ZyXEL Communications Prestige 660W Series User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Gateway
  5. Prestige 660W Series
  6. User manual
ZyXEL Communications Prestige 660W Series User Manual

ZyXEL Communications Prestige 660W Series User Manual

Adsl gateway with 802.11g wireless
Hide thumbs Also See for Prestige 660W Series:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
Table of Contents

Advertisement

Quick Links

Download this manual
Prestige 660W/HW Series
ADSL Gateway with 802.11g Wireless
User's Guide
Version 3.40
August 2004

Advertisement

Table of Contents
loading

Related Manuals for ZyXEL Communications Prestige 660W Series

Summary of Contents for ZyXEL Communications Prestige 660W Series

  • Page 1 Prestige 660W/HW Series ADSL Gateway with 802.11g Wireless User's Guide Version 3.40 August 2004...
  • Page 3 Trademarks ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
  • Page 5 Prestige 660W/HW Series User’s Guide Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: • This device may not cause harmful interference. • This device must accept any interference received, including interference that may cause undesired operations.

  • Page 7: Zyxel Limited Warranty

    Prestige 660W/HW Series User’s Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or...

  • Page 9: Warranty Information

    Brief description of the problem and the steps you took to solve it. METHOD SUPPORT E-MAIL TELEPHONE WEB SITE REGULAR MAIL SALES E-MAIL FTP SITE LOCATION WORLDWIDE support@zyxel.com.tw +886-3-578-3942 www.zyxel.com ZyXEL Communications Corp. 6 Innovation Road II www.europe.zyxel.com Science Park Hsinchu 300 sales@zyxel.com.tw +886-3-578-2439 ftp.zyxel.com Taiwan ftp.europe.zyxel.com NORTH support@zyxel.com +1-800-255-4101 www.us.zyxel.com...
  • Page 10 SUPPORT E-MAIL TELEPHONE WEB SITE REGULAR MAIL SALES E-MAIL FTP SITE LOCATION SWEDEN support@zyxel.se +46 31 744 7700 www.zyxel.se ZyXEL Communications A/S Sjöporten 4, 41764 Göteborg sales@zyxel.se +46 31 744 7701 Sweden FINLAND support@zyxel.fi +358-9-4780-8411 www.zyxel.fi ZyXEL Communications Oy Malminkaari 10 sales@zyxel.fi...

  • Page 11: Table Of Contents

    Prestige 660W/HW Series User’s Guide Table of Contents Copyright ................................i Federal Communications Commission (FCC) Interference Statement .............iii ZyXEL Limited Warranty..........................v Customer Support............................vii List of Figures..............................xvii List of Tables..............................xxv List of Charts..............................xxxi Preface...............................xxxiii Introduction to DSL..........................xxxvii Getting Started ..............................I Chapter 1 Getting To Know Your Prestige....................1-1 Introducing the Prestige ......................1-1 Features of the Prestige ......................1-2 Applications for the Prestige ......................1-8...
  • Page 12 Prestige 660W/HW Series User’s Guide Configuring MAC Filter ......................6-7 Network Authentication......................6-9 Introduction to WPA........................6-11 WPA-PSK Application Example .....................6-12 WPA with RADIUS Application Example................6-13 6.10 Security Parameters Summary ....................6-14 6.11 Wireless Client WPA Supplicants ...................6-15 6.12 Configuring 802.1x and WPA ....................6-15 6.13 Configuring Local User Authentication...................6-22 6.14 Configuring RADIUS ......................6-24 Chapter 7 WAN Setup ..........................7-1...
  • Page 13 Prestige 660W/HW Series User’s Guide Firewall and Content Filter......................... IV Chapter 11 Firewalls ..........................11-1 11.1 Firewall Overview........................11-1 11.2 Types of Firewalls........................11-1 11.3 Introduction to ZyXEL’s Firewall....................11-2 11.4 Denial of Service........................11-3 11.5 Stateful Inspection........................11-7 11.6 Guidelines for Enhancing Security with Your Firewall ............11-11 11.7 Packet Filtering Vs Firewall....................11-12 Chapter 12 Firewall Configuration ......................12-1 12.1 Remote Management and the Firewall..................12-1...
  • Page 14 Prestige 660W/HW Series User’s Guide 17.4 Using UPnP in Windows XP Example ..................17-5 Chapter 18 Logs Screens ...........................18-1 18.1 Logs Overview.........................18-1 18.2 Configuring Log Settings......................18-1 18.3 Displaying the Logs .........................18-4 18.4 SMTP Error Messages ......................18-5 Media Bandwidth Management ........................VI Chapter 19 Media Bandwidth Management ...................19-1 19.1 Bandwidth Management Overview ..................19-1 19.2 Bandwidth Classes and Filters ....................19-1 19.3 Proportional Bandwidth Allocation ..................19-1...
  • Page 15 Prestige 660W/HW Series User’s Guide 24.3 TCP/IP Ethernet Setup and DHCP...................24-2 Chapter 25 Wireless LAN Setup .......................25-1 25.1 Wireless LAN Overview......................25-1 25.2 Wireless LAN Setup ........................25-1 Chapter 26 Internet Access ........................26-1 26.1 Internet Access Overview ......................26-1 26.2 IP Policies ..........................26-1 26.3 IP Alias.............................26-1 26.4 IP Alias Setup...........................26-2 26.5 Route IP Setup..........................26-4...
  • Page 16 Prestige 660W/HW Series User’s Guide 32.7 Applying Filters and Factory Defaults...................32-17 Chapter 33 SNMP Configuration ......................33-1 33.1 About SNMP..........................33-1 33.2 Supported MIBs ........................33-2 33.3 SNMP Configuration .......................33-2 33.4 SNMP Traps ..........................33-4 Chapter 34 System Security........................34-1 34.1 System Security ........................34-1 34.2 Creating User Accounts on the Prestige...................34-6 Chapter 35 System Information and Diagnosis..................35-1 35.1 System Status...........................35-1 35.2 System Information........................35-3...
  • Page 17 Prestige 660W/HW Series User’s Guide 41.4 Internal SPTGEN FTP Upload Example..................41-4 Appendices and Index............................ X Appendix A Troubleshooting........................A-1 Appendix B IP Subnetting ..........................B-1 Appendix C Wireless LAN and IEEE 802.11....................C-1 Appendix D PPPoE .............................D-1 Appendix E Virtual Circuit Topology......................E-1 Appendix F Example Internal SPTGEN Screens..................F-1 Appendix G Setting up Your Computer’s IP Address................

  • Page 19: List Of Figures

    Prestige 660W/HW Series User’s Guide List of Figures Figure 1-1 Prestige Internet Access Application .................... 1-8 Figure 1-2 Firewall Application ........................1-9 Figure 1-3 Prestige LAN-to-LAN Application ....................1-9 Figure 2-1 Password Screen........................... 2-1 Figure 2-2 Web Configurator SITE MAP Screen................... 2-1 Figure 4-1 Password............................
  • Page 20 Prestige 660W/HW Series User’s Guide ..........................7-11 Figure 7-5 WAN Backup Figure 7-6 Advanced WAN Backup......................7-14 Figure 7-7 .......................7-19 Advanced Modem Setup Figure 8-1 How NAT Works...........................8-2 Figure 8-2 NAT Application With IP Alias .....................8-3 Figure 8-3 Multiple Servers Behind NAT Example..................8-6 Figure 8-4 NAT Mode.............................8-7 Figure 8-5 Edit SUA/NAT Server Set......................8-8 Figure 8-6 Address Mapping Rules ......................8-10...
  • Page 21 Prestige 660W/HW Series User’s Guide Figure 14-3 Edit Rule Example........................14-3 Figure 14-4 Configure Source IP Example ....................14-4 Figure 14-5 Customized Service for MyService Example................14-4 Figure 14-6 Syslog Rule Configuration Example ..................14-5 Figure 14-7 Rule Summary Example......................14-6 Figure 15-1 Content Filter: Keyword......................
  • Page 22 Prestige 660W/HW Series User’s Guide Figure 20-3 DHCP Table ..........................20-6 Figure 20-4 Any IP Table..........................20-7 Figure 20-5 Association List.........................20-8 Figure 20-6 Diagnostic General........................20-9 Figure 20-7 Diagnostic DSL Line.......................20-10 Figure 20-8 Firmware Upgrade ........................20-12 Figure 20-9 Network Temporarily Disconnected..................20-13 Figure 20-10 Error Message ........................20-13 Figure 21-1 Login Screen ..........................21-2 Figure 21-2 Prestige 660HW-61 SMT Menu Overview ................21-3 Figure 21-3 SMT Main Menu........................21-5...
  • Page 23 Prestige 660W/HW Series User’s Guide Figure 27-2 Menu 11.1 Remote Node Profile ....................27-3 Figure 27-3 Menu 11.3 Remote Node Network Layer Options ..............27-6 Figure 27-4 Sample IP Addresses for a TCP/IP LAN-to-LAN Connection ..........27-8 Figure 27-5 Menu 11.5 Remote Node Filter (RFC 1483 or ENET Encapsulation) ........27-9 Figure 27-6 Menu 11.5 Remote Node Filter (PPPoA or PPPoE Encapsulation)..........
  • Page 24 Prestige 660W/HW Series User’s Guide Figure 30-12 Menu 4 Internet Access & NAT Example ................30-12 Figure 30-13 NAT Example 2........................30-12 Figure 30-14 Menu 15.2.1 Specifying an Inside Server ................30-13 Figure 30-15 NAT Example 3........................30-14 Figure 30-16 Example 3: Menu 11.3 ......................30-15 Figure 30-17 Example 3: Menu 15.1.1.1 ....................30-15 Figure 30-18 Example 3: Final Menu 15.1.1 ....................30-16 Figure 30-19 NAT Example 4........................30-17...
  • Page 25 Prestige 660W/HW Series User’s Guide Figure 33-2 Menu 22 SNMP Configuration....................33-3 Figure 34-1 Menu 23 System Security......................34-1 Figure 34-2 Menu 23 System Security......................34-1 Figure 34-3 Menu 23.2 System Security : RADIUS Server ................ 34-2 Figure 34-4 Menu 23 System Security......................34-3 Figure 34-5 Menu 23.4 System Security : IEEE802.1x ................

  • Page 26: Internal Sptgen Ftp Upload Example

    Prestige 660W/HW Series User’s Guide Figure 37-4 Menu 24.9.1 System Maintenance : Budget Management............37-3 Figure 37-5 Menu 24 System Maintenance ....................37-4 Figure 37-6 Menu 24.10 System Maintenance: Time and Date Setting ............37-4 Figure 38-1 Menu 24.11 Remote Management Control ................38-2 Figure 39-1 Menu 25 IP Routing Policy Setup .....................39-2 Figure 39-2 Menu 25.1 IP Routing Policy Setup ..................39-3 Figure 39-3 Menu 25.1.1 IP Routing Policy ....................39-4...
  • Page 27 Prestige 660W/HW Series User’s Guide List of Tables Table 1-1 Model Specific Features......................... 1-2 Table 2-1 Web Configurator Screens Summary ..................... 2-2 Table 4-1 Password ............................4-1 Table 5-1 LAN ............................... 5-8 Table 6-1 Wireless............................6-5 Table 6-2 MAC Address Filter ........................6-9 Table 6-3 Wireless Security Relational Matrix ....................
  • Page 28 Prestige 660W/HW Series User’s Guide Table 10-1 Time and Date..........................10-2 Table 11-1 Common IP Ports........................11-4 Table 11-2 ICMP Commands That Trigger Alerts ..................11-6 Table 11-3 Legal NetBIOS Commands ......................11-7 Table 11-4 Legal SMTP Commands......................11-7 Table 12-1 Alert ............................12-4 Table 13-1 Firewall Rules Summary: First Screen ..................13-5 Table 13-2 Predefined Services ........................13-7 Table 13-3 Creating/Editing A Firewall Rule .....................13-10 Table 13-4 Adding/Editing Source and Destination Addresses ..............13-12...
  • Page 29 Prestige 660W/HW Series User’s Guide Table 19-7 Media Bandwidth Management: Monitor ................19-12 Table 20-1 System Status ..........................20-3 Table 20-2 System Status: Show Statistics....................20-5 Table 20-3 DHCP Table ..........................20-6 Table 20-4 Any IP Table..........................20-7 Table 20-5 Association List.......................... 20-8 Table 20-6 Diagnostic General........................
  • Page 30 Prestige 660W/HW Series User’s Guide Table 30-1 Applying NAT in Menus 4 & 11.3 ....................30-3 Table 30-2 SUA Address Mapping Rules .....................30-5 Table 30-3 Menu 15.1.1 First Set........................30-7 Table 30-4 Menu 15.1.1.1 Editing/Configuring an Individual Rule in a Set ..........30-8 Table 32-1 Abbreviations Used in the Filter Rules Summary Menu ............32-6 Table 32-2 Rule Abbreviations Used ......................32-6 Table 32-3 Menu 21.1.x.1 TCP/IP Filter Rule ....................32-8...
  • Page 31 Prestige 660W/HW Series User’s Guide Table 40-1 Menu 26.1 Schedule Set Setup....................40-2 List of Tables xxix...

  • Page 33: List Of Charts

    Prestige 660W/HW Series User’s Guide List of Charts Chart A-1 Troubleshooting the Start-Up of Your Prestige ................A-1 Chart A-2 Troubleshooting the LAN LED.....................A-1 Chart A-3 Troubleshooting the DSL LED......................A-2 Chart A-4 Troubleshooting the LAN Interface....................A-2 Chart A-5 Troubleshooting the WAN Interface....................A-2 Chart A-6 Troubleshooting Internet Access ....................A-3 Chart A-7 Troubleshooting the Password.......................A-3 Chart A-8 Troubleshooting the Web Configurator ..................A-4...
  • Page 34 Prestige 660W/HW Series User’s Guide Chart I-4 Attack Logs ............................. I-2 Chart I-5 Access Logs............................. I-4 Chart I-6 TCP Reset Logs..........................I-5 Chart I-7 ICMP Notes............................. I-5 xxxii Lists of Charts...

  • Page 35: Preface

    Prestige 660W/HW Series User’s Guide Preface Congratulations on your purchase of the Prestige 660W/HW ADSL 2+ Gateway with 802.11g Wireless. Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com North American products.

  • Page 36: Syntax Conventions

    Help us help you! E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. Thank you! Syntax Conventions •...
  • Page 37 Prestige 660W/HW Series User’s Guide Graphics Icons Key Prestige Notebook computer Computer Server Firewall DSLAM Switch Router Telephone Wireless Signal The following section offers some background information on DSL. Skip to Chapter 1 if you wish to begin working with your router right away. Preface xxxv...

  • Page 39: Introduction To Dsl

    Prestige 660W/HW Series User’s Guide Introduction to DSL DSL (Digital Subscriber Line) technology enhances the data capacity of the existing twisted-pair wire that runs between the local telephone company switching offices and most homes and offices. While the wire itself can handle higher frequencies, the telephone switching equipment is designed to cut off signals above 4,000 Hz to filter noise off the voice line, but now everybody is searching for ways to get more bandwidth to improve access to the Web - hence DSL technologies.

  • Page 40: Getting Started

    Getting Started Part I: Getting Started This part is structured as a step-by-step guide to help you access your Prestige. It covers key features and applications, accessing the web configurator and configuring the wizard screens for initial setup.

  • Page 41: Chapter 1 Getting To Know Your Prestige

    Wi-Fi Protected Access (WPA). Models included in this series at the time of writing are: Prestige 660W series Prestige 660HW series “H” denotes an integrated 4-port switch (hub), and “W” denotes an included wireless card. The Prestige 660W and Prestige 660HW provide 802.11g wireless LAN connectivity allowing users to enjoy the...

  • Page 42: Features Of The Prestige

    Prestige 660W/HW Series User’s Guide Models ending in “1”, for example P660HW-61, denote a device that works over the analog telephone system, POTS (Plain Old Telephone Service). Models ending in “3” denote a device that works over ISDN (Integrated Synchronous Digital System). Models ending in “7” denote a device that works over T-ISDN (UR-2).

  • Page 43: Zero Configuration Internet Access

    Prestige 660W/HW Series User’s Guide Table 1-1 Model Specific Features PRESTIGE MODEL P660W P660HW FEATURES Wi-Fi Protected Access (WPA) Table Key: An “O” in a model’s column shows that the model has the specified feature. A number specific to an individual model may alternately be displayed. The information in this table was correct at the time of writing, although it may be subject to change.

  • Page 44: Wep Encryption

    Prestige 660W/HW Series User’s Guide IEEE 802.11g 11 Mbps Wireless LAN IEEE 802.11g is fully compatible with the IEEE 802.11b standard. This means an IEEE 802.11b radio card can interface directly with an IEEE 802.11g access point (and vice versa) at 11 Mbps or lower depending on range.

  • Page 45: Dynamic Dns Support

    Prestige 660W/HW Series User’s Guide PPPoE Support (RFC2516) PPPoE (Point-to-Point Protocol over Ethernet) emulates a dial-up connection. It allows your ISP to use their existing network configuration with newer broadband technologies such as ADSL. The PPPoE driver on the Prestige is transparent to the computers on the LAN, which see only Ethernet and are not aware of PPPoE thus saving you from having to manage PPPoE clients on individual computers.

  • Page 46: Protocol Support

    Prestige 660W/HW Series User’s Guide ♦ Multiple Protocol over AAL5 (RFC 1483). ♦ PPP over AAL5 (RFC 2364). ♦ PPP over Ethernet over AAL5 (RFC 2516). ♦ RFC 1661. ♦ PPP over PAP (RFC 1334). ♦ PPP over CHAP (RFC 1994). Protocol Support ♦...

  • Page 47: Network Management

    Prestige 660W/HW Series User’s Guide Multiplexing The Prestige supports VC-based and LLC-based multiplexing. Encapsulation The Prestige supports PPPoA (RFC 2364 - PPP over ATM Adaptation Layer 5), RFC 1483 encapsulation over ATM, MAC encapsulated routing (ENET encapsulation) as well as PPP over Ethernet (RFC 2516). Network Management ♦...

  • Page 48: Applications For The Prestige

    Prestige 660W/HW Series User’s Guide Packet Filters The Prestige's packet filtering functions allows added network security and management. Ease of Installation Your Prestige is designed for quick, intuitive and easy installation. Housing Your Prestige's compact and ventilated housing minimizes space requirements making it easy to position anywhere in your busy office.

  • Page 49: Figure 1-2 Firewall Application

    Prestige 660W/HW Series User’s Guide 1.3.2 Firewall for Secure Broadband Internet Access The Prestige provides protection from attacks by Internet hackers. By default, the firewall blocks all incoming traffic from the WAN. The firewall supports TCP/UDP inspection and DoS (Denial of Services) detection and prevention, as well as real time alerts, reports and logs.

  • Page 51: Chapter 2 Introducing The Web Configurator

    Prestige 660W/HW Series User’s Guide Chapter 2 Introducing the Web Configurator This chapter describes how to access and navigate the web configurator. Web Configurator Overview The embedded web configurator allows you to manage the Prestige from anywhere through a browser such as Microsoft Internet Explorer or Netscape Navigator.

  • Page 52: Resetting The Prestige

    Prestige 660W/HW Series User’s Guide Step 6. You should now see the SITE MAP screen. The Prestige automatically times out after five minutes of inactivity. Simply log back into the Prestige if this happens to you. Resetting the Prestige If you forget your password or cannot access the web configurator, you will need to use the RESET button at the back of the Prestige to reload the factory-default configuration file.

  • Page 53: Navigating The Prestige Web Configurator

    Prestige 660W/HW Series User’s Guide Navigating the Prestige Web Configurator The following summarizes how to navigate the web configurator from the SITE MAP screen. We use the Prestige 660HW-61 web screens in this guide as an example. Screens vary slightly for different Prestige models.

  • Page 54: Table 2-1 Web Configurator Screens Summary

    Prestige 660W/HW Series User’s Guide Table 2-1 Web Configurator Screens Summary LINK SUB-LINK FUNCTION Wizard Setup Use these screens for initial configuration including general setup, ISP parameters for Internet Access and WAN IP/DNS Server/MAC address assignment. Advanced Setup Password Use this screen to change your password. Use this screen to configure LAN DHCP and TCP/IP settings.

  • Page 55: Wizard Setup

    Prestige 660W/HW Series User’s Guide Table 2-1 Web Configurator Screens Summary LINK SUB-LINK FUNCTION Schedule Use this screen to set the days and times for the Prestige to perform content filtering. Trusted Use this screen to exclude a range of users on the LAN from content filtering on your Prestige.

  • Page 56: Password, Lan, Wireless Lan And Wan

    Password, LAN, Wireless LAN and WAN Part II: Password, LAN, Wireless LAN and WAN This part covers the password, LAN (Local Area Network), wireless LAN and WAN setup.

  • Page 57: Chapter 4 Password Setup

    Prestige 660W/HW Series User’s Guide Chapter 4 Password Setup This chapter provides information on the Password screen. Password Overview It is highly recommended that you change the password for accessing the Prestige. Configuring Password To change your Prestige’s password (recommended), click Password. The screen appears as shown. Figure 4-1 Password The following table describes the fields in this screen.
  • Page 58 Prestige 660W/HW Series User’s Guide Table 4-1 Password LABEL DESCRIPTION Retype to Confirm Type the new password again in this field. Apply Click Apply to save your changes back to the Prestige. Cancel Click Cancel to begin configuring this screen afresh. Password Setup...

  • Page 59: Chapter 5 Lan Setup

    Prestige 660W/HW Series User’s Guide Chapter 5 LAN Setup This chapter describes how to configure LAN settings. LAN Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building. The LAN screens can help you configure a LAN DHCP server and manage IP addresses.

  • Page 60: Dns Server Address Assignment

    Prestige 660W/HW Series User’s Guide There are two ways that an ISP disseminates the DNS server addresses. The first is for an ISP to tell a customer the DNS server addresses, usually in the form of an information sheet, when s/he signs up. If your ISP gives you the DNS server addresses, enter them in the DNS Server fields in the LAN Setup screen, otherwise, leave them blank.

  • Page 61: Ip Address And Subnet Mask

    Prestige 660W/HW Series User’s Guide These parameters should work for the majority of installations. If your ISP gives you explicit DNS server address(es), read the embedded web configurator help regarding what fields need to be configured. 5.4.2 IP Address and Subnet Mask Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number.

  • Page 62: Rip Setup

    Prestige 660W/HW Series User’s Guide You can obtain your IP address from the IANA, from an ISP or it can be assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the Internet addresses for your local networks.

  • Page 63: Dhcp Setup

    Prestige 660W/HW Series User’s Guide 5.5.1 Multicast Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of hosts on the network - not everybody and not just 1.

  • Page 64: How Any Ip Works

    Prestige 660W/HW Series User’s Guide With the Any IP feature and NAT enabled, the Prestige allows a computer to access the Internet without changing the network settings (such as IP address and subnet mask) of the computer, when the IP addresses of the computer and the Prestige are not in the same subnet.

  • Page 65: Configuring Lan

    Prestige 660W/HW Series User’s Guide 1. When a computer (which is in a different subnet) first attempts to access the Internet, it sends packets to its default gateway (which is not the Prestige) by looking at the MAC address in its ARP table.
  • Page 66 Prestige 660W/HW Series User’s Guide Table 5-1 LAN LABEL DESCRIPTION DHCP If set to Server, your Prestige can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that support the DHCP client. If set to None, the DHCP server will be disabled.
  • Page 67 Prestige 660W/HW Series User’s Guide Table 5-1 LAN LABEL DESCRIPTION Cancel Click Cancel to begin configuring this screen afresh. LAN Setup...

  • Page 69: Chapter 6 Wireless Lan Setup

    Prestige 660W/HW Series User’s Guide Chapter 6 Wireless LAN Setup This chapter discusses how to configure Wireless LAN on the Prestige. Wireless LAN Overview This section introduces the wireless LAN and some basic configurations. Wireless LANs can be as simple as two computers with wireless LAN cards communicating in a peer-to-peer network or as complex as a number of computers with wireless LAN cards communicating through access points which bridge network traffic to the wired LAN.

  • Page 70: Figure 6-1 Rts/Cts

    Prestige 660W/HW Series User’s Guide 6.1.4 RTS/CTS A hidden node occurs when two stations are within range of the same access point, but are not within range of each other. The following figure illustrates a hidden node. Both stations (STA) are within range of the access point (AP) or wireless gateway, but out-of-range of each other, so they cannot “hear”...

  • Page 71: Levels Of Security

    Prestige 660W/HW Series User’s Guide Enabling the RTS Threshold causes redundant network overhead that could negatively affect the throughput performance instead of providing a remedy. 6.1.5 Fragmentation Threshold A Fragmentation Threshold is the maximum data fragment size (between 256 and 2432 bytes) that can be sent in the wireless network before the Prestige will fragment the packet into smaller data frames.

  • Page 72: Data Encryption With Wep

    Prestige 660W/HW Series User’s Guide Use the Prestige web configurator to configurator to set up your wireless LAN security settings. Refer to the chapter on using the Prestige web configurator to see how to access the web configurator. Data Encryption with WEP WEP encryption scrambles the data transmitted between the wireless stations and the access points to keep network communications private.

  • Page 73: Figure 6-3 Wireless

    Prestige 660W/HW Series User’s Guide Figure 6-3 Wireless The following table describes the fields in this screen. Table 6-1 Wireless LABEL DESCRIPTION Enable Wireless The wireless LAN is turned off by default, before you enable the wireless LAN you should configure some security by setting MAC filters and/or 802.1x security; otherwise your wireless LAN will be vulnerable upon enabling it.
  • Page 74 Prestige 660W/HW Series User’s Guide Table 6-1 Wireless LABEL DESCRIPTION Hide ESSID Select Yes to hide the ESSID in so a station cannot obtain the ESSID through passive scanning. Select No to make the ESSID visible so a station can obtain the ESSID through passive scanning.

  • Page 75: Configuring Mac Filter

    Prestige 660W/HW Series User’s Guide Table 6-1 Wireless LABEL DESCRIPTION Apply Click Apply to save your changes back to the Prestige. Cancel Click Cancel to begin configuring this screen afresh. Configuring MAC Filter The MAC filter screen allows you to configure the Prestige to give exclusive access to up to 32 devices (Allow Association) or exclude up to 32 devices from accessing the Prestige (Deny Association).

  • Page 76: Figure 6-4 Mac Address Filter

    Prestige 660W/HW Series User’s Guide Figure 6-4 MAC Address Filter The following table describes the fields in this menu. Wireless LAN Setup...

  • Page 77: Network Authentication

    Prestige 660W/HW Series User’s Guide Table 6-2 MAC Address Filter LABEL DESCRIPTION Active Select Yes from the drop down list box to enable MAC address filtering Action Define the filter action for the list of MAC addresses in the MAC Address table. Select Deny Association to block access to the router, MAC addresses not listed will be allowed to access the router.

  • Page 78: Types Of Radius Messages

    Prestige 660W/HW Series User’s Guide • Accounting Keeps track of the client’s network activity. RADIUS is a simple package exchange in which your Prestige acts as a message relay between the wireless station and the network RADIUS server. Types of RADIUS Messages The following types of RADIUS messages are exchanged between the access point and the RADIUS server for user authentication: •...

  • Page 79: Introduction To Wpa

    Prestige 660W/HW Series User’s Guide an EAP-compatible RADIUS server, the access point helps a wireless station and a RADIUS server perform authentication. Figure 6-5 EAP Authentication The details below provide a general description of how IEEE 802.1x EAP authentication works. For an example list of EAP-MD5 authentication steps, see the appendix about IEEE 802.1x.

  • Page 80: Wpa-Psk Application Example

    Prestige 660W/HW Series User’s Guide TKIP regularly changes and rotates the encryption keys so that the same encryption key is never used twice. The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy and management system, using the pair-wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.

  • Page 81: Wpa With Radius Application Example

    Prestige 660W/HW Series User’s Guide Figure 6-6 WPA - PSK Authentication WPA with RADIUS Application Example You need the IP address of the RADIUS server, its port number (default is 1812), and the RADIUS shared secret. A WPA application example with an external RADIUS server looks as follows. “A” is the RADIUS server.

  • Page 82: Security Parameters Summary

    Prestige 660W/HW Series User’s Guide Figure 6-7 WPA with RADIUS Application Example 6.10 Security Parameters Summary Refer to this table to see what other security parameters you should configure for each Authentication Method/ key management protocol type. You enter manual keys by first selecting 64-bit WEP or 128-bit WEP from the WEP Encryption field and then typing the keys (in ASCII or hexadecimal format) in the key text boxes.

  • Page 83: Wireless Client Wpa Supplicants

    Prestige 660W/HW Series User’s Guide Table 6-3 Wireless Security Relational Matrix AUTHENTICATION ENCRYPTION ENTER MANUAL ENABLE IEEE 802.1X METHOD/ KEY METHOD MANAGEMENT PROTOCOL Open None Open Enable with Dynamic WEP Key Enable without Dynamic WEP Key Disable Shared Enable with Dynamic WEP Key Enable without Dynamic WEP Key Disable TKIP...

  • Page 84: Figure 6-8 Wireless Lan: 802.1X/Wpa

    Prestige 660W/HW Series User’s Guide Figure 6-8 Wireless LAN: 802.1x/WPA The following table describes the label in this screen. Table 6-4 Wireless LAN: 802.1x/WPA LABEL DESCRIPTION Wireless Port To control wireless stations access to the wired network, select a control method from Control the drop-down list box.

  • Page 85: Figure 6-9 Wireless Lan: 802.1X/Wpa For 802.1X Protocol

    Prestige 660W/HW Series User’s Guide Figure 6-9 Wireless LAN: 802.1x/WPA for 802.1x Protocol The following table describes the labels in this screen. Table 6-5 Wireless LAN: 802.1x/WPA for 802.1x Protocol LABEL DESCRIPTION Wireless Port To control wireless stations access to the wired network, select a control method from the drop-down list box.
  • Page 86 Prestige 660W/HW Series User’s Guide Table 6-5 Wireless LAN: 802.1x/WPA for 802.1x Protocol LABEL DESCRIPTION Key Management Choose 802.1x from the drop-down list. Protocol Dynamic WEP This field is activated only when you select Authentication Required in the Wireless Port Control field. Also set the Authentication Databases field to RADIUS Only. Key Exchange Local user database may not be used.

  • Page 87: Figure 6-10 Wireless Lan: 802.1X/Wpa For Wpa Protocol

    Prestige 660W/HW Series User’s Guide Once you enable user authentication, you need to specify an external RADIUS server or create local user accounts on the Prestige for authentication. Authentication Required: WPA Select Authentication Required in the Wireless Port Control field and WPA in the Key Management Protocol field to display the next screen.
  • Page 88 Prestige 660W/HW Series User’s Guide Table 6-6 Wireless LAN: 802.1x/WPA for WPA Protocol LABEL DESCRIPTION WPA Mixed Mode The Prestige can operate in WPA Mixed Mode, which supports both clients running WPA and clients running dynamic WEP key exchange with 802.1x in the same Wi-Fi network.

  • Page 89: Figure 6-11 Wireless Lan: 802.1X/Wpa For Wpa-Psk Protocol

    Prestige 660W/HW Series User’s Guide Figure 6-11 Wireless LAN: 802.1x/WPA for WPA-PSK Protocol The following table describes the labels not previously discussed Table 6-7 Wireless LAN: 802.1x/WPA for WPA-PSK Protocol LABEL DESCRIPTION Key Management Choose WPA-PSK in this field. Protocol Pre-Shared Key The encryption mechanisms used for WPA and WPA-PSK are the same.

  • Page 90: Configuring Local User Authentication

    Prestige 660W/HW Series User’s Guide Table 6-7 Wireless LAN: 802.1x/WPA for WPA-PSK Protocol LABEL DESCRIPTION Group Data Group Data Privacy allows you to choose TKIP (recommended) or WEP for Privacy broadcast and multicast (“group”) traffic if the Key Management Protocol is WPA and WPA Mixed Mode is disabled.

  • Page 91: Figure 6-12 Local User Database

    Prestige 660W/HW Series User’s Guide Figure 6-12 Local User Database The following table describes the fields in this screen. Wireless LAN Setup 6-23...

  • Page 92: Configuring Radius

    Prestige 660W/HW Series User’s Guide Table 6-8 Local User Database LABEL DESCRIPTION This is the index number of a local user account. Active Select this check box to enable the user profile. User Name Enter the user name of the user profile. Password Enter a password up to 31 characters long for this user profile.

  • Page 93: Table 6-9 Radius

    Prestige 660W/HW Series User’s Guide The following table describes the fields in this screen. Table 6-9 RADIUS LABEL DESCRIPTION Authentication Server Active Select Yes from the drop-down list box to enable user authentication through an external authentication server. Server IP Address Enter the IP address of the external authentication server in dotted decimal notation.

  • Page 95: Chapter 7 Wan Setup

    Prestige 660W/HW Series User’s Guide Chapter 7 WAN Setup This chapter describes how to configure WAN settings. WAN Overview A WAN (Wide Area Network) is an outside connection to another network or the Internet. Encapsulation Be sure to use the encapsulation method required by your ISP. The Prestige supports the following methods. 7.2.1 ENET ENCAP The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the IP network protocol.

  • Page 96: Multiplexing

    Prestige 660W/HW Series User’s Guide LAN do not need PPPoE software installed, since the Prestige does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access. The Prestige bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your computer to an ATM PVC (Permanent Virtual Circuit) which connects to ADSL Access Concentrator where the PPP session terminates.

  • Page 97: Vpi And Vci

    Prestige 660W/HW Series User’s Guide VPI and VCI Be sure to use the correct Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI) numbers assigned to you. The valid range for the VPI is 0 to 255 and for the VCI is 32 to 65535 (0 to 31 is reserved for local management of ATM traffic).

  • Page 98: Traffic Shaping

    Prestige 660W/HW Series User’s Guide Traffic Shaping Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average rate and fluctuations of data transmission over an ATM network. This agreement helps eliminate congestion, which is important for transmission of real time data such as audio and video connections. Peak Cell Rate (PCR) is the maximum rate at which the sender can send cells.

  • Page 99: Zero Configuration Internet Access

    Prestige 660W/HW Series User’s Guide Zero Configuration Internet Access Once you turn on and connect the Prestige to a telephone jack, it automatically detects the Internet connection settings (such as the VCI/VPI numbers and the encapsulation method) from the ISP and makes the necessary configuration changes.
  • Page 100 Prestige 660W/HW Series User’s Guide Figure 7-2 WAN Setup The following table describes the fields in this screen. WAN Setup...
  • Page 101 Prestige 660W/HW Series User’s Guide Table 7-1 WAN Setup LABEL DESCRIPTION Name Enter the name of your Internet Service Provider, e.g., MyISP. This information is for identification purposes only. Mode Select Routing (default) from the drop-down list box if your ISP allows multiple computers to share an Internet account.
  • Page 102 Prestige 660W/HW Series User’s Guide Table 7-1 WAN Setup LABEL DESCRIPTION Maximum Burst Size Maximum Burst Size (MBS) refers to the maximum number of cells that can be sent at the peak rate. Type the MBS, which is less than 65535. Login Information (PPPoA and PPPoE encapsulation only) Service Name...

  • Page 103: Traffic Redirect

    Prestige 660W/HW Series User’s Guide Table 7-1 WAN Setup LABEL DESCRIPTION PPPoE + In addition to the Prestige's built-in PPPoE client, you can enable PPPoE pass through PPPoE_Client_PC to allow up to ten hosts on the LAN to use PPPoE client software on their computers to connect to the ISP via the Prestige.

  • Page 104: Configuring Wan Backup

    Prestige 660W/HW Series User’s Guide Figure 7-3 Traffic Redirect Example The following network topology allows you to avoid triangle route security issues when the backup gateway is connected to the LAN. Use IP alias to configure the LAN into two or three logical networks with the Prestige itself as the gateway for each LAN network.

  • Page 105: Figure 7-5 Wan Backup

    Prestige 660W/HW Series User’s Guide Figure 7-5 WAN Backup The following table describes the fields in this screen. WAN Setup 7-11...

  • Page 106: Table 7-2 Wan Backup

    Prestige 660W/HW Series User’s Guide Table 7-2 WAN Backup LABEL DESCRIPTION Backup Type Select the method that the Prestige uses to check the DSL connection. Select DSL Link to have the Prestige check the DSL connection’s physical layer. Select ICMP to have the Prestige periodically ping the IP addresses configured in the Check WAN IP Address fields.

  • Page 107: Configuring Advanced Wan Backup

    Prestige 660W/HW Series User’s Guide Table 7-2 WAN Backup LABEL DESCRIPTION Dial Backup Active Select this check box to turn on dial backup. Metric This field sets this route's priority among the three routes the Prestige uses (normal, traffic redirect and dial backup). Type a number (1 to 15) to set the priority of the dial backup route for data transmission.

  • Page 108: Figure 7-6 Advanced Wan Backup

    Prestige 660W/HW Series User’s Guide Figure 7-6 Advanced WAN Backup 7-14 WAN Setup...

  • Page 109: Table 7-3 Advanced Wan Backup

    Prestige 660W/HW Series User’s Guide The following table describes the fields in this screen. Advanced WAN Backup Table 7-3 LABEL DESCRIPTION Basic Login Name Type the login name assigned by your ISP. Password Type the password assigned by your ISP. Retype to Confirm Type your password again to make sure that you have entered is correctly.
  • Page 110 Prestige 660W/HW Series User’s Guide Advanced WAN Backup Table 7-3 LABEL DESCRIPTION Enable SUA Network Address Translation (NAT) allows the translation of an Internet protocol address used within one network to a different IP address known within another network. SUA (Single User Account) is a subset of NAT that supports two types of mapping: Many-to-One and Server.

  • Page 111: At Command Strings

    Prestige 660W/HW Series User’s Guide Advanced WAN Backup Table 7-3 LABEL DESCRIPTION Select CISCO PPP from the drop-down list box if your backup WAN device uses Encapsulation Cisco PPP encapsulation; otherwise select Standard PPP. Compression Select this check box to enable stac compression. Connection Nailed-Up Select Nailed-Up Connection when you want your connection up all the time.

  • Page 112: Dtr Signal

    Prestige 660W/HW Series User’s Guide 7.14 DTR Signal The majority of WAN devices default to hanging up the current call when the DTR (Data Terminal Ready) signal is dropped by the DTE. When the “Drop DTR When Hang Up” check box is selected, the Prestige uses this hardware signal to force the WAN device to hang up, in addition to issuing the drop command “ATH”.

  • Page 113: Table 7-4 Advanced Modem Setup

    Prestige 660W/HW Series User’s Guide Figure 7-7 Advanced Modem Setup The following table describes the fields in this screen. Table 7-4 Advanced Modem Setup LABEL DESCRIPTION AT Command Strings Dial Type the AT Command string to make a call. Example: atdt Drop Type the AT Command string to drop a call.
  • Page 114 Prestige 660W/HW Series User’s Guide Table 7-4 Advanced Modem Setup LABEL DESCRIPTION AT Response Strings CLID Type the keyword that precedes the CLID (Calling Line Identification) in the AT response string. This lets the Prestige capture the CLID in the AT response string that comes from the WAN device.

  • Page 115: Nat, Dynamic Dns And Time And Date

    NAT, Dynamic DNS and Time and Date Part III: NAT, Dynamic DNS and Time and Date This part covers NAT (Network Address Translation), dynamic DNS (Domain Name Sever) and Time and Date setup.

  • Page 117: Nat Overview

    Prestige 660W/HW Series User’s Guide Chapter 8 Network Address Translation (NAT) Screens This chapter discusses how to configure NAT on the Prestige. NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.

  • Page 118: What Nat Does

    Prestige 660W/HW Series User’s Guide NAT never changes the IP address (either local or global) of an outside host. 8.1.2 What NAT Does In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the inside local address) to another (the inside global address) before forwarding the packet to the WAN side.

  • Page 119: Figure 8-2 Nat Application With Ip Alias

    Prestige 660W/HW Series User’s Guide 8.1.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct WAN networks. More examples follow at the end of this chapter.

  • Page 120: Sua (Single User Account) Versus Nat

    Prestige 660W/HW Series User’s Guide 3. Many to Many Overload: In Many-to-Many Overload mode, the Prestige maps the multiple local IP addresses to shared global IP addresses. 4. Many-to-Many No Overload: In Many-to-Many No Overload mode, the Prestige maps each local IP address to a unique global IP address.

  • Page 121: Sua Server

    Prestige 660W/HW Series User’s Guide 1. Choose SUA Only if you have just one public WAN IP address for your Prestige. 2. Choose Full Feature if you have multiple public WAN IP addresses for your Prestige. SUA Server A SUA server set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though SUA makes your whole inside network appear as a single computer to the outside world.

  • Page 122: Selecting The Nat Mode

    Prestige 660W/HW Series User’s Guide Table 8-3 Services and Port Numbers SERVICES PORT NUMBER POP3 (Post Office Protocol) NNTP (Network News Transport Protocol) SNMP (Simple Network Management Protocol) SNMP trap PPTP (Point-to-Point Tunneling Protocol) 1723 8.3.2 Configuring Servers Behind SUA (Example) Let's say you want to assign ports 21-25 to one FTP, Telnet and SMTP server (A in the example), port 80 to another (B in the example) and assign a default server IP address of 192.168.1.35 to a third (C in the example).

  • Page 123: Configuring Sua Server

    Prestige 660W/HW Series User’s Guide Figure 8-4 NAT Mode The following table describes the labels in this screen. Table 8-4 NAT Mode LABEL DESCRIPTION None Select this radio button to disable NAT. Select this radio button if you have just one public WAN IP address for your Prestige. The SUA Only Prestige uses Address Mapping Set 1 in the NAT - Edit SUA/NAT Server Set screen.

  • Page 124: Figure 8-5 Edit Sua/Nat Server Set

    Prestige 660W/HW Series User’s Guide Figure 8-5 Edit SUA/NAT Server Set The following table describes the fields in this screen. Table 8-5 Edit SUA/NAT Server Set LABEL DESCRIPTION Start Port No. Enter a port number in this field. To forward only one port, enter the port number again in the End Port No. field. To forward a series of ports, enter the start port number here and the end port number in the End Port No.

  • Page 125: Configuring Address Mapping

    Prestige 660W/HW Series User’s Guide Table 8-5 Edit SUA/NAT Server Set LABEL DESCRIPTION End Port No. Enter a port number in this field. To forward only one port, enter the port number again in the Start Port No. field above and then enter it again in this field.

  • Page 126: Figure 8-6 Address Mapping Rules

    Prestige 660W/HW Series User’s Guide Figure 8-6 Address Mapping Rules The following table describes the fields in this screen. Table 8-6 Address Mapping Rules LABEL DESCRIPTION Local Start IP This is the starting Inside Local IP Address (ILA). Local IP addresses are N/A for Server port mapping.

  • Page 127: Editing An Address Mapping Rule

    Prestige 660W/HW Series User’s Guide Table 8-6 Address Mapping Rules LABEL DESCRIPTION Type 1-1: One-to-one mode maps one local IP address to one global IP address. Note that port numbers do not change for the One-to-one NAT mapping type. M-1: Many-to-One mode maps multiple local IP addresses to one global IP address. This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported only.

  • Page 128: Table 8-7 Address Mapping Rule Edit

    Prestige 660W/HW Series User’s Guide Table 8-7 Address Mapping Rule Edit LABEL DESCRIPTION Type Choose the port mapping type from one of the following. 1. One-to-One: One-to-One mode maps one local IP address to one global IP address. Note that port numbers do not change for One-to-one NAT mapping type. 2.

  • Page 129: Chapter 9 Dynamic Dns Setup

    Prestige 660W/HW Series User’s Guide Chapter 9 Dynamic DNS Setup This chapter discusses how to configure your Prestige to use Dynamic DNS. Dynamic DNS Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.).

  • Page 130: Figure 9-1 Ddns

    Prestige 660W/HW Series User’s Guide Figure 9-1 DDNS The following table describes the fields in this screen. Table 9-1 DDNS LABEL DESCRIPTION Active Select this check box to use dynamic DNS. Service Provider This is the name of your Dynamic DNS service provider. Host Names Type the domain name assigned to your Prestige by your Dynamic DNS provider.

  • Page 131: Chapter 10 Time And Date

    Prestige 660W/HW Series User’s Guide Chapter 10 Time and Date This screen is not available on all models. Use this screen to configure the Prestige’s time and date settings. 10.1 Configuring Time and Date To change your Prestige’s time and date, click Time And Date. The screen appears as shown. Use this screen to configure the Prestige’s time based on your local time zone.
  • Page 132 Prestige 660W/HW Series User’s Guide The following table describes the fields in this screen. Table 10-1 Time and Date LABEL DESCRIPTION Time Server Use Protocol when Select the time service protocol that your time server sends when you turn on the Bootup Prestige.
  • Page 133 Prestige 660W/HW Series User’s Guide Table 10-1 Time and Date LABEL DESCRIPTION New Date (yyyy- This field displays the last updated date from the time server. mm-dd) When you select None in the Use Protocol when Bootup field, enter the new date in this field and then click Apply.

  • Page 134: Firewall And Content Filter

    Firewall and Content Filter Part IV: Firewall and Content Filter This part introduces firewalls in general and the Prestige firewall. It also explains customized services and logs and gives example firewall rules and an overview of content filtering.

  • Page 135: Chapter 11 Firewalls

    Prestige 660W/HW series User’s Guide Chapter 11 Firewalls This chapter gives some background information on firewalls and introduces the Prestige firewall. 11.1 Firewall Overview Originally, the term firewall referred to a construction technique designed to prevent the spread of fire from one room to another.

  • Page 136: Introduction To Zyxel's Firewall

    Prestige 660W/HW series User’s Guide Information hiding prevents the names of internal systems from being made known via DNS to outside systems, since the application gateway is the only host whose name must be made known to outside systems. Robust authentication and logging pre-authenticates application traffic before it reaches internal hosts and causes it to be logged more effectively than if it were logged with standard host logging.

  • Page 137: Denial Of Service

    Prestige 660W/HW series User’s Guide Denial of Service Attacks Figure 11-1 Prestige Firewall Application 11.4 Denial of Service Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources.

  • Page 138: Table 11-1 Common Ip Ports

    Prestige 660W/HW series User’s Guide Table 11-1 Common IP Ports Telnet HTTP SMTP POP3 11.4.2 Types of DoS Attacks There are four types of DoS attacks: 1. Those that exploit bugs in a TCP/IP implementation. 2. Those that exploit weaknesses in the TCP/IP specification. 3.

  • Page 139: Figure 11-2 Three-Way Handshake

    Prestige 660W/HW series User’s Guide Figure 11-2 Three-Way Handshake Under normal circumstances, the application that initiates a session sends a SYN (synchronize) packet to the receiving server. The receiver sends back an ACK (acknowledgment) packet and its own SYN, and then the initiator responds with an ACK (acknowledgment).

  • Page 140: Figure 11-4 Smurf Attack

    Prestige 660W/HW series User’s Guide 2-b In a LAND Attack, hackers flood SYN packets into the network with a spoofed source IP address of the targeted system. This makes it appear as if the host computer sent the packets to itself, making the system unavailable while the target system tries to respond to itself.

  • Page 141: Stateful Inspection

    Prestige 660W/HW series User’s Guide The only legal NetBIOS commands are the following - all others are illegal. Table 11-3 Legal NetBIOS Commands MESSAGE: REQUEST: POSITIVE: NEGATIVE: RETARGET: KEEPALIVE: All SMTP commands are illegal except for those displayed in the following tables. Table 11-4 Legal SMTP Commands AUTH DATA...

  • Page 142: Stateful Inspection Process

    Prestige 660W/HW series User’s Guide Allows all sessions originating from the LAN (local network) to the WAN (Internet). Denies all sessions originating from the WAN to the LAN. Figure 11-5 Stateful Inspection The previous figure shows the Prestige’s default firewall rules in action as well as demonstrates how stateful inspection works.

  • Page 143: Stateful Inspection And The Prestige

    Prestige 660W/HW series User’s Guide 4. Based on the obtained state information, a firewall rule creates a temporary access list entry that is inserted at the beginning of the WAN interface's inbound extended access list. This temporary access list entry is designed to permit inbound packets of the same connection as the outbound packet just inspected.

  • Page 144: Tcp Security

    Prestige 660W/HW series User’s Guide Below is a brief technical description of how these connections are tracked. Connections may either be defined by the upper protocols (for instance, TCP), or by the Prestige itself (as with the "virtual connections" created for UDP and ICMP). 11.5.3 TCP Security The Prestige uses state information embedded in TCP packets.

  • Page 145: Guidelines For Enhancing Security With Your Firewall

    Prestige 660W/HW series User’s Guide 11.5.5 Upper Layer Protocols Some higher layer protocols (such as FTP and RealAudio) utilize multiple network connections simultaneously. In general terms, they usually have a "control connection" which is used for sending commands between endpoints, and then "data connections" which are used for transmitting bulk information. Consider the FTP protocol.

  • Page 146: Packet Filtering Vs Firewall

    Prestige 660W/HW series User’s Guide against hackers and crackers is information. Educate all employees about the importance of security and how to minimize risk. Produce lists like this one! 2. DSL or cable modem connections are “always-on” connections and are particularly vulnerable because they provide more opportunities for hackers to crack your system.

  • Page 147: When To Use Filtering

    Prestige 660W/HW series User’s Guide When To Use Filtering 1. To block/allow LAN packets by their MAC addresses. 2. To block/allow special IP packets which are neither TCP nor UDP, nor ICMP packets. 3. To block/allow both inbound (WAN to LAN) and outbound (LAN to WAN) traffic between the specific inside host/network "A"...

  • Page 149: Chapter 12 Firewall Configuration

    Prestige 660W/HW series User’s Guide Chapter 12 Firewall Configuration This chapter shows you how to enable and configure the Prestige firewall. 12.1 Remote Management and the Firewall When remote management is configured to allow management (see the Remote Management chapter) and the firewall is enabled: •...

  • Page 150: Attack Alert

    Prestige 660W/HW series User’s Guide 12.3 Attack Alert Attack alerts are real-time reports of DoS attacks. In the Alert screen, shown later, you may choose to generate an alert whenever an attack is detected. For DoS attacks, the Prestige uses thresholds to determine when to drop sessions that do not become fully established.

  • Page 151: Tcp Maximum Incomplete And Blocking Time

    Prestige 660W/HW series User’s Guide The Prestige measures both the total number of existing half-open sessions and the rate of session establishment attempts. Both TCP and UDP half-open sessions are counted in the total number and rate measurements. Measurements are made once a minute. When the number of existing half-open sessions rises above a threshold (max-incomplete high), the Prestige starts deleting half-open sessions as required to accommodate new connection requests.

  • Page 152: Figure 12-2 Alert

    Prestige 660W/HW series User’s Guide Figure 12-2 Alert The following table describes the labels in this screen. Table 12-1 Alert LABEL DESCRIPTION Generate alert Select this check box to generate an alert whenever an attack is detected. when attack detected Denial of Services Thresholds One Minute Low This is the rate of new half-open sessions that causes the firewall to stop deleting...
  • Page 153 Prestige 660W/HW series User’s Guide Table 12-1 Alert LABEL DESCRIPTION One Minute High This is the rate of new half-open sessions that causes the firewall to start deleting half-open sessions. The default is "100". When the rate of new connection attempts rises above this number, the Prestige deletes half-open sessions as required to accommodate new connection attempts.

  • Page 155: Chapter 13 Creating Custom Rules

    Prestige 660W/HW series User’s Guide Chapter 13 Creating Custom Rules This chapter contains instructions for defining both Local Network and Internet rules. 13.1 Rules Overview Firewall rules are subdivided into “Local Network” and “Internet”. By default, the Prestige’s stateful packet inspection allows all communications to the Internet that originate from the local network, and blocks all traffic to the LAN that originates from the Internet.

  • Page 156: Security Ramifications

    Prestige 660W/HW series User’s Guide 3. What is the direction connection: from the LAN to the Internet, or from the Internet to the LAN? 4. What IP services will be affected? 5. What computers on the LAN are to be affected (if any)? 6.

  • Page 157: Connection Direction

    Prestige 660W/HW series User’s Guide Source Address What is the connection’s source address; is it on the LAN or WAN? Is it a single IP, a range of IPs or a subnet? Destination Address What is the connection’s destination address; is it on the LAN or WAN? Is it a single IP, a range of IPs or a subnet? 13.3 Connection Direction This section talks about configuring firewall rules for connections going from LAN to WAN and WAN to...

  • Page 158: Rule Summary

    Prestige 660W/HW series User’s Guide Figure 13-2 WAN to LAN Traffic 13.4 Rule Summary The fields in the Rule Summary screens are the same for Local Network to Internet Set and Internet to Local Network Set, so the discussion below refers to both. Click on Firewall, then Rule Summary to bring up the following screen.

  • Page 159: Figure 13-3 Firewall Rules Summary: First Screen

    Prestige 660W/HW series User’s Guide Figure 13-3 Firewall Rules Summary: First Screen The following table describes the labels in this screen. Table 13-1 Firewall Rules Summary: First Screen LABEL DESCRIPTION Use the drop-down list box to select whether to Block (silently discard) or The default action for packets not matching Forward (allow the passage of) packets that do not match the following rules.

  • Page 160: Predefined Services

    Prestige 660W/HW series User’s Guide Table 13-1 Firewall Rules Summary: First Screen LABEL DESCRIPTION The following fields summarize the rules you have created. Note that these fields are read only. Click the tab at the top of the box to order the rules according to that tab. This is your firewall rule number.

  • Page 161: Table 13-2 Predefined Services

    Prestige 660W/HW series User’s Guide Table 13-2 Predefined Services SERVICE DESCRIPTION AIM/NEW_ICQ(TCP:5190) AOL’s Internet Messenger service, used as a listening port by ICQ. AUTH(TCP:113) Authentication protocol used by some servers. BGP(TCP:179) Border Gateway Protocol. BOOTP_CLIENT(UDP:68) DHCP Client. BOOTP_SERVER(UDP:67) DHCP Server. CU-SEEME(TCP/UDP:7648, A popular videoconferencing solution from White Pines Software.
  • Page 162 Prestige 660W/HW series User’s Guide Table 13-2 Predefined Services SERVICE DESCRIPTION NNTP(TCP:119) Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service. PING(ICMP:0) Packet INternet Groper is a protocol that sends out ICMP echo requests to test whether or not a remote host is reachable. POP3(TCP:110) Post Office Protocol version 3 lets a client computer get e-mail from a POP3 server through a temporary connection (TCP/IP or other).

  • Page 163: Creating/Editing Firewall Rules

    Prestige 660W/HW series User’s Guide Table 13-2 Predefined Services SERVICE DESCRIPTION SSH(TCP/UDP:22) Secure Shell Remote Login Program. STRMWORKS(UDP:1558) Stream Works Protocol. SYSLOG(UDP:514) Syslog allows you to send system logs to a UNIX server. TACACS(UDP:49) Login Host Protocol used for (Terminal Access Controller Access Control System).

  • Page 164: Figure 13-4 Creating/Editing A Firewall Rule

    Prestige 660W/HW series User’s Guide Figure 13-4 Creating/Editing A Firewall Rule The following table describes the labels in this screen. Table 13-3 Creating/Editing A Firewall Rule LABEL DESCRIPTION Source Address Click SrcAdd to add a new address, SrcEdit to edit an existing one or SrcDelete to delete one.

  • Page 165: Source And Destination Addresses

    Prestige 660W/HW series User’s Guide Table 13-3 Creating/Editing A Firewall Rule LABEL DESCRIPTION Destination Address Click DestAdd to add a new address, DestEdit to edit an existing one or DestDelete to delete one. Services Select a service in the Available Services box on the left, then click >> to select. The selected service shows up on the Selected Services box on the right.

  • Page 166: Timeout

    Prestige 660W/HW series User’s Guide Figure 13-5 Adding/Editing Source and Destination Addresses The following table describes the labels in this screen. Table 13-4 Adding/Editing Source and Destination Addresses LABEL DESCRIPTION Address Type Do you want your rule to apply to packets with a particular (single) IP address, a range of IP addresses (e.g., 192.168.1.10 to 192.169.1.50), a subnet or any IP address? Select an option from the drop-down list box that includes: Single Address, Range Address, Subnet Address and Any Address.

  • Page 167: Figure 13-6 Timeout

    Prestige 660W/HW series User’s Guide 13.7.1 Factors Influencing Choices for Timeout Values The factors influencing choices for timeout values are the same as the factors influencing choices for threshold values – see section 12.3.2. Click Timeout for either Local Network to Internet Set or Internet to Local Network Set.
  • Page 168 Prestige 660W/HW series User’s Guide Table 13-5 Timeout LABEL DESCRIPTION ICMP Timeout Type the number of seconds (default 60) for an ICMP session to wait for the ICMP response. Back Click Back to return to the previous screen. Apply Click Apply to save your customized settings and exit this screen. Cancel Click Cancel to return to the previous configuration.

  • Page 169: Chapter 14 Customized Services

    Prestige 660W/HW series User’s Guide Chapter 14 Customized Services This chapter covers creating, viewing and editing custom services. 14.1 Introduction to Customized Services Configure customized services and port numbers not predefined by the Prestige (see Figure 13-4). For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website.

  • Page 170: Creating/Editing A Customized Service

    Prestige 660W/HW series User’s Guide Table 14-1 Customized Services LABEL DESCRIPTION Customized Services This is the number of your customized port. Click a rule’s number of a service to go to the Firewall Customized Services Config screen to configure or edit a customized service.

  • Page 171: Example Custom Service Firewall Rule

    Prestige 660W/HW series User’s Guide Table 14-2 Creating/Editing A Customized Service LABEL DESCRIPTION Service Name Type a unique name for your custom port. Service Type Choose the IP port (TCP, UDP or TCP/UDP) that defines your customized port from the drop down list box.

  • Page 172: Figure 14-4 Configure Source Ip Example

    Prestige 660W/HW series User’s Guide Step 4. Click ScrAdd to open the Rule IP Config screen. Configure it as follows and click Apply. Figure 14-4 Configure Source IP Example Step 5. Click Edit Available Service in the Edit rule screen and then click a rule number to bring up the Firewall Customized Services Config screen.

  • Page 173: Figure 14-6 Syslog Rule Configuration Example

    Prestige 660W/HW series User’s Guide Step 6. Follow the procedures outlined earlier in this chapter to configure all your rules. Configure the rule configuration screen like the one below and apply it. This is the address range of the MyService computers. This is your MyService custom port.

  • Page 174: Figure 14-7 Rule Summary Example

    Prestige 660W/HW series User’s Guide Step 7. On completing the configuration procedure for these Internet firewall rules, the Rule Summary screen should look like the following. Don’t forget to click Apply when you have finished configuring your rule(s) to save your settings back to the Prestige. This rule allows a MyService connection from the WAN.

  • Page 175: Chapter 15 Content Filtering

    Prestige 660W/HW series User’s Guide Chapter 15 Content Filtering This chapter covers how to configure content filtering. 15.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering gives you the ability to block web sites that contain key words (that you specify) in the URL.

  • Page 176: Figure 15-1 Content Filter: Keyword

    Prestige 660W/HW series User’s Guide Figure 15-1 Content Filter: Keyword The following table describes the labels in this screen. Table 15-1 Content Filter: Keyword LABEL DESCRIPTION Enable Keyword Blocking Select this check box to enable this feature. Block Websites that This box contains the list of all the keywords that you have configured the Prestige contain these keywords in to block.

  • Page 177: Configuring The Schedule

    Prestige 660W/HW series User’s Guide Table 15-1 Content Filter: Keyword LABEL DESCRIPTION Add Keyword Click Add Keyword after you have typed a keyword. Repeat this procedure to add other keywords. Up to 127 keywords are allowed. When you try to access a web page containing a keyword, you will get a message telling you that the content filter is blocking this request.

  • Page 178: Configuring Trusted Computers

    Prestige 660W/HW series User’s Guide Table 15-2 Content Filter: Schedule LABEL DESCRIPTION Days to Block: Select a check box to configure which days of the week (or everyday) you want the content filtering to be active. Time of Day to Use the 24 hour format to configure which time of the day (or select the All day check box) Block: you want the content filtering to be active.
  • Page 179 Prestige 660W/HW series User’s Guide Table 15-3 Content Filter: Trusted LABEL DESCRIPTION Type the ending IP address of a specific range of users on your LAN that you want to exclude from content filtering. Leave this field blank if you want to exclude an individual computer.

  • Page 180: Remote Management, Upnp And Logs

    Remote Management, UPnP and Logs Part V: Remote Management, UPnP and Logs This part contains information on how to configure the Prestige for remote management, setting up Universal Plug and Play (UPnP) and setting up and displaying logs.

  • Page 181: Chapter 16 Remote Management Configuration

    Prestige 660W/HW Series User’s Guide Chapter 16 Remote Management Configuration This chapter provides information on configuring remote management. 16.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which Prestige interface (if any) from which computers. When you configure remote management to allow management from the WAN, you still need to configure a firewall rule to allow access.

  • Page 182: Telnet

    Prestige 660W/HW Series User’s Guide 3. The IP address in the Secured Client IP field does not match the client IP address. If it does not match, the Prestige will disconnect the session immediately. 4. There is already another remote management session with an equal or higher priority running. You may only have one remote management session running at one time.

  • Page 183: Web

    Prestige 660W/HW Series User’s Guide 16.4 Web You can use the Prestige’s embedded web configurator for configuration and file management. See the online help for details. 16.5 Configuring Remote Management Click Remote Management to open the following screen. Figure 16-2 Remote Management The following table describes the fields in this screen.

  • Page 185: Chapter 17 Universal Plug-And-Play (Upnp)

    Prestige 660W/HW Series User’s Guide Chapter 17 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configurator. 17.1 Introducing Universal Plug and Play Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer- to-peer network connectivity between devices.

  • Page 186: Upnp And Zyxel

    Prestige 660W/HW Series User’s Guide All UPnP-enabled devices may communicate freely with each other without additional configuration. Disable UPnP if this is not your intention. 17.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum Creates UPnP™ Implementers Corp.

  • Page 187: Installing Upnp In Windows Example

    Prestige 660W/HW Series User’s Guide Table 17-1 Configuring UPnP LABEL DESCRIPTION Allow users to make Select this check box to allow UPnP-enabled applications to automatically configuration changes configure the Prestige so that they can communicate through the Prestige, for through UPnP example by using NAT traversal, UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device;...
  • Page 188 Prestige 660W/HW Series User’s Guide Step 3. In the Communications window, select the Universal Plug and Play check box in the Components selection box. Step 4. Click OK to go back to the Add/Remove Programs Properties window and click Next. Step 5.

  • Page 189: Using Upnp In Windows Xp Example

    Prestige 660W/HW Series User’s Guide Step 5. In the Networking Services window, select the Universal Plug and Play check box. Step 6. Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 17.4 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP.
  • Page 190 Prestige 660W/HW Series User’s Guide Step 3. Step 4. In the Internet Connection Properties You may edit or delete the port window, click Settings to see the port mappings or click Add to mappings there were automatically created. manually add port mappings. When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
  • Page 191 Prestige 660W/HW Series User’s Guide Step 6. Double-click on the icon to display your current Internet connection status. Web Configurator Easy Access With UPnP, you can access the web-based configurator on the Prestige without finding out the IP address of the Prestige first.
  • Page 192 Prestige 660W/HW Series User’s Guide Step 4. An icon with the description for each UPnP-enabled device displays under Local Network. Step 5. Right-click on the icon for your Prestige and select Invoke. The web configurator login screen displays. Step 6. Right-click on the icon for your Prestige and select Properties.

  • Page 193: Chapter 18 Logs Screens

    Prestige 660W/HW Series User’s Guide Chapter 18 Logs Screens This chapter contains information about configuring general log settings and viewing the Prestige’s logs. Refer to the appendix for example log message explanations. 18.1 Logs Overview The web configurator allows you to choose which categories of events and/or alerts to have the Prestige log and then display the logs or have the Prestige send them to an administrator (as e-mail) or to a syslog server.

  • Page 194: Figure 18-1 Log Settings

    Prestige 660W/HW Series User’s Guide Figure 18-1 Log Settings The following table describes the fields in this screen. 18-2 Logs Screens...

  • Page 195: Table 18-1 Log Settings

    Prestige 660W/HW Series User’s Guide Table 18-1 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below. If this field is left blank, logs and alert messages will not be sent via e-mail.

  • Page 196: Displaying The Logs

    Prestige 660W/HW Series User’s Guide Table 18-1 Log Settings LABEL DESCRIPTION Select the categories of logs that you want to record. Logs include alerts. Send Immediate Alert Select the categories of alerts for which you want the Prestige to instantly e-mail alerts to the e-mail address specified in the Send Alerts To field.

  • Page 197: Smtp Error Messages

    Prestige 660W/HW Series User’s Guide Table 18-2 View Logs LABEL DESCRIPTION Display The categories that you select in the Log Settings screen (see section 18.2) display in the drop-down list box. Select a category of logs to view; select All Logs to view logs from all of the log categories that you selected in the Log Settings page.

  • Page 198: Figure 18-3 E-Mail Log Example

    Prestige 660W/HW Series User’s Guide Table 18-3 SMTP Error Messages -7 means DATA fail -8 means mail data send fail 18.4.1 Example E-mail Log An "End of Log" message displays for each mail in which a complete log has been sent. The following is an example of a log sent by e-mail.
  • Page 199 Media Bandwidth Management Media Bandwidth Management This part provides information on the functions and configuration of Media Bandwidth Management.

  • Page 201: Media Bandwidth Management

    Prestige 660W/HW Series User’s Guide Chapter 19 Media Bandwidth Management This chapter describes the functions and configuration of bandwidth management. 19.1 Bandwidth Management Overview Bandwidth management allows you to allocate an interface’s outgoing capacity to specific types of traffic. It can also help you make sure that the Prestige forwards certain types of traffic (especially real-time applications) with minimum delay.

  • Page 202: Chapter 19 Media Bandwidth Management

    Prestige 660W/HW Series User’s Guide configure child-classes with filters for any classes that you configure without filters. The Prestige leaves the bandwidth budget allocated and unused for a class that does not have a filter itself or child-classes with filters. View your configured bandwidth classes and child- classes in the Class Setup screen (see section 19.9 for details).

  • Page 203: Figure 19-2 Subnet-Based Bandwidth Management Example

    Prestige 660W/HW Series User’s Guide Figure 19-2 Subnet-based Bandwidth Management Example 19.4.3 Application and Subnet-based Bandwidth Management Example The following example uses bandwidth classes based on LAN subnets and applications (specific applications in each subnet are allotted bandwidth). Table 19-1 Application and Subnet-based Bandwidth Management Example TRAFFIC TYPE FROM SUBNET A FROM SUBNET B...

  • Page 204: Scheduler

    Prestige 660W/HW Series User’s Guide 19.5 Scheduler The scheduler divides up an interface’s bandwidth among the bandwidth classes. The Prestige has two types of scheduler: fairness-based and priority-based. 19.5.1 Priority-based Scheduler With the priority-based scheduler, the Prestige forwards traffic from bandwidth classes according to the priorities that you assign to the bandwidth classes.

  • Page 205: Figure 19-4 Bandwidth Allotment Example

    Prestige 660W/HW Series User’s Guide 19.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic Do the following three steps to configure the Prestige to allow bandwidth for traffic that is not defined in a bandwidth filter. Leave some of the interface’s bandwidth unbudgeted. Do not enable the interface’s Maximize Bandwidth Usage option.

  • Page 206: Figure 19-5 Maximize Bandwidth Usage Example

    Prestige 660W/HW Series User’s Guide Therefore, the Prestige divides a total of 3 Mbps total of unbudgeted and unused bandwidth among the classes that require more bandwidth. In this case, suppose that all of the classes except for the administration class need more bandwidth.

  • Page 207: Bandwidth Borrowing

    Prestige 660W/HW Series User’s Guide 19.7 Bandwidth Borrowing Bandwidth borrowing allows a child-class to borrow unused bandwidth from its parent class, whereas maximize bandwidth usage allows bandwidth classes to borrow any unused or unbudgeted bandwidth on the whole interface. Enable bandwidth borrowing on a child-class to allow the child-class to use its parent class’s unused bandwidth.

  • Page 208: Figure 19-6 Bandwidth Borrowing Example

    Prestige 660W/HW Series User’s Guide Figure 19-6 Bandwidth Borrowing Example The Bill class can borrow unused bandwidth from the Sales USA class because the Bill class has bandwidth borrowing enabled. The Bill class can also borrow unused bandwidth from the Sales class because the Sales USA class also has bandwidth borrowing enabled.

  • Page 209: Configuring Summary

    Prestige 660W/HW Series User’s Guide The R&D Software and Hardware classes can both borrow unused bandwidth from the R&D class because the R&D Software and Hardware classes both have bandwidth borrowing enabled. The R&D Software and Hardware classes can also borrow unused bandwidth from the Root class because the R&D class also has bandwidth borrowing enabled.

  • Page 210: Figure 19-7 Media Bandwidth Management: Summary

    Prestige 660W/HW Series User’s Guide Figure 19-7 Media Bandwidth Management: Summary The following table describes the labels in this screen. Table 19-2 Media Bandwidth Management: Summary LABEL DESCRIPTION These read-only labels represent the physical interfaces. Select an interface’s check WLAN box to enable bandwidth management on that interface.

  • Page 211: Configuring Class Setup

    Prestige 660W/HW Series User’s Guide Table 19-2 Media Bandwidth Management: Summary LABEL DESCRIPTION Maximize Select this check box to have the Prestige divide up all of the interface’s unallocated Bandwidth and/or unused bandwidth among the bandwidth classes that require bandwidth. Do Usage not select this if you want to reserve bandwidth for traffic that does not match a bandwidth class (see section 19.6.1) or you want to limit the speed of this interface...

  • Page 212: Figure 19-8 Media Bandwidth Management: Class Setup

    Prestige 660W/HW Series User’s Guide Figure 19-8 Media Bandwidth Management: Class Setup The following table describes the labels in this screen. Table 19-3 Media Bandwidth Management: Class Setup LABEL DESCRIPTION Interface Select an interface from the drop-down list box for which you wish to set up classes.

  • Page 213: Figure 19-9 Media Bandwidth Management: Class Configuration

    Prestige 660W/HW Series User’s Guide Figure 19-9 Media Bandwidth Management: Class Configuration The following table describes the labels in this screen. Table 19-4 Media Bandwidth Management: Class Configuration LABEL DESCRIPTION Class Name Use the auto-generated name or enter a descriptive name of up to 20 alphanumeric characters, including spaces.
  • Page 214 Prestige 660W/HW Series User’s Guide Table 19-4 Media Bandwidth Management: Class Configuration LABEL DESCRIPTION Borrow bandwidth Select this option to allow a child-class to borrow bandwidth from its parent from parent class class if the parent class is not using up its bandwidth budget. Bandwidth borrowing is governed by the priority of the child-classes.

  • Page 215: Table 19-5 Services And Port Numbers

    Prestige 660W/HW Series User’s Guide Table 19-4 Media Bandwidth Management: Class Configuration LABEL DESCRIPTION Source Port Enter the port number of the source. See the following table for some common services and port numbers. A blank source port means any source port number.

  • Page 216: Figure 19-10 Media Bandwidth Management Statistics

    Prestige 660W/HW Series User’s Guide Figure 19-10 Media Bandwidth Management Statistics The following table describes the labels in this screen. Table 19-6 Media Bandwidth Management Statistics LABEL DESCRIPTION Class Name This field displays the name of the class the statistics page is showing. Budget (kbps) This field displays the amount of bandwidth allocated to the class.

  • Page 217: Bandwidth Monitor

    Prestige 660W/HW Series User’s Guide 19.10 Bandwidth Monitor To view the Prestige’s bandwidth usage and allotments, click Media Bandwidth Management, then Monitor. The screen appears as shown. Figure 19-11 Media Bandwidth Management: Monitor The following table describes the labels in this screen. Table 19-7 Media Bandwidth Management: Monitor LABEL DESCRIPTION...

  • Page 218: Maintenance

    Maintenance Part VII: Maintenance This part covers the maintenance screens.

  • Page 219: Chapter 20 Maintenance

    Prestige 660W/HW Series User’s Guide Chapter 20 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 20.1 Maintenance Overview The maintenance screens can help you view system information, upload new firmware, manage configuration and restart your Prestige.

  • Page 220: Figure 20-1 System Status

    Prestige 660W/HW Series User’s Guide Figure 20-1 System Status 20-2 Maintenance...

  • Page 221: Table 20-1 System Status

    Prestige 660W/HW Series User’s Guide The following table describes the fields in this screen. Table 20-1 System Status LABEL DESCRIPTION System Status System Name This is the name of your Prestige. It is for identification purposes. This is the ZyNOS firmware version and the date created. ZyNOS is ZyXEL's ZyNOS Firmware Version proprietary Network Operating System design.

  • Page 222: Figure 20-2 System Status: Show Statistics

    Prestige 660W/HW Series User’s Guide Table 20-1 System Status LABEL DESCRIPTION WLAN Information ESSID This is the descriptive name used to identify the Prestige in the wireless LAN. Channel This is the channel number used by the Prestige now. WEP This displays the status of WEP data encryption. Show Statistics Click Show Statistics to see the performance statistics such as number of packets sent and number of packets received for each port.

  • Page 223: Table 20-2 System Status: Show Statistics

    Prestige 660W/HW Series User’s Guide The following table describes the fields in this screen. Table 20-2 System Status: Show Statistics LABEL DESCRIPTION System up Time This is the elapsed time the system has been up. CPU Load This field specifies the percentage of CPU utilization. LAN or WAN Port This is the WAN or LAN port.

  • Page 224: Dhcp Table Screen

    Prestige 660W/HW Series User’s Guide Table 20-2 System Status: Show Statistics LABEL DESCRIPTION Poll Interval(s) Type the time interval for the browser to refresh system statistics. Set Interval Click this button to apply the new poll interval you entered in the Poll Interval field above.

  • Page 225: Any Ip Table Screen

    Prestige 660W/HW Series User’s Guide Table 20-3 DHCP Table LABEL DESCRIPTION MAC Address This field displays the MAC (Media Access Control) address of the computer with the displayed host name. Every Ethernet device has a unique MAC address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.

  • Page 226: Wireless Screen

    Prestige 660W/HW Series User’s Guide 20.5 Wireless Screen The read-only screen displays information about the Prestige’s wireless LAN. 20.5.1 Association List This screen displays the MAC address(es) of the wireless stations that are currently logged in to the network. Click Wireless LAN and then Association List to open the screen shown next. Figure 20-5 Association List The following table describes the fields in this screen.

  • Page 227: Figure 20-6 Diagnostic General

    Prestige 660W/HW Series User’s Guide 20.6.1 Diagnostic General Screen Click Diagnostic and then General to open the screen shown next. Figure 20-6 Diagnostic General The following table describes the fields in this screen. Table 20-6 Diagnostic General LABEL DESCRIPTION TCP/IP Type the IP address of a computer that you want to ping in order to test a connection.

  • Page 228: Figure 20-7 Diagnostic Dsl Line

    Prestige 660W/HW Series User’s Guide 20.6.2 Diagnostic DSL Line Screen Click Diagnostic and then DSL Line to open the screen shown next. Figure 20-7 Diagnostic DSL Line The following table describes the fields in this screen. Table 20-7 Diagnostic DSL Line LABEL DESCRIPTION Reset ADSL...

  • Page 229: Firmware Screen

    Prestige 660W/HW Series User’s Guide Table 20-7 Diagnostic DSL Line LABEL DESCRIPTION F5 packet to the DSLAM/ATM switch and then returns it (loops it back) to the Prestige. The ATM loopback test is useful for troubleshooting problems with the DSLAM and ATM network.

  • Page 230: Figure 20-8 Firmware Upgrade

    Prestige 660W/HW Series User’s Guide Figure 20-8 Firmware Upgrade The following table describes the labels in this screen. Table 20-8 Firmware Upgrade LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Browse ... to find it. Click Browse...

  • Page 231: Figure 20-9 Network Temporarily Disconnected

    Prestige 660W/HW Series User’s Guide Figure 20-9 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the System Status screen. If the upload was not successful, the following screen will appear. Click Back to go back to the Firmware screen.

  • Page 232: Smt General Configuration

    SMT General Configuration Part VIII: SMT General Configuration This part covers System Management Terminal configuration for general setup, WAN backup, LAN setup, wireless LAN setup, Internet access, remote node, static route, NAT and enabling the firewall. See the web configurator parts of this guide for background information on features configurable by web configurator and SMT.

  • Page 233: Chapter 21 Introducing The Smt

    Prestige 660W/HW Series User’s Guide Chapter 21 Introducing the SMT This chapter explains how to access and navigate the System Management Terminal and gives an overview of its menus. 21.1 SMT Introduction The Prestige’s SMT (System Management Terminal) is a menu-driven interface that you can access from a terminal emulator over a telnet connection.

  • Page 234: Figure 21-1 Login Screen

    Prestige 660W/HW Series User’s Guide Enter Password : **** Figure 21-1 Login Screen 21.1.3 Prestige SMT Menu Overview We use the Prestige 660HW-61 SMT menus in this guide as an example. The SMT menus vary slightly for different Prestige models. The following figure gives you an overview of the various SMT menu screens of your Prestige.

  • Page 235: Navigating The Smt Interface

    Prestige 660W/HW Series User’s Guide Prestige 660HW Main Menu Menu 2 Menu 14 Menu 3 Menu 4 Menu 12 Menu 1 Menu 11 Menu 15 WAN Backup Setup Dial-in User Setup LAN Setup Internet Access Static Routing Setup General Setup NAT Setup Remote Node Setup Setup...

  • Page 236: Table 21-1 Main Menu Commands

    Prestige 660W/HW Series User’s Guide Table 21-1 Main Menu Commands OPERATION KEYSTROKE DESCRIPTION Move down to [ENTER] To move forward to a submenu, type in the number of the desired another menu submenu and press [ENTER]. Move up to a [ESC] Press [ESC] to move back to the previous menu.

  • Page 237: Figure 21-3 Smt Main Menu

    Prestige 660W/HW Series User’s Guide Copyright (c) 1994 - 2003 ZyXEL Communications Corp. Prestige 660HW-61 Main Menu Getting Started Advanced Management 1. General Setup 21. Filter and Firewall Setup 2. WAN Backup Setup 22. SNMP Configuration 3. LAN Setup 23. System Security 4.

  • Page 238: Changing The System Password

    Prestige 660W/HW Series User’s Guide Table 21-2 Main Menu Summary MENU TITLE DESCRIPTION IP Routing Policy Setup Use this menu to configure your IP routing policy. Schedule Setup Use this menu to schedule outgoing calls. Exit Use this to exit from SMT and return to a blank screen. 21.3 Changing the System Password Change the Prestige default password by following the steps shown next.

  • Page 239: Chapter 22 Menu 1 General Setup

    Prestige 660W/HW Series User’s Guide Chapter 22 Menu 1 General Setup Menu 1 - General Setup contains administrative and system-related information. 22.1 General Setup Menu 1 — General Setup contains administrative and system-related information (shown next). The System Name field is for identification purposes. However, because some ISPs check this name you should enter your computer's "Computer Name".

  • Page 240: Figure 22-1 Menu 1 General Setup

    Prestige 660W/HW Series User’s Guide Menu 1 - General Setup System Name= ? Location= Contact Person's Name= Domain Name= Edit Dynamic DNS= No Route IP= Yes Bridge= No Press ENTER to Confirm or ESC to Cancel: Figure 22-1 Menu 1 General Setup Step 2.

  • Page 241: Figure 22-2 Menu 1.1 Configure Dynamic Dns

    Prestige 660W/HW Series User’s Guide 22.2.1 Procedure to Configure Dynamic DNS If you have a private WAN IP address, then you cannot use Dynamic DNS. Step 1. To configure Dynamic DNS, go to Menu 1 — General Setup and select Yes in the Edit Dynamic DNS field.

  • Page 243: Introduction To Wan Backup Setup

    Prestige 660W/HW Series User’s Guide Chapter 23 Menu 2 WAN Backup Setup This chapter describes how to configure traffic redirect and dial-backup using menu 2 and 2.1. 23.1 Introduction to WAN Backup Setup This chapter explains how to configure the Prestige for traffic redirect and dial backup connections. 23.2 Configuring Dial Backup in Menu 2 From the main menu, enter 2 to open menu 2.

  • Page 244: Traffic Redirect Setup

    Prestige 660W/HW Series User’s Guide Table 23-1 Menu 2 WAN Backup Setup FIELD DESCRIPTION Check WAN IP Configure this field to test your Prestige's WAN accessibility. Type the IP address of Address1-3 a reliable nearby computer (for example, your ISP's DNS server address). When using a WAN backup connection, the Prestige periodically pings the addresses configured here and uses the other WAN backup connection (if configured) if there is no response.

  • Page 245: Figure 23-2 Menu 2.1Traffic Redirect Setup

    Prestige 660W/HW Series User’s Guide Menu 2.1 - Traffic Redirect Setup Active= No Configuration: Backup Gateway IP Address= 0.0.0.0 Metric= 15 Press ENTER to Confirm or ESC to Cancel: Figure 23-2 Menu 2.1Traffic Redirect Setup The following table describes the fields in this menu. Table 23-2 Menu 2.1Traffic Redirect Setup FIELD DESCRIPTION...

  • Page 247: Chapter 24 Menu 3 Lan Setup

    Prestige 660W/HW Series User’s Guide Chapter 24 Menu 3 LAN Setup This chapter covers how to configure your wired Local Area Network (LAN) settings. 24.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 — LAN Setup. From the main menu, enter 3 to display menu 3.

  • Page 248: Protocol Dependent Ethernet Setup

    Prestige 660W/HW Series User’s Guide Menu 3.1 - LAN Port Filter Setup Input Filter Sets: protocol filters= device filters= Output Filter Sets: protocol filters= device filters= Press ENTER to Confirm or ESC to Cancel: Figure 24-2 Menu 3.1 LAN Port Filter Setup If you need to define filters, please read the Filter Set Configuration chapter first, then return to this menu to define the filter sets.

  • Page 249: Figure 24-3 Menu 3.2 Tcp/Ip And Dhcp Ethernet Setup

    Prestige 660W/HW Series User’s Guide Menu 3.2 - TCP/IP and DHCP Ethernet Setup First address in DHCP Setup: the IP pool DHCP= Server Client IP Pool Starting Address= 192.168.1.33 Size of Client IP Pool= 32 Primary DNS Server= 0.0.0.0 Size of the IP Secondary DNS Server= 0.0.0.0 Remote DHCP Server= N/A Pool...

  • Page 250: Table 24-2 Tcp/Ip Ethernet Setup

    Prestige 660W/HW Series User’s Guide Table 24-1 DHCP Ethernet Setup FIELD DESCRIPTION EXAMPLE Remote DHCP Server If Relay is selected in the DHCP field above then enter the IP address of the actual remote DHCP server here. Follow the instructions in the following table to configure TCP/IP parameters for the Ethernet port. Table 24-2 TCP/IP Ethernet Setup FIELD DESCRIPTION...

  • Page 251: Wireless Lan Overview

    Prestige 660W/HW Series User’s Guide Chapter 25 Wireless LAN Setup This chapter covers how to configure wireless LAN settings in SMT menu 3.5. 25.1 Wireless LAN Overview Refer to the chapter on the wireless LAN screens for wireless LAN background information. 25.2 Wireless LAN Setup Use menu 3.5 to set up your Prestige as the wireless access point.

  • Page 252: Table 25-1 Menu 3.5 - Wireless Lan Setup

    Prestige 660W/HW Series User’s Guide Table 25-1 Menu 3.5 - Wireless LAN Setup FIELD DESCRIPTION EXAMPLE ESSID The ESSID (Extended Service Set IDentifier) identifies the AP to which the Wireless wireless stations associate. Wireless stations associating to the Access Point must have the same ESSID.

  • Page 253: Figure 25-2 Menu 3.5.1 Wlan Mac Address Filtering

    Prestige 660W/HW Series User’s Guide Table 25-1 Menu 3.5 - Wireless LAN Setup FIELD DESCRIPTION EXAMPLE Edit MAC To edit MAC address filtering table, press [SPACE BAR] to select Yes and Address press [ENTER] to open menu 3.5.1. Filter When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel”...
  • Page 254 Prestige 660W/HW Series User’s Guide Table 25-2 Menu 3.5.1 WLAN MAC Address Filtering FIELD DESCRIPTION Define the filter action for the list of MAC addresses in the MAC address filter table. To deny access to the Prestige, press [SPACE BAR] to select Deny Association and press [ENTER].

  • Page 255: Chapter 26 Internet Access

    Prestige 660W/HW Series User’s Guide Chapter 26 Internet Access This chapter shows you how to configure the LAN and WAN of your Prestige for Internet access 26.1 Internet Access Overview Refer to the chapters on the web configurator’s wizard, LAN and WAN screens for more background information on fields in the SMT screens covered in this chapter.

  • Page 256: Figure 26-2 Partitioned Logical Networks

    Prestige 660W/HW Series User’s Guide Figure 26-1 Physical Network Figure 26-2 Partitioned Logical Networks Use menu 3.2.1 to configure IP Alias on your Prestige. 26.4 IP Alias Setup Use menu 3.2 to configure the first network. Move the cursor to Edit IP Alias field and press [SPACEBAR] to choose Yes and press [ENTER] to configure the second and third network.

  • Page 257: Figure 26-4 Menu 3.2.1 Ip Alias Setup

    Prestige 660W/HW Series User’s Guide Menu 3.2.1 - IP Alias Setup IP Alias 1= No IP Address= N/A IP Subnet Mask= N/A RIP Direction= N/A Version= N/A Incoming protocol filters= N/A Outgoing protocol filters= N/A IP Alias 2= No IP Address= N/A IP Subnet Mask= N/A RIP Direction= N/A Version= N/A...

  • Page 258: Figure 26-5 Menu 1 General Setup

    Prestige 660W/HW Series User’s Guide 26.5 Route IP Setup The first step is to enable the IP routing in Menu 1 — General Setup. To edit menu 1, type 1 in the main menu and press [ENTER]. Set the Route IP field to Yes by pressing [SPACE BAR].

  • Page 259: Figure 26-6 Menu 4 Internet Access Setup

    Prestige 660W/HW Series User’s Guide Menu 4 - Internet Access Setup ISP's Name= MyIsp Encapsulation= ENET ENCAP Multiplexing= LLC-based VPI #= 8 VCI #= 32 ATM QoS Type= UBR Peak Cell Rate (PCR)= 0 Sustain Cell Rate (SCR)= 0 Maximum Burst Size (MBS)= 0 My Login= N/A My Password= N/A ENET ENCAP Gateway= N/A...
  • Page 260 Prestige 660W/HW Series User’s Guide Table 26-2 Menu 4 Internet Access Setup FIELD DESCRIPTION EXAMPLE Sustain Cell Sustained Cell Rate is the mean cell rate of a bursty, on-off traffic Rate (SCR)= 0 source that can be sent at the peak rate, and a parameter for burst- traffic.

  • Page 261: Chapter 27 Remote Node Configuration

    Prestige 660W/HW Series User’s Guide Chapter 27 Remote Node Configuration This chapter covers remote node configuration. 27.1 Remote Node Setup Overview This section describes the protocol-independent parameters for a remote node. A remote node is required for placing calls to a remote gateway. A remote node represents both the remote gateway and the network behind it across a WAN connection.

  • Page 262: Figure 27-1 Menu 11 Remote Node Setup

    Prestige 660W/HW Series User’s Guide Menu 11 - Remote Node Setup 1. My ISP (ISP, SUA) 2. ________ 3. ________ 4. ________ 5. ________ 6. ________ 7. ________ 8. ________ Enter Node # to Edit: Figure 27-1 Menu 11 Remote Node Setup 27.2.2 Encapsulation and Multiplexing Scenarios For Internet access you should use the encapsulation and multiplexing methods used by your ISP.

  • Page 263: Figure 27-2 Menu 11.1 Remote Node Profile

    Prestige 660W/HW Series User’s Guide Menu 11.1 - Remote Node Profile Edit IP/Bridge Options Rem Node Name= MyIsp Route= IP in menu 11.3. Active= Yes Bridge= No Encapsulation= ENET ENCAP Edit IP/Bridge= No Multiplexing= LLC-based Edit ATM Options= No Edit ATM Options in Service Name= N/A Edit Advance Options= N/A Incoming:...
  • Page 264 Prestige 660W/HW Series User’s Guide Table 27-1 Menu 11.1 Remote Node Profile FIELD DESCRIPTION EXAMPLE Rem Login Type the login name that this remote node will use to call your Prestige. The login name and the Rem Password will be used to authenticate this node.

  • Page 265: Outgoing Authentication Protocol

    Prestige 660W/HW Series User’s Guide Table 27-1 Menu 11.1 Remote Node Profile FIELD DESCRIPTION EXAMPLE Allocated Budget This sets a ceiling for outgoing call time for this remote node. The (min) default for this field is 0 meaning no budget control. Period (hr) This field is the time period that the budget should be reset.

  • Page 266: Figure 27-3 Menu 11.3 Remote Node Network Layer Options

    Prestige 660W/HW Series User’s Guide 27.3 Remote Node Network Layer Options For the TCP/IP parameters, perform the following steps to edit Menu 11.3 – Remote Node Network Layer Options as shown next. Step 1. In menu 11.1, make sure IP is among the protocols in the Route field. Step 2.
  • Page 267 Prestige 660W/HW Series User’s Guide Table 27-2 Menu 11.3 Remote Node Network Layer Options FIELD DESCRIPTION EXAMPLE My WAN Some implementations, especially UNIX derivatives, require separate IP Addr network numbers for the WAN and LAN links and each end to have a unique address within the WAN network number.

  • Page 268: Figure 27-4 Sample Ip Addresses For A Tcp/Ip Lan-To-Lan Connection

    Prestige 660W/HW Series User’s Guide Table 27-2 Menu 11.3 Remote Node Network Layer Options FIELD DESCRIPTION EXAMPLE When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel” to save your configuration or press [ESC] to cancel and go back to the previous screen. 27.3.1 My WAN Addr Sample IP Addresses The following figure uses sample IP addresses to help you understand the field of My WAN Addr in menu 11.3.

  • Page 269: Figure 27-5 Menu 11.5 Remote Node Filter (Rfc 1483 Or Enet Encapsulation)

    Prestige 660W/HW Series User’s Guide Use Menu 11.5 – Remote Node Filter to specify the filter set(s) to apply to the incoming and outgoing traffic between this remote node and the Prestige and also to prevent certain packets from triggering calls. You can specify up to 4 filter sets separated by comma, for example, 1, 5, 9, 12, in each filter field.

  • Page 270: Figure 27-7 Menu 11.6 For Vc-Based Multiplexing

    Prestige 660W/HW Series User’s Guide There are two versions of menu 11.6 for the Prestige, depending on whether you chose VC-based/LLC- based multiplexing and PPP encapsulation in menu 11.1. 27.5.1 VC-based Multiplexing (non-PPP Encapsulation) For VC-based multiplexing, by prior agreement, a protocol is assigned a specific virtual circuit, for example, VC1 will carry IP.

  • Page 271: Figure 27-9 Menu 11.1 Remote Node Profile

    Prestige 660W/HW Series User’s Guide In this case, only one set of VPI and VCI numbers need be specified for all protocols. The valid range for the VPI is 0 to 255 and for the VCI is 32 to 65535 (1 to 31 is reserved for local management of ATM traffic). 27.5.3 Advance Setup Options In menu 11.1, select PPPoE in the Encapsulation field.

  • Page 272: Table 27-3 Menu 11.8 Advance Setup Options

    Prestige 660W/HW Series User’s Guide Table 27-3 Menu 11.8 Advance Setup Options FIELD DESCRIPTION PPPoE pass- Press [SPACE BAR] to select Yes and press [ENTER] to enable PPPoE pass through through. In addition to the Prestige's built-in PPPoE client, you can enable PPPoE pass through to allow up to ten hosts on the LAN to use PPPoE client software on their computers to connect to the ISP via the Prestige.

  • Page 273: Figure 28-1 Sample Static Routing Topology

    Prestige 660W/HW Series User’s Guide Chapter 28 Static Route Setup This chapter shows how to setup IP static routes. 28.1 IP Static Route Overview Static routes tell the Prestige routing information that it cannot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly connected to a remote node.

  • Page 274: Figure 28-2 Menu 12 Static Route Setup

    Prestige 660W/HW Series User’s Guide 28.2 Configuration Step 1. To configure an IP static route, use Menu 12 – Static Route Setup (shown next). Menu 12 - Static Route Setup 1. IP Static Route 3. Bridge Static Route Please enter selection: Figure 28-2 Menu 12 Static Route Setup Step 2.

  • Page 275: Figure 28-4 Menu12.1.1 Edit Ip Static Route

    Prestige 660W/HW Series User’s Guide Menu 12.1.1 - Edit IP Static Route Route #: 1 Route Name= ? Active= No Destination IP Address= ? IP Subnet Mask= ? Gateway IP Address= ? Metric= 2 Private= No Press ENTER to Confirm or ESC to Cancel: Figure 28-4 Menu12.1.1 Edit IP Static Route The following table describes the fields for Menu 12.1.1 –...
  • Page 276 Prestige 660W/HW Series User’s Guide Table 28-1 Menu12.1.1 Edit IP Static Route FIELD DESCRIPTION Private This parameter determines if the Prestige will include the route to this remote node in its RIP broadcasts. If set to Yes, this route is kept private and is not included in RIP broadcasts.

  • Page 277: Chapter 29 Bridging Setup

    Prestige 660W/HW Series User’s Guide Chapter 29 Bridging Setup This chapter shows you how to configure the bridging parameters of your Prestige. 29.1 Bridging in General Bridging bases the forwarding decision on the MAC (Media Access Control), or hardware address, while routing does it on the network layer (IP) address.

  • Page 278: Figure 29-1 Menu 11.1 Remote Node Profile

    Prestige 660W/HW Series User’s Guide Menu 11.1 - Remote Node Profile Rem Node Name= ? Route= IP Bridge= Yes Active= Yes Edit IP/Bridge= No Encapsulation= ENET ENCAP Multiplexing= VC-based Edit ATM Options= No Service Name= N/A Edit Advance Options= N/A Incoming: Telco Option: Rem Login= N/A...

  • Page 279: Figure 29-3 Menu 12.3.1 Edit Bridge Static Route

    Prestige 660W/HW Series User’s Guide Table 29-1 Remote Node Network Layer Options : Bridge Fields FIELD DESCRIPTION Bridge (menu 11.1) Make sure this field is set to Yes. Edit IP/Bridge (menu Press [SPACE BAR] to select Yes and press [ENTER] to display menu 11.3. 11.1) Ethernet Addr Timeout Type the time (in minutes) for the Prestige to retain the Ethernet Address...
  • Page 280 Prestige 660W/HW Series User’s Guide Table 29-2 Menu 12.3.1 Edit Bridge Static Route FIELD DESCRIPTION Active Indicates whether the static route is active (Yes) or not (No). Ether Address Type the MAC address of the destination computer that you want to bridge the packets IP Address If available, type the IP address of the destination computer that you want to bridge the packets to.

  • Page 281: Chapter 30 Network Address Translation (Nat)

    Prestige 660W/HW Series User’s Guide Chapter 30 Network Address Translation (NAT) This chapter discusses how to configure NAT on the Prestige. 30.1 Using NAT You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the Prestige. 30.1.1 SUA (Single User Account) Versus NAT SUA (Single User Account) is a ZyNOS implementation of a subset of NAT that supports two types of mapping, Many-to-One and Server.

  • Page 282: Figure 30-1 Menu 4 Applying Nat For Internet Access

    Prestige 660W/HW Series User’s Guide Menu 4 - Internet Access Setup ISP's Name= MyISP Encapsulation= RFC 1483 Multiplexing= LLC-based VPI #= 8 VCI #= 35 ATM QoS Type= UBR Peak Cell Rate (PCR)= 0 Sustain Cell Rate (SCR)= 0 Maximum Burst Size (MBS)= 0 My Login= N/A My Password= N/A ENET ENCAP Gateway= N/A...

  • Page 283: Figure 30-2 Menu 11.3 Applying Nat To The Remote Node

    Prestige 660W/HW Series User’s Guide Menu 11.3 - Remote Node Network Layer Options IP Options: Bridge Options: IP Address Assignment = Dynamic Ethernet Addr Timeout(min)= N/A Rem IP Addr = 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= N/A NAT= SUA Only Address Mapping Set= N/A Metric= 2 Private= No...

  • Page 284: Figure 30-3 Menu 15 Nat Setup

    Prestige 660W/HW Series User’s Guide configurator screens for further information on these menus. To configure NAT, enter 15 from the main menu to bring up the following screen. Menu 15 - NAT Setup 1. Address Mapping Sets 2. NAT Server Sets Enter Menu Selection Number: Figure 30-3 Menu 15 NAT Setup 30.3.1 Address Mapping Sets...

  • Page 285: Figure 30-5 Menu 15.1.255 Sua Address Mapping Rules

    Prestige 660W/HW Series User’s Guide Menu 15.1.255 - Address Mapping Rules Set Name= Local Start IP Local End IP Global Start IP Global End IP Type --------------- --------------- --------------- --------------- ------ 0.0.0.0 255.255.255.255 0.0.0.0 0.0.0.0 Server Press ENTER to Confirm or ESC to Cancel: Figure 30-5 Menu 15.1.255 SUA Address Mapping Rules The following table explains the fields in this menu.

  • Page 286: Figure 30-6 Menu 15.1.1 First Set

    Prestige 660W/HW Series User’s Guide Table 30-2 SUA Address Mapping Rules FIELD DESCRIPTION EXAMPLE When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel” to save your configuration or press [ESC] to cancel and go back to the previous screen. User-Defined Address Mapping Sets Now let’s look at option 1 in menu 15.1.

  • Page 287: Table 30-3 Menu 15.1.1 First Set

    Prestige 660W/HW Series User’s Guide ignored. If there are any empty rules before your new configured rule, your configured rule will be pushed up by that number of empty rules. For example, if you have already configured rules 1 to 6 in your current set and now you configure rule number 9.

  • Page 288: Figure 30-7 Menu 15.1.1.1 Editing/Configuring An Individual Rule In A Set

    Prestige 660W/HW Series User’s Guide Menu 15.1.1.1 Address Mapping Rule Type= One-to-One Local IP: Start= = N/A Global IP: Start= = N/A Server Mapping Set= N/A Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle. Figure 30-7 Menu 15.1.1.1 Editing/Configuring an Individual Rule in a Set The following table explains the fields in this menu.

  • Page 289: Figure 30-8 Menu 15.2 Nat Server Setup

    Prestige 660W/HW Series User’s Guide Table 30-4 Menu 15.1.1.1 Editing/Configuring an Individual Rule in a Set FIELD DESCRIPTION EXAMPLE Server Only available when Type is set to Server. Type a number from 1 to 10 to Mapping Set choose a server set from menu 15.2. When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC to cancel”...

  • Page 290: Figure 30-9 Menu 15.2.1 Nat Server Setup

    Prestige 660W/HW Series User’s Guide Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address --------------------------------------------------- Default Default 0.0.0.0 192.168.1.33 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 30-9 Menu 15.2.1 NAT Server Setup Step 4.

  • Page 291: Figure 30-10 Multiple Servers Behind Nat Example

    Prestige 660W/HW Series User’s Guide Figure 30-10 Multiple Servers Behind NAT Example 30.5 General NAT Examples The following are some examples of NAT configuration. 30.5.1 Example 1: Internet Access Only In the following Internet access example, you only need one rule where your ILAs (Inside Local addresses) all map to one dynamic IGA (Inside Global Address) assigned by your ISP.

  • Page 292: Figure 30-12 Menu 4 Internet Access & Nat Example

    Prestige 660W/HW Series User’s Guide Menu 4 - Internet Access Setup ISP's Name= MyISP Encapsulation= RFC 1483 Multiplexing= LLC-based VPI #= 8 VCI #= 35 ATM QoS Type= UBR Peak Cell Rate (PCR)= 0 Sustain Cell Rate (SCR)= 0 Maximum Burst Size (MBS)= 0 My Login= N/A My Password= N/A ENET ENCAP Gateway= N/A...

  • Page 293: Figure 30-14 Menu 15.2.1 Specifying An Inside Server

    Prestige 660W/HW Series User’s Guide Menu 15.2.1 - NAT Server Setup (Used for SUA Only) Rule Start Port No. End Port No. IP Address --------------------------------------------------- Default Default 192.168.1.10 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 30-14 Menu 15.2.1 Specifying an Inside Server 30.5.3 Example 3: Multiple Public IP Addresses With Inside Servers In this example, there are 3 IGAs from our ISP.
  • Page 294 Prestige 660W/HW Series User’s Guide Figure 30-15 NAT Example 3 Step 1. In this case you need to configure Address Mapping Set 1 from Menu 15.1 - Address Mapping Sets. Therefore you must choose the Full Feature option from the Network Address Translation field (in menu 4 or menu 11.3) in Figure 30-16.

  • Page 295: Figure 30-16 Example 3: Menu 11.3

    Prestige 660W/HW Series User’s Guide Menu 11.3 - Remote Node Network Layer Options IP Options: Bridge Options: IP Address Assignment= Static Ethernet Addr Timeout (min)= 0 Rem IP Addr: 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.0 NAT= Full Feature Address Mapping Set= 2 Metric= 2 Private= No...
  • Page 296 Prestige 660W/HW Series User’s Guide Menu 15.1.1 - Address Mapping Rules Set Name= Example3 Local Start IP Local End IP Global Start IP Global End IP Type --------------- --------------- --------------- --------------- ------ 1. 192.168.1.10 10.132.50.1 192.168.1.11 10.132.50.2 3. 0.0.0.0 255.255.255.255 10.132.50.3 10.132.50.3 Server...
  • Page 297 Prestige 660W/HW Series User’s Guide Menu 15.2.1 - NAT Server Setup Rule Start Port No. End Port No. IP Address --------------------------------------------------- Default Default 0.0.0.0 192.168.1.21 192.168.1.20 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Example 3: Menu 15.2.1 30.5.4 Example 4: NAT Unfriendly Application Programs Some applications do not support NAT Mapping using TCP or UDP port address translation.

  • Page 298: Figure 30-20 Example 4: Menu 15.1.1.1 Address Mapping Rule

    Prestige 660W/HW Series User’s Guide Other applications such as some gaming programs are NAT unfriendly because they embed addressing information in the data stream. These applications won’t work through NAT even when using One-to-One and Many-to-Many No Overload mapping types. Follow the steps outlined in example 3 to configure these two menus as follows.

  • Page 299: Access Methods

    Prestige 660W/HW Series User’s Guide Chapter 31 Enabling the Firewall This chapter shows you how to get started with the Prestige firewall. 31.1 Remote Management and the Firewall When SMT menu 24.11 is configured to allow management (see the Remote Management chapter) and the firewall is enabled: •...

  • Page 300: Figure 31-1 Menu 21.2 Firewall Setup

    Prestige 660W/HW Series User’s Guide Menu 21.2 - Firewall Setup The firewall protects against Denial of Service (DOS) attacks when it is active. The default Policy sets 1. allow all sessions originating from the LAN to the WAN and 2. deny all sessions originating from the WAN to the LAN You may define additional Policy rules or modify existing ones but please exercise extreme caution in doing so Active: Yes...

  • Page 301: Chapter 40 Call Scheduling

    SMT Advanced Management Part IX: SMT Advanced Management This part discusses filtering setup, SNMP, system security, system information and diagnosis, firmware and configuration file maintenance, system maintenance, remote management, IP Policy Routing, call scheduling and Internal SPTGEN for configuration of multiple Prestiges. See the web configurator parts of this guide for background information on features configurable by web configurator and SMT.

  • Page 303: About Filtering

    Prestige 660W/HW Series User’s Guide Chapter 32 Filter Configuration This chapter shows you how to create and apply filters. 32.1 About Filtering Your Prestige uses filters to decide whether or not to allow passage of a data packet and/or to make a call. There are two types of filter applications: data filtering and call filtering.

  • Page 304: Figure 32-1 Outgoing Packet Filtering Process

    Prestige 660W/HW Series User’s Guide Call Filtering Active Data match Built-in User-defined match match Outgoing Initiate call default Call Filters Data Packet if line not up Call Filters (if applicable) Send packet and reset Idle Timer Match Match Match Drop Drop packet Drop packet packet...

  • Page 305: Figure 32-2 Filter Rule Process

    Prestige 660W/HW Series User’s Guide Start Packet intoFilter Fetch First Filter Set Filter Set Fetch Next Fetch First Filter Set Filter Rule Fetch Next Filter Rule Next filter Next Filter Set Rule Active? Available? Available? Execute Filter Rule Check Next Rule Forward Drop...

  • Page 306: Configuring A Filter Set For The Prestige

    Prestige 660W/HW Series User’s Guide For incoming packets, your Prestige applies data filters only. Packets are processed depending on whether a match is found. The following sections describe how to configure filter sets. The Filter Structure of the Prestige A filter set consists of one or more filter rules. Usually, you would group related rules, for example, all the rules for NetBIOS, into a single set and give it a descriptive name.

  • Page 307: Figure 32-4 Netbios_Wan Filter Rules Summary

    Prestige 660W/HW Series User’s Guide Menu 21.1.2 - Filter Rules Summary # A Type Filter Rules M m n - - ---- --------------------------------------------------------------- - - - 1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=137 N D N 2 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=138 N D N 3 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=139...

  • Page 308: Table 32-1 Abbreviations Used In The Filter Rules Summary Menu

    Prestige 660W/HW Series User’s Guide 32.3 Filter Rules Summary Menus The following tables briefly describe the abbreviations used in menus 21.1.1 and 21.1.2. Table 32-1 Abbreviations Used in the Filter Rules Summary Menu FIELD DESCRIPTION The filter rule number: 1 to 6. Active: “Y”...

  • Page 309: Configuring A Filter Rule

    Prestige 660W/HW Series User’s Guide Table 32-2 Rule Abbreviations Used FILTER TYPE DESCRIPTION Destination Port Number Offset Length 32.4 Configuring a Filter Rule To configure a filter rule, type its number in Menu 21.1.x – Filter Rules Summary and press [ENTER] to open menu 21.1.x.1 for the rule.

  • Page 310: Figure 32-7 Menu 21.1.X.1 Tcp/Ip Filter Rule

    Prestige 660W/HW Series User’s Guide Menu 21.1.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule Active= No IP Protocol= 0 IP Source Route= No Destination: IP Addr= IP Mask= Port #= Port # Comp= None Source: IP Addr= IP Mask= Port #= Port # Comp= None...
  • Page 311 Prestige 660W/HW Series User’s Guide Table 32-3 Menu 21.1.x.1 TCP/IP Filter Rule FIELD DESCRIPTION EXAMPLE IP Addr Type the destination IP address of the packet you want to IP address filter. This field is ignored if it is 0.0.0.0. IP Mask Type the IP mask to apply to the Destination: IP Addr field.
  • Page 312 Prestige 660W/HW Series User’s Guide Table 32-3 Menu 21.1.x.1 TCP/IP Filter Rule FIELD DESCRIPTION EXAMPLE Action Matched Select the action for a matching packet. Choices are Check Check Next Rule Next Rule, Forward or Drop. (default) Action Not Matched Select the action for a packet not matching the rule. Choices Check Next Rule are Check Next Rule, Forward or Drop.

  • Page 313: Figure 32-8 Executing An Ip Filter

    Prestige 660W/HW Series User’s Guide Packet into IP Filter Filter Active? Apply SrcAddrMask to Src Addr Check Src Not Matched IP Addr Matched Apply DestAddrMask to Dest Addr Check Dest Not Matched IP Addr Matched Check Not Matched IP Protocol Matched Check Src &...

  • Page 314: Figure 32-9 Menu 21.1.5.1 Generic Filter Rule

    Prestige 660W/HW Series User’s Guide 32.4.2 Generic Filter Rule This section shows you how to configure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP, it is generally easier to use the IP rules directly. For generic rules, the Prestige treats a packet as a byte stream as opposed to an IP packet.

  • Page 315: Table 32-4 Menu 21.1.5.1 Generic Filter Rule

    Prestige 660W/HW Series User’s Guide Table 32-4 Menu 21.1.5.1 Generic Filter Rule FIELD DESCRIPTION EXAMPLE Filter # This is the filter set, filter rule coordinates, for instance, 2, 3 refers to the second filter set and the third rule of that set. Filter Type Press [SPACE BAR] and then [ENTER] to select a type of rule.

  • Page 316: Filter Types And Nat

    Prestige 660W/HW Series User’s Guide 32.5 Filter Types and NAT There are two classes of filter rules, Generic Filter Device rules and Protocol Filter (TCP/IP) rules. Generic Filter rules act on the raw data from/to LAN and WAN. Protocol Filter rules act on IP packets. When NAT (Network Address Translation) is enabled, the inside IP address and port number are replaced on a connection-by-connection basis, which makes it impossible to know the exact address and port on the wire.

  • Page 317: Figure 32-11 Sample Telnet Filter

    Prestige 660W/HW Series User’s Guide Figure 32-11 Sample Telnet Filter Step 1. Enter 1 in the menu 21 to display Menu 21.1 — Filter Set Configuration. Step 2. Enter the index number of the filter set you want to configure (in this case 6) Step 3.

  • Page 318: Figure 32-12 Menu 21.1.6.1 Sample Filter

    Prestige 660W/HW Series User’s Guide Step 4. Press [ENTER] at the message Press [ENTER] to confirm or [ESC] to cancel” to open Menu “ 21.1.6 — Filter Rules Summary. Step 5. Type 1 to configure the first filter rule. Make the entries in this menu as shown next. When you press [ENTER] to confirm, the following screen appears.

  • Page 319: Figure 32-13 Menu 21.1.6.1 Sample Filter Rules Summary

    Prestige 660W/HW Series User’s Guide Menu 21.1.6 - Filter Rules Summary # A Type Filter Rules M m n - - ---- --------------------------------------------------------------- - - - 1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F Enter Filter Rule Number (1-6) to Configure: 1 This shows you that you have M = N means an action can be taken immediately.

  • Page 320: Remote Node Filters

    Prestige 660W/HW Series User’s Guide Table 32-5 Filter Sets Table FILTER SETS DESCRIPTION Input Filter Sets: Apply filters for incoming traffic. You may apply protocol or device filter rules. See earlier in this chapter for information on filters. Output Filter Sets: Apply filters for traffic leaving the Prestige.

  • Page 321: Figure 32-15 Filtering Remote Node Traffic

    Prestige 660W/HW Series User’s Guide Apply filter 6 to block Menu 11.5 - Remote Node Filter Tel, FTP and Web Input Filter Sets: protocol filters= 6 traffic from the WAN. device filters= Output Filter Sets: protocol filters= 2 device filters= Call Filter Sets: Apply filter 2 to block Protocol filters=...

  • Page 323: Figure 33-1 Snmp Management Model

    Prestige 660W/HW Series User’s Guide Chapter 33 SNMP Configuration This chapter explains SNMP Configuration menu 22. 33.1 About SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your Prestige supports SNMP agent functionality, which allows a manager station to manage and monitor the Prestige through the network.

  • Page 324: Supported Mibs

    Prestige 660W/HW Series User’s Guide An agent is a management software module that resides in a managed device (the Prestige). An agent translates the local management information from the managed device into a form compatible with SNMP. The manager is the console through which network administrators perform network management functions. It executes applications that control and monitor managed devices.

  • Page 325: Figure 33-2 Menu 22 Snmp Configuration

    Prestige 660W/HW Series User’s Guide Menu 22 - SNMP Configuration SNMP: Get Community= public Set Community= public Trusted Host= 0.0.0.0 Trap: Community= public Destination= 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 33-2 Menu 22 SNMP Configuration The following table describes the SNMP configuration parameters. Table 33-1 Menu 22 SNMP Configuration FIELD DESCRIPTION...

  • Page 326: Table 33-2 Snmp Traps

    Prestige 660W/HW Series User’s Guide 33.4 SNMP Traps The Prestige will send traps to the SNMP manager when any one of the following events occurs: Table 33-2 SNMP Traps TRAP # TRAP NAME DESCRIPTION coldStart (defined in RFC-1215) A trap is sent after booting (power on). warmStart (defined in RFC-1215) A trap is sent after booting (software reboot).

  • Page 327: Chapter 34 System Security

    Prestige 660W/HW Series User’s Guide Chapter 34 System Security This chapter describes how to configure the system security on the Prestige. 34.1 System Security You can configure the system password, an external RADIUS server and IEEE802.1x in menu 23. 34.1.1 System Password Enter 23 in the main menu to display Menu 23 –...

  • Page 328: Figure 34-3 Menu 23.2 System Security : Radius Server

    Prestige 660W/HW Series User’s Guide Menu 23.2 - System Security - RADIUS Server Authentication Server: Active= No Server Address= 10.11.12.13 Port #= 1812 Shared Secret= ******** Accounting Server: Active= No Server Address= 10.11.12.13 Port #= 1813 Shared Secret= ******** Press ENTER to Confirm or ESC to Cancel: Figure 34-3 Menu 23.2 System Security : RADIUS Server The following table describes the fields in this menu.

  • Page 329: Figure 34-4 Menu 23 System Security

    Prestige 660W/HW Series User’s Guide Table 34-1 Menu 23.2 System Security : RADIUS Server FIELD DESCRIPTION EXAMPLE Port The default port of the RADIUS server for accounting is 1813. 1813 You need not change this value unless your network administrator instructs you to do so with additional information. Shared Secret Specify a password (up to 31 alphanumeric characters) as the key to be shared between the external accounting server and the...

  • Page 330: Figure 34-5 Menu 23.4 System Security : Ieee802.1X

    Prestige 660W/HW Series User’s Guide Menu 23.4 - System Security - IEEE802.1x Wireless Port Control= Authentication Required ReAuthentication Timer (in second)= 1800 Idle Timeout (in second)= 3600 Key Management Protocol= WPA Dynamic WEP Key Exchange= N/A PSK= N/A WPA Mixed Mode= Disable Data Privacy for Broadcast/Multicast packets= TKIP WPA Broadcast/Multicast Key Update Timer= 1800 Authentication Databases= Local User Database Only...
  • Page 331 Prestige 660W/HW Series User’s Guide Table 34-2 Menu 23.4 System Security : IEEE802.1x FIELD DESCRIPTION Idle Timeout The Prestige automatically disconnects a client from the wired network after a period of (in second) inactivity. The client needs to enter the username and password again before access to the wired network is allowed.

  • Page 332: Creating User Accounts On The Prestige

    Prestige 660W/HW Series User’s Guide Table 34-2 Menu 23.4 System Security : IEEE802.1x FIELD DESCRIPTION Authentication The authentication database contains wireless station login information. The local user Databases database is the built-in database on the Prestige. The RADIUS is an external server. Use this field to decide which database the Prestige should use (first) to authenticate a wireless station.

  • Page 333: Figure 34-6 Menu 14 Dial-In User Setup

    Prestige 660W/HW Series User’s Guide Menu 14 - Dial-in User Setup 1. ________ ________ 17. ________ 25. ________ 2. ________ 10. ________ 18. ________ 26. ________ 3. ________ 11. ________ 19. ________ 27. ________ 4. ________ 12. ________ 20. ________ 28.

  • Page 335: Figure 35-1 Menu 24 System Maintenance

    Prestige 660W/HW Series User’s Guide Chapter 35 System Information and Diagnosis This chapter covers the information and diagnostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software.

  • Page 336: Figure 35-2 Menu 24.1 System Maintenance : Status

    Prestige 660W/HW Series User’s Guide Menu 24.1 - System Maintenance - Status 04:35:40 Sat. Jan. 01, 2000 Node-Lnk Status TxPkts RxPkts Errors Tx B/s Rx B/s Up Time 1-1483 0:00:00 0:00:00 0:00:00 0:00:00 0:00:00 0:00:00 0:00:00 0:00:00 My WAN IP (from ISP): 0.0.0.0 Ethernet: WAN: Status:...

  • Page 337: Figure 35-3 Menu 24.2 System Information And Console Port Speed

    Prestige 660W/HW Series User’s Guide Table 35-1 Menu 24.1 System Maintenance : Status FIELD DESCRIPTION Rx Pkts This is the number of received packets from the LAN. Collision This is the number of collisions. This shows statistics for the WAN. Line Status This shows the current status of the xDSL line, which can be Up or Down.

  • Page 338: Figure 35-4 Menu 24.2.1 System Maintenance : Information

    Refers to the routing protocol used. ZyNOS F/W Version Refers to the ZyNOS (ZyXEL Network Operating System) system firmware version. ZyNOS is a registered trademark of ZyXEL Communications Corporation. ADSL Chipset Vendor Displays the vendor of the ADSL chipset and DSL version.

  • Page 339: Figure 35-5 Menu 24.2.2 System Maintenance : Change Console Port Speed

    Prestige 660W/HW Series User’s Guide 35.2.2 Console Port Speed You can set up different port speeds for the console port through Menu 24.2.2 – System Maintenance – Console Port Speed. Your Prestige supports 9600 (default), 19200, 38400, 57600 and 115200 bps. Press [SPACE BAR] and then [ENTER] to select the desired speed in menu 24.2.2, as shown in the following figure.

  • Page 340: Figure 35-7 Sample Error And Information Messages

    Prestige 660W/HW Series User’s Guide Step 3. Enter 1 from Menu 24.3 — System Maintenance — Log and Trace to display the error log in the system. After the Prestige finishes displaying the error log, you will have the option to clear it. Samples of typical error and information messages are presented in the next figure.
  • Page 341 Prestige 660W/HW Series User’s Guide Table 35-3 Menu 24.3.2 System Maintenance : Syslog and Accounting PARAMETER DESCRIPTION Active Use [SPACE BAR] and then [ENTER] to turn syslog on or off. Syslog IP Address Type the IP address of your syslog server. Log Facility Use [SPACE BAR] and then [ENTER] to select one of seven different local options.

  • Page 342: Figure 35-9 Menu 24.4 System Maintenance : Diagnostic

    Prestige 660W/HW Series User’s Guide Jul 19 14:43:55 192.168.102.2 ZYXEL: IP [Src=202.132.154.123 Dst=255.255.255.255 UDP spo=0208 dpo=0208]} S03>R01mF Jul 19 14:44:00 192.168.102.2 ZYXEL: IP [Src=192.168.102.20 Dst=202.132.154.1 UDP spo=05d4 dpo=0035]} S03>R01mF Jul 19 14:44:04 192.168.102.2 ZYXEL: IP [Src=192.168.102.20 Dst=202.132.154.1 UDP spo=05d4 dpo=0035]} S03>R01mF 4 - PPP Log SdcmdSyslogSend (SYSLOG_PPPLOG, SYSLOG_NOTICE, String);...
  • Page 343 Prestige 660W/HW Series User’s Guide Table 35-4 Menu 24.4 System Maintenance Menu : Diagnostic FIELD DESCRIPTION Command Mode Type the mode to test and diagnose your Prestige using specified commands. Host IP Address If you typed 12 to Ping Host, now type the address of the computer you want to ping. System Information and Diagnosis 35-9...

  • Page 345: Chapter 36 Firmware And Configuration File Maintenance

    Prestige 660W/HW Series User’s Guide Chapter 36 Firmware and Configuration File Maintenance This chapter tells you how to backup and restore your configuration file as well as upload new firmware and configuration files. 36.1 Filename Conventions The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password, DHCP Setup, TCP/IP Setup, etc.

  • Page 346: Table 36-1 Filename Conventions

    Prestige 660W/HW Series User’s Guide Table 36-1 Filename Conventions FILE TYPE INTERNAL NAME EXTERNAL NAME DESCRIPTION Configuration Rom-0 This is the configuration filename on the *.rom File Prestige. Uploading the rom-0 file replaces the entire ROM file system, including your Prestige configurations, system-related data (including the default password), the error log and the trace log.

  • Page 347: Using The Ftp Command From The Command Line

    Prestige 660W/HW Series User’s Guide 36.2.1 Backup Configuration Follow the instructions as shown in the next screen. Menu 24.5 - System Maintenance - Backup Configuration To transfer the configuration file to your workstation, follow the procedure below: 1. Launch the FTP client on your workstation. 2.

  • Page 348: Figure 36-2 Ftp Session Example

    Prestige 660W/HW Series User’s Guide 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel.rom 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 16384 bytes sent in 1.10Seconds 297.89Kbytes/sec. ftp>...

  • Page 349: Backup Configuration Using Tftp

    Prestige 660W/HW Series User’s Guide 3. The IP address in the Secured Client IP field in menu 24.11 does not match the client IP. If it does not match, the Prestige will disconnect the Telnet session immediately. 4. You have an SMT console session running. 36.2.6 Backup Configuration Using TFTP The Prestige supports the up/downloading of the firmware and the configuration file using TFTP (Trivial File Transfer Protocol) over LAN.

  • Page 350: Table 36-3 General Commands For Gui-Based Tftp Clients

    Prestige 660W/HW Series User’s Guide 36.2.8 GUI-based TFTP Clients The following table describes some of the fields that you may see in GUI-based TFTP clients. Table 36-3 General Commands for GUI-based TFTP Clients COMMAND DESCRIPTION Host Enter the IP address of the Prestige. 192.168.1.1 is the Prestige’s default IP address when shipped.
  • Page 351 Prestige 660W/HW Series User’s Guide For details about backup using (T)FTP please refer to earlier sections on FTP and TFTP file upload in this chapter. Menu 24.6 -- System Maintenance - Restore Configuration To transfer the firmware and configuration file to your workstation, follow the procedure below: 1.

  • Page 352: Figure 36-4 Restore Using Ftp Session Example

    Prestige 660W/HW Series User’s Guide 36.3.2 Restore Using FTP Session Example ftp> put config.rom rom-0 200 Port command okay 150 Opening data connection for STOR rom-0 226 File received OK 221 Goodbye for writing flash ftp: 16384 bytes sent in 0.06Seconds 273.07Kbytes/sec. ftp>quit Figure 36-4 Restore Using FTP Session Example Refer to section 36.2.5 to read about configurations that disallow TFTP and FTP over WAN.

  • Page 353: Figure 36-5 Telnet Into Menu 24.7.1 Upload System Firmware

    Prestige 660W/HW Series User’s Guide Menu 24.7.1 - System Maintenance - Upload System Firmware To upload the system firmware, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your system. Then type "root" and SMT password as requested.

  • Page 354: Ftp File Upload Command From The Dos Prompt Example

    Prestige 660W/HW Series User’s Guide 36.4.3 FTP File Upload Command from the DOS Prompt Example Step 1. Launch the FTP client on your computer. Step 2. Enter “open”, followed by a space and the IP address of your Prestige. Step 3. Press [ENTER] when prompted for a username.

  • Page 355: Tftp Upload Command Example

    Prestige 660W/HW Series User’s Guide To use TFTP, your computer must have both telnet and TFTP clients. To transfer the firmware and the configuration file, follow the procedure shown next. Step 1. Use telnet from your computer to connect to the Prestige and log in. Because TFTP does not have any security checks, the Prestige records the IP address of the telnet client and accepts TFTP requests only from this address.

  • Page 357: System Maintenance

    Prestige 660W/HW Series User’s Guide Chapter 37 System Maintenance This chapter leads you through SMT menus 24.8 to 24.10. 37.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the main system firmware. The CI provides much of the same functionality as the SMT, while adding some low-level setup and diagnostic functions.

  • Page 358: Figure 37-2 Valid Commands

    Prestige 660W/HW Series User’s Guide Copyright (c) 1994 - 2003 ZyXEL Communications Corp. ras> ? Valid commands are: exit ether wlan ipsec bridge radius 8021x ras> Figure 37-2 Valid Commands 37.2 Call Control Support Call Control Support is only applicable when Encapsulation is set to PPPoE in menu 4 or menu 11.1.

  • Page 359: Figure 37-4 Menu 24.9.1 System Maintenance : Budget Management

    Prestige 660W/HW Series User’s Guide Menu 24.9.1 - System Maintenance - Budget Management Remote Node Connection Time/Total Budget Elapsed Time/Total Period 1.MyIsp No Budget No Budget 2.-------- 3.-------- 4.-------- 5.-------- 6.-------- 7.-------- 8.-------- Reset Node (0 to update screen): Figure 37-4 Menu 24.9.1 System Maintenance : Budget Management The total budget is the time limit on the accumulated time for outgoing calls to a remote node.

  • Page 360: Figure 37-5 Menu 24 System Maintenance

    Prestige 660W/HW Series User’s Guide 37.3 Time and Date Setting The Prestige keeps track of the time and date. There is also a software mechanism to set the time manually or get the current time and date from an external server when you turn on your Prestige. Menu 24.10 allows you to update the time and date settings of your Prestige.

  • Page 361: Table 37-2 Menu 24.10 System Maintenance: Time And Date Setting

    Prestige 660W/HW Series User’s Guide Table 37-2 Menu 24.10 System Maintenance: Time and Date Setting FIELD DESCRIPTION Use Time Server Enter the time service protocol that your time server sends when you turn on the when Bootup Prestige. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use trial and error to find a protocol that works.

  • Page 363: Remote Management Setup

    Prestige 660W/HW Series User’s Guide Chapter 38 Remote Management This chapter covers remote management (SMT menu 24.11). 38.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which Prestige interface (if any) from which computers. When you configure remote management to allow management from the WAN, you still need to configure a firewall rule to allow access.

  • Page 364: Figure 38-1 Menu 24.11 Remote Management Control

    Prestige 660W/HW Series User’s Guide Menu 24.11 - Remote Management Control TELNET Server: Server Port = 23 Server Access = LAN only Secured Client IP = 0.0.0.0 FTP Server: Server Port = 21 Server Access = LAN only Secured Client IP = 0.0.0.0 Web Server: Server Port = 80 Server Access = LAN only...

  • Page 365: Remote Management And Nat

    Prestige 660W/HW Series User’s Guide 1. A filter in menu 3.1 (LAN) or in menu 11.5 (WAN) is applied to block a Telnet, FTP or Web service. 2. You have disabled that service in menu 24.11. 3. The IP address in the Secured Client IP field (menu 24.11) does not match the client IP address. If it does not match, the Prestige will disconnect the session immediately.

  • Page 367: Chapter 39 Ip Policy Routing

    Prestige 660W/HW Series User’s Guide Chapter 39 IP Policy Routing This chapter covers setting and applying policies used for IP routing. 39.1 IP Policy Routing Overview Traditionally, routing is based on the destination address only and the IAD takes the shortest path to forward a packet.

  • Page 368: Figure 39-1 Menu 25 Ip Routing Policy Setup

    Prestige 660W/HW Series User’s Guide IPPR follows the existing packet filtering facility of RAS in style and in implementation. The policies are divided into sets, where related policies are grouped together. A user defines the policies before applying them to an interface or a remote node, in the same fashion as the filters. There are 12 policy sets with six policies in each set.

  • Page 369: Table 39-1 Menu 25.1 Ip Routing Policy Setup

    Prestige 660W/HW Series User’s Guide Menu 25.1 - IP Routing Policy Setup Criteria/Action - - -------------------------------------------------------------------------- 1 Y SA=1.1.1.1-1.1.1.1,DA=2.2.2.2-2.2.2.5 SP=20-25,DP=20-25,P=6,T=NM,PR=0 |GW=192.168.1.1,T=MT,PR=0 2 N __________________________________________________________________________ __________________________________________________________________________ 3 N __________________________________________________________________________ __________________________________________________________________________ 4 N __________________________________________________________________________ __________________________________________________________________________ 5 N __________________________________________________________________________ __________________________________________________________________________ 6 N __________________________________________________________________________ __________________________________________________________________________ Enter Policy Rule Number (1-6) to Configure: Figure 39-2 Menu 25.1 IP Routing Policy Setup...

  • Page 370: Figure 39-3 Menu 25.1.1 Ip Routing Policy

    Prestige 660W/HW Series User’s Guide Type a number from 1 to 6 to display Menu 25.1.1 – IP Routing Policy (see the next figure). This menu allows you to configure a policy rule. Menu 25.1.1 - IP Routing Policy Policy Set Name= test Active= Yes Criteria: IP Protocol...

  • Page 371: Applying An Ip Policy

    Prestige 660W/HW Series User’s Guide Table 39-2 Menu 25.1.1 IP Routing Policy FIELD DESCRIPTION Len Comp Press [SPACE BAR] and then [ENTER] to choose from Equal, Not Equal, Less, Greater, Less or Equal or Greater or Equal. Source: addr start / end Source IP address range from start to end.

  • Page 372: Ip Policy Routing Example

    Prestige 660W/HW Series User’s Guide Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP Setup: DHCP= None Client IP Pool Starting Address= N/A Size of Client IP Pool= N/A Primary DNS Server= N/A Secondary DNS Server= N/A Remote DHCP Server= N/A TCP/IP Setup: Type IP IP Address= 192.168.1.1...

  • Page 373: Figure 39-6 Example Of Ip Policy Routing

    Prestige 660W/HW Series User’s Guide Figure 39-6 Example of IP Policy Routing To force Web packets coming from clients with IP addresses of 192.168.1.33 to 192.168.1.64 to be routed to the Internet via the WAN port of the Prestige, follow the steps as shown next. Step 1.

  • Page 374: Figure 39-7 Ip Routing Policy Example

    Prestige 660W/HW Series User’s Guide Menu 25.1.1 - IP Routing Policy Policy Set Name= set1 Active= Yes Criteria: IP Protocol Type of Service= Don't Care Packet length= 10 Precedence = Don't Care Len Comp= N/A Source: addr start= 192.168.1.33 end= 192.168.1.64 port start= 0 end= N/A Destination:...

  • Page 375: Figure 39-8 Ip Routing Policy Example

    Prestige 660W/HW Series User’s Guide Menu 25.1.1 - IP Routing Policy Policy Set Name= set2 Active= Yes Criteria: IP Protocol Type of Service= Don't Care Packet length= 10 Precedence = Don't Care Len Comp= N/A Source: addr start= 0.0.0.0 end= N/A port start= 0 end= N/A Destination:...

  • Page 377: Figure 40-1 Menu 26 Schedule Setup

    Prestige 660W/HW Series User’s Guide Chapter 40 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulation only) allows you to dictate when a remote node should be called and for how long. 40.1 Introduction The call scheduling feature allows the Prestige to manage a remote node and dictate when a remote node should be called and for how long.

  • Page 378: Figure 40-2 Menu 26.1 Schedule Set Setup

    Prestige 660W/HW Series User’s Guide To delete a schedule set, enter the set number and press [SPACE BAR] and then [ENTER] (or delete) in the Edit Name field. To setup a schedule set, select the schedule set you want to setup from menu 26 (1-12) and press [ENTER] to see Menu 26.1 —...
  • Page 379 Prestige 660W/HW Series User’s Guide Table 40-1 Menu 26.1 Schedule Set Setup FIELD DESCRIPTION EXAMPLE Once: If you selected Once in the How Often field above, then enter the date 2000-01-01 the set should activate here in year-month-date format. Date Weekday: If you selected Weekly in the How Often field above, then select the day(s) when the set should activate (and recur) by going to that day(s)

  • Page 380: Figure 40-3 Applying Schedule Set(S) To A Remote Node (Pppoe)

    Prestige 660W/HW Series User’s Guide Menu 11.1 - Remote Node Profile Rem Node Name= ChangeMe Route= IP Active= Yes Bridge= No Encapsulation= PPPoE Edit IP/Bridge= No Multiplexing=VC-based Edit ATM Options= No Service Name= Telco Option: Incoming Allocated Budget(min)= 0 Rem Login= Period(hr)= 0 Apply your schedule Rem Password= ********...

  • Page 381: Chapter 41 Internal Sptgen

    Prestige 660W/HW Series User’s Guide Chapter 41 Internal SPTGEN 41.1 Internal SPTGEN Overview Internal SPTGEN (System Parameter Table Generator) is a configuration text file useful for efficient configuration of multiple Prestiges. Internal SPTGEN lets you configure, save and upload multiple menus at the same time using just one configuration text file –...

  • Page 382: Figure 41-1 Configuration Text File Format: Column Descriptions

    Prestige 660W/HW Series User’s Guide This is the name of This is the Field Name column. One “=” sign, followed by one the menu. This is the name of the field as seen in space, must precede the corresponding SMT screen. everything you input.

  • Page 383: Figure 41-2 Invalid Parameter Entered: Command Line Example

    Prestige 660W/HW Series User’s Guide field value is not legal error:-1 ROM-t is not saved, error Line ID:10000000 reboot to get the original configuration Bootbase Version: V2.02 | 2/22/2001 13:33:11 RAM: Size = 8192 Kbytes FLASH: Intel 8M *2 Figure 41-2 Invalid Parameter Entered: Command Line Example Please wait for the system to write SPT text file(ROM-t)...

  • Page 384: Figure 41-5 Internal Sptgen Ftp Upload Example

    Prestige 660W/HW Series User’s Guide You can rename your “rom-t” file when you save it to your computer but it must be named “rom-t” when you upload it to your Prestige. 41.4 Internal SPTGEN FTP Upload Example c:\ftp 192.168.1.1 220 PPP FTP version 1.0 ready at Sat Jan 1 03:22:12 2000 1.

  • Page 385: Appendices And Index

    Part X: Appendices and Index This part contains additional background information and an index or key terms.

  • Page 387: Troubleshooting

    Prestige 660W/HW Series User’s Guide Appendix A Troubleshooting This chapter covers potential problems and the corresponding remedies. Problems Starting Up the Prestige Chart A-1 Troubleshooting the Start-Up of Your Prestige PROBLEM CORRECTIVE ACTION None of the Make sure that the Prestige’s power adaptor is connected to the Prestige and plugged in to LEDs turn on an appropriate power source.
  • Page 388 Prestige 660W/HW Series User’s Guide Problems with the DSL LED Chart A-3 Troubleshooting the DSL LED PROBLEM CORRECTIVE ACTION The xDSL LED is off. Check the telephone wire and connections between the Prestige DSL port and the wall jack. Make sure that the telephone company has checked your phone line and set it up for DSL service.
  • Page 389 Prestige 660W/HW Series User’s Guide Problems with Internet Access Chart A-6 Troubleshooting Internet Access PROBLEM CORRECTIVE ACTION I cannot access Make sure the Prestige is turned on and connected to the network. the Internet. If the DSL LED is off, refer to Chart A-3 Troubleshooting the DSL LED. Verify your WAN settings.
  • Page 390 Prestige 660W/HW Series User’s Guide Problems with the Web Configurator Chart A-8 Troubleshooting the Web Configurator PROBLEM CORRECTIVE ACTION I cannot access the Refer to Chart A-7 Troubleshooting the Password. web configurator. Make sure that there is not an SMT console session running. Check that you have enabled web service access.
  • Page 391 Prestige 660W/HW Series User’s Guide Appendix B IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1.
  • Page 392 Prestige 660W/HW Series User’s Guide A class “A” address (24 host bits) can have 2 –2 hosts (approximately 16 million hosts). Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127.
  • Page 393 Prestige 660W/HW Series User’s Guide of ones beginning from the left most bit of the mask, followed by a continuous sequence of zeros, for a total number of 32 bits. Since the mask is always a continuous number of ones beginning from the left, followed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
  • Page 394 Prestige 660W/HW Series User’s Guide Divide the network 192.168.1.0 into two separate subnets by converting one of the host ID bits of the IP address to a network number bit. The “borrowed” host ID bit can be either “0” or “1” thus giving two subnets;...
  • Page 395 Prestige 660W/HW Series User’s Guide actual host for the first subnet is 192.168.1.1 and the highest is 192.168.1.126. Similarly the host ID range for the second subnet is 192.168.1.129 to 192.168.1.254. Example: Four Subnets The above example illustrated using a 25-bit subnet mask to divide a class “C” address space into two subnets.
  • Page 396 Prestige 660W/HW Series User’s Guide Chart B-10 Subnet 4 NETWORK NUMBER LAST OCTET BIT VALUE IP Address 192.168.1. IP Address (Binary) 11000000.10101000.00000001. 11000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.192 Lowest Host ID: 192.168.1.193 Broadcast Address: 192.168.1.255 Highest Host ID: 192.168.1.254 Example Eight Subnets Similarly use a 27-bit mask to create 8 subnets (001, 010, 011, 100, 101, 110).
  • Page 397 Prestige 660W/HW Series User’s Guide Chart B-12 Class C Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 255.255.255.128 (/25) 255.255.255.192 (/26) 255.255.255.224 (/27) 255.255.255.240 (/28) 255.255.255.248 (/29) 255.255.255.252 (/30) 255.255.255.254 (/31) Subnetting With Class A and Class B Networks. For class “A”...
  • Page 398 Prestige 660W/HW Series User’s Guide Chart B-13 Class B Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET (/25) 255.255.255.192 1024 (/26) 255.255.255.224 2048 (/27) 255.255.255.240 4096 (/28) 255.255.255.248 8192 (/29) 255.255.255.252 16384 (/30) 255.255.255.254 32768 (/31) IP Subnetting...
  • Page 399 Prestige 660W/HW Series User’s Guide Appendix C Wireless LAN and IEEE 802.11 A wireless LAN (WLAN) provides a flexible data communications system that you can use to access various services (navigating the Internet, email, printer services, etc.) without the any expensive network-cabling infrastructure.

  • Page 400: Infrastructure Wireless Lan Configuration

    Prestige 660W/HW Series User’s Guide Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an independent (Ad-hoc) WLAN that connects a set of computers with wireless nodes or stations (STA), which is called a Basic Service Set (BSS). In the most basic form, a wireless LAN connects a set of computers with wireless adapters.
  • Page 401 Prestige 660W/HW Series User’s Guide Diagram C-2 ESS Provides Campus-Wide Coverage Wireless LAN and IEEE 802.11...

  • Page 403: Appendix D Pppoe

    Prestige 660W/HW Series User’s Guide Appendix D PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your PC to an ATM PVC (Permanent Virtual Circuit) that connects to a xDSL Access Concentrator where the PPP session terminates (see the next figure).
  • Page 404 Prestige 660W/HW Series User’s Guide How PPPoE Works The PPPoE driver makes the Ethernet appear as a serial link to the PC and the PC runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC). Between the AC and an ISP, the AC is acting as a L2TP (Layer 2 Tunneling Protocol) LAC (L2TP Access Concentrator) and tunnels the PPP frames to the ISP.
  • Page 405 Prestige 660W/HW Series User’s Guide Appendix E Virtual Circuit Topology ATM is a connection-oriented technology, meaning that it sets up virtual circuits over which end systems communicate. The terminology for virtual circuits is as follows: • Virtual Channel Logical connections between ATM switches •...
  • Page 407 Prestige 660W/HW Series User’s Guide Appendix F Example Internal SPTGEN Screens This appendix covers Prestige Internal SPTGEN screens. Abbreviations Used in the Example Internal SPTGEN Screens Table ABBREVIATION MEANING Field Identification Number (not seen in SMT screens) Field Name Parameter Values Allowed INPUT An example of what you may enter Applies to the Prestige.
  • Page 408 Prestige 660W/HW Series User’s Guide / MENU 3.1 GENERAL ETHERNET SETUP (SMT MENU 3.1) INPUT 30100001 = Input Protocol filters Set 1 30100002 = Input Protocol filters Set 2 = 256 30100003 = Input Protocol filters Set 3 = 256 The valid 30100004 = Input Protocol filters Set 4...
  • Page 409 Prestige 660W/HW Series User’s Guide 30200008 = IP Address = 172.21.2.200 30200009 = IP Subnet Mask = 16 This 30200010 = RIP Direction <0(None) | 1(Both) | value 2(In Only) | 3(Out must be Only)> between 0-32. 30200011 = Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)>...
  • Page 410 Prestige 660W/HW Series User’s Guide 30201010 = IP Alias #1 Outgoing protocol filters = 256 Set 1 30201011 = IP Alias #1 Outgoing protocol filters = 256 Set 2 30201012 = IP Alias #1 Outgoing protocol filters = 256 Set 3 30201013 = IP Alias #1 Outgoing protocol filters = 256...
  • Page 411 Prestige 660W/HW Series User’s Guide 30500002 = Hide ESSID <0(No) | 1(Yes)> 30500003 = Channel ID <1|2|3|4|5|6|7|8|9|10| 11|12|13> 30500004 = RTS Threshold <0 ~ 2432> = 2432 30500005 = FRAG. Threshold <256 ~ 2432> = 2432 30500006 = <0(DISABLE) | 1(64- bit WEP) | 2(128-bit WEP)>...
  • Page 412 Prestige 660W/HW Series User’s Guide 40000005 = Multiplexing <1(LLC-based) | This 2(VC-based) value 40000006 = VPI # must be between 40000007 = VCI # = 35 0-32. 40000008 = Service Name <Str> = any This value 40000009 = My Login <Str>...
  • Page 413 Prestige 660W/HW Series User’s Guide 40000031= RIP Direction <0(None) | 1(Both) | 2(In Only) | 3(Out Only)> 40000032= RIP Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> 40000033= Nailed-up Connection <0(No) |1(Yes)> / MENU 12.1.1 IP STATIC ROUTE SETUP (SMT MENU 12.1.1) INPUT 120101001 = IP Static Route set #1, Name <Str>...
  • Page 414 Prestige 660W/HW Series User’s Guide 120103002 = IP Static Route set #3, Active <0(No) |1(Yes)> 120103003 = IP Static Route set #3, Destination IP = 0.0.0.0 address 120103004 = IP Static Route set #3, Destination IP subnetmask 120103005 = IP Static Route set #3, Gateway = 0.0.0.0 120103006 = IP Static Route set #3, Metric...
  • Page 415 Prestige 660W/HW Series User’s Guide / MENU 12.1.6 IP STATIC ROUTE SETUP (SMT MENU 12.1.6) INPUT 120106001 = IP Static Route set #6, Name <Str> 120106002 = IP Static Route set #6, Active <0(No) |1(Yes)> 120106003 = IP Static Route set #6, Destination IP = 0.0.0.0 address 120106004 =...
  • Page 416 Prestige 660W/HW Series User’s Guide 120108005 = IP Static Route set #8, Gateway = 0.0.0.0 120108006 = IP Static Route set #8, Metric 120108007 = IP Static Route set #8, Private <0(No) |1(Yes)> */ MENU 12.1.9 IP STATIC ROUTE SETUP (SMT MENU 12.1.9) INPUT 120109001 = IP Static Route set #9, Name...
  • Page 417 Prestige 660W/HW Series User’s Guide 120111003 = IP Static Route set #11, Destination = 0.0.0.0 IP address 120111004 = IP Static Route set #11, Destination IP subnetmask 120111005 = IP Static Route set #11, Gateway = 0.0.0.0 120111006 = IP Static Route set #11, Metric 120111007 = IP Static Route set #11, Private <0(No) |1(Yes)>...
  • Page 418 Prestige 660W/HW Series User’s Guide INPUT 120114001 = IP Static Route set #14, Name <Str> 120114002 = IP Static Route set #14, Active <0(No) |1(Yes)> 120114003 = IP Static Route set #14, Destination = 0.0.0.0 IP address 120114004 = IP Static Route set #14, Destination IP subnetmask 120114005 = IP Static Route set #14, Gateway...
  • Page 419 Prestige 660W/HW Series User’s Guide 120116006 = IP Static Route set #16, Metric 120116007 = IP Static Route set #16, Private <0(No) |1(Yes)> / MENU 15 SUA SERVER SETUP (SMT MENU 15) INPUT 150000001 = SUA Server IP address for default = 0.0.0.0 port 150000002 =...
  • Page 420 Prestige 660W/HW Series User’s Guide 150000021 = SUA Server #5 Local IP address = 0.0.0.0 150000022 = SUA Server #6 Active <0(No) | 1(Yes)> = 0 150000023 = SUA Server #6 Protocol <0(All)|6(TCP)|17(U DP)> 150000024 = SUA Server #6 Port Start 150000025 = SUA Server #6 Port End 150000026 =...
  • Page 421 Prestige 660W/HW Series User’s Guide 150000046 = SUA Server #10 Local IP address = 0.0.0.0 150000047 = SUA Server #11 Active <0(No) | 1(Yes)> 150000048 = SUA Server #11 Protocol <0(All)|6(TCP)|17(U DP)> 150000049 = SUA Server #11 Port Start 150000050 = SUA Server #11 Port End 150000051 = SUA Server #11 Local IP address...
  • Page 422 Prestige 660W/HW Series User’s Guide 210101009 = IP Filter Set 1,Rule 1 Src Subnet Mask 210101010 = IP Filter Set 1,Rule 1 Src Port 210101011 = IP Filter Set 1,Rule 1 Src Port Comp <0(none)|1(equal)|2( equal)|3(less)|4(great er)> 210101013 = IP Filter Set 1,Rule 1 Act Match <1(check next)|2(forward)|3(dr op)>...
  • Page 423 Prestige 660W/HW Series User’s Guide 210102013 = IP Filter Set 1,Rule 2 Act Match <1(check next)|2(forward)|3(dr op)> 210102014 = IP Filter Set 1,Rule 2 Act Not Match <1(check next)|2(forward)|3(dr op)> / MENU 21.1.1.3 SET #1, RULE #3 (SMT MENU 21.1.1.3) INPUT 210103001 = IP Filter Set 1,Rule 3 Type...
  • Page 424 Prestige 660W/HW Series User’s Guide INPUT 210104001 = IP Filter Set 1,Rule 4 Type <2(TCP/IP)> 210104002 = IP Filter Set 1,Rule 4 Active <0(No)|1(Yes)> 210104003 = IP Filter Set 1,Rule 4 Protocol = 17 210104004 = IP Filter Set 1,Rule 4 Dest IP address = 0.0.0.0 210104005 = IP Filter Set 1,Rule 4 Dest Subnet...
  • Page 425 Prestige 660W/HW Series User’s Guide 210105006 = IP Filter Set 1,Rule 5 Dest Port = 138 210105007 = IP Filter Set 1,Rule 5 Dest Port Comp <0(none)|1(equal)|2( equal)|3(less)|4(great er)> 210105008 = IP Filter Set 1,Rule 5 Src IP Address = 0.0.0.0 210105009 = IP Filter Set 1,Rule 5 Src Subnet Mask...
  • Page 426 Prestige 660W/HW Series User’s Guide 210106010 = IP Filter Set 1,Rule 6 Src Port 210106011 = IP Filter Set 1,Rule 6 Src Port Comp <0(none)|1(equal)|2( equal)|3(less)|4(great er)> 210106013 = IP Filter Set 1,Rule 6 Act Match <1(check next)|2(forward)|3(dr op)> 210106014 = IP Filter Set 1,Rule 6 Act Not Match <1(check next)|2(forward)|3(dr...
  • Page 427 Prestige 660W/HW Series User’s Guide 210201011 = IP Filter Set 2, Rule 1 Src Port Comp <0(none)|1(equal)|2( equal)|3(less)|4(great er)> 210201013 = IP Filter Set 2, Rule 1 Act Match <1(check next)|2(forward)|3(dr op)> 210201014 = IP Filter Set 2, Rule 1 Act Not Match <1(check next)|2(forward)|3(dr op)>...
  • Page 428 Prestige 660W/HW Series User’s Guide 210202014 = IP Filter Set 2, Rule 2 Act Not Match <1(check next)|2(forward)|3(dr op)> / MENU 21.1.2.3 FILTER SET #2, RULE #3 (SMT MENU 21.1.2.3) INPUT 210203001 = IP Filter Set 2, Rule 3 Type <0(none)|2(TCP/IP)>...
  • Page 429 Prestige 660W/HW Series User’s Guide 210204002 = IP Filter Set 2, Rule 4 Active <0(No)|1(Yes)> = 1 210204003 = IP Filter Set 2, Rule 4 Protocol = 17 210204004 = IP Filter Set 2, Rule 4 Dest IP = 0.0.0.0 address 210204005 = IP Filter Set 2, Rule 4 Dest Subnet...
  • Page 430 Prestige 660W/HW Series User’s Guide 210205006 = IP Filter Set 2, Rule 5 Dest Port = 138 210205007 = IP Filter Set 2, Rule 5 Dest Port <0(none)|1(equal)|2( Comp equal)|3(less)|4(great er)> 210205008 = IP Filter Set 2, Rule 5 Src IP address = 0.0.0.0 210205009 = IP Filter Set 2, Rule 5 Src Subnet...
  • Page 431 Prestige 660W/HW Series User’s Guide 210206009 = IP Filter Set 2, Rule 6 Src Subnet Mask 210206010 = IP Filter Set 2, Rule 6 Src Port 210206011 = IP Filter Set 2, Rule 6 Src Port Comp <0(none)|1(equal)|2( equal)|3(less)|4(great er)> 210206013 = IP Filter Set 2,Rule 6 Act Match <1(check...

  • Page 432: Command Examples

    Prestige 660W/HW Series User’s Guide 230400003 = Idle Timeout (in second) = 999 230400004 = Authentication Databases <0(Local User Database Only) |1(RADIUS Only) |2(Local,RADIUS) |3(RADIUS,Local)> / MENU 24.11 REMOTE MANAGEMENT CONTROL (SMT MENU 24.11) INPUT These 241100001 = TELNET Server Port = 23 values must be...

  • Page 433: Appendix G Setting Up Your Computer's Ip Address

    Prestige 660W/HW Series User’s Guide Appendix G Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer.

  • Page 434: Installing Components

    Prestige 660W/HW Series User’s Guide Installing Components The Network window Configuration tab displays a list of installed components. You need a network adapter, the TCP/IP protocol and Client for Microsoft Networks. If you need the adapter: In the Network window, click Add. Select Adapter and then click Add.
  • Page 435 Prestige 660W/HW Series User’s Guide Click the IP Address tab. -If your IP address is dynamic, select Obtain an IP address automatically. -If you have a static IP address, select Specify an IP address and type your information into the IP Address and Subnet Mask fields. Click the DNS Configuration tab.

  • Page 436: Verifying Settings

    Prestige 660W/HW Series User’s Guide Click the Gateway tab. -If you do not know your gateway’s IP address, remove previously installed gateways. -If you have a gateway IP address, type it in the New gateway field and click Add. Click OK to save and close the TCP/IP Properties window. Click OK to close the Network window.
  • Page 437 Prestige 660W/HW Series User’s Guide Windows 2000/NT/XP For Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel. For Windows XP, click Network Right-click Local Area Connection and Connections. For Windows 2000/NT, click then click Properties. Network and Dial-up Connections.
  • Page 438 Prestige 660W/HW Series User’s Guide Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties. The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). -If you have a dynamic IP address click Obtain an IP address automatically.
  • Page 439 Prestige 660W/HW Series User’s Guide -If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK. Do one or more of the following if you want to configure additional IP addresses: -In the IP Settings tab, in IP addresses, click Add.
  • Page 440 Prestige 660W/HW Series User’s Guide In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): -Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). -If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS server fields.
  • Page 441 Prestige 660W/HW Series User’s Guide Macintosh OS 8/9 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Select Ethernet built-in from the Connect via list. Setting up Your Computer’s IP Address...
  • Page 442 Prestige 660W/HW Series User’s Guide For dynamically assigned settings, select Using DHCP Server from the Configure: list. For statically assigned settings, do the following: -From the Configure box, select Manually. -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask box. -Type the IP address of your Prestige in the Router address box.
  • Page 443 Prestige 660W/HW Series User’s Guide Click Network in the icon bar. - Select Automatic from the Location list. - Select Built-in Ethernet from the Show list. - Click the TCP/IP tab. For dynamically assigned settings, select Using DHCP from the Configure list. For statically assigned settings, do the following: -From the Configure box, select Manually.

  • Page 445: Splitters And Microfilters

    Prestige 660W/HW Series User’s Guide Appendix H Splitters and Microfilters This appendix tells you how to install a POTS splitter or a telephone microfilter. Connecting a POTS Splitter When you use the Full Rate (G.dmt) ADSL standard, you can use a POTS (Plain Old Telephone Service) splitter to separate the telephone and ADSL signals.
  • Page 446 Prestige 660W/HW Series User’s Guide Step 2. Connect a cable from the double jack end of the Y-Connector to the “wall side” of the microfilter. Step 3. Connect another cable from the double jack end of the Y-Connector to the Prestige. Step 4.

  • Page 447: Appendix I Log Descriptions

    Prestige 660W/HW Series User’s Guide Appendix I Log Descriptions This appendix provides descriptions of example log messages Chart I-1 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is The router has adjusted its time based on information from the time server.
  • Page 448 Prestige 660W/HW Series User’s Guide Chart I-2 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through UPnP packets can pass through the firewall. Firewall For the content filtering logs “(Destination)” means the destination IP address or domain name. Chart I-3 Content Filtering Logs MESSAGE NOTE DESCRIPTION...
  • Page 449 Prestige 660W/HW Series User’s Guide Chart I-4 Attack Logs LOG MESSAGE DESCRIPTION attack (Protocol) The firewall detected an attack. The log may also display the protocol (for example TCP or UDP). land Protocol) The firewall detected a land attack. The log may also display the protocol (for example TCP or UDP).
  • Page 450 Prestige 660W/HW Series User’s Guide Chart I-5 Access Logs LOG MESSAGE DESCRIPTION Firewall default Access matched the default policy and the Prestige blocked or forwarded it according to the configuration of the default firewall policy (Protocol, policy. Direction) Firewall rule match Access matched a firewall rule and the Prestige blocked or forwarded it according to the rule’s configuration.
  • Page 451 Prestige 660W/HW Series User’s Guide Chart I-5 Access Logs LOG MESSAGE DESCRIPTION Out of order TCP The router blocked a TCP handshake packet that came out of the proper order handshake packet blocked (Protocol) Unsupported/out-of- The Prestige generates this log after it drops an ICMP packet due to one of the following two reasons: order ICMP (Protocol) 1.
  • Page 452 Prestige 660W/HW Series User’s Guide Chart I-7 ICMP Notes TYPE CODE DESCRIPTION A packet that needed fragmentation was dropped because it was set to Don't Fragment (DF) Source route failed Source Quench A gateway may discard internet datagrams if it does not have the buffer space needed to queue the datagrams for output to the next network on the route to the destination network.
  • Page 453 Prestige 660W/HW Series User’s Guide Chart I-7 ICMP Notes TYPE CODE DESCRIPTION Information reply message Log Descriptions...
  • Page 455 Prestige 660W/HW Series User’s Guide Appendix J Index Ethernet Addr Timeout......29-3 Remote Node..........29-1 Static Route Setup ........29-3 Action for Matched Packets ......13-11 Brute-force Attack, ........11-6 Address Assignment ........5-2 BSS ........See Basic Service Set Address Resolution Protocol (ARP) ....
  • Page 456 Prestige 660W/HW Series User’s Guide Keywords ......... 15-1, 15-3 Copyright ..............i EAP ..............6-9 Cost Of Transmission ......27-7, 28-3 EAP Authentication Sequence......6-10 Country Code..........35-4 ECHO ...............8-5 CPU Load ............35-3 E-mail Custom Ports Log Example ..........18-6 Creating/Editing ........14-2 Encapsulation ......
  • Page 457 Prestige 660W/HW Series User’s Guide Filter Rule ............32-8 Restrictions..........38-2 Filter Rule Process ......... 32-3 FTP File Transfer........... 36-8 Filter Rule Setup ..........32-7 FTP Restrictions ........16-1, 36-4 Filter Rules Summary FTP Server........... 30-14 Sample ............. 32-17 Full Rate ............H-1 Filter Set Class ............
  • Page 458 Prestige 660W/HW Series User’s Guide Internet Control Message Protocol (ICMP) ... 11-6 Link type ............35-2 IP Address..5-3, 8-5, 8-7, 20-6, 24-4, 28-3, 29-4, LLC-based Multiplexing ......27-10 32-9, 35-4, 35-9, 39-3 Local Network IP Address Assignment Rule Summary..........13-4 ENET ENCAP..........5-4 Log and Trace..........35-6 PPPoA or PPPoE .........
  • Page 459 Prestige 660W/HW Series User’s Guide How NAT Works......... 8-2 Priority-based Scheduler........ 19-3 Mapping Types ..........8-3 Private........... 27-7, 28-4 Non NAT Friendly Application Programs30-17 Proportional Bandwidth Allocation ....19-1 Ordering Rules........... 30-6 Protocol............32-8 What NAT does ........... 8-2 Protocol Filter Rules ........32-14 NAT Traversal ..........
  • Page 460 Prestige 660W/HW Series User’s Guide RTS Threshold........6-2, 25-2 Source & Destination Addresses ....13-11 Rule Summary ........13-4, 14-6 Source Address........13-3, 13-10 Rules ............. 13-1, 13-3 Source-Based Routing ........39-1 Checklist............ 13-1 Splitters............H-1 Creating Custom........13-1 SPTGEN Screens ..........F-1 Key Fields ..........
  • Page 461 Prestige 660W/HW Series User’s Guide TCP Security..........11-10 Upper Layer Protocols ...... 11-10, 11-11 TCP/IP ....11-3, 11-4, 16-2, 32-14, 35-8 User Authentication ........6-11 Teardrop............11-4 User Name ............9-2 Telephone Microfilters........H-1 User Profiles ......... 6-22, 34-6 Telnet ............. 16-2 Telnet Configuration ........

This manual is also suitable for:

Prestige 660hw series

Table of Contents