background image

Prestige 941 Cable Router 

Filter Configuration

 

 

6-11 

Table 6-5 Generic Filter Rule Menu Fields 

FIELD 

DESCRIPTION 

OPTION 

Filter # 

This is the filter set, filter rule coordinates, i.e., 2,3 refers to the second filter 
set and the third rule of that set. 

 

Filter Type 

Use [space bar] to toggle between both types of rules. Parameters 
displayed below each type will be different. 

Generic 

Filter Rule/

 

TCP/IP Filter 

Rule 

Active 

Select 

Yes

 to turn on the filter rule. 

Yes/No 

Offset 

Enter the starting byte of the data portion in the packet that you wish to 
compare. The range for this field is from 0 to 255. 

0 (default) 

Length 

Enter the byte count of the data portion in the packet that you wish to 
compare. The range for this field is 0 to 8. 

0 (default) 

Mask 

Enter the mask (in Hexadecimal) to apply to the data portion before 
comparison. 

 

Value 

Enter the value (in Hexadecimal) to compare with the data portion. 

 

More 

If 

Yes

, a matching packet is passed to the next filter rule before an action is 

taken; or else the packet is disposed of according to the action fields. 

If More is 

Yes

, then Action Matched and Action Not Matched will be 

N/A

Yes / N/A 

Log 

Select the logging option from the following: 

None

 – No packets will be logged. 

Action Matched

 – Only packets that match the rule parameters will be 

logged. 

Action Not Matched

 – Only packets that do not match the rule parameters 

will be logged. 

Both

 – All packets will be logged. 

None 

Action 

Matched 

Action Not 

Matched 

Both 

Action 
Matched 

Select the action for a matching packet. 

Check Next 

Rule / 

Forward / 

Drop 

Action Not 
Matched 

Select the action for a packet not matching the rule. 

Check Next 

Rule / 

Forward / 

Drop 

Once you have completed filling in 

Menu 21.4.1 

 Generic Filter Rule

, press [Enter] at the message 

[Press Enter to Confirm] to save your configuration, or press [Esc] to cancel. This data will now be 
displayed on 

Menu 21.1 

 Filter Rules Summary

Содержание Prestige 941

Страница 1: ...Prestige 941 DOSCIS Based Cable Router User s Guide Version 2 70 September 2001...

Страница 2: ...ssion of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved DISCLAIMER ZyXEL does not assume any liability arising out of the application or use of any...

Страница 3: ...ce with the instructions may cause harmful interference to radio communications If this equipment does cause harmful interference to radio television reception which can be determined by turning the e...

Страница 4: ...Prestige 941 Cable Router iv...

Страница 5: ...of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be held liable for indirect or conseque...

Страница 6: ...g Chin Road Lung Tan Taoyuan Taiwan support zyxel com 1 714 632 0882 800 255 4101 www zyxel com NORTH AMERICA sales zyxel com 1 714 632 0858 ftp zyxel com ZyXEL Communications Inc 1650 Miraloma Avenue...

Страница 7: ...lications for Prestige 941 1 3 1 5 Product Specifications 1 6 Hardware Installation and Initial Setup 2 1 2 1 Front Panel LEDs and Back Panel Ports 2 1 2 1 1 Front Panel LEDs 2 1 2 1 2 Prestige 941 Re...

Страница 8: ...L Cable Routers 2 17 Internet Access 3 1 3 1 TCP IP and DHCP for LAN 3 1 3 1 1 Factory LAN Defaults 3 1 3 1 2 IP Address and Subnet Mask 3 1 3 1 3 RIP Setup 3 2 3 1 4 DHCP Configuration 3 3 3 2 TCP IP...

Страница 9: ...Rule 6 6 6 3 2 Generic Filter Rule 6 10 6 4 Applying a Filter and Factory Defaults 6 12 6 4 1 Ethernet Traffic 6 12 6 4 2 Cable Port Filters 6 12 System Maintenance 7 1 7 1 System Status 7 1 7 2 Syst...

Страница 10: ...ies 8 1 8 1 About Telnet Configuration 8 1 8 2 Telnet Under SUA 8 2 8 3 Telnet Capabilities 8 2 8 3 1 Single Administrator 8 2 8 3 2 System Timeout 8 2 Troubleshooting 9 1 9 1 Problems Starting Up the...

Страница 11: ...Setup 2 12 Figure 2 9 Menu 3 1 LAN Port Filter Setup 2 12 Figure 3 1 Menu 3 LAN Setup 3 4 Figure 3 2 Menu 3 2 TCP IP and DHCP Ethernet Setup 3 4 Figure 3 3 Menu 4 Internet Access Setup 3 6 Figure 3 4...

Страница 12: ...Console Port Speed 7 4 Figure 7 4 Menu 24 2 1 System Maintenance Information Router Mode 7 4 Figure 7 5 Menu 24 2 2 System Maintenance Change Console Port Speed 7 5 Figure 7 6 Log and Trace 7 6 Figure...

Страница 13: ...Route Menu Fields 4 3 Table 5 1 Services vs Port Number 5 2 Table 6 1 Abbreviations Used in the Filter Rules Summary Menu 6 4 Table 6 2 Abbreviations Used if Filter Type is IP 6 5 Table 6 3 Abbreviati...

Страница 14: ...s Guide The nine chapters of this manual are designed to guide you through the configuration of your Prestige for its various applications Structure of This Manual This manual is divided into five par...

Страница 15: ...key Esc means the Escape Key For brevity s sake we will use e g as a shorthand for for instance and i e for that is or in other words throughout this manual Related Documentation Support Notes More de...

Страница 16: ......

Страница 17: ...routers are based on the Multimedia Cable Network System MCNS Data Over Cable Service Interface Specification DOCSIS standards specifications MCNS is a consortium of cable television companies whose g...

Страница 18: ...pstream signaling rates of 10 Mbps Access the Internet with high performance network capability IP routing TCP ICMP ARP TFTP RIP1 RIP2 using the ZyNOS software Improves network performance through con...

Страница 19: ...er s RoadRunner Service Logging and Tracing Built in message logging and packet tracing UNIX Syslog Support Software Remotely Upgradeable The software and configuration information is downloadable fro...

Страница 20: ...business environment are shown next Figure 1 1 Home Environment Figure 1 2 Business Environment For Internet access applications the highlights of the Prestige s distinguished features are described a...

Страница 21: ...er Data Privacy Upstream and downstream data is encrypted to provide data privacy protection 10 100 Mbps Ethernet Interface 10 100 Mbps Ethernet interface provides high speed and flexible LAN interfac...

Страница 22: ...20 kbps 5 12 Mbps QPSK 640 kbps 10 24 Mbps 16 QAM FEC Reed Solomon Decoder Reed Solomon Encoder Encryption 56 bit DES 56 bit DES Numbers of LAN Users with external hub Bridge Mode up to 15 Router Mode...

Страница 23: ...ont Panel LEDs and Back Panel Ports 2 1 1 Front Panel LEDs The LEDs on the front panel indicate the operational status of the Prestige 941 Figure 2 1 Front Panel The following table describes the LED...

Страница 24: ...wnstream Channel is transmitting data Off Connection is idle CABLE CABLE Green On The Prestige is registered successfully with Cable Modem Terminal System CMTS Slow Flash 2 seconds interval The Presti...

Страница 25: ...e router s MAC address and model number Please locate the MAC address at the bottom of your Prestige 941 NOTE HFC MAC address can be found on the bar code sticker Use the HFC MAC address when register...

Страница 26: ...t labeled POWER on the rear panel of your Prestige Step 6 Cable Router Initialization The Prestige cable router is powered on whenever you connect the power adapter to the power outlet It will initial...

Страница 27: ...g command to verify the TCP IP configuration Winipcfg For Windows NT you can use the following command Ipconfig 2 5 Router Configuration While your Prestige operates in Router mode you have to further...

Страница 28: ...e initialization the LEDs on the cable router turns on 1 The Power LED should be ON 2 The CABLE LED flashes on a 2 seconds on off cyclic duration while scanning downstream channel and then on a 1 seco...

Страница 29: ...sion 1 58 Bridge Mode with Temic Tuner ZyNOS Version V2 40 R25 b3 6 28 2000 21 59 44 Press any key to enter debug mode within 3 seconds Check flash primary RomFile OK backup RomFile OK copy primary to...

Страница 30: ...he next field You can also use the Up Down arrow keys to move to the previous and the next field respectively Enter information Fill in or Press space bar to toggle You need to fill in two types of fi...

Страница 31: ...static route for different protocols 15 SUA Server Setup Use this menu to specify inside servers when SUA is enabled 21 Filter Set Configuration Use this menu to setup filters to provide security 23...

Страница 32: ...system password and press Enter Step 4 Re type your new system password for confirmation and press Enter Note that as you type a password the screen displays an X for each character you typed 2 9 Gen...

Страница 33: ...nds are implemented Channel plan The channel plan can be EIA EIA 542 Cable Television Channel Identification Plan HRC Harmonic Related Carrier Frequency Plan B G CCIR Europe Standard B G Frequency Pla...

Страница 34: ...s may be useful to block certain packets reducing traffic and preventing security breaches Figure 2 9 Menu 3 1 LAN Port Filter Setup If you need to define filters please read Chapter 6 Filter Configur...

Страница 35: ...without touching the Prestige 941 built in DHCP server To verify the TCP IP configuration and the IP address that your computer got from the DHCP server you can use the winipcfg command for Windows 9...

Страница 36: ...only be used with Prestige 941 operating in Bridge mode When the Prestige 941 is configured as a router the web pages should be accessed by the IP address of the Prestige 941 LAN interface The IP add...

Страница 37: ...ckets transferred Cable Link Status DownStream Freq The downstream receiving frequency UpStream Freq The upstream transmission frequency D S S N Ratio The downstream SNR Signal to Noise Ratio D S Rx P...

Страница 38: ...restige 941 Cable Router 2 16 Hardware Installation and Initial Setup Figure 2 11 Configure the Cable Modem Web Page The following table describes the fields present in the Config Cable Modem web page...

Страница 39: ...lan can be EIA EIA 542 Cable Television Channel Identification Plan HRC Harmonic Related Carrier Frequency Plan B G CCIR Europe Standard B G Frequency Plan OIRT OIRT Standard D Frequency Plan EURO 250...

Страница 40: ......

Страница 41: ...resses starting from 192 168 1 33 These parameters should work for the majority of installations If the parameters are satisfactory you can skip to section 3 2 TCP IP and DHCP Ethernet Setup to enter...

Страница 42: ...based on the IP address that you entered You do not need to change the subnet mask computed by the Prestige unless you are instructed to do otherwise 3 1 3 RIP Setup RIP Routing Information Protocol...

Страница 43: ...ange for other server machines e g server for mail FTP telnet web etc that you may have DNS Server Address DNS Domain Name System is for mapping a domain name to its corresponding IP address and vice...

Страница 44: ...Setup as shown below Figure 3 2 Menu 3 2 TCP IP and DHCP Ethernet Setup Menu 3 2 TCP IP and DHCP Ethernet Setup DHCP Server Configuration Client IP Pool Starting Address Size of Client IP Pool 6 Prim...

Страница 45: ...mary DNS Server Secondary DNS Server Enter the IP addresses of the DNS servers The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask Follow the instructions in t...

Страница 46: ...Setup as displayed below Figure 3 3 Menu 4 Internet Access Setup Menu 4 Internet Access Setup ISP s Name ChangeMe Service Type RR Manager Authentication Service Server IP 0 0 0 0 My Login My Password...

Страница 47: ...My Login Name Enter the login name given to you by your ISP My Password Enter the password associated with the login name above IP Address Assignment If your ISP did not assign you an explicit IP addr...

Страница 48: ...able Port Filter 3 5 Single User Account Typically if there are multiple users on the LAN wanting to concurrently access the Internet you will have to lease a block of legal or globally unique IP addr...

Страница 49: ...t by your Prestige and thereby prevent intruders from probing your network Your Prestige accomplishes this address sharing by translating the internal LAN IP addresses to a single address that is glob...

Страница 50: ...To enable the SUA feature in Menu 4 move cursor to the Single User Account field and select Yes or No to disable SUA Then follow the instructions on how to configure the SUA fields Table 3 4 Single Us...

Страница 51: ...pecifies only the network to which the gateway is directly connected and the Prestige has no knowledge of the networks beyond For instance the Prestige knows about network N2 in the following diagram...

Страница 52: ...enu 12 IP Static Route Setup Figure 4 3 Menu 12 1 Edit IP Static Route Menu 12 IP Static Route Setup 1 ________ 2 ________ 3 ________ 4 ________ 5 ________ 6 ________ 7 ________ 8 ________ Enter selec...

Страница 53: ...neighbor of your Prestige that will forward the packet to the destination On the LAN the gateway must be a router on the same segment as your Prestige over the CABLE the gateway must be the IP addres...

Страница 54: ......

Страница 55: ...hat a server can support more than one service e g a server can provide both FTP and DNS service while another provides only web service Also since you need to specify the IP address of a server in th...

Страница 56: ...he most often used port numbers are Table 5 1 Services vs Port Number SERVICES PORT NUMBER FTP File Transfer Protocol 21 Telnet 23 POP3 Post Office Protocol version 3 110 SMTP Simple Mail Transfer Pro...

Страница 57: ...configure filter sets The Filter Structure of the Prestige A filter set consists of one or more filter rules Usually you would group related rules e g all the rules for NetBIOS into a single set and g...

Страница 58: ...h First Filter Rule Active Execute Filter Rule Fetch Next Filter Rule Next filter Rule Available Fetch Next Filter Set Next Filter Set Available Accept Packet Drop Packet Yes No Yes No Yes Packet into...

Страница 59: ...message Press ENTER to confirm to open Menu 21 1 Filter Rules Summary Figure 6 3 Menu 21 1 Filter Rules Summary Menu 21 Filter Set Configuration Filter Set 1 2 3 4 5 6 Comments ______________ _______...

Страница 60: ...nnot yet be taken as there are more rules to check which are concatenated with the present rule to form a rule chain When the rule chain is complete an action can be taken N means you can now specify...

Страница 61: ...er Type is GEN ABBREVIATION DESCRIPTION Off Offset Len Length Refer to the next section for information on configuring the filter rules 6 2 2 Configuring a Filter Rule To configure a filter rule type...

Страница 62: ...e protocol filters to the native IP address and port number before NAT SUA for outgoing packets and after NAT SUA for incoming packets On the other hand the generic or device filters are applied to th...

Страница 63: ...acket must not have source route option The majority of IP packets do not have source route Yes No Destination IP Address Enter the destination IP Address of the packet you wish to filter This field i...

Страница 64: ...stab This field is applicable only when IP Protocol field is 6 TCP If Yes the rule matches only established TCP connections or else the rule matches all TCP packets Yes No More If Yes a matching packe...

Страница 65: ...Not Matched More No Filter Active Check IP Protocol Drop Drop Packet Accept Packet Drop Forward Check Next Rule Check Next Rule Check Next Rule Forward Not Matched Yes No Check Src IP Addr Apply SrcAd...

Страница 66: ...st the Value to determine a match The Mask and Value are specified in hexadecimal numbers Note that it takes two hexadecimal digits to represent a byte so if the length is 4 the value in either field...

Страница 67: ...he value in Hexadecimal to compare with the data portion More If Yes a matching packet is passed to the next filter rule before an action is taken or else the packet is disposed of according to the ac...

Страница 68: ...e g 3 4 6 11 Input filter sets filter incoming traffic to the Prestige and Output filter sets filter outgoing traffic from the Prestige Figure 6 8 Filtering Ethernet Traffic 6 4 2 Cable Port Filters G...

Страница 69: ...1 Menu 24 System Maintenance 7 1 System Status The first selection System Status gives you information on the version of your system firmware and the status and statistics of the ports as shown next...

Страница 70: ...Status screen Figure 7 2 Menu 24 1 System Maintenance Status Router Mode The following table describes the fields present in Menu 24 1 System Maintenance Status Menu 24 1 System Maintenance Status SY...

Страница 71: ...rt TxBytes Sec Shows the transmitted bytes per second on this port RxBytes Sec Shows the received bytes per second on this port Up Time Time the line has been up DHCP The LAN CABLE port DHCP role IP A...

Страница 72: ...ed From this menu you can enter your selection as shown in the next figure Figure 7 3 Menu 24 2 System Information and Console Port Speed 7 2 1 System Information System Information gives you informat...

Страница 73: ...speed in Menu 24 2 2 as shown next Figure 7 5 Menu 24 2 2 System Maintenance Change Console Port Speed 7 3 Log and Trace There are two logging facilities in the Prestige The first is the error logs a...

Страница 74: ...Trace 7 4 Diagnostic The diagnostic facility allows you to test the different aspects of your Prestige to determine if it is working properly Menu 24 4 allows you to choose among various types of diag...

Страница 75: ...settings Cable Port DHCP Renewal This option enables you to renew DHCP settings Reboot System This option reboots the Prestige Host IP Address If you entered 1 above then enter the IP address of the m...

Страница 76: ...irmware allows you to upgrade the firmware and the configuration file via the console port Note that this function erases the old data before installing the new one please do not attempt to update unl...

Страница 77: ...loading the configuration file replaces everything contained within Menu 24 7 2 shows you the instructions for uploading the Router Configuration file Perform the following procedures to upload the co...

Страница 78: ...clients To transfer the firmware and the configuration file perform the following procedures Step 1 Use telnet from your workstation to connect to the Prestige and log in Because TFTP does not have a...

Страница 79: ...ry to set binary transfer mode The following is a sample tftp command TFTP i host put p941 bin ras where i specifies binary image transfer mode use this mode when transferring binary files host is the...

Страница 80: ...booting the system For ATBAx x denotes the number preceding the colon to give the speed following the colon in the list of numbers that follow e g ATBA3 will give a speed of 9 6 Kbps ATSE displays the...

Страница 81: ...xtension Debug Flag y password ATSE show the seed of password generator ATTI h m s change system time to hour min sec or show current time ATDA y m d change system date to year month day or show curre...

Страница 82: ......

Страница 83: ...es of the Prestige 8 1 About Telnet Configuration Before the Prestige is properly setup for TCP IP the only option for configuring it is through the console port Once your Prestige is configured you c...

Страница 84: ...ss connects to the Prestige directly 8 3 Telnet Capabilities 8 3 1 Single Administrator To prevent confusion and discrepancy on the configuration your Prestige only allows one administrator to log in...

Страница 85: ...his case you should contact technical support 1 Check to see if the Prestige is connected to your computer s serial port VT100 terminal emulation 9600 bps No parity 8 Data bits 1 Stop bit Cannot acces...

Страница 86: ...jack on the back of the modem Verify that the RJ 45 cable is securely plugged into both the modem and the computer If all connections are made properly all the LEDs should be functioning properly Che...

Страница 87: ...telephone modems and up to 128 Kbps of ISDN that is about the data rate available to subscribers of Digital Subscriber Line DSL telephone service A cable modem can be added to or integrated with a se...

Страница 88: ...mechanism for allocating IP addresses dynamically so that addresses can be reused Often used for managing the IP addresses of all the cable modems in a cable plant and the computers connected to the...

Страница 89: ...point for a CATV system Video signals are received here from satellites and maybe other sources frequency converted to the appropriate channels combined with locally originated signals and rebroadcas...

Страница 90: ...Exchange Like IP Internet Protocol IPX is an internetworking protocol that provides datagram services ISP Internet Service Providers provide connections into the Internet for home users and businesses...

Страница 91: ...other protocols such as IPX Internetwork Packet Exchange The protocol is defined in IETF Internet Engineering Task Force RFC 1661 through 1663 PPP provides router to router host to router and host to...

Страница 92: ...s and send it down feeder cables STP Twisted pair cable consists of copper core wires surrounded by an insulator Two wires are twisted together to form a pair and the pair form a balanced circuit The...

Страница 93: ...c Two way Cable Modem A two way Cable Modem uses the TV cable for both downstream and upstream traffic UDP UDP is a connectionless transport service that dispenses with the reliability services provid...

Страница 94: ...e Port RS 232C Pin 1 NON Pin 2 DTE RXD Pin 3 DTE TXD Pin 4 DTE DTR Pin 5 GND Pin 6 DTE DSR Pin 7 DTE RTS Pin 8 DTE CTS Pin 9 NON See the following figure LAN ETHERNET CABLE PIN LAYOUT STRAIGHT THROUGH...

Страница 95: ...Adaptor model Ahead JAD090 1200F Input power 230V AC 50Hz 130mA Output power 9V DC 1 2 Amps Safety standards TUV Certification No TA 2057471 EN 60950 North America AC Power Adaptor model Joden JOD 48...

Страница 96: ...nsole Port Speed 7 4 7 5 CORRECTIVE ACTION 9 1 cross over Ethernet cable 2 4 current status 2 15 D Data Over Cable Service Interface Specification 1 1 data privacy protection 1 5 Device Filter Generic...

Страница 97: ...rdware version 2 19 headend CMTS 2 14 High Speed Access 1 4 Home Environment 1 4 http daemon 2 15 hybrid fiber coaxial cable 1 1 I IANA 3 2 ICMP 1 2 Initial Screen 2 7 Initial Setup 2 1 Installation R...

Страница 98: ...col Dependent LAN Setup 2 14 Protocol Filter TCP IP rules 6 6 R Rear Panel Connections 2 2 Remote Diagnostic 1 3 Restore Configuration 7 8 RIP 3 2 3 5 RIP Direction 3 2 RIP1 1 2 RIP2 1 2 RoadRunner se...

Страница 99: ...Telnet Configuration TCP IP network 8 1 Telnet Configuration and Capabilities 8 1 Telnet under SUA 8 2 TFTP 1 2 TFTP Transfer 7 11 Third Party TFTP Clients General Fields 7 12 Toshiba Authentication S...

Отзывы: