manualshive.com logo in svg

ZyXEL Communications Prestige 128Plus, User Manual, Page: 140 / 203

Share
Download
ZyXEL Communications Prestige 128Plus User Manual Download Page 140

Prestige

 

128+ ISDN Router

  

10-10  

L2TP

 

tunneling. In Figure 10-2 above, 

zyxel.com.tw

 is entered as the 

Endpoint Name 

for the LAC in order to set up a tunnel to ZyXEL-HQ. 

Outgoing Call 

Here, the LNS asks the Prestige LAC to place a call on its behalf.  If outgoing 
calls are allowed and there is an idle phone line, the LAC will place the call. In 
this scenario, the LAC acts as a proxy for the LNS.  

 

Summary of Contents for Prestige 128Plus

Page 1: ...Prestige 128 Plus User s Guide Version 2 20 ZyXEL TOTAL INTERNET ACCESS SOLUTION...

Page 2: ...permission of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of...

Page 3: ...3 May 1992 on the approximation of the laws of the member states relation to Electro Magnetic Compatibility EMC Directive 2 Council Directive 91 263 EEC of 29 April 1991 on the approximation of the l...

Page 4: ...ided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a...

Page 5: ...http www zyxel com for a listing E Mail Sales sales zyxel com sales zyxel com tw Web Site www zyxel com www zyxel com Phone 714 632 0882 8 00 to 5 00 PM PST 886 3 5783942 Ext 266 8 00 to 5 00 PM Taiwa...

Page 6: ......

Page 7: ...Features of Prestige 128 1 1 1 3 Applications for Prestige 128 1 5 Chapter 2 2 1 Hardware Installation Initial Setup 2 1 2 2 Prestige 128 Rear Panel and Connections 2 3 2 3 Additional Installation Req...

Page 8: ...3 12 3 6 Configuring Backup ISP Accounts 3 16 Chapter 4 4 1 Remote Node Configuration 4 1 4 1 Remote Node Setup 4 1 Chapter 5 5 1 Remote Node TCP IP Configuration 5 1 5 1 LAN to LAN Application 5 1 Ch...

Page 9: ...erver Application 8 3 8 3 Default Dial In Setup 8 4 8 4 Dial In Users Setup 8 8 8 5 Multiple Servers behind SUA 8 12 Chapter 9 9 1 Advanced Phone Services 9 1 9 1 Getting Started 9 1 9 2 Setting Up Su...

Page 10: ...11 7 11 4 Novell IPX Filter Rule 11 13 Chapter 12 12 1 SNMP Configuration 12 1 12 1 About SNMP 12 1 12 2 Configuring SNMP 12 1 Chapter 13 13 1 System Security 13 1 13 1 Changing the System Password 1...

Page 11: ...13 15 7 Command Interpreter Mode 15 16 15 8 Call Control 15 16 Chapter 16 16 1 Troubleshooting 16 1 16 1 Problems Starting Up the Prestige 16 1 16 2 Problems With the ISDN Line 16 2 16 3 Problems wit...

Page 12: ......

Page 13: ...2 9 Figure 2 6 Menu 23 System Security 2 10 Figure 2 7 Menu 23 1 System Security Change Password 2 12 Figure 2 8 Menu 1 General Setup 2 13 Figure 2 9 Menu 2 ISDN Setup 2 17 Figure 2 11 Loopback test 2...

Page 14: ...ute Setup 5 8 Figure 5 7Edit IP Static Route 5 8 Figure 6 1 NetWare Server 6 2 Figure 6 2 Prestige in an IPX Environment 6 3 Figure 6 3 Menu 3 3 Novell IPX Ethernet Setup 6 5 Figure 6 4 LAN to LAN App...

Page 15: ...Figure 10 7 Prestige in Proxy mode 10 9 Figure 11 1 Outgoing Packet Filtering Process 11 2 Figure 11 2 Menu 21 Filter Set Configuration 11 3 Figure 11 3 Menu 21 1 Filter Rules Summary 11 4 Figure 11...

Page 16: ...nce Syslog and Accounting 15 8 Figure 15 8 Menu 24 4 System Maintenance Diagnostic 15 10 Figure 15 9 Trace Display for a Successful Manual Call 15 12 Figure 15 10 Trace Display for a Failed Authentica...

Page 17: ...t Information 3 9 Table 3 4 Internet Access Setup Menu Fields 3 11 Table 3 5 Single User Account Menu Fields 3 15 Table 4 1 Remote Node Profile Menu Fields 4 3 Table 4 2 BTR v MTR for BOD 4 8 Table 4...

Page 18: ...lds 10 8 Table 11 1 Abbreviations Used in the Filter Rules Summary Menu 11 4 Table 11 2 Abbreviations Used in the Filter Rules Summary Menu continued 11 5 Table 11 3 Abbreviations Used If Filter Type...

Page 19: ...15 18 Table 15 6 Call History Fields 15 21 Table 16 1 Troubleshooting the Start Up of your Prestige 16 1 Table 16 2 Troubleshooting the ISDN Line 16 2 Table 16 3 Troubleshooting the Ethernet Connecti...

Page 20: ......

Page 21: ...or other protocols Your Prestige 128 is easy to install and to configure since you do not need to set any switches The Prestige Web Configurator PWC is a JAVA based utility designed that allows users...

Page 22: ...of all of the Prestige s features with the ISDN line 3 When the telephone company installs your ISDN line please be sure to obtain and write down the following information for future use ISDN switch...

Page 23: ...phone company and choose the appropriate option on the worksheet B Channel Usage Determine which connection is appropriate for your B channel and check the corresponding option on the worksheet If you...

Page 24: ...P Address into the worksheet as assigned by your network administrator Please note that every machine on an internet must have a unique IP address do not assign an arbitrary address to any machine If...

Page 25: ...to configure your Prestige for Internet access 3 Setting Up Advanced Applications Chapters 4 10 describes how to use your Prestige for more advanced applications such as LAN to LAN connectivity for T...

Page 26: ...Prestige 128 ISDN Router xxvi Preface For brevity s sake we will use e g as a shorthand for for instance and i e for that is or in other words throughout this manual...

Page 27: ...etworks 1 2 Features of Prestige 128 The following are the key features of the Prestige 128 L2TP Support The L2TP protocol allows users to build their own private tunnel through the Internet to enable...

Page 28: ...to share a single user account Incoming Call Support In addition to making outgoing calls the Prestige allows you to configure it as a remote access server for telecommuting employees Multiple Protoco...

Page 29: ...minal through telnet connection Web based PWC Prestige Web Configurator Logging and Tracing CDR Call Detail Record to help to analyze and manage the telephone bill Built in message logging and packet...

Page 30: ...atibility Your Prestige is compatible with remote access products from other manufacturers such as Ascend Cisco and 3Com Furthermore it supports Microsoft Windows 95 and Windows NT remote access capab...

Page 31: ...ses exclusively It is also compatible with access servers manufactured by major vendors such as Cisco and Ascend A typical Internet Access application is shown below Figure 1 1 Internet Access Applica...

Page 32: ...CP IP and Novell IPX routing as well as transparent bridging for other network layer protocols Your Prestige can also bundle multiple links in a single connection for greater bandwidth A typical LAN t...

Page 33: ...P Password Authentication Protocol or CHAP Challenge Handshake Authentication Protocol authentication can be used to control the access from the remote users You can also use callback for security and...

Page 34: ......

Page 35: ...LED indicates the Prestige is functioning properly A steady or an off TST indicates malfunction ISDN LNK The LNK Link LED is on when the Prestige is connected to an ISDN switch and the line has been s...

Page 36: ...Prestige 128 ISDN Router 2 2 Hardware Installation and Setup use Table 2 1 LED functions...

Page 37: ...stige 128 Rear Panel and Connections The figure below shows the rear panel of your Prestige 128MH and the connection diagram Figure 2 2 Prestige 128 Rear Panel and Connections This section outlines ho...

Page 38: ...5 connectors that look like a bigger telephone plug with eight pins AUI The AUI port the connector with 15 pins is used to connect the Prestige to a 10Base5 thicknet network If you have a 10Base2 netw...

Page 39: ...32 cable if the enclosed one is too short After the initial setup you can modify the configuration remotely through telnet connections See Chapter 14 Telnet Configuration and Capabilities for detailed...

Page 40: ...o press Enter to continue as shown Figure 2 3 Power On Display Step 2 Entering Password The login screen appears after you press Enter prompting you to enter the password as shown below For your first...

Page 41: ...d You can also use the Up Down arrow keys to move to the previous and the next field respectively Enter information Fill in or Press the Space bar to toggle You need to fill in two types of fields The...

Page 42: ...Prestige 128 ISDN Router 2 8 Hardware Installation and Setup...

Page 43: ...dpoint Setup Use this menu to configure L2TP support to route bridge protocols over the Internet 11 Remote Node Setup Use this menu to setup the Remote Node for LAN to LAN connection including Interne...

Page 44: ...tup SNMP related parameters 23 System Security Use this menu to setup security related parameters 24 System Maintenance This menu provides system status diagnostics firmware upload etc 99 Exit To exit...

Page 45: ...Prestige 128 ISDN Router Hardware Installation and Setup 2 11 Password...

Page 46: ...Enter Figure 2 7 Menu 23 1 System Security Change Password Step 3 Enter your new system password and press Enter Step 4 Re type your new system password for confirmation and press Enter Note that as y...

Page 47: ...er 1 in the Main Menu to open Menu 1 General Setup Step 2 The Menu 1 General Setup screen appears as shown below Fill in the required fields marked and turn on the individual protocols for your applic...

Page 48: ...ional Enter the name up to 8 characters of the person in charge of this Prestige JohnDoe Protocols Turn on or off routing for the individual protocols Press space bar to toggle Route IP Route IPX Brid...

Page 49: ...port e g the first number to data calls the second to A B adapter 1 and so on Or the telephone company may give you only one number but allow you to assign your own subaddresses to different ports e g...

Page 50: ...th then all analog calls including global calls are ignored 2 8 5 Dial Prefix to Access Outside Line Fill this field in if you need to dial a number a single digit in most cases to access an outside l...

Page 51: ...Dial Prefix to Access Outside Line Enter the prefix number if the Prestige is connected to an ISDN PABX This number should be no longer than 3 digits Otherwise leave this field blank PABX Number with...

Page 52: ...ling Line Indication Figure 2 10 ISDN Advanced Setup The Calling Line Indication or Caller ID governs whether the other party can see your number when you call If set to Presented CLIP the Prestige se...

Page 53: ...pen Menu 3 Figure 2 12 Menu 3 Ethernet Setup 2 9 1 General Ethernet Setup This menu allows you to specify the filter sets that you wish to apply to the Ethernet traffic You seldom need to filter Ether...

Page 54: ...urn to this menu to define the filter sets 2 10 Protocol Dependent Ethernet Setup Depending on the protocols for your applications you need to configure the respective Ethernet Setup as outlined below...

Page 55: ...e first step is to enable the IP routing in Menu 1 General Setup To edit Menu 1 enter 1 in the Main Menu to select General Setup and press Enter Set the Route IP field to Yes by pressing the space bar...

Page 56: ...0 ignoring the trailing zero and you must enable the Single User Account feature of the Prestige The Internet Assigned Number Authority IANA reserved this block of addresses specifically for private...

Page 57: ...s you have a unusual network topology Both RIP 2B and RIP 2M sends the routing data in RIP 2 format the difference being that RIP 2B uses subnet broadcasting while RIP 2M uses multicasting Multicastin...

Page 58: ...e DNS server addresses usually in the form of an information sheet when s he signs up If your ISP does give you the DNS server addresses enter them in the DNS Server fields in DHCP Setup Some ISP s ch...

Page 59: ...t Access 3 5 sure that you enter their IP addresses in the DHCP Setup menu This way the Prestige can pass the DNS servers to the workstations and the workstations can query the DNS server directly wit...

Page 60: ...p and press Enter The screen now displays Menu 3 2 TCP IP and DHCP Ethernet Setup as shown below Figure 3 2 Menu 3 2 TCP IP and DHCP Ethernet Setup Menu 3 2 TCP IP and DHCP Ethernet Setup DHCP Setup D...

Page 61: ...ver If set to None DHCP server will be disabled When DHCP is used the following four items need to be set None Server default Client IP Pool Starting Address This field specifies the first of the cont...

Page 62: ...Your Prestige will automatically calculate the subnet mask based on the IP address that you assign Unless you are implementing subnetting use the subnet mask computed by the Prestige 255 255 255 0 RI...

Page 63: ...Before you configure your Prestige for Internet access you need to collect your Internet account information from your ISP Use the table below to record your Internet Account Information Table 3 3 Int...

Page 64: ...ing table contains instructions on how to configure your Prestige for Internet access Figure 3 3 Menu 4 Internet Access Setup Menu 4 Internet Access Setup ISP s Name myISP Pri Phone 1234 Sec Phone My...

Page 65: ...This field specifies the type of connection between the Prestige and this remote node Select 64K or Leased Multilink The Prestige uses the PPP Multilink Protocol PPP MP to bundle multiple links in a s...

Page 66: ...as having multiple legal addresses but only pay for one IP address thus saving significantly on the subscription fees Check with your ISP before you enable this feature Figure 3 4 Single User Account...

Page 67: ...Prestige 128 ISDN Router Internet Access 3 13 the allocation of IP addresses when connecting branch offices to the corporate network...

Page 68: ...k Your Prestige accomplishes this address sharing by translating the internal LAN IP addresses to a single address that is globally unique on the Internet For more information on IP address translatio...

Page 69: ...Yes or No to disable SUA Then follow the instructions on how to configure the SUA fields Table 3 5 Single User Account Menu Fields Field Description Single User Account Select Yes to enable SUA IP Ad...

Page 70: ...llow these steps Step 1 Configure your primary ISP using Menu 4 as described earlier in this chapter Step 2 Enter Menu 11 then select an unused remote node Step 3 In Menu 11 1 choose a name for your b...

Page 71: ...m your primary ISP to a backup ISP Step 1 Enter Menu 11 and select your Primary ISP Step 2 In Menu 11 1 set the Active field to No Step 3 Enter Menu 11 again and select your Backup ISP Step 4 In Menu...

Page 72: ......

Page 73: ...rigger your Prestige to make a call automatically i e Dial On Demand In this chapter we will discuss the parameters that are protocol independent The protocol dependent configuration will be covered i...

Page 74: ...______ 11 ________ 12 ________ Enter Node to Edit Menu 11 1 Remote Node Profile Rem Node Name nodename Active Yes Call Direction Outgoing Tunneling Mode Direct Endpoint Index 1 Incoming Rem Login N A...

Page 75: ...ing of the name in Menu 11 Press space bar to toggle Yes No If this parameter is set to Both your Prestige can both place and receive calls to from this remote node Both If set to Incoming your Presti...

Page 76: ...fter receiving a call from this remote node If this option is enabled your Prestige will disconnect the initial call from this node and call it back at the Outgoing Primary Phone Number see below Enab...

Page 77: ...o select Yes and press Enter This will bring you to Menu 11 2 Remote Node PPP Options For more information on configuring PPP options see the section Editing PPP Options Press space bar to toggle Yes...

Page 78: ...his option only applies when the Prestige initiates the call Default 100 secs for the first remote node and 300 secs for the others Once you have completed filling in Menu 11 1 1 Remote Node Profile p...

Page 79: ...PPP MP to bundle multiple links in a single connection to boost the effective throughput between two nodes The bundle works best when the member links are of the same type of call and at approximatel...

Page 80: ...u want the Prestige to add or subtract bandwidth The range is 30 to 64 kbps kilobits per second The parameters are separated by a For example 30 60 means the add threshold is 30 kbps and subtract thre...

Page 81: ...4 3 Menu 11 2 Remote Node PPP Options The following table describes the Remote Node PPP Options Menu and contains instructions on how to configure the PPP options fields Menu 11 2 Remote Node PPP Opti...

Page 82: ...Prestige 128 ISDN Router 4 10 Remote Node Configuration...

Page 83: ...channel is used or 128 where two channels are used as soon as a packet triggers a call 64 128 Max Trans Rate Enter the maximum data transfer rate allowed for this remote node This parameter is in kilo...

Page 84: ...s separated by a comma e g 1 5 9 12 in each filter field The default is no filters Note that spaces are accepted in this field For more information on defining the filters see Chapter 9 The Prestige c...

Page 85: ...guration This chapter shows you how to configure the TCP IP parameters of a remote node A typical LAN to LAN application is to use your Prestige to connect a branch office to the headquarters as depic...

Page 86: ...Node TCP IP Configuration For the branch office you need to configure a remote node in order to dial out to the headquarters Additionally you may also need to define static routes if some services res...

Page 87: ...e protocols in the Route field The Route field should display Route IP or Route IP IPX Move the cursor to the Edit IP IPX Bridge field then press the space bar to toggle and set the value to Yes Press...

Page 88: ...e table below For more details on the IP Option fields refer to Chapter 3 Internet Access Application Table 5 1 TCP IP related fields in Remote Node Profile Field Description Option Route Make sure IP...

Page 89: ...unt Set this field to Yes to enable the Single User Account feature for your Prestige Use the space bar to toggle between Yes and No See Chapter 3 Internet Access Application for more information on t...

Page 90: ...ough other means This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly connected to a remote node Figure 5 4 Example of Static Routing Topolog...

Page 91: ...ute Setup as displayed below Figure 5 5 Menu 12 Static Route Setup From Menu 12 select one of the available IP static routes to open Menu 12 1 IP Static Route Setup as shown below Prestige Router 1 Ro...

Page 92: ...following table describes the fields for Menu 12 1 1 Edit IP Static Route Setup Menu 12 1 IP Static Route Setup 1 ________ 2 ________ 3 ________ 4 ________ 5 ________ 6 ________ 7 ________ 8 ________...

Page 93: ...ingle host use a subnet mask of 255 255 255 255 in the subnet mask field to force the network number to be identical to the host ID IP Subnet Mask Enter the subnet mask for this destination Follow the...

Page 94: ......

Page 95: ...0893A8CF The host number is a 48 bit quantity and usually is taken from the MAC Media Access Control address of the Ethernet hardware so you don t have to explicitly configure the node number An IPX c...

Page 96: ...rk even though they exist on one physical cable see the following diagram Although there are four frame types available on the Ethernet you should configure as few frame types as possible on your NetW...

Page 97: ...hat every network number must be unique for that entire internetwork either internal or external 6 2 Prestige in an IPX Environment There are two scenarios in which your Prestige is deployed depending...

Page 98: ...ou only have NetWare clients on your network then you must configure the Prestige as a seed router and set up unique network numbers for each frame type enabled using the Ethernet Setup Menu 6 3 IPX S...

Page 99: ...uter Determine if your Prestige is to act as a seed router Yes No Frame Type Enable Disable the individual frame type Remember to enable only the ones that are actually used on your network 802 2 802...

Page 100: ...plication is to use your Prestige to call from a branch office to the corporate headquarters to enable the stations in the branch office to access the NetWare servers at the headquarters as depicted i...

Page 101: ...mong the protocols in the Route field The Route field should display Route IPX or Route IP IPX Step 2 Move the cursor to the Edit IP IPX Bridge field then press the space bar to select Yes and press E...

Page 102: ...through to reach the remote node 1 default Tick Count This field indicates the time ticks required to reach the remote node 2 default W D Spoofing min This field is for the Prestige on the server sid...

Page 103: ...that remote node is established From Menu 12 select two then select one of the IPX Static Routes to open Menu 12 2 1 Edit IPX Static Route as shown below Figure 6 6 Menu 12 2 Edit IPX Static Route Men...

Page 104: ...node on which the server resides If you are using a Novell IPX implementation this value is 000000000001 Socket This field contains the socket number on which the server will receive service requests...

Page 105: ...SNA from one network to another The caveat is that compared to routing bridging generates more traffic for the same network layer protocol and it also demands more CPU cycles and memory For efficiency...

Page 106: ...erver When there are only IPX servers on the LAN No RIP or SAP packets will trigger calls In addition during the time when the line is down your Prestige will reply to watchdog messages from the serve...

Page 107: ...Move the cursor to the Edit IP IPX Bridge field then press the space bar to select Yes and press Enter to open Menu 11 3 Network Layer Options Figure 7 2 Menu 11 3 Remote Node Bridging Options Menu 1...

Page 108: ...t to Yes any broadcasts coming from the LAN will trigger your Prestige to make a call to this remote node If it is set to No your Prestige will not make the outgoing call Ethernet Addr Timeout min In...

Page 109: ...s in Menu 12 3 1 by pressing 3 in menu 12 and then selecting one of the bridge static routes as shown below Figure 7 3 Menu 12 3 Bridge Static Route Setup Figure 7 4 Menu 12 3 1 Edit Bridge Static Rou...

Page 110: ...destination machine that you wish to bridge the packets to IP Address If available enter the IP address of the destination machine that you wish to bridge the packets to Gateway Node Enter the number...

Page 111: ...ode All remote dial in users share one common set of parameters as defined in the Default Dial In Setup Menu 13 Each remote node can have its own set of parameters such as Bandwidth On Demand Protocol...

Page 112: ...out capabilities e g a Windows PC or a Macintosh For telecommuters to call in to your Prestige you need to configure a dial in user profile for each telecommuter Additionally you need to configure the...

Page 113: ...be set up as a LAN to LAN server you need to configure the Default Dial In Setup to set the operational parameters for incoming calls Additionally you must create a remote node for the router on the r...

Page 114: ...independent fields in this menu For the protocol dependent fields refer to the appropriate chapters The table below describes and contains information on how to configure each parameter in Menu 13 Def...

Page 115: ...setting authentication to none is strongly discouraged Options for this field are CHAP PAP Your Prestige will try CHAP first but PAP will be used if CHAP is not available CHAP Use CHAP only PAP Use PA...

Page 116: ...allback time for all the remote dial in users The default for this field is 0 for no budget control Default 0 Period hr This field sets the time interval to reset the above callback budget control IP...

Page 117: ...pplicable only if you selected Yes in the Dial In IPX Net Num Supplied By IPX Pool field The IPX pool contains contiguous IPX network numbers and this field specifies the first one in the pool IPX Cou...

Page 118: ...each filter field The default is no filters Spaces are accepted in this field For more information on defining the filters see Chapter 9 Figure 8 4 Default Dial in Filter 8 4 Dial In Users Setup The...

Page 119: ...t one of the users by number this will bring you to Menu 14 1 Edit Dial in User as shown below Figure 8 6 Edit Dial in User Menu 14 1 Edit Dial in User User Name Active Yes Password Callback No Phone...

Page 120: ...back to the user if requested In such a case your Prestige will disconnect the initial call from this user and dial back to the specified callback number see below No The default is no callback Option...

Page 121: ...filling in Menu 14 1 Edit Dial in User press Enter at the message Press ENTER to Confirm to save your configuration or press Esc at any time to cancel 8 4 1 CLID Authentication CLID Calling Line IDent...

Page 122: ...ease note that a server can support more than one service e g a server can provide both FTP and DNS service while another provides only web service Also since you need to specify the IP address of a s...

Page 123: ...Press ENTER at the Press ENTER to confirm prompt to save your configuration after you define all the servers or press ESC at any time to cancel Figure 8 7 Multiple Server Configuration The most often...

Page 124: ...Server Configuration Services Port Number FTP File Transfer Protocol 21 Telnet 23 SMTP Simple Mail Transfer Protocol 25 DNS Domain Name System 53 HTTP Hyper Text Transfer protocol or WWW Web 80 PPTP P...

Page 125: ...rvices Additional Call Offering ACO is required on your ISDN line in order to use the Call Waiting feature Flexible Calling is required on your ISDN line in order to use the Three Way Calling or Call...

Page 126: ...it On newer telephones there should be a flash key button that generates the signal electronically If the flash key is not available you can tap press and immediately release the hook by hand to achie...

Page 127: ...et established a connection 9 5 Three way calling The Three Way Call feature allows you to add a third party to an existing call This service must be subscribed from your telephone company 9 5 1 How T...

Page 128: ...subscribed from your telephone company 9 6 1 How To Use Call Transfer Transferring an active call to a third party Once you have an active call Caller A press the flash key to put Caller A on hold and...

Page 129: ...ivate call forwarding The first is exactly the same as on an analog line i e you pick up the handset and dial the access code assigned by your telephone company and the number that you want the calls...

Page 130: ...Prestige 128 ISDN Router 9 6 Advanced Phone Services 20 Deactivate CFB 21 Deactivate CFU 22 Deactivate CFNR Either method should work fine and you can use whichever one you are most comfortable with...

Page 131: ...2 protocol that frames data so it can be sent across a dial up connection The protocol allows users to run TCP IP software such as Web browsers as if they were directly connected to the Internet In f...

Page 132: ...nnection is complete it s as if he does This enables outsourcing of dial up services to the ISP to support remote users Because PPP framing is used remote users can access corporate sites using a vari...

Page 133: ...a logical device Please refer to the diagram above 10 3 1 LNS L2TP Network Server The LNS terminates a PPP connection it handles the server side of the L2TP protocol Since L2TP runs on top of IP the L...

Page 134: ...th a specific endpoint i e the corporate gateway 3 The ISP establishes a tunnel by contacting the corporate gateway 4 The authentication information that was initially collected from the remote user i...

Page 135: ...nd the LAC refer to this table to find the tunnel endpoint Please note that a receiving L2TP endpoint must have a fixed globally unique IP address while an initiating endpoint may have a dynamic IP ad...

Page 136: ...nnel is created between the Prestige LNS and the LAC The user name and password in Win 95 s Dial up Networking must be defined in menu 14 1 the profile for this Dial in User so that PPP authentication...

Page 137: ...estiges directly to implement L2TP as illustrated Figure 10 4 Prestiges in Direct mode The LAC home or branch office Prestige can log in to the ISP with the SUA feature enabled and when traffic needs...

Page 138: ...emote nodes Four tunnel endpoint profiles can be defined in Menu 10 Figure 10 5 Menu 10 Tunnel Endpoint Setup Selecting one endpoint profile takes you to the following menu Figure 10 6 Menu 10 1 Tunne...

Page 139: ...for the LNS The menu 10 1 entries are the same as described above Figure 10 7 Prestige in Proxy mode 10 4 3 Prestige as LAC Endpoint Name in Menu 10 1 is the key setting for the LAC for both incoming...

Page 140: ...the Endpoint Name for the LAC in order to set up a tunnel to ZyXEL HQ Outgoing Call Here the LNS asks the Prestige LAC to place a call on its behalf If outgoing calls are allowed and there is an idle...

Page 141: ...ive to a port Call filters are used to determine if a packet should be allowed to trigger a call Outgoing packets must pass through the data filters before they encounter the call filters Call filters...

Page 142: ...llows you to configure up to twelve filter sets with six rules in each set for a total of 72 filter rules in the system You can apply up to four filter sets to a particular port to block multiple type...

Page 143: ...Enter a descriptive name or comment in the Edit Comments field and press Enter Step 4 Press Enter at the message Press ENTER to confirm to open Menu 21 1 Filter Rules Summary Menu 21 Filter Set Config...

Page 144: ...11 1 Abbreviations Used in the Filter Rules Summary Menu Abbreviations Description Display Refers to the filter rule number 1 6 A Refers to Active Y means the filter rule is active N means the filter...

Page 145: ...hed F means to forward the packet D means to drop the packet N means check the next rule n Refers to Action Not Matched F means to forward the packet D means to drop the packet N means check the next...

Page 146: ...Filter Type Is IPX Abbreviation Description PT IPX Packet Type SS Source Socket DS Destination Socket If the filter type is GEN generic the following abbreviations listed in the following table will...

Page 147: ...s the protocol filters to the native IP address and port number before NAT SUA for outgoing packets and after NAT SUA for incoming packets On the other hand the generic or device filters are applied t...

Page 148: ...1 Filter Type TCP IP Filter Rule Active No IP Protocol 0 IP Source Route No Destination IP Addr IP Mask Port 0 Port Comp None Source IP Addr IP Mask Port 0 Port Comp None TCP Estab N A More No Log Non...

Page 149: ...ination IP Mask Enter the IP subnet mask to apply to the Destination IP Addr Subnet mask Destination Port Enter the destination port of the packets that you wish to filter The range of this field is 0...

Page 150: ...on from the following None No packets will be logged Action Matched Only packets that match the rule parameters will be logged Action Not Matched Only packets that do not match the rule parameters wil...

Page 151: ...wise ANDing to the data portion before comparing the result against the Value to determine a match The Mask and Value are specified in hexadecimal numbers Note that it takes two hexadecimal digits to...

Page 152: ...fault 0 Length Enter the byte count of the data portion in the packet that you wish to compare The range for this field is 0 to 8 Default 0 Mask Enter the mask in Hexadecimal to apply to the data port...

Page 153: ...pe field and press Enter to open Menu 21 1 3 IPX Filter Rule as shown in the figure below Figure 11 6 Menu 21 1 3 IPX Filter Rule Menu 21 1 3 IPX Filter Rule Filter 1 1 Filter Type IPX Filter Rule Act...

Page 154: ...tination Source Node Enter in the destination source node number 6 byte in hexadecimal of the packet you wish to filter Destination Source Socket Enter the destination source socket number 2 byte in h...

Page 155: ...ation 11 15 Once you have completed filling in Menu 21 1 3 IPX Filter Rule press Enter at the message Press Enter to Confirm to save your configuration or press Esc to cancel This data will now be dis...

Page 156: ......

Page 157: ...mind that SNMP is only available if TCP IP is configured on your Prestige 12 2 Configuring SNMP To configure SNMP select option SNMP Configuration from the Main Menu to open Menu 22 SNMP Configuration...

Page 158: ...anagement station public Trusted Host If you enter a trusted host your Prestige will only respond to SNMP messages from this address If you leave the field blank default your Prestige will respond to...

Page 159: ...onfigure an external authentication server 13 1 Changing the System Password To change the system password following steps below Step 1 Select option System Security in the Main Menu to open Menu 23 S...

Page 160: ...nter Figure 13 2 Menu 23 1 System Security Change Password Step 4 Enter your new system password and press Enter Step 5 Re type your new system password for confirmation and press Enter As you enter t...

Page 161: ...self You can obtain the RADIUS server software along with documentation at http www livingston com Tech FTP pub le radius shtml or ftp ftp livingston com pub le radius Follow the included instructions...

Page 162: ...Prestige 128 ISDN Router 13 4 System Security These changes add the support for CLID authentication as described in the section below...

Page 163: ...23 2 System Security External Server shown below The radius authentication port has changed from 1645 to 1812 It is necessary to reboot your Prestige after changing the RADIUS port number before the...

Page 164: ...rver At present only RADIUS is supported Server Address The IP address of the RADIUS server Port The IP port number used by the authentication server The default is port 1645 1645 Key A password used...

Page 165: ...record in the users file where the user name the first field is the telephone number and the password the second field is always Zyxel CLID case sensitive The regular user name is put in a User Name...

Page 166: ......

Page 167: ...g it is through the console port Once your Prestige is configured you can use telnet to configure it remotely as shown below Figure 14 1 Telnet Configuration on a TCP IP Network If your Prestige is co...

Page 168: ...onnect to the Prestige directly 14 3 Telnet Capabilities 14 3 1 Single Administrator To prevent confusion and discrepancy on the configuration your Prestige only allows one administrator to log in at...

Page 169: ...es for the system software This chapter describes how to use these tools in detail Select menu 24 in the main menu to open Menu 24 System Maintenance as shown below Figure 15 1 Menu 24 System Maintena...

Page 170: ...4 1 System Maintenance Status Entering 1 disconnects the current B1 channel call 2 disconnects the current B2 channel call 3 resets the counters 4 drops both B1 and B2 and ESC takes you back to the pr...

Page 171: ...number of transmitted packets on this channel RXPkt The number of received packets on this channel Error The number of error packets on this channel CLU Current Line Utilization percentage of current...

Page 172: ...riggering packets from the LAN the first of an ICMP ping packet Type IP and the second a SAP broadcast packet Type Raw With this information you can determine the workstation from the source IP addres...

Page 173: ...firmware Country Code refers to the one byte country code value in decimal notation Ethernet Address refers to the Ethernet MAC Media Access Control of your Prestige IP Address This is the IP address...

Page 174: ...facilities in the Prestige The first is the error logs and trace records that are stored locally The second is the UNIX syslog facility for message logging 15 2 1 Viewing Error Log The first place you...

Page 175: ...system After the Prestige finishes displaying you will have the option to clear the error log Examples of typical error and information messages are presented in the figure below Figure 15 6 Examples...

Page 176: ...described in the table below to activate syslog Table 15 3 System Maintenance Menu Syslog Parameters Parameter Description Active Use the space bar to turn on or off syslog Syslog IP Address Enter th...

Page 177: ...w 1 Call Information Messages line 1 channel 1 call 41 C01 Incoming Call 40001 line 1 channel 1 call 41 C01 ANSWER Connected 49K 40001 line 1 channel 1 call 41 C01 Incoming Call Call Terminated 2 Erro...

Page 178: ...nce Diagnostic Follow the procedure below to get to Diagnostic Step 1 From the Main Menu select option 24 to open Menu 24 System Maintenance Step 2 From this menu select option 4 Diagnostic This will...

Page 179: ...for you to place a call to a remote node manually This tests the connectivity to that remote node When you use this command you see traces displayed on the screen showing what is happening during the...

Page 180: ...r node 1 Hit any key to continue Dialing chan 2 phone last 9 digit 23456 Call CONNECT speed 64000 chan 2 prot 1 LCP up CHAP send response Login to remote failed Check name passwd Receive Terminal REQ...

Page 181: ...rom your workstation to another machine 15 5 Restore Configuration Selecting option 6 from Menu 24 System Maintenance to restore the configuration from your workstation to the Prestige Again you must...

Page 182: ...give the baud rate following the colon in the list of numbers that follows e g ATBA3 will give a baud of 9 6 kbps ATSE displays the seed that is used to generate a password to turn on the debug flag...

Page 183: ...Prestige 128 ISDN Router System Maintenance 15 15 Figure 15 12 Boot module commands...

Page 184: ...ol parameters blacklist budget management and call history Call control parameters allows you to set a dial out time limit the number of times a number should be called before it is added to the black...

Page 185: ...estige will dial that number again Call history chronicles preceding incoming and outgoing calls To enter the call control menu select option 9 Call Control in Menu 24 to go to Menu 24 9 System Mainte...

Page 186: ...sy or no answer telephone number is retried before it is put on the blacklist The default is 0 and the blacklist control is not enabled Retry Interval sec Elapsed time after a call fails before anothe...

Page 187: ...System Maintenance 15 19 Menu 24 9 2 shows the list of telephone numbers that have been blacklisted Figure 15 16 Menu 24 9 2 Blacklist Menu 24 9 2 Blacklist Phone Number 1 2 3 4 5 6 7 8 9 10 11 12 13...

Page 188: ...callback will be blocked After each period the total budget is reset The default for the total budget is 0 minutes and the period is 0 hours meaning no budget control You can reset the accumulated co...

Page 189: ...18 Call History Table 15 6 Call History Fields Field Description Phone Number This is the telephone number of past incoming and outgoing calls Dir This shows whether the call was incoming or outgoing...

Page 190: ...of calls made to or received from that telephone number Max This is the length of time of the longest telephone call Min This is the length of time of the shortest telephone call Total This is the tot...

Page 191: ...Problem Corrective Action None of the LED s are on when you power on the Prestige Check the connection between the AC adapter and the Prestige If the error persists you may have a hardware problem In...

Page 192: ...to save the parameters entered in menu 2 but receive the message Save successful but Failed to initialize ISDN Press ESC to exit If the code is 3 this indicates a general failure Verify the provisioni...

Page 193: ...s Connecting to a Remote Node or ISP Table 16 4 Troubleshooting a Connection to a Remote Node or ISP Problem Corrective Action Check Menu 24 1 to verify the line status If it indicates down then refer...

Page 194: ...address is supplied correctly in Menu 13 Check that either the remote dial in user is supplying a valid IP address or that the Prestige is assigning a valid address from the IP pool If the remote dial...

Page 195: ...l Usage Switch Switch Switch Unused North America ISDN Switches AT T Northern Telecom 1st Phone Number 1st SPID Number Analog Call Phone1 Phone2 DOVBS 2nd Phone Number 2nd SPID Number Analog Call Phon...

Page 196: ...T bus Incoming Number Matching MSN CDSA Don t Care Analog Call Routing A B 1 A B 2 Ignore Global Analog Call Accept Ignore Ethernet Setup Information Ethernet Interface UTP AUI IP Address ________ __...

Page 197: ...Unit Data Service Unit DCE Data Communications Equipment DHCP Dynamic Host Configuration Protocol DNS Domain Name System DTE Data Terminal Equipment IANA Internet Assigned Number Authority IP Internet...

Page 198: ...User Service RIP Routing Information Protocol SAP IPX Service Advertising Protocol SNAP Sub Network Access Protocol SNMP Simple Network Management Protocol SUA Single User Account TA ISDN Terminal Ad...

Page 199: ...bridge See bridging Bridge Ethernet Setup 7 1 bridge static route 7 5 bridging 4 4 7 1 BTR See Base Transmission Rate budget 8 6 15 17 call control 15 14 call direction 4 3 callback 4 4 8 6 8 10 8 11...

Page 200: ...IP Pool 3 3 IP static route 5 5 IP Subnet Mask xxiv IPX 4 5 6 1 IPX Ethernet Setup 6 6 IPX filter rule 11 13 IPX LAN to LAN 6 7 IPX network number 6 1 6 2 8 7 IPX node number 6 1 IPX Spoofing 6 5 IPX...

Page 201: ...4 4 RS 232 15 12 SAP 6 9 seed router 6 6 server 6 11 Single User Account 3 10 See SUA SMT 2 7 SNAP 6 1 SNMP 12 1 socket 6 11 software update 15 12 SUA 1 5 3 11 5 4 subnet mask 3 2 3 7 5 4 5 7 switch...

Page 202: ......

Page 203: ...Prestige 128 ISDN Router Index C 1...

Reviews:

No comments