background image

Prestige 660RU-Tx Series

ADSL2+ Ethernet/USB Gateway

User’s Guide

Version 3.40

January 2005

Summary of Contents for ADSL2+ Ethernet/USB Gateway 660RU-Tx Series

Page 1: ...Prestige 660RU Tx Series ADSL2 Ethernet USB Gateway User s Guide Version 3 40 January 2005 ...

Page 2: ......

Page 3: ...d by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it convey any license under its patent rights nor the patent rights of others ZyXEL further reserves the right to make changes in any products described herein without notice This publication is subj...

Page 4: ...used in accordance with the instructions may cause harmful interference to radio communications If this equipment does cause harmful interference to radio television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separatio...

Page 5: ...dy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be held liable for indirect or consequential damages of any kind of character to the purchaser To obtain the services of this warranty contact ZyXEL s Service Center for your Return Material Auth...

Page 6: ... de 49 2405 6909 0 www zyxel de ZyXEL Deutschland GmbH Adenauerstr 20 A2 D 52146 Wuerselen Germany sales zyxel de 49 2405 6909 99 FRANCE info zyxel fr 33 0 4 72 52 97 97 www zyxel fr ZyXEL France 1 rue des Vergers Bat 1 C 69760 Limonest France 33 0 4 72 52 19 20 SPAIN support zyxel es 34 902 195 420 www zyxel es ZyXELCommunications AlejandroVillegas33 1º 28043Madrid Spain sales zyxel es 34 913 005...

Page 7: ...ing the Prestige 30 1 1 1 Features of the Prestige 31 1 1 2 Applications for the Prestige 35 1 1 2 1 Internet Access 35 1 1 2 2 LAN to LAN Application 35 1 1 3 Prestige Hardware Installation and Connection 36 1 1 4 Front Panel LEDs 36 Chapter 2 Introducing the Web Configurator 38 2 1 Web Configurator Overview 38 2 1 1 Accessing the Prestige Web Configurator 38 2 1 2 Resetting the Prestige 39 2 1 2...

Page 8: ...P Encapsulation 45 3 2 1 4 Private IP Addresses 46 3 2 2 Nailed Up Connection PPP 46 3 2 3 NAT 46 3 2 4 Internet Access Wizard Setup Second Screen 46 3 2 5 DHCP Setup 50 3 2 5 1 IP Pool Setup 50 3 2 6 Internet Access Wizard Setup Third Screen 50 3 2 7 Internet Access Wizard Setup Connection Test 53 3 2 7 1 Test Your Internet Connection 53 Chapter 4 Password Setup 54 4 1 Password Overview 54 4 1 1 ...

Page 9: ...4 7 1 2 What NAT Does 75 7 1 3 How NAT Works 75 7 1 4 NAT Application 76 7 1 5 NAT Mapping Types 76 7 2 SUA Single User Account Versus NAT 77 7 3 SUA Server 78 7 3 1 Default Server IP Address 78 7 3 2 Port Forwarding Services and Port Numbers 78 7 3 3 Configuring Servers Behind SUA Example 79 7 4 Selecting the NAT Mode 79 7 5 Configuring SUA Server 80 7 6 Configuring Address Mapping 82 7 7 Editing...

Page 10: ...nfiguring UPnP 95 11 3 Installing UPnP in Windows Example 96 11 4 Using UPnP in Windows XP Example 99 Chapter 12 Maintenance 108 12 1 Maintenance Overview 108 12 2 System Status Screen 108 12 2 1 System Statistics 110 12 3 DHCP Table Screen 111 12 4 Any IP Table Screen 112 12 5 Diagnostic Screens 113 12 5 1 Diagnostic General Screen 113 12 5 2 Diagnostic DSL Line Screen 114 12 6 Firmware Screen 11...

Page 11: ...36 17 1 Internet Access Overview 136 17 2 IP Policies 136 17 3 IP Alias 136 17 4 IP Alias Setup 137 17 5 Route IP Setup 138 17 6 Internet Access Configuration 139 Chapter 18 Remote Node Configuration 142 18 1 Remote Node Setup Overview 142 18 2 Remote Node Setup 142 18 2 1 Remote Node Profile 142 18 2 2 Encapsulation and Multiplexing Scenarios 143 18 2 2 1 Scenario 1 One VC Multiple Protocols 143 ...

Page 12: ... 21 3 NAT Setup 164 21 3 1 Address Mapping Sets 164 21 3 1 1 SUA Address Mapping Set 165 21 3 1 2 User Defined Address Mapping Sets 166 21 3 1 3 Ordering Your Rules 167 21 4 Configuring a Server behind NAT 168 21 5 General NAT Examples 170 21 5 1 Example 1 Internet Access Only 170 21 5 2 Example 2 Internet Access with an Inside Server 171 21 5 3 Example 3 Multiple Public IP Addresses With Inside S...

Page 13: ... Diagnostic 203 Chapter 25 Firmware and Configuration File Maintenance 206 25 1 Filename Conventions 206 25 2 Backup Configuration 207 25 2 1 Backup Configuration 207 25 2 2 Using the FTP Command from the Command Line 208 25 2 3 Example of FTP Commands from the Command Line 208 25 2 4 GUI based FTP Clients 209 25 2 5 TFTP and FTP over WAN Management Limitations 209 25 2 6 Backup Configuration Usin...

Page 14: ...4 27 2 2 Remote Management Limitations 225 27 3 Remote Management and NAT 226 27 4 System Timeout 226 Chapter 28 IP Policy Routing 228 28 1 IP Policy Routing Overview 228 28 2 Benefits of IP Policy Routing 228 28 3 Routing Policy 228 28 4 IP Routing Policy Setup 229 28 5 Applying an IP Policy 232 28 5 1 Ethernet IP Policies 232 28 6 IP Policy Routing Example 233 Chapter 29 Call Scheduling 238 29 1...

Page 15: ...Installing Components 249 Configuring 250 Verifying Settings 251 Windows 2000 NT XP 251 Verifying Settings 255 Macintosh OS 8 9 255 Verifying Settings 257 Macintosh OS X 257 Verifying Settings 258 Appendix C IP Subnetting 260 IP Addressing 260 IP Classes 260 Subnet Masks 261 Subnetting 261 Example Two Subnets 262 Example Four Subnets 264 Example Eight Subnets 265 Subnetting With Class A and Class ...

Page 16: ...Prestige 660RU Tx Series User s Guide 15 Appendix E Virtual Circuit Topology 270 270 Appendix F Command Interpreter 272 Command Syntax 272 Command Usage 272 Appendix G Log Descriptions 274 Index 280 ...

Page 17: ...onnection Tests 53 Figure 14 Password 54 Figure 15 LAN and WAN IP Addresses 56 Figure 16 Any IP Example 60 Figure 17 LAN Setup 61 Figure 18 Example of Traffic Shaping 66 Figure 19 WAN Setup PPPoE 67 Figure 20 Traffic Redirect Example 70 Figure 21 Traffic Redirect LAN Setup 70 Figure 22 WAN Backup 71 Figure 23 How NAT Works 76 Figure 24 NAT Application With IP Alias 76 Figure 25 Multiple Servers Be...

Page 18: ...Temporarily Disconnected 117 Figure 57 Error Message 117 Figure 58 Login Screen 119 Figure 59 Prestige SMT Menu Overview 119 Figure 60 Menu 23 Change Password 122 Figure 61 Menu 1 General Setup 125 Figure 62 Menu 1 1 Configure Dynamic DNS 126 Figure 63 Menu 2 WAN Backup Setup 128 Figure 64 Menu 2 1Traffic Redirect Setup 130 Figure 65 Menu 3 LAN Setup 132 Figure 66 Menu 3 1 LAN Port Filter Setup 13...

Page 19: ... 1 255 SUA Address Mapping Rules 165 Figure 99 Menu 15 1 1 First Set 166 Figure 100 Menu 15 1 1 1 Editing Configuring an Individual Rule in a Set 168 Figure 101 Menu 15 2 NAT Server Setup 169 Figure 102 Menu 15 2 1 NAT Server Setup 169 Figure 103 Multiple Servers Behind NAT Example 170 Figure 104 NAT Example 1 170 Figure 105 Menu 4 Internet Access NAT Example 171 Figure 106 NAT Example 2 171 Figur...

Page 20: ...ce Diagnostic 204 Figure 142 Telnet in Menu 24 5 208 Figure 143 FTP Session Example 209 Figure 144 Telnet into Menu 24 6 212 Figure 145 Restore Using FTP Session Example 212 Figure 146 Telnet Into Menu 24 7 1 Upload System Firmware 213 Figure 147 Telnet Into Menu 24 7 2 System Maintenance 214 Figure 148 FTP Session Example of Firmware File Upload 215 Figure 149 Command Mode in Menu 24 218 Figure 1...

Page 21: ...ation 251 Figure 174 Windows XP Start Menu 252 Figure 175 Windows XP Control Panel 252 Figure 176 Windows XP Control Panel Network Connections Properties 253 Figure 177 Windows XP Local Area Connection Properties 253 Figure 178 Windows XP Advanced TCP IP Settings 254 Figure 179 Windows XP Internet Protocol TCP IP Properties 255 Figure 180 Macintosh OS 8 9 Apple Menu 256 Figure 181 Macintosh OS 8 9...

Page 22: ...Prestige 660RU Tx Series User s Guide 21 ...

Page 23: ...ckup 71 Table 14 NAT Definitions 74 Table 15 NAT Mapping Types 77 Table 16 Services and Port Numbers 78 Table 17 NAT Mode 80 Table 18 Edit SUA NAT Server Set 81 Table 19 Address Mapping Rules 82 Table 20 Address Mapping Rule Edit 84 Table 21 Dynamic DNS 87 Table 22 Time and Date 89 Table 23 Remote Management 92 Table 24 Configuring UPnP 95 Table 25 System Status 109 Table 26 System Status Show Sta...

Page 24: ...Generic Filter Rule 186 Table 57 Filter Sets Table 190 Table 58 Menu 22 SNMP Configuration 194 Table 59 SNMP Traps 194 Table 60 Ports and Permanent Virtual Circuits 195 Table 61 Menu 24 1 System Maintenance Status 197 Table 62 Menu 24 2 1 System Maintenance Information 199 Table 63 Menu 24 3 2 System Maintenance Syslog and Accounting 201 Table 64 Menu 24 4 System Maintenance Menu Diagnostic 204 Ta...

Page 25: ...262 Table 87 Two Subnets Example 262 Table 88 Subnet 1 263 Table 89 Subnet 2 263 Table 90 Subnet 1 264 Table 91 Subnet 2 264 Table 92 Subnet 3 264 Table 93 Subnet 4 265 Table 94 Eight Subnets 265 Table 95 Class C Subnet Planning 265 Table 96 Class B Subnet Planning 266 Table 97 System Maintenance Logs 274 Table 98 System Error Logs 275 Table 99 Packet Filter Logs 275 Table 100 ICMP Logs 275 Table ...

Page 26: ...Prestige 660RU Tx Series User s Guide 25 ...

Page 27: ...ter or carriage return key ESC means the Escape key and SPACE BAR means the Space Bar Mouse action sequences are denoted using a comma For example click the Apple icon Control Panels and then Modem means first click the Apple icon then point your mouse pointer to Control Panels and then click Modem For brevity s sake we will use e g as a shorthand for for instance and i e for that is or in other w...

Page 28: ...ossary and Web Site Please refer to www zyxel com for an online glossary of networking terms and additional support documentation User Guide Feedback Help us help you E mail all User Guide related comments questions or suggestions for improvement to techwriters zyxel com tw or send regular mail to The Technical Writing Team ZyXEL Communications Corp 6 Innovation Road II Science Based Industrial Pa...

Page 29: ...he upstream capacity Asymmetrical services ADSL are suitable for Internet users because more information is usually downloaded than uploaded For example a simple button click in a web browser can start an extended download that includes graphics and text As data rates increase the carrying distance decreases That means that users who are beyond a certain distance from the telephone company s centr...

Page 30: ...Prestige 660RU Tx Series User s Guide 29 Introduction to DSL ...

Page 31: ...ovided with both USB and Ethernet ports computers can share local resources such as printers and files and access to the Internet simultaneously Models ending in 1 for example P660RU T1 denote a device that works over the analog telephone system POTS Plain Old Telephone Service Models ending in 3 denote a device that works over ISDN Integrated Synchronous Digital System Models ending in 7 denote a...

Page 32: ...o web screen s for information input or troubleshooting Any IP The Any IP feature allows a computer to access the Internet and the Prestige without changing the network settings such as IP address and subnet mask of the computer when the IP addresses of the computer and the Prestige are not in the same subnet USB Port The USB port is useful if you have an USB enabled computer that does not have a ...

Page 33: ...and adjust appropriately without manual intervention It allows data transfer of either 10 Mbps or 100 Mbps in either half duplex or full duplex mode depending on your Ethernet network Auto Crossover MDI MDI X 10 100 Mbps Ethernet Interface s These interfaces automatically adjust to either a crossover or straight through Ethernet cable Dynamic DNS Support With Dynamic DNS support you can have a sta...

Page 34: ...cal networks over the same Ethernet interface The Prestige supports three logical LAN interfaces via its single physical Ethernet interface with the Prestige itself as the gateway for each LAN network IP Policy Routing IPPR Traditionally routing is based on the destination address only and the router takes the shortest path to forward a packet IP Policy Routing IPPR provides a mechanism to overrid...

Page 35: ...nt Relay Built in Diagnostic Tools Syslog Telnet Support Password protected telnet access to internal configuration manager TFTP FTP server firmware upgrade and configuration backup support supported Supports OAM F4 F5 loop back AIS and RDI OAM cells Other PPPoE Features PPPoE idle time out PPPoE Dial on Demand Diagnostics Capabilities The Prestige can perform self diagnostic tests These tests che...

Page 36: ...xer providers A DSLAM is a rack of ADSL line cards with data multiplexed into a backbone network interface connection for example T1 OC3 DS3 ATM or Frame Relay Think of it as the equivalent of a modem rack for ADSL A typical Internet access application is shown below Figure 1 Prestige Internet Access Application Internet Single User Account For a SOHO Small Office Home Office environment your Pres...

Page 37: ... On The Prestige has a successful 10Mbps Ethernet connection Blinking The Prestige is receiving or sending data Amber On The Prestige has a successful 100Mbps Ethernet connection Blinking The Prestige is receiving or sending data Off The LAN is not connected DSL Green On The Prestige is linked successfully to a DSLAM Blinking Slow The Prestige is initializing the DSL line Blinking Fast The Prestig...

Page 38: ...Prestige 660RU Tx Series User s Guide 37 Chapter 1 Getting To Know Your Prestige ...

Page 39: ...avaScript enabled Recommended screen resolution is 1024 by 768 pixels 2 1 1 Accessing the Prestige Web Configurator 1 Make sure your Prestige hardware is properly connected refer to the Quick Start Guide 2 Prepare your computer computer network to connect to the Prestige refer to Appendix B Setting up Your Computer s IP Address on page 248 3 Launch your web browser 4 Type 192 168 1 1 as the URL 5 ...

Page 40: ...ult configuration file This means that you will lose all configurations that you had previously and the password will be reset to 1234 2 1 2 1 Using the Reset Button 1 Make sure the PWR SYS LED is on not blinking 2 Press the RESET button for ten seconds or until the PWR SYS LED begins to blink and then release it When the PWR SYS LED begins to blink the defaults have been restored and the Prestige...

Page 41: ...eens Summary LINK SUB LINK FUNCTION Wizard Setup Connection Setup Use these screens for initial configuration including general setup ISP parameters for Internet Access and WAN IP DNS Server MAC address assignment Advanced Setup Password Use this screen to change your password LAN Use this screen to configure LAN DHCP and TCP IP settings WAN WAN Setup Use this screen to change the Prestige s WAN r...

Page 42: ...CP Dynamic Host Configuration Protocol related information and is READ ONLY Any IP Table This screen shows current read only information of all network devices that use the Any IP feature to communicate with the Prestige Diagnostic General These screens display information to help you identify problems with the Prestige general connection DSL Line These screens display information to help you iden...

Page 43: ...apsulates routed Ethernet frames into bridged ATM cells ENET ENCAP requires that you specify a gateway IP address in the ENET ENCAP Gateway field in the second wizard screen You can get this information from your ISP 3 1 1 2 PPP over Ethernet PPPoE provides access control and billing functionality in a manner similar to dial up services using PPP The Prestige bridges a PPP session over Ethernet PP...

Page 44: ...ample VC1 carries IP etc VC based multiplexing may be dominant in environments where dynamic creation of large numbers of ATM VCs is fast and economical 3 1 2 2 LLC based Multiplexing In this case one VC carries multiple protocols with protocol identifying information being contained in each packet header Despite the extra bandwidth and processing overhead this method may be advantageous if it is ...

Page 45: ...unt Otherwise select Bridge Encapsulation Select the encapsulation type your ISP uses from the Encapsulation drop down list box Choices vary depending on what you select in the Mode field If you select Bridge in the Mode field select either PPPoA or RFC 1483 If you select Routing in the Mode field select PPPoA RFC 1483 ENET ENCAP or PPPoE Multiplex Select the multiplexing method used by your ISP f...

Page 46: ...the subnet mask automatically based on the IP address that you entered You don t need to change the subnet mask computed by the Prestige unless you are instructed to do otherwise 3 2 1 IP Address Assignment A static IP is a fixed IP that your ISP gives you A dynamic IP is not fixed the ISP assigns you a different one each time The Single User Account feature can be enabled or disabled if you have ...

Page 47: ...p regardless of traffic demand The Prestige does two things when you specify a nailed up connection The first is that idle timeout is disabled The second is that the Prestige will try to bring up the connection when turned on and whenever the connection is down A nailed up connection can be very expensive for obvious reasons Do not specify a nailed up connection unless your telephone company offer...

Page 48: ...IP Address Automatically if you have a dynamic IP address otherwise select Static IP Address and type your ISP assigned IP address in the text box below Connection Select Connect on Demand when you don t want the connection up all the time and specify an idle time out in seconds in the Max Idle Timeout field The default setting selects Connection on Demand with 0 as the idle time out which means t...

Page 49: ...ternet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select Routing in the Mode field Type your ISP assigned IP address in this field Network Address Translation Select None SUA Only or Full Feature from the drop down list box Refer to Chapter 7 on page 74 for more details Back Click Back to go back to the first wizard screen Next Click Next to continue to th...

Page 50: ...IP address otherwise select Static IP Address and type your ISP assigned IP address in the IP Address text box below Subnet Mask Enter a subnet mask in dotted decimal notation Refer to Appendix C IP Subnetting to calculate a subnet mask If you are implementing subnetting ENET ENCAP Gateway You must specify a gateway IP address supplied by your ISP when you use ENET ENCAP in the Encapsulation field...

Page 51: ...tion with PPPoA LABEL DESCRIPTION User Name Enter the login name that your ISP gives you Password Enter the password associated with the user name above IP Address This option is available if you select Routing in the Mode field A static IP address is a fixed IP that your ISP gives you A dynamic IP address is not fixed the ISP assigns you a different one each time you connect to the Internet Click...

Page 52: ...Tx Series User s Guide 51 Chapter 3 Wizard Setup Figure 11 Internet Access Wizard Setup Third Screen If you want to change your Prestige LAN settings click Change LAN Configuration to display the screen as shown next ...

Page 53: ...er From the DHCP Server drop down list box select On to allow your Prestige to assign IP addresses an IP default gateway and DNS servers to computer systems that support the DHCP client Select Off to disable DHCP server When DHCP server is used set the following items Client IP Pool Starting Address This field specifies the first of the contiguous addresses in the IP address pool Size of Client IP...

Page 54: ...turn to Main Menu to go back to the Site Map screen Figure 13 Internet Access Wizard Setup Connection Tests 3 2 7 1 Test Your Internet Connection Launch your web browser and navigate to www zyxel com Internet access is just the beginning Refer to the rest of this User s Guide for more detailed information on the complete range of Prestige features If you cannot access the Internet open the web con...

Page 55: ...mended click Password in the Site Map screen The screen appears as shown Figure 14 Password The following table describes the fields in this screen Table 10 Password LABEL DESCRIPTION Old Password Type the default password or the existing password you use to access the system in this field New Password Type the new password in this field Retype to Confirm Type the new password again in this field ...

Page 56: ...Prestige 660RU Tx Series User s Guide 55 Chapter 4 Password Setup ...

Page 57: ...is a computer network limited to the immediate area usually the same building or floor of a building The LAN screens can help you configure a LAN DHCP server and manage IP addresses 5 1 1 LANs WANs and the Prestige The actual physical connection determines whether the Prestige ports are LAN or WAN ports There are two separate IP networks one inside the LAN network and the other outside the WAN net...

Page 58: ...een are not specified for instance left as 0 0 0 0 the Prestige tells the DHCP clients that it itself is the DNS server When a computer sends a DNS query to the Prestige the Prestige forwards the query to the real DNS server learned through IPCP and relays the response back to the computer Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions It does not mean you c...

Page 59: ...ng Information Protocol allows a router to exchange routing information with other routers The RIP Direction field controls the sending and receiving of RIP packets When set to Both the Prestige will broadcast its routing table periodically and incorporate the RIP information that it receives In Only the Prestige will not send any RIP packets but will accept all RIP packets received Out Only the P...

Page 60: ...ries all directly connected networks to gather group membership After that the Prestige periodically updates this information IP multicasting can be enabled disabled on the Prestige LAN and or WAN interfaces in the web configurator LAN WAN Select None to disable IP multicasting on these interfaces 5 5 Any IP Traditionally you must set the IP addresses and the subnet masks of a computer and the Pre...

Page 61: ... computer tries to access the Internet for the first time through the Prestige 1 When a computer which is in a different subnet first attempts to access the Internet it sends packets to its default gateway which is not the Prestige by looking at the MAC address in its ARP table 2 When the computer cannot locate the default gateway an ARP request is broadcast on the LAN 3 The Prestige receives the ...

Page 62: ...n Table 11 LAN Setup LABEL DESCRIPTION DHCP DHCP If set to Server your Prestige can assign IP addresses an IP default gateway and DNS servers to Windows 95 Windows NT and other systems that support the DHCP client If set to None the DHCP server will be disabled If set to Relay the Prestige acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and the clie...

Page 63: ...ction from None Both In Only and Out Only RIP Version Select the RIP version from RIP 1 RIP 2B and RIP 2M Multicast IGMP Internet Group Multicast Protocol is a network layer protocol used to establish membership in a multicast group The Prestige supports both IGMP version 1 IGMP v1 and IGMP v2 Select None to disable it Any IP Setup Select the Active checkbox to enable the Any IP feature This allow...

Page 64: ...Prestige 660RU Tx Series User s Guide 63 Chapter 5 LAN Setup ...

Page 65: ...restige uses the following pre defined priorities Normal route designated by the ISP see the Zero Configuration Internet Access section Traffic redirect route see the Traffic Redirect section WAN backup route also called dial backup see the Configuring WAN Backup section For example if the normal route has a metric of 1 and the traffic redirect route has a metric of 2 and dial backup route has a m...

Page 66: ...PoE software installed since the Prestige does that part of the task Furthermore with NAT all of the LANs computers will have access 6 4 Traffic Shaping Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average rate and fluctuations of data transmission over an ATM network This agreement helps eliminate congestion which is important for transmission of real tim...

Page 67: ...cessary configuration changes In cases where additional account information such as an Internet account user name and password is required or the Prestige cannot connect to the ISP you will be redirected to web screen s for information input or troubleshooting Zero configuration for Internet access is disable when the Prestige is in bridge mode you set the Prestige to use a static fixed WAN IP add...

Page 68: ...labels in this screen Table 12 WAN Setup LABEL DESCRIPTION Name Enter the name of your Internet Service Provider e g MyISP This information is for identification purposes only Mode Select Routing default from the drop down list box if your ISP allows multiple computers to share an Internet account Otherwise select Bridge ...

Page 69: ...ype the PCR here Sustain Cell Rate The Sustain Cell Rate SCR sets the average cell rate long term that can be transmitted Type the SCR which must be less than the PCR Note that system default is 0 cells sec Maximum Burst Size Maximum Burst Size MBS refers to the maximum number of cells that can be sent at the peak rate Type the MBS which is less than 65535 Login Information PPPoA and PPPoE encapsu...

Page 70: ...if you do not need to allow hosts on the LAN to use PPPoE client software on their computers to connect to the ISP Subnet Mask ENET ENCAP encapsulation only Enter a subnet mask in dotted decimal notation Refer to Appendix C IP Subnetting in the to calculate a subnet mask If you are implementing subnetting ENET ENCAP Gateway ENET ENCAP encapsulation only You must specify a gateway IP address suppli...

Page 71: ... or three logical networks with the Prestige itself as the gateway for each LAN network Put the protected LAN in one subnet Subnet 1 in the following figure and the backup gateway in another subnet Subnet 2 Configure filters that allow packets from the protected LAN Subnet 1 to the backup gateway Subnet 2 Figure 21 Traffic Redirect LAN Setup 6 8 Configuring WAN Backup To change your Prestige s WAN...

Page 72: ... the other WAN backup connection if configured if there is no response Fail Tolerance Type the number of times 2 recommended that your Prestige may ping the IP addresses configured in the Check WAN IP Address field without getting a response before switching to a WAN backup connection or a different WAN backup connection Recovery Interval When the Prestige is using a lower priority connection usua...

Page 73: ... choosing a path with the lowest cost RIP routing uses hop count as the measurement of cost with a minimum of 1 for directly connected networks The number must be between 1 and 15 a number greater than 15 means the link is down The smaller the number the lower the cost Backup Gateway Type the IP address of your backup gateway in dotted decimal notation The Prestige automatically forwards traffic t...

Page 74: ...Prestige 660RU Tx Series User s Guide 73 Chapter 6 WAN Setup ...

Page 75: ...a router for example the local address refers to the IP address of a host when the packet is in the local network while the global address refers to the IP address of the host when the same packet is traveling in the WAN side Note that inside outside refers to the location of a host while global local refers to the IP address of a host used in a packet Thus an inside local address ILA is the IP ad...

Page 76: ...firewall protection With no servers defined your Prestige filters out all incoming inquiries thus preventing intruders from probing your network For more information on IP address translation refer to RFC 1631 The IP Network Address Translator NAT 7 1 3 How NAT Works Each packet has two addresses a source address and a destination address For outgoing packets the ILA Inside Local Address is the so...

Page 77: ... following figure illustrates a possible NAT application where three inside LANs logical LANs using IP Alias behind the Prestige can communicate with three distinct WAN networks More examples follow at the end of this chapter Figure 24 NAT Application With IP Alias 7 1 5 NAT Mapping Types NAT supports five types of IP port mapping They are ...

Page 78: ...lows you to specify inside servers of different services behind the NAT to be accessible to the outside world The following table summarizes these types 7 2 SUA Single User Account Versus NAT SUA Single User Account is a ZyNOS implementation of a subset of NAT that supports two types of mapping Many to One and Server The Prestige also supports Full Feature NAT to map multiple global IP addresses t...

Page 79: ...llow you to run any server processes such as a Web or FTP server from your location Your ISP may periodically check for servers and may suspend your account if it discovers any active services at your location If you are unsure refer to your ISP 7 3 1 Default Server IP Address In addition to the servers for specified services NAT supports a default server IP address A default server receives packe...

Page 80: ... ISP assigns the WAN IP address The NAT network appears as a single host on the Internet IP address assigned by ISP Figure 25 Multiple Servers Behind NAT Example 7 4 Selecting the NAT Mode Click NAT to open the following screen SMTP Simple Mail Transfer Protocol 25 DNS Domain Name System 53 Finger 79 HTTP Hyper Text Transfer protocol or WWW Web 80 POP3 Post Office Protocol 110 NNTP Network News Tr...

Page 81: ...his radio button if you have just one public WAN IP address for your Prestige The Prestige uses Address Mapping Set 1 in the NAT Edit SUA NAT Server Set screen Edit Details Click this link to go to the NAT Edit SUA NAT Server Set screen Full Feature Select this radio button if you have multiple public WAN IP addresses for your Prestige Edit Details Click this link to go to the NAT Address Mapping ...

Page 82: ...series of ports enter the start port number here and the end port number in the End Port No field End Port No Enter a port number in this field To forward only one port enter the port number again in the Start Port No field above and then enter it again in this field To forward a series of ports enter the last port number in a series that begins with the port number in the Start Port No field abov...

Page 83: ...ge your Prestige s address mapping settings click NAT Select Full Feature and click Edit Details to open the following screen Figure 28 Address Mapping Rules The following table describes the labels in this screen Table 19 Address Mapping Rules LABEL DESCRIPTION Local Start IP This is the starting Inside Local IP Address ILA Local IP addresses are N A for Server port mapping Local End IP This is t...

Page 84: ...AT mapping type M 1 Many to One mode maps multiple local IP addresses to one global IP address This is equivalent to SUA i e PAT port address translation ZyXEL s Single User Account feature that previous ZyXEL routers supported only M M Ov Overload Many to Many Overload mode maps multiple local IP addresses to shared global IP addresses MM No No Overload Many to Many No Overload mode maps each loc...

Page 85: ...outside world Local Start IP This is the starting local IP address ILA Local IP addresses are N A for Server port mapping Local End IP This is the end local IP address ILA If your rule is for all local IP addresses then enter 0 0 0 0 as the Local Start IP address and 255 255 255 255 as the Local End IP address This field is N A for One to One and Server mapping types Global Start IP This is the st...

Page 86: ...Prestige 660RU Tx Series User s Guide 85 Chapter 7 Network Address Translation NAT Screens ...

Page 87: ...riends or relatives will always be able to call you even if they don t know your IP address First of all you need to have registered a dynamic DNS account with www dyndns org This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a domain name The Dynamic DNS service provider will give you a password or key 8 1 1 DYNDNS Wildcard Enabling the wildcard featu...

Page 88: ...e Provider This is the name of your Dynamic DNS service provider Host Names Type the domain name assigned to your Prestige by your Dynamic DNS provider E mail Address Type your e mail address User Type your user name Password Type the password assigned to you Enable Wildcard Select the check box to enable DYNDNS Wildcard Apply Click Apply to save your changes back to the Prestige Cancel Click Canc...

Page 89: ...his screen to configure the Prestige s time and date settings 9 1 Configuring Time and Date To change your Prestige s time and date click Time And Date The screen appears as shown Use this screen to configure the Prestige s time based on your local time zone Figure 31 Time and Date The following table describes the labels in this screen ...

Page 90: ...nter the month and day that your daylight savings time starts on if you selected Daylight Savings End Date Enter the month and day that your daylight savings time ends on if you selected Daylight Savings Synchronize system clock with Time Server now Select this option to have your Prestige use the time server that you configured above to set its internal system clock Please wait for up to 60 secon...

Page 91: ...a time The Prestige automatically disconnects a remote management session of lower priority when another remote management session of higher priority starts The priorities for the different types of remote management sessions are as follows 1 Telnet 2 HTTP 10 1 1 Remote Management Limitations Remote management over LAN or WAN will not work when A filter in SMT menu 3 1 LAN or in menu 11 5 WAN is a...

Page 92: ...session remains idle for longer than this timeout period The management session does not time out when a statistics screen is polling 10 2 Telnet You can configure your Prestige for remote Telnet access as shown next Figure 32 Telnet Configuration on a TCP IP Network 10 3 FTP You can upload and download Prestige firmware and configuration files using FTP To use this feature your computer must have...

Page 93: ...ices are All LAN Only WAN Only and Disable Port This field shows the port number for the remote management service You may change the port number for a service in this field but you must use the same port number to use that service for remote management Secured Client IP The default 0 0 0 0 allows any client to use this service to remotely manage the Prestige Type an IP address to restrict access ...

Page 94: ...Prestige 660RU Tx Series User s Guide 93 Chapter 10 Remote Management Configuration ...

Page 95: ...arate icon Selecting the icon of a UPnP device will allow you to access the information and properties of that device 11 1 2 NAT Traversal UPnP NAT traversal automates the process of allowing an application to operate through NAT UPnP network devices can automatically configure network addressing announce their presence in the network to other UPnP devices and enable exchange of simple product and...

Page 96: ...etup to display the screen shown next Figure 34 Configuring UPnP The following table describes the labels in this screen Table 24 Configuring UPnP LABEL DESCRIPTION Enable the Universal Plug and Play UPnP Service Select this checkbox to activate UPnP Be aware that anyone could use a UPnP application to open the web configurator s login screen without entering the Prestige s IP address although you...

Page 97: ... in Windows Me Follow the steps below to install the UPnP in Windows Me 1 Click Start and Control Panel Double click Add Remove Programs 2 Click on the Windows Setup tab and select Communication in the Components selection box Click Details Figure 35 Add Remove Programs Windows Setup Communication 3 In the Communications window select the Universal Plug and Play check box in the Components selecti...

Page 98: ...er when prompted Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP 1 Click Start and Control Panel 2 Double click Network Connections 3 In the Network Connections window click Advanced in the main menu and select Optional Networking Components Figure 37 Network Connections 4 The Windows Optional Networking Components Wizard window displays Select Networking Ser...

Page 99: ... 660RU Tx Series User s Guide Chapter 11 Universal Plug and Play UPnP 98 Figure 38 Windows Optional Networking Components Wizard 5 In the Networking Services window select the Universal Plug and Play check box ...

Page 100: ...s section shows you how to use the UPnP feature in Windows XP You must already have UPnP installed in Windows XP and UPnP activated on the Prestige Make sure the computer is connected to a LAN port of the Prestige Turn on your computer and the Prestige Auto discover Your UPnP enabled Network Device 1 Click Start and Control Panel Double click Network Connections An icon displays under Internet Gat...

Page 101: ...Tx Series User s Guide Chapter 11 Universal Plug and Play UPnP 100 Figure 40 Network Connections 3 In the Internet Connection Properties window click Settings to see the port mappings there were automatically created ...

Page 102: ...stige 660RU Tx Series User s Guide 101 Chapter 11 Universal Plug and Play UPnP Figure 41 Internet Connection Properties 4 You may edit or delete the port mappings or click Add to manually add port mappings ...

Page 103: ...roperties Advanced Settings Figure 43 Internet Connection Properties Advanced Settings Add 5 When the UPnP enabled device is disconnected from your computer all port mappings will be deleted automatically 6 Select Show icon in notification area when connected option and click OK An icon displays in the system tray ...

Page 104: ...nnection Status Web Configurator Easy Access With UPnP you can access the web based configurator on the Prestige without finding out the IP address of the Prestige first This comes helpful if you do not know the IP address of the Prestige Follow the steps below to access the web configurator 1 Click Start and then Control Panel 2 Double click Network Connections 3 Select My Network Places under Ot...

Page 105: ...versal Plug and Play UPnP 104 Figure 46 Network Connections 4 An icon with the description for each UPnP enabled device displays under Local Network 5 Right click on the icon for your Prestige and select Invoke The web configurator login screen displays ...

Page 106: ...Guide 105 Chapter 11 Universal Plug and Play UPnP Figure 47 Network Connections My Network Places 6 Right click on the icon for your Prestige and select Properties A properties window displays with basic information about the Prestige ...

Page 107: ...Prestige 660RU Tx Series User s Guide Chapter 11 Universal Plug and Play UPnP 106 Figure 48 Network Connections My Network Places Properties Example ...

Page 108: ...Prestige 660RU Tx Series User s Guide 107 Chapter 11 Universal Plug and Play UPnP ...

Page 109: ... and port traffic statistics 12 1 Maintenance Overview The maintenance screens can help you view system information upload new firmware manage configuration and restart your Prestige 12 2 System Status Screen Click System Status to open the following screen where you can use to monitor your Prestige Note that these fields are READ ONLY and only for diagnostic purposes ...

Page 110: ...s is the name of your Prestige It is for identification purposes ZyNOS Firmware Version This is the ZyNOS firmware version and the date the firmware was created ZyNOS is ZyXEL s proprietary Network Operating System design DSL FW Version This is the DSL firmware version associated with your Prestige Standard This is the standard that your Prestige is using WAN Information IP Address This is the WAN...

Page 111: ...tual Path Identifier and Virtual Channel Identifier that you entered in the first Wizard screen LAN Information MAC Address This is the MAC Media Access Control or Ethernet address unique to your Prestige IP Address This is the LAN port IP address IP Subnet Mask This is the LAN port IP subnet mask DHCP This is the WAN port DHCP role Server Relay not all Prestige models or None DHCP Start IP This i...

Page 112: ...eed This is the upstream speed of your Prestige Downstream Speed This is the downstream speed of your Prestige Node Link This field displays the remote node index number and link type Link types are PPPoA ENET RFC 1483 and PPPoE Interface This field displays the type of port Status For the WAN port this displays the port speed and duplex setting if you re using Ethernet encapsulation and Down line...

Page 113: ...he following table describes the labels in this screen Table 27 DHCP Table LABEL DESCRIPTION Host Name This is the name of the host computer IP Address This field displays the IP address relative to the Host Name field MAC Address This field displays the MAC Media Access Control address of the computer with the displayed host name Every Ethernet device has a unique MAC address The MAC address is a...

Page 114: ...gnostic and then General to open the screen shown next MAC Address This field displays the MAC Media Access Control address of the computer with the displayed IP address Every Ethernet device has a unique MAC address The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 A0 C5 00 00 02 Refresh Click Refresh to update this screen Table 28 Any I...

Page 115: ...ext Table 29 Diagnostic General LABEL DESCRIPTION TCP IP Address Type the IP address of a computer that you want to ping in order to test a connection Ping Click this button to ping the IP address that you entered Reset System Click this button to reboot the Prestige A warning dialog box is then displayed asking you if you re sure you want to reboot the system Click OK to proceed Back Click this b...

Page 116: ...M Status Click this button to view ATM status ATM Loopback Test Click this button to start the ATM loopback test Make sure you have configured at least one PVC with proper VPIs VCIs before you begin this test The Prestige sends an OAM F5 packet to the DSLAM ATM switch and then returns it loops it back to the Prestige The ATM loopback test is useful for troubleshooting problems with the DSLAM and A...

Page 117: ...tige Figure 55 Firmware Upgrade The following table describes the labels in this screen Note Only use firmware for your device s specific model Refer to the label on the bottom of your device Table 31 Firmware Upgrade LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse to find it Browse Click Browse to find the bin file you want to upload R...

Page 118: ...starts in this time causing a temporary network disconnect In some operating systems you may see the following icon on your desktop Figure 56 Network Temporarily Disconnected After two minutes log in again and check your new firmware version in the System Status screen If the upload was not successful the following screen will appear Click Back to go back to the Firmware screen Figure 57 Error Mes...

Page 119: ...r Prestige 1 In Windows click Start usually in the bottom left corner Run and then type telnet 192 168 1 1 the default IP address and click OK 2 Enter 1234 in the Password field 3 After entering the password you will see the main menu Please note that if there is no activity for longer than five minutes default timeout period after you log in your Prestige will automatically log you out You will t...

Page 120: ...1 3 Prestige SMT Menu Overview The following figure gives you an overview of the various SMT menu screens of your Prestige Figure 59 Prestige SMT Menu Overview 13 2 Navigating the SMT Interface The SMT System Management Terminal is the interface that you use to configure your Prestige Enter Password ...

Page 121: ...t field respectively When you are at the top of a menu press the UP arrow key to move to the bottom of a menu Entering information Type in or press SPACE BAR then press ENTER You need to fill in two types of fields The first requires you to type in the appropriate information The second allows you to cycle through the available choices by pressing SPACE BAR Required fields or ChangeMe All fields w...

Page 122: ...p your general information 2 WAN Backup Setup Use this menu to setup traffic redirect 3 LAN Setup Use this menu to set up your LAN connection 4 Internet Access Setup A quick and easy way to set up an Internet connection 11 Remote Node Setup Use this menu to set up the Remote Node for LAN to LAN connection including Internet connection 12 Static Routing Setup Use this menu to set up static routes 1...

Page 123: ...sword in the Old Password field for example 1234 and press ENTER Figure 60 Menu 23 Change Password 3 Type your new system password in the New Password field up to 30 characters and press ENTER 4 Re type your new system password in the Retype to confirm field for confirmation and press ENTER Menu 23 System Password Old Password New Password Retype to confirm Enter here to CONFIRM or ESC to CANCEL N...

Page 124: ...Prestige 660RU Tx Series User s Guide 123 Chapter 13 Introducing the SMT ...

Page 125: ...In Windows 2000 click Start Settings Control Panel and then double click System Click the Network Identification tab and then the Properties button Note the entry for the Computer name field and enter it as the Prestige System Name In Windows XP click start My Computer View system information and then click the Computer Name tab Note the entry in the Full computer name field and enter it as the Pr...

Page 126: ...omain Name Enter the domain name if you know it here If you leave this field blank the ISP may assign a domain name via DHCP You can go to menu 24 8 and type sys domainname to see the current domain name used by your gateway If you want to clear this field just press the SPACE BAR The domain name entered by you is given priority over the ISP assigned domain name Edit Dynamic DNS Press the SPACE BA...

Page 127: ...to Cancel Table 36 Menu 1 1 Configure Dynamic DNS FIELD DESCRIPTION Service Provider This is the name of your dynamic DNS service provider Active Press SPACE BAR to select Yes and then press ENTER to make dynamic DNS active Host Enter the domain name assigned to your Prestige by your dynamic DNS provider EMAIL Enter your e mail address User Enter your user name Password Enter the password assigned...

Page 128: ...Prestige 660RU Tx Series User s Guide 127 Chapter 14 Menu 1 General Setup ...

Page 129: ...o configure the Prestige for traffic redirect and dial backup connections 15 2 Configuring Dial Backup in Menu 2 From the main menu enter 2 to open menu 2 Figure 63 Menu 2 WAN Backup Setup Menu 2 Wan Backup Setup Check Mechanism DSL Link Check WAN IP Address1 0 0 0 0 Check WAN IP Address2 0 0 0 0 Check WAN IP Address3 0 0 0 0 KeepAlive Fail Tolerance 0 Recovery Interval sec 0 ICMP Timeout sec 0 Tr...

Page 130: ...igured here and uses the other WAN backup connection if configured if there is no response KeepAlive Fail Tolerance Type the number of times 2 recommended that your Prestige may ping the IP addresses configured in the Check WAN IP Address field without getting a response before switching to a WAN backup connection or a different WAN backup connection Recovery Interval sec When the Prestige is usin...

Page 131: ...eway in dotted decimal notation The Prestige automatically forwards traffic to this IP address if the Prestige s Internet connection terminates Metric This field sets this route s priority among the routes the Prestige uses The metric represents the cost of transmission A router determines the best route for transmission by choosing a path with the lowest cost RIP routing uses hop count as the mea...

Page 132: ...Prestige 660RU Tx Series User s Guide 131 Chapter 15 Menu 2 WAN Backup Setup ...

Page 133: ... wish to apply to the Ethernet traffic You seldom need to filter Ethernet traffic however the filter sets may be useful to block certain packets reduce traffic and prevent security breaches Figure 66 Menu 3 1 LAN Port Filter Setup If you need to define filters please read Chapter 22 Filter Configuration first then return to this menu to define the filter sets Menu 3 LAN Setup 1 LAN Port Filter Set...

Page 134: ...restige for TCP IP To edit menu 3 2 enter 3 from the main menu to display Menu 3 LAN Setup When menu 3 appears press 2 and press ENTER to display Menu 3 2 TCP IP and DHCP Ethernet Setup as shown next Figure 67 Menu 3 2 TCP IP and DHCP Ethernet Setup Menu 3 2 TCP IP and DHCP Setup DHCP Setup DHCP Server Client IP Pool Starting Address 192 168 1 33 Size of Client IP Pool 32 Primary DNS Server 0 0 0 ...

Page 135: ...y is selected in the DHCP field above then enter the IP address of the actual remote DHCP server here Table 40 TCP IP Ethernet Setup FIELD DESCRIPTION TCP IP Setup IP Address Enter the LAN IP address of your Prestige in dotted decimal notation IP Subnet Mask Your Prestige will automatically calculate the subnet mask based on the IP address that you assign Unless you are implementing subnetting use...

Page 136: ...Prestige 660RU Tx Series User s Guide 135 Chapter 16 Menu 3 LAN Setup ...

Page 137: ...routing behavior and alter the packet forwarding based on the policy defined by the network administrator Policy based routing is applied to incoming packets on a per interface basis prior to the normal routing Create policies using SMT menu 25 see Chapter 28 IP Policy Routing and apply them on the Prestige LAN and or WAN interfaces using menus 3 2 LAN and 11 3 WAN 17 3 IP Alias IP alias allows yo...

Page 138: ...e the second and third network Figure 69 Menu 3 2 TCP IP and DHCP Setup Pressing ENTER displays Menu 3 2 1 IP Alias Setup as shown next Menu 3 2 TCP IP and DHCP Setup DHCP Setup DHCP Server Client IP Pool Starting Address 192 168 1 33 Size of Client IP Pool 32 Primary DNS Server 0 0 0 0 Secondary DNS Server 0 0 0 0 Remote DHCP Server N A TCP IP Setup IP Address 192 168 1 1 IP Subnet Mask 255 255 2...

Page 139: ... Setup FIELD DESCRIPTION IP Alias Choose Yes to configure the LAN network for the Prestige IP Address Enter the IP address of your Prestige in dotted decimal notation IP Subnet Mask Your Prestige will automatically calculate the subnet mask based on the IP address that you assign Unless you are implementing subnetting use the subnet mask computed by the Prestige RIP Direction Press SPACE BAR to se...

Page 140: ...nformation Use the Internet Account Information table in the Quick Start Guide to record your Internet account information Note that if you are using PPPoA or PPPoE encapsulation then the only ISP information you need is a login name and password You only need to know the Ethernet Encapsulation Gateway IP address if you are using ENET ENCAP encapsulation From the main menu type 4 to display Menu 4...

Page 141: ... used by your ISP Choices are VC based or LLC based VPI Enter the Virtual Path Identifier VPI assigned to you VCI Enter the Virtual Channel Identifier VCI assigned to you ATM QoS Type Press SPACE BAR and select CBR Continuous Bit Rate to specify fixed always on bandwidth Select UBR Unspecified Bit Rate for applications that are non time sensitive such as e mail Select VBR Variable Bit Rate for bur...

Page 142: ...stige automatically disconnects the PPPoE session IP Address Assignment Press SPACE BAR to select Static or Dynamic address assignment IP Address Enter the IP address supplied by your ISP if applicable Network Address Translation Press SPACE BAR to select None SUA Only or Full Feature Please see Chapter 21 Network Address Translation NAT for more details on the SUA Single User Account feature Addr...

Page 143: ...ess you are configuring one of the remote nodes You first choose a remote node in Menu 11 Remote Node Setup You can then edit that node s profile in menu 11 1 as well as configure specific settings in three submenus edit IP and bridge options in menu 11 3 edit ATM options in menu 11 6 and edit filter sets in menu 11 5 18 2 Remote Node Setup This section describes the protocol independent parameter...

Page 144: ...ation Here are some examples of more suitable combinations in such an application 18 2 2 1 Scenario 1 One VC Multiple Protocols PPPoA RFC 2364 encapsulation with VC based multiplexing is the best combination because no extra protocol identifying headers are needed The PPP protocol already contains this information 18 2 2 2 Scenario 2 One VC One Protocol IP Selecting RFC 1483 encapsulation with VC ...

Page 145: ...R and then ENTER to select Yes to activate or No to deactivate this node Inactive nodes are displayed with a minus sign in SMT menu 11 Encapsulation PPPoA refers to RFC 2364 PPP Encapsulation over ATM Adaptation Layer 5 If RFC 1483 Multiprotocol Encapsulation over ATM Adaptation Layer 5 of ENET ENCAP are selected then the Rem Login Rem Password My Login My Password and Authen fields are not applic...

Page 146: ...Edit Advance Options This field is only available when you select PPPoE in the Encapsulation field Press SPACE BAR to select Yes and press ENTER to display Menu 11 8 Advance Setup Options Telco Option Allocated Budget min This sets a ceiling for outgoing call time for this remote node The default for this field is 0 meaning no budget control Period hr This field is the time period that the budget ...

Page 147: ...L Table 44 Menu 11 3 Remote Node Network Layer Options FIELD DESCRIPTION IP Address Assignment Press SPACE BAR and then ENTER to select Dynamic if the remote node is using a dynamically assigned IP address or Static if it is using a static fixed IP address You will only be able to configure this in the ISP node also the one you configure in menu 4 all other nodes are set to Static Rem IP Addr This...

Page 148: ... directly connected networks Type a number that approximates the cost for this link The number need not be precise but it must be between 1 and 15 In practice 2 or 3 is usually a good number Private This determines if the Prestige will include the route to this remote node in its RIP broadcasts If set to Yes this route is kept private and not included in RIP broadcast If No the route to this remot...

Page 149: ...e Prestige and also to prevent certain packets from triggering calls You can specify up to 4 filter sets separated by comma for example 1 5 9 12 in each filter field Note that spaces are accepted in this field The Prestige has a prepackaged filter set NetBIOS_WAN that blocks NetBIOS packets Include this in the call filter sets if you want to prevent NetBIOS packets from triggering calls to a remot...

Page 150: ...plied in the protocol filters field under Input Filter Sets in SMT menu 11 5 Menu 11 5 Remote Node Filter Input Filter Sets protocol filters 1 5 9 12 device filters Output Filter Sets protocol filters device filters Call Filter Sets protocol filters device filters Enter here to CONFIRM or ESC to CANCEL Note SMT input protocol filter set numbers that were previously applied are erased after you app...

Page 151: ... filter sets 11 and 12 Figure 81 Menu 21 11 WebSet 11 Menu 21 Filter Set Configuration Filter Filter Set Comments Set Comments 1 _______________ 7 _______________ 2 NetBIOS_WAN 8 _______________ 3 NetBIOS_LAN 9 _______________ 4 _______________ 10 _______________ 5 _______________ 11 WebSet1 6 _______________ 12 WebSet2 Enter Filter Set Number to Configure 0 Menu 21 11 Filter Rules Summary A Type ...

Page 152: ...ased Multiplexing non PPP Encapsulation For VC based multiplexing by prior agreement a protocol is assigned a specific virtual circuit for example VC1 will carry IP Separate VPI and VCI numbers must be specified for each protocol Menu 21 12 Filter Rules Summary A Type Filter Rules M m n 1 Y IP Pr 6 SA 0 0 0 0 DA 0 0 0 0 DP 23 N D N 2 Y IP Pr 6 SA 0 0 0 0 DA 0 0 0 0 DP 21 N D N 3 Y IP Pr 17 SA 0 0 ...

Page 153: ... the VCI is 32 to 65535 1 to 31 is reserved for local management of ATM traffic 18 5 3 Advance Setup Options In menu 11 1 select PPPoE in the Encapsulation field Menu 11 6 Remote Node ATM Layer Options VPI VCI VC Multiplexing VC Options for IP VC Options for Bridge VPI 8 VPI 1 VCI 35 VCI 36 ATM QoS Type UBR ATM QoS Type N A Peak Cell Rate PCR 0 Peak Cell Rate PCR N A Sustain Cell Rate SCR 0 Sustai...

Page 154: ... Confirm or ESC to Cancel Menu 11 8 Advance Setup Options PPPoE pass through No Press ENTER to Confirm or ESC to Cancel Table 45 Menu 11 8 Advance Setup Options FIELD DESCRIPTION PPPoE pass through Press SPACE BAR to select Yes and press ENTER to enable PPPoE pass through In addition to the Prestige s built in PPPoE client you can enable PPPoE pass through to allow up to ten hosts on the LAN to us...

Page 155: ...e Each remote node specifies only the network to which the gateway is directly connected and the Prestige has no knowledge of the networks beyond For instance the Prestige knows about network N2 in the following figure through remote node Router 1 However the Prestige is unable to route a packet to network N3 because it does not know that there is a route through remote node Router 1 via Router 2 ...

Page 156: ...IP Static Route Menu 12 Static Route Setup 1 IP Static Route 3 Bridge Static Route Please enter selection Menu 12 1 IP Static Route Setup 1 ________ 2 ________ 3 ________ 4 ________ 5 ________ 6 ________ 7 ________ 8 ________ 9 ________ 10 ________ 11 ________ 12 ________ 13 ________ 14 ________ 15 ________ 16 ________ Enter selection number Menu 12 1 1 Edit IP Static Route Route 1 Route Name Acti...

Page 157: ...ress and Subnet Mask section in this manual Gateway IP Address Type the IP address of the gateway The gateway is a router or switch on the same network segment as the device s LAN or WAN port The gateway helps forward packets to their destinations Metric Metric represents the cost of transmission for routing purposes IP routing uses hop count as the measurement of cost with a minimum of 1 for dire...

Page 158: ...Prestige 660RU Tx Series User s Guide 157 Chapter 19 Static Route Setup ...

Page 159: ...ayer protocol and it also demands more CPU cycles and memory For efficiency reasons do not turn on bridging unless you need to support protocols other than IP on your network For IP enable the routing if you need it do not bridge what the Prestige can route 20 2 Bridge Ethernet Setup Basically all non local packets are bridged to the WAN Your Prestige does not support IPX 20 2 1 Remote Node Bridgi...

Page 160: ...ion Rem Login N A Allocated Budget min N A Rem Password N A Period hr N A Outgoing Schedule Sets N A My Login N A Nailed Up Connection N A My Password N A Session Options Authen N A Edit Filter Sets No Idle Timeout sec N A Press ENTER to Confirm or ESC to Cancel Menu 11 3 Remote Node Network Layer Options IP Options Bridge Options IP Address Assignment Static Ethernet Addr Timeout min 0 Rem IP Add...

Page 161: ...ck up Table 47 Remote Node Network Layer Options Bridge Fields continued FIELD DESCRIPTION Menu 12 3 1 Edit Bridge Static Route Route 1 Route Name Active No Ether Address IP Address Gateway Node 1 Press ENTER to Confirm or ESC to Cancel Table 48 Menu 12 3 1 Edit Bridge Static Route FIELD DESCRIPTION Route This is the route index number you typed in Menu 12 3 Bridge Static Route Setup Route Name Ty...

Page 162: ...Prestige 660RU Tx Series User s Guide 161 Chapter 20 Bridging Setup ...

Page 163: ...r a detailed description of the NAT set for SUA The Prestige also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of clients or servers using mapping types 21 2 Applying NAT You apply NAT via menus 4 or 11 3 as displayed next The next figure shows you how to apply NAT for Internet access in menu 4 Enter 4 from the main menu to go to Menu 4 Interne...

Page 164: ...he options for Network Address Translation Menu 4 Internet Access Setup ISP s Name MyISP Encapsulation RFC 1483 Multiplexing LLC based VPI 8 VCI 35 ATM QoS Type UBR Peak Cell Rate PCR 0 Sustain Cell Rate SCR 0 Maximum Burst Size MBS 0 My Login N A My Password N A ENET ENCAP Gateway N A IP Address Assignment Static IP Address 0 0 0 0 Network Address Translation SUA Only Address Mapping Set N A Pres...

Page 165: ...creens for further information on these menus To configure NAT enter 15 from the main menu to bring up the following screen Figure 96 Menu 15 NAT Setup 21 3 1 Address Mapping Sets Enter 1 to bring up Menu 15 1 Address Mapping Sets Table 49 Applying NAT in Menus 4 11 3 FIELD DESCRIPTION NAT Press SPACE BAR and then ENTER to select Full Feature if you have multiple public WAN IP addresses for your P...

Page 166: ...pping Sets 1 ACL Default Set 2 3 4 5 6 7 8 255 SUA read only Enter Menu Selection Number Menu 15 1 255 Address Mapping Rules Set Name SUA Idx Local Start IP Local End IP Global Start IP Global End IP Type 1 0 0 0 0 255 255 255 255 0 0 0 0 M 1 2 0 0 0 0 Server 3 4 5 6 7 8 9 10 Press ENTER to Confirm or ESC to Cancel Note Menu 15 1 255 is read only Table 50 SUA Address Mapping Rules FIELD DESCRIPTIO...

Page 167: ...GA If you have a dynamic IP enter 0 0 0 0 as the Global Start IP Global End IP This is the ending global IP address IGA Type These are the mapping types Server allows us to specify multiple servers of different types behind NAT to this machine See later for some examples When you have completed this menu press ENTER at the prompt Press ENTER to Confirm or ESC to Cancel to save your configuration o...

Page 168: ...ich you can edit an individual rule and configure the Type Local and Global Start End IPs Table 51 Menu 15 1 1 First Set FIELD DESCRIPTION Set Name Enter a name for this set of rules This is a required field If this field is left blank the entire set will be deleted Action The default is Edit Edit means you want to edit a selected rule see following field Insert Before means to insert a rule befor...

Page 169: ...t types behind NAT to this computer See the Example 3 Multiple Public IP Addresses With Inside Servers section for an example Local IP Only local IP fields are N A for server Global IP fields MUST be set for Server Start This is the starting local IP address ILA End This is the ending local IP address ILA If the rule is for all local IPs then put the Start IP as 0 0 0 0 and the End IP as 255 255 2...

Page 170: ...r acting as an FTP Telnet and SMTP server ports 21 23 and 25 at 192 168 1 33 6 Press ENTER at the Press ENTER to confirm prompt to save your configuration after you define all the servers or press ESC at any time to cancel Menu 15 2 NAT Server Sets 1 Server Set 1 Used for SUA Only 2 Server Set 2 3 Server Set 3 4 Server Set 4 5 Server Set 5 6 Server Set 6 7 Server Set 7 8 Server Set 8 9 Server Set ...

Page 171: ...T Example 21 5 General NAT Examples The following are some examples of NAT configuration 21 5 1 Example 1 Internet Access Only In the following Internet access example you only need one rule where your ILAs Inside Local addresses all map to one dynamic IGA Inside Global Address assigned by your ISP Figure 104 NAT Example 1 ...

Page 172: ...xample 2 Internet Access with an Inside Server Figure 106 NAT Example 2 In this case you do exactly as above use the convenient pre configured SUA Only set and also go to menu 15 2 to specify the inside server behind the NAT as shown in the next figure Menu 4 Internet Access Setup ISP s Name MyISP Encapsulation RFC 1483 Multiplexing LLC based VPI 8 VCI 35 ATM QoS Type UBR Peak Cell Rate PCR 0 Sust...

Page 173: ...1 Map the first IGA to the first inside FTP server for FTP traffic in both directions 1 1 mapping giving both local and global IP addresses 2 Map the second IGA to our second inside FTP server for FTP traffic in both directions 1 1 mapping giving both local and global IP addresses 3 Map the other outgoing LAN traffic to IGA3 Many 1 mapping 4 You also map your third IGA to the web server and mail s...

Page 174: ...ype as One to One direct mapping for packets going both ways and enter the local Start IP as 192 168 1 10 the IP address of FTP Server 1 the global Start IP as 10 132 50 1 our first IGA See Figure 110 5 Repeat the previous step for rules 2 to 4 as outlined above When finished menu 15 1 1 should look like as shown in Figure 111 Figure 109 Example 3 Menu 11 3 The following figures show how to config...

Page 175: ...e following menu Configure it as shown Menu 15 1 1 1 Address Mapping Rule Type One to One Local IP Start 192 168 1 10 End N A Global IP Start 10 132 50 1 End N A Server Mapping Set N A Press ENTER to Confirm or ESC to Cancel Menu 15 1 1 Address Mapping Rules Set Name Example3 Idx Local Start IP Local End IP Global Start IP Global End IP Type 1 192 168 1 10 10 132 50 1 1 1 2 192 168 1 11 10 132 50 ...

Page 176: ...s Figure 113 NAT Example 4 Other applications such as some gaming programs are NAT unfriendly because they embed addressing information in the data stream These applications won t work through NAT even when using One to One and Many to Many No Overload mapping types Follow the steps outlined in example 3 to configure these two menus as follows Menu 15 2 1 NAT Server Setup Rule Start Port No End Po...

Page 177: ...ping Rules Menu 15 1 1 1 Address Mapping Rule Type Many to Many No Overload Local IP Start 192 168 1 10 End 192 168 1 12 Global IP Start 10 132 50 1 End 10 132 50 3 Server Mapping Set N A Press ENTER to Confirm or ESC to Cancel Menu 15 1 1 Address Mapping Rules Set Name Example4 Idx Local Start IP Local End IP Global Start IP Global End IP Type 1 192 168 1 10 192 168 1 12 10 132 50 1 10 132 50 3 M...

Page 178: ...Prestige 660RU Tx Series User s Guide 177 Chapter 21 Network Address Translation NAT ...

Page 179: ...ltering Call filters are divided into two groups the built in call filters and user defined call filters Your Prestige has built in call filters that prevent administrative for example RIP packets from triggering calls These filters are always enabled and not accessible to you Your Prestige applies the built in filters first and then the user defined call filters if applicable as shown next Figure...

Page 180: ...escribe how to configure filter sets 22 1 1 The Filter Structure of the Prestige A filter set consists of one or more filter rules Usually you would group related rules for example all the rules for NetBIOS into a single set and give it a descriptive name You can configure up to twelve filter sets with six rules in each set for a total of 72 filter rules in the system Start Fetch First Filter Set ...

Page 181: ...igure 119 NetBIOS_WAN Filter Rules Summary Menu 21 Filter Set Configuration Filter Filter Set Comments Set Comments 1 _______________ 7 _______________ 2 NetBIOS_WAN 8 _______________ 3 NetBIOS_LAN 9 _______________ 4 _______________ 10 _______________ 5 _______________ 11 WebSet1 6 _______________ 12 WebSet2 Enter Filter Set Number to Configure 0 Edit Comments N A Press ENTER to Confirm or ESC to...

Page 182: ...ype The type of filter rule GEN for Generic IP for TCP IP Filter Rules These parameters are displayed here M More Y means there are more rules to check which form a rule chain with the present rule An action cannot be taken until the rule chain is complete N means there are no more rules to check You can specify an action to be taken for instance forward the packet drop the packet or check the nex...

Page 183: ...eric filters The class of a filter set is determined by the first rule that you create When applying the filter sets to a port separate menu fields are provided for protocol and device filter sets If you include a protocol filter set in a device filters field or vice versa the Prestige will warn you and will not allow you to save 22 4 1 TCP IP Filter Rule This section shows you how to configure a ...

Page 184: ...lect Yes to activate or No to deactivate the filter rule IP Protocol This is the upper layer protocol for example TCP is 6 UDP is 17 and ICMP is 1 The value must be between 0 and 255 A value of 0 matches ANY protocol IP Source Route IP Source Route is an optional header that dictates the route an IP packet takes from its source to its destination If Yes the rule applies to any packet with an IP so...

Page 185: ...an action is taken or else the packet is disposed of according to the action fields If More is Yes then Action Matched and Action Not Matched will be N A Log Select the logging option from the following None No packets will be logged Action Matched Only packets that match the rule parameters will be logged Action Not Matched Only packets that do not match the rule parameters will be logged Both Al...

Page 186: ...applies the Mask bit wise ANDing to the data portion before comparing the result against the Value to determine a match The Mask and Value fields are specified in hexadecimal numbers Note that it takes two hexadecimal digits to represent a byte so if the length is 4 the value in either field will take 8 digits for example FFFFFFFF Packet into IP Filter Matched Matched Yes Action Matched Action Not...

Page 187: ... below each type will be different Choices are Generic Filter Rule or TCP IP Filter Rule Active Select Yes to turn on or No to turn off the filter rule Offset Type the starting byte of the data portion in the packet that you want to compare The range for this field is from 0 to 255 Length Type the byte count of the data portion in the packet that you want to compare The range for this field is 0 t...

Page 188: ...after NAT for incoming packets On the other hand the generic or device filters are applied to the raw packets that appear on the wire They are applied at the point where the Prestige is receiving and sending the packets for instance the interface The interface can be an Ethernet or any other hardware port The following figure illustrates this Figure 124 Protocol and Device Filter Sets 22 6 Example...

Page 189: ...onfigure in this case 6 3 Type a descriptive name or comment in the Edit Comments field for example TELNET_WAN and press ENTER 4 Press ENTER at the message Press ENTER to confirm or ESC to cancel to open Menu 21 6 Filter Rules Summary 5 Type 1 to configure the first filter rule Make the entries in this menu as shown next When you press ENTER to confirm the following screen appears Note that there ...

Page 190: ...1 in the main menu to display menu 11 and type the remote node number to edit 2 Go to the Edit Filter Sets field press SPACE BAR to choose Yes and press ENTER 3 This brings you to menu 11 5 Apply the example filter set for example filter set 3 in this menu as shown in the next section Menu 21 6 1 TCP IP Filter Rule Filter 6 1 Filter Type TCP IP Filter Rule Active Yes IP Protocol 6 IP Source Route ...

Page 191: ...8 Filtering Ethernet Traffic 22 7 2 Remote Node Filters Go to menu 11 5 shown next and type the number s of the filter set s as appropriate You can cascade up to four filter sets by typing their numbers separated by commas The factory default filter set NetBIOS_WAN is inserted in the protocol filters field under Call Filter Sets in menu 11 5 to block local NetBIOS traffic from triggering calls to ...

Page 192: ...affic Note that call filter sets are visible when you select PPPoA or PPPoE encapsulation Menu 11 5 Remote Node Filter Input Filter Sets protocol filters 3 device filters Output Filter Sets protocol filters 2 device filters Call Filter Sets Protocol filters Device filters Enter here to CONFIRM or ESC to CANCEL ...

Page 193: ...e network The Prestige supports SNMP version one SNMPv1 and version two c SNMPv2c The next figure illustrates an SNMP management operation SNMP is only available if TCP IP is configured Figure 130 SNMP Management Model An SNMP managed network consists of two main components agents and a manager An agent is a management software module that resides in a managed device the Prestige An agent translat...

Page 194: ... from a table or list within an agent In SNMPv1 when a manager wants to retrieve all elements of a table from an agent it initiates a Get operation followed by a series of GetNext operations Set Allows the manager to set values for object variables within an agent Trap Used by the agent to inform the manager of some events 23 2 Supported MIBs The Prestige supports RFC 1215 and MIB II as defined in...

Page 195: ...ation Type the IP address of the station to send your SNMP traps to When you have completed this menu press ENTER at the prompt Press ENTER to Confirm or ESC to Cancel to save your configuration or press ESC at any time to cancel Table 59 SNMP Traps TRAP TRAP NAME DESCRIPTION 1 coldStart defined in RFC 1215 A trap is sent after booting power on 2 warmStart defined in RFC 1215 A trap is sent after ...

Page 196: ...ser s Guide 195 Chapter 23 SNMP Configuration The port number is its interface index under the interface group Table 60 Ports and Permanent Virtual Circuits PORT PVC PERMANENT VIRTUAL CIRCUIT 1 Ethernet LAN 2 1 3 2 13 12 14 xDSL ...

Page 197: ... gives you information on the status and statistics of the ports as shown next System Status is a tool that can be used to monitor your Prestige Specifically it gives you information on your DSL telephone line status number of packets sent and received To get to System Status type 24 to go to Menu 24 System Maintenance From this menu type 1 System Status There are two commands in Menu 24 1 System ...

Page 198: ...740 Upstream Speed 0 kbps CPU Load 1 65 Downstream Speed 0 kbps Press Command COMMANDS 1 Reset Counters ESC Exit Table 61 Menu 24 1 System Maintenance Status FIELD DESCRIPTION Node Lnk This is the node index number and link type Link types are PPP ENET 1483 Status This shows the status of the remote node TxPkts The number of transmitted packets to this remote node RxPkts The number of received pac...

Page 199: ...ay the screen shown next WAN This shows statistics for the WAN Line Status This shows the current status of the xDSL line which can be Up or Down Upstream Speed This shows the upstream transfer rate in kbps Downstream Speed This shows the downstream transfer rate in kbps CPU Load This specifies the percentage of CPU utilization Table 61 Menu 24 1 System Maintenance Status continued FIELD DESCRIPTI...

Page 200: ... 168 1 1 IP Mask 255 255 255 0 DHCP Server Press ESC or RETURN to Exit Table 62 Menu 24 2 1 System Maintenance Information FIELD DESCRIPTION Name Displays the system name of your Prestige This information can be changed in Menu 1 General Setup Routing Refers to the routing protocol used ZyNOS F W Version Refers to the ZyNOS ZyXEL Network Operating System system firmware version ZyNOS is a register...

Page 201: ...error trace log 1 Type 24 in the main menu to display Menu 24 System Maintenance 2 From menu 24 type 3 to display Menu 24 3 System Maintenance Log and Trace Figure 137 Menu 24 3 System Maintenance Log and Trace 3 Enter 1 from Menu 24 3 System Maintenance Log and Trace to display the error log in the system After the Prestige finishes displaying the error log you will have the option to clear it Sa...

Page 202: ...g Connectivity Monitor 57 Sat Jan 01 00 00 00 2000 PP1c INFO monitoring WAN connectivity 58 Sat Jan 01 00 00 00 2000 PP0a WARN MPOA Link Down 59 Sat Jan 01 00 00 02 2000 PP09 WARN SNMP TRAP 3 link up 60 Sat Jan 01 00 00 05 2000 PP1b INFO adjtime task pause 1 day 61 Sat Jan 01 00 01 36 2000 PP14 INFO SMT Password pass 62 Sat Jan 01 00 01 36 2000 PP00 INFO SMT Session Begin 63 Sat Jan 01 00 03 59 20...

Page 203: ...end SYSLOG_CDR SYSLOG_INFO String String board xx line xx channel xx call xx str board the hardware board ID line the WAN ID in a board Channel channel ID within the WAN call the call reference number which starts from 1 and increments by 1 for each new call str C01 Outgoing Call dev xx ch xx dev device No ch channel No C01 Incoming Call xxxxBps xxxxx L2TP xxxxx Remote Call ID C01 Incoming Call xx...

Page 204: ...ata 45000028240140001f06ac12c0a86614ca849a7b0427001700195b451d1430135004000077600000 3 Filter Log SdcmdSyslogSend SYSLOG_FILLOG SYSLOG_NOTICE String String IP Src xx xx xx xx Dst xx xx xx xx prot spo xxxx dpo xxxx S04 R01mD IP is the packet header and S04 R01mD means filter set 4 S and rule 1 R match m drop D Src Source Address Dst Destination Address prot Protocol TCP UDP ICMP spo Source port dpo...

Page 205: ...mand Mode TCP IP 12 Ping Host Enter Menu Selection Number Host IP Address N A Table 64 Menu 24 4 System Maintenance Menu Diagnostic FIELD DESCRIPTION Reset xDSL Re initialize the xDSL link to the telephone company Ping Host Ping the host to see if the links and TCP IP protocol on both systems are working Reboot System Reboot the Prestige Command Mode Type the mode to test and diagnose your Prestig...

Page 206: ...Prestige 660RU Tx Series User s Guide 205 Chapter 24 System Information and Diagnosis ...

Page 207: ...name of your choosing ZyNOS ZyXEL Network Operating System sometimes referred to as the ras file is the system firmware and has a bin filename extension With many FTP and TFTP clients the filenames are similar to those seen next ftp put firmware bin ras This is a sample FTP session showing the transfer of the computer file firmware bin to the Prestige ftp get rom 0 config cfg This is a sample FTP ...

Page 208: ...recommended once your Prestige is functioning properly FTP is the preferred methods for backing up your current configuration to your computer since they are faster Any serial communications program should work fine however you must use Xmodem protocol to perform the download upload and you don t have to rename the files Please note that terms download and upload are relative to the computer Downl...

Page 209: ...d renames it config rom See earlier in this chapter for more information on filename conventions 7 Enter quit to exit the ftp prompt 25 2 3 Example of FTP Commands from the Command Line Menu 24 5 System Maintenance Backup Configuration To transfer the configuration file to your workstation follow the procedure below 1 Launch the FTP client on your workstation 2 Type open and the IP address of your...

Page 210: ...nsole session running 331 Enter PASS command Password 230 Logged in ftp bin 200 Type I OK ftp get rom 0 zyxel rom 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp 16384 bytes sent in 1 10Seconds 297 89Kbytes sec ftp quit Table 66 General Commands for GUI based FTP Clients COMMAND DESCRIPTION Host Address Enter the address of the host server Login Type Anonymo...

Page 211: ...file transfer is complete 4 Launch the TFTP client on your computer and connect to the Prestige Set the transfer mode to binary before starting data transfer 5 Use the TFTP client see the example below to transfer files between the Prestige and the computer The file name for the configuration file is rom 0 rom zero not capital o Note that the telnet connection must be active and the SMT in CI mode...

Page 212: ... automatically restart after the file transfer is complete 25 3 1 Restore Using FTP For details about backup using T FTP please refer to earlier sections on FTP and TFTP file upload in this chapter Table 67 General Commands for GUI based TFTP Clients COMMAND DESCRIPTION Host Enter the IP address of the Prestige 192 168 1 1 is the Prestige s default IP address when shipped Send Fetch Use Send to up...

Page 213: ...P and FTP over WAN Management Limitations section to read about configurations that disallow TFTP and FTP over WAN Menu 24 6 System Maintenance Restore Configuration To transfer the firmware and configuration file to your workstation follow the procedure below 1 Launch the FTP client on your workstation 2 Type open and the IP address of your Prestige Then type root and SMT password as requested 3 ...

Page 214: ... System Firmware 25 4 2 Configuration File Upload You see the following screen when you telnet into menu 24 7 2 Note Do not interrupt the file transfer process as this may permanently damage your Prestige Menu 24 7 1 System Maintenance Upload System Firmware To upload the system firmware follow the procedure below 1 Launch the FTP client on your workstation 2 Type open and the IP address of your s...

Page 215: ...fers the configuration file on the Prestige to your computer and renames it config rom See earlier in this chapter for more information on filename conventions 7 Enter quit to exit the ftp prompt Menu 24 7 2 System Maintenance Upload System Configuration File To upload the system configuration file follow the procedure below 1 Launch the FTP client on your workstation 2 Type open and the IP addres...

Page 216: ...this address 2 Put the SMT in command interpreter CI mode by entering 8 in Menu 24 System Maintenance 3 Enter the command sys stdio 0 to disable the console timeout so the TFTP transfer will not be interrupted Enter sys stdio 5 to restore the five minute console timeout default when the file transfer is complete 4 Launch the TFTP client on your computer and connect to the Prestige Set the transfer...

Page 217: ...in ras where i specifies binary image transfer mode use this mode when transferring binary files host is the Prestige s IP address and put transfers the file source on the computer firmware bin name of the firmware on the computer to the file destination on the remote host ras name of the firmware on the Prestige Commands that you may see in GUI based TFTP clients are listed earlier in this chapte...

Page 218: ...Prestige 660RU Tx Series User s Guide 217 Chapter 25 Firmware and Configuration File Maintenance ...

Page 219: ...information on CI commands Enter 8 from Menu 24 System Maintenance A list of valid commands can be found by typing help or at the command prompt Type exit to return to the SMT main menu when finished Figure 149 Command Mode in Menu 24 Figure 150 Valid Commands Menu 24 System Maintenance 1 System Status 2 System Information and Console Port Speed 3 Log and Trace 4 Diagnostic 5 Backup Configuration ...

Page 220: ...menu select option 9 in menu 24 to go to Menu 24 9 System Maintenance Call Control as shown in the next table Figure 151 Menu 24 9 System Maintenance Call Control 26 2 1 Budget Management Menu 24 9 1 shows the budget management statistics for outgoing calls Enter 1 from Menu 24 9 System Maintenance Call Control to bring up the following menu Figure 152 Menu 24 9 1 System Maintenance Budget Managem...

Page 221: ... time is then displayed in the Prestige error logs Select menu 24 in the main menu to open Menu 24 System Maintenance as shown next Figure 153 Menu 24 System Maintenance Then enter 10 to go to Menu 24 10 System Maintenance Time and Date Setting to update the time and date settings of your Prestige as shown in the following screen Table 68 Menu 24 9 1 System Maintenance Budget Management FIELD DESC...

Page 222: ...of the server Time RFC 868 format displays a 4 byte integer giving the total number of seconds since 1970 1 1 at 0 0 0 NTP RFC 1305 is similar to Time RFC 868 None The default enter the time manually Time Server Address Enter the IP address or domain name of your time server Check with your ISP network administrator if you are unsure of this information Current Time This field displays an updated ...

Page 223: ...e Chapter 26 System Maintenance 222 The Prestige resets the time in three instances On leaving menu 24 10 after making changes When the Prestige starts up if there is a timeserver configured in menu 24 10 24 hour intervals after starting ...

Page 224: ...Prestige 660RU Tx Series User s Guide 223 Chapter 26 System Maintenance ...

Page 225: ... Disable in the corresponding Server Access field Enter 11 from menu 24 to display Menu 24 11 Remote Management Control 27 2 1 Remote Management Setup You may manage your Prestige from a remote location via the Internet WAN only the LAN only All LAN and WAN or Disable neither WAN only Internet ALL LAN and WAN LAN only Disable Neither Enter 11 from menu 24 to display Menu 24 11 Remote Management Co...

Page 226: ...d Client IP 0 0 0 0 FTP Server Server Port 21 Server Access LAN only Secured Client IP 0 0 0 0 Web Server Server Port 80 Server Access LAN only Secured Client IP 0 0 0 0 Press ENTER to Confirm or ESC to Cancel Table 70 Menu 24 11 Remote Management Control FIELD DESCRIPTION Telnet Server FTP Server Web Server Each of these read only labels denotes a service or protocol Port This field shows the por...

Page 227: ...address when configuring from the LAN 27 4 System Timeout There is a default system management idle timeout of five minutes three hundred seconds The Prestige automatically logs you out if the management session remains idle for longer than this timeout period The management session does not time out when it is continuously updating the status in menu 24 1 or when sys stdio has been changed on the...

Page 228: ...Prestige 660RU Tx Series User s Guide 227 Chapter 27 Remote Management ...

Page 229: ...precedence or TOS Type of Service values in the IP header at the periphery of the network to enable the backbone to prioritize traffic Cost Savings IPPR allows organizations to distribute interactive traffic on high bandwidth high cost paths while using low cost paths for batch traffic Load Sharing Network administrators can use IPPR to distribute traffic among multiple paths 28 3 Routing Policy I...

Page 230: ...25 in the main menu to open Menu 25 IP Routing Policy Setup 2 Type the index of the policy set you want to configure to open Menu 25 1 IP Routing Policy Setup Menu 25 1 shows the summary of a policy set including the criteria and the action of a single policy and whether a policy is active or not Each policy contains two lines The former part is the criteria of the incoming packet and the latter i...

Page 231: ...______________________________ 4 N _____________________________________________________________________ _____________________________________________________________________ 5 N _____________________________________________________________________ _____________________________________________________________________ 6 N _____________________________________________________________________ _______...

Page 232: ...cies are displayed with a minus sign in SMT menu 25 Criteria IP Protocol IP layer 4 protocol for example UDP TCP ICMP etc Type of Service Prioritize incoming network traffic by choosing from Don t Care Normal Min Delay Max Thruput Min Cost or Max Reliable Precedence Precedence value of the incoming packet Press SPACE BAR and then ENTER to select a value from 0 to 7 or Don t Care Packet Length Type...

Page 233: ...n the LAN otherwise the gateway must be the IP address of a remote node The default gateway is specified as 0 0 0 0 Type of Service Set the new TOS value of the outgoing packet Prioritize incoming network traffic by choosing No Change Normal Min Delay Max Thruput Max Reliable or Min Cost Precedence Set the new outgoing packet precedence value Values are 0 to 7 or No Change Log Press SPACE BAR and ...

Page 234: ... the next figure Menu 3 2 TCP IP and DHCP Setup DHCP Setup DHCP Server Client IP Pool Starting Address 192 168 1 33 Size of Client IP Pool 32 Primary DNS Server 0 0 0 0 Secondary DNS Server 0 0 0 0 Remote DHCP Server N A TCP IP Setup IP Address 192 168 1 1 IP Subnet Mask 255 255 255 0 RIP Direction Both Version RIP 1 Multicast None IP Policies 2 4 7 9 Edit IP Alias No Press ENTER to Confirm or ESC...

Page 235: ... Create a routing policy set in menu 25 2 Create a rule for this set in Menu 25 1 1 IP Routing Policy as shown next Figure 162 IP Routing Policy Example 1 Menu 25 1 1 IP Routing Policy Policy Set Name set1 Active Yes Criteria IP Protocol 6 Type of Service Don t Care Packet length 10 Precedence Don t Care Len Comp N A Source addr start 192 168 1 33 end 192 168 1 64 port start 0 end N A Destination ...

Page 236: ...63 IP Routing Policy Example 2 6 Check Menu 25 1 IP Routing Policy Setup to see if the rule is added correctly 7 Apply both policy sets in menu 3 2 as shown next Menu 25 1 1 IP Routing Policy Policy Set Name set2 Active Yes Criteria IP Protocol 6 Type of Service Don t Care Packet length 10 Precedence Don t Care Len Comp N A Source addr start 0 0 0 0end N A port start 0 end N A Destination addr sta...

Page 237: ...P Setup DHCP Server Client IP Pool Starting Address 192 168 1 33 Size of Client IP Pool 64 Primary DNS Server 0 0 0 0 Secondary DNS Server 0 0 0 0 Remote DHCP Server N A TCP IP Setup IP Address 192 168 1 1 IP Subnet Mask 255 255 255 0 RIP Direction Both Version RIP 1 Multicast None IP Policies 1 2 Edit IP Alias No Press ENTER to Confirm or ESC to Cancel ...

Page 238: ...Prestige 660RU Tx Series User s Guide 237 Chapter 28 IP Policy Routing ...

Page 239: ...take precedence over higher numbered sets thereby avoiding scheduling conflicts For example if sets 1 2 3 and 4 in are applied in the remote node then set 1 will take precedence over set 2 3 and 4 as the Prestige by default applies the lowest numbered set first Set 2 will take precedence over set 3 and 4 and so on You can design up to 12 schedule sets but you can only apply up to four schedule set...

Page 240: ...lect Yes or No Choose Yes and press ENTER to activate the schedule set Start Date Enter the start date when you wish the set to take effect in year month date format Valid dates are from the present to 2036 12 31 How Often Should this schedule set recur weekly or be used just once only Press the SPACE BAR and then ENTER to select Once or Weekly Both these options are mutually exclusive If Once is ...

Page 241: ...eans that the connection is blocked whether or not there is a demand call on the line Enable Dial On Demand means that this schedule permits a demand call on the line Disable Dial On Demand means that this schedule prevents a demand call on the line When you have completed this menu press ENTER at the prompt Press ENTER to Confirm or ESC to Cancel to save your configuration or press ESC at any tim...

Page 242: ...Prestige 660RU Tx Series User s Guide 241 Chapter 29 Call Scheduling ...

Page 243: ...ure that the Prestige s power adaptor is connected to the Prestige and plugged in to an appropriate power source Check that the Prestige and the power source are both turned on Turn the Prestige off and on If the error persists you may have a hardware problem In this case you should contact your vendor Table 75 Troubleshooting the LAN LED PROBLEM CORRECTIVE ACTION The LAN LEDs do not turn on Check...

Page 244: ...front panel are both off refer to the Problems with the LAN LED section Make sure that the IP address and the subnet mask of the Prestige and your computer s are on the same subnet I cannot ping any computer on the LAN If the 10M 100M LEDs on the front panel are both off refer to the Problems with the LAN LED section Make sure that the IP address and the subnet mask of the Prestige and the compute...

Page 245: ...p for details Internet connection disconnects Check the schedule rules Refer to Chapter 29 Call Scheduling SMT If you use PPPoA or PPPoE encapsulation check the idle time out setting Refer to Chapter 6 WAN Setup web configurator or Chapter 18 Remote Node Configuration SMT Contact your ISP Table 80 Troubleshooting the Password PROBLEM CORRECTIVE ACTION I cannot access the Prestige The username is a...

Page 246: ...computer s and the Prestige s IP addresses must be on the same subnet for LAN access If you changed the Prestige s LAN IP address then enter the new one as the URL Remove any filters in SMT menu 3 1 LAN or menu 11 5 WAN that block web service See also the Problems with Remote Management section Table 82 Troubleshooting Remote Management PROBLEM CORRECTIVE ACTION I cannot remotely manage the Presti...

Page 247: ...telephone sets Install the POTS splitter at the point where the telephone line enters your residence as shown in the following figure Figure 168 Connecting a POTS Splitter 1 Connect the side labeled Phone to your telephone 2 Connect the side labeled Modem to your Prestige 3 Connect the side labeled Line to the telephone wall jack Telephone Microfilters Telephone voice transmissions take place in t...

Page 248: ... 3 Connect another cable from the double jack end of the Y Connector to the Prestige 4 Connect the phone side of the microfilter to your telephone as shown in the following figure Figure 169 Connecting a Microfilter Prestige With ISDN This section relates to people who use their Prestige with ADSL over ISDN digital telephone service only The following is an example installation for the Prestige wi...

Page 249: ...e purchase of a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriate TCP IP components are installed configure the TCP IP settings in order to communicate with your network If you manually assign IP information instead of using dynamic assignment make sure that your computers...

Page 250: ...etworks If you need the adapter 1 In the Network window click Add 2 Select Adapter and then click Add 3 Select the manufacturer and model of your network adapter and then click OK If you need TCP IP 1 In the Network window click Add 2 Select Protocol and then click Add 3 Select Microsoft from the list of manufacturers 4 Select TCP IP from the list of network protocols and then click OK If you need...

Page 251: ... IP entry and click Properties 2 Click the IP Address tab If your IP address is dynamic select Obtain an IP address automatically If you have a static IP address select Specify an IP address and type your information into the IP Address and Subnet Mask fields Figure 172 Windows 95 98 Me TCP IP Properties IP Address 3 Click the DNS Configuration tab If you do not know your DNS information select Di...

Page 252: ... close the TCP IP Properties window 6 Click OK to close the Network window Insert the Windows CD if prompted 7 Turn on your Prestige and restart your computer when prompted Verifying Settings 1 Click Start and then Run 2 In the Run window type winipcfg and then click OK to open the IP Configuration window 3 Select your network adapter You should see your computer s IP address subnet mask and defau...

Page 253: ...endix B 252 Figure 174 Windows XP Start Menu 2 For Windows XP click Network Connections For Windows 2000 NT click Network and Dial up Connections Figure 175 Windows XP Control Panel 3 Right click Local Area Connection and then click Properties ...

Page 254: ...Properties 4 Select Internet Protocol TCP IP under the General tab in Win XP and click Properties Figure 177 Windows XP Local Area Connection Properties 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP If you have a dynamic IP address click Obtain an IP address automatically ...

Page 255: ...ddresses click Add In TCP IP Address type an IP address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add Configure additional default gateways in the IP Settings tab by clicking Add in Default gateways In TCP IP Gateway Address type the IP address of the default gateway in Gateway To manually configure a default metric...

Page 256: ...9 Windows XP Internet Protocol TCP IP Properties 8 Click OK to close the Internet Protocol TCP IP Properties window 9 Click OK to close the Local Area Connection Properties window 10Turn on your Prestige and restart your computer if prompted Verifying Settings 1 Click Start All Programs Accessories and then Command Prompt 2 In the Command Prompt window type ipconfig and then press ENTER You can al...

Page 257: ... Guide Appendix B 256 Figure 180 Macintosh OS 8 9 Apple Menu 2 Select Ethernet built in from the Connect via list Figure 181 Macintosh OS 8 9 TCP IP 3 For dynamically assigned settings select Using DHCP Server from the Configure list ...

Page 258: ...rompted to save changes to your configuration 7 Turn on your Prestige and restart your computer if prompted Verifying Settings Check your TCP IP properties in the TCP IP Control Panel window Macintosh OS X 1 Click the Apple menu and click System Preferences to open the System Preferences window Figure 182 Macintosh OS X Apple Menu 2 Click Network in the icon bar Select Automatic from the Location ...

Page 259: ...onfigure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your Prestige in the Router address box 5 Click Apply Now and close the window 6 Turn on your Prestige and restart your computer if prompted Verifying Settings Check your TCP IP properties in the Network window ...

Page 260: ...Prestige 660RU Tx Series User s Guide 259 Appendix B ...

Page 261: ...ess the first two octets make up the network number and the two remaining octets make up the host ID Class C addresses begin starting from the left with 1 1 0 In a class C address the first three octets make up the network number and the last octet is the host ID Class D addresses begin with 1 1 1 0 Class D addresses are used for multicasting There is also a class E address It is reserved for futu...

Page 262: ... host ID Subnet masks are expressed in dotted decimal notation just as IP addresses are The natural masks for class A B and C IP addresses are as follows Subnetting With subnetting the class arrangement of an IP address is ignored For example a class C address no longer has to have 24 bits of network number and 8 bits of host ID With subnetting some of the host ID bits are converted into network n...

Page 263: ...k Normally if no mask is specified it is understood that the natural mask is being used Example Two Subnets As an example you have a class C address 192 168 1 0 with subnet mask of 255 255 255 0 The first three octets of the address make up the network number class C You want to have two separate networks Table 86 Alternative Subnet Mask Notation SUBNET MASK IP ADDRESS SUBNET MASK 1 BITS LAST OCTE...

Page 264: ...68 1 1 and the highest is 192 168 1 126 Similarly the host ID range for the second subnet is 192 168 1 129 to 192 168 1 254 Note In the following charts shaded bolded last octet bit values indicate host ID bits borrowed to form network ID bits The number of borrowed host ID bits determines the number of subnets you can have The remaining number of host ID bits after borrowing determines the number...

Page 265: ... 0 IP Address Binary 11000000 10101000 00000001 00000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Address 192 168 1 0 Lowest Host ID 192 168 1 1 Broadcast Address 192 168 1 63 Highest Host ID 192 168 1 62 Table 91 Subnet 2 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 64 IP Address Binary 11000000 10101000 00000001 01000000 Subnet Mask Binary 11111111 11111111 11111...

Page 266: ... 11111111 11111111 11000000 Subnet Address 192 168 1 192 Lowest Host ID 192 168 1 193 Broadcast Address 192 168 1 255 Highest Host ID 192 168 1 254 Table 94 Eight Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BROADCAST ADDRESS 1 0 1 30 31 2 32 33 62 63 3 64 65 94 95 4 96 97 126 127 5 128 129 158 159 6 160 161 190 191 7 192 193 222 223 8 224 223 254 255 Table 95 Class C Subnet Planning N...

Page 267: ...tting The following table is a summary for class B subnet planning Table 96 Class B Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 1 255 255 128 0 17 2 32766 2 255 255 192 0 18 4 16382 3 255 255 224 0 19 8 8190 4 255 255 240 0 20 16 4094 5 255 255 248 0 21 32 2046 6 255 255 252 0 22 64 1022 7 255 255 254 0 23 128 510 8 255 255 255 0 24 256 254 9 255 255 255 128 25...

Page 268: ...Prestige 660RU Tx Series User s Guide 267 Appendix C ...

Page 269: ... manner similar to dial up services using PPP Benefits of PPPoE PPPoE offers the following benefits It provides you with a familiar dial up networking DUN user interface It lessens the burden on the carriers of provisioning virtual circuits all the way to the ISP on multiple switches for thousands of users For GSTN PSTN and ISDN the switching fabric is already in place It allows the ISP to use the...

Page 270: ...cess Concentrator and tunnels the PPP frames to the ISP The L2TP tunnel is capable of carrying multiple PPP sessions With PPPoE the VC Virtual Circuit is equivalent to the dial up connection and is between the modem and the AC as opposed to all the way to the ISP However the PPP negotiation is between the computer and the ISP Prestige as a PPPoE Client When using the Prestige as a PPPoE client the...

Page 271: ...uit end points Figure 186 Virtual Circuit Topology Think of a virtual path as a cable that contains a bundle of wires The cable connects two points and wires within the cable provide individual circuits between the two points In an ATM cell header a VPI Virtual Path Identifier identifies a link formed by a virtual path a VCI Virtual Channel Identifier identifies a channel within a virtual path The...

Page 272: ...Prestige 660RU Tx Series User s Guide 271 Appendix E ...

Page 273: ...mmand keywords exactly as shown do not abbreviate The required fields in a command are enclosed in angle brackets The optional fields in a command are enclosed in square brackets The symbol means or For example sys filter netbios config type on off means that you must specify the type of netbios filter and whether to turn it on or off Command Usage A list of valid commands can be found by typing h...

Page 274: ...Prestige 660RU Tx Series User s Guide 273 Appendix F ...

Page 275: ...sful TELNET login Someone has logged on to the router via telnet TELNET login failed Someone has failed to log on to the router via telnet Successful FTP login Someone has logged on to the router via ftp FTP login failed Someone has failed to log on to the router via ftp NAT Session Table is Full The maximum number of NAT session table entries has been exceeded and the table is full Starting Conne...

Page 276: ...t filter matched set d rule d Attempted access matched a configured filter rule denoted by its set and rule number and was blocked or forwarded according to the rule Table 100 ICMP Logs LOG MESSAGE DESCRIPTION Packet without a NAT table entry blocked ICMP The router blocked a packet that didn t have a corresponding NAT table entry Router reply ICMP packet ICMP The router sent an ICMP reply packet ...

Page 277: ... ppp IPCP Opening The PPP connection s Internet Protocol Control Protocol stage is opening ppp LCP Closing The PPP connection s Link Control Protocol stage is closing ppp IPCP Closing The PPP connection s Internet Protocol Control Protocol stage is closing Table 103 ICMP Notes TYPE CODE DESCRIPTION 0 Echo Reply 0 Echo reply message 3 Destination Unreachable 0 Net unreachable 1 Host unreachable 2 P...

Page 278: ...rmation reply message Table 104 Syslog Logs LOG MESSAGE DESCRIPTION Facility 8 Severity Mon dd hr mm ss hostname src srcIP srcPort dst dstIP dstPort msg msg note note devID mac address last three numbers cat category This message is sent by the system RAS displays as the system name if you haven t configured one when the router generates a syslog The facility is defined in the web MAIN MENU LOGS L...

Page 279: ...ndix G 278 KE Key Exchange ID Identification CER Certificate CER_REQ Certificate Request HASH Hash SIG Signature NONCE Nonce NOTFY Notification DEL Delete VID Vendor ID Table 105 RFC 2408 ISAKMP Payload Types continued LOG DISPLAY PAYLOAD TYPE ...

Page 280: ...Prestige 660RU Tx Series User s Guide 279 Appendix G ...

Page 281: ... Management 219 C Call filtering 178 Call filters Built in 178 User defined 178 Call Scheduling 238 Maximum Number of Schedule Sets 238 PPPoE 240 Precedence 238 Precedence Example 238 CBR Continuous Bit Rate 68 CDR 202 CDR Call Detail Record 201 change password at login 39 Collision 197 Command Interpreter Mode 218 Community 193 compact 35 compact guide 38 Computer Name 124 Conditions that prevent...

Page 282: ...Applying Filters 190 Ethernet Traffic 190 Ethernet traffic 190 Filter Rules 181 Filter structure 179 Generic Filter Rule 185 Remote Node 148 Remote Node Filter 148 Remote Node Filters 190 Sample 189 SUA 187 TCP IP Filter Rule 182 Filter Log 203 Filter Rule Process 179 Filter Rule Setup 182 Filter Set Class 182 Filtering 178 182 Filtering Process Outgoing Packets 178 Finger 79 firmware 116 206 uplo...

Page 283: ...TCP IP 58 LEDs 242 Link type 197 LLC based Multiplexing 152 Log and Trace 200 Log Facility 201 Logging Option 184 186 Logical networks 136 Login 144 M MAC Media Access Control 112 MAC address 160 Main Menu 121 maintenance 108 management idle timeout period 39 Management Information Base MIB 193 Maximum Burst Size MBS 65 68 MBSSee Maximum Burst Size 140 MDI MDI X 32 Media Access Control 158 Message...

Page 284: ...lity of Service 228 Quick Start Guide 27 R RAS 199 229 Rate Receiving 197 Transmission 197 reinitialize the ADSL line 115 Related Documentation 26 Remote DHCP Server 134 remote management 245 Remote Management and NAT 91 Remote Management Limitations 90 225 Remote Management Setup 224 Remote Node 142 197 Remote Node Profile 144 Remote Node Setup 142 Remote node 142 Remote Node Index Number 197 Req...

Page 285: ...Status 196 System Information 198 System Information Diagnosis 196 System Maintenance 196 198 207 210 215 218 219 221 System Management Terminal 119 System Status 197 System Timeout 91 226 T TCP IP 91 187 204 Telnet 91 118 Telnet Configuration 91 TFTP Restrictions 225 TFTP File Transfer 215 TFTP Restrictions 90 209 Time and Date Setting 220 Time Zone 221 Timeout 129 TOS Type of Service 228 Trace R...

Page 286: ... WAN backup 70 WAN Setup 128 Web Configurator 38 39 40 web configurator screen summary 40 web service 245 X XMODEM protocol 207 Z Zero Configuration Internet Access 31 ZyNOS 207 ZyNOS ZyXEL Network Operating System 206 ZyNOS F W Version 207 ZyXEL Limited Warranty Note 4 ...

Reviews: