manualshive.com logo in svg

ZyXEL Communications Prestige 641, User Manual, Page: 83 / 117

Share
Download
ZyXEL Communications Prestige 641 User Manual Download Page 83

                                    Prestige 641 ADSL Internet Access Router

Filter Configuration

8-5

and port number before NAT/SUA for outgoing packets and after NAT/SUA for incoming packets.  On the
other hand, the generic, or device filters are applied to the raw packets that appear on the wire. They are
applied at the point when the Prestige is receiving and sending the packets; i.e. the interface. The interface
can be an Ethernet, or any other hardware port. The following diagram illustrates this.

Figure 8-3 Protocol and Device Filter Sets

8.4.1 TCP/IP Filter Rule

This section shows you how to configure a TCP/IP filter rule.  TCP/IP rules allow you to base the rule on
the fields in the IP and the upper layer protocol, e.g., UDP and TCP, headers.

To configure a TCP/IP rules, select TCP/IP Filter Rule from the Filter Type field and press Enter to open
Menu 21.1.1 - TCP/IP Filter Rule, as shown next.

Incoming

Device

Filters

S

U

A

Incoming

Protocol

Filters

Route

Outgoing

Protocol

Filters

S

U

A

Outgoing

Device

Filters

Interface

Summary of Contents for Prestige 641

Page 1: ...ZyXEL TOTAL INTERNET ACCESS SOLUTION Prestige 641 ADSL Internet Access Router User s Guide Version 2 40 June 1999...

Page 2: ...on of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any pro...

Page 3: ...in accordance with the instructions may cause harmful interference to radio communications If this equipment does cause harmful interference to radio television reception which can be determined by tu...

Page 4: ...as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitne...

Page 5: ...support zyxel co at Europe support zyxel com support zyxel dk E Mail Sales sales zyxel com tw sales zyxel com sales zyxel dk Web Sites www zyxel com www zyxel com www zyxel dk Telephone 886 3 578 394...

Page 6: ...1 1 1 2 Features of the Prestige 641 1 1 1 3 Applications for the Prestige 641 1 3 1 3 1 Internet Access 1 3 1 3 2 LAN to LAN Application 1 3 Chapter 2 2 1 Hardware Installation Initial Setup 2 1 2 1...

Page 7: ...sk 3 1 3 2 2 RIP Setup 3 2 3 2 3 DHCP Configuration 3 2 3 3 Route IP Setup 3 3 3 4 TCP IP Ethernet Setup and DHCP 3 4 3 5 LANs WANs 3 5 3 5 1 LANs WANs and the Prestige 3 5 3 6 VPI VCI 3 6 3 7 Multipl...

Page 8: ...5 1 5 1 2 Static Route Setup 5 5 Chapter 6 6 1 IPX Configuration 6 1 6 1 IPX Network Environment 6 1 6 1 1 Network and Node Number 6 1 6 1 2 Frame Types 6 1 6 1 3 External Network Number 6 2 6 1 4 In...

Page 9: ...IPX Filter Rule 8 10 8 5 Applying a Filter 8 12 8 5 1 Ethernet traffic 8 12 8 5 2 Remote Node Filters 8 12 Chapter 9 9 1 SNMP Configuration 9 1 9 1 About SNMP 9 1 9 2 Configuring SNMP 9 1 Chapter 10 1...

Page 10: ...dule commands 10 12 Chapter 11 11 1 Troubleshooting 11 1 Problems Starting Up the Prestige 11 1 11 2 Problems With the WAN Interface 11 2 11 3 Problems with the LAN Interface 11 2 11 4 Problems Connec...

Page 11: ...________________________________________2 10 Figure 2 11 Menu 3 Ethernet Setup____________________________________________________2 11 Figure 2 12 Menu 3 1 General Ethernet Setup _____________________...

Page 12: ...______________________________________7 2 Figure 7 2 Menu 11 3 Remote Node Bridging Options ______________________________________7 3 Figure 7 3 Menu 12 3 Bridge Static Route Setup ___________________...

Page 13: ...24 4 System Maintenance Diagnostic___________________________________10 8 Figure 10 9 Menu 24 7 System Maintenance Upload Firmware ____________________________10 10 Figure 10 10 Menu 24 7 1 Uploading...

Page 14: ..._________________________4 5 Table 5 1 TCP IP related fields in Remote Node Profile ______________________________________5 3 Table 5 2 TCP IP Remote Node Configuration _______________________________...

Page 15: ...__________________________10 4 Table 10 3 System Maintenance Menu Syslog Parameters____________________________________10 7 Table 10 4 System Maintenance Menu Diagnostic ______________________________...

Page 16: ...ther half duplex or full duplex mode depending on your Ethernet network Your Prestige is easy to install and to configure All functions of the Prestige are software configurable via the SMT System Man...

Page 17: ...estige to operate on your network The Internet Chapter 3 This shows you how to configure your Prestige for Internet access Advanced Applications Chapters 4 7 Describes how to use your Prestige for mor...

Page 18: ...than the upstream capacity Asymmetrical services ADSL are suitable for Internet users because more information is usually downloaded than uploaded For example a simple button click in a web browser ca...

Page 19: ...asy installation Physically its compact size and lightweight make it easy to position anywhere in your busy office l High Speed Internet Access The P640 ADSL router can support downstream transmission...

Page 20: ...RFC 1483 encapsulation over ATM MAC encapsulated routing as well as PPP over Ethernet RFC 2516 l NAT SUA for single IP address Internet Access The Prestige s SUA Single User Account feature allows mu...

Page 21: ...or Frame Relay Think of it as the equivalent of a modem rack for ADSL A typical Internet Access application is shown below Figure 1 1 Internet Access Application Internet Single User Account For a SOH...

Page 22: ...Prestige 641 ADSL Internet Access Router 1 4 Getting to know your Prestige Figure 1 2 LAN to LAN Application...

Page 23: ...tioning properly while an off SYS LED indicates the system is not ready or a malfunction The system is rebooting when the SYS LED is blinking LAN 10M A steady green light indicates a 10Mb Ethernet con...

Page 24: ...hernet cable white tag from the hub to the NIC on the workstation Step 3 Connecting the Power Adapterto your Prestige Connect the power adapter to the port labeled POWER on the rear panel of your Pres...

Page 25: ...tween routers You should not stack more than 4 routers for maximum stability 2 5 Telephone Microfilters Telephone voice transmissions take place in the lower frequency range 0 4KHz while ADSL transmis...

Page 26: ...e the Ethernet port and the power port to the appropriate devices or lines You can now apply power to the Prestige by turning the switch on Step 1 Initial Screen When you power on your Prestige it per...

Page 27: ...d the screen displays a X for each character you type Please note that if there is no activity for longer than 5 minutes after you log in your Prestige will automatically log you out and will display...

Page 28: ...o to a submenu Move the cursor Enter or Up Down arrow keys Within a menu press Enter to move to the next field You can also use the Up Down arrow keys to move to the previous and the next field respec...

Page 29: ...set up static routes 15 SUA Server Setup Use this menu to specify inside servers when SUA is enabled 21 Filter Set Configuration Use this menu to set up filters to provide security etc 22 SNMP Config...

Page 30: ...he default configuration file you will lose all configurations that you had before and the speed of the console port will be reset to the default of 9600 bps with 8 data bit no parity and 1 stop bit 8...

Page 31: ...ep 1 Enter 1 in the Main Menu to open Menu 1 General Setup Step 2 The Menu 1 General Setup screen appears as shown below Fill in the required fields marked and turn on the individual protocols for you...

Page 32: ...eld to Yes to enable IP routing You must enable IP routing for Internet access Yes No Route IPX Bridge Set this field Yes to enable IPX routing Turn on off bridging for protocols not supported e g SNA...

Page 33: ...return to this menu to define the filter sets 2 12 Protocol Dependent Ethernet Setup Depending on the protocols for your applications you need to configure the respective Ethernet Setup as outlined be...

Page 34: ......

Page 35: ...situation If the ISP or your network administrator assigns you a block of registered IP addresses follow their instructions in selecting the IP addresses and the subnet mask If the ISP did not explic...

Page 36: ...casting can reduce the load on non router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets However if one router uses multicasting then...

Page 37: ...left as 0 0 0 0 the Prestige tells the DHCP clients that it itself is the DNS server When a workstation sends a DNS query to the Prestige the Prestige forwards the query to the real DNS server learned...

Page 38: ...the remote server and the clients When DHCP is used the following items need to be set None Server default Relay Client IP Pool Starting Address This field specifies the first of the contiguous addres...

Page 39: ...utside connection to another network or the Internet 3 5 1 LANs WANs and the Prestige The actual physical connection determines whether the Prestige ports are LAN or WAN ports There are two separate I...

Page 40: ...Enter at the prompt Press ENTER to Confirm to save your configuration or press Esc at any time to cancel 3 6 VPI VCI Be sure to use the correct Virtual Path Identifier VPI and Virtual Channel Identifi...

Page 41: ...ts to a xDSL Access Concentrator where the PPP session terminates One PVC can support any number of PPP sessions from your LAN PPPoE provides access control and billing functionality in a manner simil...

Page 42: ...al Path Identifier VCI Virtual Channel Identifier ISP Information IP Address of the ISP s Gateway Optional Login Name Password for ISP authentication Type of Multiplexing Type of Encapsulation Etherne...

Page 43: ...y gives you 10 VCI Enter the Virtual Channel Identifier VCI that the telephone company gives you 10 My Login Enter the login name that your ISP gives you If you are using PPPoE encapsulation then this...

Page 44: ...point if all your settings are correct your Prestige should connect automatically to the Internet If the connection fails note the error message that you receive on the screen and take the appropriate...

Page 45: ...translating the internal LAN IP addresses to a single address that is globally unique on the Internet For more information on IP address translation refer to RFC 1631 The IP Network Address Translator...

Page 46: ...t Access Setup as shown below Figure 3 6 Menu 4 Internet Access Setup for Single User Account To enable the SUA feature in Menu 4 move the cursor to the Single User Account field and select Yes or No...

Page 47: ...provide both FTP and DNS service while another provides only web service Also since you need to specify the IP address of a server in the Prestige a server must have a fixed IP address and not be a DH...

Page 48: ...r FTP File Transfer Protocol 21 Telnet 23 SMTP Simple Mail Transfer Protocol 25 DNS Domain Name System 53 HTTP Hyper Text Transfer protocol or WWW Web 80 PPTP Point to Point Tunneling Protocol 1723 Me...

Page 49: ...teps Step 1 From the Main Menu select menu option 1 Remote Node Setup Step 2 When Menu 11 appears as shown below enter the number of the remote node that you wish to configure Figure 4 1 Menu 11 Remot...

Page 50: ...identifying headers that LLC based multiplexing uses is unneeded The PPP protocol already contains this information Scene 2 One VC One Protocol IP Select RFC 1483 encapsulation with VC based multiplex...

Page 51: ...ENET ENCAP encapsulation you must specify the Ethernet encapsulation gateway in the Rem IP Addr field PPP oE PPP RFC 1483 or ENET ENCAP Multiplexing Press the spacebar to the select the multiplexing...

Page 52: ...ssion Option Edit Filter Sets Use the space bar to toggle this field to Yes and press Enter to open Menu 11 5 to edit the filter sets See the Remote Node Filter section for more details Default No Onc...

Page 53: ...lt Off Once you have completed filling in Menu 11 2 Remote Node PPP Options press Enter at the message Press ENTER to Confirm to save your configuration or press Esc at any time to cancel 4 1 5 Remote...

Page 54: ...Remote Node Configuration Figure 4 4 Menu 11 5 Remote Node Filter Menu 11 5 Remote Node Filter Input Filter Sets protocol filters device filters Output Filter Sets protocol filters device filters Call...

Page 55: ...e you need to configure a remote node in order to dial out to the headquarters Additionally you may also need to define static routes if some services reside beyond the immediate remote LAN 5 1 1 Edit...

Page 56: ...VPI and VCI numbers need be specified for all protocols Menu 11 3 Remote Node Network Layer Options IP Options IP Address Assignment Static Rem IP Addr 0 0 0 0 Rem Subnet Mask 0 0 0 0 My WAN Addr 0 0...

Page 57: ...re the TCP IP parameters of a remote node first configure the two fields in Menu 11 Remote Node Profile as shown in the table below For more details on the IP Option fields refer to Chapter 3 Table 5...

Page 58: ...tige not the remote router Single User Account Set this field to Yes to enable the Single User Account feature for your Prestige Use the space bar to toggle between Yes and No See Chapter 3 Internet A...

Page 59: ...through other means This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly connected to a remote node Each remote node specifies only the netwo...

Page 60: ...open Menu 12 1 Edit IP Static Route Figure 5 7 Edit IP Static Route Menu 12 IP Static Route Setup 1 ________ 2 ________ 3 ________ 4 ________ 5 ________ 6 ________ 7 ________ 8 ________ Enter selecti...

Page 61: ...on on IP subnet mask in this chapter Gateway IP Address Enter the IP address of the gateway The gateway is an immediate neighbor of your Prestige that will forward the packet to the destination On the...

Page 62: ......

Page 63: ...work only one server need to have the network numbers configured and all other stations clients and servers can obtain the network numbers from it The server with configured network numbers is called...

Page 64: ...ternal network numbers each NetWare server has its own internal network number that is a virtual network to which the server is attached It is important to remember that every network number must be u...

Page 65: ...figure the LAN network numbers Your Prestige 641 will learn the network number from the seed router and add the routes to its routing table 6 2 2 Prestige 641 on LAN without Server Each IPX network mu...

Page 66: ...Yes No Frame Type Enable Disable the individual frame type Remember to enable only the ones that are actually used on your network 802 2 802 3 Ethernet II SNAP IPX Network If your Prestige 641 is a se...

Page 67: ...IPX A typical LAN to LAN application is to use your Prestige 641 to call from a branch office to the corporate headquarters to enable the stations in the branch office to access the NetWare servers a...

Page 68: ...Step 2 Move the cursor to the Edit IP IPX Bridge field then press the space bar to select Yes and press Enter to open Menu 11 3 Network Layer Options Figure 6 5 Menu 11 3 Remote Node Novell IPX Optio...

Page 69: ...f you leave this field as 00000000 your Prestige will determine automatically the network number through negotiation with the PPP peer 00000000 default Hop Count This field indicates the number of int...

Page 70: ...nection to that remote node is established From Menu 12 select two then select one of the IPX Static Routes to open Menu 12 2 1 Edit IPX Static Route as shown next Figure 6 6 Menu 12 2 Edit IPX Static...

Page 71: ...s of the node on which the server resides If you are using a Novell IPX implementation this value is 000000000001 Socket This field contains the socket number on which the server will receive service...

Page 72: ......

Page 73: ...idging generates more traffic for the same network layer protocol and it also demands more CPU cycles and memory For efficiency reasons do not turn on bridging unless you need to support protocols oth...

Page 74: ...line is down your Prestige 641 will reply to watchdog messages from the servers on behalf of remote clients The period of time that your Prestige 641 will do this is linked to the Ethernet Address Ti...

Page 75: ...ayer Options Menu Ethernet Addr Timeout min In this field enter the time number of minutes that you wish your Prestige 641 to retain the Ethernet Addr information in its internal tables while the line...

Page 76: ...tic routes in Menu 12 3 1 by pressing 3 in menu 12 and then selecting one of the bridge static routes as shown below Figure 7 3 Menu 12 3 Bridge Static Route Setup Figure 7 4 Menu 12 3 1 Edit Bridge S...

Page 77: ...deactivate the static route Ether Address Enter the MAC address of the destination machine that you wish to bridge the packets to IP Address If available enter the IP address of the destination machin...

Page 78: ......

Page 79: ...ilter rules Usually you would group related rules e g all the rules for NetBIOS into a single set and give it a descriptive name The Prestige allows you to configure up to twelve filter sets with six...

Page 80: ...guration Filter Set 1 2 3 4 5 6 Comments ______________ ______________ ______________ ______________ ______________ ______________ Filter Set 7 8 9 10 11 12 Comments ______________ ______________ ____...

Page 81: ...complete an action can be taken N means you can now specify an action to be taken i e forward the packet drop the packet or check the next rule For the latter the next rule is independent of the rule...

Page 82: ...d and press Enter to open the respective menu To speed up filtering all rules in a filter set must be of the same class i e protocol filters or generic filters The class of a filter set is determined...

Page 83: ...et or any other hardware port The following diagram illustrates this Figure 8 3 Protocol and Device Filter Sets 8 4 1 TCP IP Filter Rule This section shows you how to configure a TCP IP filter rule TC...

Page 84: ...h to filter This field is a don t care if it is 0 0 0 0 IP address Destination IP Mask Enter the IP subnet mask to apply to the Destination IP Addr Subnet mask Destination Port Enter the destination p...

Page 85: ...Yes No More If yes a matching packet is passed to the next filter rule before an action is taken else the packet is disposed of according to the action fields If More is Yes then Action Matched and A...

Page 86: ...aring the result against the Value to determine a match The Mask and Value are specified in hexadecimal numbers Note that it takes two hexadecimal digits to represent a byte so if the length is 4 the...

Page 87: ...lue Enter the value in Hexadecimal to compare with the data portion More If yes a matching packet is passed to the next filter rule before an action is taken else the packet is disposed of according t...

Page 88: ...Filter Type field and press Enter to open Menu 21 1 3 IPX Filter Rule as shown in the figure below Figure 8 6 Menu 21 1 3 IPX Filter Rule Menu 21 1 3 IPX Filter Rule Filter 1 1 Filter Type IPX Filter...

Page 89: ...lter Destination Source Socket Enter the destination source socket number 2 byte in hexadecimal of the packets that you wish to filter Destination Source Socket Comp Select the comparison you wish to...

Page 90: ...elve by entering their numbers separated by commas e g 3 4 6 11 Figure 8 7 Filtering Ethernet traffic 8 5 2 Remote Node Filters Go to Menu 11 5 shown below and enter the number s of the filter set s a...

Page 91: ...g SNMP To configure SNMP select SNMP Configuration enter 22 from the Main Menu to open Menu 22 SNMP Configuration as shown in the figure below The community for Get Set and Trap fields is simply SNMP...

Page 92: ...m the management station public Trusted Host If you enter a trusted host your Prestige will only respond to SNMP messages from this address If you leave the field blank default your Prestige will resp...

Page 93: ...these tools in detail Select menu 24 in the main menu to open Menu 24 System Maintenance as shown below Figure 10 1 Menu 24 System Maintenance Menu 24 System Maintenance 1 System Status 2 System Infor...

Page 94: ...ent in Menu 24 1 System Maintenance Status It should be noted that these fields are READ ONLY and are meant to be used for diagnostic purposes Figure 10 2 Menu 24 1 System Maintenance Status The follo...

Page 95: ...atus Shows the current status of the LAN Tx Pkts The number of transmitted packets to the LAN Rx Pkts The number of received packets from the LAN Collision Number of collisions WAN Line Status Shows t...

Page 96: ...to the Ethernet MAC Media Access Control of your Prestige IP Address This is the IP address of the Prestige in dotted decimal notation IP Mask This shows the subnet mask of the Prestige DHCP This fiel...

Page 97: ...log Follow the procedure below to view the local error trace log Step 1 Enter 24 from the Main Menu to open Menu 24 System Maintenance Step 2 From Menu 24 enter 3 to open Menu 24 3 System Maintenance...

Page 98: ...escribed in the following table to activate syslog then choose what you want to log 45 7203 PINI INFO Channel 11 ok 46 7204 PINI INFO Channel 10 ok 47 7205 PINI INFO Channel 9 ok 48 7206 PINI INFO Cha...

Page 99: ...set to Yes are logged when this field is set to Yes PPP log PPP events are logged when this field is set to Yes Your Prestige sends four types of syslog messages Please see Enhanced Syslog in Appendix...

Page 100: ...0035 S03 R01mF 4 PPP log Jul 19 11 42 44 192 168 102 2 ZyXEL Communications Corp ppp LCP Closing Jul 19 11 42 49 192 168 102 2 ZyXEL Communications Corp ppp IPCP Closing Jul 19 11 42 54 192 168 102 2...

Page 101: ...ou must perform the backup and restore through the console port Any serial communications program should work fine however you must use XMODEM protocol to perform the download upload Please note that...

Page 102: ...1 Uploading Router Firmware 10 6 2 Uploading Router Configuration File The configuration data system related data the error log and the trace log are all stored in the configuration file Please be awa...

Page 103: ...ult of 1234 also Figure 10 11 Menu 24 7 2 System Maintenance Upload Router Configuration File 10 7 Command Interpreter Mode This option allows you to enter the command interpreter mode A list of valid...

Page 104: ...ip ppp bridge ipx hdap Debug Command Listing AT just answer OK ATHE print help ATBAx change baudrate 1 38 4k 2 19 2k 3 9 6k 4 57 6k 5 115 2k ATENx y set BootExtension Debug Flag y password ATENx y se...

Page 105: ...Prestige 641 ADSL Internet Access Router System Maintenance 10 13...

Page 106: ......

Page 107: ...problem In this case you should contact technical support 1 Check to see if the Prestige is connected to your computer s serial port VT100 terminal emulation 9600 bps Cannot access the Prestige via th...

Page 108: ...telephone company and or ISP 11 3 Problems with the LAN Interface Table 11 3 Troubleshooting the LAN Interface Problem Corrective Action Check the Ethernet LEDs on the front panel The LED should be on...

Page 109: ...iplexer DTE Data Terminal Equipment IANA Internet Assigned Number Authority IP Internet protocol IPCP PPP IP Control Protocol IPX Internetwork Packet eXchange ISDN Integrated Service Digital Network I...

Page 110: ...Access Router D Appendix A STP Shielded Twisted Pair cable SUA Single User Account TCP Transmission Control Protocol UDP User Datagram Protocol VCI Virtual Channel Identifier VPI Virtual Path Identif...

Page 111: ...o The following diagram depicts a typical hardware configuration where the PCs use traditional dial up networking Diagram 1 Single PC per Modem Hardware Configuration The PPPoE driver makes the Ethern...

Page 112: ...parent to a broadband modem the modem simply bridges the Ethernet frames from one port to another However when an ADSL Prestige is deployed in such a setup it must appear as a single host to the AC Di...

Page 113: ...dle of VCs Think of a VP as a cable that contains a bundle of wires The cable connects two points and wires within the cable provide individual circuits between the two points In an ATM cell header a...

Page 114: ...means Remote Call ID C02 CLID call refused L02 Call Terminated C02 Call Terminated Packet triggered sdcmdSyslogSend SYSLOG_PKTTRI SYSLOG_NOTICE String String Packet trigger Protocol xx Data xxxxxxxxxx...

Page 115: ...load Router Configuration 10 10 Upload Router Firmware 10 10 Reset ADSL 10 9 Restore 10 9 Digital Subscriber Line Access Multiplexer 1 3 DNS 3 4 Domain Name System 3 2 DSLAM See Digital Subscriber Lin...

Page 116: ...0 5 Log Facility 10 7 M MAC 7 1 Main Menu 2 7 Media Access Control See MAC Metric 5 4 5 7 Multiplexing LLC based 3 6 VC based 3 6 Multiplexing 1 2 3 6 3 8 3 9 4 3 5 2 LLC based 5 2 VC based 5 2 Multip...

Page 117: ...ask 3 2 3 6 5 4 5 7 Syslog IP Address 10 7 System Syslog And Accounting 10 6 System Management Terminal 2 6 System Status 10 2 T TCP IP 5 1 10 9 TCP IP Parameters 3 1 Telephone Microfilters 2 3 Termin...

Reviews:

No comments