manualshive.com logo in svg

ZyXEL Communications PRESTIGE 650H -, Руководство пользователя

Поделиться
Скачать
ZyXEL Communications PRESTIGE 650H - Скачать руководство пользователя страница 259

Prestige 650 Series User’s Guide 

System Security 

 

25-1 

Chapter 25

 

System Security 

This chapter describes how to configure the system security on the Prestige. This chapter is only 

applicable to the Prestige 650H and the Prestige 650HW. 

25.1  System Security Overview 

You can configure the system password, an external RADIUS server and IEEE802.1x in menu 23. 

25.1.1 System Password 

Enter 1 in the main menu to display 

Menu 23- System Security

.

 

You should change the default password. If you forget your password you have to restore the default 
configuration file. Refer to the section on changing the system password in the 

Introducing the SMT

 chapter 

and the section on resetting the Prestige in the 

Introducing the Web Configurator

 chapter. 

 

 

 

 

Figure 25-1 Menu 23 System Security 

25.1.2 Configuring External RADIUS Server 

From 

Menu 23- System Security

, enter 2 to display 

Menu 23.2 - System Security-RADIUS Server

. 

 

 

 

 

Figure 25-2 Menu 23 System Security 

 

Menu 23 - System Security 

 

                        

1. Change Password 

                        2. RADIUS Server 
 

                     

4. IEEE802.1x 

Menu 23 - System Security 

 

                        1. Change Password 
                        

2. RADIUS Server 

 

                     

4. IEEE802.1x 

Содержание PRESTIGE 650H -

Страница 1: ...Prestige 650 Series ADSL Router User s Guide Version 3 40 July 2003...

Страница 2: ...y ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it...

Страница 3: ...equency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications If this equipment does cause harmful interference to radio telev...

Страница 4: ...he purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be...

Страница 5: ...3942 www zyxel com www europe zyxel com WORLDWIDE sales zyxel com tw 886 3 578 2439 ftp europe zyxel com ZyXEL Communications Corp 6 Innovation Road II Science Based Industrial Park Hsinchu 300 Taiwan...

Страница 6: ...2 Accessing the Prestige Web Configurator 2 1 2 3 Navigating the Prestige Web Configurator 2 2 2 4 Configuring Password 2 3 2 5 Resetting the Prestige 2 4 Chapter 3 Wizard Setup 3 1 3 1 Wizard Setup I...

Страница 7: ...p 6 1 6 1 WAN Overview 6 1 6 2 PPPoE Encapsulation 6 1 6 3 PPTP Encapsulation 6 1 6 4 Traffic Shaping 6 2 6 5 Configuring WAN Setup 6 2 NAT Dynamic DNS and Time Zone III Chapter 7 Network Address Tran...

Страница 8: ...12 8 Configuring Summary 12 9 12 9 Configuring Class Setup 12 11 12 10 Configuring Monitor 12 17 Maintenance VI Chapter 13 Maintenance 13 1 13 1 Maintenance Overview 13 1 13 2 System Status Screen 13...

Страница 9: ...figuring an IP static route 20 2 Chapter 21 Bridging Setup 21 1 21 1 Bridging Overview 21 1 21 2 Bridge Ethernet Setup 21 1 Chapter 22 Network Address Translation NAT 22 1 22 1 NAT Overview 22 1 22 2...

Страница 10: ...ance 28 1 28 1 Command Interpreter Mode Overview 28 1 28 2 Call Control Support 28 2 28 3 Time and Date Setting 28 4 Chapter 29 Remote Management 29 1 29 1 Remote Management Overview 29 1 29 2 Configu...

Страница 11: ...ss F 1 Appendix G Splitters and Microfilters G 1 Appendix H Power Adaptor Specifications H 1 H 1 Prestige 650R E1 E3 E7 ADSL Router H 1 H 2 Prestige 650R 11 ADSL Router H 2 H 3 Prestige 650R 13 17 ADS...

Страница 12: ...Addresses 4 1 Figure 4 2 LAN 4 4 Figure 5 1 RTS CTS 5 2 Figure 5 2 Prestige Wireless Security Levels 5 3 Figure 5 3 Wireless 5 5 Figure 5 4 MAC Address Filter 5 8 Figure 5 5 EAP Authentication 5 11 Fi...

Страница 13: ...ic DSL Line 13 11 Figure 13 9 Firmware Upgrade 13 13 Figure 13 10 Network Temporarily Disconnected 13 14 Figure 13 11 Error Message 13 14 Figure 14 1 Login Screen 14 2 Figure 14 2 Prestige 650HW 31 SM...

Страница 14: ...ure 21 2 Menu 11 3 Remote Node Network Layer Options 21 2 Figure 21 3 Menu 12 3 Bridge Static Route Setup 21 3 Figure 21 4 Menu 12 3 1 Edit Bridge Static Route 21 3 Figure 22 1 Menu 4 Applying NAT for...

Страница 15: ...23 21 Figure 24 1 SNMP Management Model 24 1 Figure 24 2 Menu 22 SNMP Configuration 24 3 Figure 25 1 Menu 23 System Security 25 1 Figure 25 2 Menu 23 System Security 25 1 Figure 25 3 Menu 23 2 System...

Страница 16: ...using the Console Port 27 15 Figure 27 19 Example Xmodem Upload 27 16 Figure 28 1 Command Mode in Menu 24 28 1 Figure 28 2 Valid Commands 28 2 Figure 28 3 Menu 24 9 System Maintenance Call Control 28...

Страница 17: ...7 3 Services and Port Numbers 7 6 Table 7 4 NAT Mode 7 8 Table 7 5 Edit SUA NAT Server Set 7 9 Table 7 6 Address Mapping Rules 7 11 Table 7 7 Address Mapping Rule Edit 7 13 Table 8 1 DDNS 8 2 Table 9...

Страница 18: ...u 12 3 1 Edit Bridge Static Route 21 4 Table 22 1 Applying NAT in Menus 4 11 3 22 3 Table 22 2 SUAAddress Mapping Rules 22 5 Table 22 3 Menu 15 1 1 First Set 22 7 Table 22 4 Menu 15 1 1 1 Editing Conf...

Страница 19: ...t Management 28 3 Table 28 2 Menu 24 10 System Maintenance Time and Date Setting 28 5 Table 29 1 Menu 24 11 Remote Management Control 29 2 Table 30 1 Menu 25 1 IP Routing Policy Setup 30 3 Table 30 2...

Страница 20: ...ing ADSL Connection A 5 Chart A 11 Troubleshooting WAN Interface A 5 Chart A 12 Troubleshooting Internet Access A 5 Chart A 13 Troubleshooting Internet Connection A 6 Chart A 14 Troubleshooting Remote...

Страница 21: ...ed CD for support documents Compact Guide or Read Me First The Prestige 650H and Prestige 650HW come with a Compact Guide The Prestige 650R and the Prestige 650R E use a Read Me First Both of them are...

Страница 22: ...ge in this user s guide This refers to both models ADSL over POTS and ADSL over ISDN unless specifically identified The Prestige models with wireless features will be referred to as the Prestige 650H...

Страница 23: ...the upstream capacity Asymmetrical services ADSL are suitable for Internet users because more information is usually downloaded than uploaded For example a simple button click in a web browser can st...

Страница 24: ......

Страница 25: ...ng Started This part is structured as a step by step guide to help you access your Prestige It covers key features and applications accessing the web configurator password setup and configuring the wi...

Страница 26: ......

Страница 27: ...nd Prestige 650HW have an integrated four port switch with an embedded PCMCIA wireless card slot The Prestige 650H HW provides a wireless LAN connectivity allowing users to enjoy the convenience and m...

Страница 28: ...rrect at the time of writing although it may be subject to change Four Port Switch A combination of switch and router makes your Prestige a cost effective and viable network solution You can connect u...

Страница 29: ...f an Internet protocol address used within one network for example a private IP address used in a local network to a different IP address known within another network for example a public IP address u...

Страница 30: ...2 Supports OAM F4 F5 loop back AIS and RDI OAM cells ATM Forum UNI 3 1 4 0 PVC Supports up to 8 PVCs UBR CBR VBR Multiple Protocols over AAL5 RFC 1483 PPP over AAL5 RFC 2364 PPP over Ethernet RFC 251...

Страница 31: ...l Internet Protocol network layer protocol Transparently bridging for unsupported network layer protocols RIP I RIP II IGMP Proxy ICMP support MIB II support RFC 1213 PPPoE feature o PPPoE idle time o...

Страница 32: ...self diagnostic tests These tests check the integrity of the following circuitry FLASH memory ADSL circuitry RAM LAN port Filters The Prestige s packet filtering functions allows added network securi...

Страница 33: ...face connection for example T1 OC3 DS3 ATM or Frame Relay Think of it as the equivalent of a modem rack for ADSL In addition for Prestige 650H HW you can insert an optional wireless PCMICA card into t...

Страница 34: ......

Страница 35: ...gator 7 0 and later versions with JavaScript enabled It is recommended that you set your screen resolution to 1024 by 768 pixels 2 2 Accessing the Prestige Web Configurator Step 1 Make sure your Prest...

Страница 36: ...rom the Language drop down list box Click Wizard Setup to begin a series of screens to configure your Prestige for the first time Click a link under Advanced Setup to configure advanced Prestige featu...

Страница 37: ...pears as shown Figure 2 3 Password The following table describes the labels in this screen Table 2 1 Password LABEL DESCRIPTION Old Password Type the default password or the existing password you use...

Страница 38: ...t Button Step 1 Make sure the SYS LED is on not blinking Step 2 Press the RESET button for five seconds and then release it When the SYS LED begins to blink the defaults have been restored and the Pre...

Страница 39: ...the Web Configurator 2 5 Figure 2 4 Example Xmodem Upload Step 5 After successful firmware upload enter atgo to restart the router Type the configuration file s location or click Browse to search for...

Страница 40: ......

Страница 41: ...s into bridged ATM cells ENET ENCAP requires that you specify a gateway IP address in the Ethernet Encapsulation Gateway field in the second wizard screen You can get this information from your ISP 3...

Страница 42: ...C1 carries IP etc VC based multiplexing may be dominant in environments where dynamic creation of large numbers of ATM VCs is fast and economical 3 3 2 LLC based Multiplexing In this case one VC carri...

Страница 43: ...Choices vary depending on what you select in the Mode field If you select Bridge in the Mode field select either PPPoA or RFC 1483 If you select Routing in the Mode field select PPPoA RFC 1483 ENET EN...

Страница 44: ...signed Number Authority IANA reserved this block of addresses specifically for private use please do not use any other number unless you are told otherwise Let s say you select 192 168 1 0 as the netw...

Страница 45: ...IP Addresses Every machine on the Internet must have a unique address If your networks are isolated from the Internet for example only between your two branch offices you can assign any IP addresses t...

Страница 46: ...ion unless your telephone company offers flat rate service or you need a constant connection and the cost is of no concern 3 9 NAT NAT Network Address Translation NAT RFC 1631 is the translation of th...

Страница 47: ...in the form user domain where domain identifies a service name then enter both components exactly as given Password Enter the password associated with the user name above IP Address A static IP addre...

Страница 48: ...all the time The Prestige will try to bring up the connection automatically if it is disconnected The schedule rule s in SMT menu 26 has priority over your Connection settings Network Address Transla...

Страница 49: ...ield Network Address Translation Select None SUA Only or Full Feature from the drop sown list box Refer to the NAT chapter for more details Back Click Back to go back to the first wizard screen Next C...

Страница 50: ...d type your ISP assigned IP address in the IP Address text box below Subnet Mask Enter a subnet mask in dotted decimal notation Refer to the IP Subnetting appendix to calculate a subnet mask If you ar...

Страница 51: ...abels in this screen Table 3 5 Internet Connection with PPPoA LABEL DESCRIPTION User Name Enter the user name exactly as your ISP assigned If assigned a name in the form user domain where domain ident...

Страница 52: ...time out which means the Internet session will not timeout Select Nailed Up Connection when you want your connection up all the time The Prestige will try to bring up the connection automatically if i...

Страница 53: ...lt IP of 192 168 1 1 for other server machines for example server for mail FTP telnet web etc that you may have 3 12 Wizard Setup Configuration Third Screen Verify the settings in the screen shown nex...

Страница 54: ...8 1 1 factory default If you changed the Prestige s LAN IP address you must use the new IP address if you want to access the web configurator again LAN Subnet Mask Enter a subnet mask in dotted decima...

Страница 55: ...The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask Secondary DNS Server As above Back Click Back to go back to the previous screen Finish Click Finish to save...

Страница 56: ...te to www zyxel com Internet access is just the beginning Refer to the rest of this User s Guide for more detailed information on the complete range of Prestige features If you cannot access the Inter...

Страница 57: ...LAN Wireless LAN and WAN II Part II LAN Wireless LAN and WAN This part covers the LAN Local Area Network wireless LAN and WAN setup...

Страница 58: ......

Страница 59: ...ical connection determines whether the Prestige ports are LAN or WAN ports There are two separate IP networks one inside the LAN network the other outside the WAN network as shown next Figure 4 1 LAN...

Страница 60: ...servers out of the DHCP setup under all circumstances If your ISP gives you explicit DNS servers make sure that you enter their IP addresses in the DHCP Setup menu This way the Prestige can pass the...

Страница 61: ...uses subnet broadcasting while RIP 2M uses multicasting 4 4 4 Multicast Traditionally IP packets are transmitted in one of either two ways Unicast 1 sender 1 recipient or Broadcast 1 sender everybody...

Страница 62: ...e 650 Series User s Guide 4 4 LAN Setup 4 5 Configuring LAN Click LAN to open the following screen Figure 4 2 LAN The following table describes the labels in this screen Table 4 1 LAN LABEL DESCRIPTIO...

Страница 63: ...Primary DNS Server Enter the IP addresses of the DNS servers The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask Secondary DNS Server As above Remote DHCP Serv...

Страница 64: ......

Страница 65: ...d in Windows XP An optional network RADIUS server for remote user authentication and accounting 5 1 2 Channel The range of radio frequencies used by IEEE 802 11b wireless devices is called a channel C...

Страница 66: ...n send before an RTS Request To Send CTS Clear to Send handshake is invoked When a data frame exceeds the RTS CTS value you set between 0 to 2432 bytes the station that wants to transmit this frame mu...

Страница 67: ...ta frames will be fragmented before they reach RTS CTS size 5 2 Levels of Security Wireless security is vital to your network to protect wireless communication between wireless stations access points...

Страница 68: ...ess LAN capabilities Step 1 Turn off the Prestige Never insert or remove a wireless LAN card when the Prestige is turned on Step 2 Locate the slot labeled Wireless LAN on the Prestige Step 3 With its...

Страница 69: ...cribes the labels in this screen Table 5 1 Wireless LABEL DESCRIPTION ESSID The ESSID Extended Service Set Identification is a unique name to identify the Prestige in the wireless LAN Wireless station...

Страница 70: ...shold number of bytes for the fragmentation boundary for directed messages It is the maximum data fragment size that can be sent Enter a value between 256 and 2432 WEP Encryption WEP Wired Equivalent...

Страница 71: ...ccessing the Prestige Deny Association Every Ethernet device has a unique MAC Media Access Control address The MAC address is assigned at the factory and consists of six pairs of hexadecimal character...

Страница 72: ...Prestige 650 Series User s Guide 5 8 Wireless LAN Setup Figure 5 4 MAC Address Filter The following table describes the labels in this menu...

Страница 73: ...begin configuring this screen afresh 5 7 802 1x Overview The IEEE 802 1x standard outlines enhanced security methods for both the authentication of wireless stations and encryption key management Aut...

Страница 74: ...key which is a password they both know The key is not sent over the network In addition to the shared key password information exchanged is also encrypted to protect the wired network from unauthorize...

Страница 75: ...restige sends a request identity message to the wireless station for identity information Step 3 The wireless station replies with identity information including username and password Step 4 The RADIU...

Страница 76: ...wired network ReAuthentication Timer Specify how often wireless stations have to re enter user names and passwords in order to stay connected This field is activated only when you select Authenticatio...

Страница 77: ...ck the user database on the Prestige for a wireless station s user name and password If the user name is not found the Prestige checks the user database on the specified RADIUS server Select RADIUS fi...

Страница 78: ...Prestige 650 Series User s Guide 5 14 Wireless LAN Setup Figure 5 7 Local User Database...

Страница 79: ...ofile Password Enter a password up to 31 characters long for this user profile Back Click Back to go to the main wireless LAN setup screen Apply Click Apply to save these settings back to the Prestige...

Страница 80: ...the labels in this screen Table 5 5 RADIUS LABEL DESCRIPTION Authentication Server Active Select Yes from the drop down list box to enable user authentication through an external authentication server...

Страница 81: ...ist box to enable user authentication through an external accounting server Server IP Address Enter the IP address of the external accounting server in dotted decimal notation Port Number The default...

Страница 82: ......

Страница 83: ...therefore requires no new learning or procedures for Windows users One of the benefits of PPPoE is the ability to let you access one of multiple network services a function known as dynamic service se...

Страница 84: ...dependent on the line speed Sustained Cell Rate SCR is the mean cell rate of a bursty on off traffic source that can be sent at the peak rate and a parameter for burst type traffic SCR may not be grea...

Страница 85: ...Prestige 650 Series User s Guide WAN Setup 6 3 Figure 6 2 Internet Access Setup...

Страница 86: ...el Identifier define a virtual circuit Refer to the appendix for more information VPI The valid range for the VPI is 0 to 255 Enter the VPI assigned to you VCI The valid range for the VCI is 32 to 655...

Страница 87: ...ther a dynamic or static IP address Select Obtain an IP Address Automatically if you have a dynamic IP address otherwise select Static IP Address and type your ISP assigned IP address in the IP Addres...

Страница 88: ...NCAP Gateway ENET ENCAP encapsulation only You must specify a gateway IP address supplied by your ISP when you select ENET ENCAP in the Encapsulation field Back Click Back to return to the previous sc...

Страница 89: ...NAT Dynamic DNS and Time Zone III Part III NAT Dynamic DNS and Time Zone This part covers NAT Network Address Translation dynamic DNS Domain Name Sever and Time Zone setup...

Страница 90: ......

Страница 91: ...inside outside refers to the location of a host while global local refers to the IP address of a host used in a packet Thus an inside local address ILA is the IP address of an inside host in a packet...

Страница 92: ...r NAT 7 1 3 How NAT Works Each packet has two addresses a source address and a destination address For outgoing packets the ILA Inside Local Address is the source address on the LAN and the IGA Inside...

Страница 93: ...upports five types of IP port mapping They are 1 One to One In One to One mode the Prestige maps one local IP address to one global IP address 2 Many to One In Many to One mode the Prestige maps multi...

Страница 94: ...Types TYPE IP MAPPING SMT ABBREVIATION One to One ILA1 IGA1 1 1 Many to One SUA PAT ILA1 IGA1 ILA2 IGA1 M 1 Many to Many Overload ILA1 IGA1 ILA2 IGA2 ILA3 IGA1 ILA4 IGA2 M M Ov Many to Many No Overloa...

Страница 95: ...are unsure refer to your ISP Default Server IP Address In addition to the servers for specified services NAT supports a default server IP address A default server receives packets from ports that are...

Страница 96: ...further information about port numbers Table 7 3 Services and Port Numbers SERVICES PORT NUMBER ECHO 7 FTP File Transfer Protocol 21 SMTP Simple Mail Transfer Protocol 25 DNS Domain Name System 53 Fin...

Страница 97: ...ries User s Guide NAT 7 7 Figure 7 3 Multiple Servers Behind NAT Example 7 4 Selecting the NAT Mode Click NAT to open the following screen Figure 7 4 NAT Mode The following table describes the labels...

Страница 98: ...nk to go to the NAT Edit SUA NAT Server Set screen Full Feature Select this radio button if you have multiple public WAN IP addresses for your Prestige Edit Details Click this link to go to the NAT Ad...

Страница 99: ...labels in this screen Table 7 5 Edit SUA NAT Server Set LABEL DESCRIPTION Start Port No Enter a port number in this field To forward only one port enter the port number again in the End Port No field...

Страница 100: ...ddress Mapping Ordering your rules is important because the Prestige applies the rules in the order that you specify When a rule matches the current packet the Prestige takes the corresponding action...

Страница 101: ...IP Address ILA If your rule is for all local IP addresses then enter 0 0 0 0 as the Local Start IP address and 255 255 255 255 as the Local End IP address This field is N A for One to one and Server m...

Страница 102: ...vious ZyXEL routers supported only M M Ov Overload Many to Many Overload mode maps multiple local IP addresses to shared global IP addresses MM No No Overload Many to Many No Overload mode maps each l...

Страница 103: ...e outside world Local Start IP This is the starting local IP address ILA Local IP addresses are N A for Server port mapping Local End IP This is the end local IP address ILA If your rule is for all lo...

Страница 104: ......

Страница 105: ...ends or relatives will always be able to call you even if they don t know your IP address First of all you need to have registered a dynamic DNS account with www dyndns org This is for people with a d...

Страница 106: ...ct the name of your Dynamic DNS service provider Host Name Type the domain name assigned to your Prestige by your Dynamic DNS provider E mail Address Type your e mail address User Type your user name...

Страница 107: ...o configure the Prestige s time and date settings This chapter is not available on all models 9 1 Configuring Time Zone To change your Prestige s time and date click Time Zone The screen appears as sh...

Страница 108: ...location This will set the time difference between your time zone and Greenwich Mean Time GMT Daylight Savings Select this option if you use daylight savings time Daylight saving is a period from lat...

Страница 109: ...hen click Apply Time Current Time This field displays the time of your Prestige Each time you reload this page the Prestige synchronizes the time with the time server New Time This field displays the...

Страница 110: ......

Страница 111: ...Remote Management and UPnP IV Part IV Remote Management and UPnP This part contains information on how to configure the Prestige for remote management and setting up Universal Plug and Play UPnP...

Страница 112: ......

Страница 113: ...te management over LAN or WAN will not work when 1 A filter in SMT menu 3 1 LAN or in menu 11 5 WAN is applied to block a Telnet FTP or Web service 2 You have disabled that service in one of the remot...

Страница 114: ...except when it is continuously updating the status in menu 24 1 or when sys stdio has been changed on the command line 10 2 Telnet You can configure your Prestige for remote Telnet access as shown ne...

Страница 115: ...re All LAN Only WAN Only and Disable Port This field shows the port number for the remote management service You may change the port number for a service in this field but you must use the same port n...

Страница 116: ......

Страница 117: ...e icon Selecting the icon of a UPnP device will allow you to access the information and properties of that device 11 1 2 NAT Traversal UPnP NAT traversal automates the process of allowing an applicati...

Страница 118: ...0 Internet Gateway Device At the time of writing ZyXEL s UPnP implementation supports Windows Messenger 4 6 and 4 7 while Windows Messenger 5 0 and Xbox are still being tested UPnP broadcasts are onl...

Страница 119: ...hrough the Prestige for example by using NAT traversal UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device this eliminates the need t...

Страница 120: ...e computer when prompted 11 3 2 Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP Step 1 Click Start and Control Panel Step 2 Double click Network Connections Step...

Страница 121: ...his section shows you how to use the UPnP feature in Windows XP You must already have UPnP installed in Windows XP and UPnP activated on the Prestige Make sure the computer is connected to a LAN port...

Страница 122: ...re automatically created Step 4 You may edit or delete the port mappings or click Add to manually add port mappings When the UPnP enabled device is disconnected from your computer all port mappings wi...

Страница 123: ...you can access the web based configurator on the Prestige without finding out the IP address of the Prestige first This comes helpful if you do not know the IP address of the Prestige Follow the step...

Страница 124: ...nabled device displays under Local Network Step 5 Right click on the icon for your Prestige and select Invoke The web configurator login screen displays Step 6 Right click on the icon for your Prestig...

Страница 125: ...Bandwidth Management V Part V Bandwidth Management This part provides information on the functions and configuration of Bandwidth Management...

Страница 126: ......

Страница 127: ...delays and dropped packets at the next routing device For example you can set the WAN interface speed to 1000kbps if the broadband device connected to the WAN port has an upstream speed of 1000kbps Al...

Страница 128: ...available bandwidth 12 4 Bandwidth Management Usage Examples These examples show bandwidth management allotments on a WAN interface that is configured for 10Mbps 12 4 1 Application based Bandwidth Ma...

Страница 129: ...gement Example The following example uses bandwidth classes based on LAN subnets and applications specific applications in each subnet are allotted bandwidth Table 12 1 Application and Subnet based Ba...

Страница 130: ...ovide smoother operation 12 5 2 Fairness based Scheduler The Prestige divides bandwidth equally among bandwidth classes when using the fairness based scheduler thus preventing one bandwidth class from...

Страница 131: ...igure the Prestige to allow bandwidth for traffic that is not defined in a bandwidth filter Step 1 Leave some of the interface s bandwidth unbudgeted Step 2 Do not enable the interface s Maximize Band...

Страница 132: ...s gets up to its budgeted bandwidth The administration class only uses 1 Mbps of its budgeted 2 Mbps Sales and Marketing are first to get extra bandwidth because they have the highest priority 6 If th...

Страница 133: ...s can also borrow bandwidth from a higher parent class grandparent class if the child class s parent class is also configured to borrow bandwidth from its parent class This can go on for as many level...

Страница 134: ...th Borrowing Example The Bill class can borrow unused bandwidth from the Sales USA class because the Bill class has bandwidth borrowing enabled The Bill class can also borrow unused bandwidth from the...

Страница 135: ...on individual child classes the Prestige functions as follows 1 The Prestige sends traffic according to each bandwidth class s bandwidth budget 2 The Prestige assigns a parent class s unused bandwidth...

Страница 136: ...le bandwidth management on that interface Not all interfaces are available on every Prestige Speed kbps Enter the amount of bandwidth for this interface that you want to allocate using bandwidth manag...

Страница 137: ...Cancel Click Cancel to begin configuring this screen afresh 12 9 Configuring Class Setup The class setup screen displays the configured bandwidth classes by individual interface Select an interface a...

Страница 138: ...lick Edit to configure the selected class You cannot edit the root class Delete Click Delete to delete the class and all its child classes You cannot delete the root class Statistics Click Statistics...

Страница 139: ...s screen Table 12 4 Bandwidth Manager Class Configuration LABEL DESCRIPTION Class Name Use the auto generated name or enter a descriptive name of up to 20 alphanumeric characters including spaces BW B...

Страница 140: ...k box to have the Prestige use this bandwidth filter when it performs bandwidth management You must enter a value in at least one of the following fields other than the Destination Subnet Mask fields...

Страница 141: ...Mail Transfer Protocol 25 DNS Domain Name System 53 Finger 79 HTTP Hyper Text Transfer protocol or WWW Web 80 POP3 Post Office Protocol 110 NNTP Network News Transport Protocol 119 SNMP Simple Network...

Страница 142: ...Dropped Packets This field displays the total number of packets dropped Dropped Bytes This field displays the total number of bytes dropped Bandwidth Statistics for the Past 8 Seconds t 8 to t 1 This...

Страница 143: ...screen Table 12 7 Bandwidth Manager Monitor LABEL DESCRIPTION Interface Select an interface from the drop down list box to view the bandwidth usage of its bandwidth classes Class Name This field displ...

Страница 144: ......

Страница 145: ...Maintenance VI Part VI Maintenance This part covers the maintenance screens...

Страница 146: ......

Страница 147: ...ffic statistics 13 1 Maintenance Overview Use the maintenance screens to view system information upload new firmware manage configuration and restart your Prestige 13 2 System Status Screen Click Syst...

Страница 148: ...Prestige 650 Series User s Guide 13 2 Maintenance Figure 13 1 System Status The following table describes the labels in this screen...

Страница 149: ...port IP address IP Subnet Mask This is the WAN port IP subnet mask Default Gateway This is the IP address of the default gateway if applicable VPI VCI This is the Virtual Path Identifier and Virtual C...

Страница 150: ...of packets sent and number of packets received for each port 13 2 1 System Statistics Click Show Statistics in the System Status screen to open the following screen Read only information here include...

Страница 151: ...ET RFC 1483 and PPPoE LAN Port Statistics This is the LAN port Interface This field displays the type of port Status For the WAN port this displays the port speed and duplex setting if you re using Et...

Страница 152: ...2132 allows individual clients to obtain TCP IP configuration at start up from a server You can configure the Prestige as a DHCP server or disable it When configured as a server the Prestige provides...

Страница 153: ...vice has a unique MAC address The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters for example 00 A0 C5 00 00 02 13 4 Wireless Screens These read only screens...

Страница 154: ...the factory and consists of six pairs of hexadecimal characters for example 00 A0 C5 00 00 02 Association Time This field displays how long a wireless station has been associated to the Prestige Back...

Страница 155: ...work is using the channel within the Prestige s transmission range Back Click Back to go to the main Wireless LAN screen Refresh Click Refresh to renew the information in the table 13 5 Diagnostic Scr...

Страница 156: ...eneral The following table describes the labels in this screen Table 13 6 Diagnostic General LABEL DESCRIPTION TCP IP Address Type the IP address of a computer that you want to ping in order to test a...

Страница 157: ...o reboot the Prestige A warning dialog box is then displayed asking you if you re sure you want to reboot the system Click OK to proceed Back Click this button to go back to the main Diagnostic screen...

Страница 158: ...is useful for troubleshooting problems with the DSLAM and ATM network Upstream Noise Margin Click this button to display the upstream noise margin Downstream Noise Margin Click this button to display...

Страница 159: ...u want to upload Remember that you must decompress compressed zip files before you can upload them Upload Click Upload to begin the upload process This process may take up to two minutes Reset Click t...

Страница 160: ...e operating systems you may see the following icon on your desktop Figure 13 10 Network Temporarily Disconnected After two minutes log in again and check your new firmware version in the System Status...

Страница 161: ...ystem Management Terminal configuration for general setup LAN setup wireless LAN setup Internet access remote nodes remote node TCP IP static routing and NAT See the web configurator parts of this gui...

Страница 162: ......

Страница 163: ...ENTER to display the SMT password screen The default password is 1234 14 1 2 Procedure for SMT Configuration via Telnet The following procedure details how to telnet into your Prestige Step 1 In Windo...

Страница 164: ...g in your Prestige will automatically log you out Figure 14 1 Login Screen 14 1 4 Prestige SMT Menu Overview We use the Prestige 650HW 31 SMT menus in this guide as an example The SMT menus vary sligh...

Страница 165: ...System Maintenance Restore Configuration Menu 24 7 System Maintenance Upload Firmware Menu 24 8 Command Interpreter Mode Menu 24 3 1 System Maintenance View Error Log Menu 24 3 2 System Maintenance UN...

Страница 166: ...the next field You can also use the UP DOWN arrow keys to move to the previous and the next field respectively Entering information Type in or press SPACE BAR then press ENTER You need to fill in two...

Страница 167: ...iles on the Prestige 650H HW 15 NAT Setup Use this menu to specify inside servers when NAT is enabled 21 Filter Set Configuration Use this menu to set up filters to provide security etc 22 SNMP Config...

Страница 168: ...isplay Menu 23 System Security Step 2 Enter 1 to display Menu 23 1 System Security Change Password as shown next Step 3 Type your existing system password in the Old Password field for example 1234 an...

Страница 169: ...2000 click Start Settings Control Panel and then double click System Click the Network Identification tab and then the Properties button Note the entry for the Computer name field and enter it as the...

Страница 170: ...ield blank the ISP may assign a domain name via DHCP You can go to menu 24 8 and type sys domainname to see the current domain name used by your gateway If you want to clear this field just press the...

Страница 171: ...s SPACE BAR to select Yes and then press ENTER to make dynamic DNS active Yes Host Enter the domain name assigned to your Prestige by your Dynamic DNS provider me dyndns org EMAIL Enter your e mail ad...

Страница 172: ......

Страница 173: ...t traffic You seldom need to filter Ethernet traffic however the filter sets may be useful to block certain packets reduce traffic and prevent security breaches Figure 16 2 Menu 3 1 LAN Port Filter Se...

Страница 174: ...ENTER to display Menu 3 2 TCP IP and DHCP Ethernet Setup as shown next Figure 16 3 Menu 3 2 TCP IP and DHCP Ethernet Setup Follow the instructions in the following table on how to configure the DHCP...

Страница 175: ...ount of the IP address pool 32 Primary DNS Server Secondary DNS Server Enter the IP addresses of the DNS servers The DNS servers are passed to the DHCP clients along with the IP address and the subnet...

Страница 176: ...e IP Multicasting or select None to disable it None default IP Policies Create policies using SMT menu 25 see the IP Policy Routing chapter and apply them on the Prestige LAN interface here You can ap...

Страница 177: ...es Step 1 Turn off the Prestige Never insert or remove a wireless LAN card when the Prestige is turned on Step 2 Locate the slot labeled Wireless LAN on the Prestige Step 3 With its pin connector faci...

Страница 178: ...set the operating frequency channel depending on your particular region CH01 2412MHz RTS Threshold RTS Request To Send threshold number of bytes enables RTS CTS handshake Data with its frame size lar...

Страница 179: ...e 128 bit WEP in the WEP Encryption field then enter 13 characters or 26 hexadecimal digits 0 9 A F preceded by 0x for each key 1 4 There are four data encryption keys to secure your data from eavesdr...

Страница 180: ...ccess to the Prestige in these address fields When you have completed this menu press ENTER at the prompt Press ENTER to confirm or ESC to cancel to save your configuration or press ESC to cancel and...

Страница 181: ...olicy Routing IPPR provides a mechanism to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator Policy based routing is applie...

Страница 182: ...ure 18 2 Partitioned Logical Networks Use menu 3 2 1 to configure IP Alias on your Prestige 18 4 IP Alias Setup Use menu 3 2 to configure the first network Move the cursor to Edit IP Alias field and p...

Страница 183: ...tgoing protocol filters N A IP Alias 2 No IP Address N A IP Subnet Mask N A RIP Direction N A Version N A Incoming protocol filters N A Outgoing protocol filters N A Enter here to CONFIRM or ESC to CA...

Страница 184: ...Choices are RIP 1 RIP 2B or RIP 2M RIP 1 Incoming Protocol Filters Enter the filter set s you wish to apply to the incoming traffic between this node and the Prestige Outgoing Protocol Filters Enter t...

Страница 185: ...on From the main menu type 4 to display Menu 4 Internet Access Setup as shown next Figure 18 6 Menu 4 Internet Access Setup The following table contains instructions on how to configure your Prestige...

Страница 186: ...raffic source that can be sent at the peak rate and a parameter for burst type traffic Type the SCR it must be less than the PCR 0 Maximum Burst Size MBS 0 Refers to the maximum number of cells that c...

Страница 187: ...Mapping Set Type the numbers of mapping sets 1 8 to use with NAT See the NAT chapter for details N A When you have completed this menu press ENTER at the prompt Press ENTER to confirm or ESC to cance...

Страница 188: ......

Страница 189: ...onfiguring one of the remote nodes You first choose a remote node in Menu 11 Remote Node Setup You can then edit that node s profile in menu 11 1 as well as configure specific settings in three submen...

Страница 190: ...ion Here are some examples of more suitable combinations in such an application Scenario 1 One VC Multiple Protocols PPPoA RFC 2364 encapsulation with VC based multiplexing is the best combination bec...

Страница 191: ...n Rem Password My Login My Password and Authen fields are not applicable N A ENET ENCAP Multiplexing Press SPACE BAR and then ENTER to select the method of multiplexing that your ISP uses either VC ba...

Страница 192: ...ntication Protocol only Authen PAP accept PAP Password Authentication Protocol only Route This field determines the protocol used in routing Options are IP and None IP Bridge When bridging is enabled...

Страница 193: ...irect Use SPACE BAR to choose Yes and press ENTER to open menu 11 7 to edit the traffic redirect See the Traffic Redirect section for more details This field is not available on all models No default...

Страница 194: ...d takes priority over all of the routes mentioned above see the IP Policy Routing chapter For example if the normal route has a metric of 1 and the traffic redirect route has a metric of 2 then the no...

Страница 195: ...especially UNIX derivatives require separate IP network numbers for the WAN and LAN links and each end to have a unique address within the WAN network number In that case type the IP address assigned...

Страница 196: ...node will be propagated to other hosts through RIP broadcasts No RIP Direction Press SPACE BAR and then ENTER to select the RIP Direction Options are Both In Only Out Only or None None Version Press S...

Страница 197: ...to specify the filter set s to apply to the incoming and outgoing traffic between this remote node and the Prestige and also to prevent certain packets from triggering calls You can specify up to 4 fi...

Страница 198: ...pen the Security screen as shown next Select the predefined filter rules and click Apply Menu 11 5 Remote Node Filter Input Filter Sets protocol filters 11 12 device filters Output Filter Sets protoco...

Страница 199: ...protocol filter set numbers that were previously applied are erased after you apply the Internet Security filter rules in the web configurator To reapply them or apply new filter sets you need to ente...

Страница 200: ...er 1 6 to Configure Menu 21 12 Filter Rules Summary A Type Filter Rules M m n 1 Y IP Pr 6 SA 0 0 0 0 DA 0 0 0 0 DP 23 N D N 2 Y IP Pr 6 SA 0 0 0 0 DA 0 0 0 0 DP 21 N D N 3 Y IP Pr 17 SA 0 0 0 0 DA 0 0...

Страница 201: ...19 6 1 VC based Multiplexing non PPP Encapsulation For VC based multiplexing by prior agreement a protocol is assigned a specific virtual circuit for example VC1 will carry IP Separate VPI and VCI nu...

Страница 202: ...management of ATM traffic 19 7 Traffic Redirect Traffic redirect forwards LAN traffic to a backup gateway when the Prestige cannot connect to the Internet An example is shown in the figure below Figur...

Страница 203: ...s Press ENTER at the message Press ENTER to Confirm to save your configuration or press ESC at any time to cancel 19 7 1 Traffic Redirect Setup Configure parameters that determine when the Prestige wi...

Страница 204: ...ateway in dotted decimal notation The Prestige automatically forwards traffic to this IP address if the Prestige s Internet connection terminates Metric This field sets this route s priority among the...

Страница 205: ...is directly connected to a remote node Each remote node specifies only the network to which the gateway is directly connected and the Prestige has no knowledge of the networks beyond For instance the...

Страница 206: ...te Setup shown next Figure 20 3 Menu 12 1 IP Static Route Setup P650H HW Step 3 Now type the route number of a static route you want to configure Menu 12 1 IP Static Route Setup 1 ________ 2 ________...

Страница 207: ...o be identical to the host ID IP Subnet Mask Type the subnet mask for this destination Follow the discussion on IP Subnet Mask in this manual Gateway IP Address Type the IP address of the gateway The...

Страница 208: ...his remote node in its RIP broadcasts If set to Yes this route is kept private and is not included in RIP broadcasts If No the route to this remote node will be propagated to other hosts through RIP b...

Страница 209: ...ol and it also demands more CPU cycles and memory For efficiency reasons do not turn on bridging unless you need to support protocols other than IP on your network For IP enable the routing if you nee...

Страница 210: ...k 0 0 0 0 My WAN Addr 0 0 0 0 NAT Full Feature Address Mapping Set 2 Metric 2 Private No RIP Direction Both Version RIP 2B Multicast IGMP v2 IP Policies Press ENTER to Confirm or ESC to Cancel Menu 11...

Страница 211: ...press ENTER at the prompt Press ENTER to confirm or ESC to cancel to save your configuration or press ESC to cancel and go back to the previous screen 21 2 2 Bridge Static Route Setup Similar to netw...

Страница 212: ...e static route is active Yes or not No Ether Address Type the MAC address of the destination computer that you want to bridge the packets to IP Address If available type the IP address of the destinat...

Страница 213: ...for SUA The Prestige also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of clients or servers using mapping types as outlined in the web configurat...

Страница 214: ...the cursor to the Edit IP Bridge field press SPACE BAR to select Yes and then press ENTER to bring up Menu 11 3 Remote Node Network Layer Options Menu 4 Internet Access Setup ISP s Name MyISP Encapsu...

Страница 215: ...SUA Only if you have just one public WAN IP address for your Prestige SUA Only 22 3 NAT Setup Use the address mapping sets menus and submenus to create the mapping table used to assign global addresse...

Страница 216: ...from the main menu to bring up the following screen Figure 22 3 Menu 15 NAT Setup 22 3 1 Address Mapping Sets Enter 1 to bring up Menu 15 1 Address Mapping Sets Figure 22 4 Menu 15 1 Address Mapping...

Страница 217: ...g local IP address ILA If the rule is for all local IPs then the Start IP is 0 0 0 0 and the End IP is 255 255 255 255 255 255 255 255 Global Start IP This is the starting global IP address IGA If you...

Страница 218: ...ield and you must enter a name for the set Figure 22 6 Menu 15 1 1 First Set If the Set Name field is left blank the entire set will be deleted The Type Local and Global Start End IPs are configured i...

Страница 219: ...the rule selected The rules after the selected rule will then be moved down by one rule Delete means to delete the selected rule and then all the rules after the selected one will be advanced one rule...

Страница 220: ...ields MUST be set for Server Start This is the starting local IP address ILA 0 0 0 0 End This is the ending local IP address ILA If the rule is for all local IPs then put the Start IP as 0 0 0 0 and t...

Страница 221: ...r press ESC to cancel and go back to the previous screen 22 4 Configuring a Server behind NAT Follow these steps to configure a server behind NAT Step 1 Enter 15 in the main menu to go to Menu 15 NAT...

Страница 222: ...In the following figure you have a computer acting as an FTP Telnet and SMTP server ports 21 23 and 25 at 192 168 1 33 Step 6 Press ENTER at the Press ENTER to confirm prompt to save your configuratio...

Страница 223: ...22 5 General NAT Examples The following are some examples of NAT configuration 22 5 1 Example 1 Internet Access Only In the following Internet access example you only need one rule where your ILAs In...

Страница 224: ...Network Address Translation field in menus 4 and 11 3 is specifically pre configured to handle this case Menu 4 Internet Access Setup ISP s Name MyISP Encapsulation RFC 1483 Multiplexing LLC based VPI...

Страница 225: ...pecify the Inside Server behind the NAT as shown in the next figure Figure 22 14 Menu 15 2 1 Specifying an Inside Server Menu 15 2 1 NAT Server Setup Used for SUA Only Rule Start Port No End Port No I...

Страница 226: ...Four rules need to be configured two bi directional and two uni directional as follows Rule 1 Map the first IGA to the first inside FTP server for FTP traffic in both directions 1 1 mapping giving bo...

Страница 227: ...rect mapping for packets going both ways and enter the local Start IP as 192 168 1 10 the IP address of FTP Server 1 the global Start IP as 10 132 50 1 our first IGA See Figure 22 17 Step 6 Repeat the...

Страница 228: ...e it as shown Menu 15 1 1 Address Mapping Rules Set Name Example3 Idx Local Start IP Local End IP Global Start IP Global End IP Type 1 192 168 1 10 10 132 50 1 1 1 2 192 168 1 11 10 132 50 2 1 1 3 0 0...

Страница 229: ...ng as port numbers do not change for Many to Many No Overload and One to One NAT mapping types The following figure illustrates this Figure 22 19 NAT Example 4 Menu 15 2 1 NAT Server Setup Rule Start...

Страница 230: ...e configured your rule you should be able to check the settings in menu 15 1 1 as shown next Figure 22 21 Example 4 Menu 15 1 1 Address Mapping Rules Menu 15 1 1 1 Address Mapping Rule Type Many to Ma...

Страница 231: ...SNMP system security system information and diagnosis firmware and configuration file maintenance system maintenance remote management IP policy routing and call scheduling See the web configurator p...

Страница 232: ......

Страница 233: ...e divided into incoming and outgoing filters depending on the direction of the packet relative to a port Data filtering can be applied on either the WAN side or the Ethernet side Call filtering is use...

Страница 234: ...ures that follow The following figure illustrates the logic flow when executing a filter rule Data Outgoing Packet Drop packet Built in default Call Filters User defined Call Filters if applicable Ini...

Страница 235: ...e Fetch Next Filter Set Next Filter Set Available Accept Packet Drop Packet Yes No Yes No Yes Packet intoFilter Filter Set Forward Drop No Check Next Rule Figure 23 2 Filter Rule Process You can apply...

Страница 236: ...HW To configure a filter set follow the steps shown next Step 1 Enter 21 in the main menu to display Menu 21 Filter Set Configuration Figure 23 3 Menu 21 Filter Set Configuration P650H HW Step 2 Type...

Страница 237: ...0 0 DA 0 0 0 0 DP 139 N D N 4 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 137 N D N 5 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 138 N D N 6 Y IP Pr 17 SA 0 0 0 0 DA 0 0 0 0 DP 139 N D F Enter Filter Rule Number 1 6...

Страница 238: ...he Edit Comments field and press ENTER Step 4 Press ENTER at the message Press ENTER to confirm to display Menu 21 4 Filter Rules Summary that is if you selected filter set 4 in menu 21 See Figure 23...

Страница 239: ...1 Y Gen Off 12 Len 2 Mask ffff Value 8863 N F N 2 Y Gen Off 12 Len 2 Mask ffff Value 8864 N F D 3 N 4 N 5 N 6 N Enter Filter Rule Number 1 6 to Configure Menu 21 5 Filter Rules Summary A Type Filter R...

Страница 240: ...in is complete N means there are no more rules to check You can specify an action to be taken for instance forward the packet drop the packet or check the next rule For the latter the next rule is ind...

Страница 241: ...ng all rules in a filter set must be of the same class for instance protocol filters or generic filters The class of a filter set is determined by the first rule that you create When applying the filt...

Страница 242: ...col for example TCP is 6 UDP is 17 and ICMP is 1 The value must be between 0 and 255 A value of O matches ANY protocol 0 to 255 IP Source Route IP Source Route is an optional header that dictates the...

Страница 243: ...red 0 to 65535 Port Comp Select the comparison to apply to the source port in the packet against the value given in Source Port field Choices are None Less Greater Equal or Not Equal None TCP Estab Th...

Страница 244: ...action for a packet not matching the rule Choices are Check Next Rule Forward or Drop Check Next Rule default When you have completed this menu press ENTER at the prompt Press ENTER to confirm or ESC...

Страница 245: ...Active Check IP Protocol Drop Drop Packet Accept Packet Drop Forward Check Next Rule Check Next Rule Check Next Rule Forward Not Matched Yes No Check Src IP Addr Apply SrcAddrMask to Src Addr Matched...

Страница 246: ...ask and Value fields are specified in hexadecimal numbers Note that it takes two hexadecimal digits to represent a byte so if the length is 4 the value in either field will take 8 digits for example F...

Страница 247: ...o the data portion before comparison Value Type the value in Hexadecimal to compare with the data portion More If Yes a matching packet is passed to the next filter rule before an action is taken or e...

Страница 248: ...e exact address and port on the wire Therefore the Prestige applies the protocol filters to the native IP address and port number before NAT for outgoing packets and after NAT for incoming packets On...

Страница 249: ...lnet Filter Step 1 Enter 21 in the main menu to display Menu 21 Filter Set Configuration Step 2 Enter the index number of the filter set you want to configure in this case 6 Step 3 Type a descriptive...

Страница 250: ...0 0 0 0 Port Port Comp Equal TCP Estab No More No Log None Action Matched Drop Action Not Matched Forward Press ENTER to Confirm or ESC to Cancel Press SPACE BAR to choose this filter rule type The fi...

Страница 251: ...n shows you where to apply the filter s after you design it them Sets of factory default filter rules have been configured in menu 21 but have not been applied to filter traffic Menu 21 6 Filter Rules...

Страница 252: ...want to apply as appropriate You can choose up to four filter sets from twelve by typing their numbers separated by commas for example 2 4 6 11 The factory default filter set NetBIOS_LAN is inserted...

Страница 253: ...ect PPPoA or PPPoE encapsulation Menu 11 5 Remote Node Filter Input Filter Sets protocol filters 3 device filters Output Filter Sets protocol filters 1 device filters Call Filter Sets Protocol filters...

Страница 254: ......

Страница 255: ...s SNMP is a member of the TCP IP protocol suite Your Prestige supports SNMP agent functionality which allows a manager station to manage and monitor the Prestige through the network The Prestige suppo...

Страница 256: ...ponse protocol based on the manager agent model The manager issues a request and the agent returns responses using the following protocol operations Get Allows the manager to retrieve an object variab...

Страница 257: ...Prestige will only respond to SNMP messages from this address A blank default field means your Prestige will respond to all SNMP messages it receives regardless of source 0 0 0 0 Trap Community Type t...

Страница 258: ...onFailure defined in RFC 1215 A trap is sent to the manager when receiving any SNMP get or set requirements with wrong community password 6 whyReboot defined in ZYXEL MIB A trap is sent with the reaso...

Страница 259: ...u should change the default password If you forget your password you have to restore the default configuration file Refer to the section on changing the system password in the Introducing the SMT chap...

Страница 260: ...istrator instructs you to do so with additional information 1812 Shared Secret Specify a password up to 31 alphanumeric characters as the key to be shared between the external authentication server an...

Страница 261: ...must be the same on the external accounting server and Prestige When you have completed this menu press ENTER at the prompt Press ENTER to confirm or ESC to cancel to save your configuration or press...

Страница 262: ...ow often a client has to re enter username and password to stay connected to the wired network This field is activated only when you select Authentication Required in the Wireless Port Control field E...

Страница 263: ...r a wireless station s user name and password If the user name is not found the Prestige checks the user database on the specified RADIUS server Select RADIUS first then Local to have the Prestige fir...

Страница 264: ...s long for this user profile When you have completed this menu press ENTER at the prompt Press ENTER to confirm or ESC to cancel to save your configuration or press ESC to cancel and go back to the pr...

Страница 265: ...s gives you information on the status and statistics of the ports as shown next System Status is a tool that can be used to monitor your Prestige Specifically it gives you information on your ADSL tel...

Страница 266: ...ote node Errors The number of error packets on this connection Tx B s This shows the transmission rate in bytes per second Rx B s This shows the receiving rate in bytes per second Up Time This is the...

Страница 267: ...Status This shows the current status of the xDSL line which can be Up or Down Upstream Speed This shows the upstream transfer rate in kbps Downstream Speed This shows the downstream transfer rate in...

Страница 268: ...ZyNOS is a registered trademark of ZyXEL Communications Corporation ADSL Chipset Vendor Displays the vendor of the ADSL chipset and DSL version Standard This refers to the operational protocol the Pre...

Страница 269: ...Speed Once you change the Prestige consol port speed you must also set the speed parameter for the communication software you are using to connect to the Prestige 26 4 Log and Trace There are two log...

Страница 270: ...yslog and accounting can be configured in Menu 24 3 2 System Maintenance UNIX Syslog as shown next Figure 26 8 Menu 24 3 2 System Maintenance Syslog and Accounting Menu 24 3 2 System Maintenance UNIX...

Страница 271: ...his field is set to Yes The following are examples of the four types of syslog messages sent by the Prestige 1 CDR SdcmdSyslogSend SYSLOG_CDR SYSLOG_INFO String String board xx line xx channel xx call...

Страница 272: ...P Src 202 132 154 123 Dst 255 255 255 255 UDP spo 0208 dpo 0208 S03 R01mF Jul 19 14 44 00 192 168 102 2 ZYXEL IP Src 192 168 102 20 Dst 202 132 154 1 UDP spo 05d4 dpo 0035 S03 R01mF Jul 19 14 44 04 19...

Страница 273: ...e the xDSL link to the telephone company Ping Host Ping the host to see if the links and TCP IP protocol on both systems are working Reboot System Reboot the Prestige Command Mode Type the mode to tes...

Страница 274: ......

Страница 275: ...er to the label on the bottom of your Prestige ftp put firmware bin ras This is a sample FTP session showing the transfer of the computer file firmware bin to the Prestige ftp get rom 0 config cfg Thi...

Страница 276: ...pload files in menus 24 5 24 6 24 7 1 and 24 7 2 depending on whether you use the console port or Telnet Option 5 from Menu 24 System Maintenance allows you to backup the current Prestige configuratio...

Страница 277: ...ers the configuration file on the Prestige to your computer and renames it config rom See earlier in this chapter for more information on filename conventions Step 7 Enter quit to exit the ftp prompt...

Страница 278: ...a unique User ID and Password to login Transfer Type You must use binary mode when uploading the configuration or firmware file Transfer files in either ASCII plain text format or in binary mode Init...

Страница 279: ...stdio 0 to disable the SMT timeout so the TFTP transfer will not be interrupted Enter command sys stdio 5 to restore the five minute SMT timeout default when the file transfer is complete Step 4 Launc...

Страница 280: ...e for the firmware is ras and for the configuration file is rom 0 Binary Transfer the file in binary mode Abort Stop transfer of the file Refer to section 27 2 5 to read about configurations that disa...

Страница 281: ...estore a previously saved configuration Note that this function erases the current configuration before restoring a previous back up configuration please do not attempt to restore unless you have a ba...

Страница 282: ...fers the configuration file config rom on your computer to the Prestige See earlier in this chapter for more information on filename conventions Step 8 Enter quit to exit the ftp prompt The Prestige w...

Страница 283: ...lar Step 1 Display menu 24 6 and enter y at the following screen Figure 27 9 System Maintenance Restore Configuration Step 2 The following screen indicates that the Xmodem download has started Figure...

Страница 284: ...e previous Restore Configuration section or by following the instructions in Menu 24 7 2 System Maintenance Upload System Configuration File for console port WARNING DO NOT INTERRUPT THE FILE TRANSFER...

Страница 285: ...lly after a successful firmware upload For details on FTP commands please consult the documentation of your FTP client program For details on uploading system firmware using TFTP note that you must re...

Страница 286: ...n on filename conventions Step 7 Enter quit to exit the ftp prompt The Prestige automatically restarts after a successful file upload 27 4 4 FTP Session Example of Firmware File Upload Figure 27 15 FT...

Страница 287: ...commands see following example please consult the documentation of your TFTP client program For UNIX use get to transfer from the Prestige to the computer put the other way around and binary to set b...

Страница 288: ...gram The procedure for other serial communications programs should be similar 27 4 9 Example Xmodem Firmware Upload Using HyperTerminal Click Transfer then Send File to display the following screen Fi...

Страница 289: ...ilar Step 3 Enter atgo to restart the Prestige 27 4 11 Example Xmodem Configuration Upload Using HyperTerminal Click Transfer then Send File to display the following screen Menu 24 7 2 System Maintena...

Страница 290: ...ion File Maintenance Figure 27 19 Example Xmodem Upload After the configuration upload process has completed restart the Prestige by entering atgo Type the configuration file s location or click Brows...

Страница 291: ...u 24 8 See the included disk or the zyxel com web site for more detailed information on CI commands Enter 8 from Menu 24 System Maintenance A list of valid commands can be found by typing help or at t...

Страница 292: ...tgoing calls will be blocked To access the call control menu select option 9 in menu 24 to go to Menu 24 9 System Maintenance Call Control as shown in the next table Figure 28 3 Menu 24 9 System Maint...

Страница 293: ...ulation is selected Table 28 1 Menu 24 9 1 Budget Management FIELD DESCRIPTION EXAMPLE Remote Node Enter the index number of the remote node you want to reset just one in this case 1 Connection Time T...

Страница 294: ...ance Time and Date Setting to update the time and date settings of your Prestige as shown in the following screen Figure 28 6 Menu 24 10 System Maintenance Time and Date Setting Menu 24 10 System Main...

Страница 295: ...nsure of this information Current Time This field displays an updated time only when you reenter this menu New Time Enter the new time in hour minute and second format Current Date This field displays...

Страница 296: ......

Страница 297: ...ote management of a service select Disable in the corresponding Server Access field Enter 11 from menu 24 to display Menu 24 11 Remote Management Control 29 2 1 Remote Management Setup You may manage...

Страница 298: ...cess Select the access interface if any by pressing the SPACE BAR Choices are LAN only WAN only All or Disable The default is LAN only LAN only Secured Client IP The default 0 0 0 0 allows any client...

Страница 299: ...ay only have one remote management session of the same type running at one time 5 There is a web remote management session running with a Telnet session A Telnet session will be disconnected if you be...

Страница 300: ......

Страница 301: ...y of the network to enable the backbone to prioritize traffic Cost Savings IPPR allows organizations to distribute interactive traffic on high bandwidth high cost paths while using low cost paths for...

Страница 302: ...he index of the policy set you want to configure to open Menu 25 1 IP Routing Policy Setup Menu 25 1 shows the summary of a policy set including the criteria and the action of a single policy and whet...

Страница 303: ...25 P 6 T NM PR 0 GW 192 168 1 1 T MT PR 0 2 N __________________________________________________________________________ __________________________________________________________________________ 3 N...

Страница 304: ...mple UDP TCP ICMP etc Type of Service Prioritize incoming network traffic by choosing from Don t Care Normal Min Delay Max Thruput Min Cost or Max Reliable Precedence Precedence value of the incoming...

Страница 305: ...teway must be the IP address of a remote node The default gateway is specified as 0 0 0 0 Type of Service Set the new TOS value of the outgoing packet Prioritize incoming network traffic by choosing N...

Страница 306: ...m IP Addr 0 0 0 0 Rem Subnet Mask 0 0 0 0 My WAN Addr 0 0 0 0 NAT Full Feature Address Mapping Set 2 Metric 2 Private No RIP Direction Both Version RIP 2B Multicast IGMP v2 IP Policies 2 4 7 9 Press E...

Страница 307: ...ute Web packets to the Internet using one policy and route FTP packets to a remote network using another policy See the next figure Figure 30 6 Example of IP Policy Routing To force Web packets coming...

Страница 308: ...s set to route packets from any host IP 0 0 0 0 means any host with protocol TCP and port FTP access through another gateway 192 168 1 100 Menu 25 1 1 IP Routing Policy Policy Set Name set1 Active Yes...

Страница 309: ...e DHCP Server N A TCP IP Setup IP Address 192 168 1 1 IP Subnet Mask 255 255 255 0 RIP Direction Both Version RIP 1 Multicast None IP Policies 1 2 Edit IP Alias No Press ENTER to Confirm or ESC to Can...

Страница 310: ......

Страница 311: ...as shown next Figure 31 1 Menu 26 Schedule Setup Lower numbered sets take precedence over higher numbered sets thereby avoiding scheduling conflicts For example if sets 1 2 3 and 4 in are applied in...

Страница 312: ...t be triggered up until the end of the Duration Table 31 1 Menu 26 1 Schedule Set Setup FIELD DESCRIPTION EXAMPLE Active Press SPACE BAR to select Yes or No Choose Yes and press ENTER to activate the...

Страница 313: ...ake effect in hour minute format 09 00 Duration Enter the maximum length of time this connection is allowed in hour minute format 08 00 Action Forced On means that the connection is maintained whether...

Страница 314: ...file Rem Node Name ChangeMe Route IP Active Yes Bridge No Encapsulation PPPoE Edit IP Bridge No Multiplexing VC based Edit ATM Options No Service Name Telco Option Incoming Allocated Budget min 0 Rem...

Страница 315: ...Appendices and Index IX Part IX Appendices and Index This part contains troubleshooting additional background information and an index of key terms...

Страница 316: ......

Страница 317: ...er source Use only the supplied power adaptor 2 Check that the Prestige and the power source are both turned on and the Prestige is receiving sufficient power 3 Turn the Prestige off and on 4 If the e...

Страница 318: ...assistance A 2 Console Port I cannot access the Prestige via the console port Chart A 4 Troubleshooting Console Port STEPS CORRECTIVE ACTION 1 Make sure the Prestige is connected to your computer s s...

Страница 319: ...problem contact the distributor A 4 Web Configurator I cannot access the web configurator Chart A 6 Troubleshooting Web Configurator STEPS CORRECTIVE ACTION 1 Make sure you are using the correct IP a...

Страница 320: ...ll custom configurations and restore all of the factory defaults including the password 2 Press the RESET button for five seconds and then release it When the SYS LED begins to blink the defaults have...

Страница 321: ...f you still have problems you may need to verify your VPI VCI type of encapsulation and type of multiplexing settings with the telephone company and ISP I cannot get a WAN IP address from the ISP Char...

Страница 322: ...e Call Scheduling chapter SMT 2 If you use PPPoA or PPPoE encapsulation check the idle time out setting Refer to the WAN chapter web configurator or the Remote Node Configuration chapter SMT 3 Contact...

Страница 323: ...t A 15 Troubleshooting Connecting to a Remote Node or ISP STEPS CORRECTIVE ACTION 1 Check menu 4 or WAN screen to verify that the username and password are entered properly 2 In menu 11 1 verify your...

Страница 324: ......

Страница 325: ...n the next left most bit In a class B address the first two octets make up the network number and the two remaining octets make up the host ID Class C addresses begin starting from the left with 1 1 0...

Страница 326: ...net mask is used to determine which bits are part of the network number and which bits are part of the host ID using a logical AND operation A subnet mask has 32 bits each bit of the mask corresponds...

Страница 327: ...ddress using both notations Chart B 4 Alternative Subnet Mask Notation SUBNET MASK IP ADDRESS SUBNET MASK 1 BITS LAST OCTET BIT VALUE 255 255 255 0 24 0000 0000 255 255 255 128 25 1000 0000 255 255 25...

Страница 328: ...sk Binary 11111111 11111111 11111111 10000000 Subnet Address 192 168 1 0 Lowest Host ID 192 168 1 1 Broadcast Address 192 168 1 127 Highest Host ID 192 168 1 126 Chart B 6 Subnet 2 NETWORK NUMBER LAST...

Страница 329: ...bnet Chart B 7 Subnet 1 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192 168 1 0 IP Address Binary 11000000 10101000 00000001 00000000 Subnet Mask Binary 11111111 11111111 11111111 11000000 Subnet A...

Страница 330: ...to create 8 subnets 001 010 011 100 101 110 The following table shows class C IP address last octet values for each subnet Chart B 11 Eight Subnets SUBNET SUBNET ADDRESS FIRST ADDRESS LAST ADDRESS BR...

Страница 331: ...A class B address has two host ID octets available for subnetting and a class A address has three host ID octets see Chart B 1 available for subnetting The following table is a summary for class B sub...

Страница 332: ...8 IP Subnetting Chart B 13 Class B Subnet Planning NO BORROWED HOST BITS SUBNET MASK NO SUBNETS NO HOSTS PER SUBNET 12 255 255 255 240 28 4096 14 13 255 255 255 248 29 8192 6 14 255 255 255 252 30 163...

Страница 333: ...hat facilitates the ability to communicate decisions on the fly 5 It provides campus wide networking coverage allowing enterprises the roaming capability to set up easy to use wireless networks that t...

Страница 334: ...Infrastructure Wireless LAN Configuration For Infrastructure WLANs multiple access points APs link the WLAN to the wired network and allow users to efficiently share network resources The Access Point...

Страница 335: ...Prestige 650 Series User s Guide Wireless LAN and IEEE 802 11 C 3 Diagram C 2 ESS Provides Campus Wide Coverage...

Страница 336: ......

Страница 337: ...s using PPP Benefits of PPPoE PPPoE offers the following benefits 1 It provides you with a familiar dial up networking DUN user interface 2 It lessens the burden on the carriers of provisioning virtua...

Страница 338: ...PPP frames to the ISP The L2TP tunnel is capable of carrying multiple PPP sessions With PPPoE the VC Virtual Circuit is equivalent to the dial up connection and is between the modem and the AC as oppo...

Страница 339: ...tween circuit end points Diagram E 1 Virtual Circuit Topology Think of a virtual path as a cable that contains a bundle of wires The cable connects two points and wires within the cable provide indivi...

Страница 340: ......

Страница 341: ...equires the purchase of a third party TCP IP application package TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems After the appropria...

Страница 342: ...ck OK If you need TCP IP a In the Network window click Add b Select Protocol and then click Add c Select Microsoft from the list of manufacturers d Select TCP IP from the list of network protocols and...

Страница 343: ...atically If you have a static IP address select Specify an IP address and type your information into the IP Address and Subnet Mask fields 3 Click the DNS Configuration tab If you do not know your DNS...

Страница 344: ...and click Add 5 Click OK to save and close the TCP IP Properties window 6 Click OK to close the Network window Insert the Windows CD if prompted 7 Turn on your Prestige and restart your computer when...

Страница 345: ...ndows 2000 NT XP 1 For Windows XP click start Control Panel In Windows 2000 NT click Start Settings Control Panel 2 For Windows XP click Network Connections For Windows 2000 NT click Network and Dial...

Страница 346: ...Win XP and click Properties 5 The Internet Protocol TCP IP Properties window opens the General tab in Windows XP If you have a dynamic IP address click Obtain an IP address automatically If you have a...

Страница 347: ...address in IP address and a subnet mask in Subnet mask and then click Add Repeat the above two steps for each IP address you want to add Configure additional default gateways in the IP Settings tab b...

Страница 348: ...d Alternate DNS server fields If you have previously configured DNS servers click Advanced and then the DNS tab to order them 8 Click OK to close the Internet Protocol TCP IP Properties window 9 Click...

Страница 349: ...User s Guide Setting up Your Computer s IP Address F 9 Macintosh OS 8 9 1 Click the Apple menu Control Panel and double click TCP IP to open the TCP IP Control Panel 2 Select Ethernet built in from t...

Страница 350: ...n the IP Address box Type your subnet mask in the Subnet mask box Type the IP address of your Prestige in the Router address box 5 Close the TCP IP Control Panel 6 Click Save if prompted to save chang...

Страница 351: ...ect Using DHCP from the Configure list 4 For statically assigned settings do the following From the Configure box select Manually Type your IP address in the IP Address box Type your subnet mask in th...

Страница 352: ......

Страница 353: ...oint where the telephone line enters your residence as shown in the following figure Diagram G 1 Connecting a POTS Splitter Step 1 Connect the side labeled Phone to your telephone Step 2 Connect the s...

Страница 354: ...ble jack end of the Y Connector to the Prestige Step 4 Connect the phone side of the microfilter to your telephone as shown in the following figure Diagram G 2 Connecting a Microfilter Prestige With I...

Страница 355: ...CUL UL 1310 CSA C22 2 No 223 NORTH AMERICA PLUG STANDARDS AC Power Adapter model AA 121A Input power AC120Volts 60Hz 18W max Output power AC12Volts 1 0A Power consumption 8 W Safety standards UL CUL U...

Страница 356: ...AA 121ABN Input power AC230Volts 50Hz 140mA Output power AC12Volts 1 0A Power consumption 8 W Safety standards ITS GS CE EN 60950 UNITED KINGDOM PLUG STANDARDS AC Power Adapter model AA 121AD Input po...

Страница 357: ...0A Power consumption 10W Safety standards TUV CE EN 61558 H 3 Prestige 650R 13 17 ADSL Ethernet Router NORTH AMERICA PLUG STANDARDS AC Power Adapter model DV 121AACS Input power AC120Volts 60Hz 23W m...

Страница 358: ...Prestige 650R 31 33 ADSL over ISDN Router NORTH AMERICA PLUG STANDARDS AC Power Adapter model DV 121AACS Input power AC120Volts 60Hz 23W max Output power AC12Volts 1 0A Power consumption 8 W Safety s...

Страница 359: ...model DV 121AACCP 5716 Input power AC230Volts 50Hz 100mA Output power AC12Volts 1 0A Power consumption 8 W Safety standards TUV GS CE EN 60950 UNITED KINGDOM PLUG STANDARDS AC Power Adapter model AA 1...

Страница 360: ...r AC230Volts 50Hz 140mA Output power AC12Volts 1 3A Power consumption 12 W Safety standards ITS GS CE EN 60950 H 6 Prestige 650HW 11 13 ADSL Router with 4 Port Ethernet Switch Wireless LAN NORTH AMERI...

Страница 361: ...wer Adapter model DV 1215A Input power AC120Volts 60Hz 30W Output power AC 12Volts 1 25A Power consumption 15 W Safety standards UL CUL CSA UL 1310 CSA C22 2 No 223 NORTH AMERICA PLUG STANDARDS AC Pow...

Страница 362: ...50 Series User s Guide H 8 Power Adaptor Specifications AC Power Adapter model AA 121A3D Input power AC230Volts 50Hz 140mA Output power AC12Volts 1 3A Power consumption 15 W Safety standards ITS GS CE...

Страница 363: ...Static Route Setup 21 3 BSS See Basic Service Set Budget Management 28 2 28 3 BW Budget 12 13 C Call Filtering 23 1 Call Filters Built In 23 1 User Defined 23 1 Call Scheduling 31 1 Maximum Number of...

Страница 364: ...m Filename Conventions 27 1 Filter 16 1 Applying Filters 23 19 Ethernet traffic 23 20 Ethernet Traffic 23 20 Filter Rules 23 8 Filter Structure 23 4 Generic Filter Rule 23 14 Remote Node 19 9 Remote N...

Страница 365: ...13 Logic Flow 23 12 IP mask 23 11 IP Packet 23 14 IP Policies 30 5 IP Policy Routing IPPR 1 4 18 1 Applying an IP Policy 30 5 Ethernet IP Policies 30 5 Gateway 30 5 IP Pool Setup 3 13 IP Protocol 30...

Страница 366: ...Port Numbers 7 6 PPP Encapsulation 19 13 PPP Log 26 7 26 8 PPPoA 19 2 PPTP 7 6 Precedence 30 1 30 4 Priority 12 14 Priority based Scheduler 12 4 Private 19 8 20 4 Proportional Bandwidth Allocation 12...

Страница 367: ...xxi Syntax Conventions xxi Syslog 26 6 Syslog IP Address 26 7 Syslog Server 26 6 System Console Port Speed 26 5 Diagnostic 26 8 Log and Trace 26 5 Syslog and Accounting 26 6 System Information 26 4 Sy...

Страница 368: ...log parameters 26 7 Upload Firmware 27 10 UPnP See Universal Plug and Play User Name 8 2 User Profiles 5 13 25 5 Using LEDs To Diagnose Problems A 1 V VC based Multiplexing 19 2 VPI VCI 3 2 VPN 6 1 W...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды