Vdsl2 17a bonding and 35b single line bridge (86 pages)
Summary of Contents for ZyXEL Communications Prestige 1600
Page 1
Prestige 1600 Universal Access Concentrator ZyNOS Version 3.20 Dec. 2000 Configuration and Management Guide...
Page 2
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Prestige 1600 Universal Access Concentrator ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase. During the warranty period, and upon...
Prestige 1600 Universal Access Concentrator If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation offices worldwide, in one of the following ways: When Contacting Customer Support Representative When you contact your customer support representative, have the following information ready: Prestige model and serial number Information in Menu 24.2.1 -System Information...
1.1 Overview of the Prestige 1600 ... 1-1 1.2 Key Benefits ... 1-2 1.3 Detailed Features of the Prestige 1600... 1-3 1.4 Prestige 1600 and Prestige DSL Clients ... 1-5 Chapter 2 Prestige 1600 Applications ...2-1 2.1 Multi Purpose Concentrator... 2-1 2.2 Prestige 1600 Deployment Scenarios ...
Page 6
5.2.3 IP Multicast ... 5-3 5.3 IP Policies ... 5-4 5.4 TCP/IP Ethernet Setup ... 5-4 5.5 Collecting Internet Account Information... 5-5 5.6 Internet Access using the Prestige 1600 Primary ... 5-5 Chapter 6 DSL Port Setup ... 6-1 Port Usage... 6-3 6.1.1 Example IDSL Port Setup ...
Page 8
Prestige 1600 Universal Access Concentrator Chapter 12 System Security... 12-1 12.1 Changing the System Password ... 12-1 12.2 RADIUS Support... 12-2 12.2.1 About RADIUS ... 12-2 12.2.2 Using RADIUS Authentication... 12-2 12.3 RADIUS Authentication ... 12-2 12.3.1 Installing a RADIUS Server ... 12-2 12.3.2...
Page 9
DSL IP Routing Policies ... 16-5 16.4 IP Policy Routing Example ... 16-5 Chapter 17 Troubleshooting...17-1 17.1 Problems Starting Up the Prestige 1600 ... 17-1 17.2 Problems With the xDSL Port... 17-1 17.3 Problems with the WAN Port ... 17-1 17.4...
Prestige 1600 Universal Access Concentrator List of Figures Figure 1-1 Remote Configuration ...1-4 Figure 2-1 Deployed at a High-rise ...2-1 Figure 2-2 Campus Deployment ...2-2 Figure 2-3 Deployed at an ISP ...2-3 Figure 2-4 A Very High Capacity Concentrator ...2-3 Figure 2-5 High Capacity Concentrator ...2-4...
Page 12
Prestige 1600 Universal Access Concentrator Figure 8-3 Menu 12.1 - Edit IP Static Route... 8-3 Figure 9-1 How NAT Works ... 9-2 Figure 9-2 Applying NAT for Internet Access... 9-4 Figure 9-3 Applying NAT to the Remote Node ... 9-4 Figure 9-4 Menu 15 NAT Setup...
Page 13
Prestige 1600 Universal Access Concentrator Figure 12-2 Menu 23.1 - System Security - Change Password ...12-1 Figure 12-3 RADIUS Authentication Example...12-3 Figure 12-4 Menu 23.2 - System Security - External Server...12-4 Figure 12-5 Menu 24.3.2 - System Maintenance - Accounting Server ...12-5 Figure 12-6 Examples of RADIUS Accounting Message ...12-5...
Page 14
Prestige 1600 Universal Access Concentrator Figure 16-1 Menu 25 - IP Routing Policy Setup... 16-2 Figure 16-2 Menu 25 - IP Routing Policy Summary ... 16-2 Figure 16-3 Menu 25.1.1 - IP Routing Policy... 16-3 Figure 16-4 Ethernet IP Policies ... 16-5 Figure 16-5 IDSL IP Routing Policies ...
Page 15
Prestige 1600 Universal Access Concentrator List of Tables Table 1-1 P1600 DSL Clients...1-5 Table 3-1 Navigating the SMT ...3-2 Table 3-2 Main Menu Summary...3-4 Table 3-3 General Setup Fields ...3-7 Table 4-1 WAN Setup Menu Fields...4-1 Table 4-2 Menu 2.1.2 - Frame Relay Setup...4-3 Table 4-3 Data Link Connection Identifiers ...4-4...
Page 16
Table 16-1 IP Routing Policy Summary... 16-3 Table 16-2 IP Routing Policy ... 16-4 Table 17-1 Troubleshooting the Start-Up of your Prestige 1600 ... 17-1 Table 17-2 Troubleshooting an xDSL Port Connection ... 17-1 Table 17-3 Troubleshooting the WAN Port Connection... 17-1 Table 17-4 Troubleshooting the LAN Interface ...
About this Guide This User's Guide covers all operations of the Prestige 1600 and shows you how to get the best out of the multiple advanced features of your Prestige concentrator. It is designed to help you to configure the Prestige correctly for various applications using the SMT interface via the console port or telnet.
For brevity’s sake, we will use “e.g.” as a shorthand for “for instance”, and “i.e.” as a shorthand for “that is” or “in other words” throughout this manual. The Prestige 1600 will also be referred to as the Prestige or the P1600 in this manual. Related Documentation...
TAs, routers and bridges for connecting to IDSL lines. Any of the commonly used transport protocols such as PPP, MP, or Frame Relay may be used over the IDSL line, allowing rapid and transparent integration into Internet, remote LAN access and telecommuting. Quick Reference Prestige 1600 Universal Access Concentrator What is DSL?
Equipped with one 10/100M Ethernet port, three network module (NM) slots, one WAN interface and one optional five-port 10M/100M LAN switch card, the architecture of the Prestige 1600 allows network modules of different generations to coexist in the same chassis and to inter-operate with the same system module.
Prestige 1600 Universal Access Concentrator Network Address Translation (NAT) NAT (Network Address Translation - NAT, RFC 1631) allows the translation of an Internet Protocol address used within one network to a different IP address known within another network. Internet Protocols...
The P1600 chassis is equipped with three network module slots, one system module and two removable fan modules. Configuration Types The Prestige 1600 can be configured via SMT Menu 1 as a primary, secondary or standalone device. Primary The P1600 primary provides concentration, network management, Internet access and routing functions as well as uses the FlexWan port as the interface to the trunk.
Prestige 1600 Universal Access Concentrator Figure 1-1 Remote Configuration Please note that for figures in this manual, the “Prestige” refers to the Prestige 1600 and that the Prestige 1600 clients are not labeled - please see the next section. Robust Security Features Your Prestige supports CHAP (Challenge Handshake Authentication Protocol), PAP (Password Authentication Protocol) and RADIUS (Remote Authentication Dial in User Service).
Prestige 1600 and Prestige DSL Clients DSL clients suitable for the Prestige 1600 are shown in the following table. Please note that for figures in this manual, the word “Prestige” refers to the Prestige 1600 and that the Getting to Know Your Prestige...
Multi Purpose Concentrator The Prestige 1600 is a highly flexible, high-speed Internet access solution. It is an integrated, cost-effective solution for line concentration, routing and network management. Using the existing infrastructure, service providers (ISPs, Telcos, SIs) and owners of high-rise buildings can take advantage of the DSL technologies using the P1600 concentrator.
Prestige 1600 Universal Access Concentrator For Internet access with the P1600 in standalone mode, you can connect a broadband device such as a DSL modem or cable modem to the Ethernet port. 2.2.2 Campus Connectivity In a campus environment, there are several buildings that need to be interconnected to the computer room. The P1600 offers a long reach and cost effective solution for universities, corporations, etc.
Prestige 1600 Universal Access Concentrator Figure 2-3 Deployed at an ISP A few examples of possible configurations for these deployments are shown next. 2.2.4 Configuration Example One Figure 2-4 A Very High Capacity Concentrator 2.2.5 Configuration Example Two You can also have any number of P1600 standalones chained to an external Ethernet hub as shown next.
Prestige 1600 Universal Access Concentrator 2.2.6 Configuration Example Three Depending on your requirement you can vary the number of Prestige 1600 secondaries as shown next. 2.2.7 Configuration Example Four You can also use the P1600 standalone concentrator for Internet Access.
Initial Screen When you power on your Prestige 1600, the router performs several internal tests and initializes the ports. After the initialization, the Prestige asks you to press [ENTER] to continue, as shown below: Copyright (c) 2000 ZyXEL Communications Corp.
Prestige 1600 Universal Access Concentrator Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your Prestige. Several operations that you should be familiar with before you attempt to modify the configuration are listed in Table 3-1.
Prestige 1600 Universal Access Concentrator 3.3.1 P1600 Main Menu - Primary The SMT displays a general Main Menu first. Once you configure the system in Menu 1 - General Setup you can see the P1600 primary Main Menu, as shown next.
Exit 3.3.2 Secondary and Standalone Main Menu The SMT Main Menu for the secondary and standalone Prestige models is as shown next. Copyright (c) 2000 ZyXEL Communications Corp. Prestige 1600 Main Menu (MySeconda) Getting Started 1. General Setup 3. Ethernet Setup 6.
Prestige 1600 Universal Access Concentrator Figure 3-6 Menu 23.1 - System Security - Change Password Enter your new system password and press [ENTER]. Step 4. Re-type your new system password for confirmation and press [ENTER]. Step 5. Resetting the Prestige If you forget your password or for some reason cannot access the SMT menu, you will need to reload the configuration file.
9 characters at the prompt in the Command Mode. Note: Once you have configured the System Name, you can see it displayed (up to the first 9 characters) in the Main Menu within brackets next to "Prestige 1600 Main Menu”. Configuration You can configure the P1600 primary as only Primary.
Page 38
Prestige 1600 Universal Access Concentrator Field Leave these entries at 0.0.0.0 if a WAN DHCP server provides them. Secondary DNS Server Description Example Initial Setup...
Press Enter to Confirm or ESC to Cancel: Figure 4-1 Menu 2 - WAN Port Setup Table 4-1 WAN Setup Menu Fields Description Prestige 1600 Universal Access Concentrator Chapter 4 WAN Port Setup Only change the default option (No) if you wish to configure the WAN port for frame relay.
Prestige 1600 Universal Access Concentrator Figure 4-2 Configuring The WAN Port for PPP over HDLC To run PPP over HDLC directly without frame relay, the Line Type field in Menu 2.1.2 - Frame Relay Setup must be set to None. To make sure frame relay is disabled, go to menu 2 and then to Menu 2.1.2 – Frame Relay Setup.
If failure occurs, recovery actions are initiated for the restoration of the failed link. Prestige 1600 Universal Access Concentrator Options User (default) None ITU-T(Q.933)
Prestige 1600 Universal Access Concentrator 4.3.2 DLCI The carrier gives you a DLCI (Data Link Connection Identifier) for each frame relay connection to a destination. Identifiers can range from 1 to 991 with restrictions as shown in the following table. The default DLCI for the first connection is 16.
Options= field, press the [SPACEBAR] once to display Yes and then press [ENTER]. This takes you to Menu 11.5 - Remote Node Frame Relay Options shown next. WAN Port Setup Prestige 1600 Universal Access Concentrator Enter here to CONFIRM or ESC to CANCEL: Description...
Prestige 1600 Universal Access Concentrator Rem Node Name= verio Active= Yes Outgoing: My Login= scci My Password= ******** Authen= CHAP/PAP Press ENTER to CONFIRM or ESC to CANCEL: Leave name field blank to delete profile Please enter 0-9, a-z, A-Z, '-', or '_', or leave blank to DELETE profile Figure 4-8 Menu 11.4 - Remote Node Frame Relay Options...
Menu 4 - Internet Access Setup of the SMT allows you to configure the Internet access parameters in a single screen. For Internet access using the Prestige 1600 standalone you need to only set up a default route using Menu 12 - Static Default Route.
Page 46
Prestige 1600 Universal Access Concentrator Configuration P1600 IP Type (Menu 1) Secondary 3 192.168.1.4 Secondary 4 192.168.1.5 Standalone 192.168.1.1 All DSL users who do not have public IP address can get one private IP address from the Prestige IP address pool according to the configuration type setup in Menu 1.
RIP (Routing Information Protocol) allows a router to exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. When set to: 1. Both - the Prestige 1600 will broadcast its routing table periodically and incorporate the RIP information that it receives.
Follow Table 5-2 to configure TCP/IP parameters for the Ethernet port. Table 5-2 TCP/IP Ethernet Setup Menu Fields Field IP Address Enter the IP address of your Prestige 1600 in dotted decimal notation. IP Subnet Your Prestige 1600 automatically calculates the subnet mask Mask based on the IP address that you assign.
LAN and access the Internet using the ISP’s router. Collecting Internet Account Information Before you configure your Prestige 1600 for Internet access, you need to collect your Internet account information from your ISP. Use Table 5-3 to record your Internet Account Information.
Prestige 1600 Universal Access Concentrator Table 5-4 contains instructions on how to configure your Prestige 1600 for Internet access. Table 5-4 Internet Access Setup Menu Fields Field Description ISP's Name Enter the name of your Internet Service Provider. (This information is for identification purposes only.) My Login Enter the login name assigned to you by your ISP.
Choose a slot to configure by entering its index number. The following screen displays an IDSL module in slot 1 of a Secondary 3 device. DSL Port Setup Prestige 1600 Universal Access Concentrator This chapter explains how to edit DSL Port information. Menu 6 - Slot Selection 1.
Prestige 1600 Universal Access Concentrator Menu 6 - IDSL Port Setup(Secondary 3, Slot 1) Field port # Refers to the DSL port number. The port number range changes according to the configuration type and network module type. Active Indicates whether the DSL port is active or not. You can configure this in Menu 6.1 Port Usage.
Encapsulation The Prestige supports PPP encapsulation. RFC 1483 is not supported at the time of writing this manual. DSL Port Setup Prestige 1600 Universal Access Concentrator Menu 6.1 - Port Usage Active= Yes Device Type: IDSL Speed= 128K Encapsulation= PPP...
Prestige 1600 Universal Access Concentrator Field Authen(ticatio This field sets the authentication method for n) Method incoming calls. You can choose Local or RADIUS. The default for this field is Local. Please see the next section on User Authentication for more details.
Your Prestige supports both Password Authentication Protocol (PAP) and Challenge Handshake Authentication Protocol (CHAP). CHAP is more secure than PAP because the password is not sent in clear text. DSL Port Setup Prestige 1600 Universal Access Concentrator Menu 6.1 - Port Usage Active= Yes...
This field can be up to eight characters. Press [SPACE BAR] to toggle between Yes and Enter the login name for your Prestige 1600 when it calls this remote node. Enter the password for your Prestige 1600 when it calls this remote node.
Prestige 1600 Universal Access Concentrator Table 7-2 Remote Node PPP Options Menu Fields Field Encapsulation Select the vendor-specific encapsulation for the link. The default is Standard PPP. Select Cisco PPP only when the remote gateway is a Cisco machine. Standard PPP - Standard PPP encapsulation will be used.
2 or 3 is usually a good number. Private This parameter determines if the Prestige 1600 will include the route to this remote node in its RIP broadcasts. If set to Yes, this route is kept private and not included in RIP broadcast. If No, the route to this remote node will be propagated to other hosts through RIP broadcasts.
Page 62
Prestige 1600 Universal Access Concentrator Field Multicast Turn on/off IGMP support and select the version from IGMP- v2/IGMP-v1/None. IP Policies You can apply up to four IP Policy sets (from twelve) by entering their numbers separated by commas, e.g., 3, 4, 6, 11.
Prestige 1600 Universal Access Concentrator Chapter 8 Static Route This chapter tells you how to configure static routes for the Prestige. 8.1.1 Basics If you wish to know more about static route basics , please read on. Skip to the Static Route Setup section for the actual configuration.
1 and 15. In practice, 2 or 3 is usually a good number. Private This parameter determines if the Prestige 1600 will include the route to this remote node in its RIP broadcasts. If set to Yes, this route is kept private and not included in RIP broadcast.
Prestige, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). Prestige 1600 Universal Access Concentrator This chapter discusses how to configure NAT on the Prestige.
Prestige 1600 Universal Access Concentrator 9.1.3 How NAT works Each packet has two addresses - a source address and a destination address. For outgoing packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the WAN.
You apply NAT via menus 4 or 11.3. The next figure shows you how to apply NAT for Internet access in Menu 4. Enter 4 from the Main Menu to go to Menu 4 - Internet Access Setup. Prestige 1600 Universal Access Concentrator Table 9-1 NAT Mapping Types...
Prestige 1600 Universal Access Concentrator Figure 9-2 Applying NAT for Internet Access The following figure shows how you apply NAT to the remote node in Menu 11.1. Step 1. Enter 11 from the Main Menu. Move the cursor to the Edit IP field, press the [SPACEBAR] to toggle the default No to Yes, then press Step 2.
Figure 9-5 Menu 15.1 Address Mapping Sets Let’s look first at Option 255 (see section 9.1.5). The fields in this menu cannot be changed. Entering 255 brings up the following screen. Prestige 1600 Universal Access Concentrator Menu 15 – NAT Setup Address Mapping Sets...
Prestige 1600 Universal Access Concentrator Set Name= SUA Local Start IP --------------- 0.0.0.0 The following table explains the fields in this screen. Please note that the fields in this menu are read-only. The Type, Local and Global Start/End IPs are normally (not for this read-only menu) configured in Menu 15.1.1.1 (described later) and the values...
Menu 15.1.1 - Address Mapping Rules Global Start IP --------------- Select Rule= Figure 9-7 First Set in Menu 15.1.1 values are displayed here. Table 9-4 Menu 15.1.1 Description Prestige 1600 Universal Access Concentrator Global End IP Type --------------- ------ Option Edit Insert Before...
Prestige 1600 Universal Access Concentrator N.B.: Save Set in the Action field means to save the whole set. You must do this if you make any changes to the set - including deleting a rule. No changes to the set take place until this action is taken.
Enter 2 to go to Menu 15.2 - NAT Server Sets. Step 3. Enter the service port number in the Port # field and the inside IP address of the server in the IP Address field. Prestige 1600 Universal Access Concentrator Figure 9-9 Multiple Servers Behind NAT...
Prestige 1600 Universal Access Concentrator Press [ENTER] at the “Press ENTER to confirm …” prompt to save your configuration after you define all the servers or press ESC at any time to cancel. The most often used port numbers are shown in the following table.
NAT as shown in the next figure. All incoming connections are forwarded to the default inside server at the IP address specified. Prestige 1600 Universal Access Concentrator Figure 9-11 NAT Example 1 Menu 4 - Internet Access Setup...
Prestige 1600 Universal Access Concentrator 9.4.3 Example 3 - General Case In this example, there are 3 IGAs from your ISP. There are many departments but two have their own FTP server. All departments share the same router. You want to reserve 1 IGA for each department with an FTP server and the other IGA is used by all.
Now you configure IGA3 to map to the web and mail server on the LAN. Step 8. Enter 15 from the Main Menu. Prestige 1600 Universal Access Concentrator Menu 15.1.1.1 Address Mapping Rule Press ENTER to Confirm or ESC to Cancel: Figure 9-16 Example 3 - Menu 15.1.1.1...
Prestige 1600 Universal Access Concentrator Enter 2 from this menu and configure it as shown in Figure 9-18. Step 9. Press ENTER to Confirm or ESC to Cancel: 9.4.4 NAT Unfriendly Application Programs Many applications, e.g., gaming programs are NAT unfriendly because they embed addressing information in the data stream.
RIP Direction= Both Version= RIP-2B Multicast= N/A IP Policies= Network Address Translation= Full Feature Address Mapping Set= 2 Press ENTER to Confirm or ESC to Cancel: Figure 9-20 Applying NAT on the LAN Port Prestige 1600 Universal Access Concentrator 9-15...
Drop packet Drop packet if line not up if line not up Send packet but do not reset Idle Timer Prestige 1600 Universal Access Concentrator Chapter 10 Filter Configuration Active Data match Initiate call if line not up Send packet...
Prestige 1600 Universal Access Concentrator Fetch Next Filter Set Next Filter Set Available? Drop Packet 10-2 Filter Set Fetch Next Filter Rule Next filter Rule Available? Check Next Rule Drop Figure 10-2 Filter Rule Process Start Packet into filter Fetch First...
Enter a descriptive name or comment in the Edit Comments field and press [ENTER]. Step 3. Press [ENTER] at the message “Press ENTER to confirm” to open Menu 21.1 - Filter Rules Summary. Step 4. Filter Configuration Prestige 1600 Universal Access Concentrator Menu 21 - Filter Set Configuration Filter Set # Comments...
Prestige 1600 Universal Access Concentrator # A Type - - ---- -------------------------------------------- ------ - - - 1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=137 2 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=138 3 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=139 4 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=137...
Description Protocol Source Address Source Port number Destination Address Destination Port number Description Offset Length Prestige 1600 Universal Access Concentrator Display packet. [D] means to drop the packet. [N] means check the next rule. [F] means to forward the packet.
Prestige 1600 Universal Access Concentrator enabled, the inside IP address and port number are replaced on a connection-by-connection basis, which makes it impossible to know the exact address and port on the wire. Therefore, the Prestige applies the protocol filters to the “native”...
Port #= 0 Port # Comp= None Log= None Figure 10-6 Menu 21.1.1 - TCP/IP Filter Rule Table 10-4 TCP/IP Filter Rule Menu Fields Description Prestige 1600 Universal Access Concentrator Option Device Filter Rule / TCP/IP Filter Rule Yes/No 0-255...
Page 90
Prestige 1600 Universal Access Concentrator Field Destination: Port #. Source: IP Enter the source IP Address of the packet you Addr wish to filter. This field is a ignored if it is 0.0.0.0. Source: IP Enter the IP subnet mask to apply to the Source: Mask IP Addr.
To configure a device rule, select Device Filter Rule in the Filter Type field and press [ENTER] to open Menu 21.1.1 - Device Filter Rule, as shown below. Filter Configuration Prestige 1600 Universal Access Concentrator Not Matched Not Matched Not Matched...
Prestige 1600 Universal Access Concentrator Press ENTER to Confirm or ESC to Cancel: The following table describes the fields in the Device Filter Rule Menu. Field Filter # This is the filter set, filter rule co-ordinates, i.e., 2,3 refers to the second filter set and the third filter rule of that set.
You can choose up to four filter sets (from twelve) by entering their numbers separated by commas, e.g., 3, 4, 6, 11. Press ENTER to Confirm or ESC to Cancel: Filter Configuration Prestige 1600 Universal Access Concentrator Description Menu 3.1 - General Ethernet Setup Input Filter Sets:...
10.7 Filter Example The Prestige 1600 supports the firmware and configuration files upload using FTP connections via LAN and WANs. So, it is possible that anyone can make an FTP connection over the Internet to your Prestige. To prevent outside users from connecting to your Prestige via FTP, you can configure a filter to block FTP connections from the WAN.
IP Source Route= No IP Mask= 0.0.0.0 Port #= 20 Port # Comp= Equal Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 0 Port # Comp= None Log= None Figure 10-12 Filter Rule Configuration Prestige 1600 Universal Access Concentrator 10-13...
Prestige 1600 Universal Access Concentrator Rule 2- block the inbound FTP packet, TCP (06) protocol with port number 21 Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle. Check if the filter rules have been correctly configured using the Menu 21.2...
Authen= CHAP/PAP Press ENTER to CONFIRM or ESC to CANCEL: Press Space Bar to Toggle. Filter Configuration Prestige 1600 Universal Access Concentrator Menu 11.1 - Remote Node Profile Edit PPP Options= No Rem IP Addr= ? Edit IP = No...
SNMP (Simple Network Management Protocol) is a protocol used for exchanging management information between network devices. SNMP is a member of TCP/IP protocol suite. Your Prestige 1600 supports SNMP agent functionality, which allows a manager station to manage and monitor the Prestige 1600 through the network. The Prestige 1600 supports SNMP version one (SNMPv1).
Prestige 1600 Universal Access Concentrator Management Information Base (MIB) is a collection of managed objects. SNMP allows manager and agents to communicate for the purpose of accessing these objects. SNMP itself is a simple request/response protocol based on the manager/agent model. The manager issues a request and the agent returns responses using the following protocol operations: Allows the manager to retrieve an object variable from the agent.
Set requests from the management station. Trusted Host If you enter a trusted host, your Prestige 1600 will only respond to SNMP messages from this address. If you leave the field blank (default), your Prestige 1600 will respond to all SNMP messages it receives, regardless of source.
Page 102
Prestige 1600 Universal Access Concentrator Port 2 : PVC 1 Port 3 : PVC 2 Port 4 : PVC 3 Port 5 : xDSL 1 Port 6 : xDSL 2 … Port 36 : xDSL 32 Please note that xDSL refers to the type of network module installed, i.e., ADSL, IDSL, SDSL.
Step 5. As you enter the password, the screen displays an (*) for each character you type. RADIUS Support Prestige 1600 Universal Access Concentrator This chapter discusses the system password and RADIUS authentication. Menu 23 - System Security Figure 12-1 Menu 23 - System Security...
Prestige 1600 Universal Access Concentrator 12.2 RADIUS Support This section shows you to configure user authentication and accounting using an external RADIUS server. 12.2.1 About RADIUS RADIUS (Remote Authentication Dial-In User Service) is a client/server protocol that enables remote access servers to communicate with a central server to authenticate dial-in users.
To configure the RADIUS server, select option 23, System Security, from the Main Menu to open Menu 23 - System Security. Select option 2, External Server from this menu to open Menu 23.2 - System Security - External Server, shown next. RADIUS Support Prestige 1600 Universal Access Concentrator Figure 12-3 RADIUS Authentication Example 12-3...
Prestige 1600 Universal Access Concentrator The early deployment of RADIUS was done using the chosen port number 1645. Currently, the officially assigned port number for RADIUS is 1812. So, check the port number used by your RADIUS server before configuring it in the Prestige.
Prestige 1600 Universal Access Concentrator The following table describes the accounting attributes mentioned in the above example. Accounting attributes may vary depending on the external server. Field Acct-Status-Type Acct-Session-Id User-Name NAS-Port NAS-Port-DNIS Caller Id Acct-Input-Octets Acct-Output-Octets Acct-Session-Time 12-6 Table 12-3 Accounting Attributes...
Before the Prestige 1600 is properly setup for TCP/IP, the only option for configuring it is through the console port. Once your Prestige 1600 is configured, you can use telnet to configure it remotely. You can also use a modem for remote configuration as shown in chapter One.
13.3.2 System Timeout There is a system timeout of 5 minutes (300 seconds) for either the console port or telnet. Your Prestige 1600 will automatically log you out if you do nothing in this timeout period, except when it is continuously updating the status in Menu 24.1.1, 24.1.2 and 24.1.3.
Prestige 1600 Universal Access Concentrator Set Name= NAT_SET1 Local Start IP --------------- 192.168.1.2 192.168.1.5 Action= Edit Press ENTER to Confirm or ESC to Cancel: Figure 13-5 Address Mapping Rule Summary Step 4. Save the rule back to the Prestige, then go to Menu 4 to apply this newly configured set.
Type with 2 IDSL network modules installed in slots 1 and 2, you will see the following figure. It should be noted that these fields are READ-ONLY and are meant to be used for diagnostic purposes. System Information and Maintenance Figure 14-1 Menu 24 - System Maintenance Prestige 1600 Universal Access Concentrator Chapter 14 14-1...
Prestige 1600 Universal Access Concentrator Menu 24.1 – System Maintenance - Status (Primary) 1. WAN/LAN Status 2. Slot 1 Configuration(IDSL NM) 3. Slot 2 Configuration(IDSL NM) 4. Slot 3 Configuration(N/A) 5. Route Status Press ENTER to Confirm or ESC to Cancel: Figure 14-2 Menu 24.1 - System Maintenance - Status...
“Slot 3 is empty, please make another selection” message if a slot (3 in this case) is empty. Note the asterisk System Information and Maintenance Prestige 1600 Universal Access Concentrator Description Displays the total elapsed time your system has been running.
Prestige 1600 Universal Access Concentrator (*) indicates the port you can reset (press “b”) or drop (press “d”) the counters. Press “i” to move the asterisk to the preceding port and “j” to the next port. Press “a” to reset all ports. Press [ESC] to exit this menu.
Refers to the ZyXEL Network Operating System software version. Refers to the Ethernet MAC (Media Access Control) of your Prestige. This is the IP address of the Prestige in dotted decimal notation. This shows the subnet mask of the Prestige. Prestige 1600 Universal Access Concentrator 14-5...
Prestige 1600 Universal Access Concentrator 14.2.1 Console Port Speed You can change the console port speeds through Menu 24.2.2 - Console Port Speed. Your Prestige supports 9600 (default), 19200, 38400, 57600, and 115200bps for the console port. Press [SPACE BAR] to select the desired speed in Menu 24.2.2, as shown next.
Address Log Facility Note: If you want to utilize Syslog on a Windows 95,98 or NT system, you must install a Syslog client. System Information and Maintenance Prestige 1600 Universal Access Concentrator INFO SMT Session Begin ERROR netMakeChannDial: err=-3001 rn_p=68fb0c...
Prestige 1600 Universal Access Concentrator 14.4 Diagnostic The diagnostic facility allows you to test the different aspects of your Prestige to determine if it is working properly. Menu 24.4 allows you to choose among various types of diagnostic tests to evaluate your system, as shown next.
The list of valid commands can be found by typing help or ? at the command prompt. To exit the CI mode and return to the menu mode, type exit. System Information and Maintenance Prestige 1600 Universal Access Concentrator 8-bit value of address x 8-bit value of address x...
14.7 Time and Date Setting The Prestige 1600 has a battery powered real time clock. Set the time and date of your Prestige in Menu 24.9. Real time is then displayed in the Prestige error logs and firewall logs. Current Time:...
Prestige 1600 Universal Access Concentrator Chapter 15 Configuration & Firmware Maintenance This chapter describes how to backup and restore your configuration file as well as upload new firmware and a new configuration file. 15.1 Filenames The configuration file contains the factory default settings in the menus such as password, DHCP Setup, TCP/IP Setup etc.
This is the firmware filename. ras-m This is the router firmware filename on the Prestige 1600 when you transfer a file to the main block. ras-b This is the router firmware filename on the Prestige 1600 when you transfer a file to the backup block.
Option 5 from Menu 24 - System Maintenance allows you to save the current Prestige configuration file to your workstation. Backup is highly recommended once your Prestige is functioning properly. Configuration & Firmware Maintenance Menu 24.5 – Back up Configuration Figure 15-2 Menu 24.5 as seen using Telnet Prestige 1600 Universal Access Concentrator 15-3...
Prestige 1600 Universal Access Concentrator You can perform the backup either through FTP or TFTP (preferred methods as they are faster) or through the RS- 232 console port (if the network is down). For backup via the console port any serial communications program should work fine;...
The procedure for other serial communications programs should be similar. Configuration & Firmware Maintenance Menu 24.6 – Restore Configuration using FTP Figure 15-6 Menu 24.6 as seen using Telnet Menu 24.6 - Restore Configuration Prestige 1600 Universal Access Concentrator 15-5...
Figure 15-9 Menu 24.7 - System Maintenance - Upload Firmware 15.4.1 Dual Firmware Block Structure The Prestige 1600 employs a “dual firmware block structure” where one block is called the “main block” and the other block is called the “backup block”. The benefits of this approach are: You can save the current firmware into the backup block before you upload new firmware.
The server requires a unique User ID and Password to login. Transfer files in either ASCII (plain text format) or in binary mode. Specify the default remote directory (path). Specify the default local directory (path). Prestige 1600 Universal Access Concentrator 15-7...
Prestige 1600 Universal Access Concentrator 15.4.4 Upload Prestige Firmware using TFTP To use TFTP, your workstation must have both telnet and TFTP clients. Follow steps 1 to 4 as outlined previously in 15.2.2, then continue with the steps below. Go to SMT menu 24.7.1. You must remain in this menu until file transfer is complete.
15.5.1 Upload Prestige Configuration File using FTP To upload the router configuration file, follow the instructions as shown in the following screen (Menu 24.7.2 using Telnet). See also the FTP example earlier in this chapter. Configuration & Firmware Maintenance Prestige 1600 Universal Access Concentrator 15-9...
Prestige 1600 Universal Access Concentrator Menu 24.7.2 – System Maintenance - Upload Router Configuration File To upload the router configuration file, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type “open” and the IP address of your Prestige. Then type “root” and your SMT password as requested.
Page 133
Click Transfer in the HyperTerminal menu bar, then Send File from the drop-down menu. Step 1. Enter the configuration filename on your computer. Step 2. Choose the Xmodem Protocol. Step 3. Finally, press Send. Step 4. Configuration & Firmware Maintenance Prestige 1600 Universal Access Concentrator 15-11...
Prestige 1600 Universal Access Concentrator Chapter 16 IP Policy Routing This chapter explains IP Policy Routing and helps you to configure IP Policy Routing. 16.1 Introduction Traditionally, routing is based on the destination address only and the router takes the shortest path to forward a packet.
Prestige 1600 Universal Access Concentrator Menu 25 shows all the policies defined. Policy Set # Name ------ ----------------- test _______________ _______________ _______________ _______________ _______________ Enter Policy Set Number to Configure= 0 Edit Name= N/A Press ENTER to Confirm or ESC to Cancel:...
Prestige 1600 Universal Access Concentrator Field Policy Set Name Active Criteria IP Protocol Type of Service Packet Length Len Comp Precedence Source: addr start= / end= port start= / end= Destination: addr start= / end= port start= / end= Action=...
If a network has both Internet and remote node connections, you can route Web packets to the Internet using one policy and route FTP packets to a remote network using another policy. See the next figure. IP Policy Routing Prestige 1600 Universal Access Concentrator Figure 16-4 Ethernet IP Policies Menu 6.1 - Port Usage...
Prestige 1600 Universal Access Concentrator Figure 16-6 Example of IP Policy Routing To force Web packets coming from clients with IP addresses of 192.168.255.1 to 192.168.255.32 to be routed to the Internet via the WAN port of the P1600, follow the steps mentioned next.
Prestige 1600 Universal Access Concentrator TCP/IP Setup: IP Address= 192.68.0.1 IP Subnet Mask= 255.255.255.0 RIP Direction= Both Version= RIP-2B Multicast = IGMP-v2 IP Policies= 1,2 Enter here to CONFIRM or ESC to CANCEL: Press Space Bar to Toggle. 16-8 Menu 3.2 - TCP/IP Ethernet Setup...
If the error persists you may have a hardware problem. In this case you should contact technical support. Check to see if the Prestige 1600 is connected to your computer's serial port. Check to see if the VT100 terminal emulation...
17-2 Corrective Action Check the Ethernet LED on the front panel of your Prestige 1600. If it is off, check the cables connecting your Prestige 1600 to the hub. Verify that the IP address and the subnet mask in Menu 3.2 are consistent between the Prestige 1600 and the workstations.
CI Commands Prestige 1600 Universal Access Concentrator configure the Prestige through menu interface. (n=00~31) for xDSL port (n=01~32) for IDSL port Options disp clear [a|f|u] <filename> [level] [display|clear] CI Commands...
Page 146
Prestige 1600 Universal Access Concentrator CI Command filter disp clear hostname iface disp disp clear online mbuf link pool status disp memutil usage mcell msecs disp stack queue disp ndisp quit reboot reslog roadrun disp Options [on|off] [on|off] [disp|cl] link [id] [type] <address>...
Page 148
Prestige 1600 Universal Access Concentrator DSL related CI Commands CI Command xdsl cnt disp chann name|scc2|scc4 clear chann name|scc2|scc4 test disp packet event inernal chann name external chann name event disp clear netstat chann name reset chann name drop chann name...
Page 149
<iface-name> st table stats icmp check data echo status trace CI Commands Prestige 1600 Universal Access Concentrator Options Description display host ip address <hostid> ether <ether add arp addr> <hostid> [ether] drop arp flush arp add proxy arp <hostid>...
Page 150
Prestige 1600 Universal Access Concentrator ifconfig ping pong accept activate dialin_user merge mode refuse request reverse status trace route addprivate drop errcnt flush lookup status status iface disp ceiling floor kick irtt limit reset status syndata display ifconfig <hostid> ping remote host <hostid>...
Page 151
CI Commands Prestige 1600 Universal Access Concentrator [on|off] turn on/off trace for debugging [size] TCP input window size...
Page 152
Prestige 1600 Universal Access Concentrator Ethernet Related CI Command CI Command ether config driver status ether driver rxmod debug disp level disp event disp packet version Options Description display LAN configuration information disp <ch-name> display ether driver counters clear <ch-name>...
Multiplexors mix voice signals and data on the same line. Data Filtering Data filtering screens the data to determine if the packet should be allowed to pass. Data filters Glossary Prestige 1600 Universal Access Concentrator Glossary...
Page 154
Dual Firmware Block The Prestige 1600 employs a “dual firmware block structure” where one block is called the “main Structure block” and the other block is called the “backup block”. You can save the current firmware into the backup block before you try to upload new firmware.
Page 155
Internet Service Provider: an organization offering and providing Internet services to the public and having its own computer servers to provide the services offered. ITU-T International Telecommunications Union, Standardization Sector. ITU-T is the telecommunication standardization sector of ITU and is responsible for making technical Glossary Prestige 1600 Universal Access Concentrator...
Page 156
Prestige 1600 Universal Access Concentrator recommendations about telephone and data (including fax) communications systems for service providers and suppliers. Local Area Network is a shared communication system to which many computers are attached. A LAN, as its name implies, is limited to a local area. This has to do more with the electrical characteristics of the medium than the fact that many early LANs were designed for departments, although the latter accurately describes a LAN as well.
Page 157
LECs and PTTs. Telnet The virtual terminal protocol in the Internet suite of protocols. Allows users of one host to log into a remote host and act as normal terminal users of that host. Glossary Prestige 1600 Universal Access Concentrator...
Page 158
Prestige 1600 Universal Access Concentrator Terminal A device that allows you to send commands to a computer somewhere else. At a minimum, this usually means a keyboard and a display screen and some simple circuitry. Terminal Software Software that pretends to be (emulates) a physical terminal and allows you to type commands to a computer somewhere else.
Current Time, 14-10 Customer Support, iv Digital Subscriber Line (DSL), xix Disclaimer, ii DLCI, 4-4, 14-3 Index Prestige 1600 Universal Access Concentrator DNS, 3-6, 3-7 DNS Server, 3-6 Domain Name, 3-6, 9-10 DSL clients, 1-4 DSL Comparison, xx DSL Ports...
Need help?
Do you have a question about the Prestige 1600 and is the answer not in the manual?
Questions and answers