Prestige 791R G.SHDSL Router User's Guide Version 3.
Prestige 791R G.SHDSL Router Copyright Copyright © 2003 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation.
Prestige 791R G.SHDSL Router Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations. This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules.
Prestige 791R G.SHDSL Router Information for Canadian Users The Industry Canada label identifies certified equipment. This certification means that the equipment meets certain telecommunications network protective, operation, and safety requirements. The Industry Canada does not guarantee that the equipment will operate to a user's satisfaction. Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local telecommunications company.
Prestige 791R G.SHDSL Router ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase.
Prestige 791R G.SHDSL Router Customer Support Please have the following information ready when you contact customer support. • • • • • Product model and serial number. Information in Menu 24.2.1 – System Information. Warranty Information. Date that you received your device. Brief description of the problem and the steps you took to solve it. METHOD E-MAIL SUPPORT/SALES TELEPHONE/FAX WEB SITE/ FTP SITE REGULAR MAIL LOCATION WORLDWIDE support@zyxel.com.tw +886-3-578-3942 www.zyxel.com www.europe.
Prestige 791R G.SHDSL Router Table of Contents Copyright .........................................................................................................................................................ii Federal Communications Commission (FCC) Interference Statement .....................................................iii Information for Canadian Users...................................................................................................................iv ZyXEL Limited Warranty........
Prestige 791R G.SHDSL Router 3.5.2 Procedure To Configure Menu 1........................................................................................3-9 3.5.3 Procedure to Configure Dynamic DNS............................................................................3-10 Chapter 4 WAN............................................................................................................................................4-1 4.1 LAN and WAN Overview .....................................................
Prestige 791R G.SHDSL Router 7.2.2 PPP over Ethernet ..............................................................................................................7-1 7.2.3 PPPoA ................................................................................................................................7-2 7.2.4 RFC 1483 ...........................................................................................................................7-2 7.3 IP Address Assignment .................................
Prestige 791R G.SHDSL Router 11.1.5 NAT Mapping Types .......................................................................................................11-4 11.1.6 SUA (Single User Account) Versus NAT .......................................................................11-6 11.2 Applying NAT .........................................................................................................................11-6 11.3 NAT Setup .......................................................................
Prestige 791R G.SHDSL Router 15.1 Filename Conventions..............................................................................................................15-1 15.2 Backup Configuration ..............................................................................................................15-2 15.2.1 Backup Configuration ......................................................................................................15-3 15.2.2 Using the FTP Command from the Command Line.................
Prestige 791R G.SHDSL Router Chapter 18 Call Scheduling ......................................................................................................................18-1 18.1 Call Scheduling Overview .......................................................................................................18-1 18.2 Schedule Setup.........................................................................................................................18-1 Chapter 19 Remote Management......................
Prestige 791R G.SHDSL Router List of Figures Figure 1-1 Internet Access Application.......................................................................................................... 1-4 Figure 1-2 LAN-to-LAN Application ............................................................................................................ 1-4 Figure 2-1 Front Panel ...................................................................................................................................
Prestige 791R G.SHDSL Router Figure 8-10 Menu 21.12- WebSet 12............................................................................................................8-11 Figure 8-11 Menu 11.6 for VC-based Multiplexing (non-PPP Encapsulation).............................................8-12 Figure 8-12 Menu 11.6 for LLC-based Multiplexing or PPP Encapsulation ................................................8-13 Figure 9-1 Sample Static Routing Topology Configuration .....................................
Prestige 791R G.SHDSL Router Figure 12-8 FTP_WAN Filter Rules Summary............................................................................................ 12-7 Figure 12-9 Web Set1 Filter Rules Summary .............................................................................................. 12-7 Figure 12-10 Web Set2 Filter Rules Summary............................................................................................. 12-8 Figure 12-11 TCP/IP Filter Rule ..............................
Prestige 791R G.SHDSL Router Figure 15-18 Menu 24.7.2 as seen using the Console Port.........................................................................15-15 Figure 15-19 Example Xmodem Upload ....................................................................................................15-16 Figure 16-1 Command Mode in Menu 24 ....................................................................................................16-1 Figure 16-2 Valid Commands ........................................
Prestige 791R G.SHDSL Router List of Tables Table 2-1 Front Panel LED Description......................................................................................................... 2-2 Table 3-1 Main Menu Commands.................................................................................................................. 3-5 Table 3-2 Main Menu Summary .................................................................................................................... 3-6 Table 3-3 General Setup.
Prestige 791R G.SHDSL Router Table 15-1 Filename Conventions ................................................................................................................15-2 Table 15-2 General Commands for GUI-based FTP Clients ........................................................................15-4 Table 15-3 General Commands for GUI-based TFTP Clients ......................................................................15-6 Table 16-1 Budget Management.............................................
Prestige 791R G.SHDSL Router Preface Congratulations on your purchase of the Prestige 791R G.SHDSL Router. The Prestige is a high-performance router for Internet/LAN access via a telephone line. Your Prestige supports multi-protocol routing for TCP/IP, as well as transparent bridging for other protocols. The Prestige supports symmetrical multi-rate data transmission speeds 72 Kbps up to 2312 Kbps.
Prestige 791R G.SHDSL Router Syntax Conventions • “Type” means for you to type one or more characters and press the carriage return. “Select” or “Choose” means for you to use one predefined choices. • The SMT menu titles and labels are in Bold Times New Roman font. Predefined field choices are in Bold Arial font. Command and arrow keys are enclosed in square brackets. [ENTER] means the Enter, or carriage return key; [ESC] means the Escape key and [SPACE BAR] means the Space Bar.
Prestige 791R G.SHDSL Router What is DSL? DSL (Digital Subscriber Line) technology enhances the data capacity of the existing twisted-pair wire that runs between the local telephone company switching offices and most homes and offices.
Getting Started Part I: GETTING STARTED This part covers Getting to Know Your Prestige, Hardware Installation, Initial Setup, WAN, Dial Backup, LAN and Internet Access.
Prestige 791R G.SHDSL Router Chapter 1 Getting to Know Your G.SHDSL Router This chapter covers the key features and main applications of your Prestige. The Prestige 791R Router can be used for high-speed LAN-to-LAN connections or Internet access through a G.SHDSL connection over the telephone line. You can use your Prestige for either IP routing or bridging depending on your ISP (Internet Service Provider) configuration. 1.
Prestige 791R G.SHDSL Router IP Alias IP Alias allows you to partition a physical network into logical networks over the same Ethernet interface. The Prestige supports three logical LAN interfaces via its single physical Ethernet interface with the Prestige itself as the gateway for each LAN network. IP Policy Routing IP Policy Routing provides a mechanism to override the default routing behavior and alter packet forwarding based on the policies defined by the network administrator.
Prestige 791R G.SHDSL Router IRC, ICQ, RealAudio, VDOLive, Quake and PPTP. No extra configuration is needed to support these applications. SUA address mapping can also be used for other LAN-to-LAN connections. Universal Plug and Play (UPnP) Using the standard TCP/IP protocol, the Prestige and other UPnP enabled devices can dynamically join a network, obtain an IP address and convey its capabilities to other devices on the network.
Prestige 791R G.SHDSL Router Figure 1-1 Internet Access Application Your Prestige can act as either of the following: • A bridge for multi-computer/MAC bridging (RFC-1483, bridged Ethernet/802.3). 1.2.2 LAN-to-LAN Application You can use the Prestige to connect two geographically dispersed networks over the DSL line. A typical LAN-to-LAN application is shown next. Figure 1-2 LAN-to-LAN Application 1-4 Getting to Know Your G.
Prestige 791R G.SHDSL Router Chapter 2 Hardware Installation This chapter introduces the Prestige hardware and shows you how to make cable connections. 2.1 Installation Requirements In addition to your Prestige package, your computer should include the following hardware and software: • An Ethernet 10/100Base-T NIC (Network Interface Card). • Communications software configured as follows: VT100 terminal emulation; 9600 Baud; No parity, 8 Data bits, 1 Stop bit, no Flow Control. 2.
Prestige 791R G.SHDSL Router Table 2-1 Front Panel LED Description LED PWR SYS 10/100M LAN COLOR STATUS Green On The Prestige is receiving power. Off The Prestige is not receiving power. On The Prestige is functioning properly. Flashing The Prestige is rebooting. Off The system is not ready or has malfunctioned. Red On Power to the Prestige is too low. Green On The Prestige has a successful 10Mb Ethernet connection. Flashing The Prestige is sending/receiving data.
Prestige 791R G.SHDSL Router 2.3 Rear Panel Figure 2-2 Rear Panel 2.3.1 DSL Port Connect the Prestige directly to the wall jack using a telephone wire (RJ-11 connector). 2.3.2 LAN 10/100M Ethernet 10Base-T/100Base-T networks use Shielded Twisted Pair (STP) cable with RJ-11 (POTS) connectors or RJ-45 (ISDN) connectors that look like a bigger telephone plug with 8 pins.
Prestige 791R G.SHDSL Router 2.3.4 Reset Button The Prestige comes with a reset button built into the rear panel. Use this button to restore the factory default password to 1234, IP address to 192.168.1.1, subnet mask to 255.255.255.0 and DHCP server enabled with a pool of 32 IP addressed starting at 192.168.1.33. Hold this button in for between 1 and 3 seconds to restart the Prestige. Upload the default configuration file by holding this button in for more than 3 seconds. Refer to section 3.
Prestige 791R G.SHDSL Router Chapter 3 Initial Setup This chapter shows you how to set up your G.SHDSL connection using the SMT. 3.1 Configuring Your Prestige For Internet Access Configure your Prestige for Internet access using: SMT (System Management Terminal). Web configurator (refer to the Quick Start Guide). 3.1.1 Procedure For SMT Configuration via Console Port Follow the steps below to access your Prestige via the console port.
Prestige 791R G.SHDSL Router 3.1.3 Connect to your Prestige Using the Web Configurator Step 1. Launch your web browser. Step 2. Enter “192.168.1.1” as the URL. Step 3. In the User Name field, type "admin". In the Password field, type “1234”. Click OK. Click the Help button for online web configurator HTML help. The remainder of this user’s guide shows you how to configure the Prestige for Internet access using SMT screens.
Prestige 791R G.SHDSL Router 3.2.1 Methods of Restoring Factory-Defaults You can erase the current configuration and restore factory defaults in three ways: 1. Transfer the configuration file to your Prestige using: the SMT menus. See later in this User’s Guide for more information on this. the web configurator to restore defaults (see the web configurator HTML help) 2.
Prestige 791R G.SHDSL Router Prestige Main Menu Menu 1 General Setup Menu 2 WAN Setup Menu 1.1 Configure Dynamic DNS Menu 3.2.1 IP Alias Setup Menu 3 LAN Setup Menu 4 Internet Access Setup Menu 11 Remote Node Setup Menu 12 Static Routing Setup Menu 3.1 LAN Port Filter Setup Menu 11.6 Remote Node ATM Layer Options Menu 11.1 Remote Node Profile Menu 12.1 IP Static Route Setup Menu 11.5 Remote Node Filter Menu 11.3 Remote Node Network Layer Options Menu 12.3 Bridge Static Route Setup Menu 3.
Prestige 791R G.SHDSL Router Table 3-1 Main Menu Commands OPERATION KEYSTROKE DESCRIPTION Move down to another menu [ENTER] To move forward to a submenu, type in the number of the desired submenu and press [ENTER]. Move up to a previous menu [ESC] Press [ESC] to move back to the previous menu. Fields beginning with “Edit” lead to hidden menus and have a Move to a “hidden” Press [SPACE BAR] to change No default setting of No.
Prestige 791R G.SHDSL Router Copyright (c) 1994 - 2003 ZyXEL Communications Corp. Prestige 791R Main Menu Getting 1. 2. 3. 4. Started General Setup WAN Setup LAN Setup Internet Access Setup Advanced Applications 11. Remote Node Setup 12. Static Routing Setup 15. NAT Setup Advanced Management 21. Filter Set Configuration 22. SNMP Configuration 23. System Password 24. System Maintenance 25. IP Routing Policy Setup 26. Schedule Setup 99.
Prestige 791R G.SHDSL Router # MENU TITLE DESCRIPTION 24 System Maintenance 25 IP Routing Policy Setup Use this menu to configure your IP routing policy. 26 Schedule Setup Use this menu to schedule outgoing calls. 99 Exit Use this to exit from SMT and return to a blank screen. 3.4 This menu provides system status, diagnostics, software upload, etc. Changing the System Password Change the Prestige default password by following the steps shown next. Step 1.
Prestige 791R G.SHDSL Router If you forget your password, use the reset button to restore the default password of 1234. This will allow you to enter the SMT. Then use the above instructions to set a new password. 3.5 General Setup Menu 1 — General Setup contains administrative and system-related information (shown next). The System Name field is for identification purposes. However, because some ISPs check this name you should enter your computer's "Computer Name".
Prestige 791R G.SHDSL Router First of all, you need to have registered a dynamic DNS account with www.dyndns.org. This is for people with a dynamic IP from their ISP or DHCP server that would still like to have a DNS name. To use this service, you must register with the Dynamic DNS service provider. The Dynamic DNS service provider will give you a password or key. The Prestige supports www.dyndns.org. You can apply to this service provider for Dynamic DNS service.
Prestige 791R G.SHDSL Router FIELD Domain Name DESCRIPTION Enter the domain name (if you know it) here. If you leave this field blank, the ISP may assign a domain name via DHCP. You can go to menu 24.8 and type "sys domainname" to see the current domain name used by your gateway. EXAMPLE zyxel.com.tw If you want to clear this field just press the [SPACE BAR]. The domain name entered by you is given priority over the ISP assigned domain name.
Prestige 791R G.SHDSL Router Table 3-4 Configure Dynamic DNS FIELD DESCRIPTION Service Provider This is the name of your Dynamic DNS service provider. Active Press [SPACE BAR] to select Yes and then press [ENTER] to make dynamic DNS active. Host Enter the domain name assigned to your Prestige by your Dynamic DNS provider. EMAIL Enter your e-mail address. USER Enter your user name. Password Enter the password assigned to you. Enable Wildcard Your Prestige supports DYNDNS Wildcard.
Prestige 791R G.SHDSL Router Chapter 4 WAN This chapter shows you how to configure the WAN settings of your Prestige. 4.1 LAN and WAN Overview This section provides information on LANs, WANs, TCP/IP parameters and configuring your prestige for Internet access. 4.1.1 LANs and WANs A LAN (Local Area Network) is a computer network limited to the immediate area, usually the same building or floor of a building.
Prestige 791R G.SHDSL Router Figure 4-1 LAN & WAN IPs 4.2 WAN Setup Use Menu 2 – WAN Setup to configure G.SHDSL settings for your WAN line. Different telephone companies deploy different types of G.SHDSL service. If you are unsure of any of this information, please check with your telephone company. 4.2.1 Service Type Is your Prestige acting as a Server or Client? 1. The Prestige is a server if it is acting as a COE (Central Office Equipment). It will determine transfer rate and mode. 2.
Prestige 791R G.SHDSL Router 4.2.3 Transfer Rates The Prestige supports the following symmetrical multi-rate data transmission speeds: 72, 136, 200, 264, 392, 520, 776, 1032, 1160, 1544, 1736, 2056 and 2312Kbps. You can increase the capacity of the Internet connection (within certain limitations) without changing your ISP or buying new equipment. For back-to-back applications make sure that your Prestige and its peer have the same Transfer Max Rate and the same Transfer Min Rate.
Prestige 791R G.SHDSL Router Table 4-1 WAN Setup FIELD DESCRIPTION Service Type Press [SPACE BAR] to select Server (COE) or Client (CPE). Rate Adaption Press [SPACE BAR] to select Enable (activate) or Disable (deactivate). Transfer Max Rate (2312 Kbps) Press [SPACE BAR] to select a Transfer Max Rate greater than or equal to the Transfer Min Rate and press [ENTER] to continue.
Prestige 791R G.SHDSL Router Chapter 5 Dial Backup This chapter shows you how to configure Dial Backup for your Prestige. 5.1 Dial Backup Overview The Dial Backup port or CON/AUX port can be used in reserve, as a traditional dial-up connection, if the broadband connection to the WAN port fails.
Prestige 791R G.SHDSL Router Table 5-1 Menu 2: Dial Backup Setup FIELD DESCRIPTION EXAMPLE Dial-Backup: Active Port Speed Use this field to turn the dial-backup feature on (Yes) or off (No). Press [SPACE BAR] and then press [ENTER] to select the speed of the connection between the Dial Backup port and the external device. No 115200 Available speeds are: 9600, 19200, 38400, 57600, 115200 or 230400 bps.
Prestige 791R G.SHDSL Router Menu 2.
Prestige 791R G.SHDSL Router Table 5-2 Advanced WAN Port Setup: AT Commands Fields FIELD DESCRIPTION Speed Enter the keyword preceding the connection speed. DEFAULT CONNECT Table 5-3 Advanced WAN Port Setup: Call Control Parameters FIELD DESCRIPTION DEFAULT Call Control Dial Timeout (sec) Retry Count 5-4 60 seconds Enter a number of times for the Prestige to retry a busy or noanswer phone number before blacklisting the number.
Prestige 791R G.SHDSL Router Enter 12 in Menu 11 Remote Node Setup to open Menu 11.1 Remote Node Profile (Backup ISP) (shown below) and configure the setup for your Dial Backup port connection. Menu 11.1 - Remote Node Profile (Backup ISP) Rem Node Name= ? Active= Yes Outgoing: My Login= My Password= ******** Authen= CHAP/PAP Pri Phone #= ? Sec Phone #= Edit PPP Options= No Rem IP Addr= 0.0.0.
Prestige 791R G.SHDSL Router Table 5-4 Remote Node Profile (Backup ISP) FIELD Pri Phone # Sec Phone # DESCRIPTION EXAMPLE Enter the first (primary) phone number from the ISP for this remote node. If the Primary Phone number is busy or does not answer, your Prestige dials the Secondary Phone number if available. Some areas require dialing the pound sign # before the phone number for local calls. Include a # symbol at the beginning of the phone numbers as required.
Prestige 791R G.SHDSL Router Table 5-4 Remote Node Profile (Backup ISP) FIELD Idle Timeout DESCRIPTION EXAMPLE Enter the number of seconds of idle time (when there is no traffic from the Prestige to the remote node) that can elapse before the Prestige automatically disconnects the PPP connection. This option only applies when the Prestige initiates the call. 100 seconds (default) Once you have configured this menu, press [ENTER] at the message “Press ENTER to Confirm...
Prestige 791R G.SHDSL Router 5.2.2 Editing TCP/IP Options Move the cursor to the Edit IP field in menu 11.1, then press [SPACE BAR] to select Yes. Press [ENTER] to open Menu 11.3 - Network Layer Options. Menu 11.3 - Remote Node Network Layer Options Rem IP Addr= 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.
Prestige 791R G.SHDSL Router Table 5-5 Remote Node Network Layer Options FIELD DESCRIPTION EXAMPLE Private This parameter determines if the Prestige will include the route to this remote node in its RIP broadcasts. If set to Yes, this route is kept private and not included in RIP broadcasts. If No, the route to this remote node will be propagated to other hosts through RIP broadcasts.
Prestige 791R G.SHDSL Router upper or lower case. Similarly, you specify “word: ” as the ‘Expect’ string and your password as the ‘Send’ string for the second prompt in set 2. You can use two variables, $USERNAME and $PASSWORD (all UPPER case), to represent the actual user name and password in the script, so they will not show in the clear. They are replaced with the outgoing login name and password in the remote node when the Prestige sees them in a ‘Send’ string.
Prestige 791R G.SHDSL Router Menu 11.4 - Remote Node Script Active= No Set 1: Expect= Send= Set 2: Expect= Send= Set 3: Expect= Send= Set 4: Expect= Send= Set 5: Expect= Send= Set 6: Expect= Send= Enter here to CONFIRM or ESC to CANCEL: Press Space Bar to Toggle. Figure 5-7 Remote Node Script Table 5-6 Remote Node Script FIELD DESCRIPTION EXAMPLE Active Press [SPACE BAR] and then [ENTER] to select either Yes to enable the AT strings or No to disable them.
Prestige 791R G.SHDSL Router Menu 11.5 - Remote Node Filter Input Filter Sets: protocol filters= device filters= Output Filter Sets: protocol filters= device filters= Enter here to CONFIRM or ESC to CANCEL: Figure 5-8 Menu 11.
Prestige 791R G.SHDSL Router Chapter 6 LAN This chapter shows you how to configure the LAN settings for your Prestige. 6.1 LAN Overview This section describes how to configure the Prestige for LAN connections. 6.1.1 IP Address and Subnet Mask Similar to the way houses on a street share a common street name, the machines on a LAN also share one common network number. Where you obtain your network number depends on your particular situation.
Prestige 791R G.SHDSL Router 6.1.2 Private IP Addresses Every machine on the Internet must have a unique address. If your networks are isolated from the Internet, e.g., only between your two branch offices, you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks: 10.0.0.0 - 10.255.255.255 172.16.0.0 - 172.31.255.255 192.168.0.0 - 192.168.255.
Prestige 791R G.SHDSL Router 3. Out Only - the Prestige will send out RIP packets but will not accept any RIP packets received. 4. None - the Prestige will not send any RIP packets and will ignore any RIP packets received. The Version field controls the format and the broadcasting method of the RIP packets that the Prestige sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more information.
Prestige 791R G.SHDSL Router your ISP does give you the DNS server addresses, enter them in the DNS Server fields in DHCP Setup, otherwise, leave them blank. Some ISP’s choose to pass the DNS servers using the DNS server extensions of PPP IPCP (IP Control Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS servers are conveyed through IPCP negotiation. The Prestige supports the IPCP DNS server extensions through the DNS proxy feature.
Prestige 791R G.SHDSL Router The Prestige supports both IGMP version 1 (IGMP-v1) and version 2 (IGMP-v2). At start up, the Prestige queries all directly connected networks to gather group membership. After that, the Prestige periodically updates this information. IP Multicasting can be enabled/disabled on the Prestige LAN and/or WAN interfaces using menus 3.2 (LAN) and 11.3 (WAN). Select None to disable IP Multicasting on these interfaces. 6.1.
Prestige 791R G.SHDSL Router 6.2 Ethernet Setup This section describes how to configure the Ethernet using Menu 3 – Ethernet Setup. From the main menu, enter 3 to open the menu as follows. Menu 3 - Ethernet Setup 1. LAN Port Filter Setup 2. TCP/IP and DHCP Setup Enter Menu Selection Number: Figure 6-3 TCP/IP Ethernet Setup 6.2.1 LAN Port Filter Setup In this menu type 1 to open Menu 3.1- LAN Port Filter Setup. Use this menu to specify filter set(s) that you want to apply to Ethernet traffic.
Prestige 791R G.SHDSL Router TCP/IP and DHCP Ethernet Setup as shown next. Move the cursor to Edit IP Alias field and press [SPACE BAR] to choose Yes and press [ENTER] to configure the second and third network. Menu 3.2 - TCP/IP and DHCP Setup DHCP Setup: DHCP= Server Client IP Pool Starting Address= 192.168.1.33 Size of Client IP Pool= 32 Primary DNS Server= 0.0.0.0 Secondary DNS Server= 0.0.0.0 Remote DHCP Server= N/A TCP/IP Setup: IP Address= 192.168.1.1 IP Subnet Mask= 255.255.255.
Prestige 791R G.SHDSL Router Table 6-1 IP Alias Setup FIELD DESCRIPTION IP Alias Choose Yes to configure the LAN network for the Prestige. IP Address Enter the IP address of your Prestige in dotted decimal notation IP Subnet Mask Your Prestige will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the Prestige EXAMPLE Yes 192.168.2.1 255.255.255.
Prestige 791R G.SHDSL Router 6.2.4 TCP/IP Ethernet Setup and DHCP Use menu 3.2 to configure your Prestige for TCP/IP. To edit Menu 3.2, enter 3 from the main menu to display Menu 3 — Ethernet Setup. When menu 3 appears, press 2 and press [ENTER] to display Menu 3.2 — TCP/IP and DHCP Ethernet Setup as shown next: Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP Setup: DHCP= Server Client IP Pool Starting Address= 192.168.1.33 Size of Client IP Pool= 32 Primary DNS Server= 0.0.0.0 Secondary DNS Server= 0.0.0.
Prestige 791R G.SHDSL Router Table 6-2 TCP/IP and DHCP Ethernet Setup FIELD DESCRIPTION DHCP If set to Server, your Prestige can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that support the DHCP client. If set to None, the DHCP server will be disabled. If set to Relay, the Prestige acts as a surrogate DHCP server and relays DHCP requests and responses between the remote server and the clients.
Prestige 791R G.SHDSL Router Table 6-2 TCP/IP and DHCP Ethernet Setup FIELD LAN DESCRIPTION EXAMPLE IP Policies Create policies using SMT menu 25 (see the IP Policy Routing chapter) and apply them on the Prestige LAN interface here. You can apply up to four IP Policy sets (from twelve) by entering their numbers separated by commas.
Prestige 791R G.SHDSL Router Chapter 7 Internet Access This chapter shows you how to configure your Prestige for Internet Access. 7.1 Internet Access Overview This section provides information on configuring your Prestige for Internet access. It includes information on encapsulation types, IP address assignment and ATM networks. 7.2 Encapsulation Be sure to use the encapsulation method required by your ISP. The Prestige supports the following methods. 7.2.
Prestige 791R G.SHDSL Router 7.2.3 PPPoA Please refer to RFC 2364 for more information on PPP over ATM Adaptation Layer 5 (AAL5). Refer to RFC 1661 for more information on PPP. 7.2.4 RFC 1483 RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation Layer 5 (AAL5).
Prestige 791R G.SHDSL Router as a DHCP client on the WAN port and so the IP Address and ENET ENCAP Gateway fields are not applicable (N/A) as they are assigned to the Prestige by the DHCP server. 7.4 VPI and VCI Be sure to use the correct Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI) numbers supplied by your telephone company. The valid range for the VPI is 0 to 255 and for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic).
Prestige 791R G.SHDSL Router Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells. This parameter may be lower (but not higher) than the maximum line speed. 1 ATM cell is 53 bytes (424 bits), so a maximum speed of 832 Kbps gives a maximum PCR of 1962 cells/sec. This rate is not guaranteed because it is dependent on the line speed.
Prestige 791R G.SHDSL Router 7.7 Internet Access Configuration Menu 4 allows you to enter the Internet Access information in one screen. Menu 4 is actually a simplified setup for one of the remote nodes that you can access in Menu 11. Before you configure your Prestige for Internet access, you need to collect your Internet account information from your ISP and telephone company. Use the following table to record your Internet Account Information.
Prestige 791R G.SHDSL Router Table 7-1 Internet Account Information FIELD DESCRIPTION DNS Server Address Assignment Primary DNS server Secondary DNS server Enter when using RFC 1483 Encapsulation or a static IP address. ENET ENCAP Gateway IP Address Gateway IP Address Enter when using ENET ENCAP Encapsulation. 7.8 YOUR INFO Internet Access Setup From the main menu, type 4 to display Menu 4 - Internet Access Setup as shown next.
Prestige 791R G.SHDSL Router Table 7-2 Internet Access Setup FIELD DESCRIPTION EXAMPLE ENET ENCAP Encapsulation Press [SPACE BAR] to select the method of encapsulation used by your ISP. Choices are PPPoE, PPPoA, RFC 1483 or ENET ENCAP. Multiplexing Press [SPACE BAR] to select the method of multiplexing used by your ISP. Choices are VC-based or LLC-based. VPI # Enter the Virtual Path Identifier (VPI) that the telephone company gives you.
Prestige 791R G.SHDSL Router Table 7-2 Internet Access Setup FIELD IP Address Assignment IP Address DESCRIPTION Press [SPACE BAR] to select Static or Dynamic address assignment. Enter the IP address supplied by your ISP if applicable. Network Address Translation Press [SPACE BAR] to select None, SUA Only or Full Feature. Please see the NAT Chapter for more details on the SUA (Single User Account) feature. Address Mapping Set Type the numbers of mapping sets (1-8) to use with NAT.
Advanced Applications Part II: ADVANCED APPLICATIONS This part shows how to configure Remote Nodes, Static Routes, Bridging and NAT.
Prestige 791R G.SHDSL Router Chapter 8 Remote Node Configuration This chapter covers remote node configuration. 8.1 Remote Node Overview This section describes the protocol-independent parameters for a remote node. A remote node is required for placing calls to a remote gateway. A remote node represents both the remote gateway and the network behind it across a WAN connection. When you use Menu 4 to set up Internet access, you are configuring one of the remote nodes.
Prestige 791R G.SHDSL Router Menu 11 - Remote Node Setup 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. MyISP (ISP, SUA) ________ ________ ________ ________ ________ ________ ________ ________ ________ ________ ________ Enter Node # to Edit: Figure 8-1 Remote Node Setup 8.2.1 Encapsulation and Multiplexing Scenarios For Internet access you should use the encapsulation and multiplexing methods used by your ISP.
Prestige 791R G.SHDSL Router Menu 11.1 - Remote Node Profile Rem Node Name= myISP Active= Yes Route= IP Bridge= No Encapsulation= RFC-1483 Multiplexing= VC-based Incoming: Rem Login= N/A Rem Password= N/A Outgoing: My Login= N/A My Password= N/A Authen= N/A Edit IP/Bridge= No Edit ATM Options= No Press Space Bar to Toggle.
Prestige 791R G.SHDSL Router Table 8-1 Remote Node Profile FIELD DESCRIPTION Rem Password EXAMPLE Type the password used when this remote node calls your Prestige. Outgoing: My Login My Password Authen Type the login name assigned by your ISP when the Prestige calls this remote node. Type the password assigned by your ISP when the Prestige calls this remote node. This field sets the authentication protocol used for outgoing calls.
Prestige 791R G.SHDSL Router Table 8-1 Remote Node Profile FIELD Schedule Sets Nailed up Connection Session Options Edit Filter Sets Idle Timeout (sec) DESCRIPTION EXAMPLE This field is only applicable for PPPoE and PPPoA encapsulation. You can apply up to four schedule sets here. For more details please refer to the Call Schedule Setup chapter. This field is only applicable for PPPoE and PPPoA encapsulation.
Prestige 791R G.SHDSL Router Step 2. Move the cursor to the Edit IP/Bridge field, press [SPACE BAR] to select Yes, then press [ENTER] to display Menu 11.3 – Remote Node Network Layer Options. Menu 11.3 - Remote Node Network Layer Options IP Options: IP Address Assignment= Dynamic Rem IP Addr: 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.
Prestige 791R G.SHDSL Router Table 8-2 Remote Node Network Layer Options FIELD NAT DESCRIPTION EXAMPLE Press [SPACE BAR] and then [ENTER] to select Full Feature if you have multiple public WAN IP addresses for your Prestige. SUA Only Select SUA Only if you have just one public WAN IP address for your Prestige. The SMT uses Address Mapping Set 255 (menu 15.1 - see section 11.3.1). Select None to disable NAT.
Prestige 791R G.SHDSL Router 8.3.1 My WAN Addr Sample IP Addresses The following diagram explains the sample IP addresses to help you understand the field of My Wan Addr in Menu 11.3. My WAN Addr indicates the local Prestige WAN IP while Rem IP Addr indicates the peer WAN IP. Figure 8-4 Sample IP Addresses for a TCP/IP LAN-to-LAN Connection 8.4 Remote Node Filter Move the cursor to the Edit Filter Sets field in menu 11.1, then press [SPACE BAR] to select Yes. Press [ENTER] to display Menu 11.
Prestige 791R G.SHDSL Router Menu 11.5 - Remote Node Filter Input Filter Sets: protocol filters= 12, 11 device filters= Output Filter Sets: protocol filters= device filters= Call Filter Sets: protocol filters= device filters= Enter here to CONFIRM or ESC to CANCEL: Figure 8-5 Remote Node Filter (PPPoA or PPPoE Encapsulation) Menu 11.
Prestige 791R G.SHDSL Router Figure 8-7 Internet Security Once you apply the filter rules in the web configurator, filter sets 11 and 12 are automatically applied in the protocol filters field under Input Filter Sets in SMT menu 11.5. SMT input protocol filter set numbers that were previously applied are erased after you apply the Internet Security filter rules in the web configurator. To reapply them or apply new filter sets, you need to enter the filter set numbers again along with filter sets 11 and 12.
Prestige 791R G.
Prestige 791R G.SHDSL Router Do not edit filter sets 11 and 12. They are used exclusively by the web configurator. Any rules you configured in sets 11 and 12 will be erased and replaced when you apply the web configurator-generated filter rules. 8.5 Editing ATM Layer Options Follow these steps to edit Menu 11.6 – Remote Node ATM Layer Options. Step 1. In Menu 11.1, move the cursor to the Edit ATM Options then press [SPACE BAR] to toggle and set the value to Yes. Step 2. Press [ENTER] to open Menu 11.
Prestige 791R G.SHDSL Router 8.5.2 LLC-based Multiplexing or PPP Encapsulation For LLC-based multiplexing or PPP encapsulation, one VC carries multiple protocols with protocol identifying information being contained in each packet header. Menu 11.6 - Remote Node ATM Layer Options VPI/VCI (LLC-Multiplexing or PPP-Encapsulation) VPI #= 0 VCI #= 38 ATM QoS Type= UBR Peak Cell Rate (PCR)= 0 Sustain Cell Rate (SCR)= 0 Maximum Burst Size (MBS)= 0 . Only one set of VPI and VCI numbers needs to be specified.
Prestige 791R G.SHDSL Router Chapter 9 Static Route Setup This chapter shows how to setup IP static routes. 9.1 Static Route Overview Static routes tell the Prestige routing information that it cannot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly connected to a remote node.
Prestige 791R G.SHDSL Router Step 1. To configure an IP static route, use Menu 12 – Static Route Setup (shown next). See the bridging chapter for more information on Bridge Static Routes. Menu 12 - Static Route Setup 1. IP Static Route 3. Bridge Static Route Please enter selection: Figure 9-2 Static Route Setup Step 2. From Menu 12, select 1 to open Menu 12.1 – IP Static Route Setup, as shown next. Menu 12.1 - IP Static Route Setup 1. myIPStatic_Route 2. ________ 3. ________ 4. ________ 5. ________ 6.
Prestige 791R G.SHDSL Router Menu 12.1.1 - Edit IP Static Route Route #: 1 Route Name= myIPStatic_Route Active= No Destination IP Address= ? IP Subnet Mask= ? Gateway IP Address= ? Metric= 2 Private= No Press ENTER to Confirm or ESC to Cancel: Figure 9-4 Edit IP Static Route Table 9-1 Edit IP Static Route FIELD DESCRIPTION Route # This is the index number of the static route that you chose in menu 12.1. Route Name Type a descriptive name for this route. This is for identification purpose only.
Prestige 791R G.SHDSL Router Chapter 10 Bridging Setup This chapter shows you how to configure the bridging parameters of your Prestige. 10.1 Bridging Overview Bridging bases the forwarding decision on the MAC (Media Access Control), or hardware address, while routing does it on the network layer (IP) address. Bridging allows the Prestige to transport packets of network layer protocols that it does not route, for example, SNA, from one network to another.
Prestige 791R G.SHDSL Router Menu 11.3 - Remote Node Network Layer Options IP Options: IP Address Assignment= Static Rem IP Addr: 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.
Prestige 791R G.SHDSL Router Menu 12.3 - Bridge Static Route Setup 1. 2. 3. 4. ________ ________ ________ ________ Enter selection number: Figure 10-2 Bridge Static Route Setup Choose a static route to edit in menu 12.3. You configure bridge static routes in menu 12.3.1 as shown next. Menu 12.3.
Prestige 791R G.SHDSL Router FIELD DESCRIPTION When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel” to save your configuration or press [ESC] to cancel and go back to the previous screen.
Prestige 791R G.SHDSL Router Chapter 11 Network Address Translation (NAT) This chapter discusses how to configure NAT on the Prestige. 11.1 NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network. 11.1.
Prestige 791R G.SHDSL Router NAT never changes the IP address (either local or global) of an outside host. 11.1.2 What NAT Does In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side.
Prestige 791R G.SHDSL Router Figure 11-1 How NAT Works 11.1.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct WAN networks. More examples follow at the end of this chapter.
Prestige 791R G.SHDSL Router Figure 11-2 NAT Application With IP Alias 11.1.5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: 1. One to One: In One-to-One mode, the Prestige maps one local IP address to one global IP address. 2. Many to One: In Many-to-One mode, the Prestige maps multiple local IP addresses to one global IP address.
Prestige 791R G.SHDSL Router 4. Many-to-Many No Overload: In Many-to-Many No Overload mode, the Prestige maps each local IP address to a unique global IP address. 5. Server: This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world although, it is highly recommended that you use the DMZ port for these servers instead. Port numbers do not change for One-to-One and Many-to-Many No Overload NAT mapping types.
Prestige 791R G.SHDSL Router 11.1.6 SUA (Single User Account) Versus NAT SUA (Single User Account) is a ZyNOS implementation of a subset of NAT that supports two types of mapping, Many-to-One and Server. See section 11.3.1 for a detailed description of the NAT set for SUA. The Prestige also supports Full Feature NAT to map multiple global IP addresses to multiple private LAN IP addresses of clients or servers using mapping types as outlined in Table 11-2. 1.
Prestige 791R G.SHDSL Router Step 2. Move the cursor to the Edit IP/IPX/Bridge field, press [SPACE BAR] to select Yes and then press [ENTER] to bring up Menu 11.3 - Remote Node Network Layer Options. Use the space bar to toggle through the selections for NAT and choose the option you want. Menu 11.3 - Remote Node Network Layer Options IP Options: IP Address Assignment = Dynamic Rem IP Addr = 0.0.0.0 Rem Subnet Mask= 0.0.0.
Prestige 791R G.SHDSL Router SMT will use Set 1, which supports all mapping types as outlined in Table 11-2. When you select SUA Only, the SMT will use the pre-configured Set 255 (read only). The Server Set is a list of LAN side servers mapped to external ports. To use this set (one set for the Prestige 10), a server rule must be set up inside the NAT Address Mapping set. Please see section 11.4 for further information on these menus.
Prestige 791R G.SHDSL Router Menu 15.1 - Address Mapping Sets 1. 2. 3. 4. 5. 6. 7. 8. 255. SUA (read only) Enter Menu Selection Number: Enter Menu Selection Number: Figure 11-6 Address Mapping Sets Enter 255 to display the next screen (see also section 11.1.6). The fields in this menu cannot be changed. Menu 15.1.255 - Address Mapping Rules Set Name= Idx --1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Local Start IP --------------0.0.0.0 Local End IP --------------255.255.255.255 Global Start IP --------------0.0.0.
Prestige 791R G.SHDSL Router Table 11-4 Address Mapping Rules - SUA FIELD DESCRIPTION Idx This is the index or rule number. Local Start IP Local Start IP is the starting local IP address (ILA) (see Figure 11-1). Local End IP is the ending local IP address (ILA). If the rule is for all local IPs, then the Start IP is 0.0.0.0 and the End IP is 255.255.255.255. Local End IP Global Start IP This is the starting global IP address (IGA). If you have a dynamic IP, enter 0.0.0.0 as the Global Start IP.
Prestige 791R G.SHDSL Router Menu 15.1.1 - Address Mapping Rules Set Name= ? Idx --1. 2 3. 4. 5. 6. 7. 8. 9. 10. Local Start IP --------------- Local End IP --------------- Action= Edit Global Start IP --------------- Global End IP --------------- Type ------ Select Rule= Press ENTER to Confirm or ESC to Cancel: Figure 11-8 Address Mapping Rules If the Set Name field is left blank, the entire set will be deleted. The Type, Local and Global Start/End IPs are configured in menu 15.1.1.
Prestige 791R G.SHDSL Router FIELD DESRIPTION EXAMPLE Set Name Enter a name for this set of rules. This is a required field. If this field is left blank, the entire set will be deleted. NAT_SET Action The default is Edit. Edit means you want to edit a selected rule (see following field). Insert Before means to insert a rule before the rule selected. The rules after the selected rule will then be moved down by one rule.
Prestige 791R G.SHDSL Router Menu 15.1.1.1 Address Mapping Rule Type= One-to-One Local IP: Start= End = N/A Global IP: Start= End = N/A Server Mapping Set= N/A Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle. Figure 11-9 Editing/Configuring an Individual Rule in a Set Table 11-6 Editing/Configuring an Individual Rule in a Set FIELD DESCRIPTION Type Press [SPACE BAR] and then [ENTER] to select from a total of five types. These are the mapping types discussed in Table 11-2.
Prestige 791R G.SHDSL Router 11.4 NAT Server Sets – Port Forwarding A NAT server set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single machine to the outside world. Use Menu 15 - NAT Setup to forward incoming service requests to the server(s) on your local network.
Prestige 791R G.SHDSL Router SERVICES PORT NUMBER HTTP (Hyper Text Transfer protocol or WWW, Web) 80 POP3 (Post Office Protocol) 110 NNTP (Network News Transport Protocol) 119 SNMP (Simple Network Management Protocol) 161 SNMP trap 162 PPTP (Point-to-Point Tunneling Protocol) 1723 11.4.1 Configuring a Server behind NAT Follow these steps to configure a server behind NAT: Step 3. Enter 15 in the main menu to go to Menu 15 - NAT Setup. Step 4. Enter 2 to display Menu 15.
Prestige 791R G.SHDSL Router Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address --------------------------------------------------1. Default Default 0.0.0.0 2. 21 25 192.168.1.33 3. 0 0 0.0.0.0 4. 0 0 0.0.0.0 5. 0 0 0.0.0.0 6. 0 0 0.0.0.0 7. 0 0 0.0.0.0 8. 0 0 0.0.0.0 9. 0 0 0.0.0.0 10. 0 0 0.0.0.0 11. 0 0 0.0.0.0 12. 0 0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 11-11 NAT Server Setup Step 6. Enter a port number in an unused Start Port No field.
Prestige 791R G.SHDSL Router Figure 11-12 Multiple Servers Behind NAT Example 11.5 General NAT Examples This section provides some examples with Network Address Translation. 11.5.1 Example 1: Internet Access Only In the following Internet access example, you only need one rule where your ILAs (Inside Local addresses) all map to one dynamic IGA (Inside Global Address) assigned by your ISP.
Prestige 791R G.SHDSL Router Figure 11-13 NAT Example 1 Menu 4 - Internet Access Setup ISP's Name= ChangeMe Encapsulation= RFC-1483 Multiplexing= LLC-based VPI #= 1 VCI #= 1 ATM QoS Type= UBR Peak Cell Rate (PCR)= 5500 Sustained Cell Rate (SCR)= 0 Maximum Burst Size (MBS)= 0 My Login= N/A My Password= N/A ENET ENCAP Gateway= N/A IP Address Assignment= Static IP Address= 0.0.0.
Prestige 791R G.SHDSL Router From menu 4, choose the SUA Only option from the Network Address Translation field. This is the Many-to-One mapping discussed in section 11.5. The SUA Only read-only option from the Network Address Translation field in menus 4 and 11.3 is specifically pre-configured to handle this case. 11.5.2 Example 2: Internet Access with an Inside Server Figure 11-15 NAT Example 2 In this case, you do exactly as above (use the convenient pre-configured SUA Only set) and also go to menu 15.
Prestige 791R G.SHDSL Router Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address --------------------------------------------------1. Default Default 192.168.1.10 2. 0 0 0.0.0.0 3. 0 0 0.0.0.0 4. 0 0 0.0.0.0 5. 0 0 0.0.0.0 6. 0 0 0.0.0.0 7. 0 0 0.0.0.0 8. 0 0 0.0.0.0 9. 0 0 0.0.0.0 10. 0 0 0.0.0.0 11. 0 0 0.0.0.0 12. 0 0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 11-16 NAT Example 2 - Menu 15.2.1 11.5.
Prestige 791R G.SHDSL Router Figure 11-17 NAT Example 3 Step 1. In this case you need to configure Address Mapping Set 1 from Menu 15.1 - Address Mapping Sets. Therefore you must choose the Full Feature option from the Network Address Translation field (in menu 4 or menu 11.3). See the figure below. Menu 11.3 - Remote Node Network Layer Options IP Options: IP Address Assignment= Static Rem IP Addr: 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.
Prestige 791R G.SHDSL Router Step 2. Then enter 15 from the main menu. Step 3. Enter 1 to configure the Address Mapping Sets. Step 4. Enter 1 to begin configuring this new set. Enter a Set Name, choose the Edit Action and then enter 1 for the Select Rule field. Press [ENTER] to confirm. Step 5. In menu 15.1.1.1, select Type as One-to-One (direct mapping for packets going both ways), and set the local Start IP as 192.168.1.10 (the IP address of FTP Server 1) and the global Start IP as 10.132.50.
Prestige 791R G.SHDSL Router Menu 15.1.1 - Address Mapping Rules Set Name= Example3 Idx Local Start IP --- --------------1. 192.168.1.10 2 192.168.1.11 3. 0.0.0.0 4. 5. 6. 7. 8. 9. 10. Local End IP --------------255.255.255.255 Action= Edit Global Start IP --------------10.132.50.1 10.132.50.2 10.132.50.3 10.132.50.3 Global End IP --------------- Type -----1-1 1-1 M-1 Server Select Rule= Press ENTER to Confirm or ESC to Cancel: Figure 11-20 Example 3 - Final Menu 15.1.
Prestige 791R G.SHDSL Router Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address --------------------------------------------------1. Default Default 0.0.0.0 2. 80 80 192.168.1.21 3. 25 25 192.168.1.20 4. 0 0 0.0.0.0 5. 0 0 0.0.0.0 6. 0 0 0.0.0.0 7. 0 0 0.0.0.0 8. 0 0 0.0.0.0 9. 0 0 0.0.0.0 10. 0 0 0.0.0.0 11. 0 0 0.0.0.0 12. 0 0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 11-21 Example 3- Menu 15.2 11.5.
Prestige 791R G.SHDSL Router Other applications such as some gaming programs are NAT unfriendly because they embed addressing information in the data stream. These applications won’t work through NAT even when using One-to-One and Many-to-Many No Overload mapping types. Follow the steps outlined in example 3 to configure these two menus as follows. Menu 15.1.1.1 Address Mapping Rule Type= Many-to-Many No Overload Local IP: Start= 192.168.1.10 End = 192.168.1.12 Global IP: Start= 10.132.50.1 End = 10.132.
Prestige 791R G.SHDSL Router Menu 15.1.1 - Address Mapping Rules Set Name= Example4 Idx --1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Local Start IP --------------192.168.1.10 Local End IP --------------192.168.1.12 Action= Edit Global Start IP --------------10.132.50.1 Global End IP --------------10.132.50.3 Type -----M:M NO OV Select Rule= Press ENTER to Confirm or ESC to Cancel: Figure 11-24 Example 4 - Menu 15.1.
Advanced Management Part III: ADVANCED MANAGEMENT This part discusses Filter Configuration, SNMP, System Maintenance and IP Policy Routing, Call Scheduling and Remote Management.
Prestige 791R G.SHDSL Router Chapter 12 Filter Configuration This chapter shows you how to create and apply filters. 12.1 Filtering Overview Your Prestige uses filters to decide whether or not to allow passage of a data packet and/or to make a call. There are two types of filter applications: data filtering and call filtering. Filters are subdivided into device and protocol filters, which are discussed later. Data filtering screens the data to determine if the packet should be allowed to pass.
Prestige 791R G.
Prestige 791R G.SHDSL Router Start Packet intoFilter Fetch First Filter Set Filter Set Fetch Next Filter Set Fetch First Filter Rule Fetch Next Filter Rule Yes Yes Yes Next Filter Set Available? No Next filter Rule Available? No Active? Yes No Check Next Rule Execute Filter Rule Forward Drop Drop Packet Accept Packet Figure 12-2 Filter Rule Process You can apply up to four filter sets to a particular port to block various types of packets.
Prestige 791R G.SHDSL Router For incoming packets, your Prestige applies data filters only. Packets are processed depending on whether a match is found. The following sections describe how to configure filter sets. The Filter Structure of the Prestige A filter set consists of one or more filter rules. Usually, you would group related rules, e.g., all the rules for NetBIOS, into a single set and give it a descriptive name.
Prestige 791R G.SHDSL Router Filter rule set 11 and 12 are used by the web configurator. Your custom configurator may be lost if you use rule 11 or 12. Step 3. Type a descriptive name or comment in the Edit Comments field and press [ENTER]. Step 4. Press [ENTER] at the message “Press ENTER to confirm…” to display Menu 21.1 – Filter Rules Summary (that is, if you selected filter set 1 in menu 21). Menu 21.
Prestige 791R G.SHDSL Router Menu 21.3 - Filter Rules Summary # 1 2 3 4 5 6 A Type Filter Rules M m n - ---- --------------------------------------------------------------- - - Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F N N N N N Enter Filter Rule Number (1-6) to Configure: Figure 12-6 Telnet_WAN Filter Rules Summary Menu 21.
Prestige 791R G.SHDSL Router Menu 21.5 - Filter Rules Summary # 1 2 3 4 5 6 A Type - ---Y IP N N N N N Filter Rules M m n -------------------------------------------------------------- - - PR=6, SA=0.0.0.0, DA=0.0.0.0, DP=21 N D F Enter Filter Rule Number (1-6) to Configure: Figure 12-8 FTP_WAN Filter Rules Summary Menu 21.11 - Filter Rules Summary # 1 2 3 4 5 6 A Y Y N N N N Type Filter Rules M m ---- --------------------------------------------------------------- - IP Pr=17, SA=0.0.0.0, DA=0.0.0.
Prestige 791R G.SHDSL Router Menu 21.11 - Filter Rules Summary # 1 2 3 4 5 6 A Y Y Y Y N N Type ---IP IP IP IP Filter Rules --------------------------------------------------------------Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=21 Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=69 Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=80 M N N N N m D D D D n N N N N Enter Filter Rule Number (1-6) to Configure: 1 Figure 12-10 Web Set2 Filter Rules Summary 12.2.
Prestige 791R G.SHDSL Router FIELD n DESCRIPTION Action Not Matched. “F” means to forward the packet immediately and skip checking the remaining rules. “D” means to drop the packet. “N” means to check the next rule. The protocol dependent filter rules abbreviation are listed as follows: Table 12-2 Rule Abbreviations Used FILTER TYPE DESCRIPTION IP Pr Protocol SA Source Address SP Source Port Number DA Destination Address DP Destination Port Number Off Offset Len Length GEN 12.
Prestige 791R G.SHDSL Router 12.3.1 TCP/IP Filter Rule This section shows you how to configure a TCP/IP filter rule. TCP/IP rules allow you to base the rule on the fields in the IP and the upper layer protocol, for example, UDP and TCP headers. To configure TCP/IP rules, select TCP/IP Filter Rule from the Filter Type field and press [ENTER] to open Menu 21.1.1 – TCP/IP Filter Rule, as shown next. Menu 21.1.
Prestige 791R G.SHDSL Router Table 12-3 TCP/IP Filter Rule FIELD DESCRIPTION EXAMPLE IP Protocol This is the upper layer protocol, for example, TCP is 6, UDP is 17 and ICMP is 1. The value must be between 0 and 255. A value of O matches ANY protocol. 0 to 255 IP Source Route IP Source Route is an optional header that dictates the route an IP packet takes from its source to its destination. If Yes, the rule applies to any packet with an IP source route.
Prestige 791R G.SHDSL Router Table 12-3 TCP/IP Filter Rule FIELD DESCRIPTION Log EXAMPLE Select the logging option from the following: None – No packets will be logged. None Action Matched – Only packets that match the rule parameters will be logged. Action Not Matched – Only packets that do not match the rule parameters will be logged. Both – All packets will be logged. Action Matched Select the action for a matching packet. Choices are Check Next Rule, Forward or Drop.
Prestige 791R G.
Prestige 791R G.SHDSL Router 12.3.2 Generic Filter Rule This section shows you how to configure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP, it is generally easier to use the IP rules directly. For generic rules, the Prestige treats a packet as a byte stream as opposed to an IP packet. You specify the portion of the packet to check with the Offset (from 0) and the Length fields, both in bytes.
Prestige 791R G.SHDSL Router Table 12-4 Generic Filter Rule Menu Fields FIELD DESCRIPTION EXAMPLE Filter # This is the filter set, filter rule coordinates, for instance, 2, 3 refers to the second filter set and the third rule of that set. 5,1 Filter Type Press [SPACE BAR] and then [ENTER] to select a type of rule. Parameters displayed below each type will be different. Choices are Generic Filter Rule or TCP/IP Filter Rule. Active Select Yes to turn on or No to turn off the filter rule.
Prestige 791R G.SHDSL Router 12.4 Filter Types and NAT There are two classes of filter rules, Generic Filter Device rules and Protocol Filter (TCP/IP) rules. Generic Filter rules act on the raw data from/to LAN and WAN. Protocol Filter rules act on IP packets. When NAT (Network Address Translation) is enabled, the inside IP address and port number are replaced on a connection-by-connection basis, which makes it impossible to know the exact address and port on the wire.
Prestige 791R G.SHDSL Router Figure 12-15 Sample Telnet Filter Step 1. Enter 21 from the main menu to open Menu 21 — Filter Set Configuration. Step 2. Enter the index number of the filter set you want to configure (in this case 3). Step 3. Type a descriptive name or comment in the Edit Comments field (for example, TELNET_WAN) and press [ENTER]. Step 4. Press [ENTER] at the message “Press [ENTER] to confirm or [ESC] to cancel” to open Menu 21.3 — Filter Rules Summary.
Prestige 791R G.SHDSL Router Menu 21.1 - Filter Rules Summary # 1 2 3 4 5 6 A Type Filter Rules M m n - ---- --------------------------------------------------------------- - - Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F N N N N N Enter Filter Rule Number (1-6) to Configure: 1 This shows you that you have M = N means an action can be taken immediately.
Prestige 791R G.SHDSL Router Menu 21.3.1 - TCP/IP Filter Rule Filter #: 3,1 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 6 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 23 Port # Comp= Equal Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= Port # Comp= None TCP Estab= No More= No Log= None Action Matched= Drop Action Not Matched= Forward Press [SPACE BAR] to choose this filter rule type.
Prestige 791R G.SHDSL Router Step 3. This brings you to menu 11.5. Enter the example filter set number in this menu as shown in the following figure. Menu 11.5 – Remote Node Filter Input Filter Sets: protocol filters= 3 device filters= Output Filter Sets: protocol filters= device filters= Call Filter Sets: protocol filters= device filters= Press ENTER to Confirm or ESC to Cancel: Figure 12-18 Sample Filter Rules Summary — Applying a Remote Node Filter Set 12.
Prestige 791R G.SHDSL Router filter set(s) that you want to apply as appropriate. You can choose up to four filter sets (from twelve) by typing their numbers separated by commas, for example, 3, 4, 6, 11. The factory default filter set, NetBIOS_LAN, is inserted in the protocol filters field under Input Filter Sets in menu 3.1 in order to prevent local NetBIOS messages from triggering calls to the DNS server. Menu 3.
Prestige 791R G.SHDSL Router Chapter 13 SNMP Configuration This chapter explains SNMP Configuration. SNMP is only available if TCP/IP is configured. 13.1 SNMP Overview Simple Network Management Protocol is a protocol used for exchanging management information between network devices. SNMP is a member of TCP/IP protocol suite. Your Prestige supports SNMP agent functionality, which allows a manager station to manage and monitor the Prestige through the network.
Prestige 791R G.SHDSL Router An SNMP managed network consists of two main components: agents and a manager. An agent is a management software module that resides in a managed device (the Prestige). An agent translates the local management information from the managed device into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions. It executes applications that control and monitor managed devices.
Prestige 791R G.SHDSL Router Menu 22 - SNMP Configuration SNMP: Get Community= public Set Community= public Trusted Hgst= 0.0.0.0 Trap: Community= public Destination= 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 13-2 SNMP Configuration Table 13-1 SNMP Configuration FIELD DESCRIPTION EXAMPLE Get Community Type the Get Community, which is the password for the incoming Get- and GetNext requests from the management station.
Prestige 791R G.SHDSL Router TRAP # TRAP NAME DESCRIPTION 2 warmStart (defined in RFC-1215) A trap is sent after booting (software reboot). 3 linkUp (defined in RFC-1215) A trap is sent with the port number. 4 authenticationFailure (defined in RFC-1215) A trap is sent to the manager when receiving any SNMP get or set requirements with wrong community (password). 6 linkDown (defined in RFC-1215) A trap is sent with the port number when any of the links are down. See the following table.
Prestige 791R G.SHDSL Router Chapter 14 System Maintenance This chapter covers the diagnostic tools that help you to maintain your Prestige. 14.1 System Maintenance Overview These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter describes how to use these tools in detail. Type 24 in the main menu to open Menu 24 – System Maintenance, as shown in the following figure. Menu 24 - System Maintenance 1. 2. 3. 4. 5. 6. 7. 8. 9.
Prestige 791R G.SHDSL Router The following table describes the fields present in Menu 24.1 — System Maintenance — Status which are read-only and meant for diagnostic purposes. Menu 24.1 - System Maintenance – Status hh:mm:ss Sat. Jan.
Prestige 791R G.SHDSL Router Table 14-1 System Maintenance — Status FIELD Status DESCRIPTION Shows the current status of the LAN. Tx Pkts The number of transmitted packets to the LAN. Rx Pkts The number of received packets from the LAN. Collision WAN Number of collisions. Shows statistics for the WAN. Line Status Upstream Speed Downstream Speed CPU Load Shows the current status of the xDSL line which can be Up or Down. Shows the upstream transfer rate in kbps.
Prestige 791R G.SHDSL Router Menu 24.2.1 – System Maintenance – Information Name: Routing: IP ZyNOS F/W Version: V3.40(BQ.0)b1 | 3/24/2003 xDSL F/W Version: R.2.3.1 Standard: ANSI(ANNEX_A) LAN Ethernet Address: 00:a0:c5:01:23:45 IP Address: 192.168.1.1 IP Mask: 255.255.255.0 DHCP: Server Press ESC or RETURN to Exit: Figure 14-4 System Maintenance — Information Table 14-2 System Maintenance — Information FIELD DESCRIPTION Name Displays the system name of your Prestige.
Prestige 791R G.SHDSL Router 14.3.2 Console Port Speed You can set up different port speeds for the console port through Menu 24.2.2 – System Maintenance – Console Port Speed. Your Prestige supports 9600 (default), 19200 and 38400 bps. Press [SPACE BAR] and then [ENTER] to select the desired speed in menu 24.2.2, as shown in the following figure. Menu 24.2.
Prestige 791R G.SHDSL Router Step 3. Enter 1 from Menu 24.3 — System Maintenance — Log and Trace to display the error log in the system. After the Prestige finishes displaying the error log, you will have the option to clear it. Samples of typical error and information messages are presented in the next figure.
Prestige 791R G.SHDSL Router Table 14-3 System Maintenance Menu — Syslog Parameters PARAMETER DESCRIPTION UNIX Syslog: Active Syslog IP Address Log Facility Use [SPACE BAR] and then [ENTER] to turn syslog on or off. Type the IP address of your syslog server. Use [SPACE BAR] and then [ENTER] to select one of seven different local options. The log facility lets you log the message in different server files. Refer to your UNIX manual.
Prestige 791R G.SHDSL Router Jul 19 11:28:56 192.168.102.2 ZYXEL: Packet Trigger: Protocol=1, Data=4500002c1b0140001f06b50ec0a86614ca849a7b0427001700195b3e00000000600220008cd40000020405b4 Jul 19 11:29:06 192.168.102.2 ZYXEL: Packet Trigger: Protocol=1, Data=45000028240140001f06ac12c0a86614ca849a7b0427001700195b451d1430135004000077600000 3 - Filter Log SdcmdSyslogSend (SYSLOG_FILLOG, SYSLOG_NOTICE, String); String = IP[Src=xx.xx.xx.xx Dst=xx.xx.xx.
Prestige 791R G.SHDSL Router The following table describes the diagnostic tests available in menu 24.4 for and the connections. Table 14-4 System Maintenance Menu — Diagnostic FIELD DESCRIPTION Reset xDSL Re-initialize the xDSL link to the telephone company. Ping Host Ping the host to see if the links and TCP/IP protocol on both systems are working. Reboot System Reboot the Prestige. Command Mode Type the mode to test and diagnose your Prestige using specified commands.
Prestige 791R G.SHDSL Router Chapter 15 Firmware and Configuration File Maintenance This chapter tells you how to backup and restore your configuration file as well as upload new firmware and configuration files. 15.1 Filename Conventions The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password, DHCP Setup, TCP/IP Setup, etc. It arrives from ZyXEL with a “rom” filename extension.
Prestige 791R G.SHDSL Router Table 15-1 Filename Conventions FILE TYPE INTERNAL NAME EXTERNAL NAME DESCRIPTION Configuration File Rom-0 This is the configuration filename on the Prestige. Uploading the rom-0 file replaces the entire ROM file system, including your Prestige configurations, system-related data (including the default password), the error log and the trace log. *.rom Firmware Ras This is the generic name for the ZyNOS firmware on the Prestige. *.bin 15.
Prestige 791R G.SHDSL Router 15.2.1 Backup Configuration Follow the instructions as shown in the next screen. Menu 24.5 - System Maintenance - Backup Configuration To transfer the configuration file to your workstation, follow the procedure below: 1. Launch the FTP client on your computer. 2. Type "open" and the IP address of your system. Then type "root" and SMT password as requested. 3. Locate the 'rom-0' file. 4. Type 'get rom-0' to back up the current Prestige configuration to your computer.
Prestige 791R G.SHDSL Router 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel.rom 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 16384 bytes sent in 1.10Seconds 297.89Kbytes/sec. ftp> quit Figure 15-2 FTP Session Example 15.2.4 GUI-based FTP Clients The following table describes some of the commands that you may see in GUI-based FTP clients.
Prestige 791R G.SHDSL Router 4. You have an SMT console session running. 15.2.6 Backup Configuration Using TFTP The Prestige supports the up/downloading of the firmware and the configuration file using TFTP (Trivial File Transfer Protocol) over LAN. Although TFTP should work over WAN as well, it is not recommended. To use TFTP, your computer must have both telnet and TFTP clients. To backup the configuration file, follow the procedure shown next. Step 1.
Prestige 791R G.SHDSL Router Table 15-3 General Commands for GUI-based TFTP Clients COMMAND DESCRIPTION Host Enter the IP address of the Prestige. 192.168.1.1 is the Prestige’s default IP address when shipped. Send/Fetch Use “Send” to upload the file to the Prestige and “Fetch” to back up the file on your computer. Local File Enter the path and name of the firmware file (*.bin extension) or configuration file (*.rom extension) on your computer. Remote File This is the filename on the Prestige.
Prestige 791R G.SHDSL Router Step 3. Run the HyperTerminal program by clicking Transfer, then Receive File as shown in the following screen. Type a location for storing the configuration file or click Browse to look for one. Choose the Xmodem protocol. Then click Receive. Figure 15-5 Backup Configuration Example Step 4. After a successful backup you will see the following screen. Press any key to return to the SMT menu. ** Backup Configuration completed. OK. ### Hit any key to continue.
Prestige 791R G.SHDSL Router WARNING! DO NOT INTERUPT THE FILE TRANSFER PROCESS AS THIS MAY PERMANENTLY DAMAGE YOUR PRESTIGE. WHEN THE RESTORE CONFIGURATION PROCESS IS COMPLETE, THE PRESTIGE WILL AUTOMATICALLY RESTART. 15.3.1 Restore Using FTP For details about backup using (T)FTP please refer to earlier sections on FTP and TFTP file upload in this chapter. Menu 24.6 -- System Maintenance - Restore Configuration To transfer the firmware and configuration file, follow the procedure below: 1.
Prestige 791R G.SHDSL Router Step 8. Enter “quit” to exit the ftp prompt. The Prestige will automatically restart after a successful restore process. 15.3.2 Restore Using FTP Session Example ftp> put config.rom rom-0 200 Port command okay 150 Opening data connection for STOR rom-0 226 File received OK 221 Goodbye for writing flash ftp: 16384 bytes sent in 0.06Seconds 273.07Kbytes/sec. ftp>quit Figure 15-8 Restore Using FTP Session Example Refer to section 15.2.
Prestige 791R G.SHDSL Router Type the configuration file’s location, or click Browse to search for it. Choose the Xmodem protocol. Then click Send. Figure 15-11 Restore Configuration Example Step 4. After a successful restoration you will see the following screen. Press any key to restart the Prestige and return to the SMT menu. Save to ROM Hit any key to start system reboot. Figure 15-12 Successful Restoration Confirmation Screen 15.
Prestige 791R G.SHDSL Router Menu 24.7.1 - System Maintenance - Upload System Firmware To upload the system firmware, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your system. Then type "root" and SMT password as requested. 3. Type "put firmwarefilename ras" where "firmwarefilename" is the name of your firmware upgrade file on your workstation and "ras" is the remote file name on the system. 4.
Prestige 791R G.SHDSL Router 15.4.3 FTP File Upload Command from the DOS Prompt Example Step 1. Launch the FTP client on your computer. Step 2. Enter “open”, followed by a space and the IP address of your Prestige. Step 3. Press [ENTER] when prompted for a username. Step 4. Enter your password as requested (the default is “1234”). Step 5. Enter “bin” to set transfer mode to binary. Step 6. Use “put” to transfer files from the computer to the Prestige, for example, “put firmware.
Prestige 791R G.SHDSL Router To use TFTP, your computer must have both telnet and TFTP clients. To transfer the firmware and the configuration file, follow the procedure shown next. Step 1. Use telnet from your computer to connect to the Prestige and log in. Because TFTP does not have any security checks, the Prestige records the IP address of the telnet client and accepts TFTP requests only from this address. Step 2.
Prestige 791R G.SHDSL Router 15.4.8 Uploading Firmware File Via Console Port Step 1. Select 1 from Menu 24.7 – System Maintenance – Upload Firmware to display Menu 24.7.1 – System Maintenance – Upload System Firmware, then follow the instructions as shown in the following screen. Menu 24.7.1 - System Maintenance - Upload System Firmware To 1. 2. 3. upload system firmware: Enter "y" at the prompt below to go into debug mode. Enter "atur" after "Enter Debug Mode" message.
Prestige 791R G.SHDSL Router 15.4.10 Step 1. Uploading Configuration File Via Console Port Select 2 from Menu 24.7 – System Maintenance – Upload Firmware to display Menu 24.7.2 – System Maintenance – Upload System Configuration File. Follow the instructions as shown in the next screen. Menu 24.7.2 - System Maintenance - Upload System Configuration File To 1. 2. 3. upload system configuration file: Enter "y" at the prompt below to go into debug mode. Enter "atlc" after "Enter Debug Mode" message.
Prestige 791R G.SHDSL Router Type the configuration file’s location, or click Browse to search for it. Choose the Xmodem protocol. Then click Send. Figure 15-19 Example Xmodem Upload After the configuration upload process has completed, restart the Prestige by entering “atgo”.
Prestige 791R G.SHDSL Router Chapter 16 System Maintenance and Information This chapter leads you through SMT menus 24.8 to 24.10. 16.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the main system firmware. The CI provides much of the same functionality as the SMT, while adding some low-level setup and diagnostic functions. Enter the CI from the SMT by selecting menu 24.8. See the included disk or the zyxel.com web site for more detailed information on CI commands.
Prestige 791R G.SHDSL Router Copyright (c) 1994 - 2003 ZyXEL Communications Corp. ras> ? Valid commands are: sys exit device ether wan poe xdsl ip ppp bridge hdap ras> Figure 16-2 Valid Commands 16.2 Call Control Support Call Control Support is only applicable when Encapsulation is set to PPPoE in menu 4 or menu 11.1. The budget management function allows you to set a limit on the total outgoing call time of the Prestige within certain times.
Prestige 791R G.SHDSL Router Menu 24.9.1 - System Maintenance - Budget Management Remote Node 1.MyISP 2.-------3.-------4.-------5.-------6.-------7.-------8.-------- Connection Time/Total Budget No Budget --------------- Elapsed Time/Total Period No Budget --------------- Reset Node (0 to update screen): Figure 16-4 Budget Management The total budget is the time limit on the accumulated time for outgoing calls to a remote node.
Prestige 791R G.SHDSL Router 16.3 Time and Date Setting The Prestige keeps track of the time and date. There is also a software mechanism to set the time manually or get the current time and date from an external server when you turn on your Prestige. Menu 24.10 allows you to update the time and date settings of your Prestige. The real time is then displayed in the Prestige error logs and firewall logs. Select menu 24 in the main menu to open Menu 24 — System Maintenance, as shown next.
Prestige 791R G.SHDSL Router Table 16-2 Time and Date Setting Fields FIELD DESCRIPTION Use Time Server when Bootup Enter the time service protocol that your time server sends when you turn on the Prestige. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use trial and error to find a protocol that works. The main differences between them are the format. Daytime (RFC 867) format is day/month/year/time zone of the server.
Prestige 791R G.SHDSL Router Chapter 17 IP Policy Routing This chapter covers setting and applying policies used for IP routing. 17.1 IP Policy Routing Overview Traditionally, routing is based on the destination address only and the IAD takes the shortest path to forward a packet. IP Routing Policy (IPPR) provides a mechanism to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator.
Prestige 791R G.SHDSL Router IPPR follows the existing packet filtering facility of RAS in style and in implementation. The policies are divided into sets, where related policies are grouped together. A user defines the policies before applying them to an interface or a remote node, in the same fashion as the filters. There are 12 policy sets with six policies in each set. 17.2 IP Routing Policy Setup Menu 25 shows all the policies defined.
Prestige 791R G.SHDSL Router Menu 25.1 - IP Routing Policy Setup # A Criteria/Action - - -------------------------------------------------------------------------1 Y SA=1.1.1.1-1.1.1.1,DA=2.2.2.2-2.2.2.5 SP=20-25,DP=20-25,P=6,T=NM,PR=0 |GW=192.168.1.
Prestige 791R G.SHDSL Router Type a number from 1 to 6 to display Menu 25.1.1 – IP Routing Policy (see the next figure). This menu allows you to configure a policy rule. Menu 25.1.1 - IP Routing Policy Policy Set Name= test Active= Yes Criteria: IP Protocol = 6 Type of Service= Normal Precedence = 0 Source: addr start= 1.1.1.1 port start= 20 Destination: addr start= 2.2.2.2 port start= 20 Action= Matched Gateway addr = 192.168.1.
Prestige 791R G.SHDSL Router Table 17-2 IP Routing Policy FIELD Len Comp DESCRIPTION Press [SPACE BAR] and then [ENTER] to choose from Equal, Not Equal, Less, Greater, Less or Equal or Greater or Equal. Source: addr start / end Source IP address range from start to end. port start / end Source port number range from start to end; applicable only for TCP/UDP. Destination: addr start / end Destination IP address range from start to end.
Prestige 791R G.SHDSL Router Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP Setup: DHCP= None Client IP Pool Starting Address= N/A Size of Client IP Pool= N/A Primary DNS Server= N/A Secondary DNS Server= N/A Remote DHCP Server= N/A TCP/IP Setup: IP Address= 192.168.1.1 IP Subnet Mask= 255.255.255.0 RIP Direction= Both Version= RIP-2B Multicast= IGMP-v2 IP Policies= 2,4,7,9 Edit IP Alias= No Type IP Policy sets here.
Prestige 791R G.SHDSL Router 17.4 IP Policy Routing Example If a network has both Internet and remote node connections, you can route Web packets to the Internet using one policy and route FTP packets to a remote network using another policy. See the next figure. Figure 17-6 Example of IP Policy Routing To force Web packets coming from clients with IP addresses of 192.168.1.33 to 192.168.1.64 to be routed to the Internet via the WAN port of the Prestige, follow the steps as shown next. Step 1.
Prestige 791R G.SHDSL Router Menu 25.1.1 - IP Routing Policy Policy Set Name= set1 Active= Yes Criteria: IP Protocol = 6 Type of Service= Don't Care Precedence = Don't Care Source: addr start= 192.168.1.2 port start= 0 Destination: addr start= 0.0.0.0 port start= 80 Action= Matched Gateway addr = 192.168.1.1 Type of Service= No Change Precedence = No Change Packet length= 10 Len Comp= N/A end= 192.168.1.
Prestige 791R G.SHDSL Router Menu 25.1.1 - IP Routing Policy Policy Set Name= set2 Active= Yes Criteria: IP Protocol = 6 Type of Service= Don't Care Precedence = Don't Care Source: addr start= 0.0.0.0 port start= 0 Destination: addr start= 0.0.0.0 port start= 20 Action= Matched Gateway addr =192.168.1.100 Type of Service= No Change Precedence = No Change Packet length= 10 Len Comp= N/A end= N/A end= N/A end= N/A end= 21 Log= No Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle.
Prestige 791R G.SHDSL Router Chapter 18 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulation only) allows you to dictate when a remote node should be called and for how long. 18.1 Call Scheduling Overview The call scheduling feature allows the Prestige to manage a remote node and dictate when a remote node should be called and for how long. This feature is similar to the scheduler in a video cassette recorder (you can specify a time period for the VCR to record).
Prestige 791R G.SHDSL Router To delete a schedule set, enter the set number and press [SPACE BAR] and then [ENTER] (or delete) in the Edit Name field. To setup a schedule set, select the schedule set you want to setup from menu 26 (1-12) and press [ENTER] to see Menu 26.1 — Schedule Set Setup as shown next. Menu 26.
Prestige 791R G.SHDSL Router Table 18-1 Schedule Set Setup FIELD DESCRIPTION EXAMPLE How Often Should this schedule set recur weekly or be used just once only? Press the [SPACE BAR] and then [ENTER] to select Once or Weekly. Both these options are mutually exclusive. If Once is selected, then all weekday settings are N/A. When Once is selected, the schedule rule deletes automatically after the scheduled time elapses.
Prestige 791R G.SHDSL Router Menu 11.1 - Remote Node Profile Rem Node Name= ? Active= Yes Route= IP Bridge= No Encapsulation= PPPoE Multiplexing=VC-based Service Name= Incoming Rem Login= Rem Password= ******** Outgoing= My Login=? My Password= ******** Authen= CHAP/PAP Edit IP/Bridge= No Edit ATM Options= No Telco Option: Allocated Budget(min)= 0 Period(hr)= 0 Schedules= 1,2,3,4 Nailed-Up Connection= No Apply your schedule sets here.
Prestige 791R G.SHDSL Router Chapter 19 Remote Management This chapter covers remote management (SMT menu 24.11). 19.1 Remote Management Overview Remote management setup is for managing Telnet, FTP and Web services. You can customize the service port, access interface and the secured client IP address to enhance security and flexibility. You may manage your Prestige from a remote location via: the Internet (WAN only), the LAN only, All (LAN and WAN) or Disable (neither).
Prestige 791R G.SHDSL Router 19.1.3 Remote Management and Web Services You can use the Prestige’s embedded web configurator for configuration and file management. See the online help for details. 19.1.4 Disabling Remote Management To disable remote management of a service, select Disable in the corresponding Server Access field. 19.2 Remote Management Setup Enter 11 in menu 24 to display Menu 24.11 — Remote Management Control (shown next). Menu 24.
Prestige 791R G.SHDSL Router Table 19-1 Remote Management Control FIELD Secured Client IP DESCRIPTION EXAMPLE The default 0.0.0.0 allows any client to use this service to remotely manage the Prestige. Enter an IP address to restrict access to a client with a matching IP address. 0.0.0.0 Once you have filled in this menu, press [ENTER] at the message "Press ENTER to Confirm or ESC to Cancel" to save your configuration, or press [ESC] to cancel. 19.2.
Additional Information Part: IV ADDITIONAL INFORMATION This part contains UPnP, Troubleshooting, the Appendices and the Index.
Prestige 791R G.SHDSL Router Chapter 20 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configurator. 20.1 Universal Plug and Play Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peerto-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network.
Prestige 791R G.SHDSL Router All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. 20.1.4 UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum Creates UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports IGD 1.0 (Internet Gateway Device). At the time of writing ZyXEL's UPnP implementation supports Windows Messenger 4.6 and 4.7 while Windows Messenger 5.
Prestige 791R G.SHDSL Router Figure 20-1 Configuring UPnP Table 20-1 Configuring UPnP FIELD DESCRIPTION Enable the Universal Plug and Play (UPnP) Service Select this checkbox to activate UPnP. Be aware that anyone could use a UPnP application to open the web configurator's login screen without entering the Prestige's IP address (although you must still enter the password to access the web configurator).
Prestige 791R G.SHDSL Router Step 1. Click Start and Control Panel. Double-click Add/Remove Programs. Step 2. Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. Step 3. In the Communications window, select the Universal Plug and Play check box in the Components selection box. Step 4. Click OK to go back to the Add/Remove Programs Properties window and click Next. Step 5. Restart the computer when prompted.
Prestige 791R G.SHDSL Router Installing UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP. Step 1. Click start and Control Panel. Step 2. Double-click Network Connections. Step 3. In the Network Connections window, click Advanced in the main menu and select Optional Networking Components …. The Windows Optional Networking Components Wizard window displays. Step 4. Select Networking Service in the Components selection box and click Details. Step 5.
Prestige 791R G.SHDSL Router 20.4 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the Prestige. Make sure the computer is connected to a LAN port of the Prestige. Turn on your computer and the Prestige. Auto-discover Your UPnP-enabled Network Device Step 1. Click start and Control Panel. Double-click Network Connections. An icon displays under Internet Gateway. Step 2.
Prestige 791R G.SHDSL Router Step 3. In the Internet Connection Properties window, click Settings to see the port mappings there were automatically created. Step 4. You may edit or delete the port mappings or click Add to manually add port mappings. When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically. Step 5. UPnP Select Show icon in notification area when connected option and click OK.
Prestige 791R G.SHDSL Router Step 6. Double-click on the icon to display your current Internet connection status. Web Configurator Easy Access With UPnP, you can access the web-based configurator on the Prestige without finding out the IP address of the Prestige first. This comes helpful if you do not know the IP address of the Prestige. Follow the steps below to access the web configurator. Step 1. Click start and then Control Panel. Step 2. Double-click Network Connections. Step 3.
Prestige 791R G.SHDSL Router Step 4. An icon with the description for each UPnP-enabled device displays under Local Network. Step 5. Right-click on the icon for your Prestige and select Invoke. The web configurator login screen displays. Step 6. Right-click on the icon for your Prestige and select Properties. A properties window displays with basic information about the Prestige.
Prestige 791R G.SHDSL Router Chapter 21 Troubleshooting This chapter covers potential problems and the corresponding remedies. 21.1 Problems Starting Up the Prestige Table 21-1 Troubleshooting the Start-Up of Your Prestige PROBLEM None of the LEDs turn on when I turn on the Prestige. CORRECTIVE ACTION Make sure that the Prestige’s power adapter is connected to the Prestige and plugged in to an appropriate power source. Check that the Prestige and the power source are both turned on.
Prestige 791R G.SHDSL Router 21.3 Problems with the WAN Interface Table 21-3 Troubleshooting the WAN Interface PROBLEM CORRECTIVE ACTION I cannot get a WAN IP address from the ISP. The WAN IP is provided when the ISP recognizes the user as an authorized user after verifying the MAC address, Host Name or User ID. Find out the verification method used by your ISP. If the ISP checks the host name, enter your computer’s name in the System Name field in Menu 1 — General Setup.
Prestige 791R G.SHDSL Router 21.5 Problems with the Password Table 21-5 Troubleshooting the Password PROBLEM I cannot access the Prestige. CORRECTIVE ACTION The Password and Username fields are case-sensitive. Make sure that you enter the correct password and username using the proper casing. Restore the factory default configuration file. This will restore all of the factory defaults including the password. Refer to the Reset Button section in the User's Guide for details. 21.
Prestige 791R G.SHDSL Router Appendix A PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your PC to an ATM PVC (Permanent Virtual Circuit) which connects to a xDSL Access Concentrator where the PPP session terminates (see the next figure). One PVC can support any number of PPP sessions from your LAN. PPPoE provides access control and billing functionality in a manner similar to dial-up services using PPP.
Prestige 791R G.SHDSL Router How PPPoE Works The PPPoE driver makes the Ethernet appear as a serial link to the PC and the PC runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC). Between the AC and an ISP, the AC is acting as a L2TP (Layer 2 Tunneling Protocol) LAC (L2TP Access Concentrator) and tunnels the PPP frames to the ISP. The L2TP tunnel is capable of carrying multiple PPP sessions.
Prestige 791R G.SHDSL Router Appendix B Virtual Circuit Topology ATM is a connection-oriented technology, meaning that it sets up virtual circuits over which end systems communicate.
Prestige 791R G.SHDSL Router Appendix C Power Adapter Specifications NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model DV-121AACS Input Power AC120Volts/60Hz/23W max Output Power AC12Volts/1.0A Power Consumption 8W Safety Standards UL, CUL (UL 1310, CSA C22.2 No.223) NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model AA-121A Input Power AC120Volts/60Hz/18W max Output Power AC12Volts/1.0A Power Consumption 8W Safety Standards UL, CUL (UL 1310, CSA C22.2 No.
Prestige 791R G.SHDSL Router EUROPEAN PLUG STANDARDS AC Power Adapter Model DV-121AACCP-5716 Input Power AC230Volts/50Hz/100mA Output Power AC12Volts/1.0A Power Consumption 8W Safety Standards TUV-GS, CE (EN 60950) EUROPEAN PLUG STANDARDS AC Power Adapter Model AA-121ABN Input Power AC230Volts/50Hz/140mA Output Power AC12Volts/1.
Prestige 791R G.
Prestige 791R G.SHDSL Router Index 10/100 MB Auto-negotiation ........................... 1-2 Maximum Number of Schedule Sets......... 18-1 Active........................................................5-5, 5-7 PPPoE........................................................ 18-3 Allocated Budget ............................................. 5-6 Precedence................................................. 18-1 Application Scenario........................................ 1-3 Precedence Example...........
Prestige 791R G.SHDSL Router Diagnostic...................................................... 14-8 Filter ..................................................... 5-11, 12-1 Diagnostic Tools............................................ 14-1 Applying Filters .......................................12-20 Dial Timeout.................................................... 5-4 Ethernet Setup ..............................................6-6 DNS ...............................................................
Prestige 791R G.SHDSL Router Restrictions ................................................ 19-3 Internet Assigned Numbers Authority .. See IANA FTP File Transfer ......................................... 15-10 IP address...................................................5-6, 5-8 FTP Restrictions............................................. 15-4 IP Address 6-10, 9-3, 10-3, 12-11, 14-4, 14-9, 17-3 FTP Server ................................................... 11-22 Remote ..............................
Prestige 791R G.SHDSL Router Criteria....................................................... 17-1 VC-based......................................................7-3 Load Sharing ............................................. 17-1 Multiplexing ...................................... 7-3, 7-7, 8-2 Setup.......................................................... 17-2 Multiprotocol Encapsulation ............................7-2 IP Routing Policy Setup................................. 17-3 My Login............
Prestige 791R G.SHDSL Router Packet Triggered ............................................ 14-7 Remote DHCP Server.................................... 6-10 Packets ........................................................... 14-2 Remote Management Limitations.................. 19-3 PAP ...........................................................5-5, 8-4 Remote Management Setup ........................... 19-2 PAP (Password Authentication Protocol) ........ 1-2 Remote Node ..............................
Prestige 791R G.SHDSL Router Server ..... 11-5, 11-8, 11-10, 11-13, 11-14, 11-15, 11-16, 11-19, 11-20, 16-5 Service Type .................................................... 4-4 setup a schedule ............................................. 18-2 System Information....................................14-3 System Status .............................................14-1 System Information ........................................14-3 SMT Menu Overview ......................................
Prestige 791R G.SHDSL Router Application ................................................ 20-1 VC-based Multiplexing .......................... 8-2, 8-12 Security issues ........................................... 20-1 VPI & VCI....................................................... 7-3 Universal Plug and Play Forum ..................... 20-2 WAN Setup............................................... 4-2, 4-4 UNIX Syslog......................................... 14-5, 14-7 Web Configurator .............
