manualshive.com logo in svg

ZyXEL Communications P-861H-G1, User Manual, Page: 174 / 341

Share
Download
ZyXEL Communications P-861H-G1 User Manual Download Page 174

Prestige 861H Series User’s Guide

173 

Chapter 20 Network Address Translation (NAT)

Figure 98   

Menu 4 Applying NAT for Internet Access

                        Menu 4 - Internet Access Setup

                    ISP's Name= MyISP
                    Encapsulation= ENET ENCAP
                    Multiplexing= LLC-based
                    VPI #= 8
                    VCI #= 35
                    Service Name= N/A
                    My Login= N/A
                    My Password= N/A

                    

NAT= SUA Only

                      Address Mapping Set= N/A
                    IP Address Assignment= Dynamic
                      IP Address= N/A
                    ENET ENCAP Gateway= N/A

                    Press ENTER to Confirm or ESC to Cancel:

Press Space Bar to Toggle.

The following figure shows how you apply NAT to the remote node in menu 11.1. 

1

Enter 11 from the main menu.

2

When menu 11 appears, as shown in the following figure, type the number of the remote 
node that you want to configure.

3

Move the cursor to the 

Edit IP/Bridge

 field, press 

[SPACE BAR] 

to select 

Yes

 and then 

press 

[ENTER]

 to bring up 

Menu 11.3 - Remote Node Network Layer Options.

Summary of Contents for P-861H-G1

Page 1: ...Prestige 861H Series VDSL Router Bridge User s Guide Version 3 40 8 2005...

Page 2: ......

Page 3: ...y ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it...

Page 4: ...ccordance with the instructions may cause harmful interference to radio communications If this equipment does cause harmful interference to radio television reception which can be determined by turnin...

Page 5: ...uide Federal Communications Commission FCC Interference Statement 4 1 Select your product from the drop down list box on the ZyXEL home page to go to that product s page 2 Select the certification you...

Page 6: ...r supply is damaged remove it from the power outlet Do NOT attempt to repair the power supply Contact your local vendor to order a new power supply Place connecting cables carefully so that no one wil...

Page 7: ...ed by an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all othe...

Page 8: ...ej 5 2860 Soeborg Denmark sales zyxel dk 45 39 55 07 07 FINLAND support zyxel fi 358 9 4780 8411 www zyxel fi ZyXEL Communications Oy Malminkaari 10 00700 Helsinki Finland sales zyxel fi 358 9 4780 84...

Page 9: ...uk 44 0 1344 303044 08707 555779 UK only www zyxel co uk ZyXEL Communications UK Ltd 11 The Courtyard Eastern Road Bracknell Berkshire RG12 2XB United Kingdom UK sales zyxel co uk 44 0 1344 303034 ftp...

Page 10: ...Prestige 861H Series User s Guide 9 Customer Support...

Page 11: ...ng the Prestige 36 1 1 1 Features of the Prestige 36 1 1 2 Applications for the Prestige 38 1 1 2 1 Home Gateway Applications 38 1 1 3 Front Panel LEDs 41 1 1 4 Rear Panel 42 1 1 4 1 VDSL Port 42 1 1...

Page 12: ...64 4 2 1 1 Private IP Addresses 64 4 2 2 RIP Setup 65 4 2 3 Multicast 65 4 2 4 Configuring LAN 66 Chapter 5 WAN Setup 70 5 1 WAN Overview 70 5 1 1 Encapsulation 70 5 1 1 1 ENET ENCAP 70 5 1 1 2 PPP o...

Page 13: ...6 Network Address Translation NAT Screens 84 6 1 NAT Overview 84 6 1 1 NAT Definitions 84 6 1 2 What NAT Does 85 6 1 3 How NAT Works 85 6 1 4 NAT Application 86 6 1 5 NAT Mapping Types 87 6 2 SUA Sin...

Page 14: ...ug and Play 106 10 1 1 How do I know if I m using UPnP 106 10 1 2 NAT Traversal 106 10 1 3 Cautions with UPnP 106 10 2 UPnP and ZyXEL 107 10 2 1 Configuring UPnP 107 10 3 Installing UPnP in Windows Ex...

Page 15: ...14 1 General Setup 140 14 2 Procedure To Configure Menu 1 140 14 2 1 Procedure to Configure Dynamic DNS 142 Chapter 15 Menu 3 LAN Setup 144 15 1 LAN Setup 144 15 1 1 General Ethernet Setup 144 15 2 Pr...

Page 16: ...172 20 1 Using NAT 172 20 1 1 SUA Single User Account Versus NAT 172 20 2 Applying NAT 172 20 3 NAT Setup 174 20 3 1 Address Mapping Sets 175 20 3 1 1 SUA Address Mapping Set 175 20 3 1 2 User Define...

Page 17: ...3 3 2 Console Port Speed 209 23 4 Log and Trace 210 23 4 1 Viewing Error Log 210 23 5 Diagnostic 211 Chapter 24 Firmware and Configuration File Maintenance 214 24 1 Filename Conventions 214 24 2 Backu...

Page 18: ...Remote Management Overview 232 26 2 Remote Management 232 26 2 1 Remote Management Setup 232 26 2 2 Remote Management Limitations 233 26 3 Remote Management and NAT 234 26 4 System Timeout 234 Chapte...

Page 19: ...ip Command Examples 261 31 3 1 ip ping 261 31 3 2 ip route status 262 31 3 3 ip arp status 262 31 4 WAN Commands 263 Chapter 32 VDSL Commands 264 32 1 VDSL Commands Overview 264 32 2 Command Summary...

Page 20: ...80 Appendix B Setting up Your Computer s IP Address 284 Windows 95 98 Me 284 Installing Components 285 Configuring 286 Verifying Settings 287 Windows 2000 NT XP 287 Verifying Settings 292 Macintosh OS...

Page 21: ...PPPoE in Action 312 Benefits of PPPoE 312 Traditional Dial up Scenario 312 How PPPoE Works 313 Prestige as a PPPoE Client 313 Appendix H Log Descriptions 314 Log Commands 328 Configuring What You Wan...

Page 22: ...Prestige 861H Series User s Guide 21 Table of Contents...

Page 23: ...Figure 16 Internet Access Wizard Setup Connection Tests 56 Figure 17 Internet Access Wizard Setup ISP Parameters 57 Figure 18 Internet Connection with RFC 1483 58 Figure 19 Internet Connection with PP...

Page 24: ...e 55 View Logs 121 Figure 56 System Status 123 Figure 57 System Status Show Statistics 125 Figure 58 DHCP Table 126 Figure 59 Diagnostic General 127 Figure 60 Diagnostic DSL Line 128 Figure 61 Firmwar...

Page 25: ...173 Figure 99 Applying NAT in Menus 4 11 3 174 Figure 100 Menu 15 NAT Setup 175 Figure 101 Menu 15 1 Address Mapping Sets 175 Figure 102 Menu 15 1 255 SUA Address Mapping Rules 176 Figure 103 Menu 15...

Page 26: ...es 211 Figure 144 Menu 24 4 System Maintenance Diagnostic 211 Figure 145 Telnet in Menu 24 5 216 Figure 146 FTP Session Example 217 Figure 147 Telnet into Menu 24 6 220 Figure 148 Restore Using FTP Se...

Page 27: ...y Settings Java Scripting 279 Figure 188 WIndows 95 98 Me Network Configuration 285 Figure 189 Windows 95 98 Me TCP IP Properties IP Address 286 Figure 190 Windows 95 98 Me TCP IP Properties DNS Confi...

Page 28: ...Prestige 861H Series User s Guide 27 List of Figures...

Page 29: ...Remote Nodes 77 Table 14 WAN Setup 79 Table 15 NAT Definitions 84 Table 16 NAT Mapping Types 87 Table 17 Services and Port Numbers 88 Table 18 NAT Mode 90 Table 19 Edit SUA NAT Server Set 91 Table 20...

Page 30: ...57 Menu 21 1 x 1 TCP IP Filter Rule 193 Table 58 Menu 21 1 5 1 Generic Filter Rule 196 Table 59 Filter Sets Table 199 Table 60 Menu 22 SNMP Configuration 204 Table 61 SNMP Traps 204 Table 62 Ports an...

Page 31: ...bnets Example 298 Table 98 Subnet 1 299 Table 99 Subnet 2 299 Table 100 Subnet 1 300 Table 101 Subnet 2 300 Table 102 Subnet 3 300 Table 103 Subnet 4 301 Table 104 Eight Subnets 301 Table 105 Class C...

Page 32: ...31 List of Tables Table 125 ICMP Notes 326 Table 126 Syslog Logs 327 Table 127 RFC 2408 ISAKMP Payload Types 327 Table 128 Band Plan 998_138_12000 4B 331 Table 129 Band Plan 998_138_8500 3B 331 Table...

Page 33: ...the web configurator System Management Terminal SMT or command interpreter interface to configure your Prestige Not all features can be configured through all interfaces Syntax Conventions Enter mean...

Page 34: ...nd Web Site Please refer to www zyxel com for an online glossary of networking terms and additional support documentation User Guide Feedback Help us help you E mail all User Guide related comments qu...

Page 35: ...et users because more information is usually downloaded than uploaded For example a simple button click in a web browser can start an extended download that includes graphics and text As data rates in...

Page 36: ...Prestige 861H Series User s Guide 35 Introduction to DSL...

Page 37: ...es ease of installation and Internet access In the Prestige product name H denotes an integrated 4 port switch hub The Series denotes different band plans G1 and G2 G1 represents a VDSL band plan spec...

Page 38: ...equest is made Network Address Translation NAT Network Address Translation NAT allows the translation of an Internet protocol address used within one network for example a private IP address used in a...

Page 39: ...iguration as simple as possible for you Packet Filters The Prestige s packet filtering functions allows added network security and management Housing Your Prestige s compact and ventilated housing min...

Page 40: ...emote location Examples of home gateways include computers routers or modems LAN access points WLAN access points and digital Set Top Boxes Figure 1 Prestige Home Gateway Applications Internet Access...

Page 41: ...estige offers the Single User Account SUA feature that allows multiple users on the LAN Local Area Network to access the Internet concurrently for the cost of a single IP address LAN to LAN Applicatio...

Page 42: ...ooting None Off The system is not ready or has malfunctioned LAN 1 4 Green On The Prestige has a successful 10Mb Ethernet connection Blinking The Prestige is sending receiving data Amber On The Presti...

Page 43: ...e Prestige via a terminal emulator software on a computer that is connected to the Prestige through the console port Connect the male end of the console cable to the console port of the Prestige and t...

Page 44: ...ed POWER on the rear panel of your Prestige Push in the power button to turn on the Prestige Note To avoid damage to the Prestige make sure you use the supplied power adaptor 1 1 4 7 Turning On Your P...

Page 45: ...he web configurator you need to allow Web browser pop up windows from your device Web pop up blocking is enabled by default in Windows XP SP Service Pack 2 JavaScripts enabled by default See the Troub...

Page 46: ...The following summarizes how to navigate the web configurator from the SITE MAP screen Click Wizard Setup to begin a series of screens to configure your Prestige for the first time Click a link under...

Page 47: ...e this screen to configure servers behind the Prestige Full Feature Use this screen to configure network address translation mapping rules Dynamic DNS Use this screen to set up dynamic DNS Time and Da...

Page 48: ...ss the system in this field New Password Type the new password in this field Retype to Confirm Type the new password again in this field Apply Click Apply to save your changes back to the Prestige Can...

Page 49: ...reens for Internet access in the web configurator 3 1 Introduction Use the Wizard Setup screens to configure your system for Internet access with the information given to you by your ISP Note See the...

Page 50: ...or PPPoE Multiplex The multiplexing method used by your ISP is LLC based Virtual Circuit ID VPI Virtual Path Identifier and VCI Virtual Channel Identifier define a virtual circuit Refer to the appendi...

Page 51: ...different one each time you connect to the Internet Select Obtain an IP Address Automatically if you have a dynamic IP address otherwise select Static IP Address and type your ISP assigned IP address...

Page 52: ...chapter for more details Back Click Back to go back to the first wizard screen Next Click Next to continue to the next wizard screen PPPoE Pass Through Select Yes from the PPPoE Pass Through drop dow...

Page 53: ...ave a dynamic IP address otherwise select Static IP Address and type your ISP assigned IP address in the IP Address text box below Subnet Mask Enter a subnet mask in dotted decimal notation Refer to t...

Page 54: ...s and type your ISP assigned IP address in the IP Address text box below Connection Select Connect on Demand when you don t want the connection up all the time and specify an idle time out in seconds...

Page 55: ...ange the LAN information on the Prestige click Change LAN Configurations Otherwise click Save Settings to save the configuration and skip to the final wizard screen Figure 14 Internet Access Wizard Se...

Page 56: ...gateway and DNS servers to computer systems that support the DHCP client Select Off to disable DHCP server When DHCP server is used set the following items Client IP Pool Starting Address This field...

Page 57: ...rest of this guide for more detailed information on the complete range of Prestige features If you cannot access the Internet open the web configurator again to confirm that the Internet settings you...

Page 58: ...uit ID VPI Virtual Path Identifier and VCI Virtual Channel Identifier define a virtual circuit Refer to the appendix for more information VPI Enter the VPI assigned to you This field may already be co...

Page 59: ...A LABEL DESCRIPTION User Name Enter the login name that your ISP gives you Password Enter the password associated with the user name above Connection Select Connect on Demand when you don t want the c...

Page 60: ...ts To test the connection from the Prestige to the ISP click Start Diagnose Otherwise click Return to Main Menu to go back to the Site Map screen Figure 21 Internet Access Wizard Setup Connection Test...

Page 61: ...uide Chapter 3 Wizard Setup for Internet Access 60 range of Prestige features If you cannot access the Internet open the web configurator again to confirm that the Internet settings you configured in...

Page 62: ...Prestige 861H Series User s Guide 61 Chapter 3 Wizard Setup for Internet Access...

Page 63: ...ige The actual physical connection determines whether the Prestige ports are LAN or WAN ports There are two separate IP networks one inside the LAN network and the other outside the WAN network as sho...

Page 64: ...r extensions through the DNS proxy feature If the Primary and Secondary DNS Server fields in the LAN Setup screen are not specified for instance left as 0 0 0 0 the Prestige tells the DHCP clients tha...

Page 65: ...do not use any other number unless you are told otherwise Let s say you select 192 168 1 0 as the network number which covers 254 individual addresses from 192 168 1 1 to 192 168 1 254 zero and 255 ar...

Page 66: ...out RIP packets but will not accept any RIP packets received None the Prestige will not send any RIP packets and will ignore any RIP packets received The Version field controls the format and the broa...

Page 67: ...ress 224 0 0 2 is assigned to the multicast routers group The Prestige supports both IGMP version 1 IGMP v1 and IGMP version 2 IGMP v2 At start up the Prestige queries all directly connected networks...

Page 68: ...ts and responses between the remote server and the clients Enter the IP address of the actual remote DHCP server in the Remote DHCP Server field in this case Note The DHCP requests are forwarded to th...

Page 69: ...d to you by your ISP if given RIP Direction Select the RIP direction from None Both In Only and Out Only RIP Version Select the RIP version from RIP 1 RIP 2B and RIP 2M Multicast IGMP Internet Group M...

Page 70: ...Prestige 861H Series User s Guide 69 Chapter 4 LAN Setup...

Page 71: ...Gateway field in the second wizard screen You can get this information from your ISP 5 1 1 2 PPP over Ethernet PPPoE provides access control and billing functionality in a manner similar to dial up se...

Page 72: ...aneous VCs 5 1 3 VPI and VCI Be sure to use the correct Virtual Path Identifier VPI and Virtual Channel Identifier VCI numbers assigned to you The valid range for the VPI is 0 to 255 and for the VCI i...

Page 73: ...ource address of an outgoing packet used within one network to a different IP address known within another network 5 2 PPPoE Encapsulation The Prestige supports PPPoE Point to Point Protocol over Ethe...

Page 74: ...ty connections that require closely controlled delay and delay variation An example of an rt VBR connection would be video conferencing Video conferencing requires real time data transfers and the ban...

Page 75: ...3 2 2 Sustained Cell Rate SCR Sustained Cell Rate SCR is the mean cell rate of each bursty traffic source It specifies the maximum average rate at which cells can be sent over the virtual connection S...

Page 76: ...r which the SCR is enforced BT is used to determine if a cell arrived too early in relation to SCR Use this formula to calculate BT MBS 1 x 1 SCR 1 PCR BT 5 4 Permanent Virtual Circuit Permanent Virtu...

Page 77: ...nfiguration Example See section 5 7 for more information on how to set up the WAN remote nodes 5 5 Remote Node Screen To view your Prestige s WAN remote node settings click WAN The Remote Node screen...

Page 78: ...s field displays the VPI assigned to you The valid range for the VPI is 0 to 255 VCI This field displays the VCI assigned to you The valid range for the VCI is 32 to 65535 0 to 31 is reserved for loca...

Page 79: ...is disabled when the Prestige is in bridge mode you set the Prestige to use a static fixed WAN IP address 5 7 Configuring WAN Setup To change your Prestige s WAN remote node settings click WAN and sel...

Page 80: ...lds in this screen Table 14 WAN Setup LABEL DESCRIPTION Name Enter the name of your Internet Service Provider e g MyISP This information is for identification purposes only Mode Select Routing default...

Page 81: ...lly Variation Tolerance This field displays the accepted tolerance of the difference between a cell s transfer delay and the expected transfer delay Sustain Cell Rate The Sustain Cell Rate SCR sets th...

Page 82: ...ISP assigned IP address in the IP Address field below Connection PPPoA and PPPoE encapsulation only The schedule rule s in SMT menu 26 have priority over your Connection settings Nailed Up Connection...

Page 83: ...You must specify a gateway IP address supplied by your ISP when you select ENET ENCAP in the Encapsulation field Back Click Back to return to the previous screen Apply Click Apply to save the changes...

Page 84: ...Prestige 861H Series User s Guide 83 Chapter 5 WAN Setup...

Page 85: ...fers to the IP address of a host when the packet is in the local network while the global address refers to the IP address of the host when the same packet is traveling in the WAN side Note that insid...

Page 86: ...e 87 NAT offers the additional benefit of firewall protection With no servers defined your Prestige filters out all incoming inquiries thus preventing intruders from probing your network For more info...

Page 87: ...NAT Works 6 1 4 NAT Application The following figure illustrates a possible NAT application where three inside LANs logical LANs using IP Alias behind the Prestige can communicate with three distinct...

Page 88: ...e Prestige maps the multiple local IP addresses to shared global IP addresses Many to Many No Overload In Many to Many No Overload mode the Prestige maps each local IP address to a unique global IP ad...

Page 89: ...t 80 and FTP on port 21 In some cases such as for unknown services or where one server can support more than one service for example both FTP and web service it might be better to specify a range of p...

Page 90: ...st on the Internet IP address assigned by ISP Figure 30 Multiple Servers Behind NAT Example 6 4 Selecting the NAT Mode You must create a firewall rule in addition to setting up SUA NAT to allow traffi...

Page 91: ...link to go to the NAT Edit SUA NAT Server Set screen Full Feature Select this radio button if you have multiple public WAN IP addresses for your Prestige Edit Details Click this link to go to the NAT...

Page 92: ...of ports enter the start port number here and the end port number in the End Port No field End Port No Enter a port number in this field To forward only one port enter the port number again in the Sta...

Page 93: ...your Prestige s address mapping settings click NAT Select Full Feature and click Edit Details to open the following screen Figure 33 Address Mapping Rules The following table describes the fields in t...

Page 94: ...mapping type M 1 Many to One mode maps multiple local IP addresses to one global IP address This is equivalent to SUA i e PAT port address translation ZyXEL s Single User Account feature that previous...

Page 95: ...are N A for Server port mapping Local End IP This is the end local IP address ILA If your rule is for all local IP addresses then enter 0 0 0 0 as the Local Start IP address and 255 255 255 255 as the...

Page 96: ...Prestige 861H Series User s Guide 95 Chapter 6 Network Address Translation NAT Screens...

Page 97: ...iends or relatives will always be able to call you even if they don t know your IP address First of all you need to have registered a dynamic DNS account with www dyndns org This is for people with a...

Page 98: ...rovider This is the name of your Dynamic DNS service provider Host Names Type the domain name assigned to your Prestige by your Dynamic DNS provider E mail Address Type your e mail address User Type y...

Page 99: ...screen to configure the Prestige s time and date settings 8 1 Configuring Time and Date To change your Prestige s time and date click Time And Date The screen appears as shown Use this screen to conf...

Page 100: ...if you selected Daylight Savings End Date Enter the month and day that your daylight savings time ends on if you selected Daylight Savings Synchronize system clock with Time Server now Select this op...

Page 101: ...me The Prestige automatically disconnects a remote management session of lower priority when another remote management session of higher priority starts The priorities for the different types of remot...

Page 102: ...omatically logs you out if the management session remains idle for longer than this timeout period The management session does not time out when a statistics screen is polling 9 2 Telnet You can confi...

Page 103: ...ment software module that resides in a managed device the Prestige An agent translates the local management information from the managed device into a form compatible with SNMP The manager is the cons...

Page 104: ...coldStart defined in RFC 1215 A trap is sent after booting power on 1 warmStart defined in RFC 1215 A trap is sent after booting software reboot 4 authenticationFailure defined in RFC 1215 A trap is...

Page 105: ...ss Status Select the access interface Choices are All LAN Only WAN Only and Disable Port This field shows the port number for the remote management service You may change the port number for a service...

Page 106: ...Prestige 861H Series User s Guide 105 Chapter 9 Remote Management Configuration...

Page 107: ...ll appear as a separate icon Selecting the icon of a UPnP device will allow you to access the information and properties of that device 10 1 2 NAT Traversal UPnP NAT traversal automates the process of...

Page 108: ...tion supports IGD 1 0 Internet Gateway Device At the time of writing ZyXEL s UPnP implementation supports Windows Messenger 4 6 and 4 7 while Windows Messenger 5 0 and Xbox are still being tested UPnP...

Page 109: ...al UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device this eliminates the need to manually configure port forwarding for the UPnP en...

Page 110: ...Setup Communication 3 In the Communications window select the Universal Plug and Play check box in the Components selection box Figure 42 Add Remove Programs Windows Setup Communication Components 4 C...

Page 111: ...ows XP 1 Click Start and Control Panel 2 Double click Network Connections 3 In the Network Connections window click Advanced in the main menu and select Optional Networking Components Figure 43 Networ...

Page 112: ...e 861H Series User s Guide 111 Chapter 10 Universal Plug and Play UPnP Figure 44 Windows Optional Networking Components Wizard 5 In the Networking Services window select the Universal Plug and Play ch...

Page 113: ...section shows you how to use the UPnP feature in Windows XP You must already have UPnP installed in Windows XP and UPnP activated on the Prestige Make sure the computer is connected to a LAN port of t...

Page 114: ...Series User s Guide 113 Chapter 10 Universal Plug and Play UPnP Figure 46 Network Connections 3 In the Internet Connection Properties window click Settings to see the port mappings there were automati...

Page 115: ...estige 861H Series User s Guide Chapter 10 Universal Plug and Play UPnP 114 Figure 47 Internet Connection Properties 4 You may edit or delete the port mappings or click Add to manually add port mappin...

Page 116: ...erties Advanced Settings Figure 49 Internet Connection Properties Advanced Settings Add 5 When the UPnP enabled device is disconnected from your computer all port mappings will be deleted automaticall...

Page 117: ...ction Status Web Configurator Easy Access With UPnP you can access the web based configurator on the Prestige without finding out the IP address of the Prestige first This comes helpful if you do not...

Page 118: ...iversal Plug and Play UPnP Figure 52 Network Connections 4 An icon with the description for each UPnP enabled device displays under Local Network 5 Right click on the icon for your Prestige and select...

Page 119: ...lay UPnP 118 Figure 53 Network Connections My Network Places 6 Right click on the icon for your Prestige and select Properties A properties window displays with basic information about the Prestige Fi...

Page 120: ...Prestige 861H Series User s Guide 119 Chapter 10 Universal Plug and Play UPnP...

Page 121: ...lert is a type of log that warrants more serious attention They include system errors attacks access control and attempted access to blocked web sites Some categories such as System Errors consist of...

Page 122: ...fresh to renew the log screen Clear Log Click Clear Log to delete all the logs Time This field displays the time the log was recorded Message This field states the reason for the log Source This field...

Page 123: ...d port traffic statistics 12 1 Maintenance Overview The maintenance screens can help you view system information upload new firmware manage configuration and restart your Prestige 12 2 System Status S...

Page 124: ...rposes ZyNOS Firmware Version This is the ZyNOS firmware version and the date created ZyNOS is ZyXEL s proprietary Network Operating System design DSL FW Version This is the DSL firmware version assoc...

Page 125: ...rd screen LAN Information MAC Address This is the MAC Media Access Control or Ethernet address unique to your Prestige IP Address This is the LAN port IP address IP Subnet Mask This is the LAN port IP...

Page 126: ...ge Node Link This field displays the remote node index number and link type Link types are PPPoA ENET RFC 1483 and PPPoE Interface This field displays the type of port Status For the WAN port this dis...

Page 127: ...CP Table The following table describes the fields in this screen Table 30 DHCP Table LABEL DESCRIPTION Host Name This is the name of the host computer IP Address This field displays the IP address rel...

Page 128: ...s screen Table 31 Diagnostic General LABEL DESCRIPTION TCP IP Address Type the IP address of a computer that you want to ping in order to test a connection Ping Click this button to ping the IP addres...

Page 129: ...ave configured at least one PVC with proper VPIs VCIs before you begin this test The Prestige sends an OAM F5 packet to the DSLAM ATM switch and then returns it loops it back to the Prestige The ATM l...

Page 130: ...fore you can upload them Upload Click Upload to begin the upload process This process may take up to two minutes Reset Click this button to clear all user entered configuration information and return...

Page 131: ...iguration 12 6 1 Backup Configuration Backup configuration allows you to back up save the Prestige s current configuration to a file on your computer Once your Prestige is configured and functioning p...

Page 132: ...u want to upload in this field or click Browse to find it Browse Click Browse to find the file you want to upload Remember that you must decompress compressed ZIP files before you can upload them Back...

Page 133: ...e your Quick Start Guide for details on how to set up your computer s IP address If the upload was not successful the following screen will appear Click Back to return to the Configuration screen Figu...

Page 134: ...Prestige 861H Series User s Guide 133 Chapter 12 Maintenance...

Page 135: ...restige 1 In Windows click Start usually in the bottom left corner Run and then type telnet 192 168 1 1 the default IP address and click OK 2 Enter 1234 in the Password field 3 After entering the pass...

Page 136: ...Setup 11 1 Remote Node Profile 11 3 Remote Node Network Layer Options 11 5 Remote Node Filter 11 6 Remote Node ATM Layer Options 11 8 Advance Setup Options PPPoE passthrough 12 Static Routing Setup 1...

Page 137: ...Management 24 10 Time and Date Setting 24 11 Remote Management Control 25 IP Routing Policy Setup 25 1 IP Routing Policy Setup 25 1 1 IP Routing Policy 26 Schedule Setup 26 1 Schedule Setup Table 35 S...

Page 138: ...s or ChangeMe All fields with the symbol must be filled in order to be able to save the new configuration All fields with ChangeMe must not be left blank in order to be able to save the new configurat...

Page 139: ...Re type your new system password in the Retype to confirm field for confirmation and press ENTER Note Note that as you type a password the screen displays an for each character you type 12 Static Rou...

Page 140: ...Prestige 861H Series User s Guide 139 Chapter 13 Introducing the SMT...

Page 141: ...Windows 2000 click Start Settings Control Panel and then double click System Click the Network Identification tab and then the Properties button Note the entry for the Computer name field and enter it...

Page 142: ...0 characters of the person in charge of this Prestige Domain Name Enter the domain name if you know it here If you leave this field blank the ISP may assign a domain name via DHCP You can go to menu 2...

Page 143: ...restige is installed ILMI operates between the network DSLAM and the VDSL device ILMI uses SNMP and an ATM Management Information Database MIB to transfer configuration settings from the DSLAM to the...

Page 144: ...ACE BAR and then ENTER to select Yes or No This field is N A when you choose DDNS client as your service provider When you have completed this menu press ENTER at the prompt Press ENTER to Confirm or...

Page 145: ...LAN Setup 15 1 1 General Ethernet Setup This menu allows you to specify filter set s that you wish to apply to the Ethernet traffic You seldom need to filter Ethernet traffic however the filter sets...

Page 146: ...the main menu to display Menu 3 LAN Setup When menu 3 appears press 2 and press ENTER to display Menu 3 2 TCP IP and DHCP Ethernet Setup as shown next Figure 76 Menu 3 2 TCP IP and DHCP Setup DHCP Se...

Page 147: ...er the IP address of the actual remote DHCP server here Follow the instructions in the following table to configure TCP IP parameters for the Ethernet port Table 42 TCP IP Ethernet Setup FIELD DESCRIP...

Page 148: ...Prestige 861H Series User s Guide 147 Chapter 15 Menu 3 LAN Setup...

Page 149: ...g based on the policy defined by the network administrator Policy based routing is applied to incoming packets on a per interface basis prior to the normal routing Create policies using SMT menu 25 an...

Page 150: ...the second and third network Figure 78 Menu 3 2 TCP IP and DHCP Setup Menu 3 2 TCP IP and DHCP Setup DHCP Setup DHCP Server Client IP Pool Starting Address 192 168 1 33 Size of Client IP Pool 32 Prima...

Page 151: ...ill automatically calculate the subnet mask based on the IP address that you assign Unless you are implementing subnetting use the subnet mask computed by the Prestige RIP Direction Press SPACE BAR to...

Page 152: ...Internet Access information in one screen Menu 4 is actually a simplified setup for one of the remote nodes that you can access in menu 11 Before you configure your Prestige for Internet access you ne...

Page 153: ...T ENCAP Multiplexing This field displays the method of multiplexing used by your ISP VPI Enter the Virtual Path Identifier VPI assigned to you VCI Enter the Virtual Channel Identifier VCI assigned to...

Page 154: ...u receive on the screen and take the appropriate troubleshooting steps ENET ENCAP Gateway Enter the gateway IP address supplied by your ISP when you are using ENET ENCAP encapsulation When you have co...

Page 155: ...you are configuring one of the remote nodes You first choose a remote node in Menu 11 Remote Node Setup You can then edit that node s profile in menu 11 1 as well as configure specific settings in th...

Page 156: ...se the encapsulation and multiplexing methods used by your ISP Consult your telephone company for information on encapsulation and multiplexing methods for LAN to LAN applications for example between...

Page 157: ...node Active Press SPACE BAR and then ENTER to select Yes to activate or No to deactivate this node Inactive nodes are displayed with a minus sign in SMT menu 11 Encapsulation PPPoA refers to RFC 2364...

Page 158: ...ns Edit Advance Options This field is only available when you select PPPoE in the Encapsulation field Press SPACE BAR to select Yes and press ENTER to display Menu 11 8 Advance Setup Options Telco Opt...

Page 159: ...e Bar to Toggle The next table explains fields in Menu 11 3 Remote Node Network Layer Options Table 46 Menu 11 3 Remote Node Network Layer Options FIELD DESCRIPTION IP Address Assignment Press SPACE B...

Page 160: ...minimum of 1 for directly connected networks Type a number that approximates the cost for this link The number need not be precise but it must be between 1 and 15 In practice 2 or 3 is usually a good...

Page 161: ...e Prestige and also to prevent certain packets from triggering calls You can specify up to 4 filter sets separated by comma for example 1 5 9 12 in each filter field Note that spaces are accepted in t...

Page 162: ...e Node ATM Layer Options 17 5 1 LLC based Multiplexing or PPP Encapsulation For LLC based multiplexing or PPP encapsulation one VC carries multiple protocols with protocol identifying information bein...

Page 163: ...o Multiplexing LLC based Edit ATM Options No Service Name Edit Advance Options Yes Incoming Telco Option Rem Login Allocated Budget min 0 Rem Password Period hr 0 Outgoing Schedule Sets My Login admin...

Page 164: ...nt you can enable PPPoE pass through to allow up to ten hosts on the LAN to use PPPoE client software on their computers to connect to the ISP via the Prestige Each host can have a separate account an...

Page 165: ...Each remote node specifies only the network to which the gateway is directly connected and the Prestige has no knowledge of the networks beyond For instance the Prestige knows about network N2 in the...

Page 166: ...1 IP Static Route Setup 1 ________ 2 ________ 3 ________ 4 ________ 5 ________ 6 ________ 7 ________ 8 ________ 9 ________ 10 ________ 11 ________ 12 ________ 13 ________ 14 ________ 15 ________ 16 _...

Page 167: ...destination Gateway IP Address Type the IP address of the gateway The gateway is a router or switch on the same network segment as the device s LAN or WAN port The gateway helps forward packets to the...

Page 168: ...Prestige 861H Series User s Guide 167 Chapter 18 Static Route Setup...

Page 169: ...r protocol and it also demands more CPU cycles and memory For efficiency reasons do not turn on bridging unless you need to support protocols other than IP on your network For IP enable the routing if...

Page 170: ...dit Advance Options N A Incoming Telco Option Rem Login N A Allocated Budget min N A Rem Password N A Period hr N A Outgoing Schedule Sets N A My Login N A Nailed Up Connection N A My Password N A Ses...

Page 171: ...e menu 11 1 Make sure this field is set to Yes Edit IP Bridge menu 11 1 Press SPACE BAR to select Yes and press ENTER to display menu 11 3 Ethernet Addr Timeout min menu 11 3 Type the time in minutes...

Page 172: ...Setup Route Name Type a name for the bridge static route for identification purposes Active Indicates whether the static route is active Yes or not No Ether Address Type the MAC address of the destin...

Page 173: ...rts two types of mapping Many to One and Server See Section 20 3 on page 174 or a detailed description of the NAT set for SUA The Prestige also supports Full Feature NAT to map multiple global IP addr...

Page 174: ...N A IP Address Assignment Dynamic IP Address N A ENET ENCAP Gateway N A Press ENTER to Confirm or ESC to Cancel Press Space Bar to Toggle The following figure shows how you apply NAT to the remote no...

Page 175: ...he SMT uses the address mapping set that you configure and enter in the Address Mapping Set field seeFigure 101 on page 175 Select None to disable NAT When you select SUA Only the SMT uses Address Map...

Page 176: ...1 Address Mapping Sets Enter 1 to bring up Menu 15 1 Address Mapping Sets Figure 101 Menu 15 1 Address Mapping Sets Menu 15 1 Address Mapping Sets 1 ACL Default Set 2 3 4 5 6 7 8 255 SUA read only En...

Page 177: ...LA If the rule is for all local IPs then the Start IP is 0 0 0 0 and the End IP is 255 255 255 255 Global Start IP This is the starting global IP address IGA If you have a dynamic IP enter 0 0 0 0 as...

Page 178: ...ber of empty rules For example if you have already configured rules 1 to 6 in your current set and now you configure rule number 9 In the set summary screen the new rule will be rule 7 not 9 Now if yo...

Page 179: ...ess SPACE BAR and then ENTER to select from a total of five types These are the mapping types discussed in the web configurator NAT chapter Server allows you to specify multiple servers of different t...

Page 180: ...15 2 1 NAT Server Setup as follows Figure 106 Menu 15 2 1 NAT Server Setup Menu 15 2 NAT Server Setup Rule Start Port No End Port No IP Address 1 Default Default 0 0 0 0 2 21 21 192 168 1 33 3 0 0 0 0...

Page 181: ...e servers or press ESC at any time to cancel Figure 107 Multiple Servers Behind NAT Example 20 5 General NAT Examples The following are some examples of NAT configuration 20 5 1 Example 1 Internet Acc...

Page 182: ...Only Address Mapping Set N A IP Address Assignment Dynamic IP Address N A ENET ENCAP Gateway N A Press ENTER to Confirm or ESC to Cancel Press Space Bar to Toggle From menu 4 choose the SUA Only optio...

Page 183: ...0 11 0 0 0 0 0 0 12 0 0 0 0 0 0 Press ENTER to Confirm or ESC to Cancel 20 5 3 Example 3 Multiple Public IP Addresses With Inside Servers In this example there are 3 IGAs from our ISP There are many d...

Page 184: ...s case you need to configure Address Mapping Set 1 from Menu 15 1 Address Mapping Sets Therefore you must choose the Full Feature option from the Network Address Translation field in menu 4 or menu 11...

Page 185: ...Mask 0 0 0 0 My WAN Addr 0 0 0 0 NAT Full Feature Address Mapping Set 1 Metric 2 Private No RIP Direction None Version RIP 1 Multicast None IP Policies Enter here to CONFIRM or ESC to CANCEL The foll...

Page 186: ...ress ENTER to Confirm or ESC to Cancel Now configure the IGA3 to map to our web server and mail server on the LAN 1 Enter 15 from the main menu 2 Enter 2 in Menu 15 NAT Setup 3 Enter 1 in Menu 15 2 NA...

Page 187: ...some gaming programs are NAT unfriendly because they embed addressing information in the data stream These applications won t work through NAT even when using One to One and Many to Many No Overload m...

Page 188: ...4 Menu 15 1 1 Address Mapping Rules Menu 15 1 1 Address Mapping Rules Set Name Example4 Idx Local Start IP Local End IP Global Start IP Global End IP Type 1 192 168 1 10 192 168 1 12 10 132 50 1 10 13...

Page 189: ...e WAN side or the Ethernet side Call filtering is used to determine if a packet should be allowed to trigger a call Outgoing packets must undergo data filtering before they encounter call filtering Ca...

Page 190: ...oming packets your Prestige applies data filters only Packets are processed depending on whether a match is found The following sections describe how to configure filter sets 21 1 1 The Filter Structu...

Page 191: ...______________ Enter Filter Set Number to Configure 0 Edit Comments N A Press ENTER to Confirm or ESC to Cancel 3 Type the filter set to configure no 1 to 12 and press ENTER 4 Type a descriptive name...

Page 192: ...following tables briefly describe the abbreviations used in menus 21 1 1 and 21 1 2 Table 55 Abbreviations Used in the Filter Rules Summary Menu FIELD DESCRIPTION The filter rule number 1 to 6 A Activ...

Page 193: ...Type field and press ENTER to open the respective menu To speed up filtering all rules in a filter set must be of the same class for instance protocol filters or generic filters The class of a filter...

Page 194: ...nfigure your TCP IP filter rule Table 57 Menu 21 1 x 1 TCP IP Filter Rule FIELD DESCRIPTION Filter This is the filter set filter rule coordinates for instance 2 3 refers to the second filter set and t...

Page 195: ...es only when the IP Protocol field is 6 TCP If Yes the rule matches packets that want to establish TCP connection s SYN 1 and ACK 0 else it is ignored More If Yes a matching packet is passed to the ne...

Page 196: ...guration Figure 127 Executing an IP Filter 21 4 2 Generic Filter Rule This section shows you how to configure a generic filter rule The purpose of generic rules is to allow you to filter non IP packet...

Page 197: ...Matched Check Next Rule Action Not Matched Check Next Rule Press ENTER to Confirm or ESC to Cancel The next table describes the fields in the Generic Filter Rule menu Table 58 Menu 21 1 5 1 Generic Fi...

Page 198: ...is receiving and sending the packets for instance the interface The interface can be an Ethernet or any other hardware port The following figure illustrates this Figure 129 Protocol and Device Filter...

Page 199: ...to configure the first filter rule Make the entries in this menu as shown next When you press ENTER to confirm the following screen appears Note that there is only one filter rule in this set Figure 1...

Page 200: ...xample Figure 132 Menu 21 1 6 1 Sample Filter Rules Summary Menu 21 1 6 Filter Rules Summary A Type Filter Rules M m n 1 Y IP Pr 6 SA 0 0 0 0 DA 0 0 0 0 DP 23 N D F 2 N 3 N 4 N 5 N 6 N Enter Filter Ru...

Page 201: ...fic Menu 3 1 LAN Port Filter Setup Input Filter Sets protocol filters 3 device filters Output Filter Sets protocol filters device filters Press ENTER to Confirm or ESC to Cancel 21 7 2 Remote Node Fil...

Page 202: ...Prestige 861H Series User s Guide 201 Chapter 21 Filter Configuration...

Page 203: ...etwork The Prestige supports SNMP version one SNMPv1 and version two c SNMPv2c The next figure illustrates an SNMP management operation SNMP is only available if TCP IP is configured Figure 135 SNMP M...

Page 204: ...etrieve an object variable from the agent GetNext Allows the manager to retrieve the next object variable from a table or list within an agent In SNMPv1 when a manager wants to retrieve all elements o...

Page 205: ...s address A blank default field means your Prestige will respond to all SNMP messages it receives regardless of source Trap Community Type the trap community which is the password sent with each trap...

Page 206: ...RFC 1215 A trap is sent to the manager when receiving any SNMP gets or sets requirements with wrong community password 6 whyReboot defined in ZYXEL MIB A trap is sent with the reason of restart befor...

Page 207: ...ormation and Console Port Speed 3 Log and Trace 4 Diagnostic 5 Backup Configuration 6 Restore Configuration 7 Upload Firmware 8 Command Interpreter Mode 9 Call Control 10 Time and Date Setting 11 Remo...

Page 208: ...and COMMANDS 1 Reset Counters ESC Exit The following table describes the fields present in Menu 24 1 System Maintenance Status Table 63 Menu 24 1 System Maintenance Status FIELD DESCRIPTION Node Lnk T...

Page 209: ...on and Console Port Speed Menu 24 2 System Information and Console Port Speed 1 System Information 2 Console Port Speed Please enter selection 23 3 1 System Information Enter 1 in menu 24 2 to display...

Page 210: ...tem system firmware version ZyNOS is a registered trademark of ZyXEL Communications Corporation VDSL Chipset Vendor Displays the vendor of the VDSL chipset and DSL version Standard This refers to the...

Page 211: ...ond is the syslog facility for message logging 23 4 1 Viewing Error Log The first place you should look for clues when something goes wrong is the error log Follow the procedures to view the local err...

Page 212: ...nd 62 Sat Jan 01 00 23 38 2000 PP19 INFO SMT Password pass 63 Sat Jan 01 00 23 38 2000 PP01 INFO SMT Session Begin Clear Error Log y n 23 5 Diagnostic The diagnostic facility allows you to test the di...

Page 213: ...nce Menu Diagnostic FIELD DESCRIPTION Reset xDSL Re initialize the xDSL link to the telephone company Ping Host Ping the host to see if the links and TCP IP protocol on both systems are working Reboot...

Page 214: ...Prestige 861H Series User s Guide 213 Chapter 23 System Information and Diagnosis...

Page 215: ...ame of your choosing ZyNOS ZyXEL Network Operating System sometimes referred to as the ras file is the system firmware and has a bin filename extension With many FTP and TFTP clients the filenames are...

Page 216: ...ading the rom 0 file replaces the entire ROM file system including your Prestige configurations system related data including the default password the error log and the trace log rom Firmware Ras This...

Page 217: ...details on backup using TFTP note that you must remain in this menu to back up using TFTP please see your Prestige manual Press ENTER to Exit 24 2 2 Using the FTP Command from the Command Line 1 Launc...

Page 218: ...omatically supplied to the server for anonymous access Anonymous logins will work only if your ISP or service administrator has enabled this option Normal The server requires a unique User ID and Pass...

Page 219: ...e transfer is complete 4 Launch the TFTP client on your computer and connect to the Prestige Set the transfer mode to binary before starting data transfer 5 Use the TFTP client see the example below t...

Page 220: ...ion File Maintenance Refer to Section 24 2 5 on page 217 to read about configurations that disallow TFTP and FTP over WAN 24 3 Restore Configuration This section shows you how to restore a previously...

Page 221: ...manual Press ENTER to Exit 1 Launch the FTP client on your computer 2 Enter open followed by a space and the IP address of your Prestige 3 Press ENTER when prompted for a username 4 Enter your passwor...

Page 222: ...irmware and the configuration file using FTP Figure 149 Telnet Into Menu 24 7 1 Upload System Firmware Menu 24 7 1 System Maintenance Upload System Firmware To upload the system firmware follow the pr...

Page 223: ...menu to upload system firmware using TFTP please see your manual Press ENTER to Exit To upload the firmware and the configuration file follow these examples 24 4 3 FTP File Upload Command from the DOS...

Page 224: ...e shown next 1 Use telnet from your computer to connect to the Prestige and log in Because TFTP does not have any security checks the Prestige records the IP address of the telnet client and accepts T...

Page 225: ...ras where i specifies binary image transfer mode use this mode when transferring binary files host is the Prestige s IP address and put transfers the file source on the computer firmware bin name of t...

Page 226: ...Prestige 861H Series User s Guide 225 Chapter 24 Firmware and Configuration File Maintenance...

Page 227: ...m web site for more detailed information on CI commands Enter 8 from Menu 24 System Maintenance A list of valid commands can be found by typing help or at the command prompt Type exit to return to the...

Page 228: ...eeds the limit the current call will be dropped and any future outgoing calls will be blocked To access the call control menu select option 9 in menu 24 to go to Menu 24 9 System Maintenance Call Cont...

Page 229: ...the screen The budget and the reset period can be configured in menu 11 1 for the remote node when PPPoE encapsulation is selected Table 69 Menu 24 9 1 System Maintenance Budget Management FIELD DESCR...

Page 230: ...Port Speed 3 Log and Trace 4 Diagnostic 5 Backup Configuration 6 Restore Configuration 7 Upload Firmware 8 Command Interpreter Mode 9 Call Control 10 Time and Date Setting 11 Remote Management Enter M...

Page 231: ...the server Time RFC 868 format displays a 4 byte integer giving the total number of seconds since 1970 1 1 at 0 0 0 NTP RFC 1305 is similar to Time RFC 868 None The default enter the time manually Tim...

Page 232: ...System Maintenance 25 3 1 Resetting the Time The Prestige resets the time in three instances On leaving menu 24 10 after making changes When the Prestige starts up if there is a timeserver configured...

Page 233: ...configuring firewall rules 26 2 Remote Management To disable remote management of a service select Disable in the corresponding Server Access field Enter 11 from menu 24 to display Menu 24 11 Remote M...

Page 234: ...ssing the SPACE BAR Choices are LAN only WAN only All or Disable The default is LAN only Secured Client IP The default 0 0 0 0 allows any client to use this service or protocol to access the Prestige...

Page 235: ...ress when configuring from the LAN 26 4 System Timeout There is a default system management idle timeout of five minutes three hundred seconds The Prestige automatically logs you out if the management...

Page 236: ...Prestige 861H Series User s Guide 235 Chapter 26 Remote Management...

Page 237: ...cedence or TOS Type of Service values in the IP header at the periphery of the network to enable the backbone to prioritize traffic Cost Savings IPPR allows organizations to distribute interactive tra...

Page 238: ...______ 7 _______________ 2 _______________ 8 _______________ 3 _______________ 9 _______________ 4 _______________ 10 _______________ 5 _______________ 11 _______________ 6 _______________ 12 ________...

Page 239: ..._____________________________________________________________________ ______________________________________________________________________ 6 N _______________________________________________________...

Page 240: ...es are displayed with a minus sign in SMT menu 25 Criteria IP Protocol IP layer 4 protocol for example UDP TCP ICMP etc Type of Service Prioritize incoming network traffic by choosing from Don t Care...

Page 241: ...he LAN otherwise the gateway must be the IP address of a remote node The default gateway is specified as 0 0 0 0 Type of Service Set the new TOS value of the outgoing packet Prioritize incoming networ...

Page 242: ...DNS Server 0 0 0 0 Secondary DNS Server 0 0 0 0 Remote DHCP Server N A TCP IP Setup IP Address 192 168 1 1 IP Subnet Mask 255 255 255 0 RIP Direction Both Version RIP 2B Multicast IGMP v2 IP Policies...

Page 243: ...N A NAT Full Feature Address Mapping Set 1 Metric 2 Private No RIP Direction None Version RIP 1 Multicast None IP Policies Enter here to CONFIRM or ESC to CANCEL Press Space Bar to Toggle 27 6 IP Poli...

Page 244: ...P Routing Policy as shown next Figure 165 IP Routing Policy Example Menu 25 1 1 IP Routing Policy Policy Set Name set1 Active Yes Criteria IP Protocol 6 Type of Service Don t Care Precedence Don t Car...

Page 245: ...Routing Policy Policy Set Name set2 Packet length 10 Active Yes Len Comp N A Criteria IP Protocol 6 end N A Type of Service Don t Care end N A Precedence Don t Care end N A Source end 21 addr start 0...

Page 246: ...up DHCP Server Client IP Pool Starting Address 192 168 1 33 Size of Client IP Pool 32 Primary DNS Server 0 0 0 0 Secondary DNS Server 0 0 0 0 Remote DHCP Server N A TCP IP Setup IP Address 192 168 1 1...

Page 247: ...up Schedule Schedule Set Name Set Name 1 _______________ 7 _______________ 2 _______________ 8 _______________ 3 _______________ 9 _______________ 4 _______________ 10 _______________ 5 ______________...

Page 248: ...AR to select Yes or No Choose Yes and press ENTER to activate the schedule set Start Date Enter the start date when you wish the set to take effect in year month date format Valid dates are from the p...

Page 249: ...eMe Nailed Up Connection No My Password Session Options Authen CHAP PAP Edit Filter Sets No Idle Timeout sec 0 Press ENTER to Confirm or ESC to Cancel You can apply up to four schedule sets separated...

Page 250: ...Prestige 861H Series User s Guide 249 Chapter 28 Call Scheduling...

Page 251: ...in troubleshooting 29 1 1 Accessing the Command Line Interface There are two ways to access the command line interface on the Prestige Telnet to the Prestige Connect a computer to the console port an...

Page 252: ...mand just displays the date if you don t specify the year month and day parameters sys date year month day Commands can be abbreviated to the smallest unique string that differentiates the command For...

Page 253: ...fields are READ ONLY and are meant to be used for diagnostic purposes 30 3 sys Commands These are the commonly used commands that belong to the sys system group of commands Table 75 sys Command Summar...

Page 254: ...rds and or sends alerts for system error logs mten 0 none 1 log Records the system maintenance logs upnp 0 none 1 log Records the UPnP logs urlblocked 0 none 1 log 2 alert 3 both Records and or sends...

Page 255: ...Sets the log e mail s subject sendmail save Save the log settings from the buffer syslog active 0 no 1 yes Enables disables syslog logging display Displays the syslog settings facility Local ID 1 7 Sp...

Page 256: ...t Restores the factory default configuration file atsh xmodemmode crc checksum Displays the mode that Xmodem uses socket Displays the system socket s ID type control block address PCB IP address and p...

Page 257: ...Sat Jan 1 00 33 27 2000 PP08 INFO LAN promiscuous mode 1 40 Sat Jan 1 00 33 27 2000 PINI WARN SNMP TRAP 1 warm start 41 Sat Jan 1 00 33 27 2000 PINI WARN Last errorlog repeat 1 Times 42 Sat Jan 1 00...

Page 258: ...Prestige 861H Series User s Guide 257 Chapter 30 System Commands...

Page 259: ...DESCRIPTION ether version Displays the Ethernet device type config Displays information about the configuration block driver cnt disp name Displays the Ethernet driver counters ioctl ch_name command a...

Page 260: ...broadcast addr mtu value dyn amic This command configures a network interface ping hostid Pings a remote host route status if Displays the routing table add dest_addr default bits gateway metric Adds...

Page 261: ...ettings to the previous configuration customize Use the customize commands to configure content filtering for trusted web sites forbidden web sites and keyword blocking display Displays the content fi...

Page 262: ...IGMP query interval for the specified interface iface join group Adds an interface to a group iface leave group Removes an interface from a group iface query Sends an IGMP query on the specified inte...

Page 263: ...4 P861H 31 3 2 ip route status Syntax ip route status This command displays the routing table An example is shown next Figure 173 ip route status P861H ip route status Dest FF Len Device Gateway Metr...

Page 264: ...f ff ff ff ff 43 NULL num of arp entries 1 P861H 31 4 WAN Commands These are the commonly used commands that belong to the sys system group of commands Table 80 WAN Command Summary MODULE COMMAND SUB...

Page 265: ...summaries of the commands available in the Prestige together with a brief description of each command See the related section in the User s Guide for more background information 32 2 1 vdsl Commands V...

Page 266: ...eds this rate cells may be dropped An example application is a T1 circuit rt VBR real time Variable Bit Rate also provides a fixed amount of bandwidth a PCR is specified but is only available when dat...

Page 267: ...ection Reed Solomon is necessary due to a less than ideal telephone line The bigger the delay the bigger the data block size allowing better error correction to be performed This may sometimes be refe...

Page 268: ...ignal to Noise Ratio speed and counter You can also clear the port counter The examples are shown next Figure 175 VDSL Port Speed Commands Example Link Down P861H vdsl port speed VDSL status DOWN P861...

Page 269: ...tream payload rate This displays the upstream transfer rate in fast channel mode When the VDSL link is up in fast channel mode the slow upstream payload rate displays zero Slow Upstream payload rate T...

Page 270: ...ifier qos This displays the ATM QoS type pcr This displays the maximum rate at which the sender can send cells cells per second cdvt This displays the acceptable range of the Cell Delay Variation cell...

Page 271: ...in different upstream and downstream speeds The following table summarizes frequency ranges for each VDSL mode supported by the Prestige Table 86 VDSL Mode and Frequency Ranges VDSL MODE BAND PLAN FR...

Page 272: ...0 band modifier 0x11 UPBO disable Max DS Delay 10 0 ms Max US Delay 10 0 ms P861H 32 6 8 VDSL Version Command Syntax vdsl version This command shows the VDSL chip firmware version An example is shown...

Page 273: ...adaptor is connected to the Prestige and plugged in to an appropriate power source Make sure that the Prestige and the power source are both turned on Turn the Prestige off and on If the error persis...

Page 274: ...itialize your link to the DSLAM For details refer to the Table 32 on page 128 web configurator or Table 65 on page 212 SMT I cannot get a WAN IP address from the ISP The ISP provides the WAN IP addres...

Page 275: ...ss If you have configured a secured client IP address your computer s IP address must match it Refer to the chapter on remote management for details Your computer s and the Prestige s IP addresses mus...

Page 276: ...pop ups check box in the Pop up Blocker section of the screen This disables any web pop up blockers you may have enabled Figure 183 Internet Options 3 Click Apply to save this setting 33 4 1 1 2 Enabl...

Page 277: ...oubleshooting 276 Figure 184 Internet Options 3 Type the IP address of your device the web page that you do not want to have blocked with the prefix http For example http 192 168 1 1 4 Click Add to mo...

Page 278: ...ngs 5 Click Close to return to the Privacy screen 6 Click Apply to save this setting 33 4 1 2 JavaScripts If pages of the web configurator do not display properly in Internet Explorer check that JavaS...

Page 279: ...gure 186 Internet Options 2 Click the Custom Level button 3 Scroll down to Scripting 4 Under Active scripting make sure that Enable is selected the default 5 Under Scripting of Java applets make sure...

Page 280: ...Prestige 861H Series User s Guide 279 Chapter 33 Troubleshooting Figure 187 Security Settings Java Scripting...

Page 281: ...ication Tables Table 91 Device Default IP Address 192 168 1 1 Default Subnet Mask 255 255 255 0 24 bits Default Password 1234 DHCP Pool 192 168 1 32 to 192 168 1 64 Dimensions 260 W x 161 D x 51 H mm...

Page 282: ...ased multiplexing Up to 8 PVCs Permanent Virtual Circuits I 610 F4 F5 OAM Other Protocol Support PPP Point to Point Protocol link layer protocol Transparent bridging for unsupported network layer prot...

Page 283: ...Prestige 861H Series User s Guide Appendix A Product Specifications 282 Static Routes 16 IP and 4 Bridge Other Features Dynamic DNS IP Alias IP Policy Routing VLAN ID 1 16 Table 92 Firmware continued...

Page 284: ...Prestige 861H Series User s Guide 283 Appendix A...

Page 285: ...3 1 requires the purchase of a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the app...

Page 286: ...orks If you need the adapter 1 In the Network window click Add 2 Select Adapter and then click Add 3 Select the manufacturer and model of your network adapter and then click OK If you need TCP IP 1 In...

Page 287: ...rk adapter s TCP IP entry and click Properties 2 Click the IP Address tab If your IP address is dynamic select Obtain an IP address automatically If you have a static IP address select Specify an IP a...

Page 288: ...roperties window 6 Click OK to close the Network window Insert the Windows CD if prompted 7 Turn on your Prestige and restart your computer when prompted Verifying Settings 1 Click Start and then Run...

Page 289: ...omputer s IP Address 288 Figure 191 Windows XP Start Menu 2 In the Control Panel double click Network Connections Network and Dial up Connections in Windows 2000 NT Figure 192 Windows XP Control Panel...

Page 290: ...ties 4 Select Internet Protocol TCP IP under the General tab in Win XP and then click Properties Figure 194 Windows XP Local Area Connection Properties 5 The Internet Protocol TCP IP Properties window...

Page 291: ...nfigure additional IP addresses In the IP Settings tab in IP addresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above...

Page 292: ...in Windows XP Click Obtain DNS server address automatically if you do not know your DNS server IP address es If you know your DNS server IP address es click Use the following DNS server addresses and...

Page 293: ...Network Connections window Network and Dial up Connections in Windows 2000 NT 11Turn on your Prestige and restart your computer if prompted Verifying Settings 1 Click Start All Programs Accessories an...

Page 294: ...ide 293 Appendix B Figure 198 Macintosh OS 8 9 Apple Menu 2 Select Ethernet built in from the Connect via list Figure 199 Macintosh OS 8 9 TCP IP 3 For dynamically assigned settings select Using DHCP...

Page 295: ...Click Save if prompted to save changes to your configuration 7 Turn on your Prestige and restart your computer if prompted Verifying Settings Check your TCP IP properties in the TCP IP Control Panel...

Page 296: ...igure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your Prestige in the Router address box 5 Click Apply Now and c...

Page 297: ...address the first two octets make up the network number and the two remaining octets make up the host ID Class C addresses begin starting from the left with 1 1 0 In a class C address the first three...

Page 298: ...twork number and which bits are part of the host ID using a logical AND operation A subnet mask has 32 is a 1 then the corresponding bit in the IP address is part of the network number If a bit in the...

Page 299: ...0 255 255 255 224 27 1110 0000 255 255 255 240 28 1111 0000 255 255 255 248 29 1111 1000 255 255 255 252 30 1111 1100 The first mask shown is the class C natural mask Normally if no mask is specified...

Page 300: ...s 192 168 1 128 IP Address Binary 11000000 10101000 00000001 10000000 Subnet Mask 255 255 255 128 Subnet Mask Binary 11111111 11111111 11111111 10000000 Subnet Address 192 168 1 128 Lowest Host ID 192...

Page 301: ...8 1 0 IP Address Binary 11000000 10101000 00000001 00000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 0 Lowest Host ID 192 168 1 1 Broadcast Address 192 168 1 63...

Page 302: ...110 The following table shows class C IP address last octet values for each subnet Table 104 Eight Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BROADCAST ADDRESS 1 0 1 30 31 2 32 33 62 63...

Page 303: ...for subnetting The following table is a summary for class B subnet planning Table 106 Class B Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 1 255 255 128 0 17 2 3276...

Page 304: ...Prestige 861H Series User s Guide 303 Appendix C...

Page 305: ...01 15 40 50 RAM Size 16384 Kbytes DRAM Post Testing 16384K OK FLASH Intel 16M RAS Version V3 50 WB 0 b3 08 08 2001 16 21 27 Press any key to enter debug mode within 3 seconds Enter ATHE to view all av...

Page 306: ...ATDUx y dump memory contents from address x for length y ATRBx display the 8 bit value of address x ATRWx display the 16 bit value of address x ATRLx display the 32 bit value of address x ATGO x run...

Page 307: ...LAN to the WAN and from the WAN to the LAN Allow or disallow the sending of NetBIOS packets from the LAN to the DMZ and from the DMZ to the LAN Allow or disallow the sending of NetBIOS packets from t...

Page 308: ...calls Disabled means that NetBIOS packets are blocked from initiating calls Disabled NetBIOS Filter Configuration Syntax sys filter netbios config type on off where type Identify which NetBIOS filter...

Page 309: ...es User s Guide Appendix E NetBIOS Filter Commands 308 sys filter netbios config 3 on This command blocks IPSec NetBIOS packets sys filter netbios config 4 off This command stops NetBIOS commands from...

Page 310: ...Prestige 861H Series User s Guide 309 Appendix E NetBIOS Filter Commands...

Page 311: ...l the POTS splitter at the point where the telephone line enters your residence as shown in the following figure 1 Connect the side labeled Phone to your telephone 2 Connect the side labeled Modem to...

Page 312: ...other cable from the double jack end of the Y Connector to the Prestige 4 Connect the phone side of the microfilter to your telephone as shown in the following figure Prestige With ISDN This section r...

Page 313: ...y in a manner similar to dial up services using PPP Benefits of PPPoE PPPoE offers the following benefits It provides you with a familiar dial up networking DUN user interface It lessens the burden on...

Page 314: ...s Concentrator and tunnels the PPP frames to the ISP The L2TP tunnel is capable of carrying multiple PPP sessions With PPPoE the VC Virtual Circuit is equivalent to the dial up connection and is betwe...

Page 315: ...Successful TELNET login Someone has logged on to the router via telnet TELNET login failed Someone has failed to log on to the router via telnet Successful FTP login Someone has logged on to the route...

Page 316: ...user that the router blocked access to a web site that the user requested Configuration Change PC 0x x Task ID 0x x The router is saving configuration changes Successful SSH login Someone has logged...

Page 317: ...t 3 minutes UDP idle timeout 3 minutes TCP connection three way handshaking timeout 270 seconds TCP FIN wait timeout 2 MSL Maximum Segment Lifetime set in the TCP header TCP idle established timeout s...

Page 318: ...n ICMP reply packet to the sender Table 114 CDR Logs LOG MESSAGE DESCRIPTION board d line d channel d call d s C01 Outgoing Call dev x ch x s The router received the setup requirements for a call call...

Page 319: ...t s The content filter server responded that the web site is in the blocked category list but it did not return the category type s s The content filter server responded that the web site is in the bl...

Page 320: ...tected a TCP port scan attack teardrop TCP The firewall detected a TCP teardrop attack teardrop UDP The firewall detected an UDP teardrop attack teardrop ICMP type d code d The firewall detected an IC...

Page 321: ...on failed during IKE phase 2 because the router and the peer s Local Remote Addresses don t match Verifying Local ID failed The connection failed during IKE phase 2 because the router and the peer s L...

Page 322: ...outer s Remote Address This information conflicted with static rule d thus the connection is not allowed Phase 1 ID type mismatch This router s Peer ID Type is different from the peer IPSec router s L...

Page 323: ...en the router and the peer Rule d Phase 2 encapsulation mismatch The listed rule s IKE phase 2 encapsulation did not match between the router and the peer Rule d Phase 2 pfs mismatch The listed rule s...

Page 324: ...a cert subject name The router received a certification authority certificate with subject name as recorded from the LDAP server whose IP address and port are recorded in the Source field Rcvd user ce...

Page 325: ...TION 1 Algorithm mismatch between the certificate and the search constraints 2 Key usage mismatch between the certificate and the search constraints 3 Certificate was not valid in the time interval 4...

Page 326: ...er who ended the session User logout because of no authentication response from user The router logged out a user from which there was no authentication response User logout because of idle timeout ex...

Page 327: ...r the Prestige D to D ZW DMZ to DMZ Prestige ACL set for packets traveling from the DMZ to the DM or the Prestige Prestige 861H Series User s Guide Appendix H Log Descriptions 326 Table 125 ICMP Notes...

Page 328: ...cters of the MAC address of the router s LAN port The cat is the same as the category in the router s logs The following table shows RFC 2408 ISAKMP payload types that the log displays Please refer to...

Page 329: ...ZyXEL Communications Corp ras Valid commands are sys exit ether aux ip ipsec bridge bm certificates cnm 8021x radius ras 3 Use sys logs category followed by a log category to display the parameters t...

Page 330: ...s logs clear command to erase all of the Prestige s logs Log Command Example This example shows how to set the Prestige to record the access logs and alerts and then view the results ras sys logs load...

Page 331: ...User s Guide Appendix I Loop Reach 330 Appendix I Loop Reach Testing Conditions Loop Simulator DLS 8100 Loop Wire 26AWG Note These are by no means guaranteed values These rates were achieved under la...

Page 332: ...3000 31424 3392 27008 2688 Table 129 Band Plan 998_138_8500 3B NO LOOP LENGTH FEET DOWNSTREAM LINE RATE KBPS UPSTREAM LINE RATE KBPS DOWNSTREAM PAYLOAD KBPS UPSTREAM PAYLOAD RATE KBPS 1 0 73856 13824...

Page 333: ...number always represents each character For example in ASCII code the capital letter A is always represented by the order number 65 which is easily represented using 0 s and 1 s in binary 1000001 The...

Page 334: ...Prestige 861H Series User s Guide 333 Appendix J...

Page 335: ...Budget Management 227 228 C Cables Connecting 5 Call filtering 188 Call filters Built in 188 User defined 188 Call Scheduling 246 Maximum Number of Schedule Sets 246 PPPoE 248 Precedence 246 Precedenc...

Page 336: ...2 155 ENET ENCAP 70 PPP over Ethernet 70 PPPoA 70 RFC 1483 71 Equal Value 6 Error Log 210 Ethernet 281 Europe 5 Exposure 5 F Failure 6 FCC 3 Compliance 3 Rules Part 15 3 FCC Rules 3 Federal Communicat...

Page 337: ...ySee IANA 64 IP Address 64 88 126 146 166 171 194 209 212 238 IP Address Assignment 71 ENET ENCAP 72 PPPoA or PPPoE 71 RFC 1483 71 IP Addressing 296 IP alias 37 148 IP Alias Setup 149 IP Classes 296 I...

Page 338: ...ing the web configurator 45 Network Address Translation 152 Network Address Translation NAT 37 172 Network Management 89 New 6 NNTP 89 North America 5 North America Contact Information 7 Norway Contac...

Page 339: ...ment and NAT 101 Remote Management Limitations 100 233 Remote Management Setup 232 Remote Node 154 207 Remote Node Profile 156 Remote Node Setup 154 Remote node 154 Remote Node Index Number 207 Removi...

Page 340: ...m Information 208 System Status 206 System Information 208 System Information Diagnosis 206 System Maintenance 206 208 215 218 223 226 227 230 System Management Terminal 136 System Status 207 System T...

Page 341: ...6 Warranty Information 7 Warranty Period 6 Water 5 Water Pipes 5 Web Configurator 44 45 46 web configurator screen summary 46 Web Site 7 Wet Basement 5 Workmanship 6 Worldwide Contact Information 7 Wr...

Reviews:

No comments