexing or PPP encapsulation, one VC ca rries multiple protocols with protocol identifyi ng information being contained in each packet header . Figu[...]

Prestige 2602H/HW Series User’s Guide 328 Chap ter 29 Remote Node Configuratio n Figure 168 Menu 1 1.1 Remote Node Profile Move the cursor to the Edit Advance Options field, press [SP ACE BAR] to select Ye s , then press [ENTER] to display Menu 1 1.8 – Advance Setup Options . Figure 169 Menu 1 1.8 Advance Setu p Options The following table desc[...]

Prestige 2602H/HW Series User’s Guide Chapter 30 Static Route Setup 329 C HAPTER 30 S t atic Route Setup This chapter shows how to setup IP static routes. 30.1 IP S t atic Route Overview Stat ic routes tell the Prestige ro uting information that i t cann ot learn automatically through other means. This can arise in cases where RIP is disabled on [...]

Prestige 2602H/HW Series User’s Guide 330 Chapter 30 Static Route Setup Figure 171 Menu 12 S tatic Route Setu p From menu 12, select 1 to open Menu 12.1 — IP S tatic Route Setup (shown next). Figure 172 Menu 12.1 IP S tatic Route Setup Now , type the route number of a st atic route you want to configure. Figure 173 Menu12.1.1 Edit IP S tatic Ro[...]

Prestige 2602H/HW Series User’s Guide Chapter 30 Static Route Setup 331 T able 1 16 Menu12.1.1 Edit IP S tatic Route FIELD DESCRIPTION Route # This is the index number of the stat ic route that you chose in menu 12.1. Route Name T ype a descriptive name for this route . This is for identification purpose only . Active This field allows you to act[...]

Prestige 2602H/HW Series User’s Guide 332 Chapter 30 Static Route Setup[...]

Prestige 2602H/HW Series User’s Guide Chapter 31 Bridgin g Setup 333 C HAPTER 31 Bridging Setup This chapter shows you how to configure the bridgin g parameters of your Prestige. 31.1 Bridging in General Bridging bases the forwarding decision on th e MAC (Media Access Control), or ha rdware address, while routing does it on the network layer (IP)[...]

Prestige 2602H/HW Series User’s Guide 334 Chapter 31 Bridging Setup Figure 174 Menu 1 1.1 Remote Node Profile 3 Move the cursor to the Edit IP/Bridge field, then press [ SP ACE BAR ] to set the value to Ye s and pres s [ENTER] to edit Menu 1 1.3 – Remote Node Network Layer Options . Figure 175 Menu 1 1.3 Remote Node Network Laye r Options Menu [...]

Prestige 2602H/HW Series User’s Guide Chapter 31 Bridgin g Setup 335 31.2.2 Bridge St atic Route Setup Similar to network layer static routes, a bridging static route tells the Prestige the route to a node before a conn ection is established. Y ou c onfigure b ridge static routes in menu 12.3.1 (go to menu 12, choose option 3, then choose a stati[...]

Prestige 2602H/HW Series User’s Guide 336 Chapter 31 Bridging Setup[...]

Prestige 2602H/HW Series User’s Guide Chapter 32 Network Address Translation (NAT) 337 C HAPTER 32 Network Address T ranslation (NA T) This chapter discusses how to configure NA T on the Prestige. 32.1 Using NA T Y ou must create a firewall rule in addition to setting up SUA/NA T , to allow traffic from the W AN to be forwarded through the Presti[...]

Prestige 2602H/HW Series User’s Guide 338 Chapter 32 Network Address Transla tion (NAT) Figure 177 Menu 4 Applying NA T for Internet Access The following figure shows how you apply NA T to the remote node in menu 1 1.1. 1 Enter 1 1 from the main menu. 2 When menu 1 1 appears, as shown in th e follo wing figure, type the number of the remote node [...]

Prestige 2602H/HW Series User’s Guide Chapter 32 Network Address Translation (NAT) 339 32.3 NA T Setup Use the address mapping sets me nus and submenus to create the mapping table used to assign global addresses to computers on the LAN. Set 255 is used for SUA. When you select Full Feature in menu 4 or 1 1.3, the SMT will use Set 1 . When you sel[...]

Prestige 2602H/HW Series User’s Guide 340 Chapter 32 Network Address Transla tion (NAT) Figure 180 Menu 15.1 Addr ess Mapping Sets 32.3.1.1 SUA Address Mapping Set Enter 255 to display the next screen (see also secti on 27.1.1). The fields in t his menu cannot be changed. Figure 181 Menu 15.1.255 SUA Address Mapping Rule s The following table exp[...]

Prestige 2602H/HW Series User’s Guide Chapter 32 Network Address Translation (NAT) 341 32.3.1.2 User-Defined Address Mapping Set s Now let’ s look at option 1 in menu 15.1. En ter 1 to bring up this menu. W e’ll just look at the differences from the previous menu. Note the extra Action and Select Rule fields mean you can configure rules in th[...]

Prestige 2602H/HW Series User’s Guide 342 Chapter 32 Network Address Transla tion (NAT) Now if you delete rule 4, rules 5 to 7 will be pus hed up by 1 rule, so as old rule 5 become s rule 4, old rule 6 becomes rule 5 and o ld rule 7 becomes rule 6. Y ou must press [ENTER] at the bottom of the screen to save the whole set. Y ou must do this again [...]

Prestige 2602H/HW Series User’s Guide Chapter 32 Network Address Translation (NAT) 343 32.4 Configuring a Server Behind NA T Follow these steps to config ure a server behind NA T : 1 Enter 15 in the main menu to go to Menu 15 - NA T Setup . 2 Enter 2 to display Menu 15.2 - NA T Server Sets as shown next. Figure 184 Menu 15.2 NA T Server Setup 3 E[...]

Prestige 2602H/HW Series User’s Guide 344 Chapter 32 Network Address Transla tion (NAT) Figure 185 Menu 15.2 NA T Server Setup 4 Enter a port number in an unused St a r t P o r t N o field. T o forward only one port, enter it again in the End Port No field. T o specify a range of po rts, enter the last port to be forwarded in the End Port No fiel[...]

Prestige 2602H/HW Series User’s Guide Chapter 32 Network Address Translation (NAT) 345 32.5.1 Example 1: Internet Access Only In the following Internet access example, you only need one rule where your ILAs (Inside Local addresses) all map to one dynamic IGA (In side Global Address) assigned by your ISP . Figure 187 NA T Examp le 1 Figure 188 Men[...]

Prestige 2602H/HW Series User’s Guide 346 Chapter 32 Network Address Transla tion (NAT) Figure 189 NA T Examp le 2 In this case, you do exactly as above (use the convenient pre-configured SUA Only set) and also go to menu 15.2 to specify the Inside Server behind the NA T as shown in the next figure. Figure 190 Menu 15.2.1 S pecifying an Inside Se[...]

Prestige 2602H/HW Series User’s Guide Chapter 32 Network Address Translation (NAT) 347 Y ou also map your third IGA to the web server and mail server on the LAN. T ype Server allows you to specify multiple se rvers, of dif ferent types, to other computers behind NA T on the LAN. The example situation looks somewhat like this: Figure 191 NA T Exam[...]

Prestige 2602H/HW Series User’s Guide 348 Chapter 32 Network Address Transla tion (NAT) Figure 192 Example 3: Menu 1 1.3 The following figures show how to configure the first rule Figure 193 Example 3: Menu 15.1.1.1 Menu 11.3 - Remote Node Network Laye r Options IP Options: Bridge Options: IP Address Assignment= Static Ethernet Addr Timeout (min)[...]

Prestige 2602H/HW Series User’s Guide Chapter 32 Network Address Translation (NAT) 349 Figure 194 Example 3: Final Menu 15.1.1 Now configure the IGA3 to map to our web server and mail server on the LAN. 1 Enter 15 from the main menu. 2 Enter 2 in Menu 15 - NA T Setup . 3 Enter 1 in Menu 15.2 - NA T Server Sets to see the following menu. Configure[...]

Prestige 2602H/HW Series User’s Guide 350 Chapter 32 Network Address Transla tion (NAT) Figure 195 Example 3: Menu 15.2 32.5.4 Example 4: NA T Unfr iendly Application Programs Some applications do not support NA T Mapping using TCP or UDP port address translation. In this case it is better to use Many-to-Many No Overload mapp ing as port numb ers[...]

Prestige 2602H/HW Series User’s Guide Chapter 32 Network Address Translation (NAT) 351 Figure 197 Example 4: Menu 15.1.1.1 Address Mappin g Rule After you’ve configured your rule , you should be able to check the settings in menu 15.1.1 as shown next. Figure 198 Example 4: Menu 15.1.1 Address Map ping Rules Menu 15.1.1.1 Address Mapping Rule Ty[...]

Prestige 2602H/HW Series User’s Guide 352 Chapter 32 Network Address Transla tion (NAT)[...]

Prestige 2602H/HW Series User’s Guide Chapter 33 Enabling the Firewall 353 C HAPTER 33 Enabling the Firewall This chapter shows you how to get started with the Prestige firewall. 33.1 Remote Management and the Firewall When SMT menu 24.1 1 is configured to allow management (see the Remote Management chapter) and the firewall is enabled: • The f[...]

Prestige 2602H/HW Series User’s Guide 354 Chapter 33 Enablin g the Firewall Figure 199 Menu 21.2 Firewa ll Setup Use the we b configurat or or the comm and in terpreter to configure the firewall rules Menu 21.2 - Firewall Setup The firewall protects against Denial of Service (DOS) attacks w hen it is active. The default Poli cy sets 1. allow all [...]

Prestige 2602H/HW Series User’s Guide Chapter 34 Filter Configuration 355 C HAPTER 34 Filter Configuration This chapter shows you how to create and apply filters. 34.1 About Filtering Y our Prestige uses filters to deci de whether or not to allow passage of a data packet and/or to make a call. There are two types of filter appli cations: data fil[...]

Prestige 2602H/HW Series User’s Guide 356 Chapter 34 Filter Configuration Figure 201 Filter Rule Process Y ou can apply up to four filter sets to a partic ular port to block various types of packets. Because each filter set can have up to six rules, you can have a maximum of 24 rules active for a single port. For incoming packets, yo ur Prestige [...]

Prestige 2602H/HW Series User’s Guide Chapter 34 Filter Configuration 357 34.2 Configuring a Filter Set for the Prestige T o configure a filter set, follow the steps shown next. 1 Enter 21 in the main menu to display Menu 21 – Filter and Fir ewall Setup . 2 Enter 1 to display Menu 21.1 – Filter Set Configu ration as shown next. Figure 202 Men[...]

Prestige 2602H/HW Series User’s Guide 358 Chapter 34 Filter Configuration Figure 204 NetBIOS_LAN Filter Rules Summary Figure 205 IGMP Filter Rules Summary 34.3 Filter Rules Summary Menus The following tables briefly descri be the abbreviations used in menus 21.1.1 and 21.1.2. Menu 21.1.3 - Filter Rules Summary # A Type Filter Rules M m n - - ----[...]

Prestige 2602H/HW Series User’s Guide Chapter 34 Filter Configuration 359 The protocol dependent filter rules abbreviation are listed as follows: 34.4 Configuring a Filter Rule T o configure a filter rule , type its number in Menu 21.1.x – Filter Rules Summary and press [ENTER] to open menu 21.1 .x.1 for the rule. There are two types of filter [...]

Prestige 2602H/HW Series User’s Guide 360 Chapter 34 Filter Configuration 34.4.1 TCP/IP Filter Rule This section shows you how to configure a TCP/IP filter rule. TCP/IP rules allow you to base the rule on the fiel ds in the IP and the upper layer p rotocol, for example, UDP and TCP headers. T o configure TCP/IP rules, select TCP/IP Filter Rule fr[...]

Prestige 2602H/HW Series User’s Guide Chapter 34 Filter Configuration 361 The following figure illustrates th e logic flow of an IP filter. Port # T ype the de stination port of the packets you want to filter . The field range is 0 to 65535. A 0 field i s ignored. Port # Comp Select the comparison to apply to the dest ination po rt in the packet [...]

Prestige 2602H/HW Series User’s Guide 362 Chapter 34 Filter Configuration Figure 207 Executing an IP Filter 34.4.2 Generic Filter Rule This section shows you how to co nfigure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP , it is generally easier to us e the IP rules directly . For generic ru[...]

Prestige 2602H/HW Series User’s Guide Chapter 34 Filter Configuration 363 T o configure a generic rule select an empty filter set in menu 21, for example 5. Select Generic Filter Rule in the Filter T ype field and press [ENTER] to open Menu 21.1.5.1 – Generic Filter Rule , as shown in th e following figure. Figure 208 Menu 21.1.5.1 Generic Filt[...]

Prestige 2602H/HW Series User’s Guide 364 Chapter 34 Filter Configuration 34.5 Filter T ypes and NA T There are two classes of filter rules, Generic Filter Device rules and Protocol Filter ( TCP/IP ) rules. Generic Filter rules act on the raw data from/ to LAN and W AN. Protocol Filter rules act on IP packets. When NA T (Network Address T ranslat[...]

Prestige 2602H/HW Series User’s Guide Chapter 34 Filter Configuration 365 Figure 210 Sample T elnet Filter 1 Enter 1 in the menu 21 to display Menu 21.1 — Fi lter Set Configuration . 2 Enter the index number of th e filter set you want to configure (in this case 6) . 3 T ype a descriptive name or comment in the Edit Comments field (for example,[...]

Prestige 2602H/HW Series User’s Guide 366 Chapter 34 Filter Configuration 2 Go to the Edit Filter Sets field, press [SP ACE BAR] to choose Ye s and press [ENTER]. This brings you to menu 1 1.5. Apply the example filter set (for example, filter set 3) in this menu as shown in the next section. This shows you that you have configured and activated [...]

Prestige 2602H/HW Series User’s Guide Chapter 34 Filter Configuration 367 34.7.1 Ethernet T raffic Y ou seldom need to filter Ethernet traffic; however , the filter sets may be useful to block certain packets, reduce traffic and prevent secur ity breaches. Go to me nu 3.1 (shown next ) and type the number(s) of the filter set (s) that you want to[...]

Prestige 2602H/HW Series User’s Guide 368 Chapter 34 Filter Configuration[...]

Prestige 2602H/HW Series User’s Guide Chapter 35 SNMP Configuration 369 C HAPTER 35 SNMP Configuration This chapter explains SNMP Configuration menu 22. 35.1 About SNMP Simple Network Management Protocol (SNM P) i s a protocol u sed for exch anging management information b etween network devices. SNMP is a member of the TCP/IP protocol suite. Y o[...]

Prestige 2602H/HW Series User’s Guide 370 Chapter 35 SNMP Configuration The managed devices cont ain object variables/ managed objects that define each piece of information to be collected ab out a device. Examples of vari ables include the number of packets received, node port status etc. A Ma nagement Information Ba se (MIB) is a collection of [...]

Prestige 2602H/HW Series User’s Guide Chapter 35 SNMP Configuration 371 Figure 216 Menu 22 SNMP Configurat ion The following table describes the SNMP configuration parameters. 35.4 SNMP T rap s The Prestige will send traps to the SNMP mana ger when any one of t he following events occurs: Menu 22 - SNMP Configuration SNMP: Get Community= public S[...]

Prestige 2602H/HW Series User’s Guide 372 Chapter 35 SNMP Configuration The port number is its interface index under the interface group. 5 authenticationFailure ( defined in RFC-1215 ) A trap is sent to the manager when receiving any SNMP gets or set s requirements with wrong community (password). 6 whyReboot (defin ed in ZYXEL-MIB) A trap is se[...]

Prestige 2602H/HW Series User’s Guide Chapter 36 System Security 373 C HAPTER 36 System Security This chapter describes how to configur e the system security on the Prestige. 36.1 System Security Y ou can configure the system password.. 36.1.1 System Password Enter 23 in the main menu to display Menu 23 – System Security . Y ou should change th[...]

Prestige 2602H/HW Series User’s Guide 374 Chapter 36 Syst em Security Figure 219 Menu 23.2 System Security: RADIUS Server The following table describes the fields in this menu. Menu 23.2 - System Security - RADIUS Server Authentication Server: Active= No Server Address= 10.1 1.12.13 Port #= 1812 Shared Secret= ***** *** Accounting Server: Active=[...]

Prestige 2602H/HW Series User’s Guide Chapter 36 System Security 375 36.1.3 IEEE802.1x The IEEE802.1x standards outline enhanced secur ity methods for both the authentication of wireless stations and en cryption key managemen t. Follow the steps below to enable EA P authentication on your Prestige. 1 From the main menu, enter 23 to display Menu23[...]

Prestige 2602H/HW Series User’s Guide 376 Chapter 36 Syst em Security T able 132 Menu 23.4 System Security : IEEE802.1x FIELD DESCRIPTION Wireless Port Control Press [SP ACE BAR] and select a securi ty mode for the wireless LAN acc ess. Select No Authentication Required to allow any wi reless st ations access to your wired network without enterin[...]

Prestige 2602H/HW Series User’s Guide Chapter 36 System Security 377 Once you enable user authenticatio n, you need to specify an exte rnal RADIUS server or create local user accounts on the Prestige for authentication. 36.2 Creating User Account s on the Prestige By storing user profiles locally , your Prestige is able to authenticate wireless u[...]

Prestige 2602H/HW Series User’s Guide 378 Chapter 36 Syst em Security Figure 222 Menu 14 Dial-in User Setup 2 T ype a number and press [ENTER] to edit the user profile. Figure 223 Menu 14.1 Edit Dial-in User The following table describes the fields in this menu. Menu 14 - Dial-in U ser Setup 1. ________ 9. ________ 17. ________ 25. _____ ___ 2. _[...]

Prestige 2602H/HW Series User’s Guide Chapter 37 System Inform ation and Diagnosis 379 C HAPTER 37 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. 37.1 Overview These tools include updates on system status , port status, log and trace capabiliti es and upgrades for the system s[...]

Prestige 2602H/HW Series User’s Guide 380 Chapter 37 System Information and Diagnosis The following table describes the fields present in Menu 24.1 — System Maintenance — St a t u s which are read-only and meant for diagnostic purp oses. Figure 225 Menu 24.1 System Maintenance : S tatus The following table describes the fields present in Menu[...]

Prestige 2602H/HW Series User’s Guide Chapter 37 System Inform ation and Diagnosis 381 37.3 System Information T o get to the System Information: 1 Enter 24 to display Menu 24 — System Maintenance . 2 Enter 2 to display Menu 24.2 — System Inform ation and Console Port Speed . From this menu you have two choices as shown in th e next figure: F[...]

Prestige 2602H/HW Series User’s Guide 382 Chapter 37 System Information and Diagnosis Figure 227 Menu 24.2.1 System Maintenance: In formation The following table describes the fields in this menu. 37.3.2 Console Port Speed Note: The console port is intern al and reserved for technician use only . Y ou can set up different port speeds for the cons[...]

Prestige 2602H/HW Series User’s Guide Chapter 37 System Inform ation and Diagnosis 383 Figure 228 Menu 24.2.2 System Maintenanc e: Change Console Port S peed Once you change the Prestige console po rt speed , you must also set the speed parameter for the communication software you are using to connect to the Prestige. 37.4 Log and T race There ar[...]

Prestige 2602H/HW Series User’s Guide 384 Chapter 37 System Information and Diagnosis Figure 230 Sample Error an d Informat ion Messages 37.4.2 Syslog and Accounting The Prestige uses the syslog fa cility to log the CDR (Call Deta il Record) and system messages to a syslog server. Syslog and accounting can be configured in Menu 24.3.2 — System [...]

Prestige 2602H/HW Series User’s Guide Chapter 37 System Inform ation and Diagnosis 385 Figure 232 Syslog Example 1 - CDR SdcmdSyslogSend ( SYSLOG_CDR, SYSLOG _INFO, String); String = board xx line xx channel xx , call xx, str board = the hardware board ID line = the WAN ID in a board Channel = channel ID within the WAN call = the call reference n[...]

Prestige 2602H/HW Series User’s Guide 386 Chapter 37 System Information and Diagnosis 37.5 Diagnostic The diagnostic facility allows you to test the di f ferent aspects of your Prestige to determine if it is working properly . Menu 24.4 allows you to choose among various ty pes of diagnostic tests to evaluate your system, as shown in the followin[...]

Prestige 2602H/HW Series User’s Guide Chapter 37 System Inform ation and Diagnosis 387 The following table describes the diagnostic tests available in menu 24.4 for and the connections. T able 137 Menu 24.4 System Maintenance Menu: Diagnostic FIELD DESCRIPTION Reset xDSL Re-initia lize the xDSL link to the teleph one company . Ping Host Ping th e[...]

Prestige 2602H/HW Series User’s Guide 388 Chapter 37 System Information and Diagnosis[...]

Prestige 2602H/HW Series User’s Guide Chapter 38 Firmware and Confi guration File Maintenance 389 C HAPTER 38 Firmware and Configuration File Maintenance This chapter tells y ou how to backup and restor e your configuration file as well as upload new firmware and configuration files. 38.1 Filename Conventions The configuration file (often ca lled[...]

Prestige 2602H/HW Series User’s Guide 390 Chapter 38 Firm ware and Configur ation File Mainte nance The following table is a summary . Please note that the internal filename refe rs to the filename on the Prestige and the external f ilename refers to the filename not on the Prestige, that is, on your computer , local network or FTP site and so th[...]

Prestige 2602H/HW Series User’s Guide Chapter 38 Firmware and Confi guration File Maintenance 391 Figure 234 T elnet in Menu 24.5 38.2.2 Using the FTP Command from the Comman d Line 1 Launch the FTP client on your computer . 2 Enter “ open ”, followed by a space and the IP address of your Prestige. 3 Press [ENTER] when prompted for a username[...]

Prestige 2602H/HW Series User’s Guide 392 Chapter 38 Firm ware and Configur ation File Mainte nance Figure 235 FTP Session Example 38.2.4 GUI-based FTP Clients The following table describes some of the commands that you may see in GUI-based FTP clients. 38.2.5 TFTP and FTP over W AN Management Limit ations TFTP , FTP and T elnet over W AN will no[...]

Prestige 2602H/HW Series User’s Guide Chapter 38 Firmware and Confi guration File Maintenance 393 38.2.6 Backup Configuration Using TFTP The Prestige support s the up/downloading of the firmware and the configuration file u sing TFTP (T rivial File T ransfer Protocol) over LA N. Although TFTP should work over W AN as well, it is not recommended. [...]

Prestige 2602H/HW Series User’s Guide 394 Chapter 38 Firm ware and Configur ation File Mainte nance Refer to Section 38.2.5 on page 392 to read about configurations that disallow TFTP and FTP over W AN. 38.3 Restore Configuration This section shows you how to restore a previ ously saved configuration. Note that this function erases the current co[...]

Prestige 2602H/HW Series User’s Guide Chapter 38 Firmware and Confi guration File Maintenance 395 Figure 236 T elnet into M enu 24.6 1 Launch the FTP client on your computer . 2 Enter “ open ”, followed by a space and the IP address of your Prestige. 3 Press [ENTER] when prompted for a username. 4 Enter your password as requested (the default[...]

Prestige 2602H/HW Series User’s Guide 396 Chapter 38 Firm ware and Configur ation File Mainte nance 38.4 Uploading Firmware and Configuration Files This section shows you how to upload firmware and configuratio n files. Y ou can upload configuration files by following the procedure in Section 38.2 on page 390 or by following the instructions in M[...]

Prestige 2602H/HW Series User’s Guide Chapter 38 Firmware and Confi guration File Maintenance 397 Figure 239 T elnet Into Menu 24.7.2 System Maintenance T o upload the firmware and the configuration file, follow these examples 38.4.3 FTP File Upload Comman d from the DOS Prompt Example 1 Launch the FTP client on your computer . 2 Enter “ open ?[...]

Prestige 2602H/HW Series User’s Guide 398 Chapter 38 Firm ware and Configur ation File Mainte nance 38.4.4 FTP Session Exampl e of Firmware File Upload Figure 240 FTP Session Example of Firmware File Upload More commands (found in GUI-based FTP clie nts) are listed earlier in this chapter . Refer to Section 38.2.5 o n page 392 to read about confi[...]

Prestige 2602H/HW Series User’s Guide Chapter 38 Firmware and Confi guration File Maintenance 399 38.4.6 TFTP Upload Command Example The following is an example TFTP command: tftp [-i] host put firmware.bin ras where “ i ” specifies binary image transfer mode (use this mode when transferring binary files), “ host ” is the Prestige’ s IP[...]

Prestige 2602H/HW Series User’s Guide 400 Chapter 38 Firm ware and Configur ation File Mainte nance[...]

Prestige 2602H/HW Series User’s Guide Chapter 39 System Maintenance 401 C HAPTER 39 System Maintenance This chapter leads you through SM T menus 24.8 to 24.10 . 39.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the ma in system firmware. The CI provides much of the same functionality as the SMT , while a dding some low-level[...]

Prestige 2602H/HW Series User’s Guide 402 Chapter 39 Syst em Maint enance 39.2 Call Control Support Call Control Support is only applicable when Encapsulation is set to PPPoE in menu 4 or menu 1 1.1. The budget management func tion allows you to set a limit on the total outgoing call time of the Prestige within certain times. When the to tal outg[...]

Prestige 2602H/HW Series User’s Guide Chapter 39 System Maintenance 403 The total budget is the time li mit on the accumulated time for ou tgoing calls to a remo te node. When this limit is reached, th e call will be dropped and further outgoing calls to that remote node will be blocked. After each period, the total budget is re set. The default [...]

Prestige 2602H/HW Series User’s Guide 404 Chapter 39 Syst em Maint enance Figure 246 Menu 24.10 System Maintenance : T ime and Date Setting 39.3.1 Resetting the T ime • The Prestige resets the time in three instances: • On leaving menu 24.10 after making changes. • When the Prestige starts up, if there is a timeserver co nfigured in menu 24[...]

Prestige 2602H/HW Series User’s Guide Chapter 39 System Maintenance 405 • 24-hour intervals after starting.[...]

Prestige 2602H/HW Series User’s Guide 406 Chapter 39 Syst em Maint enance[...]

Prestige 2602H/HW Series User’s Guide Chapter 40 Remo te Management 407 C HAPTER 40 Remote Management This chapter covers remote ma nagement (SMT menu 24.1 1). 40.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) from which computers. When you configure re[...]

Prestige 2602H/HW Series User’s Guide 408 Chapter 40 Remote Manageme nt Figure 247 Menu 24.1 1 Remote Managem ent Contro l The following table describes the fields in this menu. 40.2.2 Remote Management Limit ations Remote management over LAN or W AN will not work when: • A filter in menu 3.1 (LAN) or in menu 1 1 .5 (W AN) is applied to block a[...]

Prestige 2602H/HW Series User’s Guide Chapter 40 Remo te Management 409 40.3 Remote Management and NA T When NA T is en abled: • Use the Prestige’ s W A N IP address when configuring from the W AN. • Use the Prestige’ s LAN IP address when configurin g from the LAN. 40.4 System T imeout There is a default system management idle tim eout o[...]

Prestige 2602H/HW Series User’s Guide 410 Chapter 40 Remote Manageme nt[...]

Prestige 2602H/HW Series User’s Guide Chapter 41 IP Policy Routing 411 C HAPTER 41 IP Policy Routing This chapter covers setting and appl ying policies used for IP routing. 41.1 IP Policy Routing Overview T raditionally , routing is based on the destinatio n address only and the IAD takes the shortest path to forward a packet. IP Routing Polic y [...]

Prestige 2602H/HW Series User’s Guide 412 Chapter 41 IP Policy Routing • routing the packet to a different gate way (and hence the outgoing interface). • setting the TO S and precedence fields in the IP header . IPPR follows the existing packet filtering facility of RAS in st yle and in impl ementation. The policies are divided into sets, whe[...]

Prestige 2602H/HW Series User’s Guide Chapter 41 IP Policy Routing 413 Figure 249 Menu 25.1 IP Routing Po licy Setup T ype a number from 1 to 6 to display Menu 25.1.1 – IP Rou ting Policy (see the next figure). This menu allows you to configure a policy rule. Menu 25.1 - IP Routing Policy Setup # A Criteri a/Action - - -------------------------[...]

Prestige 2602H/HW Series User’s Guide 414 Chapter 41 IP Policy Routing Figure 250 Menu 25.1.1 IP Routing Policy The following table describes the fields in this menu. Menu 25.1.1 - IP Routing Policy Policy Set Name= test Active= No Criteria: IP Protocol = 0 Type of Service= Don't Care Packet length= 0 Precedence = Don't Care Len Comp= N[...]

Prestige 2602H/HW Series User’s Guide Chapter 41 IP Policy Routing 415 41.5 Applying an IP Policy This section shows yo u where to apply the IP policies after you design them. 41.5.1 Ethernet IP Policies From Menu 3 — Ethernet Setup , type 2 to go to Menu 3. 2 — TCP/IP and DHCP Ethernet Setup . Y ou can choose up to four IP policy sets (from [...]

Prestige 2602H/HW Series User’s Guide 416 Chapter 41 IP Policy Routing Figure 251 Menu 3.2 TCP/IP and DHCP Ethernet Se tup Go to menu 1 1 .3 (shown next) an d type the number(s) of the IP Routing Policy set(s) as appropriate. Y ou can ca scade up to four polic y sets by typing their numbers separated by commas. Figure 252 Menu 1 1.3 Remote Node N[...]

Prestige 2602H/HW Series User’s Guide Chapter 41 IP Policy Routing 417 Figure 253 Example of IP Policy Routing T o force packets coming from clients with IP addresses of 192.168.1.33 to 192.16 8.1.64 to be routed to the Internet via the W AN port of the Prestige, follow the steps as shown next. 1 Create a routing pol icy set in menu 25 . 2 Create[...]

Prestige 2602H/HW Series User’s Guide 418 Chapter 41 IP Policy Routing 3 Create a rule in menu 25.1 for this set to route packets from any host ( IP=0.0.0.0 means any host) with protocol TCP and port FTP access through another gateway (192.168.1.100). Figure 255 IP Routing Policy Example 4 Check Menu 25.1 — IP Routing Policy S etup to see if th[...]

Prestige 2602H/HW Series User’s Guide Chapter 42 Call Scheduling 419 C HAPTER 42 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulati on only) allows you to dictate when a remote node sho uld be called and for how long. 42.1 Introduction The call scheduling feature allows the Prestige to manage a remote node and dictate when[...]

Prestige 2602H/HW Series User’s Guide 420 Chapter 42 Call Scheduling T o setup a schedule set, select the schedule set you want to setup from menu 26 (1-12) and press [ENTER] to see Menu 26.1 — Schedule Set Setup as shown next. Figure 258 Menu 26.1 Schedule Set Setup If a connection has been already established, your Prestige will not drop it. [...]

Prestige 2602H/HW Series User’s Guide Chapter 42 Call Scheduling 421 Once your schedule sets are conf igured , you must then apply them to the desired remote node(s). Enter 1 1 from the Main Menu and then enter the tar get remote node index. Using [SP ACE BAR] , select PPPoE or PPPoA in the Encapsulation field and then press [ENTER] to make the s[...]

Prestige 2602H/HW Series User’s Guide 422 Chapter 42 Call Scheduling[...]

Prestige 2602H/HW Series User’s Guide Chapter 43 VPN/IPSec Setup 423 C HAPTER 43 VPN/IPSec Setup This chapter introduces the VPN SMT menus. 43.1 VPN/IPSec Overview The VPN/IPSec main SMT menu has these main submenus: Define VPN policies in menu 27.1 su bmenus, including security po licies, endpoint IP addresses, peer IPSec router IP address and k[...]

Prestige 2602H/HW Series User’s Guide 424 Chapter 43 VPN/IPSec Setup Figure 261 Menu 27 VPN/IPSec Setup 43.2 IPSec Summary Screen T ype 1 in menu 27 and then press [ENTER] to display Menu 27.1 IPSec Summary . This is a summary read-only menu of your IPSec rules (t unnels). Edit or create an IPSec rule by selecting an index number and then co nfig[...]

Prestige 2602H/HW Series User’s Guide Chapter 43 VPN/IPSec Setup 425 A Y signifies that this VPN rule is active. Local Addr St a r t When the Addr T ype field in Menu 27.1 .1 IPSec Setup is configu red to Sin gle , this is a static IP address on the LAN behind your Prestige. When the Addr T ype field in Menu 2 7.1.1 IPSec Setu p is configured to [...]

Prestige 2602H/HW Series User’s Guide 426 Chapter 43 VPN/IPSec Setup 43.3 IPSec Setup Select Edit in the Select Command field; type the index number of a rule in the Select Rule field and press [ENTER] to edit the VPN using the menu shown next. Note: Y ou must also configure menu 27.1.1.1 or menu 27.1.1.2 to fully configure and use a VPN. Secure [...]

Prestige 2602H/HW Series User’s Guide Chapter 43 VPN/IPSec Setup 427 Figure 263 Menu 27.1.1 IPSec Setup The following table describes the fields in this menu. Menu 27.1.1 – IPSec Setup Index= 1 Name= Taiwan Active= Yes Keep Alive= No Nat Traversal= No Local ID type= IP Conten t: My IP Addr= 0.0.0.0 Peer ID type= IP Conten t: Secure Gateway Addr[...]

Prestige 2602H/HW Series User’s Guide 428 Chapter 43 VPN/IPSec Setup Nat T raversal Press [SP ACE BAR] to choose either Ye s or No . Choose Ye s and press [ENTER] to enable NA T traversal. NA T traversal allows you to set up a VPN connection when there are NA T routers betwe en the two IPSec rout ers. The remote IPSec router must also have NA T t[...]

Prestige 2602H/HW Series User’s Guide Chapter 43 VPN/IPSec Setup 429 DNS Server If there is a private DNS server that serv ices the VPN, type its IP address here. The Prestige assigns this additional DNS server to the Prestige's DHCP clients that have IP addresses in this IPSec ru le's range of local addresses. A DNS server allows clie [...]

Prestige 2602H/HW Series User’s Guide 430 Chapter 43 VPN/IPSec Setup 43.4 IKE Setup T o edit this menu, the Key Manageme nt field in Menu 27.1.1 – IPSec Setup must be set to IKE . Move the cursor to the Edit Key Management Setup field in Menu 27.1.1 – IPSec Setup ; press [SP ACE BAR] to select Ye s and then press [ENTER] to display Menu 27.1.[...]

Prestige 2602H/HW Series User’s Guide Chapter 43 VPN/IPSec Setup 431 Figure 264 Menu 27.1.1.1 KE Setup The following table describes the fields in this menu. Menu 27.1.1.1 - IKE Setup Phase 1 Negotiation Mode= Main PSK= Encryption Algorithm = A ES Authentication Algorithm = SHA1 SA Life Time (Seconds)= 28800 Key Group= DH1 Phase 2 Active Protocol[...]

Prestige 2602H/HW Series User’s Guide 432 Chapter 43 VPN/IPSec Setup 43.5 Manual Setup Y ou only config ure Menu 27.1.1.2 – Manual Setup when you select Manual in the Key Management field in Menu 27.1.1 – IPSec Setup . Manual key mana gement is useful if you have problem s with IKE key management. 43.5.1 Active Protocol This field is a combin[...]

Prestige 2602H/HW Series User’s Guide Chapter 43 VPN/IPSec Setup 433 Figure 265 Menu 27.1.1.2 Manual Setup The following table describes the fields in this menu. Menu 27.1.1.2 – Manual Setup Active Protocol= ESP Tunnel ESP Setup SPI (Decimal)= 0 Encryption Algorithm= DES Key1= ? Key2= N/A Key3= N/A Authentication Algorithm= MD5 Key= ? AH Setup [...]

Prestige 2602H/HW Series User’s Guide 434 Chapter 43 VPN/IPSec Setup Authentication Algorithm Press [SP ACE BAR] to choose from MD5 or SHA1 and then press [ENTER]. Key Enter the authentication key to be used by IPSec if applicable. The key must be unique. Ente r 16 characters for MD5 authenticati on and 20 characters for SHA-1 authentication. Any[...]

Prestige 2602H/HW Series User’s Guide Chapter 44 SA Monitor 435 C HAPTER 44 SA Monitor This chapter teaches you h ow to manage your SAs by using the SA Monitor in SMT menu 27.2. 44.1 SA Monitor Overview A Security Association (SA) is the group of se cu rity settings related to a specific VPN tunnel. This menu (shown next) disp lays active VPN con[...]

Prestige 2602H/HW Series User’s Guide 436 Chapter 44 SA Monitor Figure 266 Menu 27.2 SA Monitor The following table describes the fields in this menu. Menu 27.2 - SA Monitor # Name Encap. IPSec ALgorithm --- -------------------------------- --------- --------- ------- 001 Taiwan : 3.3.3.1 – 3.3.3.3.100 Tunnel ESP DES MD5 002 003 004 005 006 007[...]

Prestige 2602H/HW Series User’s Guide Chapter 44 SA Monitor 437 Select Command Press [SP ACE BAR] to choose from Refresh , Disconnect , None , Next Page , or Previous Page and then press [ENTER]. Y ou must select a connection in the ne xt field when you choose the Disconnect command. Refresh displays current active VPN connections. None allows yo[...]

Prestige 2602H/HW Series User’s Guide 438 Chapter 44 SA Monitor[...]

Prestige 2602H/HW Series User’s Guide Chapter 45 Troubleshooting 439 C HAPTER 45 T roubleshooting This chapter covers potential proble ms and the corresponding remedies. 45.1 Problems St arting Up the Prestige 45.2 Problems with the LAN Table 153 Troubleshooting Starting Up Your Prestige PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I t[...]

Prestige 2602H/HW Series User’s Guide 440 Chapter 45 Troublesh ooting 45.3 Problems with the W AN Table 155 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The DSL LED is off. Check the telephone wire and connections betwee n the Prestige DSL port and the wall jack. Make sure that the telephone company has checked your phone line and set it up [...]

Prestige 2602H/HW Series User’s Guide Chapter 45 Troubleshooting 441 45.4 Problems Accessing the Prestige 45.4.1 Pop-up Windows, Ja vaScript s and Java Permissions In order to use the web configurator you need to allow: • W eb browser pop-u p windows from your device. • JavaScripts (enabled by default). Table 156 Troubleshooting Accessing the[...]

Prestige 2602H/HW Series User’s Guide 442 Chapter 45 Troublesh ooting • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here. Screens for other In ternet Explorer versions may va ry . 45.4.1.1 Internet Explorer Pop-up Blockers Y ou may have to disable pop-up blocking to log into your device. Either disable pop-[...]

Prestige 2602H/HW Series User’s Guide Chapter 45 Troubleshooting 443 Figure 268 Intern et Options 3 Click Apply to save this setting. 45.4.1.1.2 Enable pop-up Blockers with Exceptions Alternatively , if you only want to allow pop-up window s from your device, see th e following steps. 1 In Internet Explorer , select To o l s , Internet Options an[...]

Prestige 2602H/HW Series User’s Guide 444 Chapter 45 Troublesh ooting Figure 269 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites .[...]

Prestige 2602H/HW Series User’s Guide Chapter 45 Troubleshooting 445 Figure 270 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 45.4.1.2 JavaScript s If pages of the web configura tor do not display properly in Internet Explorer, check that JavaScripts are allowed. 1 In Internet Explorer [...]

Prestige 2602H/HW Series User’s Guide 446 Chapter 45 Troublesh ooting Figure 271 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting . 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is sele cted (the default). 6 Click OK to clos e the wi[...]

Prestige 2602H/HW Series User’s Guide Chapter 45 Troubleshooting 447 Figure 272 Security Settings - Java Scripting 45.4.1.3 Java Permissions 1 From Internet Explorer , click To o l s , I nternet Options and then the Security tab. 2 Click the Custom Level... button. 3 Scroll down to Microsoft VM . 4 Under Java permissions make sure that a safety l[...]

Prestige 2602H/HW Series User’s Guide 448 Chapter 45 Troublesh ooting Figure 273 Security Settings - Java 45.4.1.3.1 JA V A (Sun) 1 From Internet Explorer , click To o l s , I nternet Options and then the Advance d tab. 2 make sure that Use Java 2 for <applet> u nder Java (Sun) is selected. 3 Click OK to clos e the window .[...]

Prestige 2602H/HW Series User’s Guide Chapter 45 Troubleshooting 449 Figure 274 Java (Sun) 45.5 T elephone Problems Table 157 Troubleshooting Telephone PROBLEM CORRECTIVE ACTION The telephone port won’t work or the telephone lacks a dial to ne. Check the telephone con nections and telephone wire. Make sure you have the V oice SIP Settings scree[...]

Prestige 2602H/HW Series User’s Guide 450 Chapter 45 Troublesh ooting[...]

Prestige 2602H/HW Series User’s Guide Appendix A Product Specifications 451 Appendix A Product S pecifications See also the Introduction ch apter for a general overv iew of the key features. S pecification T ables Table 158 Device Specifications Default IP Address 192.168.1.1 Default Subnet Mask 2 55.255.255.0 (24 bits) Default Password 1234 DHCP[...]

Prestige 2602H/HW Series User’s Guide 452 Appendix A Product Specifications Table 159 Firmware Specifications ADSL S tandards Multi-Mode standard (ANSI T1.413,Issu e 2; G .dmt(G . 992.1); G .lite(G992.2)) EOC specified in ITU-T G .992.1 ADSL2 G . dmt.bis (G .992.3) ADSL2 G . lite.bis (G .9 92.4) ADSL2+ (G .992.5) Reach-Extended ADSL (RE ADSL) SRA[...]

Prestige 2602H/HW Series User’s Guide Appendix A Product Specifications 453 Firewall S tateful Packet Inspection Prevent Denial of Service attacks such as Ping of Death, SYN Flood, LAND, Smurf etc. Real time E-mail alerts Reports and logs SIP ALG passthrough NA T/SUA Port Forwarding 1024 NA T sessions Multimedia application PPTP under NA T/SUA IP[...]

Prestige 2602H/HW Series User’s Guide 454 Appendix A Product Specifications Ethernet Cable Pin Assignment s Figure 275 Ethernet Cable Pin Assignment s Prestige 2602HL/HWL DSL Port Pin Assignment s The following figure describes the pin assi gnments for the DSL port on the Prestige 2602HL/ HWL. V oice Featur es SIP version 2 (Session Initiating Pr[...]

Prestige 2602H/HW Series User’s Guide Appendix A Product Specifications 455 Figure 276 Prestige 2602HW -L DSL Port Pin Assignments Prestige 2602H/HW Series Power Adaptor S pecifications Table 160 Prestige 2602H/HW Series Powe r Adaptor Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model ADS6818-1818-W 1810 Input Power AC 100~240V [...]

Prestige 2602H/HW Series User’s Guide 456 Appendix A Product Specifications AC Power Adapter Model ADS6818-1818-D 1810 Input Power AC 100~240V olts/50/60Hz/0.5A Output Pow er DC 18V olts/1A Power Consumption 15W Safety S tandards TUV , CE(EN 60950) Table 160 Prestige 2602H/HW Series Powe r Adaptor Specifications (continued)[...]

Prestige 2602H/HW Series User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 457 A PPENDIX B Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed. W indows 95/98/Me/NT/2000/XP , M acintosh OS 7 and later operating systems and all versions of UNIX/LINUX include th[...]

Prestige 2602H/HW Series User’s Guide 458 Appendix B Setting up Your Computer’s IP Add ress Figure 277 WIndows 95/98 /Me: Networ k: Configura tion Inst alling Components The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks. If you need [...]

Prestige 2602H/HW Series User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 459 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect. Configuring 1 In the Network window Configuration[...]

Prestige 2602H/HW Series User’s Guide 460 Appendix B Setting up Your Computer’s IP Add ress Figure 279 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not k now your gateway’ s IP address, remove previously installed gateways. • If you have a gateway IP address, type it in the New gateway fiel[...]

Prestige 2602H/HW Series User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 461 Figure 280 Windows XP: S tart Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 281 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr oper ties .[...]

Prestige 2602H/HW Series User’s Guide 462 Appendix B Setting up Your Computer’s IP Add ress Figure 282 Windows XP: Control Panel: Network Connections: Pro perties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and cli ck Properties . Figure 283 Windows XP: Local Area Conne ction Properties 5 The Internet Pr otoc ol TCP/[...]

Prestige 2602H/HW Series User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 463 • If you have a static IP address click Use the following IP Address and fill in the IP addr ess , Subnet mask , and Default gateway fields. Click Advanced . Figure 284 Windows XP: Advanced TCP/IP Settings 6 If you do not know your gateway's IP ad[...]

Prestige 2602H/HW Series User’s Guide 464 Appendix B Setting up Your Computer’s IP Add ress 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain D NS server address automatically if you do not know your DNS server IP addre ss(es). • If you know your DNS server IP address(es), click Use the fo[...]

Prestige 2602H/HW Series User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 465 Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel . Figure 286 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list.[...]

Prestige 2602H/HW Series User’s Guide 466 Appendix B Setting up Your Computer’s IP Add ress Figure 287 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configur e: list. 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP addre[...]

Prestige 2602H/HW Series User’s Guide Appendix B Setting up Your Computer’s IP Addr ess 467 Figure 288 Macintosh O S X: App le Menu 2 Click Network i n the icon bar . • Select Automatic from the Location list. • Select Built-in Ethernet from the Show list. • Click the TCP/IP tab. 3 For dynamically assigned settings, select Using DHCP from[...]

Prestige 2602H/HW Series User’s Guide 468 Appendix B Setting up Your Computer’s IP Add ress 5 Click Apply Now and clo se the wi ndow . 6 T urn on your Prestige and restart y our computer (if pro mpted). V erifying Settings Check your TCP/IP properties in the Network window .[...]

Prestige 2602H/HW Series User’s Guide Appendix C IP Subnetting 469 A PPENDIX C IP Subnetting IP Addressing Routers “route” based on the network number . The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (ei ght bits), wri tten in dotted decimal notatio[...]

Prestige 2602H/HW Series User’s Guide 470 Appendix C IP Subnettin g Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a valu e of 0 to 127. Similarly the first octet of a class “B” must begi n with “10”, therefore the first octet of a class “B” address has a[...]

Prestige 2602H/HW Series User’s Guide Appendix C IP Subnetting 471 Since the mask is always a continuous number of ones begin ning from the left, fo llowed by a continuous number of zeros for the remainder of the 32 bit mask, you can si mply specify the number of ones instead of writing the value of each octet. This is usually specified by writin[...]

Prestige 2602H/HW Series User’s Guide 472 Appendix C IP Subnettin g Note: In the following chart s , shaded/bold last oc tet bit values indi cate host ID bits “borrowed” to form network ID bit s. The number of “borrowed” host ID bits determines the number of sub nets y ou can have. Th e remaining number of host ID bits (af ter “borrowin[...]

Prestige 2602H/HW Series User’s Guide Appendix C IP Subnetting 473 Example: Four Subnet s The above exampl e illustrated using a 25-bit subne t mask to divide a class “C” address space into two subnets. Similarly to divide a class “C” address into four subnets, you need to “borrow” two host ID bits to give four possible combinations o[...]

Prestige 2602H/HW Series User’s Guide 474 Appendix C IP Subnettin g Example Eight Subnet s Similarly use a 27-bit mask to create 8 subnets (001 , 010, 01 1, 100, 101, 1 10). The following table shows class C IP ad dress last octet values for each subnet. The following table is a summary for class “C” subnet planning. Table 171 Subnet 4 NETWOR[...]

Prestige 2602H/HW Series User’s Guide Appendix C IP Subnetting 475 Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet ma sk also determines which bits are part of the network number and which are part of the host ID. A class “B” address has two host ID octets ava ilable for subnetting and a [...]

Prestige 2602H/HW Series User’s Guide 476 Appendix C IP Subnettin g[...]

Prestige 2602H/HW Series User’s Guide Appendix D PPP oE 477 A PPENDIX D PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP ov er Ethernet, RFC 2516) from your computer to an A TM PVC (Permanent V irt ual Circ uit) which connects to a DSL Access Concentrator where th e PPP session terminates ( Figure 290 on page 478 ). On[...]

Prestige 2602H/HW Series User’s Guide 478 Appendix D PPPoE Figure 290 Single-Compute r per Router Hardwa re Configuration How PPPoE W orks The PPPoE driver makes the Ethernet appea r as a serial link to the computer and the computer runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC). Between the AC and a[...]

Prestige 2602H/HW Series User’s Guide Appendix E Wir eless LANs 479 Appendix E Wireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pendent (Ad-hoc) WLAN that connects a set of computers with wireless stations[...]

Prestige 2602H/HW Series User’s Guide 480 Appendix E Wirele ss LANs Figure 293 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection between APs is called a Distribution System (DS). This ty[...]

Prestige 2602H/HW Series User’s Guide Appendix E Wir eless LANs 481 Figure 294 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.1 1a/b/g wireless devices. Channels available depend on your ge ographical area. Y ou may have a choice o f channels (for your region) so you should use a dif ferent channel th an an adj[...]

Prestige 2602H/HW Series User’s Guide 482 Appendix E Wirele ss LANs Figure 295 RTS/ CT S When station A sends data to the AP , it might no t know that the station B is already using the channel. If these two stations se nd data at the same time, collis ions may occur when both sets of data arrive at the AP at the same time, r esulting in a loss o[...]

Prestige 2602H/HW Series User’s Guide Appendix E Wir eless LANs 483 A large Fragmentation Thr eshold is recommended for networks not prone to interference while you should set a smaller thresh old for busy networks or ne tworks that are prone to interference. If the Fragmentation Threshold value is smaller than the RT S / C T S value (see previou[...]

Prestige 2602H/HW Series User’s Guide 484 Appendix E Wirele ss LANs IEEE 802.1x In June 2001, the IEEE 802.1x st andard was designed to extend th e features of IEEE 802.1 1 to support extended authentication as well as providing additional accounting and control features. It is supported by W indows XP and a number of network devices. Some adva n[...]

Prestige 2602H/HW Series User’s Guide Appendix E Wir eless LANs 485 • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access- Request message. The following types of RADIUS messages are exchanged between the acces s point[...]

Prestige 2602H/HW Series User’s Guide 486 Appendix E Wirele ss LANs EAP-TLS (T ransport Layer Security) W ith EAP-TLS, digital certifications are needed by both the server and the wireless stations for mutual authentication. The server presents a certificate to the client. After validating the identity of the server , the client sends a differ en[...]

Prestige 2602H/HW Series User’s Guide Appendix E Wir eless LANs 487 For added security , certificate-based authen tications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys for data encryption. They are ofte n deployed in corp orate environments, but for public deployment, a simp le user name and p assword pair is more practical. The following table[...]

Prestige 2602H/HW Series User’s Guide 488 Appendix E Wirele ss LANs The Message Integrity Check (MIC ) is designed to prevent an attacker from capturing data packets, altering them and resending them. The MIC provides a strong mathematical function in which the receiver and the transmitter each compute and then compare the MIC. If they do not mat[...]

Prestige 2602H/HW Series User’s Guide Appendix F Triangl e Route 489 A PPENDIX F T riangle Route The Ideal Setup When the firewall is on, your Prestige acts as a secure gateway between your LAN and the Internet. In an ideal network topology , a ll incoming and outgoing network traf fic passes through the Prestige to protect your LAN against attac[...]

Prestige 2602H/HW Series User’s Guide 490 Appendix F Tria ngle Route Figure 297 “T riangle Route” Problem The “T riangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface. Y our Prest[...]

Prestige 2602H/HW Series User’s Guide Appendix F Triangl e Route 491 Gateways on the W AN Side A second solution to the “triangle route” problem is to put all of your network gateways on the W AN side as the following figure shows. This en sures that all incoming network traffic passes through your Prestige to your LAN. The refore your LAN is[...]

Prestige 2602H/HW Series User’s Guide 492 Appendix F Tria ngle Route[...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 493 A PPENDIX G Internal SPTGEN Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configuration text file useful for efficient configuration of multiple Prestiges. Internal SP TGEN lets you configure, save and upload multiple menus at the same tim[...]

Prestige 2602H/HW Series User’s Guide 494 Appendix G Internal SPTGEN Some parameters are dependent on othe rs. For example, if you disable the Configur e d field in menu 1 (see Figure 300 on page 493 ), then you disable every field in this menu. If you enter a parameter that is invalid in the In put column, the Prestige will not save the configur[...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 495 Figure 303 Internal SP TGEN FTP Download Example Note: Y ou can rename your “ rom-t ” file wh en you save it to your computer but it must be named “ rom-t ” when you uplo ad it to your Prestige. Internal SPTGEN FTP Upload Example 1 Launch your FTP application. 2 Enter [...]

Prestige 2602H/HW Series User’s Guide 496 Appendix G Internal SPTGEN The following ar e Internal SP TGEN screens a sso ciated with the SMT screens of your Pres tige. PV A Parameter V alues Allowed INPUT An example of what you may enter * Applies to the Prestige. Table 178 Abbreviations Used in the Example Internal SPT GEN Screens Table ABBREVIA T[...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 497 FIN FN PVA INPUT 30200001 = DHCP <0(None) | 1(Server) | 2(Relay)> = 0 30200002 = Client IP Pool Starting Address = 192.168.1.33 30200003 = Size of Client IP Pool = 32 30200004 = Primary DNS Server = 0.0.0.0 30200005 = Secondary DNS Server = 0.0.0.0 30200006 = Remote DHCP[...]

Prestige 2602H/HW Series User’s Guide 498 Appendix G Internal SPTGEN 30201008 = IP Alias #1 Incoming protocol filters Set 3 = 256 30201009 = IP Alias #1 Incoming protocol filters Set 4 = 256 30201010 = IP Alias #1 Outgoing protocol filters Set 1 = 256 30201011 = IP Alias #1 Outgoing protocol filters Set 2 = 256 30201012 = IP Alias #1 Outgoing pro[...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 499 30500004 = RTS Threshold <0 ~ 2432> = 2432 30500005 = FRAG. Threshold <256 ~ 2432> = 2432 30500006 = WEP <0(DISABLE) | 1(64-bit WEP) | 2(128-bit WEP)> = 0 30500007 = Default Key <1|2|3|4> = 0 30500008 = WEP Key1 = 30500009 = WEP Key2 = 30500010 = WEP Ke[...]

Prestige 2602H/HW Series User’s Guide 500 Appendix G Internal SPTGEN 40000002 = Active <0(No) | 1(Yes)> = 1 40000003 = ISP's Name = ChangeMe 40000004 = Encapsulation <2(PPPOE) | 3(RFC 1483)| 4(PPPoA )| 5(ENET ENCAP)> = 2 40000005 = Multiplexing <1(LLC-based) | 2(VC-based) = 1 40000006 = VPI # = 0 40000007 = VCI # = 35 40000008[...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 501 40000032= RIP Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> = 0 40000033= Nailed-up Connection <0(No) |1(Yes)> = 0 Table 181 Menu 4 Internet Access Setup ( SMT Menu 4) (continued) Table 182 Menu 12 (SMT Menu 1 2) / Menu 12.1.1 IP Static Route Setup (SMT Menu 12.1.1) FI[...]

Prestige 2602H/HW Series User’s Guide 502 Appendix G Internal SPTGEN / Menu 12.1.4 IP Static Route Setup (SMT Menu 12.1.4) FIN FN PVA INPUT 120104001 = IP Static Route set #4, Name <Str> = 120104002 = IP Static Route set #4, Active <0(No) |1(Yes)> = 0 120104003 = IP Static Route set #4, Destination IP address = 0.0.0.0 120104004 = IP [...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 503 120107006 = IP Static Route set #7, Metric = 0 120107007 = IP Static Route set #7, Private <0(No) |1(Yes)> = 0 / Menu 12.1.8 IP Static Route Setup (SMT Menu 12.1.8) FIN FN PVA INPUT 120108001 = IP Static Route set #8, Name <Str> = 120108002 = IP Static Route set #8[...]

Prestige 2602H/HW Series User’s Guide 504 Appendix G Internal SPTGEN 120111004 = IP Static Route set #11, Destination IP subnetmask = 0 120111005 = IP Static Route set #11, Gateway = 0.0.0.0 120111006 = IP Static Route set #11, Metric = 0 120111007 = IP Static Route set #11, Private <0(No) |1(Yes)> = 0 */ Menu 12.1.12 IP Static Route Set up[...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 505 120115002 = IP Static Route set #15, Active <0(No) |1(Yes)> = 0 120115003 = IP Static Route set #15, Destinati on IP address = 0.0.0.0 120115004 = IP Static Route set #15, Destinati on IP subnetmask = 0 120115005 = IP Static Route set #15, Gateway = 0.0.0.0 120115006 = I[...]

Prestige 2602H/HW Series User’s Guide 506 Appendix G Internal SPTGEN 150000014 = SUA Server #4 Port Start = 0 150000015 = SUA Server #4 Port End = 0 150000016 = SUA Server #4 Local IP address = 0.0.0.0 150000017 = SUA Server #5 Active <0(No) | 1(Yes)> = 0 150000018 = SUA Server #5 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000019 = SUA [...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 507 150000048 = SUA Server #11 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000049 = SUA Server #11 Port Start = 0 150000050 = SUA Server #11 Port End = 0 150000051 = SUA Server #11 Local IP addr ess = 0.0.0.0 150000052 = SUA Server #12 Active <0(No) | 1(Yes)> = 0 15000005[...]

Prestige 2602H/HW Series User’s Guide 508 Appendix G Internal SPTGEN / Menu 21.1.1.2 set #1, rule #2 (SMT Menu 21.1.1.2) FIN FN PVA INPUT 210102001 = IP Filter Set 1,Rule 2 Type <2(TCP/IP)> = 2 210102002 = IP Filter Set 1,Rule 2 Active <0(No)|1(Yes)> = 1 210102003 = IP Filter Set 1,Rule 2 Protocol = 6 210102004 = IP Filter Set 1,Rule [...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 509 210103013 = IP Filter Set 1,Rule 3 Act Match <1(check next)|2(forward)| 3(drop) = 3 210103014 = IP Filter Set 1,Rule 3 Act Not Match <1(check next)|2(forward)| 3(drop) = 1 / Menu 21.1.1.4 set #1, rule #4 (SMT Menu 21.1.1.4) FIN FN PVA INPUT 210104001 = IP Filter Set 1,Ru[...]

Prestige 2602H/HW Series User’s Guide 510 Appendix G Internal SPTGEN 210105009 = IP Filter Set 1,Rule 5 Src Subnet Mask = 0 210105010 = IP Filter Set 1,Rule 5 Src Port = 0 210105011 = IP Filter Set 1,Rule 5 Src Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 0 210105013 = IP Filter Set 1,Rule 5 Act Match <1(check next)|2[...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 511 / Menu 21.1.2.1 Filter set #2, rule #1 (SMT Menu 21.1.2.1) FIN FN PVA INPUT 210201001 = IP Filter Set 2, Rule 1 Type <0(none)|2(TCP/IP)> = 2 210201002 = IP Filter Set 2, Rule 1 Active <0(No)|1(Yes)> = 1 210201003 = IP Filter Set 2, Rule 1 Protocol = 6 210201004 = I[...]

Prestige 2602H/HW Series User’s Guide 512 Appendix G Internal SPTGEN 210202009 = IP Filter Set 2, Rule 2 Src Subnet Mask = 0 210202010 = IP Filter Set 2,Rule 2 Src Port = 0 210202011 = IP Filter Set 2, Rule 2 Src Port Comp <0(none)|1(equal)|2 (not equal)|3(less)|4(gr eater)> = 0 210202013 = IP Filter Set 2, Rule 2 Act Match <1(check next[...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 513 210204002 = IP Filter Set 2, Rule 4 Active <0(No)|1(Yes )> = 1 210204003 = IP Filter Set 2, Rule 4 Protocol = 17 210204004 = IP Filter Set 2, Rule 4 Dest IP address = 0.0.0.0 210204005 = IP Filter Set 2, Rule 4 Dest Subnet Mask = 0 210204006 = IP Filter Set 2, Rule 4 Des[...]

Prestige 2602H/HW Series User’s Guide 514 Appendix G Internal SPTGEN 210205011 = IP Filter Set 2, Rule 5 Src Port Comp <0(none)|1(equal)|2 (not equal)|3(less)|4(gr eater)> = 0 210205013 = IP Filter Set 2, Rule 5 Act Match <1(check next)|2(forward)|3( drop)> = 3 210205014 = IP Filter Set 2, Rule 5 Act Not Match <1(check next)|2(forw[...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 515 Table 186 Menu 23 System Menus (SMT Me nu 23) */ Menu 23.1 System Password Setup ( SMT Menu 23.1) FIN FN PVA INPUT 230000000 = System Password = 1234 */ Menu 23.2 System security: radius server (SMT Menu 23.2) FIN FN PVA INPUT 230200001 = Authentication Server Configured <0[...]

Prestige 2602H/HW Series User’s Guide 516 Appendix G Internal SPTGEN Command Examples The following are example Internal SP TGEN scr eens associated wi th the Prestige’ s command interpreter commands. 230400008 = WPA Mixed Mode <0(Disable) |1(Enable)> = 0 230400009 = Data Privacy for Broadcast/ Multicast packets <0(TKIP) |1(WEP)> = [...]

Prestige 2602H/HW Series User’s Guide Appendix G I nternal SPTG EN 517 FIN FN PVA INPUT 990000001 = ADSL OPMD <0(etsi)|1(normal) |2(gdmt)|3(multimo de)> = 3 Table 188 Command Examples (continued) FIN FN PV A INPUT[...]

Prestige 2602H/HW Series User’s Guide 518 Appendix G Internal SPTGEN[...]

Prestige 2602H/HW Series User’s Guide Appendix H Com mand Interpreter 519 A PPENDIX H Command Interpreter The following describes how to use the comman d interpreter . Enter 24 in the main menu to bring up the system maintena nce menu. Enter 8 to go to Menu 24.8 - Command Interpr eter Mode . See the included disk or zyxel.com for more detailed in[...]

Prestige 2602H/HW Series User’s Guide 520 Appendix H Command Interpr eter[...]

Prestige 2602H/HW Series User’s Guide Appendix I Firewall Commands 521 A PPENDIX I Firewall Commands Sys Firewall Commands The following describes the firewa ll commands. See the Command Interpreter appendix for inform ation on the command structure. Each of these commands must be preceded by sys firewall when you use them. For example, type sys [...]

Prestige 2602H/HW Series User’s Guide 522 Appendix I Firewall Commands[...]

Prestige 2602H/HW Series User’s Guide Appendix J Boot Commands 523 A PPENDIX J Boot Commands The BootModule A T comman ds execute from wi thin the router ’ s bootup software, when debug mode is selected before the main router firmware is start ed. When you start up your Prestige, you are given a choice to go into deb ug mode by pressing a key a[...]

Prestige 2602H/HW Series User’s Guide 524 Appendix J Boot Commands Figure 306 Boot Module Commands AT just answer OK ATHE print help ATBAx change baud rate. 1:38.4k, 2:19.2k, 3:9.6k 4:57.6k 5:115.2k ATENx,(y) set BootExtension Debu g Flag (y=password) ATSE show the seed of passw ord generator ATTI(h,m,s) change system time to hour:min:sec or show[...]

Prestige 2602H/HW Series User’s Guide Appendix K L og Descriptions 525 A PPENDIX K Log Descriptions This appendix provides descrip tions of example log messages. Table 190 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on informati on from the time server . Time calibration fa[...]

Prestige 2602H/HW Series User’s Guide 526 Appendix K Log Descriptions Configuration Change: PC = 0x%x, Task ID = 0x%x The router is saving configuration changes. Successful SSH login Someo ne has logged on to the router ’s SSH server . SSH login failed Someone has faile d to log on to the router ’s SSH server . Successful HTTPS login Someone [...]

Prestige 2602H/HW Series User’s Guide Appendix K L og Descriptions 527 For type and code details, see T able 203 on page 53 1 . Table 193 TCP Reset Lo gs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a TCP reset packet when a host was u nder a SYN flood attack (the TCP incomplete count is per desti nation host.) Exc[...]

Prestige 2602H/HW Series User’s Guide 528 Appendix K Log Descriptions Triangle route packet forwarded: ICMP The firewall allow ed a triangle route session to pass through. Packet without a NAT table entry blocked: ICMP The router blocked a packet that didn’t have a corresponding NA T table entry . Unsupported/out-of-order ICMP: ICMP The firewal[...]

Prestige 2602H/HW Series User’s Guide Appendix K L og Descriptions 529 For type and code details, see T able 203 on page 53 1 . Table 198 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP p ackets can pass through the firewall. Table 199 Content Filterin g Logs LOG MESSAGE DESCRIPTION %s: block keyword Th e content of a requested [...]

Prestige 2602H/HW Series User’s Guide 530 Appendix K Log Descriptions ip spoofing - no routing entry ICMP (type:%d, code:%d) The firewall classified an ICMP packet with no source routing entry as an IP spoofing attack. vulnerability ICMP (type:%d, code:%d) The firewall detecte d an ICMP vulnerability attack. traceroute ICMP (type:%d, code:%d) The[...]

Prestige 2602H/HW Series User’s Guide Appendix K L og Descriptions 531 No Server to authenticate user. Th ere is no authentication serv er to authenticate a user . Local User Database does not find user`s credential. A user was not authenticated by the local user database because the user is not listed in th e local user database. Table 202 ACL S[...]

Prestige 2602H/HW Series User’s Guide 532 Appendix K Log Descriptions 11 T ime Exceeded 0 T ime to live exceeded in transit 1 Fragment reassembly time exceeded 12 Parameter Problem 0 Pointer indicates the error 13 T imestamp 0 T imestamp request message 14 T imestamp Reply 0 T imestamp reply message 15 Information Request 0 Information request me[...]

Prestige 2602H/HW Series User’s Guide Appendix K L og Descriptions 533 Table 206 RTP Logs LOG MESSAGE DESCRIPTION Error, RTP init fail The initialization of an RTP session failed. Error, Call fail: RTP connect fail A V oIP phone call failed because th e RTP session could not be established. Error, RTP connection cannot close The termination of an[...]

Prestige 2602H/HW Series User’s Guide 534 Appendix K Log Descriptions The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for detailed information on each type. Log Commands Go to the command interpreter interface ( Appendix H on page 519 explains how to access a nd use the commands). Configuring[...]

Prestige 2602H/HW Series User’s Guide Appendix K L og Descriptions 535 Figure 308 Displaying Log Para meters Example 4 Use sys logs category foll owed by a log category and a parameter to decide what to record. Use 0 to not record logs for that category , 1 to record only logs fo r that category , 2 to record only alerts for that category , and 3[...]

Prestige 2602H/HW Series User’s Guide 536 Appendix K Log Descriptions Log Command Example This example shows how to set the Prestige to re cord the access logs and alerts and then view the results. Figure 309 Log Command Example ras> sys logs load ras> sys logs category access 3 ras> sys logs save ras> sys logs display access # .time [...]

Prestige 2602H/HW Series User’s Guide Index 537 Index Numerics 11 0 V A C 6 230V AC 6 64kbps 142 8kbps 142 A AAL5 452 Abnormal Working Conditions 7 AbS 138 AC 6 Access methods 353 Accessories 6 ACK Message 134 Acts of God 7 Address Mapping 129 Address Resolution Protocol (ARP) 86 ADSL S tandards 48 ADSL, what is it? 46 ADSL2 452 AH 209 AH (Authen[...]

Prestige 2602H/HW Series User’s Guide 538 Index Bandwidth Manager Summary 271 Basement 6 BGP (TCP 179) 196 Blocking T ime 200 BOOTP_CLIENT (UDP 68) 196 BOOTP_SERVER (UDP 67) 196 Border Gateway Protocol 196 Borrow bandwidth from parent class 275 Bridging 322 , 33 3 Ether Address 335 Ethernet 333 Ethernet Addr T imeout 334 Remote Node 333 S tatic R[...]

Prestige 2602H/HW Series User’s Guide Index 539 Customer Support 8 Customized Services 191 D Damage 6 Dampness 6 Danger 6 Data Confidentiality 208 Data Encryption S tandard 209 Data Filtering 355 Data Integrity 208 Data Origin Authentication 208 Data Privacy 376 Daylight Savings 164 DBPSK 52 Dealer 4 Default LAN IP Address 59 Default User Name an[...]

Prestige 2602H/HW Series User’s Guide 540 Index Encapsulation 66 , 109 , 209 , 317 , 320 ENET ENCAP 109 PPP over Ethernet 109 PPPoA 109 RFC 1483 11 0 Encapsulation Security Payload 214 Encryption 207 , 487 Equal V alue 7 Error Log 383 Errors 283 ESP 209 ESP Protocol 214 ESS 480 ESSID (Extended Servic e Set Identification) 94 Europe 6 Europe T ype[...]

Prestige 2602H/HW Series User’s Guide Index 541 G G . 168 50 , 145 , 454 G . 168 Active 146 G. 7 11 138 , 142 , 454 G . 729 138 , 142 , 454 G . 992.1 452 G . 992.3 452 G . 992.4 452 G . 992.5 452 G. d m t 452 G .lite 452 G992.2 452 Gas Pipes 6 Gateway 331 Gateway Node 335 General Ethernet Setup 305 General Setup 297 Generic Filter 364 Germany , C[...]

Prestige 2602H/HW Series User’s Guide 542 Index Internet Group Multi cast Protocol 19 7 Internet Key Exchange 226 Internet Messenger 19 6 Internet Protocol Security 207 Internet T elephony Service Provider 54 IP (AX.25 0) 197 IP (IPv6) 197 IP Address 77 , 83 , 125 , 283 , 30 7 , 331 , 33 5 , 361 , 382 , 387 , 413 IP Address Assignment 11 0 ENET E[...]

Prestige 2602H/HW Series User’s Guide Index 543 Logical Networks 313 Login 321 Logs 259 M MAC (Media Access Co ntrol) Address 95 MAC Address 335 MAC Address Filter 310 Filter Action 31 1 MAC Address Filter Acti on 96 , 31 1 MAC Address Filtering 95 MAC Filter 92 Main Menu 293 Maintenance 279 Management Idle Timeout Period 60 Management Informatio[...]

Prestige 2602H/HW Series User’s Guide 544 Index Notebook Computer 45 NTP (TCP/UDP 123) 198 NTP T ime Servers 163 O OAM 452 OFDM 52 OK Response 134 One-Minute High 200 Opening 6 Operating Condition 7 Operating Frequency 310 Operation Humidity 451 Operation T emperature 451 Orthogonal Frequency Division Mu ltiplexing Modulation 52 Out-dated Warrant[...]

Prestige 2602H/HW Series User’s Guide Index 545 PPTP_TUNNEL (GRE 0) 197 Preamble Mode 483 Precedence 41 1 , 414 Pre-defined NTP T ime Servers List 163 Preferred Codec 142 Pre-Shared Key 221 , 376 , 431 Format 97 Prestige 45 Priority 274 Priority-based Scheduler 268 Private 324 , 331 Private MIBs 370 Product Model 8 Product Page 5 Product Serial N[...]

Prestige 2602H/HW Series User’s Guide 546 Index REN 50 Reorient 4 Repair 6 , 7 Replace 7 Replacement 7 Reports and Logs 453 Reproduction 3 Required fields 292 Reset ADSL Line 287 Reset Button 60 Resetting the Prestige 60 Restore 7 Restore Configuration 394 Return Material Auth orization (RMA) Number 7 Returned Products 7 Returns 7 REXEC (TCP 514)[...]

Prestige 2602H/HW Series User’s Guide Index 547 Server 45 , 124 , 339 , 341 , 342 , 343 , 344 , 345 , 346 , 347 , 404 Server Behind NA T 343 Service 6 , 7 , 183 Service Personnel 6 Service T ype 192 , 440 Services 125 Session Description Protocol 454 Session Expires 142 Session Initiating Proto col 454 Session Initiation Proto col 133 SFTP (TCP 1[...]

Prestige 2602H/HW Series User’s Guide 548 Index Supply V oltage 6 Support E-mail 8 Supporting Disk 43 Sustain Cell Rate 317 Sustain Cell Rate (SCR) 11 5 Sustained Cell Rate (SCR) 11 2 Sweden, Contact Information 8 Swimming Pool 6 Switch 45 SYN Flood 170 , 171 SYN-ACK 171 Syntax Conventions 44 Syslog 384 SYSLOG (UDP 514) 198 Syslog IP Address 384 [...]

Prestige 2602H/HW Series User’s Guide Index 549 U UBR 317 UBR (Unspecified Bit Rate) 11 5 UDP 198 UDP/ICMP Security 176 Undesired Operations 4 Uniform Resource Identifier 133 Universal Plug and Pl ay 245 Application 245 Security issues 245 Universal Plug and Pl ay (UPnP) 51 Universal Plug and Pl ay Forum 246 UNIX Syslog 383 , 384 UNIX Syslog Para[...]

Prestige 2602H/HW Series User’s Guide 550 Index Wa t e r 6 W ater Pipes 6 Web Configurator 59 , 61 , 62 , 168 , 176 , 183 , 354 web configurator screen summary 62 Web Site 8 WEP Default Key 310 WEP (Wired Equivalent Priva cy) 53 , 95 , 310 WEP Encryption 93 , 310 Wet B a se me n t 6 White Pines Sof tware 196 Wide Area Network 109 Wi-Fi Protected [...]