Prestige 201 ISDN Access Router User's Guide Version 2.50 (Feb.
Prestige 201 ISDN Access Router Prestige 201 ISDN Access Router Copyright Copyright © 2000 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation.
Prestige 201 ISDN Access Router ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase.
Prestige 201 ISDN Access Router Customer Support If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation offices worldwide, in one of the ways listed. Our ftp sites are also available for software and ROM upgrades. Method E-MAIL – Support/ Sales Telephone/Fax Web Site/ FTP Site Regular Mail support@zyxel.com.tw +886-3-578-3942 www.zyxel.com ZyXEL Communications Corp., 6 Innovation Road II, ScienceBased Industrial Park, HsinChu, Taiwan 300, R.O.
Prestige 201 ISDN Access Router Table of Contents Table of Contents....................................................................................................................v List of Figures....................................................................................................................... ix List of Tables........................................................................................................................ xii Preface .........................................
Prestige 201 ISDN Access Router 2.11.1 General Ethernet Setup....................................................................................................................2-17 Chapter 3.............................................................................................................................. 3-1 Internet Access..................................................................................................................... 3-1 3.1 Factory Ethernet Defaults .......................
Prestige 201 ISDN Access Router 6.3.1 Filter Types and SUA ............................................................................................................................. 6-7 6.3.2 TCP/IP Filter Rule................................................................................................................................... 6-8 6.3.3 Generic Filter Rule ................................................................................................................................
Prestige 201 ISDN Access Router Schedule Setup .................................................................................................................... 9-1 Chapter 10 .......................................................................................................................... 10-1 Backup, Restore and Upload.............................................................................................. 10-1 10.1 Backup Configuration......................................................
Prestige 201 ISDN Access Router List of Figures Figure 1-1 Internet Access Application....................................................................................................................... 1-4 Figure 2-1 Front Panel of P201..................................................................................................................................... 2-1 Figure 2-2 Prestige 201 Rear Panel...................................................................................................
Prestige 201 ISDN Access Router Figure 6-5 Menu 21.2 - Filter Rules Summary ...........................................................................................................6-5 Figure 6-6 Protocol and Device Filter Sets..................................................................................................................6-8 Figure 6-7 Menu 21.1.1 - TCP/IP Filter Rule..............................................................................................................
Prestige 201 ISDN Access Router Figure 10-5 Menu 24.6 –Restore Configuration using the Console Port............................................................. 10-5 Figure 10-6 Send File .................................................................................................................................................... 10-5 Figure 10-7 Successful Restoration............................................................................................................................
Prestige 201 ISDN Access Router List of Tables Table 1-1 Prestige Scenarios ..........................................................................................................................................xvi Table 2-1 LED functions.................................................................................................................................................2-1 Table 2-2 Main Menu Commands.............................................................................................
Prestige 201 ISDN Access Router Table 11-4 Troubleshooting a Connection to a Remote Node or ISP...................................................................
Prestige 201 ISDN Access Router Preface About Your Prestige Congratulations on your purchase of the Prestige 201 ISDN Router. Don’t forget to register your Prestige (fast, easy online registration at www.zyxel.com) for free future product updates and information. The Prestige 201 is a high-performance router that offers a complete Internet Access solution and is extremely easy to configure.
Prestige 201 ISDN Access Router IP Subnet Mask - An IP address consists of two parts, the network ID and the host ID. The IP Subnet Mask is used to specify the network ID portion of the address, expressed in dotted decimal notation. The Prestige automatically calculates this mask based on the IP address that you assign. Unless you have a special need for subnetting, use the default mask as calculated by the Prestige.
Prestige 201 ISDN Access Router Prestige Scenarios For fast access to example SMT menus to show you how to configure the Prestige for various scenarios go to the following sections. SCENARIO GO TO SECTION To reset your Prestige 2.8 DHCP 3.3 Internet Access 3.4.1 To configure SUA 3.5.2 To apply filters 6.4 To setup NetCAPI 2.10.
Prestige 201 ISDN Access Router General Structure of this Manual Getting Started (Chapters 1-2) This helps you connect, install and setup your Prestige to operate on your network. The Internet (Chapter 3) This shows you how to configure your Prestige for Internet access. Advanced Applications (Chapters 4-5) This shows how to configure remote node and set up static routes. Management & Maintenance (Chapters 6-10) This shows you how to create/apply filters, use Telnet and manage/maintain your system.
Prestige 201 ISDN Access Router Chapter 1 Getting to Know Your ISDN Router This chapter covers the key features and main applications of your Prestige. The Prestige 201 ISDN router is a high quality and value-for-money product that is specially designed for home users to access Internet. The built-in 10BaseT four-port hub provides users easy and immediate LAN infrastructure solution without purchasing another hub. 1.
Prestige 201 ISDN Access Router Bandwidth-On-Demand The Prestige dynamically allocates bandwidth by dialing and dropping connections according to traffic demand. NetCAPI Support Your ZyXEL routers can now take full advantage of popular European ISDN services. NetCAPI is ZyXEL's implementation of CAPI (Common ISDN Application Program Interface) capabilities over a network. It runs over DCP (Device Control Protocol) developed by RVS-COM.
Prestige 201 ISDN Access Router Data Compression Your Prestige incorporates Stac data compression to speed up data transfer. Stac is the de facto standard of data compression over PPP links. Networking Compatibility Your Prestige is compatible with remote access products from other manufacturers such as Ascend, Cisco, and 3Com. Furthermore, it supports Microsoft Windows 95 and Windows NT remote access capability.
Prestige 201 ISDN Access Router 1.2 Internet Access with the Prestige 201 1.2.1 Internet Access The Prestige is the ideal high-speed Internet access solution. Your Prestige supports the TCP/IP protocol, which the Internet uses exclusively. It is also compatible with access servers manufactured by major vendors such as Cisco and Ascend. A typical Internet Access application is shown next.
Prestige 201 ISDN Access Router Chapter 2 Hardware Installation & Initial Setup This chapter shows you how to make the cable connections to your Prestige as well as set up your ISDN connection using the SMT. 2.1 Front Panel LEDS of P201 The LED indicators on the front panel indicate the operational status of the Prestige 201.
Prestige 201 ISDN Access Router 2.2 Prestige 201 Rear Panel and Connections The next figure shows the rear panel of your Prestige 201. Figure 2-2 Prestige 201 Rear Panel This section outlines how to connect your Prestige 201 to the LAN and to the ISDN network. Step 1. Connecting the ISDN Line Connect the Prestige to the ISDN network using the included ISDN cable. Plug one end of the cable into the port labeled ISDN and the other to the ISDN wall jack. Step 2.
Prestige 201 ISDN Access Router ♦ VT100 terminal emulation. ♦ 9600 Baud. ♦ No parity, 8 Data bits, 1 Stop bit. ♦ Flow Control set to None. After the Prestige is properly set up, you can make future changes to the configuration through telnet connections. 2.4 Housing Your Prestige's housing has ventilation slots for cooling and clip-out legs that fit snugly into grooves for sturdy stacking with better airflow.
Prestige 201 ISDN Access Router Please note that if there is no activity for longer than 5 minutes after you log in, your Prestige will automatically log you out and will display a blank screen. If you see a blank screen, press [ENTER] to bring up the login screen again.
Prestige 201 ISDN Access Router 2.6 Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your Prestige. Several operations that you should be familiar with before you attempt to modify the configuration are listed in the table below. Table 2-2 Main Menu Commands Operation Press/ Description Move forward to another menu [ENTER] To move forward to another menu, type in the number of the desired menu and press [ENTER].
Prestige 201 ISDN Access Router After you enter the password, the SMT displays the Main Menu, as shown. Copyright (c) 1994 - 2000 ZyXEL Communications Corp. Prestige 201 Main Menu Getting Started 1. General Setup 2. ISDN Setup 3. Ethernet Setup 4. Internet Access Setup Advanced Management 21. Filter Set Configuration Advanced Applications 11. Remote Node Setup 12. Static Routing Setup 26. Schedule Setup 23. System Security 24. System Maintenance 15. SUA Server Setup 99.
Prestige 201 ISDN Access Router 2.7 Changing the System Password The first thing your should do before anything else is to change the default system password by following the steps below. Step 1. Enter 23 in the Main Menu to open Menu 23 - System Password as shown below. When this menu appears, type in your existing system password, i.e., 1234, and press [ENTER].
Prestige 201 ISDN Access Router Bootbase Version: V1.03 | 3/18/1999 15:04:51 RAM: Size = 4096 Kbytes FLASH: intel 8M ZyNOS Version: V2.30a00 | 5/5/1999 9:37:32 Press any key to enter debug mode within 3 seconds. ........................................ Enter Debug Mode atlc Now erase flash ROM for upload …… Programming successful… OK Figure 2-7 Booting Up the Prestige Follow the procedure below to upload the configuration file: 1. Enter “atlc” after the “Enter Debug Mode” message. 2.
Prestige 201 ISDN Access Router 2.9 General Setup Menu 1 - General Setup contains administrative and system-related information. To enter Menu 1 and fill in the required information, follow these steps: Step 1. Enter 1 in the Main Menu to open Menu 1 – General Setup. Step 2. The Menu 1 - General Setup screen appears, as shown. Fill in the required fields marked [?] and turn on the individual protocols for your applications, as explained in the following table.
Prestige 201 ISDN Access Router 2.10 ISDN Setup Menus Menu 2 is for you to enter the information about your ISDN line. Different telephone companies deploy different types of switches for ISDN service. Depending on the switch for your particular installation, you will have a different number of telephone numbers. 2.10.1 ISDN Setup Menu The only switch type supported in Europe is DSS-1.
Prestige 201 ISDN Access Router Field Description ISDN Data Enter the telephone number assigned to ISDN data calls for the Prestige. The maximum number of digits is 25 for the telephone number. Edit Advanced Setup Advanced Setup features are configured when you select Yes to enter 2.1 Advanced Setup menu (see ahead). Edit NetCAPI Setup You can configure NetCAPI setup when you select Yes and enter Menu 2.2 NetCAPI Setup. 2.10.
Prestige 201 ISDN Access Router Field PABX Number (Include S/T Bus Number) Outgoing Calling Party Number ISDN Data Data Link Connection Description The PABX number is used for an outside loopback test when the ISDN PABX cannot support a local loopback test. If the Prestige is connected to an ISDN PABX enter this number. Note that this number is used exclusively for loopback testing; for regular outgoing calls, the Prestige dials the phone number in the remote node.
Prestige 201 ISDN Access Router When you are finished, press ENTER at the message: ‘Press ENTER to confirm’, the Prestige uses the information that you entered to initialize the ISDN line. It should be noted that whenever the switch type is changed, the ISDN initialization takes slightly longer. At this point, the Prestige asks if you wish to test your ISDN. If you select Yes, the Prestige will perform a loop-back test to check the ISDN line.
Prestige 201 ISDN Access Router series of standard commands to the terminal. The CAPI standard defines the commands and allows you to use a well-defined mechanism for communications using ISDN lines. CAPI also simplifies the development of ISDN applications through many default values that do not need to be programmed. It provides a unified interface for applications to access the different ISDN services such as data, voice, fax, telephony, etc.
Prestige 201 ISDN Access Router The following figure illustrates the configuration used in this example. 192.168.1.33 Prestige 192.168.1.1 ISDN RVS-COM lite RVS-CE NetCAPI Figure 2-13 Configuration Example Before entering any configurations, you must install the CAPI driver (RVS-CE) and communication program such as RVS-COM Lite on your workstation.
Prestige 201 ISDN Access Router Menu 2.2 - NetCAPI Setup Active= Yes Max Number of Registered Users= 1 Incoming Data Call Number Matching= NetCAPI Access List: Start IP 192.168.1.132 192.168.14.1 192.168.20.7 192.168.30.1 10.0.0.0 _______________ _______________ _______________ default End IP 192.168.1.145 192.168.14.32 192.168.20.12 192.168.30.3 10.255.255.
Prestige 201 ISDN Access Router Operation field. Start IP Refers to the first IP address of a group of NetCAPI clients. Each group contains contiguous IP addresses. End IP Refers to the last IP address in a NetCAPI client group. Operation Press the [Spacebar] to select Incoming if you wish to grant incoming calls permission. Select Outgoing if you wish to grant outgoing calls permission. Select Both if you wish to grant both incoming calls and outgoing calls permissions.
Prestige 201 ISDN Access Router Menu 3.1 - General Ethernet Setup Input Filter Sets: protocol filters= 2 device filters= Output Filter Sets: protocol filters= device filters= Press ENTER to Confirm or ESC to Cancel: Figure 2-16 Menu 3.1 - General Ethernet Setup If you need to define filters, please read the Filter Set Configuration chapter first, then return to this menu to define the filter sets.
Prestige 201 ISDN Access Router Chapter 3 Internet Access This chapter shows you how to configure the LAN as well as the WAN of your Prestige for Internet access. 3.1 Factory Ethernet Defaults The Ethernet parameters of the Prestige are preset in the factory with the following values: 1. IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits). 2. DHCP server enabled with 32 client IP addresses starting from 192.168.1.33. These parameters should work for the majority of installations.
Prestige 201 ISDN Access Router first 3 numbers specify the network number while the last number identifies an individual workstation on that network. Once you have decided on the network number, pick an IP address that is easy to remember, e.g., 192.168.1.1, for your Prestige. The subnet mask specifies the network number portion of an IP address. Your Prestige will compute the subnet mask automatically based on the IP address that you entered.
Prestige 201 ISDN Access Router DNS Server Address DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa, e.g., the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, a user must know the IP address of a machine before s/he can access it. The DNS server addresses that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and subnet mask.
Prestige 201 ISDN Access Router 3.3 TCP/IP Ethernet Setup and DHCP You will now use Menu 3.2 to configure your Prestige for TCP/IP. To edit Menu 3.2, select the menu option TCP/IP and DHCP Setup in the Main Menu and press [Enter]. The screen now displays Menu 3.2 - TCP/IP and DHCP Ethernet Setup, as shown . Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP Setup: DHCP= Server Client IP Pool Starting Address= 192.168.1.33 Size of Client IP Pool= 32 Primary DNS Server= 0.0.0.0 Secondary DNS Server= 0.0.0.
Prestige 201 ISDN Access Router Follow the instructions in the following table on how to configure the DHCP fields. Table 3-1 DHCP Ethernet Setup Menu Fields Field Description Example DHCP Setup DHCP= This field enables/disables the DHCP server. If it is set to Server, your Prestige will act as a DHCP server. If set to None, the DHCP server will be disabled. If set to Relay, the Prestige acts as a surrogate DHCP server and relays requests and responses between the remote server and the clients.
Prestige 201 ISDN Access Router Follow the instructions in the following table to configure TCP/IP parameters for the Ethernet port. Table 3-2 TCP/IP Ethernet Setup Menu Fields Field Description Example TCP/IP Setup IP Enter the IP address of your Prestige in dotted decimal notation Address IP Subnet Mask Your Prestige will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the Prestige 192.168.1.
Prestige 201 ISDN Access Router 3.4 Internet Access Configuration Menu 4 allows you to enter the Internet Access information in one screen. Menu 4 is actually a simplified setup for one of the remote nodes that you can access in Menu 11. Before you configure your Prestige for Internet access, you need to collect your Internet account information from your ISP. Use the table below to record your Internet Account Information.
Prestige 201 ISDN Access Router From the Main Menu, enter option Internet Access Setup to go to Menu 4 - Internet Access Setup, as displayed below. 3.4.1 Example Internet Access Configuration The table following this menu contains instructions on how to configure your Prestige for Internet access. Menu 4 - Internet Access Setup ISP's Name= myISP Pri Phone #= 1234 Sec Phone #= My Login= JohnDoe My Password= ******** Single User Account= Yes IP Addr= 0.0.0.
Prestige 201 ISDN Access Router Table 3-4 Internet Access Setup Menu Fields Field Description ISP’s Name Enter the name of your Internet Service Provider, e.g., myISP. This information is for identification purposes only. Pri Phone and Sec Phone Number Both the Primary and the Secondary Phone numbers refer to the number that the Prestige dials to connect to the ISP. My Login Name Enter the login name given to you by your ISP. My Password Enter the password associated with the login name above.
Prestige 201 ISDN Access Router 3.5 Single User Account Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, you will have to lease a block of legal, or globally unique, IP addresses from the ISP. The Single User Account (SUA) feature allows you to have the same benefits as having multiple legal addresses, but only pay for one IP address, thus saving significantly on the subscription fees. (Check with your ISP before you enable this feature).
Prestige 201 ISDN Access Router Your Prestige accomplishes this address sharing by translating the internal LAN IP addresses to a single address that is globally unique on the Internet. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). 3.5.1 Advantages of SUA In summary: l SUA is a cost-effective solution for small offices with less than 20 hosts to access the Internet or other remote TCP/IP networks.
Prestige 201 ISDN Access Router Table 3-5 Single User Account Menu Fields Field Description Single User Account Select Yes to enable SUA. IP Addr. If your ISP did not assign you a static IP address, enter [0.0.0.0] here; otherwise, enter that IP address here. Press [Enter] at the message [Press ENTER to Confirm ...] to save your configuration, or press [Esc] at any time to cancel. At this point, your Prestige will ask if you wish to test the Internet connection.
Prestige 201 ISDN Access Router 1. Enter 15 in the main menu to go to Menu 15 - SUA Server Setup. 2. Enter the service port number in the Port # field and the inside IP address of the server in the IP Address field. Menu 15 - SUA Server Setup Port # ---1. Default 2. 0 3. 0 4. 0 5. 0 6. 0 7. 0 8. 0 IP Address --------------0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 3-5 SUA Server Setup 3.
Prestige 201 ISDN Access Router Chapter 4 Remote Node Configuration This chapter helps you in configuring the remote node. A remote node is required for placing calls to a remote gateway. A remote node represents both the remote gateway and the network behind it across a WAN connection. Note that when you use Menu 4 to set up Internet access, you are actually configuring one of the remote nodes.
Prestige 201 ISDN Access Router When Menu 11 - Remote Node Profile appears fill in the fields as described in the table below to define this remote profile. The Remote Node Profile Menu Fields table shows how to configure the Remote Node Menu.
Prestige 201 ISDN Access Router Table 4-1 Remote Node Profile Menu Fields Field Description Outgoing: My Login Name This is a required field. Enter the login name for your Prestige when it calls this remote node. Outgoing: My Password This is a required field . Enter the password for your Prestige when it calls this remote node. Outgoing: Authen This field sets the authentication protocol used for outgoing calls.
Prestige 201 ISDN Access Router Field BACP Single User Account Description Options Your Prestige negotiates the Secondary Phone number for a dial-up line from the peer when BACP (Bandwidth Allocation Control Protocol) is enabled. Use the space bar to toggle this field to Yes or No to enable or disable the Single User Account feature for your Prestige. Enable (default)/ Disable Yes/No Telco Options: Transfer Type Allocated Budget (min.) Period (hr.
Prestige 201 ISDN Access Router successful authentication, please make sure that you specify the correct authentication protocol when connecting to such an implementation. 4.1.3 Remote Node Filter Use Menu 11.1 – Remote Node Filter to specify the filter set(s) to apply to the incoming and outgoing traffic between this remote node and the Prestige and to prevent certain packets from triggering calls. You can specify up to 4 filter sets separated by comma, e.g., 1, 5, 9, 12, in each filter field.
Prestige 201 ISDN Access Router Chapter 5 Static Route Setup This chapter shows you how to setup static routes. Static routes tell the Prestige routing information that it cannot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly connected to a remote node. Each remote node specifies only the network to which the gateway is directly connected, and the Prestige has no knowledge of the networks beyond.
Prestige 201 ISDN Access Router To configure an IP static route, use Menu 12 - IP Static Route Setup, as displayed below. Menu 12 - IP Static Route Setup 1. 2. 3. 4. 5. 6. 7. 8. ________ ________ ________ ________ ________ ________ ________ ________ Enter selection number: Figure 5-2 Menu 12 - IP Static Route Setup From Menu 12, select one of the available IP static routes to open Menu 12.1 - Edit IP Static Route, as shown next. Menu 12.
Prestige 201 ISDN Access Router Field Description Gateway IP Address Enter the IP address of the gateway. The gateway is an immediate neighbor of your Prestige that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your Prestige; over WAN, the gateway must be the IP address of one of the remote nodes. Metric The metric represents the “cost” of transmission for routing purposes.
Prestige 201 ISDN Access Router Chapter 6 Filter Configuration This chapter shows you how to create and apply filter(s). 6.1 About Filtering Your Prestige uses filters to decide whether or not to allow passage of a data packet and/or to make a call. There are two types of filter applications: data filtering and call filtering. Filters are subdivided into device and protocol filters, which are discussed later. Data filtering screens the data to determine if the packet should be allowed to pass.
Prestige 201 ISDN Access Router Call Filtering Active Data Outgoing Packet Data Filtering No match Match Drop packet No match Built-in default Call Filters User-defined Call Filters (if applicable) Match Drop packet if line not up No match Initiate call if line not up Send packet and reset Idle Timer Match Drop packet if line not up Or Or Send packet but do not reset Idle Timer Send packet but do not reset Idle Timer Figure 6-1 Outgoing Packet Filtering Process For incoming packets, your P
Prestige 201 ISDN Access Router Start Packet into Filter Fetch First Filter Set Filter Set Fetch Next Filter Set Fetch First Filter Rule Yes Fetch Next Filter Rule Yes Next Filter Set Available? No Next Filter Rule Available? Execute Filter Rule Check Next Rule No Drop Drop Packet Forward Accept Packet Figure 6-2 Filter Rule Process Filter Configuration 6-3
Prestige 201 ISDN Access Router 6.2 Configuring a Filter Set To configure a filter sets, follow the procedure below: Step 1. Select option 21. Filter Set Configuration from the Main Menu to open Menu 21.
Prestige 201 ISDN Access Router Menu 21.1 - Filter Rules Summary # A Type Filter Rules M m n - - ---- -------------------------------------------- --------- - - 1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=137 N D N 2 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=138 N D N 3 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=139 N D N 4 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=137 N D N 5 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=138 N D N 6 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.
Prestige 201 ISDN Access Router Table 6-1 Abbreviations Used in the Filter Rules Summary Menu Abbreviations Description # Refers to the filter rule number (1-6). A Refers to Active. Display [Y] means the filter rule is active. [N] means the filter rule is inactive. Type Refers to the type of filter rule. [GEN] for Generic This shows GEN for generic, IP for TCP/IP [IP] for TCP/IP Filter Rules The filter rule parameters will be displayed here (see below). M Refers to More.
Prestige 201 ISDN Access Router Table 6-2 Abbreviations Used If Filter Type Is IP l Abbreviation Description Pr Protocol SA Source Address SP Source Port number DA Destination Address DP Destination Port number If the filter type is GEN (generic), the following abbreviations listed in the following table will be used.
Prestige 201 ISDN Access Router There are two categories of filter rules, Device Filter (Generic) rules and Protocol Filter (TCP/IP) rules. Device Filter rules act on the raw data from/to LAN and WAN. Protocol Filter rules act on the IP and IPX packets. Generic and TCP/IP filter rules are discussed in more detail in the next section.
Prestige 201 ISDN Access Router Menu 21.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 6 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 137 Port # Comp= Equal Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 0 Port # Comp= None TCP Estab= No More= No Log= None Action Matched= Check Next Rule Action Not Matched= Check Next Rule Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle. Figure 6-7 Menu 21.1.
Prestige 201 ISDN Access Router Field Description Source: IP Addr Enter the source IP Address of the packet you wish to filter. This field is a don’t-care if it is 0.0.0.0. Option Source: IP Mask Enter the IP subnet mask to apply to the Source: IP Addr. IP Mask Source: Port # Enter the source port of the packets that you wish to filter. The range of this field is 0 to 65535. This field is a don’tcare if it is 0.
Prestige 201 ISDN Access Router Packet into IP Filter Filter Active? No Yes Apply SrcAddrMask to Src Addr Check Src IP Addr Not Matched Matched Apply DestAddrMask to Dest Addr Check Dest IP Addr Not Matched Matched Check IP Protocol Not Matched Matched Check Src & Dest Port Not Matched Matched More? Yes No Action Not Matched Action Matched Check Next Rule Check Next Rule Drop Drop Forward Forward Drop Packet Check Next Rule Accept Packet Figure 6-8 Executing an IP Filter Filter Confi
Prestige 201 ISDN Access Router 6.3.3 Generic Filter Rule This section shows you how to configure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP, it is generally easier to use the IP rules directly. For generic rules, the Prestige treats a packet as a byte stream as opposed to an IP or IPX packet. You specify the portion of the packet to check with the Offset (from 0) and the Length fields, both in bytes.
Prestige 201 ISDN Access Router Table 6-5 Generic Filter Rule Menu Fields Field Description Option Filter # This is the filter set, filter rule co-ordinates, i.e., 2,3 refers to the second filter set and the third rule of that set. Filter Type Use the space bar to toggle between both types of rules. Parameters displayed below each type will be different. Generic Filter Rule/ TCP/IP Filter Rule Active Select Yes to turn on the filter rule.
Prestige 201 ISDN Access Router 6.4 Applying Filters and Factory Defaults This section shows you where to apply the filter(s) after you design it (them). Two sets of factory default filter rules have been configured in Menu 21 to prevent NetBIOS traffic from triggering calls (see Figure 8-7 Menu 21 - Filter Set Configuration). 6.4.1 Ethernet Traffic You seldom need to filter Ethernet traffic; however, the filter sets may be useful to block certain packets, reduce traffic and prevent security breaches.
Prestige 201 ISDN Access Router Menu 11.
Prestige 201 ISDN Access Router Chapter 7 Telnet Configuration and Capabilities This chapter discusses using telnet to remotely configure your Prestige. 7.1 Telnet Configuration Before the Prestige is properly setup for TCP/IP, the only option for configuring it is through the console port. Once your Prestige is configured, you can use telnet to configure it remotely as shown below. Figure 7-1 Telnet Configuration on a TCP/IP Network 7.
Prestige 201 ISDN Access Router must first telnet to the inside server, and then telnet from the server to the Prestige using its inside LAN IP address. If no insider server is specified, telnet to the SUA ’s IP address will connect to the Prestige directly. 7.3 ♦ Telnet Capabilities Single Administrator To prevent confusion and discrepancy on the configuration, your Prestige only allows one administrator to log in at any time. Your Prestige also gives priority to the console port over telnet.
Prestige 201 ISDN Access Router Chapter 8 System Maintenance This chapter covers the diagnostic tools that help you to maintain your Prestige. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter describes how to use these tools in detail. Select menu 24 in the main menu to open Menu 24 - System Maintenance , as shown below. Menu 24 - System Maintenance 1. 2. 3. 4. 5. 6. 7. 8. 9. 10.
Prestige 201 ISDN Access Router 8.1 System Status The first selection, System Status gives you information on the status and statistics of the ports, as shown below. System Status is a tool that can be used to monitor your Prestige. Specifically, it gives you information on your ISDN telephone line status, number of packets sent and number of packets received. To get to the System Status, enter 24 to go to Menu 24 - System Maintenance. From this menu, enter 1, System Status.
Prestige 201 ISDN Access Router Table 8-1 System Maintenance - Status Menu Fields Field Description Chan Shows statistics for B1 and B2 channels respectively. This is the information displayed for each channel: Link Shows the name of the remote node or the user the channel is currently connected to or the status of the channel (Down, Idle, Calling or Answering). Type The current connecting speed. TXPkt The number of transmitted packets on this channel.
Prestige 201 ISDN Access Router LAN Packet Which Triggered Last Call: (Type IP) 45 00 00 3C 02 12 00 00 3B 01 36 49 00 00 00 00 C0 44 87 22 08 00 62 2B 20 04 00 00 00 08 A9 D0 C0 44 87 22 00 01 02 03 04 05 06 07 08 09 0A 0B Source IP Address Source MAC Address LAN Packet Which Triggered Last Call: (Type Raw) FF FF 00 22 00 11 00 00 00 00 FF FF FF FF FF FF 04 52 00 00 00 00 00 40 95 90 04 B9 40 08 00 03 02 78 01 A5 A5 A5 A5 A5 A5 A5 A5 Figure 8-3 LAN Packet That Triggered Last Call The figure above shows
Prestige 201 ISDN Access Router 8.1.1 System Information Menu 24.2.1 – System Maintenance - Information Name: Routing: IP ZyNOS S/W Version: V2.40(C.10) | 4/8/99 Country Code: 238 LAN Ethernet Address:00:a0:c5:02:34:56 IP Address: 192.168.1.1 IP Mask: 255.255.255.
Prestige 201 ISDN Access Router Table 8-2 Fields in System Maintenance 8.1.2 Field Description Name displays the system name of your Prestige. This information can be modified in Menu 1 - General Setup. Routing refers to the routing protocol used. ZyNOS S/W Version refers to the version of the ZyNOS Network Operating System software. ZyNOS is a registered trademark of ZyXEL Communications Inc.
Prestige 201 ISDN Access Router 8.2 Log and Trace There are three logging facilities in the Prestige. The first is the error logs and trace records that are stored locally. The second is the UNIX syslog facility for message logging. The third is Call-Triggering Packet. It displays the packet that triggered dial-out call in a human-readable format. Equivalent information is available in Menu 24.1, but in hex format. Menu 24.3 -- System Maintenance - Log and Trace 1. 2. 4.
Prestige 201 ISDN Access Router 8.2.2 Syslog And Accounting The Prestige uses the UNIX syslog facility to log the CDR (Call Detail Record) and system messages to a syslog server. Syslog and accounting can be configured in Menu 24.3.2 - System Maintenance - Syslog and Accounting, as shown next. Menu 24.3.2 -- System Maintenance - UNIX Syslog and Accounting UNIX Syslog: Active= No Syslog IP Address = ? Log Facility= Local 1 Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle.
Prestige 201 ISDN Access Router IP Frame: ENET0-RECV Size: Frame Type: IP Header: IP Version Header Length Type of Service Total Length Identification Flags Fragment Offset Time to Live Protocol Header Checksum Source IP Destination IP TCP Header: Source Port Destination Port Sequence Number Ack Number Header Length Flags Window Size Checksum Urgent Ptr Options 0000: 02 04 02 00 RAW DATA: 0000: 45 0010: 00 0020: 60 Press any key 00 00 02 to 44/ 44 Time: 17:02:44.
Prestige 201 ISDN Access Router 8.3 Diagnostic The diagnostic facility allows you to test the different aspects of your Prestige to determine if it is working properly. Menu 24.4 allows you to choose among various types of diagnostic tests to evaluate your system, as shown below. Menu 24.4 - System Maintenance - Diagnostic ISDN 1. 2. 3. 4. 5. Hang Up B1 Call Hang Up B2 Call Reset ISDN ISDN Connection Test Manual Call System 21. Reboot System 22. Command Mode TCP/IP 11. Internet Setup Test 12.
Prestige 201 ISDN Access Router Test This command triggers the Prestige to perform a loop-back test to check the functionality of the ISDN line. If the test is not successful, note the error message that you receive and consult your network administrator. Manual Call This provides a way for you to place a call to a remote node manually. This tests the connectivity to that remote node. When you use this command, the screen displays what is happening during the call setup and protocol negotiation.
Prestige 201 ISDN Access Router This figure shows an example where authentication failed. Strat dialing for node <1> ### Hit any key to continue. ### Dialing chan<2> phone:23456 Call CONNECT speed<64000> chan<2> prot<1> LCP up CHAP send response ***Login to remote failed. Check name/passwd.
Prestige 201 ISDN Access Router 8.4 Boot module commands Prestige boot module commands are shown below. For ATBAx, x denotes the number preceding the colon to give the console port speed following the colon in the list of numbers that follows; e.g. ATBA3 will give a console port speed of 9.6 Kbps. ATSE displays the seed that is used to generate a password to turn on the debug flag in the firmware.
Prestige 201 ISDN Access Router 8.6 Call Control The Prestige provides four call control functions: call control parameters, blacklist, budget management and call history. Call control parameters allows you to set a dial out time limit, the number of times a number should be called before it is added to the blacklist and the interim between calls. The budget management function allows you to set a limit on the total outgoing call time of the Prestige over a period of time.
Prestige 201 ISDN Access Router 8.6.1 Call Control Parameters Menu 24.9.1 - Call Control Parameters Dialer Timeout: Digital Call(sec)= 60 Retry Counter= 0 Retry Interval(sec)= N/A Press ENTER to confirm or ESC to Cancel: Figure 8-15 Call Control Parameters Table 8-5 Call Control Parameters Fields Field Description Dialer Timeout: Digital Call (sec) The Prestige will timeout if it can not set up an outgoing digital call within the timeout value. The default is 60.
Prestige 201 ISDN Access Router 8.6.2 Blacklist The phone numbers on the blacklist are numbers that the Prestige had problems connecting in the past. The only operation allowed is for you to take a number off the list by entering its index number. Menu 24.9.2 shows the list of telephone numbers that have been blacklisted. Menu 24.9.2 - Blacklist Phone Number 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. Remove Selection(1-14): Figure 8-16 Menu 24.9.
Prestige 201 ISDN Access Router 8.6.3 Budget Management Menu 24.9.3 shows the budget management statistics for outgoing calls. Menu 24.9.3 - Budget Management Remote Node Change Me Connection Time/Total Budget No Budget Elapsed Time/Total Period No Budget Reset Node (0 to update screen): Figure 8-17 Menu 24.9.3 - Budget Management The total budget is the time limit on the accumulated time for outgoing call to a remote node.
Prestige 201 ISDN Access Router Menu 24.9.4 - Call History Phone Number 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Dir Rate #call Max Min Total Enter Entry to Delete(0 to exit): Figure 8-18 Call History Table 8-6 Call History Fields 8.7 Field Description Phone Number This is the telephone number of past incoming and outgoing calls. Dir This shows whether the call was incoming or outgoing. Rate This is the transfer rate of the call.
Prestige 201 ISDN Access Router Menu 24.10 - System Maintenance - Time and Date Setting User Time Server when Bootup= NTP (RFC-1305) Time server IP Address= 192.168.1.
Prestige 201 ISDN Access Router Time Zone Enter the time zone of the place where the P201 is located. Be aware how daylight savings time affects the time difference for your time zone. Once you have filled in the new time and date, press [Enter] to save the setting and press [Esc] to return to Menu 24. Note: • If you select Daytime protocol, you need not configure the field Time Zone, as the Prestige will automatically update the date, time and time zone from the Daytime Server.
Prestige 201 ISDN Access Router Chapter 9 Schedule Setup The call scheduling feature allows the Prestige to manage a remote node automatically. This feature is just like the scheduler in a video recorder (record the program you want in a specified time). You can apply up to 4 schedule set in Menu 11 - Remote Node Setup, and configure each schedule in Menu 26 - Schedule Setup.
Prestige 201 ISDN Access Router To setup a schedule set select the schedule set you want to setup from Menu 26 (no. 1-12) and press [Enter]. You will enter Menu 26.1 - Schedule Set Setup as shown next. Menu 26.
Prestige 201 ISDN Access Router Forced On Forced Down Enable Dialingon-demand Disable Dial-ondemand Schedule Setup During this period, the P201 will dial the remote node and will maintain the connection for the time period specified in the field Duration. During this period, the P201 will close the connection to the remote node. If the remote node is already connected, then it will be dropped. During this period, the remote node will accept demand dial.
Prestige 201 ISDN Access Router Chapter 10 Backup, Restore and Upload You can perform the backup, restore and upload through the console port, TFTP or FTP. Any serial communications program should work fine; however, you must use XMODEM protocol to perform the download/upload. Please note that terms “download” and “upload” are relative to the workstation. Download means to transfer from another machine to the workstation, while upload means from your workstation to another machine. 10.
Prestige 201 ISDN Access Router Enter where you want to place the rom configuration file on your computer. Choose the X-Modem Protocol. Figure 10-2 Receive File Step 4. Step 5. Enter where you want to place the rom configuration file on your computer, give it a suitable name, e.g.p1600.rom, and make sure you choose the X-Modem Protocol. Then press “Receive”. After a successful backup you will see the following screen. Press any key to return to the SMT menu ** Backup Configuration completed. OK.
Prestige 201 ISDN Access Router Step 1. Use telnet from your workstation to connect to the Prestige and log in. Because TFTP does not have any security checks, the Prestige records the IP address of the telnet client and accepts TFTP requests only from this address. Step 2. Put the SMT in Command Interpreter (CI) mode by entering 8 in Menu 24 – System Maintenance. Step 3. Enter command “sys stdio 0” to disable the SMT timeout, so the TFTP transfer will not be interrupted.
Prestige 201 ISDN Access Router Example Using Walusoft TFTP Client Enter the IP address of the Prestige. Press “Send” to upload /restore the file to the Prestige and “Fetch” to back up the file on your computer. Transfer the file in binary mode. Enter the path and name of the firmware file (*.bin extension) or configuration file (*.rom extension) on your computer. Figure 10-4 TFTP Example This is the filename on the Prestige.
Prestige 201 ISDN Access Router Please note that the system reboots automatically after the file transfer process is complete. Menu 24.6 - Restore Configuration FTP or TFTP are the preferred methods for restoring your current workstation configuration to your Prestige since FTP or TFTP is faster. Please note that the system reboots automatically after the file transfer process is complete. Ready to Restore Configuration via Xmodem. Figure 10-5 Menu 24.
Prestige 201 ISDN Access Router 10.2.2 Restore using FTP Even though FTP should work over WAN as well, it is not recommended. To transfer your current workstation configuration to your Prestige, follow the procedure below: Step 1. Launch the FTP client on your workstation. Step 2. Type open and the IP address of your Prestige. Then type root and password as requested. Step 3.
Prestige 201 ISDN Access Router 10.3 Firmware Update Option 7 from Menu 24 – System Maintenance takes you to Menu 24.7 – System Maintenance – Upload Firmware which allows you to upgrade the firmware or default configuration. You can upgrade the firmware either through an FTP or TFTP client program (preferred method) or through the RS-232 console port (in the event of the network being down). Updating the firmware via the console port under normal conditions is not recommended since FTP or TFTP is faster.
Prestige 201 ISDN Access Router Enter the path and name of the firmware file (*.bin extension) on your computer. Choose the X-Modem Protocol. Step 4. After successful firmware upload, enter “atgo” to restart the Prestige. Menu 24.7.1 - System Maintenance - Upload Router Firmware To 1. 2. 3. upload router firmware: Enter "y" at the prompt below to go into debug mode. Enter "atur" after "Enter Debug Mode" message. Wait for "Starting XMODEM upload" message before activating Xmodem upload on your terminal.
Prestige 201 ISDN Access Router If you replace the current configuration file with the default configuration file, i.e., p480.rom, you will lose all configurations that you had before and the speed of the console port will be reset to the default of 9600 bps with 8 data bit, no parity and 1 stop bit (8n1) . You will need to change your serial communications software to the default before you can connect to the Prestige again. The password will be reset to the default of 1234, also. Menu 24.7.
Prestige 201 ISDN Access Router Step 5. Use the command “put” to transfer files between the Prestige and the workstation. The file name for the firmware is “ras” and for the configuration file “rom-0” (rom-zero, not capital o). Connected to 480.x.x.x 220 P201 FTP version 1.0 ready at Thu Jan 8 18:00:02 1970 User (201.x.x.x:(none)): 331 Enter PASS command Password: 230 Logged in ftp> bin ftp> ha 200 Type I OK ftp> put rasp201.
Prestige 201 ISDN Access Router Step 4. Press 'OK' to ignore the 'Username' prompt. Figure 10-13 Username Prompt Step 5. To upload the firmware file, transfer the local 'ras' file to overwrite the remote 'ras' file. To upload the configuration file, transfer the local 'rom-0' to overwrite the remote 'rom-0' file. Figure 10-14 Files Transfer The system reboots after a successful upload. 10.3.
Prestige 201 ISDN Access Router Step 1. Use telnet from your workstation to connect to the Prestige and log in. Because TFTP does not have any security check, the Prestige records the IP address of the telnet client and accepts TFTP requests only from this address. Step 2. Put the SMT in command interpreter (CI) mode by entering 8 in Menu 24 – System Maintenance. Step 3. Enter command “sys stdio 0” to disable SMT timeout, so the TFTP transfer will not be interrupted. Step 4.
Prestige 201 ISDN Access Router Chapter 11 Troubleshooting This chapter covers the potential problems you may run into and the possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. 11.1 Problems Starting Up the Prestige Table 11-1 Troubleshooting the Start-Up of your Prestige Problem Corrective Action None of the LEDs are on when you power on the Prestige Check the connection between the AC adapter and the Prestige.
Prestige 201 ISDN Access Router 11.2 Problems With the ISDN Line Table 11-2 Troubleshooting the ISDN Line Problem Corrective Action The ISDN initialization failed. This problem occurs when you attempt to save the parameters entered in menu 2, but receive the message, ‘Save successful, but Failed to initialize ISDN; Press ESC to exit’. Check the error log (in menu 24.3.1), you should see a log entry for the ISDN initialization failure in the format, ‘ISDN init failed. code...’.
Prestige 201 ISDN Access Router 11.3 Problems with the LAN Interface Table 11-3 Troubleshooting the LAN Interface Problem Corrective Action Can’t ping any station on the LAN Check the Ethernet LEDs on the front panel. The LED should be on for a port that has a station connected. If it is off, check the cables between your Prestige and the station. Verify that the IP address and the subnet mask are consistent between the Prestige and the workstations. 11.
Prestige 201 ISDN Access Router Acronyms and Abbreviations BAP/BACP Bandwidth Allocation Protocol/Bandwidth Allocation Control protocol BOD Bandwidth on Demand CDR Call Detail Record CHAP Challenge Handshake Authentication Protocol CLID Calling Line IDentification CSU/DSU Channel Service Unit/Data Service Unit DCE Data Communications Equipment DOVBS Data Over Voice Bearer Service DHCP Dynamic Host Configuration Protocol DNS Domain Name System DTE Data Terminal Equipment IANA Internet
Prestige 201 ISDN Access Router RFC Request For Comment RIP Routing Information Protocol SAP (IPX) Service Advertising Protocol SPID Service Profile IDentifier SNMP Simple Network Management Protocol SUA Single User Account TA TFTP (ISDN) Terminal Adapter Trivial File Transfer Protocol TCP Transmission Control Protocol UDP User Datagram Protocol UTP Unshielded Twisted Pair (cable) WAN Wide Area Network B Acronyms and Abbreviations
Prestige 201 ISDN Access Router Index A Remote Node Filter, 4-5 Remote Node Filters, 6-14 TCP/IP Filter Rule, 6-8 Authentication, 4-3, 4-4 G B backup configuration, 10-1 Blacklist, 8-14, 8-16 Budget Management, 8-14, 8-17 C Call History, 8-17 CHAP, 4-3 Connect your Prestige 202, 2-2 Console Port, 2-2 D DHCP, 1-2, 3-2 DHCP Setup, 3-5 DNS.
Prestige 201 ISDN Access Router P PABX, 2-12 PAP, 4-3 Password, 2-3, 2-7, 4-3 Ping, 8-11 Point-to-Multipoint, 2-13 Point-to-Point, 2-13 Power Adapter, 2-2 Prestige Network Commander, 1-3 Private, 5-3 R RAS code, 10-7 Relay, 3-5 Remote Node, 4-1, 8-3, 8-11 Remote Node Profile, 4-2 Remote Node Setup, 2-6, 4-1 Resetting the Prestige, 2-7 ROM File, 10-8 Routing Information Protocol, 3-2 S Service Profile Identifier.
