background image

Prestige 623ME-T User’s Guide 

18-18  

 

Filter Configuration 

Table 18-5 Filter Sets Table 

FILTER SETS 

DESCRIPTION 

Input Filter Sets: 

Apply filters for incoming traffic. You may apply protocol or device 
filter rules. See earlier in this chapter for information on filters.  

Output Filter Sets:  Apply filters for traffic leaving the Prestige. You may apply filter rules 

for protocol or device filters. See earlier in this section for 
information on types of filters. 

Call Filter Sets: 

Apply filters to decide if a packet should be allowed to trigger a call. 

18.6.1 Ethernet Traffic 

You seldom need to filter Ethernet traffic; however, the filter sets may be useful to block certain packets, 
reduce traffic and prevent security breaches. Go to menu 3.1 (shown next) and type the number(s) of the 
filter set(s) that you want to apply as appropriate. You can choose up to four filter sets (from twelve) by 
typing their numbers separated by commas, for example, 2, 4, 6, 11. The factory default filter set, 
NetBIOS_LAN, is inserted in the 

protocol filters

 field under 

Input Filter Sets

 in menu 3.1 in order to 

prevent local NetBIOS messages from triggering calls to the DNS server. 

 

 

 

 

 

Figure 18-14 Filtering Ethernet Traffic 

18.6.2 Remote Node Filters 

Go to menu 11.5 (shown next) and type the number(s) of the filter set(s) as appropriate. You can cascade up 
to four filter sets by typing their numbers separated by commas. The factory default filter set, 
NetBIOS_WAN, is inserted in the 

protocol filters

 field under 

Call Filter Sets

 in menu 11.5 to block local 

NetBIOS traffic from triggering calls to the ISP. 

Menu 3.1 – LAN Port Filter Setup 

 

Input Filter Sets:

protocol filters= 

device filters=

Output Filter Sets:

protocol filters=

device filters=

 

 

 

 

            Press ENTER to Confirm or ESC to Cancel:

Apply filter 2 to 

block NETBIOS 

traffic from the 

LAN. 

Содержание Prestige 623ME-T

Страница 1: ...Prestige 623ME T ADSL Modem Combo for Internet Access User s Guide Version 3 40 February 2004...

Страница 2: ......

Страница 3: ...ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it...

Страница 4: ......

Страница 5: ...uctions may cause harmful interference to radio communications If this equipment does cause harmful interference to radio television reception which can be determined by turning the equipment off and...

Страница 6: ......

Страница 7: ...purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be h...

Страница 8: ......

Страница 9: ...p zyxel com WORLDWIDE sales zyxel com tw 886 3 578 2439 ftp europe zyxel com ZyXEL Communications Corp 6 Innovation Road II Science Based Industrial Park Hsinchu 300 Taiwan support zyxel com 1 800 255...

Страница 10: ......

Страница 11: ...figurator Overview 2 1 2 2 Accessing the Prestige Web Configurator 2 1 2 3 Navigating the Prestige Web Configurator 2 2 2 4 Configuring Password 2 3 2 5 Resetting the Prestige 2 4 2 5 1 Using The Rese...

Страница 12: ...iew 5 1 5 2 Single User Account Server SUA Server 5 1 5 2 1 Advantages of SUA 5 2 5 2 2 Configuring Inside Servers 5 2 5 3 Selecting the NAT Mode 5 4 5 4 Configuring SUA Server 5 4 Chapter 6 Dynamic D...

Страница 13: ...er 10 Introducing the SMT 10 1 10 1 SMT Introduction 10 1 10 1 1 Procedure for SMT Configuration via Telnet 10 1 10 1 2 Prestige SMT Menu Overview 10 1 10 2 Navigating the SMT Interface 10 3 10 2 1 Sy...

Страница 14: ...16 Bridging Setup 16 1 16 1 Bridging Overview 16 1 16 2 Bridge Ethernet Setup 16 1 16 2 1 Remote Node Bridging Setup 16 1 16 2 2 Bridge Static Route Setup 16 3 Chapter 17 Network Address Translation...

Страница 15: ...from the Command Line 21 3 21 2 3 Example of FTP Commands from the Command Line 21 3 21 2 4 GUI based FTP Clients 21 4 21 2 5 TFTP and FTP over WAN Will Not Work When 21 4 21 2 6 Backup Configuration...

Страница 16: ...lying an IP Policy 24 5 24 5 1 Ethernet IP Policies 24 5 24 6 IP Policy Routing Example 24 7 Chapter 25 Call Scheduling 25 1 25 1 Call Scheduling Overview 25 1 Appendix A Troubleshooting A 1 A 1 Using...

Страница 17: ...tion on a TCP IP Network 7 2 Figure 7 2 Remote Management 7 3 Figure 8 1 Configuring UPnP 8 2 Figure 9 1 System Status 9 2 Figure 9 2 System Status Show Statistics 9 4 Figure 9 3 DHCP Table 9 6 Figure...

Страница 18: ...2 Menu 11 3 Remote Node Network Layer Options 16 2 Figure 16 3 Menu 12 3 1 Edit Bridge Static Route 16 3 Figure 17 1 Menu 4 Applying NAT for Internet Access 17 1 Figure 17 2 Menu 11 3 Applying NAT to...

Страница 19: ...m Firmware 21 9 Figure 21 6 Telnet Into Menu 24 7 2 System Maintenance 21 9 Figure 21 7 FTP Session Example of Firmware File Upload 21 10 Figure 22 1 Command Mode in Menu 24 22 1 Figure 22 2 Valid Com...

Страница 20: ......

Страница 21: ...1 Configure Dynamic DNS 11 3 Table 12 1 DHCP Ethernet Setup Menu Fields 12 3 Table 12 2 TCP IP Ethernet Setup Menu Fields 12 3 Table 13 1 Menu 4 Internet Access Setup 13 2 Table 14 1 Menu 11 1 Remote...

Страница 22: ...General Commands for GUI based FTP Clients 21 4 Table 21 3 General Commands for GUI based TFTP Clients 21 6 Table 22 1 Menu 24 9 1 Budget Management 22 3 Table 22 2 Menu 24 10 System Maintenance Time...

Страница 23: ...ooting ADSL Connection A 4 Chart A 10 Troubleshooting WAN Interface A 5 Chart A 11 Troubleshooting Internet Access A 5 Chart A 12 Troubleshooting Internet Connection A 5 Chart A 13 Troubleshooting Con...

Страница 24: ......

Страница 25: ...s of this guide contain background information solely on features not configurable by web configurator Related Documentation Supporting Disk Refer to the included CD for support documents Quick Start...

Страница 26: ...may be referred to as the Prestige in this user s guide The following section offers some background information on DSL Skip to Chapter 1 if you wish to begin working with your router right away User...

Страница 27: ...upstream capacity Asymmetrical services ADSL are suitable for Internet users because more information is usually downloaded than uploaded For example a simple button click in a web browser can start a...

Страница 28: ......

Страница 29: ...I Getting Started This part is structured as a step by step guide to help you access your Prestige It covers key features and applications accessing the web configurator and configuring the wizard scr...

Страница 30: ......

Страница 31: ...ty to provide a complete networking solution for almost any user Ease of Installation Your Prestige is designed for quick intuitive and easy installation Physically its compact size and lightness make...

Страница 32: ...ltiplexing Your Prestige supports VC based and LLC based multiplexing Encapsulation The Prestige supports RFC 1483 encapsulation over ATM and PPP over Ethernet RFC 2516 SNMP SNMP Simple Network Manage...

Страница 33: ...ult password to 1234 IP address to 192 168 1 1 subnet mask to 255 255 255 0 and DHCP server enabled with a pool of 32 IP addressed starting at 192 168 1 33 1 3 Applications for the Prestige Here are s...

Страница 34: ...now Your Prestige 1 3 2 LAN to LAN Application You can use the Prestige to connect two geographically dispersed networks through an ADSL line A typical LAN to LAN application for your Prestige is show...

Страница 35: ...7 0 and later versions with JavaScript enabled It is recommended that you set your screen resolution to 1024 by 768 pixels 2 2 Accessing the Prestige Web Configurator Step 1 Make sure your Prestige ha...

Страница 36: ...up to begin a series of screens to configure your Prestige for the first time Click a link under Advanced Setup to configure advanced Prestige features Click a link under Maintenance to see Prestige p...

Страница 37: ...shown Figure 2 3 Password The following table describes the labels in this screen Table 2 1 Password LABEL DESCRIPTION Old Password Type the default password or the existing password you use to acces...

Страница 38: ...that you had previously The password will be reset to 1234 also 2 5 1 Using The Reset Button Make sure the PWR LED is on not blinking when you begin this procedure 1 Press the RESET button for more t...

Страница 39: ...irtual Circuit that connects to an ADSL Access Concentrator where the PPP session terminates One PVC can support any number of PPP sessions from your LAN The PPPoE option is for a dial up connection u...

Страница 40: ...ment each protocol is assigned to a specific virtual circuit for example VC1 carries IP etc VC based multiplexing may be dominant in environments where dynamic creation of large numbers of ATM VCs is...

Страница 41: ...mmon street name so too do computers on a LAN share one common network number Where you obtain your network number depends on your particular situation If the ISP or your network administrator assigns...

Страница 42: ...SP assigns you a different one each time The Single User Account feature can be enabled or disabled if you have either a dynamic or static IP However the encapsulation method assigned influences your...

Страница 43: ...refer to RFC 1597 Address Allocation for Private Internets and RFC 1466 Guidelines for Management of IP Address Space 3 8 NAT NAT Network Address Translation NAT RFC 1631 is the translation of the IP...

Страница 44: ...ays the encapsulation used by the protocol selected on the previous wizard screen Back Click Back to go back to the first wizard screen Finish Click Finish to save and complete the wizard setup 3 9 2...

Страница 45: ...User Account feature can be used with either a dynamic or static IP address Select Obtain an IP Address Automatically if you have a dynamic IP address otherwise select Static IP Address and type your...

Страница 46: ...le server for mail FTP telnet web etc that you may have Figure 4 Setup Complete 3 11 Test Your Internet Connection Launch your web browser and navigate to www zyxel com Internet access is just the beg...

Страница 47: ...LAN II Part II LAN This part covers LAN Local Area Network setup...

Страница 48: ......

Страница 49: ...al connection determines whether the Prestige ports are LAN or WAN ports There are two separate IP networks one inside the LAN network the other outside the WAN network as shown next Figure 4 1 LAN an...

Страница 50: ...ervers out of the DHCP setup under all circumstances If your ISP gives you explicit DNS servers make sure that you enter their IP addresses in the DHCP Setup menu This way the Prestige can pass the DN...

Страница 51: ...being that RIP 2B uses subnet broadcasting while RIP 2M uses multicasting 4 4 4 Multicast Traditionally IP packets are transmitted in one of either two ways Unicast 1 sender 1 recipient or Broadcast...

Страница 52: ...addresses an IP default gateway and DNS servers to Windows 95 Windows NT and other systems that support the DHCP client If set to None the DHCP server will be disabled If set to Relay the Prestige act...

Страница 53: ...he IP address of the actual remote DHCP server here TCP IP IP Address Enter the IP address of your Prestige in dotted decimal notation for example 192 168 1 1 factory default IP Subnet Mask Type the s...

Страница 54: ......

Страница 55: ...NAT and Dynamic DNS III Part III NAT and Dynamic DNS This part covers NAT Network Address Translation and dynamic DNS Domain Name Sever...

Страница 56: ......

Страница 57: ...users on the LAN wanting to concurrently access the Internet you will have to lease a block of legal or globally unique IP addresses from the ISP The Single User Account SUA feature allows you to hav...

Страница 58: ...NAT 5 2 1 Advantages of SUA In summary SUA is a cost effective solution for small offices with less than 20 hosts to access the Internet or other remote TCP IP networks SUA supports servers to be acc...

Страница 59: ...nges each time it is powered on In addition to the servers for specific services SUA supports a default server A service request that does not have a server explicitly designated for it is forwarded t...

Страница 60: ...WAN IP address for your Prestige The Prestige uses Address Mapping Set 1 in the NAT Edit SUA NAT Server Set screen Edit Details Click this link to go to the NAT Edit SUA NAT Server Set screen Apply C...

Страница 61: ...Prestige 623ME T User s Guide NAT 5 5 Figure 5 4 Edit SUA NAT Server Set The following table describes the labels in this screen...

Страница 62: ...in the End Port No field End Port No Enter a port number in this field To forward only one port enter the port number again in the Start Port No field above and then enter it again in this field To f...

Страница 63: ...or relatives will always be able to call you even if they don t know your IP address First of all you need to have registered a dynamic DNS account with www dyndns org This is for people with a dynami...

Страница 64: ...the name of your Dynamic DNS service provider Host Name Type the domain name assigned to your Prestige by your Dynamic DNS provider E mail Address Type your e mail address User Type your user name Pa...

Страница 65: ...Remote Management and UPnP IV Part IV Remote Management and UPnP This part contains information on how to configure the Prestige for remote management and setting up Universal Plug and Play UPnP...

Страница 66: ......

Страница 67: ...ement Limitations Remote management over LAN or WAN will not work when 1 A filter in SMT menu 3 1 LAN or in menu 11 5 WAN is applied to block a Telnet FTP or Web service 2 You have disabled that servi...

Страница 68: ...either the console port or telnet web FTP connections Your Prestige automatically logs you out if you do nothing in this timeout period except when it is continuously updating the status in menu 24 1...

Страница 69: ...ement The following table describes the labels in this screen Table 7 1 Remote Management LABEL DESCRIPTION Server Type Each of these labels denotes a service that you may use to remotely manage the P...

Страница 70: ...ON Secured Client IP The default 0 0 0 0 allows any client to use this service to remotely manage the Prestige Type an IP address to restrict access to a client with a matching IP address Apply Click...

Страница 71: ...con Selecting the icon of a UPnP device will allow you to access the information and properties of that device 8 1 2 NAT Traversal UPnP NAT traversal automates the process of allowing an application t...

Страница 72: ...sted UPnP broadcasts are only allowed on the LAN See later sections for examples of installing UPnP in Windows XP and Windows Me as well as an example of using UPnP in Windows 8 2 1 Configuring UPnP F...

Страница 73: ...her UPnP enabled device this eliminates the need to manually configure port forwarding for the UPnP enabled application Apply Click Apply to save the setting to the Prestige Cancel Click Cancel to ret...

Страница 74: ...computer when prompted 8 3 2 Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP Step 1 Click Start and Control Panel Step 2 Double click Network Connections Step 3...

Страница 75: ...s section shows you how to use the UPnP feature in Windows XP You must already have UPnP installed in Windows XP and UPnP activated on the Prestige Make sure the computer is connected to a LAN port of...

Страница 76: ...automatically created Step 4 You may edit or delete the port mappings or click Add to manually add port mappings When the UPnP enabled device is disconnected from your computer all port mappings will...

Страница 77: ...u can access the web based configurator on the Prestige without finding out the IP address of the Prestige first This comes helpful if you do not know the IP address of the Prestige Follow the steps b...

Страница 78: ...bled device displays under Local Network Step 5 Right click on the icon for your Prestige and select Invoke The web configurator login screen displays Step 6 Right click on the icon for your Prestige...

Страница 79: ...Maintenance V Part V Maintenance This part covers the maintenance screens...

Страница 80: ......

Страница 81: ...ic statistics 9 1 Maintenance Overview Use the maintenance screens to view system information upload new firmware manage configuration and restart your Prestige 9 2 System Status Screen Click System S...

Страница 82: ...Prestige 623ME T User s Guide 9 2 Maintenance Figure 9 1 System Status The following table describes the labels in this screen Table 9 1 System Status LABEL DESCRIPTION System Status...

Страница 83: ...is is the IP address of the default gateway if applicable VPI VCI This is the Virtual Path Identifier and Virtual Channel Identifier that you entered in the first Wizard screen LAN Information MAC Add...

Страница 84: ...ystem up time and poll interval s The Poll Interval s field is configurable Figure 9 2 System Status Show Statistics The following table describes the labels in this screen Table 9 2 System Status Sho...

Страница 85: ...ting LAN Port Statistics This is the LAN port Interface This field displays the type of port TxPkts This field displays the number of packets transmitted on this port RxPkts This field displays the nu...

Страница 86: ...DHCP status The DHCP table shows current DHCP client information including IP Address Host Name and MAC Address of all network clients using the DHCP server Figure 9 3 DHCP Table The following table d...

Страница 87: ...ge 623ME T User s Guide Maintenance 9 7 Click Diagnostic to display the following screen Figure 9 4 Diagnostic 9 4 1 Diagnostic General Screen Click Diagnostic and then General to open the screen show...

Страница 88: ...eral LABEL DESCRIPTION TCP IP Address Type the IP address of a computer that you want to ping in order to test a connection Ping Click this button to ping the IP address that you entered Reset System...

Страница 89: ...ral LABEL DESCRIPTION Back Click this button to go back to the main Diagnostic screen 9 4 2 Diagnostic DSL Line Screen Click Diagnostic and then DSL Line to open the screen shown next Figure 9 6 Diagn...

Страница 90: ...oblems with the DSLAM and ATM network Upstream Noise Margin Click this button to display the upstream noise margin Downstream Noise Margin Click this button to display the downstream noise margin Back...

Страница 91: ...ant to upload Remember that you must decompress compressed zip files before you can upload them Upload Click Upload to begin the upload process This process may take up to two minutes Reset Click this...

Страница 92: ...e operating systems you may see the following icon on your desktop Figure 9 8 Network Temporarily Disconnected After two minutes log in again and check your new firmware version in the System Status s...

Страница 93: ...vers System Management Terminal configuration for general setup Ethernet setup Internet access remote nodes remote node TCP IP static routing and NAT See the web configurator parts of this guide for b...

Страница 94: ......

Страница 95: ...1 In Windows click Start usually in the bottom left corner Run and then type telnet 192 168 1 1 the default IP address and click OK Step 2 For your first login enter the default password 1234 As you...

Страница 96: ...Prestige 623ME T User s Guide 10 2 Introducing the SMT Figure 10 2 Prestige 623ME T SMT Menu Overview...

Страница 97: ...the next field You can also use the UP DOWN arrow keys to move to the previous and the next field respectively Entering information Type in or press SPACE BAR then press ENTER You need to fill in two...

Страница 98: ...enu to set up filters to provide security etc 22 SNMP Configuration Use this menu to set up SNMP related parameters 23 System Password Use this menu to change your password 24 System Maintenance This...

Страница 99: ...the Old Password field for example 1234 and press ENTER Figure 10 4 Menu 23 System Password Step 3 Type your new system password in the New Password field up to 30 characters and press ENTER Step 4 R...

Страница 100: ......

Страница 101: ...000 click Start Settings Control Panel and then double click System Click the Network Identification tab and then the Properties button Note the entry for the Computer name field and enter it as the P...

Страница 102: ...ld blank the ISP may assign a domain name via DHCP You can go to menu 24 8 and type sys domainname to see the current domain name used by your gateway If you want to clear this field just press the SP...

Страница 103: ...own next Figure 11 2 Menu 1 1 Configure Dynamic DNS Follow the instructions in the next table to configure Dynamic DNS parameters Table 11 2 Menu 1 1 Configure Dynamic DNS FIELD DESCRIPTION EXAMPLE Se...

Страница 104: ...d assigned to you Enable Wildcard Your Prestige supports DYNDNS Wildcard Press SPACE BAR and then ENTER to select Yes or No This field is N A when you choose DDNS client as your service provider No Wh...

Страница 105: ...the Ethernet traffic You seldom need to filter Ethernet traffic however the filter sets may be useful to block certain packets reduce traffic and prevent security breaches Figure 12 2 Menu 3 1 LAN Por...

Страница 106: ...d press ENTER to display Menu 3 2 TCP IP and DHCP Ethernet Setup as shown next Figure 12 3 Menu 3 2 TCP IP and DHCP Ethernet Setup Follow the instructions in the following table on how to configure th...

Страница 107: ...nt of the IP address pool 32 Primary DNS Server Secondary DNS Server Enter the IP addresses of the DNS servers The DNS servers are passed to the DHCP clients along with the IP address and the subnet m...

Страница 108: ...ip in a Multicast group The Prestige supports both IGMP version 1 IGMP v1 and version 2 IGMP v2 Press the SPACE BAR to enable IP Multicasting or select None to disable it None default IP Policies Crea...

Страница 109: ...t routing behavior and alter the packet forwarding based on the policy defined by the network administrator Policy based routing is applied to incoming packets on a per interface basis prior to the no...

Страница 110: ...e main menu type 4 to display Menu 4 Internet Access Setup as shown next Figure 13 2 Menu 4 Internet Access Setup The following table contains instructions on how to configure your Prestige for Intern...

Страница 111: ...at the peak rate and a parameter for burst type traffic Type the SCR it must be less than the PCR 0 Maximum Burst Size MBS Refers to the maximum number of cells that can be sent at the peak rate Type...

Страница 112: ...SUA Only is selected in the NAT field the SMT uses NAT server set 1 in menu 15 1 see the NAT chapter for details N A When you have completed this menu press ENTER at the prompt Press ENTER to confirm...

Страница 113: ...figuring one of the remote nodes You first choose a remote node in Menu 11 Remote Node Setup You can then edit that node s profile in menu 11 1 as well as configure specific settings in three submenus...

Страница 114: ...ns for example between a branch office and corporate headquarters There must be prior agreement on encapsulation and multiplexing methods because they cannot be automatically determined What method s...

Страница 115: ...RFC 1483 An always up connection that uses the RFC1483 protocol PPPoE Multiplexing Press SPACE BAR and then ENTER to select the method of multiplexing that your ISP uses either VC based or LLC based L...

Страница 116: ...tication Protocol only Authen PAP accept PAP Password Authentication Protocol only Route This field determines the protocol used in routing Options are IP and None IP Bridge When bridging is enabled y...

Страница 117: ...When you have completed this menu press ENTER at the prompt Press ENTER to confirm or ESC to cancel to save your configuration or press ESC to cancel and go back to the previous screen 14 2 3 Outgoing...

Страница 118: ...et the Prestige tries the traffic redirect route next 14 4 Remote Node Network Layer Options For the TCP IP parameters perform the following steps to edit Menu 11 3 Remote Node Network Layer Options a...

Страница 119: ...AT Press SPACE BAR and then ENTER to select Full Feature if you have multiple public WAN IP addresses for your Prestige Select SUA Only if you have just one public WAN IP address for your Prestige The...

Страница 120: ...and then apply them here 3 4 5 6 When you have completed this menu press ENTER at the prompt Press ENTER to confirm or ESC to cancel to save your configuration or press ESC to cancel and go back to t...

Страница 121: ...ted in this field The Prestige has a prepackaged filter set NetBIOS_WAN that blocks NetBIOS packets call protocol filter 1 Include this in the call filter sets if you want to prevent NetBIOS packets f...

Страница 122: ...d in the protocol filters field under Input Filter Sets in SMT menu 11 5 SMT input protocol filter set numbers that were previously applied are erased after you apply the Internet Security filter rule...

Страница 123: ...Menu 21 12 Filter Rules Summary A Type Filter Rules M m n 1 Y IP Pr 6 SA 0 0 0 0 DA 0 0 0 0 DP 23 N D N 2 Y IP Pr 6 SA 0 0 0 0 DA 0 0 0 0 DP 21 N D N 3 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 69 N D N 4 Y...

Страница 124: ...14 6 1 VC based Multiplexing non PPP Encapsulation For VC based multiplexing by prior agreement a protocol is assigned a specific virtual circuit for example VC1 will carry IP Separate VPI and VCI num...

Страница 125: ...ols The valid range for the VPI is 0 to 255 and for the VCI is 32 to 65535 1 to 31 is reserved for local management of ATM traffic Menu 11 6 Remote Node ATM Layer Options VPI VCI LLC Multiplexing or P...

Страница 126: ......

Страница 127: ...s directly connected to a remote node Each remote node specifies only the network to which the gateway is directly connected and the Prestige has no knowledge of the networks beyond For instance the P...

Страница 128: ...Route Setup shown next Figure 15 3 Menu 12 1 IP Static Route Setup Step 3 Now type the route number of a static route you want to configure Menu 12 Static Route Setup 1 IP Static Route 3 Bridge Static...

Страница 129: ...be identical to the host ID IP Subnet Mask Type the subnet mask for this destination Follow the discussion on IP Subnet Mask in this manual Gateway IP Address Type the IP address of the gateway The ga...

Страница 130: ...is remote node in its RIP broadcasts If set to Yes this route is kept private and is not included in RIP broadcasts If No the route to this remote node will be propagated to other hosts through RIP br...

Страница 131: ...l and it also demands more CPU cycles and memory For efficiency reasons do not turn on bridging unless you need to support protocols other than IP on your network For IP enable the routing if you need...

Страница 132: ...Subnet Mask 0 0 0 0 My WAN Addr 0 0 0 0 NAT Full Feature Address Mapping Set 2 Metric 2 Private No RIP Direction Both Version RIP 2B Multicast IGMP v2 IP Policies Press ENTER to Confirm or ESC to Can...

Страница 133: ...your configuration or press ESC to cancel and go back to the previous screen 16 2 2 Bridge Static Route Setup Similar to network layer static routes a bridging static route tells the Prestige the rou...

Страница 134: ...to bridge the packets to IP Address If available type the IP address of the destination computer that you want to bridge the packets to Gateway Node Press SPACE BAR and then ENTER to select the number...

Страница 135: ...to apply NAT for Internet access in menu 4 Figure 17 1 Menu 4 Applying NAT for Internet Access Step 1 Enter 4 from the main menu Step 2 Move the cursor to the Network Address Translation field press S...

Страница 136: ...dit IP Bridge field press SPACE BAR to select Yes and then press ENTER to bring up Menu 11 3 Remote Node Network Layer Options Select None to disable NAT or SUA Only to enable the Address Mapping Set...

Страница 137: ...ss field In the following figure you have a computer acting as an FTP Telnet and SMTP server ports 21 23 and 25 at 192 168 1 33 Step 3 Press ENTER at the Press ENTER to confirm prompt to save your con...

Страница 138: ...ld in menus 4 and 11 3 is specifically pre configured to handle this case Figure 17 5 Configuring NAT SMT Menus Menu 4 Internet Access Setup ISP s Name MyISP Encapsulation RFC 1483 Multiplexing LLC ba...

Страница 139: ...nu 15 2 to specify the Inside Server behind the NAT as shown in the next figure Figure 17 7 Menu 15 2 1 Specifying an Inside Server Menu 15 2 1 NAT Server Setup Used for SUA Only Rule Start Port No En...

Страница 140: ......

Страница 141: ...g setup SNMP system information and diagnosis firmware and configuration file maintenance system maintenance remote management IP policy routing and call scheduling See the web configurator parts of t...

Страница 142: ......

Страница 143: ...divided into incoming and outgoing filters depending on the direction of the packet relative to a port Data filtering can be applied on either the WAN side or the Ethernet side Call filtering is used...

Страница 144: ...es that follow The following figure illustrates the logic flow when executing a filter rule Data Outgoing Packet Drop packet Built in default Call Filters User defined Call Filters if applicable Initi...

Страница 145: ...Fetch Next Filter Set Next Filter Set Available Accept Packet Drop Packet Yes No Yes No Yes Packet intoFilter Filter Set Forward Drop No Check Next Rule Figure 18 2 Filter Rule Process You can apply u...

Страница 146: ...ure a filter set follow the steps shown next Step 1 Enter 21 in the main menu to display Menu 21 Filter Set Configuration Figure 18 3 Menu 21 Filter Set Configuration Step 2 Type the filter set to con...

Страница 147: ...N D N 4 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 137 N D N 5 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 138 N D N 6 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 139 N D F Enter Filter Rule Number 1 6 to Configure Menu 21...

Страница 148: ...is complete N means there are no more rules to check You can specify an action to be taken for instance forward the packet drop the packet or check the next rule For the latter the next rule is indep...

Страница 149: ...all rules in a filter set must be of the same class for instance protocol filters or generic filters The class of a filter set is determined by the first rule that you create When applying the filter...

Страница 150: ...l for example TCP is 6 UDP is 17 and ICMP is 1 The value must be between 0 and 255 A value of O matches ANY protocol 0 to 255 IP Source Route IP Source Route is an optional header that dictates the ro...

Страница 151: ...d 0 to 65535 Port Comp Select the comparison to apply to the source port in the packet against the value given in Source Port field Choices are None Less Greater Equal or Not Equal None TCP Estab This...

Страница 152: ...tion for a packet not matching the rule Choices are Check Next Rule Forward or Drop Check Next Rule default When you have completed this menu press ENTER at the prompt Press ENTER to confirm or ESC to...

Страница 153: ...ctive Check IP Protocol Drop Drop Packet Accept Packet Drop Forward Check Next Rule Check Next Rule Check Next Rule Forward Not Matched Yes No Check Src IP Addr Apply SrcAddrMask to Src Addr Matched C...

Страница 154: ...epresent a byte so if the length is 4 the value in either field will take 8 digits for example FFFFFFFF To configure a generic rule select an empty filter set in menu 21 for example 6 Select Generic F...

Страница 155: ...al to compare with the data portion More If Yes a matching packet is passed to the next filter rule before an action is taken or else the packet is disposed of according to the action fields If More i...

Страница 156: ...the exact address and port on the wire Therefore the Prestige applies the protocol filters to the native IP address and port number before NAT for outgoing packets and after NAT for incoming packets...

Страница 157: ...net Filter Step 1 Enter 21 in the main menu to display Menu 21 Filter Set Configuration Step 2 Enter the index number of the filter set you want to configure in this case 3 Step 3 Type a descriptive n...

Страница 158: ...0 0 0 Port Port Comp Equal TCP Estab No More No Log None Action Matched Drop Action Not Matched Forward Press ENTER to Confirm or ESC to Cancel Press SPACE BAR to choose this filter rule type The fir...

Страница 159: ...shows you where to apply the filter s after you design it them Sets of factory default filter rules have been configured in menu 21 but have not been applied to filter traffic Menu 21 3 Filter Rules S...

Страница 160: ...want to apply as appropriate You can choose up to four filter sets from twelve by typing their numbers separated by commas for example 2 4 6 11 The factory default filter set NetBIOS_LAN is inserted i...

Страница 161: ...11 5 Remote Node Filter Input Filter Sets protocol filters 5 device filters Output Filter Sets protocol filters 4 device filters Call Filter Sets Protocol filters 1 Device filters Enter here to CONFIR...

Страница 162: ......

Страница 163: ...SNMP is a member of the TCP IP protocol suite Your Prestige supports SNMP agent functionality which allows a manager station to manage and monitor the Prestige through the network The Prestige suppor...

Страница 164: ...onse protocol based on the manager agent model The manager issues a request and the agent returns responses using the following protocol operations Get Allows the manager to retrieve an object variabl...

Страница 165: ...restige will only respond to SNMP messages from this address A blank default field means your Prestige will respond to all SNMP messages it receives regardless of source 0 0 0 0 Trap Community Type th...

Страница 166: ...nFailure defined in RFC 1215 A trap is sent to the manager when receiving any SNMP get or set requirements with wrong community password 6 whyReboot defined in ZYXEL MIB A trap is sent with the reason...

Страница 167: ...e status and statistics of the ports as shown next System Status is a tool that can be used to monitor your Prestige Specifically it gives you information on your ADSL telephone line status number of...

Страница 168: ...ansmission rate in bytes per second Rx B s This shows the receiving rate in bytes per second Up Time This is the time this channel has been connected to the current remote node My WAN IP from ISP This...

Страница 169: ...his shows the upstream transfer rate in kbps Downstream Speed This shows the downstream transfer rate in kbps CPU Load This specifies the percentage of CPU utilization 20 3 System Information To get t...

Страница 170: ...isplays the vendor of the ADSL chipset and DSL version Standard This refers to the operational protocol the Prestige and the DSLAM Digital Subscriber Line Access Multiplexer are using LAN Ethernet Add...

Страница 171: ...er for the communication software you are using to connect to the Prestige 20 4 Log and Trace There are two logging facilities in the Prestige The first is the error logs and trace records that are st...

Страница 172: ...nce UNIX Syslog You need to configure the UNIX syslog parameters described in the following table to activate syslog then choose what you want to log Table 20 3 Menu 24 3 2 System Maintenance UNIX Sys...

Страница 173: ...next 1 CDR CDR Message Format SdcmdSyslogSend SYSLOG_CDR SYSLOG_INFO String String board xx line xx channel xx call xx str board the hardware board ID line the WAN ID in a board Channel channel ID wi...

Страница 174: ...spo Source port dpo Destination port Jul 19 14 43 55 192 168 102 2 ZyXEL Communications Corp IP Src 202 132 154 123 Dst 255 255 255 255 UDP spo 0208 dpo 0208 S03 R01mF Jul 19 14 44 00 192 168 102 2 Z...

Страница 175: ...ns Table 20 4 Menu 24 4 System Maintenance Menu Diagnostic FIELD DESCRIPTION Reset xDSL Re initialize the xDSL link to the telephone company Ping Host Ping the host to see if the links and TCP IP prot...

Страница 176: ......

Страница 177: ...to the label on the bottom of your Prestige ftp put firmware bin ras This is a sample FTP session showing the transfer of the computer file firmware bin to the Prestige ftp get rom 0 config cfg This...

Страница 178: ...21 2 Backup Configuration The Prestige displays different messages explaining different ways to backup restore and upload files in menus 24 5 24 6 24 7 1 and 24 7 2 depending on whether you use the c...

Страница 179: ...rs the configuration file on the Prestige to your computer and renames it config rom See earlier in this chapter for more information on filename conventions Step 7 Enter quit to exit the ftp prompt 2...

Страница 180: ...es a unique User ID and Password to login Transfer Type You must use binary mode when uploading the configuration or firmware file Transfer files in either ASCII plain text format or in binary mode In...

Страница 181: ...ansfer is complete Step 4 Launch the TFTP client on your computer and connect to the Prestige Set the transfer mode to binary before starting data transfer Step 5 Use the TFTP client see the example b...

Страница 182: ...on file is rom 0 Binary Transfer the file in binary mode Abort Stop transfer of the file Refer to section 21 2 5 to read about configurations that disallow TFTP and FTP over WAN 21 3 Restore Configura...

Страница 183: ...mputer to the Prestige See earlier in this chapter for more information on filename conventions Step 8 Enter quit to exit the ftp prompt The Prestige will automatically restart after a successful rest...

Страница 184: ...wing the instructions in Menu 24 7 2 System Maintenance Upload System Configuration File for console port WARNING DO NOT INTERRUPT THE FILE TRANSFER PROCESS AS THIS MAY PERMANENTLY DAMAGE YOUR PRESTIG...

Страница 185: ...after a successful firmware upload For details on FTP commands please consult the documentation of your FTP client program For details on uploading system firmware using TFTP note that you must remai...

Страница 186: ...on filename conventions Step 7 Enter quit to exit the ftp prompt The Prestige automatically restarts after a successful file upload 21 4 4 FTP Session Example of Firmware File Upload Figure 21 7 FTP...

Страница 187: ...FTP client see the example below to transfer files between the Prestige and the computer The file name for the firmware is ras Note that the telnet connection must be active and the Prestige in CI mod...

Страница 188: ......

Страница 189: ...tion on CI commands Enter 8 from Menu 24 System Maintenance A list of valid commands can be found by typing help or at the command prompt Type exit to return to the SMT main menu when finished Figure...

Страница 190: ...control menu select option 9 in menu 24 to go to Menu 24 9 System Maintenance Call Control as shown in the next table Figure 22 3 Menu 24 9 System Maintenance Call Control 22 2 1 Budget Management Men...

Страница 191: ...et just one in this case 1 Connection Time Total Budget This is the total connection time that has gone by within the allocated budget that you set in menu 11 1 5 10 means that 5 minutes out of a tota...

Страница 192: ...e Setting Use Time Server when Bootup None Time Server Address N A Current Time 00 00 00 New Time hh mm ss 11 23 16 Current Date 2000 01 01 New Date yyyy mm dd 2001 03 01 Time Zone GMT Daylight Saving...

Страница 193: ...ure of this information Current Time This field displays an updated time only when you reenter this menu New Time Enter the new time in hour minute and second format Current Date This field displays a...

Страница 194: ......

Страница 195: ...e select Disable in the corresponding Server Access field Enter 11 from menu 24 to display Menu 24 11 Remote Management Control 23 2 1 Remote Management Setup You may manage your Prestige from a remot...

Страница 196: ...y All or Disable The default is LAN only LAN only Secured Client IP The default 0 0 0 0 allows any client to use this service to remotely manage the Prestige Enter an IP address to restrict access to...

Страница 197: ...eb remote management session running with a Telnet session A Telnet session will be disconnected if you begin a web session it will not begin if there already is a web session 23 3 Remote Management a...

Страница 198: ......

Страница 199: ...of the network to enable the backbone to prioritize traffic Cost Savings IPPR allows organizations to distribute interactive traffic on high bandwidth high cost paths while using low cost paths for ba...

Страница 200: ...index of the policy set you want to configure to open Menu 25 1 IP Routing Policy Setup Menu 25 1 shows the summary of a policy set including the criteria and the action of a single policy and whethe...

Страница 201: ...5 P 6 T NM PR 0 GW 192 168 1 1 T MT PR 0 2 N __________________________________________________________________________ __________________________________________________________________________ 3 N _...

Страница 202: ...ple UDP TCP ICMP etc Type of Service Prioritize incoming network traffic by choosing from Don t Care Normal Min Delay Max Thruput Min Cost or Max Reliable Precedence Precedence value of the incoming p...

Страница 203: ...eway must be the IP address of a remote node The default gateway is specified as 0 0 0 0 Type of Service Set the new TOS value of the outgoing packet Prioritize incoming network traffic by choosing No...

Страница 204: ...IP Addr 0 0 0 0 Rem Subnet Mask 0 0 0 0 My WAN Addr 0 0 0 0 NAT Full Feature Address Mapping Set 2 Metric 2 Private No RIP Direction Both Version RIP 2B Multicast IGMP v2 IP Policies 2 4 7 9 Press ENT...

Страница 205: ...cy See the next figure Route 1 represents the default IP route and route 2 represents the configured IP route Figure 24 6 Example of IP Policy Routing To force Web packets coming from clients with IP...

Страница 206: ...th protocol TCP and port FTP access through another gateway 192 168 1 100 Menu 25 1 1 IP Routing Policy Policy Set Name set1 Active Yes Criteria IP Protocol 6 Type of Service Don t Care Packet length...

Страница 207: ...DHCP Server N A TCP IP Setup IP Address 192 168 1 1 IP Subnet Mask 255 255 255 0 RIP Direction Both Version RIP 1 Multicast None IP Policies 1 2 Edit IP Alias No Press ENTER to Confirm or ESC to Canc...

Страница 208: ......

Страница 209: ...own next Figure 25 1 Menu 26 Schedule Setup Lower numbered sets take precedence over higher numbered sets thereby avoiding scheduling conflicts For example if sets 1 2 3 and 4 in are applied in the re...

Страница 210: ...be triggered up until the end of the Duration Table 25 1 Menu 26 1 Schedule Set Setup FIELD DESCRIPTION EXAMPLE Active Press SPACE BAR to select Yes or No Choose Yes and press ENTER to activate the s...

Страница 211: ...e effect in hour minute format 09 00 Duration Enter the maximum length of time this connection is allowed in hour minute format 08 00 Action Forced On means that the connection is maintained whether o...

Страница 212: ...te Node Profile Rem Node Name ChangeMe Route IP Active Yes Bridge No Encapsulation PPPoE Edit IP Bridge No Multiplexing VC based Edit ATM Options No Service Name Telco Option Incoming Allocated Budget...

Страница 213: ...Appendices and Index VIII Part VIII Appendices and Index This part contains troubleshooting additional background information and an index of key terms...

Страница 214: ......

Страница 215: ...r source Use only the supplied power adaptor 2 Check that the Prestige and the power source are both turned on and the Prestige is receiving sufficient power 3 Turn the Prestige off and on 4 If the er...

Страница 216: ...nce A 2 Telnet I cannot telnet into the Prestige Chart A 4 Troubleshooting Telnet STEPS CORRECTIVE ACTION 1 Check the LAN port and the other Ethernet connections 2 Make sure you are using the correct...

Страница 217: ...ORRECTIVE ACTION 1 Make sure you are using Internet Explorer 5 0 and later versions 2 Delete the temporary web files and log in again In Internet Explorer click Tools Internet Options and then click t...

Страница 218: ...panel A LAN LED should be on if the port is connected to a computer or hub If the 10M 100M LEDs on the front panel are both off refer to Section A 1 2 2 Make sure that the IP address and the subnet m...

Страница 219: ...the Internet Chart A 11 Troubleshooting Internet Access STEPS CORRECTIVE ACTION 1 Make sure the Prestige is turned on and connected to the network 2 If the DSL LED is off refer to Section A 1 3 3 Veri...

Страница 220: ...A 13 Troubleshooting Connecting to a Remote Node or ISP STEPS CORRECTIVE ACTION 1 Check menu 4 or WAN screen to verify that the username and password are entered properly 2 In menu 11 1 verify your lo...

Страница 221: ...the next left most bit In a class B address the first two octets make up the network number and the two remaining octets make up the host ID Class C addresses begin starting from the left with 1 1 0 I...

Страница 222: ...et mask is used to determine which bits are part of the network number and which bits are part of the host ID using a logical AND operation A subnet mask has 32 bits each bit of the mask corresponds t...

Страница 223: ...ress using both notations Chart B 4 Alternative Subnet Mask Notation SUBNET MASK IP ADDRESS SUBNET MASK 1 BITS LAST OCTET BIT VALUE 255 255 255 0 24 0000 0000 255 255 255 128 25 1000 0000 255 255 255...

Страница 224: ...k Binary 11111111 11111111 11111111 10000000 Subnet Address 192 168 1 0 Lowest Host ID 192 168 1 1 Broadcast Address 192 168 1 127 Highest Host ID 192 168 1 126 Chart B 6 Subnet 2 NETWORK NUMBER LAST...

Страница 225: ...et Chart B 7 Subnet 1 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 0 IP Address Binary 11000000 10101000 00000001 00000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet Add...

Страница 226: ...Address 192 168 1 255 Highest Host ID 192 168 1 254 Example Eight Subnets Similarly use a 27 bit mask to create 8 subnets 001 010 011 100 101 110 The following table shows class C IP address last octe...

Страница 227: ...mines which bits are part of the network number and which are part of the host ID A class B address has two host ID octets available for subnetting and a class A address has three host ID octets see C...

Страница 228: ...s B Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 10 255 255 255 192 26 1024 62 11 255 255 255 224 27 2048 30 12 255 255 255 240 28 4096 14 13 255 255 255 248 29 819...

Страница 229: ...using PPP Benefits of PPPoE PPPoE offers the following benefits 1 It provides you with a familiar dial up networking DUN user interface 2 It lessens the burden on the carriers of provisioning virtual...

Страница 230: ...PP frames to the ISP The L2TP tunnel is capable of carrying multiple PPP sessions With PPPoE the VC Virtual Circuit is equivalent to the dial up connection and is between the modem and the AC as oppos...

Страница 231: ...quires the purchase of a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriat...

Страница 232: ...OK If you need TCP IP a In the Network window click Add b Select Protocol and then click Add c Select Microsoft from the list of manufacturers d Select TCP IP from the list of network protocols and t...

Страница 233: ...tically If you have a static IP address select Specify an IP address and type your information into the IP Address and Subnet Mask fields 3 Click the DNS Configuration tab If you do not know your DNS...

Страница 234: ...nd click Add 5 Click OK to save and close the TCP IP Properties window 6 Click OK to close the Network window Insert the Windows CD if prompted 7 Turn on your Prestige and restart your computer when p...

Страница 235: ...dows 2000 NT XP 1 For Windows XP click start Control Panel In Windows 2000 NT click Start Settings Control Panel 2 For Windows XP click Network Connections For Windows 2000 NT click Network and Dial u...

Страница 236: ...n XP and click Properties 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP If you have a dynamic IP address click Obtain an IP address automatically If you have a s...

Страница 237: ...address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add Configure additional default gateways in the IP Settings tab by...

Страница 238: ...Alternate DNS server fields If you have previously configured DNS servers click Advanced and then the DNS tab to order them 8 Click OK to close the Internet Protocol TCP IP Properties window 9 Click...

Страница 239: ...ser s Guide Setting up Your Computer s IP Address D 9 Macintosh OS 8 9 1 Click the Apple menu Control Panel and double click TCP IP to open the TCP IP Control Panel 2 Select Ethernet built in from the...

Страница 240: ...the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your Prestige in the Router address box 5 Close the TCP IP Control Panel 6 Click Save if prompted to save changes...

Страница 241: ...ct Using DHCP from the Configure list 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the...

Страница 242: ......

Страница 243: ...een circuit end points Diagram E 1 Virtual Circuit Topology Think of a virtual path as a cable that contains a bundle of wires The cable connects two points and wires within the cable provide individu...

Страница 244: ......

Страница 245: ...int where the telephone line enters your residence as shown in the following figure Diagram F 1 Connecting a POTS Splitter Step 1 Connect the side labeled Phone to your telephone Step 2 Connect the si...

Страница 246: ...uble jack end of the Y Connector to the wall side of the microfilter Step 3 Connect another cable from the double jack end of the Y Connector to the Prestige Step 4 Connect the phone side of the micro...

Страница 247: ...ption 11 W Safety Standards UL CUL CSA UL 1310 CSA C22 2 No 223 NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model AA 121A25 Input Power AC120Volts 60Hz 19W Output Power AC 12Volts 1 25A Power Consu...

Страница 248: ......

Страница 249: ...tail Record 19 6 CHAP 13 4 Classes of IP Addresses B 1 Collision 19 3 Command Interpreter Mode 21 1 Community 18 2 Computer Name 10 1 Conditions that prevent TFTP and FTP from working over WAN 20 4 Co...

Страница 250: ...TP File Transfer 20 8 FTP Restrictions 6 1 20 4 Full Rate F 1 G Gateway 14 3 Gateway Node 15 4 General Setup 10 1 H Hidden Menus 9 3 Hop Count 13 7 14 3 Host 2 3 Host IDs B 1 I IANA 3 4 3 5 IGMP 4 3 I...

Страница 251: ...T in the SMT Menus 16 1 Configuring 16 3 Examples 16 3 NAT Traversal 7 1 Network Address Translation NAT 1 2 16 1 P Packet Error 19 2 Received 19 3 Transmitted 19 3 Packet triggered 19 7 Packets 19 2...

Страница 252: ...xxvii Syntax Conventions xxvii Syslog 19 6 Syslog IP Address 19 6 Syslog Server 19 6 System Console Port Speed 19 5 Diagnostic 19 8 Log and Trace 19 5 Syslog and Accounting 19 6 System Information 19...

Страница 253: ...sal Plug and Play Forum 7 2 UNIX Syslog 19 5 19 6 UNIX syslog parameters 19 6 Upload Firmware 20 8 UPnP See Universal Plug and Play User Name 6 2 Using LEDs To Diagnose Problems A 1 V VPI VCI 3 2 W We...

Отзывы: