ZyXEL Communications Prestige 650H-17 User Manual Download Page 102

Page: 102 / 200

Prestige 650H-17 ADSL Router

7-14 NAT

Table 7-7 Services & Port Numbers

SERVICES PORT

NUMBER

HTTP (Hyper Text Transfer protocol or WWW, Web)

POP3 (Post Office Protocol)

110

NNTP (Network News Transport Protocol)

119

SNMP (Simple Network Management Protocol)

161

SNMP trap

162

PPTP (Point-to-Point Tunneling Protocol)

1723

7.4.1 Configuring a Server behind NAT

Follow these steps to configure a server behind NAT:

Step 1.

Enter 15 in the main menu to go to

Menu 15 - NAT Setup.

Step 2.

Enter 2 to display

Menu 15.2 - NAT Server Sets

as shown next.

Figure 7-10 Menu 15.2 – NAT Server Setup

Step 3.

Enter 1 to go to

Menu 15.2.1 NAT Server Setup

as follows.

Menu 15.2 - NAT Server Sets

1. Server Set 1 (Used for SUA Only)
2. Server Set 2

3. Server Set 3

4. Server Set 4

5. Server Set 5

6. Server Set 6

7. Server Set 7
8. Server Set 8

9. Server Set 9

10. Server Set 10

Enter Set Number to Edit:

Summary of Contents for Prestige 650H-17

Page 1: ...Prestige 650H 17 ADSL Router User s Guide Version 3 40 August 2002...

Page 2: ...ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it c...

Page 3: ...uency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications If this equipment does cause harmful interference to radio televis...

Page 4: ...purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be h...

Page 5: ...tions Corp 6 Innovation Road II Science Based Industrial Park Hsinchu 300 Taiwan support zyxel com 1 714 632 0882 800 255 4101 www zyxel com NORTH AMERICA sales zyxel com 1 714 632 0858 ftp zyxel com...

Page 6: ...l and Connections of the Prestige 2 2 2 2 1 DSL Port 2 3 2 2 2 Four LAN 10 100M Ports 2 4 2 2 3 Power Port 2 4 2 2 4 Restore Factory Defaults Reboot Button 2 4 2 3 Additional Installation Requirements...

Page 7: ...3 6 1 IP Alias Setup 3 6 3 7 Route IP Setup 3 8 3 8 TCP IP Ethernet Setup and DHCP 3 8 3 9 VPI and VCI 3 11 3 10 Multiplexing 3 11 3 10 1 VC based Multiplexing 3 11 3 10 2 LLC based Multiplexing 3 11...

Page 8: ...T 7 6 7 2 1 SUA Single User Account Versus NAT 7 6 7 2 2 Applying NAT 7 6 7 3 NAT Setup 7 7 7 3 1 Address Mapping Sets 7 8 7 4 NAT Server Sets Port Forwarding 7 13 7 4 1 Configuring a Server behind NA...

Page 9: ...nfiguration Using FTP 11 2 11 2 2 Using the FTP command from the DOS Prompt 11 3 11 2 3 Backup Configuration Using TFTP 11 4 11 2 4 Example TFTP Command 11 4 11 3 Restore Configuration 11 5 11 4 Uploa...

Page 10: ...4 2 Remote Management Limitations 15 3 15 5 Remote Management and NAT 15 3 15 6 System Timeout 15 3 ADDITIONAL INFORMATION 1 Chapter 16 Troubleshooting 16 1 16 1 Problems Starting Up the Prestige 16 1...

Page 11: ...ure 3 6 Menu 1 General Setup 3 8 Figure 3 7 Menu 3 2 TCP IP and DHCP Ethernet Setup 3 9 Figure 3 8 Example of Traffic Shaping 3 15 Figure 3 9 Internet Access Setup 3 15 Figure 4 1 Menu 11 Remote Node...

Page 12: ...15 1 1 1 7 21 Figure 7 20 Example 3 Final Menu 15 1 1 7 22 Figure 7 21 NAT Example 4 7 23 Figure 7 22 Example 4 Menu 15 1 1 1 Address Mapping Rule 7 24 Figure 7 23 Example 4 Menu 15 1 1 Address Mappi...

Page 13: ...ce 11 7 Figure 11 8 FTP Session Example 11 8 Figure 12 1 Command Mode in Menu 24 12 1 Figure 12 2 Valid Commands 12 2 Figure 12 3 Call Control 12 2 Figure 12 4 Budget Management 12 3 Figure 12 5 Menu...

Page 14: ......

Page 15: ...u Fields 6 3 Table 7 1 NAT Definitions 7 1 Table 7 2 NAT Mapping Types 7 5 Table 7 3 Applying NAT in Menus 4 11 3 7 7 Table 7 4 SUAAddress Mapping Rules 7 9 Table 7 5 Fields in Menu 15 1 1 7 11 Table...

Page 16: ...13 4 Table 14 1 Schedule Set Setup Fields 14 2 Table 15 1 Menu 24 11 Remote Management Control 15 2 Table 16 1 Troubleshooting the Start Up of Your Prestige 16 1 Table 16 2 Troubleshooting the LAN In...

Page 17: ...a wide range of applications for high speed Internet access Your Prestige is easy to install and configure All functions are configurable via the SMT System Management Terminal and web configurator A...

Page 18: ...abels are in Bold Times New Roman font Predefined field choices are in Bold Arial font Command and arrow keys are enclosed in square brackets ENTER means the Enter or carriage return key ESC means the...

Page 19: ...am capacity Asymmetrical services ADSL are suitable for Internet users because more information is usually downloaded than uploaded For example a simple button click in a web browser can start an exte...

Page 20: ......

Page 21: ...is part is structured as a step by step guide to help you connect install and set up your Prestige to operate on your network and to access the Internet Described are Key Features and Applications Har...

Page 22: ......

Page 23: ...is packed with a number of features that give it the flexibility to provide a complete networking solution for almost any user High Speed Internet Access Your Prestige ADSL router can support downstr...

Page 24: ...n either half duplex or full duplex mode depending on your Ethernet network Dynamic DNS Support With Dynamic DNS support you can have a static hostname alias for a dynamic IP address allowing the host...

Page 25: ...he clients IP Alias IP Alias allows you to partition a physical network into logical networks over the same Ethernet interface The Prestige supports three logical LAN interfaces via its single physica...

Page 26: ...Layer 5 RFC 1483 encapsulation over ATM MAC encapsulated routing ENET encapsulation as well as PPP over Ethernet RFC 2516 Network Management Menu driven SMT System Management Terminal management Embe...

Page 27: ...the integrity of the following circuitry FLASH memory ADSL circuitry RAM LAN port Filters The Prestige s packet filtering functions allows added network security and management Ease of Installation Y...

Page 28: ...nection for example T1 OC3 DS3 ATM or Frame Relay Think of it as the equivalent of a modem rack for ADSL A typical Internet Access application is shown below Figure 1 1 Internet Access Application Int...

Page 29: ...Prestige 650H 17 ADSL Router Getting To Know Your Prestige 1 7 Figure 1 2 LAN to LAN Application...

Page 30: ......

Page 31: ...2 1 Front Panel LED Description LED COLOR STATUS DESCRIPTION On The Prestige is receiving power PWR Green Off The Prestige is not receiving power On The Prestige is functioning properly Blinking The...

Page 32: ...restige is sending receiving data LAN 1 4 100M Orange Off The Prestige does not have 100Mb Ethernet connection On The Prestige is linked successfully to a DSLAM Blinking The Prestige is initializing t...

Page 33: ...el and Connections 2 2 1 DSL Port Connect the Prestige directly to the wall jack using the included DSL cable Connect a microfilter s between the wall jack and your telephone s A microfilter acts as l...

Page 34: ...rt the Prestige Upload the default configuration file by holding this button in for more than 3 seconds Refer to section 2 8 for information on the resetting your Prestige 2 3 Additional Installation...

Page 35: ...k 2 5 Telephone Microfilters Telephone voice transmissions take place in the lower frequency range 0 4KHz while ADSL transmissions take place in the higher bandwidth range above 4KHz A microfilter act...

Page 36: ...urator refer to the Read Me First SMT System Management Terminal Access the SMT via LAN or WAN using Telnet 2 7 1 Connect to your Prestige Using Telnet The following procedure details how to telnet in...

Page 37: ...en displays an for each character you type Please note that if there is no activity for longer than five minutes after you log in your Prestige will automatically log you out and will display a blank...

Page 38: ...button on the rear panel of the Prestige to upload the default configuration file hold this button in for more than 3 seconds Use this method for cases when the password or IP address of the Prestige...

Page 39: ...Prestige 650H 17 ADSL Router Hardware Installation and Initial Setup 2 9 Figure 2 6 Prestige SMT Menu Overview...

Page 40: ...TER or UP DOWN arrow keys Within a menu press ENTER to move to the next field You can also use the UP DOWN arrow keys to move to the previous and the next field respectively Entering information Type...

Page 41: ...menu to specify inside servers when NAT is enabled 21 Filter Set Configuration Use this menu to set up filters to provide security etc 22 SNMP Configuration Use this menu to set up SNMP related parame...

Page 42: ...al Setup contains administrative and system related information shown next The System Name field is for identification purposes However because some ISPs check this name you should enter your computer...

Page 43: ...P address First of all you need to have registered a dynamic DNS account with www dyndns org This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a DNS name...

Page 44: ...and type sys domainname to see the current domain name used by your gateway If you want to clear this field just press the SPACE BAR The domain name entered by you is given priority over the ISP assi...

Page 45: ...nter your user name Password Enter the password assigned to you Enable Wildcard Your Prestige supports DYNDNS Wildcard Press SPACE BAR and then ENTER to select Yes or No This field is N A when you cho...

Page 46: ...rs please read the Filter Set Configuration chapter first then return to this menu to define the filter sets 2 13 Protocol Dependent Ethernet Setup Depending on the protocols for your applications you...

Page 47: ...are satisfactory you can skip to TCP IP Ethernet Setup and DHCP to enter the DNS server address es if your ISP gives you explicit DNS server address es If you wish to change the factory defaults or to...

Page 48: ...ed that you select a network number from 192 168 0 0 to 192 168 255 0 ignoring the trailing zero and you must enable the Single User Account feature of the Prestige The Internet Assigned Number Author...

Page 49: ...For more information on address assignment please refer to RFC 1597 Address Allocation for Private Internets and RFC 1466 Guidelines for Management of IP Address Space 3 3 3 RIP Setup RIP Routing Inf...

Page 50: ...client machines along with the assigned IP address and subnet mask There are two ways that an ISP disseminates the DNS server addresses The first is for an ISP to tell a customer the DNS server addre...

Page 51: ...address 224 0 0 2 is assigned to the multicast routers group The Prestige supports both IGMP version 1 IGMP v1 and version 2 IGMP v2 At start up the Prestige queries all directly connected networks t...

Page 52: ...and press ENTER to configure the second and third network Figure 3 4 Menu 3 2 TCP IP and DHCP Setup Menu 3 2 TCP IP and DHCP Setup DHCP Setup DHCP Server Client IP Pool Starting Addres 192 168 1 33 Si...

Page 53: ...direction Choices are None Both In Only or Out Only None Version Press SPACE BAR to select the RIP version Choices are RIP 1 RIP 2B or RIP 2M RIP 1 Incoming Protocol Filters Enter the filter set s you...

Page 54: ...General Setup 3 8 TCP IP Ethernet Setup and DHCP Use menu 3 2 to configure your Prestige for TCP IP To edit menu 3 2 enter 3 from the main menu to display Menu 3 Ethernet Setup When menu 3 appears pre...

Page 55: ...ollowing items need to be set Server default Client IP Pool Starting Address This field specifies the first of the contiguous addresses in the IP address pool 192 168 1 33 Size of Client IP Pool This...

Page 56: ...ng use the subnet mask computed by the Prestige 255 255 255 0 RIP Direction Press SPACE BAR to select the RIP direction Choices are Both In Only Out Only or None Both default Version Press SPACE BAR t...

Page 57: ...or mutual agreement each protocol is assigned to a specific virtual circuit for example VC1 carries IP etc VC based multiplexing may be dominant in environments where dynamic creation of large numbers...

Page 58: ...PPP over ATM Adaptation Layer 5 AAL5 Refer to RFC 1661 for more information on PPP 3 11 4 RFC 1483 RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation Layer 5 AAL5 The...

Page 59: ...gure your Prestige for Internet access you need to collect your Internet account information from your ISP and telephone company Use the following table to record your Internet Account Information Not...

Page 60: ...transmission of real time data such as audio and video connections Peak Cell Rate PCR is the maximum rate at which the sender can send cells This parameter may be lower but not higher than the maximum...

Page 61: ...n how to configure your Prestige for Internet access Menu 4 Internet Access Setup ISP s Name MyISP Encapsulation RFC 1483 Multiplexing VC based VPI 8 VCI 35 ATM QoS Type CBR Peak Cell Rate PCR 0 Susta...

Page 62: ...Peak Cell Rate PCR This is the maximum rate at which the sender can send cells Type the PCR 0 Sustain Cell Rate SCR 0 Sustained Cell Rate is the mean cell rate of a bursty on off traffic source that c...

Page 63: ...ure Please see the NAT Chapter for more details on the SUA Single User Account feature SUA Only Address Mapping Set Type the numbers of mapping sets 1 8 to use with NAT See the NAT chapter for details...

Page 64: ......

Page 65: ...Advanced Applications II P Pa ar rt t I II I ADVANCED APPLICATIONS This part shows how to configure Remote Node Remote Node TCP IP and NAT...

Page 66: ......

Page 67: ...ents both the remote gateway and the network behind it across a WAN connection When you use menu 4 to set up Internet access you are configuring one of the remote nodes 4 1 Remote Node Setup This sect...

Page 68: ...mbinations in such an application Scenario 1 One VC Multiple Protocols PPPoA RFC 2364 encapsulation with VC based multiplexing is the best combination because no extra protocol identifying headers are...

Page 69: ...mote Node Profile In Menu 11 1 Remote Node Profile fill in the fields as described in the following table Table 4 1 Remote Node Profile Menu Fields FIELD DESCRIPTION EXAMPLE Rem Node Name Type a uniqu...

Page 70: ...here N A Incoming Rem Login Type the login name that this remote node will use to call your Prestige The login name and the Rem Password will be used to authenticate this node Rem Password Type the pa...

Page 71: ...ated Budget is 10 minutes and the Period hr is 1 hour 0 default Schedule Sets This field is only applicable for PPPoE and PPPoA encapsulation You can apply up to four schedule sets here For more detai...

Page 72: ...For the TCP IP parameters perform the following steps to edit Menu 11 3 Remote Node Network Layer Options as shown next Step 1 In menu 11 1 make sure IP is among the protocols in the Route field Step...

Page 73: ...Select SUA Only if you have just one public WAN IP address for your Prestige The SMT uses Address Mapping Set 255 menu 15 1 see section 7 3 1 Select None to disable NAT Address Mapping Set When Full F...

Page 74: ...ve the cursor to the Edit Filter Sets field in menu 11 1 then press SPACE BAR to select Yes Press ENTER to display Menu 11 5 Remote Node Filter Use Menu 11 5 Remote Node Filter to specify the filter s...

Page 75: ...sing the Internet Security in the Web Configurator all your custom incoming protocol filters will be replaced by rule 11 and 12 Menu 11 5 Remote Node Filter Input Filter Sets protocol filters 12 11 de...

Page 76: ......

Page 77: ...edit Menu 11 6 Remote Node ATM Layer Options In menu 11 1 move the cursor to the Edit ATM Options field and then press SPACE BAR to select Yes Press ENTER to display Menu 11 6 Remote Node ATM Layer O...

Page 78: ...d of My Wan Addr in menu 11 3 Refer to the previous figure LAN and WAN IPs for a brief review of what a WAN IP is My WAN Addr indicates the local Prestige WAN IP while Rem IP Addr indicates the peer W...

Page 79: ...in Menu 11 1 Remote Node Profile as shown in the following table For more details on the IP Option fields refer to Internet Access chapter Table 5 1 TCP IP Related Fields in Menu 11 1 Remote Node Prof...

Page 80: ...0 0 then type 192 168 1 1 its LAN IP address here 0 0 0 0 default Rem Subnet Mask Type the subnet mask assigned to the remote node 0 0 0 0 default My WAN Addr Some implementations especially UNIX der...

Page 81: ...2 Private This determines if the Prestige will include the route to this remote node in its RIP broadcasts If set to Yes this route is kept private and not included in RIP broadcast If No the route t...

Page 82: ...1 However the Prestige is unable to route a packet to network N3 because it does not know that there is a route through remote node Router 1 via Router 2 The static routes allow you to tell the Presti...

Page 83: ...elds FIELD DESCRIPTION Route This is the index number of the static route that you chose in menu 12 1 Route Name Type a descriptive name for this route This is for identification purpose only Menu 12...

Page 84: ...nation On the LAN the gateway must be a router on the same segment as your Prestige over WAN the gateway must be the IP address of one of the remote nodes Metric Metric represents the cost of transmis...

Page 85: ...n on bridging unless you need to support protocols other than IP on your network For IP enable the routing if you need it do not bridge what the Prestige can route 6 2 Bridge Ethernet Setup Basically...

Page 86: ...menu press ENTER at the prompt Press ENTER to confirm or ESC to cancel to save your configuration or press ESC to cancel and go back to the previous screen 6 2 2 Bridge Static Route Setup Similar to n...

Page 87: ...Type the MAC address of the destination computer that you want to bridge the packets to IP Address If available type the IP address of the destination computer that you want to bridge the packets to...

Page 88: ......

Page 89: ...dress refers to the IP address of a host when the packet is in the local network while the global address refers to the IP address of the host when the same packet is traveling in the WAN side Note th...

Page 90: ...you do not define any servers for Many to One and Many to Many Overload mapping see Table 7 2 NAT offers the additional benefit of firewall protection With no servers defined your Prestige filters ou...

Page 91: ...Works 7 1 4 NAT Application The following figure illustrates a possible NAT application where three inside LANs logical LANs using IP Alias behind the Prestige can communicate with three distinct WAN...

Page 92: ...bal IP address 2 Many to One In Many to One mode the Prestige maps multiple local IP addresses to one global IP address This is equivalent to SUA for instance PAT port address translation ZyXEL s Sing...

Page 93: ...commended that you use the DMZ port for these servers instead Port numbers do not change for One to One and Many to Many No Overload NAT mapping types The following table summarizes these types Table...

Page 94: ...AN IP addresses for your Prestige 7 2 2 Applying NAT You apply NAT via menus 4 or 11 3 as displayed next The next figure shows you how to apply NAT for Internet access in menu 4 Enter 4 from the main...

Page 95: ...o disable NAT None NAT When you select SUA Only the SMT uses Address Mapping Set 255 menu 15 1 see section 7 3 1 Choose SUA Only if you have just one public WAN IP address for your Prestige SUA Only 7...

Page 96: ...section 7 4 for further information on these menus To configure NAT enter 15 from the main menu to bring up the following screen Figure 7 5 Menu 15 NAT Setup 7 3 1 Address Mapping Sets Enter 1 to brin...

Page 97: ...End IP is 255 255 255 255 0 0 0 0 255 255 255 255 Global Start IP This is the starting global IP address IGA If you have a dynamic IP enter 0 0 0 0 as the Global Start IP 0 0 0 0 Global End IP This is...

Page 98: ...later and the values are displayed here Ordering Your Rules Ordering your rules is important because the Prestige applies the rules in the order that you specify When a rule matches the current packet...

Page 99: ...e the selected rule and then all the rules after the selected one will be advanced one rule None disables the Select Rule item Edit Select Rule When you choose Edit Insert Before or Delete in the prev...

Page 100: ...hen put the Start IP as 0 0 0 0 and the End IP as 255 255 255 255 This field is N A for One to One and Server types N A Global IP Start This is the starting global IP address IGA If you have a dynamic...

Page 101: ...r to specify a range of port numbers In addition to the servers for specified services NAT supports a default server A service request that does not have a server explicitly designated for it is forwa...

Page 102: ...ing a Server behind NAT Follow these steps to configure a server behind NAT Step 1 Enter 15 in the main menu to go to Menu 15 NAT Setup Step 2 Enter 2 to display Menu 15 2 NAT Server Sets as shown nex...

Page 103: ...the following figure you have a computer acting as an FTP Telnet and SMTP server ports 21 23 and 25 at 192 168 1 33 Step 6 Press ENTER at the Press ENTER to confirm prompt to save your configuration...

Page 104: ...Prestige 650H 17 ADSL Router 7 16 NAT Figure 7 12 Multiple Servers Behind NAT Example...

Page 105: ...ss assigned by your ISP Figure 7 13 NAT Example 1 Figure 7 14 Menu 4 Internet Access NAT Example Menu 4 Internet Access Setup ISP s Name MyISP Encapsulation ENET ENCAP Multiplexing LLC based VPI 8 VCI...

Page 106: ...ead only option from the Network Address Translation field in menus 4 and 11 3 is specifically pre configured to handle this case 7 5 2 Example 2 Internet Access with an Inside Server Figure 7 15 NAT...

Page 107: ...first inside FTP server for FTP traffic in both directions 1 1 mapping giving both local and global IP addresses Rule 2 Map the second IGA to our second inside FTP server for FTP traffic in both direc...

Page 108: ...the main menu Step 3 Enter 1 to configure the Address Mapping Sets Step 4 Enter 1 to begin configuring this new set Enter a Set Name choose the Edit Action and then enter 1 for the Select Rule field P...

Page 109: ...rt 10 132 50 1 End N A Server Mapping Set N A Press ENTER to Confirm or ESC to Cancel Press Space Bar to Toggle Menu 11 3 Remote Node Network Layer Options IP Options Bridge Options IP Address Assignm...

Page 110: ...ample3 Idx Local Start IP Local End IP Global Start IP Global End IP Type 1 192 168 1 10 10 132 50 1 1 1 2 192 168 1 11 10 132 50 2 1 1 3 0 0 0 0 255 255 255 255 10 132 50 3 M 1 4 10 132 50 3 Server 5...

Page 111: ...do not change for Many to Many No Overload and One to One NAT mapping types The following figure illustrates this Figure 7 21 NAT Example 4 Other applications such as some gaming programs are NAT unfr...

Page 112: ...Address Mapping Rule Type Many to Many No Overload Local IP Start 192 168 1 10 End 192 168 1 12 Global IP Start 10 132 50 1 End 10 132 50 3 Server Mapping Set N A Press ENTER to Confirm or ESC to Can...

Page 113: ...t I II II I ADVANCED MANAGEMENT This part discusses Filtering SNMP System Information and Diagnostic Firmware and Configuration File Maintenance System Maintenance and Information IP Policy Routing Ca...

Page 114: ......

Page 115: ...vided into incoming and outgoing filters depending on the direction of the packet relative to a port Data filtering can be applied on either the WAN side or the Ethernet side Call filtering is used to...

Page 116: ...s that follow The following figure illustrates the logic flow when executing a filter rule Data Outgoing Packet Drop packet Built in default Call Filters User defined Call Filters if applicable Initia...

Page 117: ...tch Next Filter Set Next Filter Set Available Accept Packet Drop Packet Yes No Yes No Yes Packet intoFilter Filter Set Forward Drop No Check Next Rule Figure 8 2 Filter Rule Process You can apply up t...

Page 118: ...a Filter Set To configure a filter set follow the steps shown next Step 1 Enter 21 in the main menu to display Menu 21 Filter Set Configuration Figure 8 3 Menu 21 Filter Set Configuration Step 2 Type...

Page 119: ...0 0 DA 0 0 0 0 DP 138 N D N 3 Y IP Pr 6 SA 0 0 0 0 DA 0 0 0 0 DP 139 N D N 4 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 137 N D N 5 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 138 N D N 6 Y IP Pr 17 SA 0 0 0 0 DA 0...

Page 120: ...complete N means there are no more rules to check You can specify an action to be taken for instance forward the packet drop the packet or check the next rule For the latter the next rule is independe...

Page 121: ...fferent Use SPACE BAR to select the type of rule that you want to create in the Filter Type field and press ENTER to open the respective menu To speed up filtering all rules in a filter set must be of...

Page 122: ...AR and then ENTER to choose a rule Parameters displayed for each type will be different Choices are TCP IP Filter Rule or Generic Filter Rule TCP IP Filter Rule Active Select Yes to activate or No to...

Page 123: ...ter Equal or Not Equal None Source IP Addr Type the source IP Address of the packet you want to filter A 0 0 0 0 field is ignored IP address IP Mask Type the IP mask to apply to the Source IP Addr fie...

Page 124: ...he action for a matching packet Choices are Check Next Rule Forward or Drop Check Next Rule default Action Not Matched Select the action for a packet not matching the rule Choices are Check Next Rule...

Page 125: ...ctive Check IP Protocol Drop Drop Packet Accept Packet Drop Forward Check Next Rule Check Next Rule Check Next Rule Forward Not Matched Yes No Check Src IP Addr Apply SrcAddrMask to Src Addr Matched C...

Page 126: ...match The Mask and Value fields are specified in hexadecimal numbers Note that it takes two hexadecimal digits to represent a byte so if the length is 4 the value in either field will take 8 digits fo...

Page 127: ...he data portion before comparison Value Type the value in Hexadecimal to compare with the data portion More If Yes a matching packet is passed to the next filter rule before an action is taken or else...

Page 128: ...t on the wire Therefore the Prestige applies the protocol filters to the native IP address and port number before NAT for outgoing packets and after NAT for incoming packets On the other hand the gene...

Page 129: ...et Filter Step 1 Enter 21 from the main menu to open Menu 21 Filter Set Configuration Step 2 Enter the index number of the filter set you want to configure in this case 3 Step 3 Type a descriptive nam...

Page 130: ...0 0 0 Port Port Comp None TCP Estab No More No Log None Action Matched Drop Action Not Matched Forward Press ENTER to Confirm or ESC to Cancel Press SPACE BAR to choose this filter rule type The first...

Page 131: ...ows you where to apply the filter s after you design it them Sets of factory default filter rules have been configured in menu 21 but have not been applied to filter traffic Menu 21 1 Filter Rules Sum...

Page 132: ...want to apply as appropriate You can choose up to four filter sets from twelve by typing their numbers separated by commas for example 3 4 6 11 The factory default filter set NetBIOS_LAN is inserted...

Page 133: ...or PPPoE encapsulation Menu 11 5 Remote Node Filter Input Filter Sets protocol filters 3 device filters Output Filter Sets protocol filters 1 device filters Call Filter Sets Protocol filters Device f...

Page 134: ......

Page 135: ...tocol used for exchanging management information between network devices SNMP is a member of the TCP IP protocol suite Your Prestige supports SNMP agent functionality which allows a manager station to...

Page 136: ...sing these objects SNMP itself is a simple request response protocol based on the manager agent model The manager issues a request and the agent returns responses using the following protocol operatio...

Page 137: ...restige will only respond to SNMP messages from this address A blank default field means your Prestige will respond to all SNMP messages it receives regardless of source 0 0 0 0 Trap Community Type th...

Page 138: ...software reboot 3 linkUp defined in RFC 1215 A trap is sent with the port number 4 authenticationFailure defined in RFC 1215 A trap is sent to the manager when receiving any SNMP get or set requiremen...

Page 139: ...t System Status is a tool that can be used to monitor your Prestige Specifically it gives you information on your ADSL telephone line status number of packets sent and received To get to System Status...

Page 140: ...transmission rate in bytes per second Rx B s Shows the receiving rate in bytes per second Up Time Time this channel has been connected to the current remote node My WAN IP from ISP The IP address of...

Page 141: ...Speed Shows the upstream transfer rate in kbps Downstream Speed Shows the downstream transfer rate in kbps CPU Load Specifies the percentage of CPU utilization 10 2 System Information To get to the S...

Page 142: ...pset Vendor Displays the vendor of the ADSL chipset and DSL version Standard This refers to the operational protocol the Prestige and the DSLAM Digital Subscriber Line Access Multiplexer are using LAN...

Page 143: ...lay the error log in the system After the Prestige finishes displaying the error log you will have the option to clear it Samples of typical error and information messages are presented in the next fi...

Page 144: ...ons The log facility lets you log the message in different server files Refer to your UNIX manual Types CDR Call Detail Record CDR logs all data phone line activity if set to Yes Packet Triggered The...

Page 145: ...er Jul 19 11 28 39 192 168 102 2 ZYXEL Packet Trigger Protocol 1 Data 4500003c100100001f010004c0a86614ca849a7b08004a5c020001006162636465666768696a6b6c6d6e6f70717273 74 Jul 19 11 28 56 192 168 102 2 ZY...

Page 146: ...n Menu 24 4 System Maintenance Diagnostic The following table describes the diagnostic tests available in menu 24 4 for and the connections Table 10 4 System Maintenance Menu Diagnostic FIELD DESCRIPT...

Page 147: ...ts the filenames are similar to those seen next ftp put firmware bin ras This is a sample ftp session showing the transfer of the computer file firmware bin to the Prestige ftp get rom 0 config cfg Th...

Page 148: ...ough TFTP can also be used Please note that the terms download and upload are relative to the computer Download means to transfer from the Prestige to the computer while upload means from your compute...

Page 149: ...it to exit the ftp prompt Figure 11 2 FTP Session Example The following table describes some of the commands that you may see in third party FTP clients Table 11 2 General Commands for Third Party FTP...

Page 150: ...the telnet client and accepts TFTP requests only from this address Step 2 Put the SMT in command interpreter CI mode by entering 8 in Menu 24 System Maintenance Step 3 Enter command sys stdio 0 to di...

Page 151: ...file bin extension or configuration file rom extension on your computer Remote File This is the filename on the Prestige The filename for the firmware is ras and for the configuration file is rom 0 B...

Page 152: ...ed within Menu 24 7 System Maintenance Upload Firmware 1 Upload System Firmware 2 Upload System Configuration File Enter Menu Selection Number Menu 24 6 Restore Configuration To transfer the firmware...

Page 153: ...t for Starting XMODEM upload message before activating Xmodem upload on your terminal 4 After successful firmware upload enter atgo to restart the system Warning Proceeding with the upload will erase...

Page 154: ...your computer and renames it config rom See earlier in this chapter for more information on filename conventions Step 7 Enter quit to exit the ftp prompt Figure 11 8 FTP Session Example More commands...

Page 155: ...he computer The file name for the firmware is ras and the configuration file is rom 0 rom zero not capital o Note that the telnet connection must be active and the SMT in CI mode before and during the...

Page 156: ......

Page 157: ...SMT by selecting menu 24 8 See the included disk or the zyxel com web site for more detailed information on CI commands Enter 8 from Menu 24 System Maintenance A list of valid commands can be found b...

Page 158: ...opped and any future outgoing calls will be blocked To access the call control menu select option 9 in menu 24 to go to Menu 24 9 System Maintenance Call Control as shown in the next table Figure 12 3...

Page 159: ...tion is selected Table 12 1 Budget Management FIELD DESCRIPTION EXAMPLE Remote Node Enter the index number of the remote node you want to reset just one in this case 1 Connection Time Total Budget Thi...

Page 160: ...System Maintenance Time and Date Setting to update the time and date settings of your Prestige as shown in the following screen Figure 12 6 Menu 24 10 System Maintenance Time and Date Setting Menu 24...

Page 161: ...of this information Current Time This field displays an updated time only when you reenter this menu New Time Enter the new time in hour minute and second format Current Date This field displays an up...

Page 162: ......

Page 163: ...enable the backbone to prioritize traffic Cost Savings IPPR allows organizations to distribute interactive traffic on high bandwidth high cost paths while using low cost paths for batch traffic Load S...

Page 164: ...ex of the policy set you want to configure to open Menu 25 1 IP Routing Policy Setup Menu 25 1 shows the summary of a policy set including the criteria and the action of a single policy and whether a...

Page 165: ...P 6 T NM PR 0 GW 192 168 1 1 T MT PR 0 2 N __________________________________________________________________________ __________________________________________________________________________ 3 N ___...

Page 166: ...rom Don t Care Normal Min Delay Max Thruput Min Cost or Max Reliable Precedence Precedence value of the incoming packet Press SPACE BAR and then ENTER to select a value from 0 to 7 or Don t Care Packe...

Page 167: ...s specified as 0 0 0 0 Type of Service Set the new TOS value of the outgoing packet Prioritize incoming network traffic by choosing No Change Normal Min Delay Max Thruput Max Reliable or Min Cost Prec...

Page 168: ...IP Addr 0 0 0 0 Rem Subnet Mask 0 0 0 0 My WAN Addr 0 0 0 0 NAT Full Feature Address Mapping Set 2 Metric 2 Private No RIP Direction Both Version RIP 2B Multicast IGMP v2 IP Policies 2 4 7 9 Press ENT...

Page 169: ...e Web packets to the Internet using one policy and route FTP packets to a remote network using another policy See the next figure Figure 13 6 Example of IP Policy Routing To force Web packets coming f...

Page 170: ...5 1 for this set to route packets from any host IP 0 0 0 0 means any host with protocol TCP and port FTP access through another gateway 192 168 1 100 Menu 25 1 1 IP Routing Policy Policy Set Name set1...

Page 171: ...er 0 0 0 0 Remote DHCP Server N A TCP IP Setup IP Address 192 168 1 1 IP Subnet Mask 255 255 255 0 RIP Direction Both Version RIP 1 Multicast None IP Policies 1 2 Edit IP Alias No Press ENTER to Confi...

Page 172: ......

Page 173: ...ule Setup as shown next Figure 14 1 Menu 26 Schedule Setup Lower numbered sets take precedence over higher numbered sets thereby avoiding scheduling conflicts For example if sets 1 2 3 and 4 in are ap...

Page 174: ...ose Yes and press ENTER to activate the schedule set Yes Start Date Enter the start date when you wish the set to take effect in year month date format Valid dates are from the present to 2036 Februar...

Page 175: ...On means that the connection is maintained whether or not there is a demand call on the line and will persist for the time period specified in the Duration field Forced Down means that the connection...

Page 176: ...e Node Profile Rem Node Name ChangeMe Route IP Active Yes Bridge No Encapsulation PPPoE Edit IP Bridge No Multiplexing VC based Edit ATM Options No Service Name Telco Option Incoming Allocated Budget...

Page 177: ...15 2 FTP You can upload and download Prestige firmware and configuration files using FTP To use this feature your computer must have an FTP client 15 3 Web You can use the Prestige s embedded web conf...

Page 178: ...enu 24 11 Remote Management Control Table 15 1 Menu 24 11 Remote Management Control FIELD DESCRIPTION EXAMPLE Telnet Server FTP Server Web Server Each of these read only labels denotes a service that...

Page 179: ...not match the client IP address If it does not match the Prestige will disconnect the session immediately 4 There is already another remote management session of the same type Telnet FTP or Web runni...

Page 180: ......

Page 181: ...Additional Information IV P Pa ar rt t I IV V ADDITIONAL INFORMATION This part contains Troubleshooting Appendices and the Index...

Page 182: ......

Page 183: ...wer source are both turned on If the error persists you may have a hardware problem In this case you should contact your vendor 16 2 Problems with the LAN Interface Table 16 2 Troubleshooting the LAN...

Page 184: ...ield and password in the My Password field in Menu 4 Internet Access Setup I cannot connect to a remote node or ISP Check menu 4 or menu 11 1 to verify the Encapsulation for the remote node 16 4 Probl...

Page 185: ...ord Refer to the Resetting the Prestige section in the User s Guide for details 16 6 Problems with Telnet Table 16 6 Troubleshooting Telnet PROBLEM CORRECTIVE ACTION Refer to the Remote Management Lim...

Page 186: ......

Page 187: ...using PPP Benefits of PPPoE PPPoE offers the following benefits 1 It provides you with a familiar dial up networking DUN user interface 2 It lessens the burden on the carriers of provisioning virtual...

Page 188: ...P frames to the ISP The L2TP tunnel is capable of carrying multiple PPP sessions With PPPoE the VC Virtual Circuit is equivalent to the dial up connection and is between the modem and the AC as oppose...

Page 189: ...een circuit end points Diagram 3 Virtual Circuit Topology Think of a virtual path as a cable that contains a bundle of wires The cable connects two points and wires within the cable provide individual...

Page 190: ...ption 12 W Safety Standards UL CUL CSA UL 1310 CSA C22 2 No 223 NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model DV 121A25 Input Power AC120Volts 60Hz 19W Output Power AC12Volts 1 25A Power Consum...

Page 191: ...Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriate TCP IP components are installed configure the TCP IP settings in order to communicate with your network Setting up Y...

Page 192: ...DNS Configuration tab If you do not know your DNS information select Disable DNS If you know your DNS information select Enable DNS and type the information in the fields below you may not need to fil...

Page 193: ...s If you have previously configured DNS servers click Advanced and then the DNS tab to order them 5 Click Advanced If you do not know your gateway s IP address remove any previously installed gateways...

Page 194: ...etric the number of transmission hops clear the Automatic metric check box and type a metric in Metric Click Add Repeat the previous three steps for each default gateway you want to add Click OK when...

Page 195: ...m the Configure list 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box...

Page 196: ...12 Connecting the Prestige 2 3 Connections Additional Requirements 2 4 ADSL Line 2 3 Power Adapter 2 4 Rear Panel 2 2 Copyright ii Cost Of Transmission 4 7 5 5 5 8 Country Code 10 4 CPU Load 10 3 Cus...

Page 197: ...eway Node 6 3 General Setup 2 12 H Hidden Menus 2 10 hop count 5 5 Hop Count 4 7 5 8 HTTP 7 14 I IANA 3 2 3 3 IGMP support 4 8 5 5 Interactive Applications 13 1 Internet access 3 1 Internet Access 1 1...

Page 198: ...Programs 7 23 Ordering Rules 7 10 What NAT does 7 2 Network Address Translation 3 17 Network Address Translation NAT 7 1 Network Management 1 4 P Packet Error 10 2 Received 10 3 Transmitted 10 3 Packe...

Page 199: ...onventions xviii Syslog 10 5 Syslog IP Address 10 6 Syslog Server 10 5 System Diagnostic 10 8 Log and Trace 10 5 Syslog and Accounting 10 5 System Information 10 4 System Status 10 1 System Informatio...

Page 200: ...Prestige 650H 17 ADSL Router N Index VPI VCI 3 11 Z ZyNOS 11 1 11 2 ZyNOS F W Version 11 1 ZyXEL Limited Warranty Note iv...

Search results

Summary of Contents for Prestige 650H-17

Reviews:

ZyXEL Communications Prestige 650H-17, User Manual, Page: 102 / 200

Search results

Summary of Contents for Prestige 650H-17

Reviews: