Manuel d'utilisation / d'entretien du produit 660H Series du fabricant ZyXEL Communications
Aller à la page of 460
Prestige 660H/HW Series 802.1 1g Wireless ADSL2+ 4-Port Security Gateway User ’ s Guide V ersion 3.40 5/2005.
.
Prestige 660H/HW Series User’s Guide Copyright 2 Copyright Copyright © 2005 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, .
Prestige 660H/HW Series User’s Guide 3 Federal Communications Commission (F CC) Interference Statement Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rul es. Operation is subject to the following two conditions: • This device may not cause harmful interference.
Prestige 660H/HW Series User’s Guide Safety Warnings 4 Safety W arnings For your safety , be sure to read and fo llow all warning notices and instructions. • T o reduce the risk of fire, use only No. 26 A WG (American W ire Gauge) or larger telecommunication line cord.
Prestige 660H/HW Series User’s Guide 5 ZyXEL Limited Warranty ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase .
Prestige 660H/HW Series User’s Guide Customer Support 6 Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your de vice.
Prestige 660H/HW Series User’s Guide 7 Customer Suppo rt UNITED KINGDOM technical@zyxel.co.uk +44 (0) 8702 909090 www .zyxel.co.uk ZyXEL Co mmunications UK Ltd.,1 1, The Courtyard, Eastern Road, Bracknell, Berkshire, RG12 2XB, United Kingdom (UK) sales@zyxel.
Prestige 660H/HW Series User’s Guide 8 T able of Content s Copyright .................................................. ................................................................ 2 Federal Communications Commissi on (FCC) Interference St atement .
Prestige 660H/HW Series User’s Guide 9 Chapter 3 Wizard Setup for Inte rnet Access ........................................... .............................. 58 3.1 Introduction to Internet Access Wizard ............ ................ ............. .
Prestige 660H/HW Series User’s Guide 10 7.3.1 WEP Encryption ..... ............. ................ ............. ............. ................ ............ 84 7.4 Configuring MAC Filters ......... ............. ................ ............. .......
Prestige 660H/HW Series User’s Guide 11 9.4 SIP ALG .......... ............. ............. ................ ............. ............. ................ ............. 1 19 9.5 Selecting the NA T Mode ................. ................. .............
Prestige 660H/HW Series User’s Guide 12 12.7.2.1 When T o Use The Firewall ... ............. ............. ................ ............. 141 Chapter 13 Firewall Configuration ....................................... .................................
Prestige 660H/HW Series User’s Guide 13 15.1.3 System Timeout ............................ ............. ................ ................ .......... 171 15.2 T elnet ................ ................ ............. ............. ................ ...
Prestige 660H/HW Series User’s Guide 14 18.7.2 Maximize Bandwidth Usage With Bandwidth Borrowing ............ .......... 200 18.8 Configuring Summary .......................... ............. ............. ................ ............. ...200 18.9 Configuring Class Setu p .
Prestige 660H/HW Series User’s Guide 15 22.2.1 T raffic Redirect Setup . ............. ................ ................ ................ ............. 233 Chapter 23 Menu 3 LAN Setup .............. ..................................................
Prestige 660H/HW Series User’s Guide 16 Chapter 27 St atic Route Setup ............................................................................. .................. 26 0 27.1 IP S tatic Route Overview ..................... ................ ......
Prestige 660H/HW Series User’s Guide 17 31.4.2 Generic Filter Rule ...... ............. ............. ................ ............. ............ .......293 31.5 Filter T y pes and NA T ................. ... .......... ................ .............
Prestige 660H/HW Series User’s Guide 18 35.2.6 Backup Conf iguration Using TFTP ................................................ ....... 324 35.2.7 TFTP Command Exampl e ................ ................ ................. ............ ....... 324 35.
Prestige 660H/HW Series User’s Guide 19 Chapter 39 Call Scheduling ........................................ ............................................................ 35 2 39.1 Introduction .......................... ............. ................
Prestige 660H/HW Series User’s Guide 20 Appendix C IP Subnetting ............................................ ..................................................... ....... 380 IP Addressing ................... ............. ................ ........
Prestige 660H/HW Series User’s Guide 21 WEP Authentication S teps ............ ............. ................ ............. ................ ............... 400 Dynamic WEP Key Exchange ............................. ............. ................ ..
Prestige 660H/HW Series User’s Guide 22 Configuring What Y ou W ant t he Prestige to Log .................... ................... ...... 447 Displaying Logs ............ ............. ................ ............. ................ ............. ...
Prestige 660H/HW Series User’s Guide 23.
Prestige 660H/HW Series User’s Guide 24 List of Figures Figure 1 Prestige Internet Access Applicati on ... ............. ................ ............. ................ ....... 48 Figure 2 Firewall Application .............. .......... ... .........
Prestige 660H/HW Series User’s Guide 25 Figure 37 Example Wireless Client OTIST Scre en ... ................ ............. ................ ............. 101 Figure 38 Security Key ....... ................ ....... ...... ................ ...........
Prestige 660H/HW Series User’s Guide 26 Figure 80 Remote Management ........................ ............. ............. ................ ............. .......... 172 Figure 81 Configuring UPnP ........... ................ ................ .........
Prestige 660H/HW Series User’s Guide 27 Figure 123 Menu 23.1 Change Password . ...... ....... ................ ............. ............. ................ ... 226 Figure 124 Menu 1 General Setup .. ................ .......... ................ .....
Prestige 660H/HW Series User’s Guide 28 Figure 166 Menu 4 Internet Access & NA T Exam ple ............. ............. ................ ............. ... 276 Figure 167 NA T Example 2 .......... ................ ............. ................ ...
Prestige 660H/HW Series User’s Guide 29 Figure 209 Syslog Example ............ ................ ............. ................ ................ ............. .......... 316 Figure 210 Menu 24.4 System Maintenance : Di agnostic ... ............ .....
Prestige 660H/HW Series User’s Guide 30 Figure 252 Windows XP: Advanced TCP/ IP Sett ings .. ................ ............. ................ .......... 374 Figure 253 Windows XP: Internet P rotocol (TCP /IP) Properties .................. ...........
Prestige 660H/HW Series User’s Guide 31.
Prestige 660H/HW Series User’s Guide 32 List of T ables T able 1 ADSL S tandards ............. ................ ................ ............. ................ ................ .......... 42 T able 2 Front Panel LED s . ................ ............
Prestige 660H/HW Series User’s Guide 33 T able 37 ICMP Commands That Trigger Alert s . ................. ............ ................. ............ ....... 135 T able 38 Legal Net BIOS Commands .......... ................ ............. ............
Prestige 660H/HW Series User’s Guide 34 T able 80 Menu 3. 5 - Wireless LAN Setup ............. ................ ............. ................ ................ 240 T able 81 Menu 3. 5.1 WLAN MAC Address Filtering .......... ................ ........
Prestige 660H/HW Series User’s Guide 35 T able 123 Troubleshooting Internet Access ............. ................ ................ ................ .......... 362 T able 124 Troubleshooting the Password ... ................ ................ ........
Prestige 660H/HW Series User’s Guide 36 T able 166 802.1X Logs ........ ............. ................ ................. ............ ................. ............ ....... 44 4 T able 167 ACL Setting Notes ...... ................ ............. ....
Prestige 660H/HW Series User’s Guide 37.
Prestige 660H/HW Series User’s Guide Preface 38 Preface Congratulations on your p urchase of the Pres tige 660HW W ireless ADSL Security Gateway or the Prestige 660H ADSL Security Gateway . Note: Register your product online to receive e-mail notice s of firmware upgrades and information at www .
Prestige 660H/HW Series User’s Guide 39 Pref ace The Quick S tart Guide is designed to help yo u get up and running right away . They contain connection information and instructions on getting st arted. • W eb Configurator Online Help Embedded web help for descriptions of individual screens and supplementary information.
Prestige 660H/HW Series User’s Guide Introduction to DSL 40 Introduction to DSL DSL (Digital Subscriber Line) te chnology enhances the data ca pacity of the existing twisted- pair wire that runs betwee n the local telephone co mpany switching of fi ces and most homes and offices.
Prestige 660H/HW Series User’s Guide 41 Introduction to DSL.
Prestige 660H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 42 C HAPTER 1 Getting T o Know Y our Prestige This chapter describes the key features and applications of your Prestige.
Prestige 660H/HW Series User’s Guide 43 Chapter 1 G etting To Know Your Pres tige The web browser-based Graphical User Interface (GUI) provides easy management. 1.1.1 Features of the Prestige The following sections describe the features of the Prestige.
Prestige 660H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 4 4 Content Filtering Content filtering allows you to block access to fo rbidden Internet web sit es, schedule when the Prestige should perform the filtering and give trusted LAN IP addresses unfiltered Internet access.
Prestige 660H/HW Series User’s Guide 45 Chapter 1 G etting To Know Your Pres tige Dynamic DNS Support W ith Dynamic DNS support, you can have a sta tic hostname alias for a dynamic IP address, allowing the host to be more easily accessible from various locations on the Internet.
Prestige 660H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 4 6 T raditionally , routing is based on the destina tion address only and the router takes the shortest path to forward a packet.
Prestige 660H/HW Series User’s Guide 47 Chapter 1 G etting To Know Your Pres tige Diagnostics Cap abilities The Prestige can perform self-diagnostic te sts.
Prestige 660H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 48 Wireless LAN MAC Address Filtering Y our Prestige can check the MAC address es of wireless stations against a list of allowed or denied MAC addresses.
Prestige 660H/HW Series User’s Guide 49 Chapter 1 G etting To Kn ow Your Pres tige 1.1.3 Firewall for Secure Broadband Internet Access The Prestige provides protection from attacks by Internet hackers. By default, the firewall blocks all incoming traffic from the W AN.
Prestige 660H/HW Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 50 Figure 5 P-660HW Front Panel The following table describes the LEDs. Table 2 Front Panel LEDs LED COLOR ST ATUS DESCRIPTION PWR/SYS Green On The Prestige is receiving power and functioning prop erly .
Prestige 660H/HW Series User’s Guide 51 Chapter 1 G etting To Know Your Pres tige.
Prestige 660H/HW Series User’s Guide Chapter 2 Introdu cing the Web Configur ator 52 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access and navigate the web configurator .
Prestige 660H/HW Series User’s Guide 53 Chapter 2 Introducing the Web Configurator Figure 6 Password Screen 6 It is highly recommended you change the de fault password! Enter a new password, retype it to confirm and click Apply ; alternatively click Ignor e to proceed to the main menu if you do not want to chang e the password now .
Prestige 660H/HW Series User’s Guide Chapter 2 Introdu cing the Web Configurator 54 2 Press the RESET button for ten seconds or until the PWR/SYS LED begins to blink and then release it. When the PWR/SYS LED begins to blink, the defaults have been restored and the Prestige restarts.
Prestige 660H/HW Series User’s Guide 55 Chapter 2 Introducing the Web Configurator Note: Click the icon (located in the top right corner o f most screens) to view embedded help.
Prestige 660H/HW Series User’s Guide Chapter 2 Introdu cing the Web Configur ator 56 UPnP Use this screen to enable UPnP on the Prestige. Logs Log Settings Use this screen to change your Prestige’s log settings. Vi ew Log Use this screen to view the logs for the categories that you selected.
Prestige 660H/HW Series User’s Guide 57 Chapter 2 Introducing the Web Configurator.
Prestige 660H/HW Series User’s Guide Chapter 3 Wizard Setu p for Internet Access 58 C HAPTER 3 W izard Setup for Internet Access This chapter provides informatio n on the W izard Setup screens for Internet access in the web configurator .
Prestige 660H/HW Series User’s Guide 59 Chapter 3 Wizard Setup fo r Internet Access Figure 9 Internet Access Wizard Setup: First Screen The following table describes the fields in this screen.
Prestige 660H/HW Series User’s Guide Chapter 3 Wizard Setu p for Internet Acce ss 60 Figure 10 Internet Connection with PPPoE The following table describes the fields in this screen. Table 5 Internet Connection with PPPoE LABEL DESCRIPTION Service Name T ype the name of your PPPoE service here.
Prestige 660H/HW Series User’s Guide 61 Chapter 3 Wizard Setup fo r Internet Access Figure 1 1 Internet Connec tion with RFC 1483 The following table describes the fields in this screen. Table 6 Internet Connection with RFC 1483 LABEL DESCRIPTION IP Address This field is available if you select Routing in the Mode field.
Prestige 660H/HW Series User’s Guide Chapter 3 Wizard Setu p for Internet Acce ss 62 The following table describes the fields in this screen. Table 7 Internet Connection with ENET ENCAP LABEL DESCRIPTION IP Address A static IP address is a fixed IP that your ISP gives you.
Prestige 660H/HW Series User’s Guide 63 Chapter 3 Wizard Setup fo r Internet Access The following table describes the fields in this screen. Table 8 Internet Connection with PPPoA LABEL DESCRIPTION User Name Enter the login name that your ISP gives you.
Prestige 660H/HW Series User’s Guide Chapter 3 Wizard Setu p for Internet Acce ss 64 Figure 14 Internet Access Wizard Setup: Third Screen If you want to change your Prestige LAN settings, click Change LAN Configuration to display the screen as shown next.
Prestige 660H/HW Series User’s Guide 65 Chapter 3 Wizard Setup fo r Internet Access The following table describes the fields in this screen. Table 9 Internet Access Wizard Setup: LAN Configuration LABEL DESCRIPTION LAN IP Address Enter the IP address of your Prestige in dotted decimal notat ion, for example, 192.
Prestige 660H/HW Series User’s Guide Chapter 4 Wizard Setup for Media Ba ndwidth Ma nagement 66 C HAPTER 4 Wizard Setup for Media Bandwid th Management This chapter shows you how to configure basic bandwidth management using the wizard screens. 4.1 Introduction to Media Bandwid th Management The web configurator’ s Media Bandwidth Magnt.
Prestige 660H/HW Series User’s Guide 67 Chapter 4 Wizard Setup for Media Ban dwidth Management 4.2 Media Bandwid th Management Setup 1 Click Media Bandwidth Mgnt.
Prestige 660H/HW Series User’s Guide Chapter 4 Wizard Setup for Media Ba ndwidth Ma nagement 68 The following table describes the labels in this screen.
Prestige 660H/HW Series User’s Guide 69 Chapter 4 Wizard Setup for Media Ban dwidth Management 3 W ell done! Y ou have finished co nfiguratio n of Media Bandwidth Management . Y ou may now continue configu ring your device. Click Return to Main Menu to return to the Site Map screen.
Prestige 660H/HW Series User’s Guide Chapter 5 Pass word Setup 70 C HAPTER 5 Password Setup This chapter provides information on the Password scre en. 5.1 Password Overview It is highly recommended that you ch ange the password for accessing the Prestige.
Prestige 660H/HW Series User’s Guide 71 Chapter 5 Password Setup.
Prestige 660H/HW Series User’s Guide Chapter 6 LAN Setu p 72 C HAPTER 6 LAN Setup This chapter describes how to configure LAN settings. 6.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached.
Prestige 660H/HW Series User’s Guide 73 Chapter 6 LAN Setup 6.2 DNS Server Address DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely impo rtant because without it, you must know the IP address of a machine before you can access it.
Prestige 660H/HW Series User’s Guide Chapter 6 LAN Setup 74 6.4 LAN TCP/IP The Prestige has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability .
Prestige 660H/HW Series User’s Guide 75 Chapter 6 LAN Setup 6.4.3 RIP Setup RIP (Routing Information Protocol) allows a ro uter to e xchange ro u ting information with other routers. The RIP Direction field controls the sending and receiving of RIP packets.
Prestige 660H/HW Series User’s Guide Chapter 6 LAN Setu p 76 6.5 Any IP T raditionally , you must set the IP addresses an d the subnet masks of a computer and the Prestige to be in the same subn et to allow the computer to a ccess the Internet (through the Prestige).
Prestige 660H/HW Series User’s Guide 77 Chapter 6 LAN Setup The following lists out the steps taken, when a co mputer tries to access the Internet for the first time through the Prestige.
Prestige 660H/HW Series User’s Guide Chapter 6 LAN Setu p 78 Figure 23 LAN Setup The following table describes the fields in this screen. Table 14 LAN Setup LABEL DESCRIPTION DHCP DHCP If set to Ser.
Prestige 660H/HW Series User’s Guide 79 Chapter 6 LAN Setup 6.7 Configuring S tatic DHCP This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC Addresses. Every Ethernet device has a unique MAC (Med ia Access Control) addre ss.
Prestige 660H/HW Series User’s Guide Chapter 6 LAN Setu p 80 Figure 24 LAN: S tatic DHCP The following table describes the labels in this screen. Table 15 LAN: S tatic DHCP LABEL DESCRIPTION # This is the index number of the St atic IP table entry (row ).
Prestige 660H/HW Series User’s Guide 81 Chapter 6 LAN Setup.
Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 82 C HAPTER 7 W ireless LAN (Prestige 660HW) This chapter discusses how to configure W ireless LAN.
Prestige 660H/HW Series User’s Guide 83 Chapter 7 Wireless LAN (Prestig e 660HW) • Use the Local User Database if you have less than 32 wireless client s in your network. The Prestige uses MD5 encryption when a clie nt authenticates with the Local User Database 7.
Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 84 6 If you have OTIST -enabled clients, configure OTIST in the OTIST scre en. OTIST transfers device SSID and WEP or WP A-PSK key se ttings (if enabled) to wireless clients.
Prestige 660H/HW Series User’s Guide 85 Chapter 7 Wireless LAN (Prestig e 660HW) Figure 26 Wireless Sc reen The following table describes the labels in this screen. Table 16 Wirel ess LAN LABEL DESCRIPTION Enable Wireless LAN Y ou should configure some wireless security (see Figure 25 on page 84 ) when you enable the wireless LAN.
Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 86 Hide ESSID Select Ye s to hide the ESSID in so a station cannot obtain the ESSID through AP scanning. Select No to make the ESSID visible so a st ation can obtain the ESSID through AP scanning.
Prestige 660H/HW Series User’s Guide 87 Chapter 7 Wireless LAN (Prestig e 660HW) Note: If you are configuring the Prestige from a computer connected to the wireless LAN and you change the Prestige’s ESSID or security settings (see F igure 25 on page 84 ), you will lose your wireless connection when you pr ess Apply to confirm.
Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 88 Figure 27 MAC Addres s Filter The following table describes the fields in this menu. Table 17 MAC Address F ilter LABEL DESCRIPTION Active Select Ye s from the drop down list box to enable MAC address filtering.
Prestige 660H/HW Series User’s Guide 89 Chapter 7 Wireless LAN (Prestig e 660HW) 7.5 Introduction to WP A W i-Fi Protected Access (WP A) is a subset of th e IEEE 802.1 1 i standard. WP A is preferred to WEP as WP A has user authentication and improv ed data encryption.
Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 90 Figure 28 WP A - PSK Authentication 7.5.2 WP A with RADIUS Application Example Y ou need the IP address, port number (default is 1812) and share d secret of a RADIUS server .
Prestige 660H/HW Series User’s Guide 91 Chapter 7 Wireless LAN (Prestig e 660HW) Figure 29 WP A with RADIU S Application Example 2 7.5.3 Wireless Client WP A Supplicant s A wireless client supplicant is the software that runs on an operating system instructing the wireless client how to use WP A.
Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 92 Figure 30 Wireless LAN: 802.1x/WP A: No Authentication The following table describes the label in these screens.
Prestige 660H/HW Series User’s Guide 93 Chapter 7 Wireless LAN (Prestig e 660HW) Figure 31 Wireless LAN: 802.1x/WP A: 802.1xl The following table describes the labels in this screen.
Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 94 Note: Once you enable user auth entication, y ou need to specify an external RADIUS server or create local user account s on the Prestige for authentication.
Prestige 660H/HW Series User’s Guide 95 Chapter 7 Wireless LAN (Prestig e 660HW) Figure 32 Wireless LAN: 802.1x/WP A: WP Al The following table describes the labels not previously discussed Table 20 Wireless LAN: 802.1x/WP A: WP Al LABEL DESCRIPTION Key Management Protocol Choose WP A in this field.
Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 96 7.6.3 Authentication Required: WP A-PSK Select Authentication Required in t he Wireless Port Contr ol field and WP A-PSK in the Key Management Protocol fie ld to display the next screen.
Prestige 660H/HW Series User’s Guide 97 Chapter 7 Wireless LAN (Prestig e 660HW) 7.7 Configuring Local User Authentication By storing user profiles locally , your Prestige is able to authenticate wireless users without interacting with a network RADIUS server .
Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 98 7.8 Configuring RADIUS T o set up your Prestige’ s RADIUS server settings, click WIRELESS LAN , R ADIUS . The screen appears as shown. Figure 35 RADIUS The following table describes th e fields in this screen.
Prestige 660H/HW Series User’s Guide 99 Chapter 7 Wireless LAN (Prestig e 660HW) 7.9 Introduction to OTIST In a wireless network, the wireless clients mu st have the same SSID and security settings as the access point (AP) or wireless router (we wi ll refer to both as “AP” here) in order to associate with it.
Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 100 7.9.1.1.1 Reset button If you use the Reset button, the default (01234 567) or previous saved (through the web configurator) Setup key is used to encryp t the settings that you want to transfer .
Prestige 660H/HW Series User’s Guide 101 Chapter 7 Wireless LAN (Prestig e 660HW) 7.9.1.2 Wireless Client Start the ZyXEL utility and click the Adapter tab. Select the OTIST check box, enter the same Setup Key as your AP’ s and click Save . Figure 37 Example Wireless Client OTIST Screen 7.
Prestige 660H/HW Series User’s Guide Chapter 7 Wireles s LAN (Prestige 660H W) 102 7.9.3 Notes on OTIST 1 If you enabled OTIST in the wireless client, you see this screen each time you start the utility . Click Ye s for it to search for an OTIST -enabled AP .
Prestige 660H/HW Series User’s Guide 103 Chapter 7 Wireless LAN (Prestig e 660HW).
Prestige 660H/HW Series User’s Guide Chapter 8 WAN Setup 104 C HAPTER 8 W AN Setup This chapter describes how to configure W AN settings. 8.1 W AN Overview A W AN (W ide Area Network) is an outside conn ection to another network or the Intern et. See Chapter 3 on pa ge 58 for more information on th e fields in the W AN scree ns.
Prestige 660H/HW Series User’s Guide 105 Chapter 8 WAN Setup 8.3 PPPoE Encap sulation The Prestige supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.
Prestige 660H/HW Series User’s Guide Chapter 8 WAN Setup 106 Figure 43 Example of T ra ffic Shaping 8.5 Zero Configuration Internet Access Once you turn on and connect the Prestige to a telephone ja.
Prestige 660H/HW Series User’s Guide 107 Chapter 8 WAN Setup Figure 44 W AN Setup (PPPoE) The following table describes the fields in this screen. Table 25 WAN S e t u p LABEL DESCRIPTION Name Enter the name o f your Internet Service Pr ovider , e.g.
Prestige 660H/HW Series User’s Guide Chapter 8 WAN Setup 108 Encapsulation Select the method of encapsulati on used by your ISP from the drop-down list box. Choices vary depending on the mode you select in th e Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483 .
Prestige 660H/HW Series User’s Guide 109 Chapter 8 WAN Setup 8.7 T raffic Redirect T raffic redirect forwards traffic to a backup gateway when the Prestige cannot connect to the Internet.
Prestige 660H/HW Series User’s Guide Chapter 8 WAN Setup 110 Figure 45 T raffic Redirect Example The following network topology allows you to avoid triangle route security issues when the backup gateway is conn ected to the LAN.
Prestige 660H/HW Series User’s Guide 111 Chapter 8 WAN Setup Figure 47 W AN Backup The following table describes the fields in this screen. Table 26 WAN B a c k u p LABEL DESCRIPTION Backup T ype Select the method that the Prestige uses to check the DSL connection.
Prestige 660H/HW Series User’s Guide Chapter 8 WAN Setup 112 T imeou t T ype the numbe r of seconds (3 recommended) for your Prestige to wait for a ping response from one of the IP addresses in the Check W AN IP Addres s field before timing out the request.
Prestige 660H/HW Series User’s Guide 113 Chapter 8 WAN Setup.
Prestige 660H/HW Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) Screens 114 C HAPTER 9 Network Address T ranslation (NA T) Screens This chapter discusses how to configure NA T on the Prestige.
Prestige 660H/HW Series User’s Guide 115 Chapter 9 Network Address Translation (NAT ) Screens 9.1.2 What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W A N side.
Prestige 660H/HW Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) Screens 116 Figure 48 How NA T W orks 9.1.4 NA T Ap plication The following figure illustrates a possible NA T application, wher e three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct W AN networks.
Prestige 660H/HW Series User’s Guide 117 Chapter 9 Network Address Translation (NAT ) Screens 9.1.5 NA T Mapp ing T yp es NA T supports five types of IP/port mapping. They are: • One to One : In One-to-One mode, the Prestige maps one local IP address to one global IP address.
Prestige 660H/HW Series User’s Guide Chapter 9 Netwo rk Address Translat ion (NAT) Screens 118 9.2 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server .
Prestige 660H/HW Series User’s Guide 119 Chapter 9 Network Address Translation (NAT ) Screens 9.3.3 Configuring Ser vers Behind SUA (Example) Let's say you want to assign po rts 21-25 to one FTP , T elnet and SMTP server (A in the example), port 80 to another (B in the exam ple) and assign a default server IP address of 192.
Prestige 660H/HW Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) Screens 120 9.5 Selecting the NA T Mode Y ou must create a firewall rule in addition to setting up SUA/NA T , to allow traffic from the W AN to be forwarded through the Prestige.
Prestige 660H/HW Series User’s Guide 121 Chapter 9 Network Address Translation (NAT ) Screens Figure 52 Edit SUA/NA T Server Set The following table describes the fields in this screen. T able 31 Edit SUA/NA T Server Set LABEL DESCRIPTION S tart Port No.
Prestige 660H/HW Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) Screens 122 9.7 Configuring Address Mapping Ordering your rules is important because the Pr estige applies the rules in the order that you specify .
Prestige 660H/HW Series User’s Guide 123 Chapter 9 Network Address Translation (NAT ) Screens 9.8 Editing an Address Mapping Rule T o edit an address mapping rule, click the rule’ s link in the NA T Addr ess Mapping Rules screen to display the screen sh own next.
Table 33 Address Mapp ing Rule Edit LABEL DESCRIPTION Ty p e Ch oose the port mapping type from one of the fo llowing. • One-to-One : One-to-One mode maps one local IP address to o ne global IP address. Note that port numbers do not change for One-to-one NA T mapping type.
Prestige 660H/HW Series User’s Guide 125 Chapter 9 Network Address Translation (NAT ) Screens.
Prestige 660H/HW Series User’s Guide Chapter 10 Dy namic DNS Se tup 126 C HAPTER 10 Dynamic DNS Setup This chapter discusses how to configure your Prestige to use Dynamic DNS.
Prestige 660H/HW Series User’s Guide 127 Chapter 10 Dynamic DNS Setup Figure 55 Dynamic DNS The following table describes the fields in this screen. Table 34 Dynamic DNS LABEL DESCRIPTION Active Select this check box to use dynamic DNS. Service Provider This is the na me of your Dynamic DNS se rvice provide r .
Prestige 660H/HW Series User’s Guide Chapter 11 Time an d Date 128 C HAPTER 11 T ime and Date This screen is not available on all models. Us e this screen to configur e the Prestige’ s time and date settings. 1 1.1 Configuring T ime and Date T o change your Prestige’ s time and date, click Time And Date .
Table 35 T ime and Date LABEL DESCRIPTION T ime Server Use Protocol when Bootup Select the time service protocol that your time server sends when you turn on the Prestige. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use tria l and error to find a protocol that works.
Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 130 C HAPTER 12 Firewalls This chapter gives some backgr ound information on firewalls and introduces the Prestige firewall. 12.1 Firewall Overview Originally , the term fir ewall referred to a construction techni que designed to prevent the spread of fire from one room to another .
Prestige 660H/HW Series User’s Guide 131 Chapter 12 Firewalls Information hiding prevents the names of in ternal systems from being made known via DNS to outside systems, since the ap plication gateway is the only ho st whose name must be mad e known to outside systems.
Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 132 12.3.1 Denial of Service Att acks Figure 57 Prestige Firewall Application 12.4 Denial of Service Denials of Service (DoS) attacks are aimed at devices and networks w ith a connection to the Internet.
Table 36 Common IP Ports 21 FTP 53 DNS 23 Te l n e t 80 HTTP 25 SMTP 11 0 POP3 Prestige 660H/HW Series User’s Guide 133 Chapter 12 Firewalls 12.4.2 T ypes of DoS Atta cks There are four types of DoS attacks: 1 Those that exploit bugs in a TCP/IP implementation.
Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 134 Under normal circumstances, the applica tion that initiates a session sends a SYN (synchronize) packet to the receiving server . The receiver sends back an ACK (acknowledgment) packet and its own SYN, and then the in itiator responds with an ACK (acknowledgment).
Prestige 660H/HW Series User’s Guide 135 Chapter 12 Firewalls Figure 60 Smurf Attack 12.4.2.1 ICMP V ulnerability ICMP is an error -reporting protocol that work s in concert with IP .
Table 39 Legal SMTP Commands AUTH DA T A EHLO ETRN EXPN HELO HELP MAIL NOOP QUIT RCPT RSET SAML SEND SOML TURN VRFY Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 136 12.4.2.3 T raceroute T raceroute is a utility used to determine th e path a packet takes between two endpoints.
Prestige 660H/HW Series User’s Guide 137 Chapter 12 Firewalls Figure 61 S tateful Inspection The previous figure shows the Prestige’ s default firewall rules in action as well as demonstrates how stateful inspection works. User A can initiate a T elnet session from within the LAN and responses to this request are allowe d.
Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 138 temporary entries might be modified, in order to permit only packets that a re valid for the current state o f the connection.
Prestige 660H/HW Series User’s Guide 139 Chapter 12 Firewalls When the Prestige receives any subsequent packet (from the In ternet or from the LAN), its connection information is extracted and checked against the cache.
Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 140 • Limit who can telnet into your router . • Don't enable any local service (such as SN MP or NTP) that you don't use. An y enabled service could present a potential sec urity risk.
Prestige 660H/HW Series User’s Guide 141 Chapter 12 Firewalls • Always shred confidential in formation, particularly about your computer , before throwing it away . Some hackers dig through the trash of companies or individuals for information that might he lp them in an attack.
Prestige 660H/HW Series User’s Guide Chapter 12 Firewalls 142 • A range of source an d destination IP address es as well as port numbers can be specified within one firewall rule making the fire wall a better choice when complex rules are required.
Prestige 660H/HW Series User’s Guide 143 Chapter 12 Firewalls.
Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 144 C HAPTER 13 Firewall Configuration This chapter shows you how to enable and configure the Prestige firewall. 13.1 Access Methods The web configurator is, by far , the most co mprehensive firewall configuration tool your Prestige has to offer .
Prestige 660H/HW Series User’s Guide 145 Chapter 13 Firewall Configu r ation Note: If you configure firewall rules wit hout a good understanding of how they work, you might inadvertently introduce securi ty risks to the f irewall and to the protected network.
Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 146 4 Does a rule that allows Internet users acces s to resources on the LAN create a security vulnerability? For example, if FTP ports (TCP 20, 21) are al lowed from the Internet to the LAN, Internet users may be able to connect to computers with running FTP servers.
Prestige 660H/HW Series User’s Guide 147 Chapter 13 Firewall Co nfiguration 13.4.1 LAN to W AN Rules The default rule for LAN to W AN traffic is that all use rs on the LAN are allowed non- restricted access to the W AN.
Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 148 13.4.3 Alert s Alerts are reports on events, such as attacks, that you may want to know about right away .
Prestige 660H/HW Series User’s Guide 149 Chapter 13 Firewall Co nfiguration 13.6 Rule Summary Note: The ordering of your rule s is very important as rules are applie d in turn. Click on Fire wall , then Rule Summary to bring up the following screen.
Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 150 The following table describes the labels in this screen. Table 41 Rule Summary LABEL DESCRIPTION Firewall Rules S torage Sp ace in Use This read-only bar shows how much of the Prestige' s memory for recording fire wall rules it is currently usin g.
Prestige 660H/HW Series User’s Guide 151 Chapter 13 Firewall Configu r ation 13.6.1 Configuring Firewall Rules Follow these directions to create a new rule.
Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 152 Figure 66 Firewall: Edit Rule.
Prestige 660H/HW Series User’s Guide 153 Chapter 13 Firewall Co nfiguration The following table describes the labels in this screen. Table 42 Firewall: Edit Rule LABEL DESCRIPTION Active Select this option to ena ble this firewall rule.
Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 154 13.7 Customized Services Configure customized services and port numb ers not predefined by the Prestige. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website.
Prestige 660H/HW Series User’s Guide 155 Chapter 13 Firewall Co nfiguration Figure 68 Firewall: Configure Customized Services The following table describes the labels in this screen. Table 44 Firewall: Configure Customized Services LABEL DESCRIPTION Service Na me T ype a unique name for your custom port.
Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 156 Figure 69 Firewall Example: Rule Summary 3 In the Rule Summary screen, type the index number for where you want to put the rule. For example, if you type “6”, your new rule becomes number 6 and the previous rule 6 (i f there is one) becomes rule 7.
Prestige 660H/HW Series User’s Guide 157 Chapter 13 Firewall Co nfiguration Figure 70 Firewall Example: Edit Ru le: Des tination Addres s 7 In the Edit Rule screen, click the Customized Servic es link to open the Customized Service screen.
Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 158 Figure 72 Firewall Example: Edit Rule: Select Customized Services Note: Custom ports show up with an “*” before their names in the Services list box and the Rule Summary list box.
Prestige 660H/HW Series User’s Guide 159 Chapter 13 Firewall Co nfiguration Rule 2 allows a “My Service” connection fro m the W AN to IP addresses 10.0.0.10 through 10.0.0.15 on the LAN. Figure 73 Firewall Example: Rule Summary: My Service 13.10 Predefined Services The A vailable Services list box in the Edit Ru le screen (see Section 13.
Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 160 CU-SEEME(TCP/UDP:7648, 24032) A popular videocon ferencing solution from White Pines So ftware. DNS(UDP/TCP:53) Domain Name Serve r , a service that matches web names (e.g. www .
Prestige 660H/HW Series User’s Guide 161 Chapter 13 Firewall Co nfiguration 13.1 1 Anti-Probing If an outside user attempts to probe an unsupp orted port on your Prestige, an ICMP respon se packet is automatically returned. This allows the outside user to know the Prestige exists.
Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 162 Figure 74 Firewall: Anti Probing The following table describes the labels in this screen. Table 46 Firewall: Anti Probing LABEL DESCRIPTION Respond to PING on The Prestige does not respond to any incoming Ping requests when Disable is selected.
Prestige 660H/HW Series User’s Guide 163 Chapter 13 Firewall Configu r ation 13.12.1 Threshold V alues T une these para meters when some thing is not working and after y ou have checked the firewall counters. These default values sh ould work fine for most small offices.
Prestige 660H/HW Series User’s Guide Chapter 13 Firewa ll Configuration 164 Whenever the number of half-o pen sessions with the same destin ation host address rises above a threshold ( TCP Maximum I.
Prestige 660H/HW Series User’s Guide 165 Chapter 13 Firewall Configu r ation One Minute High This is the rate of new h alf-open sessions that causes the firewall to start deleting half-open sessions.
Prestige 660H/HW Series User’s Guide Chapter 14 Content Filtering 166 C HAPTER 14 Content Filtering This chapter covers how to configure content filtering. 14.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs.
Prestige 660H/HW Series User’s Guide 167 Chapter 14 Conte nt Filtering The following table describes the labels in this screen. Table 48 Content Filter: Keywor d LABEL DESCRIPTION Enable Keyword Blocking Select this check box to enabl e this feature.
Prestige 660H/HW Series User’s Guide Chapter 14 Content Filtering 168 The following table describes the labels in this screen. Table 49 Content Filter: Sched ule LABEL DESCRIPTION Days to Block: Select a check box to configure wh ich days of the week (or eve ryday) you want the content filtering to be active.
Prestige 660H/HW Series User’s Guide 169 Chapter 14 Con tent Filter ing.
Prestige 660H/HW Series User’s Guide Chapter 15 Remote Management Configura tion 170 C HAPTER 15 Remote Management Configuration This chapter provides information on config uring remote management.
Prestige 660H/HW Series User’s Guide 171 Chapter 15 Remote Manageme n t Configuration • A filter in SMT menu 3.1 (LAN) or in menu 1 1.5 (W AN) is applied to block a T elnet, FTP or W eb service. • Y ou have disabled that service in one of the remote management screens.
Prestige 660H/HW Series User’s Guide Chapter 15 Remote Management Configuration 172 15.4 W e b Y ou can use the Prestige’ s embedded web configurator for co nfiguration and file management. See the online help for details. 15.5 Configuring Remote Management Click Remote Management to open the following screen.
Prestige 660H/HW Series User’s Guide 173 Chapter 15 Remote Manag ement Configuration.
Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 174 C HAPTER 16 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor .
Prestige 660H/HW Series User’s Guide 175 Chapter 16 Universal Plug-and-Play (UPnP) All UPnP-enabled devices may communicate freely with eac h other without additional configuration.
T able 52 Configuring UPnP LABEL DESCRIPTION Enable the Universal Plug and Play (UPnP) Service Select this checkb ox to activate UPnP . Be aware that anyone co uld use a UPnP application to open the w.
Prestige 660H/HW Series User’s Guide 177 Chapter 16 Universal Plug-and-Play (UPnP) Figure 82 Add/Remove Programs: Windo ws Setup: Communication 3 In the Communications window , select the Universal Plug and Play check bo x in the Components selection box.
Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 178 Inst alling UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP .
Prestige 660H/HW Series User’s Guide 179 Chapter 16 Universal Plug-and-Play (UPnP) Figure 85 Windows O ptional Netwo rking Comp onents Wizard 5 In the Networking Services window , select the Universal Plug and Play check box.
Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 180 Figure 86 Networking Servic es 6 Click OK to go back to the W indows Optional Networking Component W izard window and click Next . 16.4 Using UPnP in Windows XP Example This section shows yo u how to use the UPnP feature in W indows XP .
Prestige 660H/HW Series User’s Guide 181 Chapter 16 Universal Plug-and-Play (UPnP) Figure 87 Network Connections 3 In the Internet Connection Properties window , click Settings to see the port mappings there were automatically created.
Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 182 Figure 88 Internet Co nnection Prop erties 4 Y ou may edit or delete the port mappings o r click Add to manually add port mappings.
Prestige 660H/HW Series User’s Guide 183 Chapter 16 Universal Plug-and-Play (UPnP) Figure 89 Internet Connection Properties: Advanced Settin gs Figure 90 Internet Connection Properties: Advanced Settin gs: Add 5 When the UP nP-enabled device is disco nnected from your computer , all port mapping s will be deleted automatically .
Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 184 Figure 91 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet co nnection status.
Prestige 660H/HW Series User’s Guide 185 Chapter 16 Universal Plug-and-Play (UPnP) Figure 93 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for your Prestige and select Invoke .
Prestige 660H/HW Series User’s Guide Chapter 16 Universal Pl ug-and-Play (UPnP) 186 Figure 94 Network Con nections: M y Network Places 6 Right-click on the icon for your Prestige and select Pr operties . A properties window displays with basic information about the Prestige.
Prestige 660H/HW Series User’s Guide 187 Chapter 16 Universal Plug-and-Play (UPnP).
Prestige 660H/HW Series User’s Guide Chapter 17 Logs Scre ens 188 C HAPTER 17 Logs Screens This chapter contains inform ation about configuring genera l log settings and viewing the Prestige’ s logs. Refer to the appendix for example log message explanations.
Prestige 660H/HW Series User’s Guide 189 Chapter 1 7 Logs Scre ens Figure 96 Log Settings The following table describes the fields in this screen. Table 53 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below .
Prestige 660H/HW Series User’s Guide Chapter 17 Logs Scre ens 190 17.3 Displaying the Logs Click Logs and then Vi e w L o g to open the Vi e w L o g s screen. Use the Vi e w L o g s screen to see the logs for the categorie s that you selected in the Log Settings screen (s ee Section 17.
Prestige 660H/HW Series User’s Guide 191 Chapter 1 7 Logs Scre ens Figure 97 Vi ew Logs The following table describes the fields in this screen. Table 54 View Logs LABEL DESCRIPTION Display Th e categories that you select in the Log Settings screen (see Section 17.
Prestige 660H/HW Series User’s Guide Chapter 17 Logs Scre ens 192 17.4.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edit the subject title.
Prestige 660H/HW Series User’s Guide 193 Chapter 1 7 Logs Scr eens.
Prestige 660H/HW Series User’s Guide Chapter 18 Media Bandwid th Manage ment Advan ced Setup 194 C HAPTER 18 Media Bandwid th Management Advanced Setup This chapter describes the functions and advan ced configuration of bandwidth man agement.
Prestige 660H/HW Series User’s Guide 195 Chapter 18 Media Bandwidth Manag ement Advanced Setup you configure child-classes with filters for any classes that you configure without filters. The Prestige leaves the bandwidth bud get allocated and unused for a class that does not have a filter itself or child-classes with filters.
Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 196 Figure 100 Subnet-based Ba ndwidt h Management Example 18.
Prestige 660H/HW Series User’s Guide 197 Chapter 18 Media Bandwidth Manag ement Advanced Setup 18.5 Scheduler The scheduler divides up an interface’ s bandwi dth among the bandwidth classes. The Prestige has two types of schedule r: fair ness-based and priority-based.
Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 198 18.6.2 Maximize Ba ndwid th Usag e Example Here is an example of a Prestige that has ma xi mized bandwidth usage ena bled on an interface. The first figure shows each bandwidth class’ s bandwidth bu dget and pr iority .
Prestige 660H/HW Series User’s Guide 199 Chapter 18 Media Bandwidth Manag ement Advanced Setup Figure 103 Maximize Bandwid th Usage Example 18.7 Bandwid th Borrowing Bandwidth borrowing allows a chi.
Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 200 Figure 104 Bandwidth Borrowing Example • The Administration and Sales classes canno t borrow unused bandwidt h from the Root class because the Administration and Sale s classes has bandwidth borrowing disabled.
Prestige 660H/HW Series User’s Guide 201 Chapter 18 Media Bandwidth Manag ement Advanced Setup Figure 105 Media Bandwid th Management: Summary The following table describes the labels in this screen. Table 57 Media Bandwid th Management: Summary LABEL DESCRIPTION LAN WLAN WA N These read-only labels represent the physical inte rfaces.
Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 202 18.9 Configuring Class Setup The class setup screen displays the configured band width classes by individual interface. Select an interface and click the buttons to pe rform the actions described n ext.
Prestige 660H/HW Series User’s Guide 203 Chapter 18 Media Bandwidth Manag ement Advanced Setup 18.9.1 DiffServ DiffServ is a class of service (CoS) mode l that ma rks packets so that the y receive specific per- hop treatment at DiffServ-compliant network de vices along the route based on the application types and traf fic flow .
Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 204 Figure 108 Media Bandwid th Management: Class Configuration The following table describes the labels .
Prestige 660H/HW Series User’s Guide 205 Chapter 18 Media Bandwidth Manag ement Advanced Setup Enable DiffSer v Marking Select this option to enable DiffServ marking on the Presti ge. DiffSer v Mark Select the marking ru le from the drop -down list.
Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 206 18.9.3 Media Bandwid th Management St atistics Use the Media Bandwidth Management S tatistics screen to view network performance information. Click the S tatistics button in the Clas s Setup screen to open the St a t i s t i c s screen.
Prestige 660H/HW Series User’s Guide 207 Chapter 18 Media Bandwidth Manag ement Advanced Setup Figure 109 Media Bandwid th Management S tatistics The following table describes the labels in this screen.
Prestige 660H/HW Series User’s Guide Chapter 18 Media Band width Manage ment Adv anced Setup 208 Figure 1 10 Media Bandwid th Management: Monito r The following table describes the labels in this screen.
Prestige 660H/HW Series User’s Guide 209 Chapter 18 Media Bandwidth Manag ement Advanced Setup.
Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 210 C HAPTER 19 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics.
Prestige 660H/HW Series User’s Guide 211 Chapter 19 Maintenance Figure 1 1 1 System S tatus The following table describes the fields in this screen. Table 63 System S tatus LABEL DESCRIPTION System S tatus System Name This is the name of your Prestige.
Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 212 19.2.1 System St atistics Click Show S tatistics in the System S tatus scre en to open the following screen. Read-only information here includes port status and packet specific statistics.
Prestige 660H/HW Series User’s Guide 213 Chapter 19 Maintenance Figure 1 12 System S tatus: Show S tatistics The following table describes the fields in this screen. Table 64 System S tatus: Show S tatistics LABEL DESCRIPTION System up T ime This is the elapsed time the system has been up.
Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 214 19.3 DHCP T able Screen DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at star t-up from a server . Y ou can configure the Prestige as a DHCP server or disable it.
Prestige 660H/HW Series User’s Guide 215 Chapter 19 Maintenance 19.4 Any IP T able Screen Click Maintenance , Any IP . The Any IP table shows cu rrent read-only information (including the IP address and the MAC addr ess) of all network devices that use the Any IP feature to communicate with the Prestige.
Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 216 Figure 1 15 Association List The following table describes the fields in this screen. T able 67 Association Lis t LABEL DESCRIPTION # This is the index number of an associ ated wireless station.
Prestige 660H/HW Series User’s Guide 217 Chapter 19 Maintenance Figure 1 16 Diagnostic: General The following table describes the fields in this screen. T able 68 Diagnostic: General LABEL DESCRIPTION TCP/IP Address T ype the IP address of a computer that you w ant to ping in order to test a conn ection.
Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 218 Figure 1 17 Diagnostic: DSL Line The following table describes the fields in this screen. Table 69 Diagnostic: DSL Line LABEL DESCRIPTION Reset ADSL Line Click this button to reinitialize the ADSL line.
Prestige 660H/HW Series User’s Guide 219 Chapter 19 Maintenance 19.7 Firmware Screen Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a .bin extension, for example, "Prestige.bin" . The upload process uses HTTP (Hypertext T ransfer Protocol) and may take up to two minu tes.
Prestige 660H/HW Series User’s Guide Chapter 19 Maintenance 220 The Prestige automatically restarts in this time causing a temporary networ k disconnect.
Prestige 660H/HW Series User’s Guide 221 Chapter 19 Maintenance.
Prestige 660H/HW Series User’s Guide Chapter 20 Intro ducing the SMT 222 C HAPTER 20 Introducing the SMT This chapter explains how to access and na viga te the System Management T erminal and gives an overview of its menus.
Prestige 660H/HW Series User’s Guide 223 Chapter 20 Intro ducing the SMT Figure 121 Enter Password : **** Login Screen 20.1.3 Prestige SMT Menu Overview W e use the Prestige 660HW -61 SMT menus in this guide as an example. The SMT menus vary slightly for dif ferent Prestige models.
Prestige 660H/HW Series User’s Guide Chapter 20 Intro ducing the SMT 224 Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below .
Prestige 660H/HW Series User’s Guide 225 Chapter 20 Intro ducing the SMT 20.2.1 System Manage ment T erminal Interface Summary T able 73 Main Menu Summary # MENU TITLE DESCRIPTION 1 General Setup Use this menu to set up your general information. 2 W AN Backup Setup Use this menu to setup traffic redirect and dial-back up.
Prestige 660H/HW Series User’s Guide Chapter 20 Intro ducing the SMT 226 Figure 123 Menu 23.1 - System Security - Change Password Old Password= ? New Password= ? Retype to confirm= ? Enter here to CONFIRM or ESC to CANCEL: Menu 23.
Prestige 660H/HW Series User’s Guide 227 Chapter 20 Intr oducing the SMT.
Prestige 660H/HW Series User’s Guide Chapter 21 Menu 1 G eneral Setu p 228 C HAPTER 21 Menu 1 General Setup Menu 1 - General Setup contains administra tive an d system-related information. 21.1 General Setup Menu 1 — General Setup contains administrative and system-related information (shown next).
Prestige 660H/HW Series User’s Guide 229 Chapter 21 Menu 1 G eneral Setup Figure 124 Menu 1 General Setup Menu 1 General Setup System Name= ? Location= Contact Person's Name= Domain Name= Edit Dynamic DNS = No Route IP= Yes Bridge= No Press ENTER to Confirm or ES C to Cancel: Fill in the required fields.
Prestige 660H/HW Series User’s Guide Chapter 21 Menu 1 G eneral Setu p 230 Figure 125 Menu 1.1 Configure Dyn amic DNS Menu 1.1 - Configure Dynamic DNS Service Provider= WWW.
Prestige 660H/HW Series User’s Guide 231 Chapter 21 Menu 1 G eneral Setup.
Prestige 660H/HW Series User’s Guide Chapter 22 M enu 2 WAN Backu p Setup 232 C HAPTER 22 Menu 2 W AN Backup Setup This chapter describes how to co nfigure traffic redirect and dial-backup using menu 2 and 2.
Prestige 660H/HW Series User’s Guide 233 Chapter 22 Menu 2 WAN Backup Setup 22.2.1 T raffic Redirect Setup Configure parameters that determine when th e Prestige will forward W AN traffic to the backup gateway using Menu 2.1 — T raffic Redir ect Setup .
Prestige 660H/HW Series User’s Guide Chapter 22 M enu 2 WAN Ba ckup Setup 234 Metric This field sets this route's priori ty among the routes the Prestige uses. The metric represents the "cost of transm ission". A router determine s the best route for transmission by choosing a path with th e lowest "cost".
Prestige 660H/HW Series User’s Guide 235 Chapter 22 Menu 2 WAN Backup Setup.
Prestige 660H/HW Series User’s Guide Chapter 23 Menu 3 L AN Setup 236 C HAPTER 23 Menu 3 LAN Setup This chapter covers how to configure your wired Local Area Network (LAN) settings. 23.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 — LAN Setup .
Prestige 660H/HW Series User’s Guide 237 Chapter 23 Menu 3 LAN Setup 23.2 Protocol Dependent Ethernet Setup Depending on the proto cols for your applications, yo u need to configure the respective Ethernet Setup, as outlined below . • For TCP/IP Ethernet setup refer to Section 25.
Prestige 660H/HW Series User’s Guide Chapter 23 Menu 3 L AN Setup 238 Follow the instructions in the following table on how to configure th e DHCP fields.
Prestige 660H/HW Series User’s Guide 239 Chapter 23 Menu 3 LAN Setup.
Prestige 660H/HW Series User’s Guide Chapter 24 Wirele ss LAN Setup 240 C HAPTER 24 W ireless LAN Setup This chapter covers how to configure wireless LAN settings in SMT menu 3.5. 24.1 Wireless LAN Overview Refer to the chapter on the wireless LAN scr eens for wireless LAN background information.
Prestige 660H/HW Series User’s Guide 241 Chapter 24 Wireless LAN Setup 24.2.1 Wireless LAN MAC Address Filter The next layer of security is MAC address filter . T o allow a wireless st ation to associate with the Prestige, enter the MAC address of the wireless LAN ada pter on that wireless station in the MAC address table.
Prestige 660H/HW Series User’s Guide Chapter 24 Wirele ss LAN Setup 242 Figure 132 Menu 3.5.1 WLAN MAC Address Filtering Menu 3 .5.1 - WLAN MAC Address Filter Active= No Filter A ction= Allowed Asso.
Prestige 660H/HW Series User’s Guide 243 Chapter 24 Wireless LAN Setup.
Prestige 660H/HW Series User’s Guide Chapter 25 In ternet Access 244 C HAPTER 25 Internet Access This chapter shows you how to configure the LAN and W AN of your Prestige for Int ernet access .
Prestige 660H/HW Series User’s Guide 245 Chapter 25 Internet Access Figure 133 IP Alias Network Example Use menu 3.2.1 to configure IP Alias on your Prestige.
Prestige 660H/HW Series User’s Guide Chapter 25 In ternet Access 246 Figure 135 Menu 3.2.1 IP Alias Setup Menu 3.2.1 - IP Alias Setup IP Alias 1= No IP Address= N/A IP Subnet Mask= N/A RIP Direction.
Prestige 660H/HW Series User’s Guide 247 Chapter 25 Internet Access Figure 136 Menu 1 General Setup Menu 1 - General Setup System Name= ? Location= locatio n Contact Person's Name= Domain Name= Edit Dynamic DNS= No Route IP= Yes Bridge= No Press ENTER to Confirm or ES C to Cancel: 25.
Prestige 660H/HW Series User’s Guide Chapter 25 In ternet Access 248 . Table 83 Menu 4 Internet Access Setup FIELD DESCRIPTION ISP’s Name Enter the name of your Internet Service Provider (ISP). This information is for identification purposes only .
Prestige 660H/HW Series User’s Guide 249 Chapter 25 Internet Access.
Prestige 660H/HW Series User’s Guide Chapter 26 Remot e Node Configur ation 250 C HAPTER 26 Remote Node Configuration This chapter covers remo te node configuration. 26.1 Remote Node Setup Overview This section describes the protocol-independent parameters for a remote node.
Prestige 660H/HW Series User’s Guide 251 Chapter 26 Remote Node Configuration Figure 138 Menu 1 1 Remote Node Setup Menu 11 - Remote N ode Setup 1. MyISP (ISP, SUA) 2. ________ 3. ________ 4. ________ 5. ________ 6. ________ 7. ________ 8. ________ Enter Node # to Edit: 26.
Prestige 660H/HW Series User’s Guide Chapter 26 Remot e Node Configur ation 252 Figure 139 Menu 1 1.1 Remote Node Profile Menu 11.1 - Re mote Node Profile Rem Node Name= MyISP Route= IP Active= Yes .
Prestige 660H/HW Series User’s Guide 253 Chapter 26 Remote Node Configuration 26.2.3 Outgoing Au thentication Protocol For obvious reasons, you sho uld employ the strongest authentication protocol possible. However , some vendors’ implementation includ es specific authentication protocol in the user profile.
Prestige 660H/HW Series User’s Guide Chapter 26 Remot e Node Configur ation 254 26.3 Remote Node Network Layer Options For the TCP/IP parameters, perf orm the following steps to edit Menu 1 1.3 – Remote Node Network Layer Options as shown next. 1 In menu 1 1.
Prestige 660H/HW Series User’s Guide 255 Chapter 26 Remote Node Configuration 26.3.1 My W AN Addr Sample IP Addresses The following figure uses sample IP addresses to help you understand the field of My W AN Addr in menu 1 1.
Prestige 660H/HW Series User’s Guide Chapter 26 Remot e Node Configur ation 256 Figure 141 Sample IP Addresses for a TC P/IP LAN-to-LAN Connection 26.4 Remote Node Filter Move the cu rs or to the Edit Filter Sets field in menu 1 1 .1, then press [SP ACE BAR] to select Ye s .
Prestige 660H/HW Series User’s Guide 257 Chapter 26 Remote Node Configuration Figure 143 Menu 1 1.5 Remote Node Filter (PPPoA or PPPoE Encapsulation) Menu 11.
Prestige 660H/HW Series User’s Guide Chapter 26 Remot e Node Configur ation 258 Figure 145 Menu 1 1.6 for LLC-based Multip lexing or PPP Encapsulation Menu 11.
Prestige 660H/HW Series User’s Guide 259 Chapter 26 Remote Node Configuration Figure 147 Menu 1 1.8 Advance Setu p Options Menu 11.8 - Ad vance Setup Options PPPoE pass-through = No Press ENTER to Con firm or ESC to Cancel: The following table describes the fields in this menu.
Prestige 660H/HW Series User’s Guide Chapter 27 Static Route Setup 260 C HAPTER 27 S t atic Route Setup This chapter shows how to setup IP static routes. 27.1 IP S tatic Route Overview Stat ic routes tell the Prestige ro uting information that it cann ot learn automatically through other means.
Prestige 660H/HW Series User’s Guide 261 Chapter 27 Static Route Setup Figure 149 Menu 12 S ta tic Route Setup Menu 12 - Static Route Setup 1. IP Static Route 3. Bridge Static Route Please enter s election: From menu 12, select 1 to open Menu 12.1 — IP S tatic Route Setup (show n next).
Prestige 660H/HW Series User’s Guide Chapter 27 Static Route Setup 262 The following table describes the fields for Menu 12.1.1 – Edit IP S tatic Route Setup . T able 87 Menu12.1.1 Edit IP S tatic Route FIELD DESCRIPTION Route # This is the index number of the static route that you chose in menu 12.
Prestige 660H/HW Series User’s Guide 263 Chapter 27 Static Route Setup.
Prestige 660H/HW Series User’s Guide Chapter 28 Bridgin g Setup 264 C HAPTER 28 Bridging Setup This chapter shows you how to configure the bridgin g parameters of your Prestige.
Prestige 660H/HW Series User’s Guide 265 Chapter 28 Bridging Setu p Figure 152 Menu 1 1.1 Remote Node Profile Menu 11.1 - Remote Node Profile Rem Node Name= ? Route= IP Active= Yes Bridge= Yes Encap.
Prestige 660H/HW Series User’s Guide Chapter 28 Bridgin g Setup 266 28.2.2 Bridge St atic Route Setup Similar to network layer static routes, a bridging static route tells the Prestige the route to a node before a connectio n is established. Y o u c onfigure b ridge static routes in menu 12.
Prestige 660H/HW Series User’s Guide 267 Chapter 28 Bridging Setu p.
Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 268 C HAPTER 29 Network Address T ranslation (NA T) This chapter discusses how to configure NA T on the Prestige.
Prestige 660H/HW Series User’s Guide 269 Chapter 29 Network Addr ess Translation (NAT) Figure 155 Menu 4 Applying NA T for Internet Access Menu 4 - Internet Access Set up ISP's Name= MyIS P Enc.
T able 90 Applying NA T in Menus 4 & 1 1.3 FIELD DESCRIPTION NA T Press [SP ACE BAR] and th en [ENTER] to select Full Feature if you have multi ple public W AN IP add resses for your Prestige. The SMT uses the address mapping set that you configure and e nter in the A ddress Mapp ing Set field (see Figure 158 on page 271 ).
Prestige 660H/HW Series User’s Guide 271 Chapter 29 Network Addr ess Translation (NAT) Figure 158 Menu 15.1 Addr ess Mapping Sets Menu 15.1 - Address Mapping Sets 1. 2. 3. 4. 5. 6. 7. 8. 255. SUA (read only) Enter Menu Selection Number: 29.3.1.1 SUA Address Mapping Set Enter 255 to display th e next screen (see also Sect ion 29.
Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 272 29.3.1.2 User-Defined Address Mapping Set s Now let’ s look at option 1 in menu 15.1. En ter 1 to bring up this menu. W e’ll just look at the differences from the previous menu.
Prestige 660H/HW Series User’s Guide 273 Chapter 29 Network Addr ess Translation (NAT) 29.3.1.3 Ordering Y our Rules Ordering your rules is important because the Pr estige applies the rules in the order that you specify . When a rule matches the current pack et, the Prestige takes the corresponding action and the remaining rules are ignored.
Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 274 The following table explains the fields in t his menu. Table 93 Menu 15.1.1.1 Editi ng/Configuring an Individual Rule in a Set FIELD DESCRIPTION Ty p e Press [SP ACE BAR] and then [ENTER] to select from a total of five types.
Prestige 660H/HW Series User’s Guide 275 Chapter 29 Network Addr ess Translation (NAT) Figure 163 Menu 15.2.1 NA T Server Setup Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address ---------------------- ----------------------------- 1.
Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 276 29.5.1 Example 1: Internet Access Only In the following Internet access example, you only need one rule where your ILAs (Inside Local addresses) all map to one dynamic IGA (In side Global Address) assigned by your ISP .
Prestige 660H/HW Series User’s Guide 277 Chapter 29 Network Addr ess Translation (NAT) Figure 167 NA T Examp le 2 In this case, you do exactly as above (use the convenient pre-configured SUA Only set) and also go to menu 15.2 to specify the Inside Server behind the NA T as shown in the next figure.
Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 278 Map the other outgoing LAN traffic to IGA3 ( Many : 1 mapping). Y ou also map your third IGA to the web server and mail server on the LAN. T ype Server allows you to specify multiple se rvers, of dif ferent types, to other computers behind NA T on the LAN.
Prestige 660H/HW Series User’s Guide 279 Chapter 29 Network Addr ess Translation (NAT) Figure 170 Example 3: Menu 1 1.3 Menu 11.3 - Remote Node Netw ork Layer Options IP Options: Bridge Options: IP Address Assignment= S tatic Ethernet Addr Timeout (min)= 0 Rem IP Addr: 0.
Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 280 Figure 172 Example 3: Final Menu 15.1.1 Menu 15.1.1 - Address Mappin g Rules Set Name= Example3 Idx Local Start IP Local End IP Global Start IP Global End IP T ype --- --------------- ------------- --------------- ------- ------- ---- 1.
Prestige 660H/HW Series User’s Guide 281 Chapter 29 Network Addr ess Translation (NAT) 29.5.4 Example 4: NA T Unfr iendly Application Programs Some applications do not support NA T Mapping using TCP or UDP port address translation.
Prestige 660H/HW Series User’s Guide Chapter 29 Network Address Translation (NAT) 282 Figure 176 Example 4: Menu 15.1.1 Addre ss Mapping Rules Menu 15.1.1 - Address Mappin g Rules Set Name= Example4 Idx Local Start IP Local End IP Global Start IP Global End IP T ype --- --------------- ------------ --------------- ----------- ---- ---- 1.
Prestige 660H/HW Series User’s Guide 283 Chapter 29 Network Addr ess Translation (NAT).
Prestige 660H/HW Series User’s Guide Chapter 30 Enablin g the Firewall 284 C HAPTER 30 Enabling the Firewall This chapter shows you how to get started with the Prestige firewall.
Prestige 660H/HW Series User’s Guide 285 Chapter 30 Enablin g the Firewall Figure 177 Menu 21.2 Firewa ll Setup Menu 21.2 - Firewall Setup The firewall protects against Denial of Service (DOS) attacks w hen it is active. The defa ult Policy sets 1. allow all sessi ons originating from the LAN to the WAN a nd 2.
Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 286 C HAPTER 31 Filter Configuration This chapter shows you how to create and apply filters. 31.1 About Filtering Y our Prestige uses filters to deci de whether or not to allow passage of a data packet and/or to make a call.
Prestige 660H/HW Series User’s Guide 287 Chapter 31 Filter Configuration Figure 179 Filter Rule Process Y ou can apply up to four filter sets to a partic ular port to block various types of packets. Because each filter set can have up to six rules, you can have a maximum of 24 rules active for a single port.
Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 288 31.2 Configuring a Filter Set for the Prestige T o configure a filter set, follow the steps shown ne xt. 1 Enter 21 in the main menu to display Menu 21 – Filter and Fir ewall Setup .
Prestige 660H/HW Series User’s Guide 289 Chapter 31 Filter Configuration Figure 182 NetBIOS_LAN Filter Rules Summary Menu 21.1.3 - Filter Rules S ummary # A Type Filter Rules M m n - - ---- ----------------- ---------------------------------------- --- - - - 1 Y IP Pr=17, SA=0.
Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 290 The protocol dependent filter rules abbreviation are listed as follows: Table 95 Rule Abbreviations Used FILTER TYPE DESCRIPTION IP Pr Protocol SA Source Address SP Source Port Number DA Destination Address DP Destination Port Number GEN Off Offset Len Length 31.
Prestige 660H/HW Series User’s Guide 291 Chapter 31 Filter Configuration 31.4.1 TCP/IP Filter Rule This section shows you how to configure a TCP/IP filter rule. TCP/IP rules allow you to base the rule on the fiel ds in the IP and the upper layer protocol, for example, UDP and TCP headers.
Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 292 The following figure illustrates th e logic flow of an IP filter. Port # T ype the desti nation port of the packets you want to filter . The fie ld range is 0 to 65535. A 0 field i s ignored.
Prestige 660H/HW Series User’s Guide 293 Chapter 31 Filter Configuration Figure 185 Executing an IP Filter 31.4.2 Generic Filter Rule This section shows you how to co nfigure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets.
Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 294 T o configure a generic rule select an empty filter set in menu 21, for example 5. Select Generic Filter Rule in the Filter T ype field and press [ENTER] to open Menu 21.1.5.1 – Generic Filter Rule , as shown in th e following figure.
Prestige 660H/HW Series User’s Guide 295 Chapter 31 Filter Configuration 31.5 Filter T ypes and NA T There are two classes of filter rules, Generic Filter Device rules and Protocol Filter ( TCP/IP ) rules. Generic Filter rules act on the raw data from/ to LAN and W AN.
Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 296 Figure 188 Sample T elnet Filter 1 Enter 1 in the menu 21 to display Menu 21.1 — Fi lter Set Configuration . 2 Enter the index number of th e filter set you want to configure (in this case 6) .
Prestige 660H/HW Series User’s Guide 297 Chapter 31 Filter Configuration 2 Go to the Edit Filter Sets field, press [SP ACE BAR] to choose Ye s and press [ENTER]. This brings you to menu 1 1.5. Apply the example filter set (for example, filter set 3) in this menu as shown in the next section.
Prestige 660H/HW Series User’s Guide Chapter 31 Filter Configuration 298 31.7.1 Ethernet T raffic Y ou seldom need to filter Ethernet traffic; however , the filter sets may be useful to block certain packets, reduce traffic and prevent secur ity breaches.
Prestige 660H/HW Series User’s Guide 299 Chapter 31 Filter Configuration.
Prestige 660H/HW Series User’s Guide Chapter 32 SNMP Configuration 300 C HAPTER 32 SNMP Configuration This chapter explains SNMP Configuratio n menu 22. 32.1 About SNMP Simple Network Management Protocol (SNM P) i s a protocol u sed for exchanging management information b etween network devices.
Prestige 660H/HW Series User’s Guide 301 Chapter 32 SNMP Configu ration The managed devices cont ain object variables/ managed objects that define each piece of information to be collected ab out a device. Examples of vari ables include the number of packets received, node port status etc.
Prestige 660H/HW Series User’s Guide Chapter 32 SNMP Configuration 302 Figure 194 Menu 22 SNMP Configura tion Menu 22 - SNMP Configuration SNMP: Get Community= public Set Community= public Trusted Host= 0.0.0.0 Trap: Community= public Destination= 0.
Prestige 660H/HW Series User’s Guide 303 Chapter 32 SNMP Configu ration The port number is its interface index under the interface group. T able 101 Ports and Pe rmanent V irtual Circuit s PORT PVC .
Prestige 660H/HW Series User’s Guide Chapter 33 Sy stem Security 30 4 C HAPTER 33 System Security This chapter describes how to configur e the system security on the Prestige. 33.1 System Security Y ou can configure the system password.. 33.1.1 System Password Enter 23 in the main menu to display Menu 23 – System Security .
Prestige 660H/HW Series User’s Guide 305 Chapter 33 System Security Figure 196 Menu 23.2 System Security: RADIUS Server Menu 23.2 - System Security - RADIUS Server Authentication Server: Active= No Server Addre ss= 10.11.12.13 Port #= 1812 Shared Secre t= ******** Accounting Ser ver: Active= No Server Addre ss= 10.
Prestige 660H/HW Series User’s Guide Chapter 33 Sy stem Security 30 6 33.1.3 IEEE802.1x The IEEE802.1x standards outline enhanced secur ity methods for both the authentication of wireless stations and en cryption key managemen t. Follow the steps below to enable EA P authentication on your Prestige.
Prestige 660H/HW Series User’s Guide 307 Chapter 33 System Security T able 103 Menu 23.4 System Se curity : IEEE802.1x FIELD DESCRIPTION Wireless Port Control Press [SP ACE BAR] and select a securi ty mode for the wireless LAN access.
Prestige 660H/HW Series User’s Guide Chapter 33 Sy stem Security 30 8 Once you enable user authenticatio n, you need to specify an exte rnal RADIUS server or create local user accounts on the Prestige for authentication.
Prestige 660H/HW Series User’s Guide 309 Chapter 33 System Security Figure 199 Menu 14 Dial-in User Setup Menu 14 - D ial-in User Setup 1. ________ 9. ____ ____ 17. ________ 25. _____ ___ 2. ________ 10. ____ ____ 18. ________ 26. _____ ___ 3. ________ 11.
Prestige 660H/HW Series User’s Guide Chapter 34 System Information and Diagnosis 310 C HAPTER 34 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.
Prestige 660H/HW Series User’s Guide 311 Chapter 34 System Information and Diagnosis The following table describes the fields present in Menu 24.1 — System Maintenance — St a t u s which are read-only and meant for diagnostic p urposes. Figure 202 Menu 24.
Prestige 660H/HW Series User’s Guide Chapter 34 System Information and Diagnosis 312 34.3 System Information T o get to the System Information: 1 Enter 24 to display Menu 24 — System Maintenance . 2 Enter 2 to display Menu 24.2 — System Information a nd Console Port Speed.
Prestige 660H/HW Series User’s Guide 313 Chapter 34 System Information and Diagnosis Figure 204 Menu 24.2.1 System Maintena nce: Information Menu 24.2.1 - System Maintenance - Information Name: P6 60HW Routing: IP ZyNOS F/ W Version: V3.40(PE.8) | 12/23/2004 ADSL Chi pset Vendor: TI AR7 03.
Prestige 660H/HW Series User’s Guide Chapter 34 System Information and Diagnosis 314 Figure 205 Menu 24.2.2 System Maintena nce : Change Console Port S peed Menu 24.
Prestige 660H/HW Series User’s Guide 315 Chapter 34 System Information and Diagnosis Figure 207 Sample Error an d Informat ion Message s 53 Sat Jan 01 00:00:03 200 0 PP01 -WARN SNMP TRAP 0: cold sta.
Prestige 660H/HW Series User’s Guide Chapter 34 System Information and Diagnosis 316 Figure 209 Syslog Example 1 - CDR SdcmdSyslogSend ( SYSLOG_CDR, SYSLOG _INFO, String); String = board xx line xx .
Prestige 660H/HW Series User’s Guide 317 Chapter 34 System Information and Diagnosis 34.5 Diagnostic The diagnostic facility allows you to test the di f ferent aspects of your Prestige to determine if it is working properly .
Prestige 660H/HW Series User’s Guide Chapter 34 System Information and Diagnosis 318 The following table describes the diagnostic tests available in menu 24.4 for and the connections. T able 108 Menu 24.4 System Maintenance Menu: Diagnostic FIELD DESCRIPTION Reset xDSL Re-initialize the xDSL link to the telephone company .
Prestige 660H/HW Series User’s Guide 319 Chapter 34 System Information and Diagnosis.
Prestige 660H/HW Series User’s Guide Chapter 35 Firm ware and Configuration File Maintenance 320 C HAPTER 35 Firmware and Configuration File Maintenance This chapter tells y ou how to backup and restor e your configuration file as well as upload new firmware and configuration files.
Prestige 660H/HW Series User’s Guide 321 Chapter 35 Firmw are and Configu ration File Mainten ance The following table is a summary . Please note that the internal filename refe rs to the filename o.
Prestige 660H/HW Series User’s Guide Chapter 35 Firmwa re and Configuration F ile Maintenance 322 Figure 21 1 T elnet in Menu 24.5 Menu 24.5 - System Maintenan ce - Backup Configuration To transfer the configurati on file to your workstation, follow the procedure below: 1.
Prestige 660H/HW Series User’s Guide 323 Chapter 35 Firmw are and Configu ration File Mainten ance Figure 212 FTP Session Example 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel.rom 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 16384 bytes sent in 1.
Prestige 660H/HW Series User’s Guide Chapter 35 Firm ware and Configuration File Maintenance 324 35.2.6 Backup Configuration Using TFTP The Prestige support s the up/downloading of the firmware and the configuration file using TFTP (T rivial File T ransfer Protocol) over LA N.
Table 111 General Commands for GUI-based TFTP Clients COMMAND DESCRIPTION Host Enter the IP address of the Prestige. 192 .168. 1.1 is the Prestige’s default IP address when shipped. Send/Fetch Use “Send” to upload the file to the Prestige and “Fetch” to back up the file on your computer .
Prestige 660H/HW Series User’s Guide Chapter 35 Firmwa re and Configuration F ile Maintenance 326 Figure 213 T elnet into M enu 24.6 Menu 24.6 -- System Maintena nce - Restore Configuration To transfer the firmware and configuration file to your workstation, follow the procedure below: 1.
Prestige 660H/HW Series User’s Guide 327 Chapter 35 Firmw are and Configu ration File Mainten ance 35.4 Uploading Firmware and Configuration Files This section shows yo u how to upload firmware and co nfiguration files. Y ou can upload configuration files by following the procedure in Section 35.
Prestige 660H/HW Series User’s Guide Chapter 35 Firmwa re and Configuration F ile Maintenance 328 Figure 216 T elnet Into Menu 24.7.2 System Maintenance Menu 24.7.2 - System Mainten ance - Upload System Configuration File To upload the system configu ration file, follow the procedure below: 1.
Prestige 660H/HW Series User’s Guide 329 Chapter 35 Firmw are and Configu ration File Mainten ance 35.4.4 FTP Session Exampl e of Firmware File Upload Figure 217 FTP Session Example of Firmware File Upload 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> put firmware.
Prestige 660H/HW Series User’s Guide Chapter 35 Firm ware and Configuration File Maintenance 330 35.4.6 TFTP Upload Command Example The following is an example TFTP command: tftp [-i] host put firmware.
Prestige 660H/HW Series User’s Guide 331 Chapter 35 Firmw are and Configu ration File Maint enance.
Prestige 660H/HW Series User’s Guide Chapter 36 System Main tenance 332 C HAPTER 36 System Maintenance This chapter leads you through SM T menus 24.8 to 24.10. 36.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the ma in system firmware.
Prestige 660H/HW Series User’s Guide 333 Chapter 36 System Mainte nance 36.2 Call Control Support Call Control Support is only applicable when Encapsulation is set to PPPoE in menu 4 or menu 1 1 .1. The budget management func tion allows you to set a limit on the total outgoing call time of the Prestige within certain times.
Prestige 660H/HW Series User’s Guide Chapter 36 System Main tenance 334 The total budget is the time li mit on the accumulated time for ou tgoing calls to a remo te node. When this limit is reached, th e call will be dropped and further outgoing calls to that remote node will be blocked.
Prestige 660H/HW Series User’s Guide 335 Chapter 36 System Mainte nance Figure 223 Menu 24.10 System Maintenance : T ime and Date Setting Menu 24.10 - System Maintena nce - Time and Date Setting Use.
Prestige 660H/HW Series User’s Guide Chapter 36 System Mainte nance 336 • 24-hour intervals after starting..
Prestige 660H/HW Series User’s Guide 337 Chapter 36 System Main tenance.
Prestige 660H/HW Series User’s Guide Chapter 37 Remo te Management 338 C HAPTER 37 Remote Management This chapte r covers re mote mana gement (SM T menu 24. 11). 37.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) from which computers.
Prestige 660H/HW Series User’s Guide 339 Chapter 37 Remote Manageme nt Figure 224 Menu 24.1 1 Remote Ma nagement Control Menu 24.11 - Remote Manageme nt Control TELNET Server: Server Port = 23 Server Access = LAN only Secured Client IP = 0.0.0 .0 FTP Server: Server Port = 21 Server Access = LAN only Secured Client IP = 0.
Prestige 660H/HW Series User’s Guide Chapter 37 Remo te Management 340 37.3 Remote Management and NA T When NA T is enabled: • Use the Prestige’ s W A N IP address when configuring from the W AN. • Use the Prestige’ s LAN IP address when configurin g from the LAN.
Prestige 660H/HW Series User’s Guide 341 Chapter 37 Remote Manag ement.
Prestige 660H/HW Series User’s Guide Chapter 38 IP Policy Routing 342 C HAPTER 38 IP Policy Routing This chapter covers setting and appl ying policies used for IP routing. 38.1 IP Policy Routing Overview T raditionally , routing is based on the destinatio n address only and the IAD takes the shortest path to forward a packet.
Prestige 660H/HW Series User’s Guide 343 Chapter 38 IP Policy Routing • routing the packet to a dif ferent gateway (and hence the outgoing interface). • setting the TO S and precedence fields in the IP header . IPPR follows the existing packet filtering facility of RAS in st yle and in impl ementation.
Prestige 660H/HW Series User’s Guide Chapter 38 IP Policy Routing 344 Figure 226 Menu 25.1 IP Routing Po licy Setup Menu 25.1 - IP Routing Polic y Setup # A Criteria/Action - - ----------------------- ----------------------------------------- ------ 1 Y SA=1.
Prestige 660H/HW Series User’s Guide 345 Chapter 38 IP Policy Routing Figure 227 Menu 25.1.1 IP Routing Po licy Menu 25.1.1 - IP Routing Pol icy Policy Set Name= test Active= No Criteria: IP Protocol = 0 Type of Service= Don't C are Packet length= 0 Precedence = Don't C are Len Comp= N/A Source: addr start= 0.
Prestige 660H/HW Series User’s Guide Chapter 38 IP Policy Routing 346 38.5 Applying an IP Policy This section shows yo u where to apply the IP policies after you design them. 38.5.1 Ethernet IP Policies From Menu 3 — Ethernet Setup , type 2 to go to Menu 3.
Prestige 660H/HW Series User’s Guide 347 Chapter 38 IP Policy Routing Figure 228 Menu 3.2 TCP/IP and DHCP Ethernet Se tup Menu 3.2 - TCP/IP and DHCP S etup DHCP Setup DHCP= Server Client IP Pool Sta rting Address= 192.168.1.33 Size of Client IP Pool= 32 Primary DNS Server = 0.
Prestige 660H/HW Series User’s Guide Chapter 38 IP Policy Routing 348 Route 1 represents the default IP route and route 2 represents the configured IP route. Figure 230 Example of IP Policy Routing T o force packets coming from clients with IP addresses of 192.
Prestige 660H/HW Series User’s Guide 349 Chapter 38 IP Policy Routing Figure 231 IP Routing Policy Example Menu 25.1.1 - IP Ro uting Policy Policy Set Name= s et1 Active= Yes Criteria: IP Protocol = 6 Type of Service= Don't Care Precedence = Don't Care Source: addr start= 19 2.
Prestige 660H/HW Series User’s Guide Chapter 38 IP Policy Routing 350 Figure 232 IP Routing Policy Example Menu 25.1.1 - IP Routing Pol icy Policy Set Name= s et2 Active= Yes Criteria: IP Protocol = 6 Type of Service= Don't Care Precedence = Don't Care Source: addr start= 0.
Prestige 660H/HW Series User’s Guide 351 Chapter 38 IP Policy Routing.
Prestige 660H/HW Series User’s Guide Chapter 39 Call Scheduling 352 C HAPTER 39 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulati on only) allows you to dictate when a remote node should be called and for how long.
Prestige 660H/HW Series User’s Guide 353 Chapter 39 Call Scheduling T o setup a schedule set, select the schedule set you want to setup from menu 26 (1-12) and press [ENTER] to see Menu 26.1 — Schedule Set Setup as shown next. Figure 235 Menu 26.1 Schedule Set Setup Menu 26.
Prestige 660H/HW Series User’s Guide Chapter 39 Call Scheduling 354 Once your schedule sets are conf igured, yo u must then apply them to the desired remote node(s).
Prestige 660H/HW Series User’s Guide 355 Chapter 39 Call Scheduling.
Prestige 660H/HW Series User’s Guide Chapter 40 Internal SPTGEN 356 C HAPTER 40 Internal SPTGEN 40.1 Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configuration text file useful for efficient configuration of multiple Prestiges.
Prestige 660H/HW Series User’s Guide 357 Chapter 40 Inte rnal SPTGEN 40.2.1 Internal SPTGEN File Mo dification - Import ant Point s to Remember Each paramete r you enter must be pr eceded by one “=”sign and one space. Some parameters are dependent on othe rs.
Prestige 660H/HW Series User’s Guide Chapter 40 Internal SPTGEN 358 Figure 240 Internal SP TGEN FTP Download Example c:ftp 192.168.1.1 220 PPP FTP version 1.
Prestige 660H/HW Series User’s Guide 359 Chapter 40 Intern al SPTGEN.
Prestige 660H/HW Series User’s Guide Chapter 41 Trou bleshooting 360 C HAPTER 41 T roubleshooting This chapter covers potential proble ms and the corresponding remedies. 41.1 Problems St arting Up the Prestige Table 118 Troubleshooting the Start-Up of Your Prestige PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I turn on the Prestige.
Prestige 660H/HW Series User’s Guide 361 Chapter 41 Trou bleshooting 41.3 Problems with the DSL LED Table 120 Troubleshooting the DSL LED PROBLEM CORRECTIVE ACTION The DSL LED is off. Check the telepho ne wire and connections between the Prestige DSL port a nd the wall jack.
Prestige 660H/HW Series User’s Guide Chapter 41 Trou bleshooting 362 41.6 Problems with Internet Access Table 123 Troubleshooting Internet Access PROBLEM CORRECTIVE ACTION I cannot access the Intern et. Make sure the Prestige is turned on and connected to the network.
Prestige 660H/HW Series User’s Guide 363 Chapter 41 Trou bleshooting 41.8 Problems with the W eb Configurator Table 125 Troubleshooting the Web Configu rator PROBLEM CORRECTIVE ACTION I cannot access the web configurator . Refer to the Quick S tart Gui de for hardware connection s.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 364 A PPENDIX A S plitters and Microfilters This appendix tells you how to install a POTS splitter or a telephone microfilter . Connecting a POTS S p litter When you use the Full Rate (G .
Prestige 660H/HW Series User’s Guide 365 Splitters and Microfilters T elephone Microfilters T elephone voice transmissions take place in the lower frequency ra nge, 0 - 4KHz, while ADSL transmissions take place in the higher bandwidth range, above 4KHz.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 366 Figure 244 Prestige with ISDN.
Prestige 660H/HW Series User’s Guide 367 Splitters and Microfilters.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 368 A PPENDIX B Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed.
Prestige 660H/HW Series User’s Guide 369 Splitters and Microfilters Figure 245 WIndows 95/98 /Me: Networ k: Configu ration Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 370 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect.
Prestige 660H/HW Series User’s Guide 371 Splitters and Microfilters Figure 247 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do no t know your gateway’ s IP address, remove previously installed gateways.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 372 Figure 248 Windows XP: S tar t Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 249 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .
Prestige 660H/HW Series User’s Guide 373 Splitters and Microfilters Figure 250 Windows XP: Control Panel: Network Connections: Proper ties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and click Properties .
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 374 • If you have a static IP address click Use the following IP Address and fill in the IP addr ess , Subnet mask , and Default gateway fields.
Prestige 660H/HW Series User’s Guide 375 Splitters and Microfilters • Click Obtain D NS server address automatically if you do not know your DNS server IP address(es ). • If you know your DNS server IP address(es), click Use the following DNS server addresses , and type them in the Pr eferred DNS server and Alternate DNS server fields.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 376 Figure 254 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 255 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configur e: list.
Prestige 660H/HW Series User’s Guide 377 Splitters and Microfilters 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address bo x. • T ype your subnet mask in the Subnet mask box.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 378 Figure 257 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Address bo x.
Prestige 660H/HW Series User’s Guide 379 Splitters and Microfilters.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 380 A PPENDIX C IP Subnetting IP Addressing Routers “route” based on the network number .
Prestige 660H/HW Series User’s Guide 381 Splitters and Microfilters Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 382 Since the mask is always a continuous number of ones begin ning from the left, followe d by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
Prestige 660H/HW Series User’s Guide 383 Splitters and Microfilters Note: In the following chart s, shaded/bolded last octet bit values indicate host ID bit s “borrowed” to form network ID bit s. The number of “borrowed” host ID bits determines the number of sub nets y ou can have.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 384 Example: Four Subnet s The above exampl e illustrated using a 25-bit subne t mask to divide a class “C” address space into two subnets.
Table 137 Subnet 4 NETWORK NUMBER LAST OCTET BIT V ALUE IP Address 192.168.1. 192 IP Address (Binary) 1 1000000.10101 000.00000001. 11 000000 Subnet Mask (Binary) 11111111 . 11111 111 . 11111111 . 11 000000 Subnet Address: 192.168.1.192 Lowest Host ID: 192.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 386 Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet ma sk also determines which bits are part of the network number and which are part of the host ID.
Prestige 660H/HW Series User’s Guide 387 Splitters and Microfilters.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 388 A PPENDIX D PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP ov er Ethernet, RFC 2516) from your compu.
Prestige 660H/HW Series User’s Guide 389 Splitters and Microfilters Figure 258 Single-Compute r per Router Hardwa re Configuration How PPPoE W orks The PPPoE driver makes the Ethernet appea r as a serial link to the computer and the computer runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC).
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 390 A PPENDIX E V irtual Circuit T opology A TM is a connection-oriented te chnology , meaning that it sets up virtual circuits over which end systems communi cate.
Prestige 660H/HW Series User’s Guide 391 Splitters and Microfilters.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 392 A PPENDIX F Wireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies.
Prestige 660H/HW Series User’s Guide 393 Splitters and Microfilters Figure 262 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 394 Figure 263 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.
Prestige 660H/HW Series User’s Guide 395 Splitters and Microfilters Figure 264 RTS / CT S When station A sends data to the AP , it might no t know that the station B is already using the channel.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 396 A large Fragmentation Thr eshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks tha t are prone to interference.
Prestige 660H/HW Series User’s Guide 397 Splitters and Microfilters IEEE 802.1x In June 2001, the IEEE 802.1x st andard was designed to extend th e features of IEEE 802.1 1 to support extended authentication as well as providing additional accounting and control features.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 398 • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access- Request message.
Prestige 660H/HW Series User’s Guide 399 Splitters and Microfilters 3 The wireless station replies with identity info rmation, including username and password. The RADIUS server checks the user informa tion against its user profile database and determines whether or not to au thenticate the wireless station.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 400 PEAP (Protected EAP) Like EAP-TTLS, server-side certific ate authentication is used to establish a secure connection, then use simple username and p assword methods thro ugh the secured co nnection to authenticate the clients, thus hiding client identity .
Prestige 660H/HW Series User’s Guide 401 Splitters and Microfilters Shared key authentication involves a four -mess age procedure. A wire less station sends a shared key authentication request to the AP , which will then reply with a challenge text message.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 402 WP A User Authentication WP A applies IEEE 802.1x and Extensible Auth entication Protocol (EAP) to authenticate wireless stations using an external RADIUS database.
Prestige 660H/HW Series User’s Guide 403 Splitters and Microfilters Security Parameters Summary Refer to this table to see what other secur ity parameters you shou ld configure for each Authentication Method/ key management prot ocol type. MAC address filters are not dependent on how you config ure these security features.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 404 Figure 267 Roaming Example The steps below describe the roaming process. 1 As wireless station Y moves from the coverage area of access point P1 to that of access point 2 P2 , it scans and uses the si gnal of access point P2 .
Prestige 660H/HW Series User’s Guide 405 Splitters and Microfilters.
Prestige 660H/HW Series User’s Guide Splitters and Microfilters 406 A PPENDIX G Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air . A tran smitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air .
Prestige 660H/HW Series User’s Guide 407 Splitters and Microfilters T ypes of Antennas For WLAN There are two types of antennas used for wireless LAN applications. • Omni-directional antennas send the RF signal out in all directions on a horizontal p lane.
Prestige 660H/HW Series User’s Guide 408 A PPENDIX H Example Internal SPTGEN Screens This appendix covers Prestig e Internal SP TGEN screens. Table 144 Abbreviations Used in the Exam ple Internal SP.
Prestige 660H/HW Series User’s Guide 409 30100007 = Input device filters Set 3 = 256 30100008 = Input device filters Set 4 = 256 30100009 = Output protocol filters Set 1 = 256 30100010 = Output prot.
Prestige 660H/HW Series User’s Guide 410 30201003 = IP Subnet Mask = 0 30201004 = RIP Direction <0(None) | 1(Both) | 2(In Only) | 3(Out Only)> = 0 30201005 = Version <0(Rip-1) | 1(Rip-2B) |.
Prestige 660H/HW Series User’s Guide 411 30201025 = IP Alias #2 Outgoing protocol filters Set 3 = 256 30201026 = IP Alias #2 Outgoing protocol filters Set 4 = 256 */ Menu 3.
Prestige 660H/HW Series User’s Guide 412 Table 147 Menu 4 Internet Access Setup ( SMT Menu 4) / Menu 4 Internet Access Setup (SMT Menu 4) FIN FN PVA INPUT 40000000 = Configured <0(No) | 1(Yes)>.
Prestige 660H/HW Series User’s Guide 413 40000027 = ATM QoS Type <0(CBR) | (1 (UBR)> = 1 40000028 = Peak Cell Rate (PCR) = 0 40000029 = Sustain Cell Rate (SCR) = 0 40000030 = Maximum Burst Siz.
Prestige 660H/HW Series User’s Guide 414 120103002 = IP Static Route set #3, Active <0(No) |1(Yes)> = 0 120103003 = IP Static Route set #3, Destination IP address = 0.0.0.0 120103004 = IP Static Route set #3, Destination IP subnetmask = 0 120103005 = IP Static Route set #3, Gateway = 0.
Prestige 660H/HW Series User’s Guide 415 FIN FN PVA INPUT 120107001 = IP Static Route set #7, Name <Str> = 120107002 = IP Static Route set #7, Active <0(No) |1(Yes)> = 0 120107003 = IP Static Route set #7, Destination IP address = 0.0.0.
Prestige 660H/HW Series User’s Guide 416 120110007 = IP Static Route set #10, Private <0(No) |1(Yes)> = 0 */ Menu 12.1.11 IP Static Route Setu p (SMT Menu 12.
Prestige 660H/HW Series User’s Guide 417 120114004 = IP Static Route set #14, Destination IP subnetmask = 0 120114005 = IP Static Route set #14, Gateway = 0.0.0.0 120114006 = IP Static Route set #14, Metric = 0 120114007 = IP Static Route set #14, Private <0(No) |1(Yes)> = 0 */ Menu 12.
Prestige 660H/HW Series User’s Guide 418 150000007 = SUA Server #3 Active <0(No) | 1(Yes)> = 0 150000008 = SUA Server #3 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000009 = SUA Server #3 Port Start = 0 150000010 = SUA Server #3 Port End = 0 150000011 = SUA Server #3 Local IP addre ss = 0.
Prestige 660H/HW Series User’s Guide 419 150000041 = SUA Server #9 Local IP address = 0.0.0.0 150000042 = SUA Server #10 Active <0(No) | 1(Yes)> = 0 150000043 = SUA Server #10 Protocol <0(A.
Prestige 660H/HW Series User’s Guide 420 210101011 = IP Filter Set 1,Rule 1 Src Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 0 210101013 = IP Filter Set 1,Rule 1 Act Match .
Prestige 660H/HW Series User’s Guide 421 210103007 = IP Filter Set 1,Rule 3 Dest Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 1 210103008 = IP Filter Set 1,Rule 3 Src IP address = 0.
Prestige 660H/HW Series User’s Guide 422 210105002 = IP Filter Set 1,Rule 5 Active <0(No)|1(Yes)> = 1 210105003 = IP Filter Set 1,Rule 5 Protocol = 17 210105004 = IP Filter Set 1,Rule 5 Dest IP address = 0.
Prestige 660H/HW Series User’s Guide 423 210106013 = IP Filter Set 1,Rule 6 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210106014 = IP Filter Set 1,Rule 6 Act Not Match <1(check next)|2(forward)| 3(drop)> = 2 Table 150 Menu 21.1 Filter Set #1 (SMT Men u 21.
Prestige 660H/HW Series User’s Guide 424 210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 Active <0(No)|1(Yes)> = 1 210202003 = IP Filter Set 2, Rule 2 Protocol = 6 210202004 = IP Filter Set 2, Rule 2 Dest IP address = 0.
Prestige 660H/HW Series User’s Guide 425 210203011 = IP Filter Set 2, Rule 3 Src Port Comp <0(none)|1(equal)|2 (not equal)|3(less)|4(gr eater)> = 0 210203013 = IP Filter Set 2, Rule 3 Act Matc.
Prestige 660H/HW Series User’s Guide 426 210205004 = IP Filter Set 2, Rule 5 Dest IP address = 0.0.0.0 210205005 = IP Filter Set 2, Rule 5 Dest Subnet Mask = 0 210205006 = IP Filter Set 2, Rule 5 De.
Prestige 660H/HW Series User’s Guide 427 210206013 = IP Filter Set 2,Rule 6 Act Match <1(check next)|2(forward)|3( drop)> = 3 210206014 = IP Filter Set 2,Rule 6 Act Not Match <1(check next)|2(forward)|3( drop)> = 2 */ Menu 23.1 System Password Setup ( SMT Menu 23.
Prestige 660H/HW Series User’s Guide 428 Command Examples The following are example Internal SP TGEN scr eens associated with the Prestige’ s command interpreter commands. Table 152 ci command (for annex a): wan ad sl opencmd /ci command (for annex a): w an adsl opencmd FIN FN PVA INPUT 990000001 = ADSL OPMD <0(glite)|1(t1.
Prestige 660H/HW Series User’s Guide 429.
Prestige 660H/HW Series User’s Guide 430 A PPENDIX I Command Interpreter The following describes how to use the comman d interpreter . Enter 24 in the main menu to bring up the system maintena nce menu. Enter 8 to go to Menu 24.8 - Command Interpr e ter Mode .
Prestige 660H/HW Series User’s Guide 431.
Prestige 660H/HW Series User’s Guide 432 A PPENDIX J Firewall Commands Sys Firewall Commands The following describes th e firewall commands. See Appendix I on page 430 for information on the command structure. Each of th ese commands must be preceded by sys firewall when you us e them.
Prestige 660H/HW Series User’s Guide 433.
Prestige 660H/HW Series User’s Guide 434 A PPENDIX K Brute-Force Password Guessing Protection The following describes the commands for enablin g, disabling and configuring the brute-force password guessing protect ion m echanism for the password. See Appendix I on page 430 for information on the command structure.
Prestige 660H/HW Series User’s Guide 435.
Prestige 660H/HW Series User’s Guide 436 A PPENDIX L Boot Commands The BootModule A T commands execute fro m wi thin the router ’ s bootup software, when debug mode is selected before the main router firmware is start e d.
Prestige 660H/HW Series User’s Guide 437 Figure 269 Boot Module Commands AT just answer OK ATHE print help ATBAx chan ge baudrate. 1:38.4k, 2:19.2k, 3:9.
Prestige 660H/HW Series User’s Guide 438 A PPENDIX M Log Descriptions This appendix provides descrip tions of example log messages. Table 155 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on informati on from the time server .
Prestige 660H/HW Series User’s Guide 439 Table 157 Access Control Log s LOG MESSAGE DESCRIPTION Firewall default policy: [ TC P | UDP | IGMP | ESP | GRE | OSP F ] <Packet Direction> Attempted TCP/UDP/IGMP/ ESP/GRE/OSPF access matched the default po licy and was blocked or fo rwarded according to the default policy’s setting.
Prestige 660H/HW Series User’s Guide 440 Table 158 TCP Reset Lo gs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a TCP reset packet when a host was unde r a SYN flood attack (the TCP incompl ete count is per d estination host.
Prestige 660H/HW Series User’s Guide 441 Table 161 CDR Logs LOG MESSAGE DESCRIPTION board %d line %d channel %d, call %d, %s C01 Outgoing C all dev=%x ch=%x %s The router received the setup requirements for a cal l. “call” is the reference (count) number of the call.
Prestige 660H/HW Series User’s Guide 442 Table 163 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can pass through the firewall. Table 164 Content Filtering Logs LOG MESSAGE DESCRIPTION %s: Keyword blocking The content of a requested web p age ma tched a user defined keyword.
Prestige 660H/HW Series User’s Guide 443 Table 165 Attack Logs LOG MESSAGE DESCRIPTION attack [ TCP | UDP | IGMP | ESP | GRE | OSPF ] The firewall detected a TC P/UDP/IGMP/ESP/GRE/OSPF attack. attack ICMP (type:%d, code:%d) The firewall detecte d an ICMP attack.
Prestige 660H/HW Series User’s Guide 444 Table 166 802.1X Logs LOG MESSAGE DESCRIPTION Local User Database accepts user. A user was authenticated by the local user database. Local User Database repo rts user credential error. A user was not authenticated by the local user database because of an incorrect user password.
Prestige 660H/HW Series User’s Guide 445 (L to L/Prestige) LAN to LAN/ Prestige ACL set for packet s traveling from the LAN to the LAN or the Prestige. (W to W/Prestige) WAN t o WA N / Prestige ACL set for packet s traveling from the W AN to the W AN or the Prestige.
Prestige 660H/HW Series User’s Guide 446 Table 169 Syslog Logs LOG MESSAGE DESCRIPTION <Facility*8 + Severity>Mon d d hr:mm:ss hostname src="<srcIP:srcPort>" dst="<dstI.
Prestige 660H/HW Series User’s Guide 447 Log Commands Go to the command in terpreter interface ( Appendix I on page 43 0 explains how to access and use the commands). Configuring What Y ou W ant the Prestige to Log 1 Use the sys logs load command to load the log setting buffer that allows you to configure which logs the Prestige is to record.
Prestige 660H/HW Series User’s Guide 448 Log Command Example This example shows how to set the Prestige to re cord the access logs and alerts and then view the results. Figure 272 Log Command Exampl e ras> sys logs load ras> sys logs category acces s 3 ras> sys logs save ras> sys logs display access # .
Prestige 660H/HW Series User’s Guide 449.
Prestige 660H/HW Series User’s Guide 450 Index Numerics 11 0 V A C 4 230V AC 4 A Abnormal Working Conditions 5 AC 4 Access methods 284 Accessories 4 Acts of God 5 Address Assignment 73 Address mappi.
Prestige 660H/HW Series User’s Guide 451 C CA 399 Cables, Connecting 4 Call filtering 286 Call filters Built-in 286 User-defined 286 Call Scheduling 35 2 Maximum Number of Schedule Sets 352 PPPoE 35.
Prestige 660H/HW Series User’s Guide 452 DiffServ marking rule 203 Disclaimer 2 Discretion 5 Distribution System (DS) 90 DNS 238 Domain Name 73 , 11 9 domain name 228 Domain Name Sy stem 73 DoS 132 .
Prestige 660H/HW Series User’s Guide 453 Guidelines For Enhancing Security 139 Introduction 131 LAN to W AN Rul es 147 Policies 144 Remote Management 284 Rule Checklist 145 Rule Logic 145 Rule Secur.
Prestige 660H/HW Series User’s Guide 454 IP Packet 293 IP Policies 346 IP policy 244 IP policy routing 342 IP Policy Routing (IPPR) 46 , 244 Applying an IP Policy 346 Ethernet IP Policies 346 Gatewa.
Prestige 660H/HW Series User’s Guide 455 Application 11 6 Applying NA T in the SMT Menus 268 Configuring 270 Definitions 11 4 Examples 275 How it works 11 5 Mapping T ypes 11 7 Non NA T Friendly App.
Prestige 660H/HW Series User’s Guide 456 Protocol filter 295 Protocol Filter Rules 295 PSK 307 Purchase, Proof of 5 Purchaser 5 Q Qualified Service Personnel 4 Quality of Service 342 Quick S tart Gu.
Prestige 660H/HW Series User’s Guide 457 Summary 149 S Safety W arnings 4 Sample IP Addresses 255 Saving the S tate 136 Schedule Sets Duration 353 Scheduler 197 SCRSee Sustain Cell Rate 248 Security.
Prestige 660H/HW Series User’s Guide 458 T T amperin g 5 TCP Maximum Incomplete 163 , 164 TCP Security 138 TCP/IP 132 , 133 , 171 , 295 , 318 T eardro p 133 T ele communication L ine Cord.
Prestige 660H/HW Series User’s Guide 459 WEP encryption 84 Wet B a se me n t 4 Wi-Fi Protected Access 89 Wi-Fi Protected Access (WP A) 48 Wireless Client WP A Supp licants 91 Wireless LAN 240 Config.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté ZyXEL Communications 660H Series c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du ZyXEL Communications 660H Series - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation ZyXEL Communications 660H Series, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le ZyXEL Communications 660H Series va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le ZyXEL Communications 660H Series, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du ZyXEL Communications 660H Series.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le ZyXEL Communications 660H Series. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei ZyXEL Communications 660H Series ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
