ZyXEL Communications Prestige 650H-17 Скачать руководство пользователя страница 169 | Manualshive

Страница: 169 / 200

ZyXEL Communications Prestige 650H-17 Скачать руководство пользователя страница 169

Prestige 650H-17 ADSL Router

IP Policy Routing

13-7

13.6 IP Policy Routing Example

If a network has both Internet and remote node connections, you can route Web packets to the Internet
using one policy and route FTP packets to a remote network using another policy. See the next figure.

Figure 13-6 Example of IP Policy Routing

To force Web packets coming from clients with IP addresses of 192.168.1.33 to 192.168.1.64 to be routed
to the Internet via the WAN port of the Prestige, follow the steps as shown next.

«
...
167
168
169
170
171
...
»

Содержание Prestige 650H-17

Страница 1: ...Prestige 650H 17 ADSL Router User s Guide Version 3 40 August 2002...

Страница 2: ...ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it c...

Страница 3: ...uency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications If this equipment does cause harmful interference to radio televis...

Страница 4: ...purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be h...

Страница 5: ...tions Corp 6 Innovation Road II Science Based Industrial Park Hsinchu 300 Taiwan support zyxel com 1 714 632 0882 800 255 4101 www zyxel com NORTH AMERICA sales zyxel com 1 714 632 0858 ftp zyxel com...

Страница 6: ...l and Connections of the Prestige 2 2 2 2 1 DSL Port 2 3 2 2 2 Four LAN 10 100M Ports 2 4 2 2 3 Power Port 2 4 2 2 4 Restore Factory Defaults Reboot Button 2 4 2 3 Additional Installation Requirements...

Страница 7: ...3 6 1 IP Alias Setup 3 6 3 7 Route IP Setup 3 8 3 8 TCP IP Ethernet Setup and DHCP 3 8 3 9 VPI and VCI 3 11 3 10 Multiplexing 3 11 3 10 1 VC based Multiplexing 3 11 3 10 2 LLC based Multiplexing 3 11...

Страница 8: ...T 7 6 7 2 1 SUA Single User Account Versus NAT 7 6 7 2 2 Applying NAT 7 6 7 3 NAT Setup 7 7 7 3 1 Address Mapping Sets 7 8 7 4 NAT Server Sets Port Forwarding 7 13 7 4 1 Configuring a Server behind NA...

Страница 9: ...nfiguration Using FTP 11 2 11 2 2 Using the FTP command from the DOS Prompt 11 3 11 2 3 Backup Configuration Using TFTP 11 4 11 2 4 Example TFTP Command 11 4 11 3 Restore Configuration 11 5 11 4 Uploa...

Страница 10: ...4 2 Remote Management Limitations 15 3 15 5 Remote Management and NAT 15 3 15 6 System Timeout 15 3 ADDITIONAL INFORMATION 1 Chapter 16 Troubleshooting 16 1 16 1 Problems Starting Up the Prestige 16 1...

Страница 11: ...ure 3 6 Menu 1 General Setup 3 8 Figure 3 7 Menu 3 2 TCP IP and DHCP Ethernet Setup 3 9 Figure 3 8 Example of Traffic Shaping 3 15 Figure 3 9 Internet Access Setup 3 15 Figure 4 1 Menu 11 Remote Node...

Страница 12: ...15 1 1 1 7 21 Figure 7 20 Example 3 Final Menu 15 1 1 7 22 Figure 7 21 NAT Example 4 7 23 Figure 7 22 Example 4 Menu 15 1 1 1 Address Mapping Rule 7 24 Figure 7 23 Example 4 Menu 15 1 1 Address Mappi...

Страница 13: ...ce 11 7 Figure 11 8 FTP Session Example 11 8 Figure 12 1 Command Mode in Menu 24 12 1 Figure 12 2 Valid Commands 12 2 Figure 12 3 Call Control 12 2 Figure 12 4 Budget Management 12 3 Figure 12 5 Menu...

Страница 14: ......

Страница 15: ...u Fields 6 3 Table 7 1 NAT Definitions 7 1 Table 7 2 NAT Mapping Types 7 5 Table 7 3 Applying NAT in Menus 4 11 3 7 7 Table 7 4 SUAAddress Mapping Rules 7 9 Table 7 5 Fields in Menu 15 1 1 7 11 Table...

Страница 16: ...13 4 Table 14 1 Schedule Set Setup Fields 14 2 Table 15 1 Menu 24 11 Remote Management Control 15 2 Table 16 1 Troubleshooting the Start Up of Your Prestige 16 1 Table 16 2 Troubleshooting the LAN In...

Страница 17: ...a wide range of applications for high speed Internet access Your Prestige is easy to install and configure All functions are configurable via the SMT System Management Terminal and web configurator A...

Страница 18: ...abels are in Bold Times New Roman font Predefined field choices are in Bold Arial font Command and arrow keys are enclosed in square brackets ENTER means the Enter or carriage return key ESC means the...

Страница 19: ...am capacity Asymmetrical services ADSL are suitable for Internet users because more information is usually downloaded than uploaded For example a simple button click in a web browser can start an exte...

Страница 20: ......

Страница 21: ...is part is structured as a step by step guide to help you connect install and set up your Prestige to operate on your network and to access the Internet Described are Key Features and Applications Har...

Страница 22: ......

Страница 23: ...is packed with a number of features that give it the flexibility to provide a complete networking solution for almost any user High Speed Internet Access Your Prestige ADSL router can support downstr...

Страница 24: ...n either half duplex or full duplex mode depending on your Ethernet network Dynamic DNS Support With Dynamic DNS support you can have a static hostname alias for a dynamic IP address allowing the host...

Страница 25: ...he clients IP Alias IP Alias allows you to partition a physical network into logical networks over the same Ethernet interface The Prestige supports three logical LAN interfaces via its single physica...

Страница 26: ...Layer 5 RFC 1483 encapsulation over ATM MAC encapsulated routing ENET encapsulation as well as PPP over Ethernet RFC 2516 Network Management Menu driven SMT System Management Terminal management Embe...

Страница 27: ...the integrity of the following circuitry FLASH memory ADSL circuitry RAM LAN port Filters The Prestige s packet filtering functions allows added network security and management Ease of Installation Y...

Страница 28: ...nection for example T1 OC3 DS3 ATM or Frame Relay Think of it as the equivalent of a modem rack for ADSL A typical Internet Access application is shown below Figure 1 1 Internet Access Application Int...

Страница 29: ...Prestige 650H 17 ADSL Router Getting To Know Your Prestige 1 7 Figure 1 2 LAN to LAN Application...

Страница 30: ......

Страница 31: ...2 1 Front Panel LED Description LED COLOR STATUS DESCRIPTION On The Prestige is receiving power PWR Green Off The Prestige is not receiving power On The Prestige is functioning properly Blinking The...

Страница 32: ...restige is sending receiving data LAN 1 4 100M Orange Off The Prestige does not have 100Mb Ethernet connection On The Prestige is linked successfully to a DSLAM Blinking The Prestige is initializing t...

Страница 33: ...el and Connections 2 2 1 DSL Port Connect the Prestige directly to the wall jack using the included DSL cable Connect a microfilter s between the wall jack and your telephone s A microfilter acts as l...

Страница 34: ...rt the Prestige Upload the default configuration file by holding this button in for more than 3 seconds Refer to section 2 8 for information on the resetting your Prestige 2 3 Additional Installation...

Страница 35: ...k 2 5 Telephone Microfilters Telephone voice transmissions take place in the lower frequency range 0 4KHz while ADSL transmissions take place in the higher bandwidth range above 4KHz A microfilter act...

Страница 36: ...urator refer to the Read Me First SMT System Management Terminal Access the SMT via LAN or WAN using Telnet 2 7 1 Connect to your Prestige Using Telnet The following procedure details how to telnet in...

Страница 37: ...en displays an for each character you type Please note that if there is no activity for longer than five minutes after you log in your Prestige will automatically log you out and will display a blank...

Страница 38: ...button on the rear panel of the Prestige to upload the default configuration file hold this button in for more than 3 seconds Use this method for cases when the password or IP address of the Prestige...

Страница 39: ...Prestige 650H 17 ADSL Router Hardware Installation and Initial Setup 2 9 Figure 2 6 Prestige SMT Menu Overview...

Страница 40: ...TER or UP DOWN arrow keys Within a menu press ENTER to move to the next field You can also use the UP DOWN arrow keys to move to the previous and the next field respectively Entering information Type...

Страница 41: ...menu to specify inside servers when NAT is enabled 21 Filter Set Configuration Use this menu to set up filters to provide security etc 22 SNMP Configuration Use this menu to set up SNMP related parame...

Страница 42: ...al Setup contains administrative and system related information shown next The System Name field is for identification purposes However because some ISPs check this name you should enter your computer...

Страница 43: ...P address First of all you need to have registered a dynamic DNS account with www dyndns org This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a DNS name...

Страница 44: ...and type sys domainname to see the current domain name used by your gateway If you want to clear this field just press the SPACE BAR The domain name entered by you is given priority over the ISP assi...

Страница 45: ...nter your user name Password Enter the password assigned to you Enable Wildcard Your Prestige supports DYNDNS Wildcard Press SPACE BAR and then ENTER to select Yes or No This field is N A when you cho...

Страница 46: ...rs please read the Filter Set Configuration chapter first then return to this menu to define the filter sets 2 13 Protocol Dependent Ethernet Setup Depending on the protocols for your applications you...

Страница 47: ...are satisfactory you can skip to TCP IP Ethernet Setup and DHCP to enter the DNS server address es if your ISP gives you explicit DNS server address es If you wish to change the factory defaults or to...

Страница 48: ...ed that you select a network number from 192 168 0 0 to 192 168 255 0 ignoring the trailing zero and you must enable the Single User Account feature of the Prestige The Internet Assigned Number Author...

Страница 49: ...For more information on address assignment please refer to RFC 1597 Address Allocation for Private Internets and RFC 1466 Guidelines for Management of IP Address Space 3 3 3 RIP Setup RIP Routing Inf...

Страница 50: ...client machines along with the assigned IP address and subnet mask There are two ways that an ISP disseminates the DNS server addresses The first is for an ISP to tell a customer the DNS server addre...

Страница 51: ...address 224 0 0 2 is assigned to the multicast routers group The Prestige supports both IGMP version 1 IGMP v1 and version 2 IGMP v2 At start up the Prestige queries all directly connected networks t...

Страница 52: ...and press ENTER to configure the second and third network Figure 3 4 Menu 3 2 TCP IP and DHCP Setup Menu 3 2 TCP IP and DHCP Setup DHCP Setup DHCP Server Client IP Pool Starting Addres 192 168 1 33 Si...

Страница 53: ...direction Choices are None Both In Only or Out Only None Version Press SPACE BAR to select the RIP version Choices are RIP 1 RIP 2B or RIP 2M RIP 1 Incoming Protocol Filters Enter the filter set s you...

Страница 54: ...General Setup 3 8 TCP IP Ethernet Setup and DHCP Use menu 3 2 to configure your Prestige for TCP IP To edit menu 3 2 enter 3 from the main menu to display Menu 3 Ethernet Setup When menu 3 appears pre...

Страница 55: ...ollowing items need to be set Server default Client IP Pool Starting Address This field specifies the first of the contiguous addresses in the IP address pool 192 168 1 33 Size of Client IP Pool This...

Страница 56: ...ng use the subnet mask computed by the Prestige 255 255 255 0 RIP Direction Press SPACE BAR to select the RIP direction Choices are Both In Only Out Only or None Both default Version Press SPACE BAR t...

Страница 57: ...or mutual agreement each protocol is assigned to a specific virtual circuit for example VC1 carries IP etc VC based multiplexing may be dominant in environments where dynamic creation of large numbers...

Страница 58: ...PPP over ATM Adaptation Layer 5 AAL5 Refer to RFC 1661 for more information on PPP 3 11 4 RFC 1483 RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation Layer 5 AAL5 The...

Страница 59: ...gure your Prestige for Internet access you need to collect your Internet account information from your ISP and telephone company Use the following table to record your Internet Account Information Not...

Страница 60: ...transmission of real time data such as audio and video connections Peak Cell Rate PCR is the maximum rate at which the sender can send cells This parameter may be lower but not higher than the maximum...

Страница 61: ...n how to configure your Prestige for Internet access Menu 4 Internet Access Setup ISP s Name MyISP Encapsulation RFC 1483 Multiplexing VC based VPI 8 VCI 35 ATM QoS Type CBR Peak Cell Rate PCR 0 Susta...

Страница 62: ...Peak Cell Rate PCR This is the maximum rate at which the sender can send cells Type the PCR 0 Sustain Cell Rate SCR 0 Sustained Cell Rate is the mean cell rate of a bursty on off traffic source that c...

Страница 63: ...ure Please see the NAT Chapter for more details on the SUA Single User Account feature SUA Only Address Mapping Set Type the numbers of mapping sets 1 8 to use with NAT See the NAT chapter for details...

Страница 64: ......

Страница 65: ...Advanced Applications II P Pa ar rt t I II I ADVANCED APPLICATIONS This part shows how to configure Remote Node Remote Node TCP IP and NAT...

Страница 66: ......

Страница 67: ...ents both the remote gateway and the network behind it across a WAN connection When you use menu 4 to set up Internet access you are configuring one of the remote nodes 4 1 Remote Node Setup This sect...

Страница 68: ...mbinations in such an application Scenario 1 One VC Multiple Protocols PPPoA RFC 2364 encapsulation with VC based multiplexing is the best combination because no extra protocol identifying headers are...

Страница 69: ...mote Node Profile In Menu 11 1 Remote Node Profile fill in the fields as described in the following table Table 4 1 Remote Node Profile Menu Fields FIELD DESCRIPTION EXAMPLE Rem Node Name Type a uniqu...

Страница 70: ...here N A Incoming Rem Login Type the login name that this remote node will use to call your Prestige The login name and the Rem Password will be used to authenticate this node Rem Password Type the pa...

Страница 71: ...ated Budget is 10 minutes and the Period hr is 1 hour 0 default Schedule Sets This field is only applicable for PPPoE and PPPoA encapsulation You can apply up to four schedule sets here For more detai...

Страница 72: ...For the TCP IP parameters perform the following steps to edit Menu 11 3 Remote Node Network Layer Options as shown next Step 1 In menu 11 1 make sure IP is among the protocols in the Route field Step...

Страница 73: ...Select SUA Only if you have just one public WAN IP address for your Prestige The SMT uses Address Mapping Set 255 menu 15 1 see section 7 3 1 Select None to disable NAT Address Mapping Set When Full F...

Страница 74: ...ve the cursor to the Edit Filter Sets field in menu 11 1 then press SPACE BAR to select Yes Press ENTER to display Menu 11 5 Remote Node Filter Use Menu 11 5 Remote Node Filter to specify the filter s...

Страница 75: ...sing the Internet Security in the Web Configurator all your custom incoming protocol filters will be replaced by rule 11 and 12 Menu 11 5 Remote Node Filter Input Filter Sets protocol filters 12 11 de...

Страница 76: ......

Страница 77: ...edit Menu 11 6 Remote Node ATM Layer Options In menu 11 1 move the cursor to the Edit ATM Options field and then press SPACE BAR to select Yes Press ENTER to display Menu 11 6 Remote Node ATM Layer O...

Страница 78: ...d of My Wan Addr in menu 11 3 Refer to the previous figure LAN and WAN IPs for a brief review of what a WAN IP is My WAN Addr indicates the local Prestige WAN IP while Rem IP Addr indicates the peer W...

Страница 79: ...in Menu 11 1 Remote Node Profile as shown in the following table For more details on the IP Option fields refer to Internet Access chapter Table 5 1 TCP IP Related Fields in Menu 11 1 Remote Node Prof...

Страница 80: ...0 0 then type 192 168 1 1 its LAN IP address here 0 0 0 0 default Rem Subnet Mask Type the subnet mask assigned to the remote node 0 0 0 0 default My WAN Addr Some implementations especially UNIX der...

Страница 81: ...2 Private This determines if the Prestige will include the route to this remote node in its RIP broadcasts If set to Yes this route is kept private and not included in RIP broadcast If No the route t...

Страница 82: ...1 However the Prestige is unable to route a packet to network N3 because it does not know that there is a route through remote node Router 1 via Router 2 The static routes allow you to tell the Presti...

Страница 83: ...elds FIELD DESCRIPTION Route This is the index number of the static route that you chose in menu 12 1 Route Name Type a descriptive name for this route This is for identification purpose only Menu 12...

Страница 84: ...nation On the LAN the gateway must be a router on the same segment as your Prestige over WAN the gateway must be the IP address of one of the remote nodes Metric Metric represents the cost of transmis...

Страница 85: ...n on bridging unless you need to support protocols other than IP on your network For IP enable the routing if you need it do not bridge what the Prestige can route 6 2 Bridge Ethernet Setup Basically...

Страница 86: ...menu press ENTER at the prompt Press ENTER to confirm or ESC to cancel to save your configuration or press ESC to cancel and go back to the previous screen 6 2 2 Bridge Static Route Setup Similar to n...

Страница 87: ...Type the MAC address of the destination computer that you want to bridge the packets to IP Address If available type the IP address of the destination computer that you want to bridge the packets to...

Страница 88: ......

Страница 89: ...dress refers to the IP address of a host when the packet is in the local network while the global address refers to the IP address of the host when the same packet is traveling in the WAN side Note th...

Страница 90: ...you do not define any servers for Many to One and Many to Many Overload mapping see Table 7 2 NAT offers the additional benefit of firewall protection With no servers defined your Prestige filters ou...

Страница 91: ...Works 7 1 4 NAT Application The following figure illustrates a possible NAT application where three inside LANs logical LANs using IP Alias behind the Prestige can communicate with three distinct WAN...

Страница 92: ...bal IP address 2 Many to One In Many to One mode the Prestige maps multiple local IP addresses to one global IP address This is equivalent to SUA for instance PAT port address translation ZyXEL s Sing...

Страница 93: ...commended that you use the DMZ port for these servers instead Port numbers do not change for One to One and Many to Many No Overload NAT mapping types The following table summarizes these types Table...

Страница 94: ...AN IP addresses for your Prestige 7 2 2 Applying NAT You apply NAT via menus 4 or 11 3 as displayed next The next figure shows you how to apply NAT for Internet access in menu 4 Enter 4 from the main...

Страница 95: ...o disable NAT None NAT When you select SUA Only the SMT uses Address Mapping Set 255 menu 15 1 see section 7 3 1 Choose SUA Only if you have just one public WAN IP address for your Prestige SUA Only 7...

Страница 96: ...section 7 4 for further information on these menus To configure NAT enter 15 from the main menu to bring up the following screen Figure 7 5 Menu 15 NAT Setup 7 3 1 Address Mapping Sets Enter 1 to brin...

Страница 97: ...End IP is 255 255 255 255 0 0 0 0 255 255 255 255 Global Start IP This is the starting global IP address IGA If you have a dynamic IP enter 0 0 0 0 as the Global Start IP 0 0 0 0 Global End IP This is...

Страница 98: ...later and the values are displayed here Ordering Your Rules Ordering your rules is important because the Prestige applies the rules in the order that you specify When a rule matches the current packet...

Страница 99: ...e the selected rule and then all the rules after the selected one will be advanced one rule None disables the Select Rule item Edit Select Rule When you choose Edit Insert Before or Delete in the prev...

Страница 100: ...hen put the Start IP as 0 0 0 0 and the End IP as 255 255 255 255 This field is N A for One to One and Server types N A Global IP Start This is the starting global IP address IGA If you have a dynamic...

Страница 101: ...r to specify a range of port numbers In addition to the servers for specified services NAT supports a default server A service request that does not have a server explicitly designated for it is forwa...

Страница 102: ...ing a Server behind NAT Follow these steps to configure a server behind NAT Step 1 Enter 15 in the main menu to go to Menu 15 NAT Setup Step 2 Enter 2 to display Menu 15 2 NAT Server Sets as shown nex...

Страница 103: ...the following figure you have a computer acting as an FTP Telnet and SMTP server ports 21 23 and 25 at 192 168 1 33 Step 6 Press ENTER at the Press ENTER to confirm prompt to save your configuration...

Страница 104: ...Prestige 650H 17 ADSL Router 7 16 NAT Figure 7 12 Multiple Servers Behind NAT Example...

Страница 105: ...ss assigned by your ISP Figure 7 13 NAT Example 1 Figure 7 14 Menu 4 Internet Access NAT Example Menu 4 Internet Access Setup ISP s Name MyISP Encapsulation ENET ENCAP Multiplexing LLC based VPI 8 VCI...

Страница 106: ...ead only option from the Network Address Translation field in menus 4 and 11 3 is specifically pre configured to handle this case 7 5 2 Example 2 Internet Access with an Inside Server Figure 7 15 NAT...

Страница 107: ...first inside FTP server for FTP traffic in both directions 1 1 mapping giving both local and global IP addresses Rule 2 Map the second IGA to our second inside FTP server for FTP traffic in both direc...

Страница 108: ...the main menu Step 3 Enter 1 to configure the Address Mapping Sets Step 4 Enter 1 to begin configuring this new set Enter a Set Name choose the Edit Action and then enter 1 for the Select Rule field P...

Страница 109: ...rt 10 132 50 1 End N A Server Mapping Set N A Press ENTER to Confirm or ESC to Cancel Press Space Bar to Toggle Menu 11 3 Remote Node Network Layer Options IP Options Bridge Options IP Address Assignm...

Страница 110: ...ample3 Idx Local Start IP Local End IP Global Start IP Global End IP Type 1 192 168 1 10 10 132 50 1 1 1 2 192 168 1 11 10 132 50 2 1 1 3 0 0 0 0 255 255 255 255 10 132 50 3 M 1 4 10 132 50 3 Server 5...

Страница 111: ...do not change for Many to Many No Overload and One to One NAT mapping types The following figure illustrates this Figure 7 21 NAT Example 4 Other applications such as some gaming programs are NAT unfr...

Страница 112: ...Address Mapping Rule Type Many to Many No Overload Local IP Start 192 168 1 10 End 192 168 1 12 Global IP Start 10 132 50 1 End 10 132 50 3 Server Mapping Set N A Press ENTER to Confirm or ESC to Can...

Страница 113: ...t I II II I ADVANCED MANAGEMENT This part discusses Filtering SNMP System Information and Diagnostic Firmware and Configuration File Maintenance System Maintenance and Information IP Policy Routing Ca...

Страница 114: ......

Страница 115: ...vided into incoming and outgoing filters depending on the direction of the packet relative to a port Data filtering can be applied on either the WAN side or the Ethernet side Call filtering is used to...

Страница 116: ...s that follow The following figure illustrates the logic flow when executing a filter rule Data Outgoing Packet Drop packet Built in default Call Filters User defined Call Filters if applicable Initia...

Страница 117: ...tch Next Filter Set Next Filter Set Available Accept Packet Drop Packet Yes No Yes No Yes Packet intoFilter Filter Set Forward Drop No Check Next Rule Figure 8 2 Filter Rule Process You can apply up t...

Страница 118: ...a Filter Set To configure a filter set follow the steps shown next Step 1 Enter 21 in the main menu to display Menu 21 Filter Set Configuration Figure 8 3 Menu 21 Filter Set Configuration Step 2 Type...

Страница 119: ...0 0 DA 0 0 0 0 DP 138 N D N 3 Y IP Pr 6 SA 0 0 0 0 DA 0 0 0 0 DP 139 N D N 4 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 137 N D N 5 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 138 N D N 6 Y IP Pr 17 SA 0 0 0 0 DA 0...

Страница 120: ...complete N means there are no more rules to check You can specify an action to be taken for instance forward the packet drop the packet or check the next rule For the latter the next rule is independe...

Страница 121: ...fferent Use SPACE BAR to select the type of rule that you want to create in the Filter Type field and press ENTER to open the respective menu To speed up filtering all rules in a filter set must be of...

Страница 122: ...AR and then ENTER to choose a rule Parameters displayed for each type will be different Choices are TCP IP Filter Rule or Generic Filter Rule TCP IP Filter Rule Active Select Yes to activate or No to...

Страница 123: ...ter Equal or Not Equal None Source IP Addr Type the source IP Address of the packet you want to filter A 0 0 0 0 field is ignored IP address IP Mask Type the IP mask to apply to the Source IP Addr fie...

Страница 124: ...he action for a matching packet Choices are Check Next Rule Forward or Drop Check Next Rule default Action Not Matched Select the action for a packet not matching the rule Choices are Check Next Rule...

Страница 125: ...ctive Check IP Protocol Drop Drop Packet Accept Packet Drop Forward Check Next Rule Check Next Rule Check Next Rule Forward Not Matched Yes No Check Src IP Addr Apply SrcAddrMask to Src Addr Matched C...

Страница 126: ...match The Mask and Value fields are specified in hexadecimal numbers Note that it takes two hexadecimal digits to represent a byte so if the length is 4 the value in either field will take 8 digits fo...

Страница 127: ...he data portion before comparison Value Type the value in Hexadecimal to compare with the data portion More If Yes a matching packet is passed to the next filter rule before an action is taken or else...

Страница 128: ...t on the wire Therefore the Prestige applies the protocol filters to the native IP address and port number before NAT for outgoing packets and after NAT for incoming packets On the other hand the gene...

Страница 129: ...et Filter Step 1 Enter 21 from the main menu to open Menu 21 Filter Set Configuration Step 2 Enter the index number of the filter set you want to configure in this case 3 Step 3 Type a descriptive nam...

Страница 130: ...0 0 0 Port Port Comp None TCP Estab No More No Log None Action Matched Drop Action Not Matched Forward Press ENTER to Confirm or ESC to Cancel Press SPACE BAR to choose this filter rule type The first...

Страница 131: ...ows you where to apply the filter s after you design it them Sets of factory default filter rules have been configured in menu 21 but have not been applied to filter traffic Menu 21 1 Filter Rules Sum...

Страница 132: ...want to apply as appropriate You can choose up to four filter sets from twelve by typing their numbers separated by commas for example 3 4 6 11 The factory default filter set NetBIOS_LAN is inserted...

Страница 133: ...or PPPoE encapsulation Menu 11 5 Remote Node Filter Input Filter Sets protocol filters 3 device filters Output Filter Sets protocol filters 1 device filters Call Filter Sets Protocol filters Device f...

Страница 134: ......

Страница 135: ...tocol used for exchanging management information between network devices SNMP is a member of the TCP IP protocol suite Your Prestige supports SNMP agent functionality which allows a manager station to...

Страница 136: ...sing these objects SNMP itself is a simple request response protocol based on the manager agent model The manager issues a request and the agent returns responses using the following protocol operatio...

Страница 137: ...restige will only respond to SNMP messages from this address A blank default field means your Prestige will respond to all SNMP messages it receives regardless of source 0 0 0 0 Trap Community Type th...

Страница 138: ...software reboot 3 linkUp defined in RFC 1215 A trap is sent with the port number 4 authenticationFailure defined in RFC 1215 A trap is sent to the manager when receiving any SNMP get or set requiremen...

Страница 139: ...t System Status is a tool that can be used to monitor your Prestige Specifically it gives you information on your ADSL telephone line status number of packets sent and received To get to System Status...

Страница 140: ...transmission rate in bytes per second Rx B s Shows the receiving rate in bytes per second Up Time Time this channel has been connected to the current remote node My WAN IP from ISP The IP address of...

Страница 141: ...Speed Shows the upstream transfer rate in kbps Downstream Speed Shows the downstream transfer rate in kbps CPU Load Specifies the percentage of CPU utilization 10 2 System Information To get to the S...

Страница 142: ...pset Vendor Displays the vendor of the ADSL chipset and DSL version Standard This refers to the operational protocol the Prestige and the DSLAM Digital Subscriber Line Access Multiplexer are using LAN...

Страница 143: ...lay the error log in the system After the Prestige finishes displaying the error log you will have the option to clear it Samples of typical error and information messages are presented in the next fi...

Страница 144: ...ons The log facility lets you log the message in different server files Refer to your UNIX manual Types CDR Call Detail Record CDR logs all data phone line activity if set to Yes Packet Triggered The...

Страница 145: ...er Jul 19 11 28 39 192 168 102 2 ZYXEL Packet Trigger Protocol 1 Data 4500003c100100001f010004c0a86614ca849a7b08004a5c020001006162636465666768696a6b6c6d6e6f70717273 74 Jul 19 11 28 56 192 168 102 2 ZY...

Страница 146: ...n Menu 24 4 System Maintenance Diagnostic The following table describes the diagnostic tests available in menu 24 4 for and the connections Table 10 4 System Maintenance Menu Diagnostic FIELD DESCRIPT...

Страница 147: ...ts the filenames are similar to those seen next ftp put firmware bin ras This is a sample ftp session showing the transfer of the computer file firmware bin to the Prestige ftp get rom 0 config cfg Th...

Страница 148: ...ough TFTP can also be used Please note that the terms download and upload are relative to the computer Download means to transfer from the Prestige to the computer while upload means from your compute...

Страница 149: ...it to exit the ftp prompt Figure 11 2 FTP Session Example The following table describes some of the commands that you may see in third party FTP clients Table 11 2 General Commands for Third Party FTP...

Страница 150: ...the telnet client and accepts TFTP requests only from this address Step 2 Put the SMT in command interpreter CI mode by entering 8 in Menu 24 System Maintenance Step 3 Enter command sys stdio 0 to di...

Страница 151: ...file bin extension or configuration file rom extension on your computer Remote File This is the filename on the Prestige The filename for the firmware is ras and for the configuration file is rom 0 B...

Страница 152: ...ed within Menu 24 7 System Maintenance Upload Firmware 1 Upload System Firmware 2 Upload System Configuration File Enter Menu Selection Number Menu 24 6 Restore Configuration To transfer the firmware...

Страница 153: ...t for Starting XMODEM upload message before activating Xmodem upload on your terminal 4 After successful firmware upload enter atgo to restart the system Warning Proceeding with the upload will erase...

Страница 154: ...your computer and renames it config rom See earlier in this chapter for more information on filename conventions Step 7 Enter quit to exit the ftp prompt Figure 11 8 FTP Session Example More commands...

Страница 155: ...he computer The file name for the firmware is ras and the configuration file is rom 0 rom zero not capital o Note that the telnet connection must be active and the SMT in CI mode before and during the...

Страница 156: ......

Страница 157: ...SMT by selecting menu 24 8 See the included disk or the zyxel com web site for more detailed information on CI commands Enter 8 from Menu 24 System Maintenance A list of valid commands can be found b...

Страница 158: ...opped and any future outgoing calls will be blocked To access the call control menu select option 9 in menu 24 to go to Menu 24 9 System Maintenance Call Control as shown in the next table Figure 12 3...

Страница 159: ...tion is selected Table 12 1 Budget Management FIELD DESCRIPTION EXAMPLE Remote Node Enter the index number of the remote node you want to reset just one in this case 1 Connection Time Total Budget Thi...

Страница 160: ...System Maintenance Time and Date Setting to update the time and date settings of your Prestige as shown in the following screen Figure 12 6 Menu 24 10 System Maintenance Time and Date Setting Menu 24...

Страница 161: ...of this information Current Time This field displays an updated time only when you reenter this menu New Time Enter the new time in hour minute and second format Current Date This field displays an up...

Страница 162: ......

Страница 163: ...enable the backbone to prioritize traffic Cost Savings IPPR allows organizations to distribute interactive traffic on high bandwidth high cost paths while using low cost paths for batch traffic Load S...

Страница 164: ...ex of the policy set you want to configure to open Menu 25 1 IP Routing Policy Setup Menu 25 1 shows the summary of a policy set including the criteria and the action of a single policy and whether a...

Страница 165: ...P 6 T NM PR 0 GW 192 168 1 1 T MT PR 0 2 N __________________________________________________________________________ __________________________________________________________________________ 3 N ___...

Страница 166: ...rom Don t Care Normal Min Delay Max Thruput Min Cost or Max Reliable Precedence Precedence value of the incoming packet Press SPACE BAR and then ENTER to select a value from 0 to 7 or Don t Care Packe...

Страница 167: ...s specified as 0 0 0 0 Type of Service Set the new TOS value of the outgoing packet Prioritize incoming network traffic by choosing No Change Normal Min Delay Max Thruput Max Reliable or Min Cost Prec...

Страница 168: ...IP Addr 0 0 0 0 Rem Subnet Mask 0 0 0 0 My WAN Addr 0 0 0 0 NAT Full Feature Address Mapping Set 2 Metric 2 Private No RIP Direction Both Version RIP 2B Multicast IGMP v2 IP Policies 2 4 7 9 Press ENT...

Страница 169: ...e Web packets to the Internet using one policy and route FTP packets to a remote network using another policy See the next figure Figure 13 6 Example of IP Policy Routing To force Web packets coming f...

Страница 170: ...5 1 for this set to route packets from any host IP 0 0 0 0 means any host with protocol TCP and port FTP access through another gateway 192 168 1 100 Menu 25 1 1 IP Routing Policy Policy Set Name set1...

Страница 171: ...er 0 0 0 0 Remote DHCP Server N A TCP IP Setup IP Address 192 168 1 1 IP Subnet Mask 255 255 255 0 RIP Direction Both Version RIP 1 Multicast None IP Policies 1 2 Edit IP Alias No Press ENTER to Confi...

Страница 172: ......

Страница 173: ...ule Setup as shown next Figure 14 1 Menu 26 Schedule Setup Lower numbered sets take precedence over higher numbered sets thereby avoiding scheduling conflicts For example if sets 1 2 3 and 4 in are ap...

Страница 174: ...ose Yes and press ENTER to activate the schedule set Yes Start Date Enter the start date when you wish the set to take effect in year month date format Valid dates are from the present to 2036 Februar...

Страница 175: ...On means that the connection is maintained whether or not there is a demand call on the line and will persist for the time period specified in the Duration field Forced Down means that the connection...

Страница 176: ...e Node Profile Rem Node Name ChangeMe Route IP Active Yes Bridge No Encapsulation PPPoE Edit IP Bridge No Multiplexing VC based Edit ATM Options No Service Name Telco Option Incoming Allocated Budget...

Страница 177: ...15 2 FTP You can upload and download Prestige firmware and configuration files using FTP To use this feature your computer must have an FTP client 15 3 Web You can use the Prestige s embedded web conf...

Страница 178: ...enu 24 11 Remote Management Control Table 15 1 Menu 24 11 Remote Management Control FIELD DESCRIPTION EXAMPLE Telnet Server FTP Server Web Server Each of these read only labels denotes a service that...

Страница 179: ...not match the client IP address If it does not match the Prestige will disconnect the session immediately 4 There is already another remote management session of the same type Telnet FTP or Web runni...

Страница 180: ......

Страница 181: ...Additional Information IV P Pa ar rt t I IV V ADDITIONAL INFORMATION This part contains Troubleshooting Appendices and the Index...

Страница 182: ......

Страница 183: ...wer source are both turned on If the error persists you may have a hardware problem In this case you should contact your vendor 16 2 Problems with the LAN Interface Table 16 2 Troubleshooting the LAN...

Страница 184: ...ield and password in the My Password field in Menu 4 Internet Access Setup I cannot connect to a remote node or ISP Check menu 4 or menu 11 1 to verify the Encapsulation for the remote node 16 4 Probl...

Страница 185: ...ord Refer to the Resetting the Prestige section in the User s Guide for details 16 6 Problems with Telnet Table 16 6 Troubleshooting Telnet PROBLEM CORRECTIVE ACTION Refer to the Remote Management Lim...

Страница 186: ......

Страница 187: ...using PPP Benefits of PPPoE PPPoE offers the following benefits 1 It provides you with a familiar dial up networking DUN user interface 2 It lessens the burden on the carriers of provisioning virtual...

Страница 188: ...P frames to the ISP The L2TP tunnel is capable of carrying multiple PPP sessions With PPPoE the VC Virtual Circuit is equivalent to the dial up connection and is between the modem and the AC as oppose...

Страница 189: ...een circuit end points Diagram 3 Virtual Circuit Topology Think of a virtual path as a cable that contains a bundle of wires The cable connects two points and wires within the cable provide individual...

Страница 190: ...ption 12 W Safety Standards UL CUL CSA UL 1310 CSA C22 2 No 223 NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model DV 121A25 Input Power AC120Volts 60Hz 19W Output Power AC12Volts 1 25A Power Consum...

Страница 191: ...Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropriate TCP IP components are installed configure the TCP IP settings in order to communicate with your network Setting up Y...

Страница 192: ...DNS Configuration tab If you do not know your DNS information select Disable DNS If you know your DNS information select Enable DNS and type the information in the fields below you may not need to fil...

Страница 193: ...s If you have previously configured DNS servers click Advanced and then the DNS tab to order them 5 Click Advanced If you do not know your gateway s IP address remove any previously installed gateways...

Страница 194: ...etric the number of transmission hops clear the Automatic metric check box and type a metric in Metric Click Add Repeat the previous three steps for each default gateway you want to add Click OK when...

Страница 195: ...m the Configure list 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in the Subnet mask box...

Страница 196: ...12 Connecting the Prestige 2 3 Connections Additional Requirements 2 4 ADSL Line 2 3 Power Adapter 2 4 Rear Panel 2 2 Copyright ii Cost Of Transmission 4 7 5 5 5 8 Country Code 10 4 CPU Load 10 3 Cus...

Страница 197: ...eway Node 6 3 General Setup 2 12 H Hidden Menus 2 10 hop count 5 5 Hop Count 4 7 5 8 HTTP 7 14 I IANA 3 2 3 3 IGMP support 4 8 5 5 Interactive Applications 13 1 Internet access 3 1 Internet Access 1 1...

Страница 198: ...Programs 7 23 Ordering Rules 7 10 What NAT does 7 2 Network Address Translation 3 17 Network Address Translation NAT 7 1 Network Management 1 4 P Packet Error 10 2 Received 10 3 Transmitted 10 3 Packe...

Страница 199: ...onventions xviii Syslog 10 5 Syslog IP Address 10 6 Syslog Server 10 5 System Diagnostic 10 8 Log and Trace 10 5 Syslog and Accounting 10 5 System Information 10 4 System Status 10 1 System Informatio...

Страница 200: ...Prestige 650H 17 ADSL Router N Index VPI VCI 3 11 Z ZyNOS 11 1 11 2 ZyNOS F W Version 11 1 ZyXEL Limited Warranty Note iv...

Отзывы:

Нет отзывов