ZyXEL Communications Prestige 645R-A Series, User Manual, Page: 141 / 251

Share

Page: 141 / 251

ZyXEL Communications Prestige 645R-A Series User Manual Download Page 141

Prestige 645R-A Series User’s Guide

NAT

16-11

Figure 16-10 Multiple Servers Behind NAT Example

16.5 General NAT Examples

The following are some examples of NAT configuration.

16.5.1 Example 1: Internet Access Only

In the following Internet access example, you only need one rule where your ILAs (Inside Local addresses)
all map to one dynamic IGA (Inside Global Address) assigned by your ISP.

«
...
139
140
141
142
143
...
»

Summary of Contents for Prestige 645R-A Series

Page 1: ...Prestige 645R A series ADSL Router User s Guide Version 3 40 July 2003...

Page 2: ...by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does...

Page 3: ...requency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications If this equipment does cause harmful interference to radio tele...

Page 4: ...the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event b...

Page 5: ...3942 www zyxel com www europe zyxel com WORLDWIDE sales zyxel com tw 886 3 578 2439 ftp europe zyxel com ZyXEL Communications Corp 6 Innovation Road II Science Based Industrial Park Hsinchu 300 Taiwa...

Page 6: ...o LAN Application 1 4 Chapter 2 Hardware Installation 2 1 2 1 Front Panel LEDs of the Prestige 2 1 2 2 Rear Panel and Connections 2 2 2 2 1 DSL Port 2 3 2 2 2 One Auto crossover LAN 10 100M Port 2 3 2...

Page 7: ...4 6 4 9 NAT 4 6 4 10 Wizard Setup Configuration Second Screen 4 6 4 10 1 PPPoE 4 7 4 10 2 RFC 1483 4 8 4 10 3 ENET ENCAP 4 9 4 10 4 PPPoA 4 10 4 11 Basic Setup Complete 4 12 LAN NAT and Dynamic DNS II...

Page 8: ...creens 8 7 8 4 1 Diagnostic General Screen 8 7 8 4 2 Diagnostic DSL Line Screen 8 9 8 5 Firmware Screen 8 10 SMT General Configuration IV Chapter 9 Introducing the SMT 9 1 9 1 SMT Introduction 9 1 9 1...

Page 9: ...psulation 13 13 13 6 2 LLC based Multiplexing or PPP Encapsulation 13 13 Chapter 14 Static Route Setup 14 1 14 1 IP Static Route Overview 14 1 14 2 Configuring an IP static route 14 2 Chapter 15 Bridg...

Page 10: ...19 1 19 2 System Status 19 1 19 3 System Information 19 3 19 3 1 System Information 19 3 19 3 2 Console Port Speed 19 5 19 4 Log and Trace 19 5 19 4 1 Viewing Error Log 19 5 19 4 2 Syslog and Account...

Page 11: ...21 5 Applying an IP Policy 21 5 21 5 1 Ethernet IP Policies 21 5 21 6 IP Policy Routing Example 21 7 Chapter 22 Call Scheduling 22 1 22 1 Call Scheduling Overview 22 1 Appendices and Index VI Appendix...

Page 12: ...rks 6 2 Figure 6 2 NAT Application With IP Alias 6 3 Figure 6 3 Multiple Servers Behind NAT Example 6 7 Figure 6 4 NAT Mode 6 7 Figure 6 5 Edit SUA NAT Server Set 6 9 Figure 6 6 Address Mapping Rules...

Page 13: ...13 11 Menu 11 6 for VC based Multiplexing 13 13 Figure 13 12 Menu 11 6 for LLC based Multiplexing or PPP Encapsulation 13 14 Figure 14 1 Sample Static Routing Topology 14 1 Figure 14 2 Menu 12 Static...

Page 14: ...ilter Sets 17 14 Figure 17 13 Sample Telnet Filter 17 15 Figure 17 14 Menu 21 3 1 Sample Filter 17 16 Figure 17 15 Menu 21 3 Sample Filter Rules Summary 17 17 Figure 17 16 Filtering Ethernet Traffic 1...

Page 15: ...1 3 Menu 25 1 1 IP Routing Policy 21 4 Figure 21 4 Menu 3 2 TCP IP and DHCP Ethernet Setup 21 6 Figure 21 5 Menu 11 3 Remote Node Network Layer Options 21 6 Figure 21 6 Example of IP Policy Routing 21...

Page 16: ...P Table 8 6 Table 8 4 Diagnostic General 8 8 Table 8 5 Diagnostic DSL Line 8 10 Table 8 6 Firmware Upgrade 8 11 Table 9 1 Main Menu Commands 9 3 Table 9 2 Main Menu Summary 9 4 Table 10 1 Menu 1 Gener...

Page 17: ...ble 18 3 Ports and Interface Types 18 4 Table 19 1 Menu 24 1 System Maintenance Status 19 2 Table 19 2 Menu 24 2 1 System Maintenance Information 19 4 Table 19 3 Menu 24 3 2 System Maintenance UNIX Sy...

Page 18: ...eshooting ADSL Connection A 4 Chart A 10 Troubleshooting WAN Interface A 5 Chart A 11 Troubleshooting Internet Access A 5 Chart A 12 Troubleshooting Internet Connection A 5 Chart A 13 Troubleshooting...

Page 19: ...to the included CD for support documents Read Me First The Read Me First is designed to help you get up and running right away It contains connection information and instructions on getting started We...

Page 20: ...s guide The following section offers some background information on DSL Skip to Chapter 1 if you wish to begin working with your router right away User Guide Feedback Help us help you E mail all User...

Page 21: ...n the upstream capacity Asymmetrical services ADSL are suitable for Internet users because more information is usually downloaded than uploaded For example a simple button click in a web browser can s...

Page 22: ......

Page 23: ...I Getting Started This part is structured as a step by step guide to help you access your Prestige It covers key features and applications accessing the web configurator and configuring the wizard scr...

Page 24: ......

Page 25: ...ve it the flexibility to provide a complete networking solution for almost any user Ease of Installation Your Prestige is designed for quick intuitive and easy installation Physically its compact size...

Page 26: ...over ATM Adaptation Layer 5 RFC 1483 encapsulation over ATM and MAC encapsulated routing ENET ENCAP as well as PPP over Ethernet RFC 2516 SNMP SNMP Simple Network Management Protocol is a protocol use...

Page 27: ...e factory default password to 1234 IP address to 192 168 1 1 subnet mask to 255 255 255 0 and DHCP server enabled with a pool of 32 IP addressed starting at 192 168 1 33 1 3 Applications for the Prest...

Page 28: ...Figure 1 1 Internet Access Application 1 3 2 LAN to LAN Application You can use the Prestige to connect two geographically dispersed networks through an ADSL line A typical LAN to LAN application for...

Page 29: ...s the status of the front panel LEDs Table 2 1 Front Panel LED Description LED COLOR STATUS DESCRIPTION PWR Green On The Prestige is receiving power Off The Prestige is not receiving power SYS Green O...

Page 30: ...Off The DSL link is down Blinking The Prestige is receiving or sending data PPP ACT Green Off The Prestige is ready but not sending or receiving data Orange On The Prestige is initiating a PPPoE conn...

Page 31: ...nd Microfilters appendix for the details between the wall jack and your telephone s The micro filters act as low pass filters voice transmission takes place in the 0 to 4KHz bandwidth Step 2 Connectin...

Page 32: ...Installation 2 4 Turning On Your Prestige At this point you should have connected the DSL line the LAN port and the power port to the appropriate devices or lines Push in the power button located on t...

Page 33: ...gator 7 0 and later versions with JavaScript enabled It is recommended that you set your screen resolution to 1024 by 768 pixels 3 2 Accessing the Prestige Web Configurator Step 1 Make sure your Prest...

Page 34: ...ge models Click Wizard Setup to begin a series of screens to configure your Prestige for the first time Click a link under Advanced Setup to configure advanced Prestige features Click a link under Mai...

Page 35: ...s as shown Figure 3 3 Password The following table describes the labels in this screen Table 3 1 Password LABEL DESCRIPTION Old Password Type the default password or the existing password you use to a...

Page 36: ...ons that you had previously The password will be reset to 1234 also 3 5 1 Using The Reset Button Make sure the PWR LED is on not blinking when you begin this procedure 1 Press the RESET button for mor...

Page 37: ...idged ATM cells ENET ENCAP requires that you specify a gateway IP address in the Ethernet Encapsulation Gateway field in the second wizard screen You can get this information from your ISP 4 2 2 PPP o...

Page 38: ...VC1 carries IP etc VC based multiplexing may be dominant in environments where dynamic creation of large numbers of ATM VCs is fast and economical 4 3 2 LLC based Multiplexing In this case one VC car...

Page 39: ...llowing table describes the labels in this screen Table 4 1 Wizard Screen 1 LABEL DESCRIPTION Protocol This field contains some pre configured encapsulation multiplexing combinations Choose from PPPoA...

Page 40: ...s the average cell rate long term that can be transmitted Type the SCR which must be less than the PCR Maximum Burst Size Maximum Burst Size MBS refers to the maximum number of cells that can be sent...

Page 41: ...to do otherwise 4 7 IP Address Assignment A static IP is a fixed IP that your ISP gives you A dynamic IP is not fixed the ISP assigns you a different one each time The Single User Account feature can...

Page 42: ...guidelines above For more information on address assignment please refer to RFC 1597 Address Allocation for Private Internets and RFC 1466 Guidelines for Management of IP Address Space 4 8 Nailed Up C...

Page 43: ...in this screen Table 4 2 Internet Connection with PPPoE LABEL DESCRIPTION Service Name Type the name of your PPPoE service here User Name Configure User Name and Password fields for PPPoA and PPPoE e...

Page 44: ...hen you don t want the connection up all the time and specify an idle time out in seconds in the Max Idle Timeout field The default setting selects Connection on Demand with 0 as the idle time out whi...

Page 45: ...ned IP address in this field Back Click Back to go back to the first wizard screen Finish Click Finish to save the settings and proceed to the next wizard screen 4 10 3 ENET ENCAP Select ENET ENCAP fr...

Page 46: ...ise select Static IP Address and type your ISP assigned IP address in the IP Address text box below Subnet Mask Enter a subnet mask in dotted decimal notation Refer to the IP Subnetting appendix to ca...

Page 47: ...then enter both components exactly as given Password Enter the password associated with the user name above IP Address A static IP address is a fixed IP that your ISP gives you A dynamic IP address i...

Page 48: ...has priority over your Connection settings Back Click Back to go back to the first wizard screen Finish Click Finish to save the settings and proceed to the next wizard screen 4 11 Basic Setup Complet...

Page 49: ...LAN NAT and Dynamic DNS II Part II LAN NAT and Dynamic DNS This part covers LAN Local Area Network setup NAT Network Address Translation and dynamic DNS Domain Name Sever...

Page 50: ......

Page 51: ...sical connection determines whether the Prestige ports are LAN or WAN ports There are two separate IP networks one inside the LAN network the other outside the WAN network as shown next Figure 5 1 LAN...

Page 52: ...S servers out of the DHCP setup under all circumstances If your ISP gives you explicit DNS servers make sure that you enter their IP addresses in the DHCP Setup menu This way the Prestige can pass the...

Page 53: ...B uses subnet broadcasting while RIP 2M uses multicasting 5 4 4 Multicast Traditionally IP packets are transmitted in one of either two ways Unicast 1 sender 1 recipient or Broadcast 1 sender everybod...

Page 54: ...645R A Series User s Guide 5 4 LAN Setup 5 5 Configuring LAN Click LAN to open the following screen Figure 5 2 LAN The following table describes the labels in this screen Table 5 1 LAN LABEL DESCRIPT...

Page 55: ...Primary DNS Server Enter the IP addresses of the DNS servers The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask Secondary DNS Server As above Remote DHCP Serv...

Page 56: ......

Page 57: ...t inside outside refers to the location of a host while global local refers to the IP address of a host used in a packet Thus an inside local address ILA is the IP address of an inside host in a packe...

Page 58: ...or NAT 6 1 3 How NAT Works Each packet has two addresses a source address and a destination address For outgoing packets the ILA Inside Local Address is the source address on the LAN and the IGA Insid...

Page 59: ...supports five types of IP port mapping They are 1 One to One In One to One mode the Prestige maps one local IP address to one global IP address 2 Many to One In Many to One mode the Prestige maps mult...

Page 60: ...Types TYPE IP MAPPING SMT ABBREVIATION One to One ILA1 IGA1 1 1 Many to One SUA PAT ILA1 IGA1 ILA2 IGA1 M 1 Many to Many Overload ILA1 IGA1 ILA2 IGA2 ILA3 IGA1 ILA4 IGA2 M M Ov Many to Many No Overlo...

Page 61: ...are unsure refer to your ISP Default Server IP Address In addition to the servers for specified services NAT supports a default server IP address A default server receives packets from ports that are...

Page 62: ...r further information about port numbers Table 6 3 Services and Port Numbers SERVICES PORT NUMBER ECHO 7 FTP File Transfer Protocol 21 SMTP Simple Mail Transfer Protocol 25 DNS Domain Name System 53 F...

Page 63: ...Series User s Guide NAT 6 7 Figure 6 3 Multiple Servers Behind NAT Example 6 4 Selecting the NAT Mode Click NAT to open the following screen Figure 6 4 NAT Mode The following table describes the label...

Page 64: ...link to go to the NAT Edit SUA NAT Server Set screen Full Feature Select this radio button if you have multiple public WAN IP addresses for your Prestige Edit Details Click this link to go to the NAT...

Page 65: ...labels in this screen Table 6 5 Edit SUA NAT Server Set LABEL DESCRIPTION Start Port No Enter a port number in this field To forward only one port enter the port number again in the End Port No field...

Page 66: ...uring Address Mapping Ordering your rules is important because the Prestige applies the rules in the order that you specify When a rule matches the current packet the Prestige takes the corresponding...

Page 67: ...IP Address ILA If your rule is for all local IP addresses then enter 0 0 0 0 as the Local Start IP address and 255 255 255 255 as the Local End IP address This field is N A for One to one and Server...

Page 68: ...ed only M M Ov Overload Many to Many Overload mode maps multiple local IP addresses to shared global IP addresses MM No No Overload Many to Many No Overload mode maps each local IP address to unique g...

Page 69: ...This is the starting local IP address ILA Local IP addresses are N A for Server port mapping Local End IP This is the end local IP address ILA If your rule is for all local IP addresses then enter 0 0...

Page 70: ......

Page 71: ...riends or relatives will always be able to call you even if they don t know your IP address First of all you need to have registered a dynamic DNS account with www dyndns org This is for people with a...

Page 72: ...the name of your Dynamic DNS service provider Host Name Type the domain name assigned to your Prestige by your Dynamic DNS provider E mail Address Type your e mail address User Type your user name Pas...

Page 73: ...Maintenance III Part III Maintenance This part covers the maintenance screens...

Page 74: ......

Page 75: ...affic statistics 8 1 Maintenance Overview Use the maintenance screens to view system information upload new firmware manage configuration and restart your Prestige 8 2 System Status Screen Click Syste...

Page 76: ...Prestige 645R A Series User s Guide 8 2 Maintenance Figure 8 1 System Status The following table describes the labels in this screen...

Page 77: ...port IP address IP Subnet Mask This is the WAN port IP subnet mask Default Gateway This is the IP address of the default gateway if applicable VPI VCI This is the Virtual Path Identifier and Virtual C...

Page 78: ...er of packets sent and number of packets received for each port 8 2 1 System Statistics Click Show Statistics in the System Status screen to open the following screen Read only information here includ...

Page 79: ...d down line is down idle line ppp idle dial starting to trigger a call and drop dropping a call if you re using PPPoE encapsulation For a LAN port this shows the port speed and duplex setting LAN Port...

Page 80: ...n configured as a server the Prestige provides the TCP IP configuration for the clients If set to None DHCP service will be disabled and you must have another DHCP server on your LAN or else the compu...

Page 81: ...s a unique MAC address The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 A0 C5 00 00 02 8 4 Diagnostic Screens These read only screens displ...

Page 82: ...General LABEL DESCRIPTION TCP IP Address Type the IP address of a computer that you want to ping in order to test a connection Ping Click this button to ping the IP address that you entered Reset Syst...

Page 83: ...eneral LABEL DESCRIPTION Back Click this button to go back to the main Diagnostic screen 8 4 2 Diagnostic DSL Line Screen Click Diagnostic and then DSL Line to open the screen shown next Figure 8 6 Di...

Page 84: ...ing problems with the DSLAM and ATM network Upstream Noise Margin Click this button to display the upstream noise margin Downstream Noise Margin Click this button to display the downstream noise margi...

Page 85: ...u want to upload Remember that you must decompress compressed zip files before you can upload them Upload Click Upload to begin the upload process This process may take up to two minutes Reset Click t...

Page 86: ...some operating systems you may see the following icon on your desktop Figure 8 8 Network Temporarily Disconnected After two minutes log in again and check your new firmware version in the System Statu...

Page 87: ...vers System Management Terminal configuration for general setup Ethernet setup Internet access remote nodes remote node TCP IP static routing and NAT See the web configurator parts of this guide for b...

Page 88: ......

Page 89: ...Run and then type telnet 192 168 1 1 the default IP address and click OK Step 2 For your first login enter the default password 1234 As you type the password the screen displays an asterisk for each c...

Page 90: ...onfiguration Menu 23 System Password Menu 24 System Maintenance Menu 25 IP Routing Policy Setup Menu 25 1 IP Routing Policy Setup Menu 25 1 1 IP Routing Policy Menu 24 1 System Maintenance Status Menu...

Page 91: ...ation Type in or press SPACE BAR then press ENTER You need to fill in two types of fields The first requires you to type in the appropriate information The second allows you to cycle through the avail...

Page 92: ...is menu to set up filters to provide security etc 22 SNMP Configuration Use this menu to set up SNMP related parameters 23 System Password Use this menu to change your password 24 System Maintenance T...

Page 93: ...in the Old Password field for example 1234 and press ENTER Figure 9 4 Menu 23 System Password Step 3 Type your new system password in the New Password field up to 30 characters and press ENTER Step 4...

Page 94: ......

Page 95: ...s 2000 click Start Settings Control Panel and then double click System Click the Network Identification tab and then the Properties button Note the entry for the Computer name field and enter it as th...

Page 96: ...field blank the ISP may assign a domain name via DHCP You can go to menu 24 8 and type sys domainname to see the current domain name used by your gateway If you want to clear this field just press the...

Page 97: ...ss SPACE BAR to select Yes and then press ENTER to make dynamic DNS active Yes Host Enter the domain name assigned to your Prestige by your Dynamic DNS provider me dyndns org EMAIL Enter your e mail a...

Page 98: ......

Page 99: ...h to apply to the Ethernet traffic You seldom need to filter Ethernet traffic however the filter sets may be useful to block certain packets reduce traffic and prevent security breaches Figure 11 2 Me...

Page 100: ...ress ENTER to display Menu 3 2 TCP IP and DHCP Ethernet Setup as shown next Figure 11 3 Menu 3 2 TCP IP and DHCP Ethernet Setup Follow the instructions in the following table on how to configure the D...

Page 101: ...or count of the IP address pool 32 Primary DNS Server Secondary DNS Server Enter the IP addresses of the DNS servers The DNS servers are passed to the DHCP clients along with the IP address and the su...

Page 102: ...nable IP Multicasting or select None to disable it None default IP Policies Create policies using SMT menu 25 see the IP Policy Routing chapter and apply them on the Prestige LAN interface here You ca...

Page 103: ...Policy Routing IPPR provides a mechanism to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator Policy based routing is appl...

Page 104: ...igure 12 2 Partitioned Logical Networks Use menu 3 2 1 to configure IP Alias on your Prestige 12 4 IP Alias Setup Use menu 3 2 to configure the first network Move the cursor to Edit IP Alias field and...

Page 105: ...ilters N A Outgoing protocol filters N A IP Alias 2 No IP Address N A IP Subnet Mask N A RIP Direction N A Version N A Incoming protocol filters N A Outgoing protocol filters N A Enter here to CONFIRM...

Page 106: ...Choices are RIP 1 RIP 2B or RIP 2M RIP 1 Incoming Protocol Filters Enter the filter set s you wish to apply to the incoming traffic between this node and the Prestige Outgoing Protocol Filters Enter t...

Page 107: ...re using ENET ENCAP encapsulation From the main menu type 4 to display Menu 4 Internet Access Setup as shown next Figure 12 6 Menu 4 Internet Access Setup The following table contains instructions on...

Page 108: ...eature Please see the NAT Chapter for more details on the SUA Single User Account feature SUA Only Address Mapping Set When Full Feature is selected in the NAT field configure address mapping sets in...

Page 109: ...configuring one of the remote nodes You first choose a remote node in Menu 11 Remote Node Setup You can then edit that node s profile in menu 11 1 as well as configure specific settings in three subme...

Page 110: ...ation Here are some examples of more suitable combinations in such an application Scenario 1 One VC Multiple Protocols PPPoA RFC 2364 encapsulation with VC based multiplexing is the best combination b...

Page 111: ...n the Rem Login Rem Password My Login My Password and Authen fields are not applicable N A ENET ENCAP Multiplexing Press SPACE BAR and then ENTER to select the method of multiplexing that your ISP use...

Page 112: ...hentication Protocol only Authen PAP accept PAP Password Authentication Protocol only Route This field determines the protocol used in routing Options are IP and None IP Bridge When bridging is enable...

Page 113: ...timeout When you have completed this menu press ENTER at the prompt Press ENTER to confirm or ESC to cancel to save your configuration or press ESC to cancel and go back to the previous screen 13 2 3...

Page 114: ...apter For example if the normal route has a metric of 1 and the traffic redirect route has a metric of 2 then the normal route acts as the primary default route If the normal route fails to connect to...

Page 115: ...This is the IP address you entered in the previous menu Rem Subnet Mask Type the subnet mask assigned to the remote node My WAN Addr Some implementations especially UNIX derivatives require separate...

Page 116: ...ype a number that approximates the cost for this link The number need not be precise but it must be between 1 and 15 In practice 2 or 3 is usually a good number 2 Private This determines if the Presti...

Page 117: ...figure while Rem IP Addr indicates the peer WAN IP 172 16 0 2 in the following figure Figure 13 4 Sample IP Addresses for a TCP IP LAN to LAN Connection 13 5 Remote Node Filter Move the cursor to the...

Page 118: ...11 5 Remote Node Filter PPPoA or PPPoE Encapsulation 13 5 1 Web Configurator Internet Security Filter Rules In the web configurator open the Security screen as shown next Select the predefined filter...

Page 119: ...protocol filter set numbers that were previously applied are erased after you apply the Internet Security filter rules in the web configurator To reapply them or apply new filter sets you need to ent...

Page 120: ...1 12 Filter Rules Summary A Type Filter Rules M m n 1 Y IP Pr 6 SA 0 0 0 0 DA 0 0 0 0 DP 23 N D N 2 Y IP Pr 6 SA 0 0 0 0 DA 0 0 0 0 DP 21 N D N 3 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 69 N D N 4 Y IP Pr...

Page 121: ...1 13 6 1 VC based Multiplexing non PPP Encapsulation For VC based multiplexing by prior agreement a protocol is assigned a specific virtual circuit for example VC1 will carry IP Separate VPI and VCI...

Page 122: ...tocols The valid range for the VPI is 0 to 255 and for the VCI is 32 to 65535 1 to 31 is reserved for local management of ATM traffic Menu 11 6 Remote Node ATM Layer Options VPI VCI LLC Multiplexing o...

Page 123: ...t is directly connected to a remote node Each remote node specifies only the network to which the gateway is directly connected and the Prestige has no knowledge of the networks beyond For instance th...

Page 124: ...From menu 12 select 1 to open Menu 12 1 IP Static Route Setup shown next Figure 14 3 Menu 12 1 IP Static Route Setup Step 3 Now type the route number of a static route you want to configure Menu 12 1...

Page 125: ...to be identical to the host ID IP Subnet Mask Type the subnet mask for this destination Follow the discussion on IP Subnet Mask in this manual Gateway IP Address Type the IP address of the gateway The...

Page 126: ...this remote node in its RIP broadcasts If set to Yes this route is kept private and is not included in RIP broadcasts If No the route to this remote node will be propagated to other hosts through RIP...

Page 127: ...ocol and it also demands more CPU cycles and memory For efficiency reasons do not turn on bridging unless you need to support protocols other than IP on your network For IP enable the routing if you n...

Page 128: ...Rem Subnet Mask 0 0 0 0 My WAN Addr 0 0 0 0 NAT Full Feature Address Mapping Set 2 Metric 2 Private No RIP Direction Both Version RIP 2B Multicast IGMP v2 IP Policies Press ENTER to Confirm or ESC to...

Page 129: ...ave your configuration or press ESC to cancel and go back to the previous screen 15 2 2 Bridge Static Route Setup Similar to network layer static routes a bridging static route tells the Prestige the...

Page 130: ...nt to bridge the packets to IP Address If available type the IP address of the destination computer that you want to bridge the packets to Gateway Node Press SPACE BAR and then ENTER to select the num...

Page 131: ...for SUA The Prestige also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of clients or servers using mapping types as outlined in the web configura...

Page 132: ...that you want to configure Step 3 Move the cursor to the Edit IP Bridge field press SPACE BAR to select Yes and then press ENTER to bring up Menu 11 3 Remote Node Network Layer Options Menu 4 Interne...

Page 133: ...e SUA Only if you have just one public WAN IP address for your Prestige SUA Only 16 3 NAT Setup Use the address mapping sets menus and submenus to create the mapping table used to assign global addres...

Page 134: ...the main menu to bring up the following screen Figure 16 3 Menu 15 NAT Setup 16 3 1 Address Mapping Sets Enter 1 to bring up Menu 15 1 Address Mapping Sets Figure 16 4 Menu 15 1 Address Mapping Sets S...

Page 135: ...ing local IP address ILA If the rule is for all local IPs then the Start IP is 0 0 0 0 and the End IP is 255 255 255 255 255 255 255 255 Global Start IP This is the starting global IP address IGA If y...

Page 136: ...uired field and you must enter a name for the set Figure 16 6 Menu 15 1 2 If the Set Name field is left blank the entire set will be deleted The Type Local and Global Start End IPs are configured in m...

Page 137: ...rule selected The rules after the selected rule will then be moved down by one rule Delete means to delete the selected rule and then all the rules after the selected one will be advanced one rule No...

Page 138: ...fields MUST be set for Server Start This is the starting local IP address ILA 0 0 0 0 End This is the ending local IP address ILA If the rule is for all local IPs then put the Start IP as 0 0 0 0 and...

Page 139: ...or press ESC to cancel and go back to the previous screen 16 4 Configuring a Server behind NAT Follow these steps to configure a server behind NAT Step 1 Enter 15 in the main menu to go to Menu 15 NAT...

Page 140: ...d In the following figure you have a computer acting as an FTP Telnet and SMTP server ports 21 23 and 25 at 192 168 1 33 Step 6 Press ENTER at the Press ENTER to confirm prompt to save your configurat...

Page 141: ...le 16 5 General NAT Examples The following are some examples of NAT configuration 16 5 1 Example 1 Internet Access Only In the following Internet access example you only need one rule where your ILAs...

Page 142: ...Network Address Translation field in menus 4 and 11 3 is specifically pre configured to handle this case Menu 4 Internet Access Setup ISP s Name MyISP Encapsulation RFC 1483 Multiplexing LLC based VP...

Page 143: ...specify the Inside Server behind the NAT as shown in the next figure Figure 16 14 Menu 15 2 1 Specifying an Inside Server Menu 15 2 1 NAT Server Setup Used for SUA Only Rule Start Port No End Port No...

Page 144: ...er Four rules need to be configured two bi directional and two uni directional as follows Rule 1 Map the first IGA to the first inside FTP server for FTP traffic in both directions 1 1 mapping giving...

Page 145: ...direct mapping for packets going both ways and enter the local Start IP as 192 168 1 10 the IP address of FTP Server 1 the global Start IP as 10 132 50 1 our first IGA See Figure 16 17 Step 6 Repeat t...

Page 146: ...re it as shown Menu 15 1 1 Address Mapping Rules Set Name Example3 Idx Local Start IP Local End IP Global Start IP Global End IP Type 1 192 168 1 10 10 132 50 1 1 1 2 192 168 1 11 10 132 50 2 1 1 3 0...

Page 147: ...ping as port numbers do not change for Many to Many No Overload and One to One NAT mapping types The following figure illustrates this Figure 16 19 NAT Example 4 Menu 15 2 1 NAT Server Setup Rule Star...

Page 148: ...ve configured your rule you should be able to check the settings in menu 15 1 1 as shown next Figure 16 21 Example 4 Menu 15 1 1 Address Mapping Rules Menu 15 1 1 1 Address Mapping Rule Type Many to...

Page 149: ...setup SNMP system information and diagnosis firmware and configuration file maintenance system maintenance remote management IP policy routing and call scheduling See the web configurator parts of thi...

Page 150: ......

Page 151: ...re divided into incoming and outgoing filters depending on the direction of the packet relative to a port Data filtering can be applied on either the WAN side or the Ethernet side Call filtering is us...

Page 152: ...gures that follow The following figure illustrates the logic flow when executing a filter rule Data Outgoing Packet Drop packet Built in default Call Filters User defined Call Filters if applicable In...

Page 153: ...le Fetch Next Filter Set Next Filter Set Available Accept Packet Drop Packet Yes No Yes No Yes Packet intoFilter Filter Set Forward Drop No Check Next Rule Figure 17 2 Filter Rule Process You can appl...

Page 154: ...ilter set follow the steps shown next Step 1 Enter 21 in the main menu to display Menu 21 Filter Set Configuration Figure 17 3 Menu 21 Filter Set Configuration Step 2 Type the filter set to configure...

Page 155: ...SA 0 0 0 0 DA 0 0 0 0 DP 139 N D N 4 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 137 N D N 5 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 138 N D N 6 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 139 N D F Enter Filter Rule Num...

Page 156: ...to 6 A Active Y means the rule is active N means the rule is inactive Type The type of filter rule GEN for Generic IP for TCP IP Filter Rules These parameters are displayed here Menu 21 4 Filter Rule...

Page 157: ...atched F means to forward the packet immediately and skip checking the remaining rules D means to drop the packet N means to check the next rule n Action Not Matched F means to forward the packet imme...

Page 158: ...ersa the Prestige will warn you and will not allow you to save 17 3 1 TCP IP Filter Rule This section shows you how to configure a TCP IP filter rule TCP IP rules allow you to base the rule on the fie...

Page 159: ...n IP source route The majority of IP packets do not have source route No default Destination IP Addr Type the destination IP address of the packet you want to filter This field is ignored if it is 0 0...

Page 160: ...ing option from the following None No packets will be logged Action Matched Only packets that match the rule parameters will be logged Action Not Matched Only packets that do not match the rule parame...

Page 161: ...r Active Check IP Protocol Drop Drop Packet Accept Packet Drop Forward Check Next Rule Check Next Rule Check Next Rule Forward Not Matched Yes No Check Src IP Addr Apply SrcAddrMask to Src Addr Matche...

Page 162: ...Mask and Value fields are specified in hexadecimal numbers Note that it takes two hexadecimal digits to represent a byte so if the length is 4 the value in either field will take 8 digits for example...

Page 163: ...to the data portion before comparison Value Type the value in Hexadecimal to compare with the data portion More If Yes a matching packet is passed to the next filter rule before an action is taken or...

Page 164: ...he exact address and port on the wire Therefore the Prestige applies the protocol filters to the native IP address and port number before NAT for outgoing packets and after NAT for incoming packets On...

Page 165: ...Telnet Filter Step 1 Enter 21 in the main menu to display Menu 21 Filter Set Configuration Step 2 Enter the index number of the filter set you want to configure in this case 3 Step 3 Type a descriptiv...

Page 166: ...k 0 0 0 0 Port Port Comp Equal TCP Estab No More No Log None Action Matched Drop Action Not Matched Forward Press ENTER to Confirm or ESC to Cancel Press SPACE BAR to choose this filter rule type The...

Page 167: ...on shows you where to apply the filter s after you design it them Sets of factory default filter rules have been configured in menu 21 but have not been applied to filter traffic Menu 21 3 Filter Rule...

Page 168: ...ou want to apply as appropriate You can choose up to four filter sets from twelve by typing their numbers separated by commas for example 2 4 6 11 The factory default filter set NetBIOS_LAN is inserte...

Page 169: ...nu 11 5 Remote Node Filter Input Filter Sets protocol filters 5 device filters Output Filter Sets protocol filters 4 device filters Call Filter Sets Protocol filters 1 Device filters Enter here to CON...

Page 170: ......

Page 171: ...ces SNMP is a member of the TCP IP protocol suite Your Prestige supports SNMP agent functionality which allows a manager station to manage and monitor the Prestige through the network The Prestige sup...

Page 172: ...esponse protocol based on the manager agent model The manager issues a request and the agent returns responses using the following protocol operations Get Allows the manager to retrieve an object vari...

Page 173: ...r Prestige will only respond to SNMP messages from this address A blank default field means your Prestige will respond to all SNMP messages it receives regardless of source 0 0 0 0 Trap Community Type...

Page 174: ...tionFailure defined in RFC 1215 A trap is sent to the manager when receiving any SNMP get or set requirements with wrong community password 6 whyReboot defined in ZYXEL MIB A trap is sent with the rea...

Page 175: ...Status The first selection System Status gives you information on the status and statistics of the ports as shown next System Status is a tool that can be used to monitor your Prestige Specifically it...

Page 176: ...s on this connection Tx B s This shows the transmission rate in bytes per second Rx B s This shows the receiving rate in bytes per second Up Time This is the time this channel has been connected to th...

Page 177: ...eam Speed This shows the downstream transfer rate in kbps CPU Load This specifies the percentage of CPU utilization 19 3 System Information To get to the System Information Step 1 Enter 24 in the main...

Page 178: ...dor Displays the vendor of the ADSL chipset and DSL version Standard This refers to the operational protocol the Prestige and the DSLAM Digital Subscriber Line Access Multiplexer are using LAN Etherne...

Page 179: ...meter for the communication software you are using to connect to the Prestige 19 4 Log and Trace There are two logging facilities in the Prestige The first is the error logs and trace records that are...

Page 180: ...enance UNIX Syslog You need to configure the UNIX syslog parameters described in the following table to activate syslog then choose what you want to log Table 19 3 Menu 24 3 2 System Maintenance UNIX...

Page 181: ...own next 1 CDR CDR Message Format SdcmdSyslogSend SYSLOG_CDR SYSLOG_INFO String String board xx line xx channel xx call xx str board the hardware board ID line the WAN ID in a board Channel channel ID...

Page 182: ...CMP spo Source port dpo Destination port Jul 19 14 43 55 192 168 102 2 ZyXEL Communications Corp IP Src 202 132 154 123 Dst 255 255 255 255 UDP spo 0208 dpo 0208 S03 R01mF Jul 19 14 44 00 192 168 102...

Page 183: ...estige Command Mode Type the mode to test and diagnose your Prestige using specified commands Host IP Address If you typed 12 to Ping Host now type the address of the computer you want to ping 19 6 Co...

Page 184: ...645R A Series User s Guide 19 10 System Information and Diagnosis Figure 19 10 Valid Commands Copyright c 1994 2003 ZyXEL Communications Corp P645R A1 Valid commands are sys exit ether wan ip bridge...

Page 185: ...fer to the label on the bottom of your Prestige ftp put firmware bin ras This is a sample FTP session showing the transfer of the computer file firmware bin to the Prestige ftp get rom 0 config cfg Th...

Page 186: ...bin 20 2 Backup Configuration The Prestige displays different messages explaining different ways to backup restore and upload files in menus 24 5 24 6 24 7 1 and 24 7 2 depending on whether you use th...

Page 187: ...sfers the configuration file on the Prestige to your computer and renames it config rom See earlier in this chapter for more information on filename conventions Step 7 Enter quit to exit the ftp promp...

Page 188: ...uires a unique User ID and Password to login Transfer Type You must use binary mode when uploading the configuration or firmware file Transfer files in either ASCII plain text format or in binary mode...

Page 189: ...transfer is complete Step 4 Launch the TFTP client on your computer and connect to the Prestige Set the transfer mode to binary before starting data transfer Step 5 Use the TFTP client see the exampl...

Page 190: ...rom 0 Binary Transfer the file in binary mode Abort Stop transfer of the file Refer to section 20 2 5 to read about configurations that disallow TFTP and FTP over WAN 20 3 Restore Configuration This...

Page 191: ...the Prestige See earlier in this chapter for more information on filename conventions Step 8 Enter quit to exit the ftp prompt The Prestige will automatically restart after a successful restore proces...

Page 192: ...llowing the instructions in Menu 24 7 2 System Maintenance Upload System Configuration File for console port WARNING DO NOT INTERRUPT THE FILE TRANSFER PROCESS AS THIS MAY PERMANENTLY DAMAGE YOUR PRES...

Page 193: ...lly after a successful firmware upload For details on FTP commands please consult the documentation of your FTP client program For details on uploading system firmware using TFTP note that you must re...

Page 194: ...ion on filename conventions Step 7 Enter quit to exit the ftp prompt The Prestige automatically restarts after a successful file upload 20 4 4 FTP Session Example of Firmware File Upload Figure 20 7 F...

Page 195: ...e TFTP client see the example below to transfer files between the Prestige and the computer The file name for the firmware is ras Note that the telnet connection must be active and the Prestige in CI...

Page 196: ......

Page 197: ...ry of the network to enable the backbone to prioritize traffic Cost Savings IPPR allows organizations to distribute interactive traffic on high bandwidth high cost paths while using low cost paths for...

Page 198: ...the index of the policy set you want to configure to open Menu 25 1 IP Routing Policy Setup Menu 25 1 shows the summary of a policy set including the criteria and the action of a single policy and whe...

Page 199: ...0 25 P 6 T NM PR 0 GW 192 168 1 1 T MT PR 0 2 N __________________________________________________________________________ __________________________________________________________________________ 3...

Page 200: ...xample UDP TCP ICMP etc Type of Service Prioritize incoming network traffic by choosing from Don t Care Normal Min Delay Max Thruput Min Cost or Max Reliable Precedence Precedence value of the incomin...

Page 201: ...gateway must be the IP address of a remote node The default gateway is specified as 0 0 0 0 Type of Service Set the new TOS value of the outgoing packet Prioritize incoming network traffic by choosing...

Page 202: ...em IP Addr 0 0 0 0 Rem Subnet Mask 0 0 0 0 My WAN Addr 0 0 0 0 NAT Full Feature Address Mapping Set 2 Metric 2 Private No RIP Direction Both Version RIP 2B Multicast IGMP v2 IP Policies 2 4 7 9 Press...

Page 203: ...oute Web packets to the Internet using one policy and route FTP packets to a remote network using another policy See the next figure Figure 21 6 Example of IP Policy Routing To force Web packets comin...

Page 204: ...his set to route packets from any host IP 0 0 0 0 means any host with protocol TCP and port FTP access through another gateway 192 168 1 100 Menu 25 1 1 IP Routing Policy Policy Set Name set1 Active Y...

Page 205: ...ote DHCP Server N A TCP IP Setup IP Address 192 168 1 1 IP Subnet Mask 255 255 255 0 RIP Direction Both Version RIP 1 Multicast None IP Policies 1 2 Edit IP Alias No Press ENTER to Confirm or ESC to C...

Page 206: ......

Page 207: ...up as shown next Figure 22 1 Menu 26 Schedule Setup Lower numbered sets take precedence over higher numbered sets thereby avoiding scheduling conflicts For example if sets 1 2 3 and 4 in are applied i...

Page 208: ...n t be triggered up until the end of the Duration Table 22 1 Menu 26 1 Schedule Set Setup FIELD DESCRIPTION EXAMPLE Active Press SPACE BAR to select Yes or No Choose Yes and press ENTER to activate th...

Page 209: ...take effect in hour minute format 09 00 Duration Enter the maximum length of time this connection is allowed in hour minute format 08 00 Action Forced On means that the connection is maintained whethe...

Page 210: ...emote Node Profile Rem Node Name ChangeMe Route IP Active Yes Bridge No Encapsulation PPPoE Edit IP Bridge No Multiplexing VC based Edit ATM Options No Service Name Telco Option Incoming Allocated Bud...

Page 211: ...Appendices and Index VI Part VI Appendices and Index This part contains troubleshooting additional background information and an index of key terms...

Page 212: ......

Page 213: ...ower source Use only the supplied power adaptor 2 Check that the Prestige and the power source are both turned on and the Prestige is receiving sufficient power 3 Turn the Prestige off and on 4 If the...

Page 214: ...stance A 2 Telnet I cannot telnet into the Prestige Chart A 4 Troubleshooting Telnet STEPS CORRECTIVE ACTION 1 Check the LAN port and the other Ethernet connections 2 Make sure you are using the corre...

Page 215: ...S CORRECTIVE ACTION 1 Make sure you are using Internet Explorer 5 0 and later versions 2 Delete the temporary web files and log in again In Internet Explorer click Tools Internet Options and then clic...

Page 216: ...ont panel A LAN LED should be on if the port is connected to a computer or hub If the 10M 100M LEDs on the front panel are both off refer to Section A 1 2 2 Make sure that the IP address and the subne...

Page 217: ...ccess chapter SMT A 7 Internet Access I cannot access the Internet Chart A 11 Troubleshooting Internet Access STEPS CORRECTIVE ACTION 1 Make sure the Prestige is turned on and connected to the network...

Page 218: ...rt A 13 Troubleshooting Connecting to a Remote Node or ISP STEPS CORRECTIVE ACTION 1 Check menu 4 or WAN screen to verify that the username and password are entered properly 2 In menu 11 1 verify your...

Page 219: ...in the next left most bit In a class B address the first two octets make up the network number and the two remaining octets make up the host ID Class C addresses begin starting from the left with 1 1...

Page 220: ...ubnet mask is used to determine which bits are part of the network number and which bits are part of the host ID using a logical AND operation A subnet mask has 32 bits each bit of the mask correspond...

Page 221: ...address using both notations Chart B 4 Alternative Subnet Mask Notation SUBNET MASK IP ADDRESS SUBNET MASK 1 BITS LAST OCTET BIT VALUE 255 255 255 0 24 0000 0000 255 255 255 128 25 1000 0000 255 255 2...

Page 222: ...Mask Binary 11111111 11111111 11111111 10000000 Subnet Address 192 168 1 0 Lowest Host ID 192 168 1 1 Broadcast Address 192 168 1 127 Highest Host ID 192 168 1 126 Chart B 6 Subnet 2 NETWORK NUMBER LA...

Page 223: ...ubnet Chart B 7 Subnet 1 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 0 IP Address Binary 11000000 10101000 00000001 00000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet...

Page 224: ...st Address 192 168 1 255 Highest Host ID 192 168 1 254 Example Eight Subnets Similarly use a 27 bit mask to create 8 subnets 001 010 011 100 101 110 The following table shows class C IP address last o...

Page 225: ...termines which bits are part of the network number and which are part of the host ID A class B address has two host ID octets available for subnetting and a class A address has three host ID octets se...

Page 226: ...ss B Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 25 10 255 255 255 192 26 1024 62 11 255 255 255 224 27 2048 30 12 255 255 255 240 28 4096 14 13 255 255 255 248 29...

Page 227: ...ces using PPP Benefits of PPPoE PPPoE offers the following benefits 1 It provides you with a familiar dial up networking DUN user interface 2 It lessens the burden on the carriers of provisioning virt...

Page 228: ...e PPP frames to the ISP The L2TP tunnel is capable of carrying multiple PPP sessions With PPPoE the VC Virtual Circuit is equivalent to the dial up connection and is between the modem and the AC as op...

Page 229: ...requires the purchase of a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropr...

Page 230: ...ick OK If you need TCP IP a In the Network window click Add b Select Protocol and then click Add c Select Microsoft from the list of manufacturers d Select TCP IP from the list of network protocols an...

Page 231: ...omatically If you have a static IP address select Specify an IP address and type your information into the IP Address and Subnet Mask fields 3 Click the DNS Configuration tab If you do not know your D...

Page 232: ...d and click Add 5 Click OK to save and close the TCP IP Properties window 6 Click OK to close the Network window Insert the Windows CD if prompted 7 Turn on your Prestige and restart your computer whe...

Page 233: ...Windows 2000 NT XP 1 For Windows XP click start Control Panel In Windows 2000 NT click Start Settings Control Panel 2 For Windows XP click Network Connections For Windows 2000 NT click Network and Dia...

Page 234: ...Win XP and click Properties 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP If you have a dynamic IP address click Obtain an IP address automatically If you have...

Page 235: ...IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add Configure additional default gateways in the IP Settings tab...

Page 236: ...and Alternate DNS server fields If you have previously configured DNS servers click Advanced and then the DNS tab to order them 8 Click OK to close the Internet Protocol TCP IP Properties window 9 Cli...

Page 237: ...s User s Guide Setting up Your Computer s IP Address D 9 Macintosh OS 8 9 1 Click the Apple menu Control Panel and double click TCP IP to open the TCP IP Control Panel 2 Select Ethernet built in from...

Page 238: ...in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your Prestige in the Router address box 5 Close the TCP IP Control Panel 6 Click Save if prompted to save chan...

Page 239: ...elect Using DHCP from the Configure list 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in...

Page 240: ......

Page 241: ...etween circuit end points Diagram E 1 Virtual Circuit Topology Think of a virtual path as a cable that contains a bundle of wires The cable connects two points and wires within the cable provide indiv...

Page 242: ......

Page 243: ...point where the telephone line enters your residence as shown in the following figure Diagram F 1 Connecting a POTS Splitter Step 1 Connect the side labeled Phone to your telephone Step 2 Connect the...

Page 244: ...double jack end of the Y Connector to the wall side of the microfilter Step 3 Connect another cable from the double jack end of the Y Connector to the Prestige Step 4 Connect the phone side of the mi...

Page 245: ...sumption 11 W Safety Standards UL CUL CSA UL 1310 CSA C22 2 No 223 NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model AA 121A25 Input Power AC120Volts 60Hz 19W Output Power AC 12Volts 1 25A Power Co...

Page 246: ......

Page 247: ...Detail Record 19 6 CHAP 13 4 Classes of IP Addresses B 1 Collision 19 3 Command Interpreter Mode 19 9 Community 18 2 Computer Name 10 1 Conditions that prevent TFTP and FTP from working over WAN 20 4...

Page 248: ...lter Set Class 17 8 Filter Set Configuration 17 4 Filtering 17 1 17 8 Filtering Process Outgoing Packets 17 2 Finger 6 6 Firmware File Maintenance 8 10 Forgot My Login Password A 3 Frame Relay 1 3 FTP...

Page 249: ...Access Control 15 1 Message Logging 19 5 Metric 13 5 13 8 14 3 Multicast 5 3 13 8 Multiplexing LLC based 4 2 VC based 4 2 Multiplexing 1 2 4 2 12 6 13 2 Multiprotocol Encapsulation 4 2 My WAN Address...

Page 250: ...Policy 21 1 S Sample IP Addresses 13 9 Schedule Sets Duration 22 2 Security 1 3 Server 6 4 16 4 16 5 16 8 16 9 16 10 16 13 16 14 Service iv Service Type A 5 Services 6 5 6 6 setup a schedule 22 2 Sing...

Page 251: ...TFTP Restrictions 20 4 TOS Type of Service 21 1 Trace Records 19 5 Transmission Rates 1 1 Troubleshooting Internet Browser Display A 3 Login Password A 3 Power LED A 1 A 2 Telnet A 2 Web Configurator...

Reviews:

No comments