1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Network Router
  5. P-1100
  6. User manual

ZyXEL Communications P-1100 User Manual

Wan access router
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
Prestige 1100
WAN Access Router
User's Guide
Version 2.50
Nov 1999
ZyXEL
T
I
A
S
OTAL
NTERNET
CCESS
OLUTION

Advertisement

Table of Contents
loading

Related Manuals for ZyXEL Communications P-1100

Summary of Contents for ZyXEL Communications P-1100

  • Page 1 Prestige 1100 WAN Access Router User's Guide Version 2.50 Nov 1999 ZyXEL OTAL NTERNET CCESS OLUTION...
  • Page 2 The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation.
  • Page 3 Prestige 1100 Internet Access Router ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper...

  • Page 4: Customer Support

    Prestige 1100 Internet Access Router If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation offices worldwide, in one of the following ways: Method EMAIL – Support Region EMAIL – Sales support@zyxel.com.tw support@europe.zyxel.com Worldwide sales@zyxel.com.tw support@zyxel.com...

  • Page 5: Table Of Contents

    Customer Support...iv Table of Contents ...v List of Figures ...xi List of Tables ...xiii Preface ...xiv Chapter 1: Getting to Know Your Bridge/Router... 1-1 1.1 Quick Feature Overview of the Prestige 1100...1-1 1.2 Detailed Features of the Prestige 1100...1-1 1.3 Front Panel LEDs and Back Panel Ports...1-3 1.3.1 Front Panel LEDs ...1-3 1.3.2...
  • Page 6 Prestige 1100 Internet Access Router Chapter 3: Internet Access...3-1 3.1 Route IP Setup ... 3-1 3.2 TCP/IP Parameters ... 3-2 3.2.1 IP Address and Subnet Mask... 3-2 3.2.2 RIP Setup ... 3-2 3.2.3 DHCP Configuration... 3-3 3.3 TCP/IP and DHCP Ethernet Setup... 3-3 3.4 IP Multicast ...
  • Page 7 6.4 LAN-to-LAN Application with Novell IPX...6-5 6.4.1 IPX Remote Node Setup ...6-6 6.4.2 IPX Static Route Setup...6-8 Chapter 7: Bridging Setup... 7-1 7.1 Bridging in General...7-1 7.2 Bridge Ethernet Setup ...7-1 7.2.1 Remote Node Bridging Setup...7-2 7.2.2 Bridge Static Route Setup...7-4 Chapter 8: Filter Configuration ...
  • Page 8 Prestige 1100 Internet Access Router Chapter 12: System Maintenance ...12-1 12.1 System Status... 12-2 12.2 System Information... 12-4 12.2.1 Console Port Speed... 12-5 12.3 Log and Trace... 12-5 12.3.1 Viewing Error Log... 12-5 12.3.2 Syslog And Accounting... 12-6 12.4 Diagnostic ... 12-7 12.5 Filename conventions ...
  • Page 9 Chapter 14: Troubleshooting ... 14-1 14.1 Problems Starting Up the Prestige 1100...14-1 14.2 Problems With the WAN Port ...14-2 14.3 Problems with the LAN Interface...14-2 14.4 Problems Connecting to a Remote Node or ISP ...14-2 Acronyms and Abbreviations ...A Index...C Table of Contents Prestige 1100 Internet Access Router...

  • Page 11: List Of Figures

    Prestige 1100 Internet Access Router List of Figures Figure 1-1 Remote Configuration... 1-2 Figure 1-2 Prestige 1100 Front Panel... 1-3 Figure 1-3 Back Panel... 1-4 Figure 1-4 Internet Access Application ... 1-5 Figure 1-5 LAN-to-LAN Application... 1-6 Figure 2-1 P1100 Connections... 2-2 Figure 2-2 Power-On Display ...
  • Page 12 Prestige 1100 Internet Access Router Figure 7-2 Menu 11.3 - Remote Node Bridging Options...7-3 Figure 7-3 Menu 12.3.1 - Edit Bridge Static Route...7-4 Figure 8-1 Filter Rule Process...8-2 Figure 8-2 Menu 21 - Filter Set Configuration...8-3 Figure 8-3 Menu 21.1 - Filter Rules Summary...8-4 Figure 8-4 Protocol and Device Filter Sets...8-7 Figure 8-5 Menu 21.1.1 - TCP/IP Filter Rule ...8-8 Figure 8-6 Executing an IP Filter ...
  • Page 13 Prestige 1100 Internet Access Router List of Tables Table 1-1 LED Functions ... 1-3 Table 2-1 Main Menu Commands... 2-5 Table 2-2 Main Menu Summary ... 2-6 Table 2-3 General Setup Menu Fields...2-10 Table 2-4 WAN Setup Menu Fields... 2-11 Table 3-1 DHCP Ethernet Setup Menu Fields...

  • Page 14: Preface

    Prestige 1100 Internet Access Router About Your Bridge/Router The Prestige 1100 is a high-performance bridge/router that offers a complete solution for your WAN applications such as Internet access and multi-protocol LAN-to-LAN connections for SMB (Small & Medium Size Businesses). It integrates the routing and bridging functions in a single package and is easy to install and to configure since you do not need to set any switches.

  • Page 15: Chapter 1: Getting To Know Your Bridge/Router

    Getting to Know Your Bridge/Router The Prestige 1100 is a high-performance bridge/router that offers a complete solution for your WAN applications such as Internet access and multi-protocol LAN-to-LAN connections for SMB (Small & Medium Size Businesses). It integrates the routing and bridging functions in a single package and is easy to install and to configure since you do not need to set any switches.

  • Page 16: Figure 1-1 Remote Configuration

    Prestige 1100 Internet Access Router Two 10/100 Ethernet LANs One 10/100M Ethernet interface is designed for high performance LAN environment. The other 10/100M Ethernet interface can be reserved for connecting to a Web/FTP server for public Internet access. Most Complete NAT Support ZyXEL NAT technology supports not only private IP for Internet access sharing and security protection, but also popular Internet multimedia applications such as Microsoft NetMeeting and CuSeeMe.

  • Page 17: Front Panel Leds And Back Panel Ports

    DHCP Support DHCP (Dynamic Host Configuration Protocol) allows you to dynamically and automatically assign IP address to hosts on your network. Data Compression Your Prestige incorporates Stac data compression to speed up data transfer. Stac is the de facto standard of data compression over PPP links. Front Panel LEDs and Back Panel Ports Figure 1-2 Prestige 1100 Front Panel 1.3.1 Front Panel LEDs...

  • Page 18: Prestige 1100 Back Panel

    Prestige 1100 Internet Access Router 1.3.2 Prestige 1100 Back Panel The diagram above shows the rear panel of your Prestige 1100. Refer to this diagram when making connections. • : POWER INPUT = Power cord receptacle and switch ‚ : LAN1 = RJ-45 10/100 Mbps Ethernet port ƒ...

  • Page 19: Figure 1-4 Internet Access Application

    Prestige 1100 Internet Access Router Corporate LAN INTERNET Prestige 1100 Leased Line WEB/FTP Server Figure 1-4 Internet Access Application Internet Single User Account For a business environment, your Prestige offers the Single User Account (SUA) feature that allows multiple users on the LAN (Local Area Network) to access the Internet concurrently for the cost of a single user.

  • Page 20: Figure 1-5 Lan-To-Lan Application

    Prestige 1100 Internet Access Router Multi-protocol/Multilink LAN-to-LAN Connection You can use the Prestige to connect two geographically dispersed networks over the WAN connection. The Prestige supports TCP/IP and Novell IPX routing, as well as transparent bridging for other network layer protocols. A typical LAN-to-LAN application for your Prestige is shown below: Corporate LAN INTERNET Prestige...

  • Page 21: Chapter 2: Hardware Installation & Initial Setup

    Hardware Installation & Initial Setup Unpacking your Bridge/Router This chapter explains how to connect to the hardware and to perform the initial setup. Before installing be sure that all components listed with the enclosed packing slip are included. Additional Installation Requirements In addition to the contents of your package, there are other hardware and software requirements you need before you can install and use your Prestige.

  • Page 22: Connect Your Wan Bridge/Router

    Prestige 1100 Internet Access Router Connect your WAN Bridge/Router 2.3.1 Prestige 1100 Connections This section outlines how to make the connections to your Prestige 1100. Please refer to the following figure when making connections to the P1100. Step 1. Connect WAN Devices to your Prestige 1100 Connect the port of a WAN device to the WAN port on the Prestige 1100 using an appropriate cable.

  • Page 23: Power On Your Prestige 1100

    When you power on your Prestige 1100, the router performs several internal tests and initializes the WAN devices. After the initialization, the Prestige asks you to press [ENTER] to continue, as shown below: Copyright (c) 1999 ZyXEL Communications Corp. ethernet address: 00:a0:c5:00:50:01 ethernet address: 00:a0:c5:00:50:02 Press ENTER to continue...

  • Page 24: Figure 2-3 Login Screen

    Prestige 1100 Internet Access Router For your first login, enter the default password [1234]. As you enter the password, the screen displays an (X) for each character you type. Enter Password : XXXX Figure 2-3 Login Screen Please note that if there is no activity for longer than 5 minutes after you log in, your Prestige will automatically log you out and will display a blank screen.

  • Page 25: Navigating The Smt Interface

    Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your Prestige. Several operations that you should be familiar with before you attempt to modify the configuration are listed in Table 2-1. Operation Press/<read>...

  • Page 26: Figure 2-4 Smt Main Menu

    SUA Server Setup Filter Set Configuration SNMP Configuration System Security System Maintenance IP Routing Policy Setup Exit Copyright (c) 1999 ZyXEL Communications Corp. P1100 Main Menu Advanced Management 21. Filter Set Configuration 22. SNMP Configuration 23. System Security 24. System Maintenance 25.

  • Page 27: Changing The System Password

    Changing the System Password The first thing you should do before anything else is to change the default system password by following the steps below: Step 1. Select option 23. System Security in the Main Menu. This will open Menu 23 - System Security as below: Figure 2-5 Menu 23 - System Security Step 2.

  • Page 28: Figure 2-6 Menu 23.1 - System Security - Change Password

    Prestige 1100 Internet Access Router Step 3. When submenu 23.1- System Security-Change Password appears, as shown below, enter the existing system password, i.e., [1234], then press [ENTER]. Figure 2-6 Menu 23.1 - System Security - Change Password Step 4. Enter your new system password and press [ENTER]. Step 5.

  • Page 29: General Setup

    General Setup The Menu 1 - General Setup contains administrative and system-related information. Step 1. Select option 1. General Setup in the Main Menu by typing 1 at the menu selection number prompt. Step 2. The Menu 1 - General Setup screen appears, as shown. Fill in the required fields marked [?] and turn on the individual protocols for your particular application, as explained in the following table.

  • Page 30: Note On Bridging

    Prestige 1100 Internet Access Router Table 2-3 General Setup Menu Fields Field Description System Name Choose a descriptive name for identification purposes. This name can be up to 8 alphanumeric characters long. Spaces are not allowed, but dashes “-” and underscores "_"...

  • Page 31: Wan Setup

    WAN Setup This section describes how to configure the WAN port and a WAN device using Menu 2- WAN Setup. When you finish the setup, the Prestige uses this information to initialize the WAN port and the attached WAN device. 2.8.1 Prestige 1100 WAN Port Setup Select option 2.

  • Page 32: Ethernet Setup

    Prestige 1100 Internet Access Router Ethernet Setup This section describes how to configure the Ethernet using Menu 3 – Ethernet Setup. There are actually three Menu 3s: 1st. Menu 3 – Ethernet Setup – allows you to select the LAN (1 or 2) you wish to configure. 2nd.

  • Page 33: General Ethernet Setup

    2.10 General Ethernet Setup This menu allows you to specify the filter sets that you wish to apply to the Ethernet traffic. You seldom need to filter Ethernet traffic, however, the filter sets may be useful to block certain packets, reducing traffic and preventing security breaches.

  • Page 35: Chapter 3: Internet Access

    This chapter shows you how to configure the LAN as well as the WAN of your Prestige for Internet access. Route IP Setup The first step is to enable the IP routing in Menu 1 - General Setup. To edit Menu 1, enter 1 in the Main Menu to select 1. General Setup and press [ENTER]. Set the [Route IP] field to [Yes] by pressing the space bar as shown in Figure 3-1.

  • Page 36: Tcp/Ip Parameters

    Prestige 1100 Internet Access Router TCP/IP Parameters 3.2.1 IP Address and Subnet Mask Similar to the houses on a street that share a common street name, the machines on a LAN share one common network number, also. Where you obtain your network number depends on your particular situation. If the ISP (Internet Service Provider) or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.

  • Page 37: Dhcp Configuration

    Prestige 1100 Internet Access Router 3.2.3 DHCP Configuration DHCP (Dynamic Host Configuration Protocol) allows the individual clients (workstations) to obtain the TCP/IP configuration at start-up from a centralized DHCP server. The Prestige 1100 has the DHCP server capability built-in. The DHCP server is disabled when [DHCP=] is [None.] When [DHCP=] is [Client, ]the Prestige requests an IP address from a DHCP server on the Ethernet on which the [DHCP] field is set to [Client].

  • Page 38: Figure 3-2 Menu 3.2 - Tcp/Ip And Dhcp Ethernet Setup

    Prestige 1100 Internet Access Router DHCP Setup: DHCP= None Client IP Pool Starting Address= N/A Size of Client IP Pool= N/A Primary DNS Server= N/A Secondary DNS Server= N/A TCP/IP Setup: IP Address= 192.168.1.1 IP Subnet Mask= 255.255.255.0 RIP Direction= Both Version= RIP-2B Multicast = IGMP-v2 IP Policies=...

  • Page 39: Ip Multicast

    Follow Table 3-2 to configure TCP/IP parameters for the Ethernet port. Table 3-2 TCP/IP Ethernet Setup Menu Fields Field Description TCP/IP Setup IP Address Enter the IP address of your Prestige 1100 in dotted decimal notation. IP Subnet Mask Your Prestige 1100 will automatically calculate the subnet mask based on the IP address that you assign.

  • Page 40: Internet Access Configuration

    Prestige 1100 Internet Access Router is also compatible with version 1. The multicast setting can be turned on or off on Ethernet and remote nodes. For IP routing policy information, please refer to Chapter 13: IP Routing Policy. Internet Access Configuration Menu 4 allows you to enter the Internet access parameters in one screen.

  • Page 41: Table 3-4 Internet Access Setup Menu Fields

    Table 3-4 contains instructions on how to configure your Prestige 1100 for Internet access. Table 3-4 Internet Access Setup Menu Fields Field Description ISP's Name Enter the name of your Internet Service Provider. (This information is for identification purposes only.) My Login Name Enter the login name assigned to you by your ISP.

  • Page 42: Single User Account

    Prestige 1100 Internet Access Router Single User Account Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, you will have to lease a block of legal, or globally unique, IP addresses from the ISP. The Single User Account (SUA) feature allows you to have the same benefits as having multiple legal addresses, but only pay for one IP address, thus saving significantly on the subscription fees.

  • Page 43: Advantages Of Sua

    If you do not define any server, SUA offers the additional benefit of firewall protection. If no server is defined, all incoming inquiries will be filtered out by your Prestige and thus preventing intruders from probing your network. Your Prestige accomplishes this address sharing by translating the internal LAN IP addresses to a single address that is globally unique on the Internet.

  • Page 44: Ethernet Sua

    Prestige 1100 Internet Access Router To enable the SUA feature in Menu 4, move the cursor to the Single User Account field and select [Yes] (or [No] to disable SUA). Then follow the instructions on how to configure the SUA fields in the following table.

  • Page 45: Lans & Wans

    LANs & WANs A LAN (Local Area Network) is a computer network limited to the immediate area, usually the same building or floor of a building. A WAN (Wide Area Network), on the other hand is an outside connection to another network or the Internet.

  • Page 47: Chapter 4: Remote Node Configuration For Lan To Lan

    Remote Node Configuration for LAN to LAN A remote node is required for placing calls to a remote gateway. A remote node represents both the gateway and the network behind it across a WAN connection. Note that when you use Menu 4 to set up Internet access, you are actually configuring the remote node.

  • Page 48: Table 4-1 Remote Node Profile Menu Fields For Leased Lines

    Prestige 1100 Internet Access Router Table 4-1 Remote Node Profile Menu Fields for Leased Lines Field Description Rem Node Name This is a required field [?]. Enter a descriptive name for the remote node, e.g., Corp. This field can be up to eight characters.

  • Page 49: Outgoing Authentication Protocol

    Field Description Edit PPP Options To edit the PPP options for this remote node, move the cursor to this field, use the space bar to select [Yes] and press [Enter]. This will bring you to Menu 11.2 - Remote Node PPP Options. For more information on configuring PPP options, see the section Editing PPP Options.

  • Page 50: Figure 4-2 Menu 11.2 - Remote Node Ppp Options

    Prestige 1100 Internet Access Router Press Space Bar to Toggle. Figure 4-2 Menu 11.2 - Remote Node PPP Options Table 4-2 Remote Node PPP Options Menu Fields describes the Remote Node PPP Options Menu, and contains instructions on how to configure the PPP options fields. Table 4-2 Remote Node PPP Options Menu Fields Field Encapsulation...

  • Page 51: Chapter 5: Remote Node Tcp/Ip Configuration

    Prestige 1100 Internet Access Router Chapter 5: Remote Node TCP/IP Configuration This chapter shows you how to configure the TCP/IP parameters of a remote node. LAN-to-LAN Application A typical LAN-to-LAN application is to use your Prestige to connect a branch office to the headquarters, as depicted in the following Figure 5-1.

  • Page 52: Remote Node Setup

    Prestige 1100 Internet Access Router Remote Node Setup Follow the procedure in the Remote Node Configuration Chapter to configure the protocol-independent parameters in Menu 11 - Remote Node Profile. For the TCP/IP parameters, follow the instructions below. Follow the steps below to edit Menu 11.3 - Remote Node Network Layer Options shown in Figure 5-2: Step 1.

  • Page 53: Figure 5-3 Sample Ip Addresses For A Tcp/Ip Lan-To-Lan Connection

    The following diagram in Figure 5-3 explains the Sample IP Addresses to help you to understand the field of My Wan Address in Menu 11.3. Remote Network 192.168.1.0 Figure 5-3 Sample IP Addresses for a TCP/IP LAN-to-LAN Connection To configure the TCP/IP parameters of a remote node, first configure the three fields in Menu 11 – Remote Node Profile, as shown.

  • Page 54: Table 5-2 Remote Node Tcp/Ip Configuration

    Prestige 1100 Internet Access Router The following table shows the TCP/IP related fields in Menu 11.3 - Remote Node Network Layer Options. Table 5-2 Remote Node TCP/IP Configuration Field Description Rem IP Address This shows the IP address you entered for this remote node in the previous menu, Remote Node Profile.
  • Page 55 Field Description RIP Direction= Press the space bar to select the RIP direction from [Both]/[In Only]/[Out Only]/[None]. Version= Press the space bar to select the RIP version from [RIP- 1]/[RIP-2B]/[RIP-2M]. Multicast Sets IGMP to version 1, version 2 or disables IGMP. IP Policies You can apply up to four IP Policy sets (from twelve) by entering their numbers separated by commas.

  • Page 56: Static Route Setup

    Prestige 1100 Internet Access Router Static Route Setup Static routes tell the Prestige routing information that it cannot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly connected to a remote node.

  • Page 57: Figure 5-5 Menu 12 - Static Route Setup

    Figure 5-5 Menu 12 - Static Route Setup From Menu 12, select one of the available IP static routes to open Menu 12.1 - IP Static Route Setup, as shown below. Figure 5-6 Menu 12.1 - IP Static Route Setup Choosing a static route to edit produces the following screen.

  • Page 58: Table 5-3 Edit Ip Static Route Menu Fields

    Prestige 1100 Internet Access Router The following table describes the fields for Menu 12.1.1 – Edit IP Static Route Setup. Table 5-3 Edit IP Static Route Menu Fields Field Route # Route Name Active Destination IP Address IP Subnet Mask Gateway IP Address Metric Private...

  • Page 59: Chapter 6: Ipx Configuration

    Prestige 1100 Internet Access Router Chapter 6: IPX Configuration This chapter shows you how to configure the IPX parameters of the Prestige 1100. IPX Network Environment Novell bundles the protocol stack, the server software and routing functionality in their NetWare server products.

  • Page 60: External Network Number

    Prestige 1100 Internet Access Router Figure 6-1 NetWare Network Numbers 6.1.3 External Network Number Each of the four logical networks (based on frame type) has its own external network number. 6.1.4 Internal Network Number In addition to the external network numbers, each NetWare server has its own internal network number that is a virtual network to which the server is attached.

  • Page 61: Prestige 1100 On Lan With Server

    LAN with a server (server side) LAN without a server (client side) Seed Router (Client Side) Assigns Network Number Prestige 1100 Netware Clients Figure 6-2 Prestige in an IPX Environment 6.2.1 Prestige 1100 on LAN with Server If your Prestige is on a LAN with a seed router, you do not need to configure the LAN network numbers.

  • Page 62: Ipx Ethernet Setup

    Prestige 1100 Internet Access Router IPX Ethernet Setup From Menu 3 - Ethernet. Setup, select option 3. Novell IPX Setup from the appropriate LAN to go to Menu 3.3 - Novell IPX Ethernet Setup as shown in Figure 6-3. Press Space Bar to Toggle. Figure 6-3 Menu 3.3 - Novell IPX Ethernet Setup The following Table 6-1 describes the Novell IPX Ethernet Setup Menu.

  • Page 63: Lan-To-Lan Application With Novell Ipx

    LAN-to-LAN Application with Novell IPX. A typical LAN-to-LAN application is to use your Prestige to call from a branch office to the corporate headquarters to enable the stations in the branch office to access the NetWare servers at the headquarters, as depicted in Figure 6-4 Branch Office LAN External Network Number = 333...

  • Page 64: Ipx Remote Node Setup

    Prestige 1100 Internet Access Router 6.4.1 IPX Remote Node Setup Follow the procedure in Chapter 5 to configure the protocol-independent parameters in Menu 11.1 - Remote Node Profile. For the IPX-related parameters in Menu 11.3 - Remote Node Network Layer Options, follow the instructions below.

  • Page 65: Table 6-2 Remote Node Novell Ipx Options

    Table 6-2 describes the IPX protocol-dependent parameters of the remote node Setup. Table 6-2 Remote Node Novell IPX Options Field Description Rem LAN Net # In this field, enter the internal network number of the NetWare server on the remote LAN. My WAN Net # In this field, enter the network number of the WAN link.

  • Page 66: Ipx Static Route Setup

    Prestige 1100 Internet Access Router 6.4.2 IPX Static Route Setup Similar to IP, IPX static routes tell the Prestige how to reach servers beyond a remote node before a connection to that remote node is established. From Menu 12, select two, then select one of the IPX Static Routes to open Menu 12.2.1 - Edit IPX Static Route, as shown below.

  • Page 67: Table 6-3 Edit Ipx Static Route Menu Fields

    Table 6-3 Edit IPX Static Route Menu Fields Field Description Route # This is the index number of the route as listed in Menu 12.2 – IPX Static Route Setup. Server Name In this field, enter the name of the server. This must be the exact name configured in the NetWare server.

  • Page 69: Chapter 7: Bridging Setup

    This chapter shows you how to configure the bridging parameters of your Prestige 1100. Bridging in General Bridging bases the forwarding decision on the MAC (Media Access Control), or hardware address, while routing does on the network layer (IP or IPX) address. Bridging allows the Prestige 1100 to transport packets of network layer protocols that the Prestige 1100 does not route, e.g., SNA, from one network to another.

  • Page 70: Remote Node Bridging Setup

    Prestige 1100 Internet Access Router From Menu 3 - Ethernet Setup, enter option 4. Bridge Setup for the appropriate LAN and Menu 3.4 - Bridge Ethernet Setup displays as shown in Figure 7-1. Press Space Bar to Toggle. Figure 7-1 Menu 3.5 - Bridge Ethernet Setup 7.2.1 Remote Node Bridging Setup Follow the procedure in Chapter 5 to configure the protocol-independent parameters in Menu 11.1 - Remote Node Profile.

  • Page 71: Figure 7-2 Menu 11.3 - Remote Node Bridging Options

    IP Options: Rem IP Addr: Rem Subnet Mask= N/A My WAN Addr= N/A Single User Account= N/A Server IP Addr= N/A Metric= N/A Private= N/A RIP Direction= N/A Version= N/A Multicast= IGMP-v2 IP Policies= Figure 7-2 Menu 11.3 - Remote Node Bridging Options Table 7-1 describes the bridging-dependent parameters in the Remote Node Profile and Network Layers menus.

  • Page 72: Bridge Static Route Setup

    Prestige 1100 Internet Access Router 7.2.2 Bridge Static Route Setup Similar to network layer static routes, a bridging static route tells the Prestige 1100 about the route to a node before a connection is established. You configure bridge static routes in Menu 12.3.1(go to Menu 12, choose option 3, then choose a static route to edit) as shown in Figure 7-3.

  • Page 73: Chapter 8: Filter Configuration

    About Filtering Your Prestige uses filters to decide whether or not to allow passage of a packet. Data filtering is divided into incoming and outgoing filters, depending on the direction of the packet relative to a port. The following sections describe how to configure filter sets. Please see our application notes for more information and examples on creating and configuring filters.

  • Page 74: Figure 8-1 Filter Rule Process

    Prestige 1100 Internet Access Router Fetch Next Filter Set Next Filter Set Available? Drop Packet Filter Set Fetch Next Filter Rule Next Filter Rule Available? Check Next Rule Drop Figure 8-1 Filter Rule Process Start Packet into Filter Fetch First Filter Set Fetch First Filter Rule...

  • Page 75: Configuring A Filter Set

    Configuring a Filter Set To configure a filter sets, follow the procedure below: Step 1. Enter 21 from the Main Menu to open Menu 21 - Filter Set Configuration. Filter Set # Comments ------ ------------------ ______________ ______________ ______________ ______________ ______________ ______________ Enter Filter Set Number to Configure= Edit Comments=...

  • Page 76: Filter Rules Summary Menu

    Prestige 1100 Internet Access Router # A Type - - ---- -------------------------------------------- --------- - - - 1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=137 2 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=138 3 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=139 4 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=137 5 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=138...

  • Page 77: Table 8-2 Abbreviations Used If Filter Type Is Ip

    Abbreviations Description Refers to More. [Y] means an action can not yet be taken as there are more rules to check, which are concatenated with the present rule to form a rule chain. When the rule chain is complete an action can be taken. [N] means you can now specify an action to be taken i.e., forward the packet, drop the packet or check the next rule.

  • Page 78: Configuring A Filter Rule

    Prestige 1100 Internet Access Router Table 8-3 Abbreviations Used If Filter Type Is IPX Abbreviation If the filter type is Dev (device), the following abbreviations listed in the following table will be used. Table 8-4 Abbreviations Used If Filter Type Is Dev Abbreviation Refer to the next section for information on configuring the filter rules.

  • Page 79: Tcp/Ip Filter Rule

    Prestige 1100 Internet Access Router Figure 8-4 Protocol and Device Filter Sets To speed up filtering, all rules in a filter set must be of the same type, i.e., Protocol filters or Device filters. The class of a filter set is determined by the first rule that you create. When applying the filter sets to a port, separate menu fields are provided for protocol and device filter sets.

  • Page 80: Figure 8-5 Menu 21.1.1 - Tcp/Ip Filter Rule

    Prestige 1100 Internet Access Router Press Space Bar to Toggle. Figure 8-5 Menu 21.1.1 - TCP/IP Filter Rule The following table describes how to configure your TCP/IP filter rule. Table 8-5 TCP/IP Filter Rule Menu Fields Field Description Filter # This is the filter set, filter rule co-ordinates, i.e., 2,3 refers to the second filter set and the third filter rule of that set.
  • Page 81 Field Description Destination: Enter the destination port of the packets that you wish to filter. Port # The range of this field is 0 to 65535. This field is a don’t-care if it is 0. Destination: Select the comparison to apply to the destination port in the Port # Comp packet against the value given in Destination: Port #.

  • Page 82: Figure 8-6 Executing An Ip Filter

    Prestige 1100 Internet Access Router The following diagram illustrates the logic flow of an IP filter. Packet into IP Filter Filter Active? Apply SrcAddrMask to Src Addr Check Src IP Addr Matched Apply DestAddrMask to Dest Addr Check Dest IP Addr Matched Check IP Protocol...

  • Page 83: Novell Ipx Filter Rule

    8.4.3 Novell IPX Filter Rule This section shows you how to configure an IPX filter rule. IPX filters allow you to base the rules on the fields in the IPX headers. To configure an IPX rules, select [IPX Filter Rule] from the [Filter Type] field and press Enter to open Menu 21.1.1 IPX Filter Rule, as shown in the figure below.

  • Page 84: Table 8-6 Ipx Filter Rule Menu Fields

    Prestige 1100 Internet Access Router The table below describes the IPX Filter Rule. Field Filter # Filter Type Active IPX Packet Type Destination Network # Destination Node # Destination Socket # Destination Socket # Comp Source Network # Source Node # 8-12 Table 8-6 IPX Filter Rule Menu Fields Description...

  • Page 85: Device Filter Rule

    Field Source Socket # Source Socket # Comp Operation Once you have completed filling in Menu 21.1.1 - IPX Filter Rule, press [Enter] at the message [Press Enter to Confirm] to save your configuration, or press [Esc] to cancel. This data will now be displayed on Menu 21.1 - Filter Rules Summary.

  • Page 86: Figure 8-8 Menu 21.1.2 - Device Filter Rule

    Prestige 1100 Internet Access Router Figure 8-8 Menu 21.1.2 - Device Filter Rule The following table describes the fields in the Device Filter Rule Menu. Table 8-7 Device Filter Rule Menu Fields Field Description Filter # This is the filter set, filter rule co-ordinates, i.e., 2,3 refers to the second filter set and the third filter rule of that set.

  • Page 87: Applying A Filter

    Field Description Select the logging option from the following: [None] – No packets will be logged. [Action Matched] - Only packets that match the rule parameters will be logged. [Action Not Matched] - Only packets that do not match the rule parameters will be logged.

  • Page 88: Remote Node Filters

    Prestige 1100 Internet Access Router 8.5.2 Remote Node Filters Go to Menu 11.1 (shown next) and enter the number(s) of the filter set(s) as appropriate. You can specify up to four filter sets by entering their numbers separated by commas. Menu 11.1 - Remote Node Profile Rem Node Name= ? Active= Yes...

  • Page 89: Chapter 9: Snmp Configuration

    About SNMP SNMP (Simple Network Management Protocol) is a protocol for network management and monitoring. Your Prestige 1100 supports SNMP agent functionality, which allows a manager station to manage and monitor the Prestige 1100 through the network. Keep in mind that SNMP is only available if TCP/IP is configured on your Prestige 1100.

  • Page 90: Table 9-1 Snmp Configuration Menu Fields

    Prestige 1100 Internet Access Router The following table describes the SNMP configuration parameters. Table 9-1 SNMP Configuration Menu Fields Field Description Get Community Enter the Get Community, which is the password for the incoming Get- and GetNext- requests from the management station. Set Community Enter the set community, which is the password for incoming Set- requests from the management station.

  • Page 91: Chapter 10: System Security

    This chapter covers Menu 23, which is for you to change the system password and to configure an external authentication server. 10.1 Changing the System Password To change the system password, following steps below: Step 1. Select option 23. System Security in the Main Menu to open Menu 23 - System Security as shown in Figure 10-1.

  • Page 92: Figure 10-2 Menu 23.1 - System Security - Change Password

    Prestige 1100 Internet Access Router Step 2. From the System Security Menu, select option 1. Change Password to open Menu 23.1 - System Security - Change Password. Step 3. Enter your existing system password and press [ENTER]. Figure 10-2 Menu 23.1 - System Security - Change Password Step 4.

  • Page 93: Chapter 11: Telnet Configuration And Capabilities

    Telnet Configuration and Capabilities 11.1 About Telnet Configuration Before the Prestige 1100 is properly setup for TCP/IP, the only option for configuring it is through the console port. Once your Prestige 1100 is configured, you can use telnet to configure it remotely. Corporate LAN WEB/FTP Server...

  • Page 94: Telnet Under Sua

    Prestige 1100 Internet Access Router 11.2 Telnet Under SUA When Single User Account (SUA) is enabled and an inside server is specified, telnet connections from the outside will be forwarded to the inside server. So to configure the Prestige via telnet from the outside, you must first telnet to the inside server, and then telnet from the server to the Prestige using its inside LAN IP address.

  • Page 95: Chapter 12: System Maintenance

    This chapter covers the diagnostic tools that help you to maintain your Prestige. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter describes how to use these tools in detail. Select menu 24 in the main menu to open Menu 24 - System Maintenance, as shown below.

  • Page 96: System Status

    Prestige 1100 Internet Access Router 12.1 System Status The first selection, System Status gives you the status and statistics of the ports, as shown below. System Status is a tool that can be used to monitor your Prestige. Specifically, it gives you information on WAN port status, number of packets sent and number of packets received.

  • Page 97: Table 12-1 System Maintenance - Status Menu Fields

    Table 12-1 System Maintenance - Status Menu Fields Field Description Status The status of the WAN port. TXPkts The number of transmitted packets on this channel. RXPkts The number of received packets on this channel. Errors The number of error packets on this channel. Tx (Byte / s) The transmission speed in bytes per second.

  • Page 98: System Information

    Prestige 1100 Internet Access Router 12.2 System Information Step 1. Select option 24 from the Main Menu to open Menu 24 - System Maintenance . Step 2. From Menu 24, select option 2 then select the first option from Menu 24.2 to display Menu 24.2.1 - System Maintenance –...

  • Page 99: Console Port Speed

    12.2.1 Console Port Speed Step 1. Select option 24 from the Main Menu to open Menu 24 - System Maintenance . Step 2. From Menu 24, select option 2 then select the second option from Menu 24.2 to display Menu 24.2.2 –...

  • Page 100: Syslog And Accounting

    Prestige 1100 Internet Access Router Examples of typical error and information messages are presented in the figure below. 4 PP07 4 PINI e PINI Clear Error Log (y/n): Figure 12-5 Examples of Error and Information Messages 12.3.2 Syslog And Accounting The Prestige uses the UNIX syslog facility to log system messages to a syslog server.

  • Page 101: Diagnostic

    Table 12-3 System Maintenance Menu Syslog Parameters Parameter Description Active Use the space bar to turn on or off syslog. Syslog IP Address Enter the IP Address of your syslog server. Log Facility Use the space bar to toggle between the 7 different Local options. The log facility allows you to log the message in different files in the server.

  • Page 102: Filename Conventions

    Prestige 1100 Internet Access Router The following table describes the diagnostic tests available in Menu 24.4 for your Prestige and the connections. Table 12-4 System Maintenance Menu Diagnostic Field Description Ping Host This diagnostic test pings the host, which determines the functionality of the TCP/IP protocol on both systems and the links in between.

  • Page 103: Back Up Configuration

    File type Internal Name Configuration Rom-spt File Rom-0 Firmware Ras-m Ras-b 12.6 Back up Configuration 12.6.1 Backup using the Console Port Option 5 from Menu 24 – System Maintenance allows you to back up the current Prestige configuration to your workstation. Backup is highly recommended once your Prestige is functioning properly. You can perform the backup either through an FTP or TFTP client program (preferred method) or through the RS-232 console port (in the event of the network being down).

  • Page 104: Back Up Using Ftp

    Prestige 1100 Internet Access Router FTP or TFTP are the preferred methods for backing up the current Prestige configuration to your workstation since FTP or TFTP is faster. Ready to back up Configuration via Xmodem. Figure 12-8 Menu 24.5 –Backup Configuration using the Console Port 12.6.2 Back up using FTP To transfer the configuration file, follow the procedure below: Step 1.

  • Page 105: Restore Configuration

    To transfer the configuration file, follow the procedure below: Use telnet from your workstation to connect to the Prestige and log in. Because TFTP does not have any security checks, the Prestige records the IP address of the telnet client and accepts TFTP requests only from this address. Step 1.

  • Page 106: Restore Using Tftp

    Prestige 1100 Internet Access Router Prestige. This restores the configuration to your Prestige. Step 4. The system reboots automatically after the file transfer process is complete. For details on FTP commands, please consult the documentation of your FTP client program. Menu 24.6 –...

  • Page 107: Dual Firmware Block Structure

    normal conditions is not recommended since FTP or TFTP is faster. Please note that the system reboots automatically after the file transfer process is complete. Menu 24.7 -- System Maintenance - Upload Firmware Figure 12-12 Menu 24.7 -- System Maintenance - Upload Firmware 12.8.1 Dual Firmware Block Structure The Prestige P1100 employs a “dual firmware block structure”...

  • Page 108: Upload Router Firmware Using Ftp

    Prestige 1100 Internet Access Router Menu 24.7.1 - System Maintenance - Upload ZyNOS Code. FTP or TFTP are the preferred methods for uploading router firmware to your Prestige since FTP or TFTP is faster. To upload router firmware: 1. Enter "y" at the prompt below to go into debug mode. 2.

  • Page 109: Upload Router Firmware Using Tftp

    12.8.4 Upload Router Firmware using TFTP Even though TFTP should work over WAN as well, it is not recommended. To use TFTP, your workstation must have both telnet and TFTP clients. Use telnet from your workstation to connect to the Prestige and log in. Because TFTP does not have any security checks, the Prestige records the IP address of the telnet client and accepts TFTP requests only from this address.

  • Page 110: Upload Router Configuration File Using Ftp

    Prestige 1100 Internet Access Router Step 4. After successful file transfer, enter "atgo" to restart the router Menu 24.7.2 - System Maintenance - Upload Router Configuration File FTP or TFTP are the preferred methods for uploading the router configuration file to your Prestige since FTP or TFTP is faster. To upload the router configuration file: Enter "y"...

  • Page 111: Upload Router Configuration File Using Tftp

    12.9.3 Upload Router Configuration File using TFTP Even though TFTP should work over WAN as well, it is not recommended. To use TFTP, your workstation must have both telnet and TFTP clients. To transfer the configuration file, follow the procedure below. Use telnet from your workstation to connect to the Prestige and log in.

  • Page 112: Boot Module Commands

    Prestige 1100 Internet Access Router 12.9.4 Boot Module Commands Prestige boot module commands are shown below. For ATBAx, x denotes the number preceding the colon to give the baud rate following the colon in the list of numbers that follows; e.g. ATBA3 will give a baud of 9.6 kbps.

  • Page 113: Command Interpreter Mode

    [help] at the command prompt. For more detailed information, check the ZyXEL Web site or send e- mail to the ZyXEL Support Group. Please note that the first release of the P1100 does not support L2TP. Copyright (c) 1999 ZyXEL Communications Corp. ras> ?

  • Page 115: Chapter 13: Ip Policy Routing

    13.1 Introduction Traditionally, routing is based on the destination address only and the router takes the shortest path to forward a packet. IP Policy Routing (IPPR) provides a mechanism to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator. Policy-based routing is applied to incoming packets on a per interface basis, prior to the normal routing.

  • Page 116: Ip Policy Routing Setup

    Prestige 1100 Internet Access Router 13.1.3 IP Policy Routing Setup Menu 25 shows all the policies defined Policy Set # Name ------ ----------------- test _______________ _______________ _______________ _______________ _______________ To setup a routing policy, follow the procedures below: Step 1. Enter 25 in the Main Menu to open Menu 25 –...

  • Page 117: Figure 13-2 Menu 25 - Ip Routing Policy Summary

    - - -------------------------------------------------------------------------- 1 Y SA=1.1.1.1-1.1.1.1,DA=2.2.2.2-2.2.2.5 SP=20-25,DP=20-25,P=6,T=NM,PR=0 2 N __________________________________________________________________________ __________________________________________________________________________ 3 N __________________________________________________________________________ __________________________________________________________________________ 4 N __________________________________________________________________________ __________________________________________________________________________ 5 N __________________________________________________________________________ __________________________________________________________________________ 6 N __________________________________________________________________________ __________________________________________________________________________ Enter Policy Rule Number (1-6) to Configure: Figure 13-2 Menu 25 - IP Routing Policy Summary IP Policy Routing Menu 25.1 - IP Routing Policy Summary Criteria/Action...

  • Page 118: Figure 13-3 Ip Routing Policy

    Prestige 1100 Internet Access Router Abbreviation Criteria Action Type Of Service Enter a number from 1 to 6 to display Menu 25.1.1 – IP Routing Policy (see the next figure). This menu allows you to configure a policy rule. Policy Set Name= test Active= Yes Criteria: IP Protocol...
  • Page 119 Field Policy Set Name This is the name of the policy set assigned in Menu 25 - IP Routing Policy Setup. Active Press the [SPACEBAR] to select [Yes] to activate the policy. Criteria IP Protocol IP layer 4 protocol, e.g., UDP, TCP, ICMP, etc. Type of Service Prioritize incoming network traffic by choosing from [Don’t Care] / [Normal] / [Min Delay] / [Max Thruput] / [Max Reliability].

  • Page 120: Applying An Ip Policy

    Prestige 1100 Internet Access Router 13.2 Applying an IP Policy This section shows you where to apply the IP Policies after you design them. 13.2.1 Ethernet IP Policies From Menu 3 - Ethernet Setup, enter 2 to go to Menu 3.2 -General Ethernet Setup. You can choose up to four IP Policy sets (from twelve) by entering their numbers separated by commas, e.g., 2, 4, 7, 9.

  • Page 121: Figure 13-5 Menu 11.3 - Remote Node Network Layer Options

    Menu 11.3 - Remote Node Network Layer Options IP Options: Rem IP Addr: 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.0 Single User Account= No Metric= 2 Private= No RIP Direction= Both Version= RIP-2B Multicast = IGMP-v2 IP Policies= 1,2,3,4 Enter here to CONFIRM or ESC to CANCEL: Figure 13-5 Menu 11.3 - Remote Node Network Layer Options IP Policy Routing...

  • Page 123: Chapter 14: Troubleshooting

    This chapter covers the potential problems you may run into and the possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. 14.1 Problems Starting Up the Prestige 1100 Table 14-1 Troubleshooting the Start-Up of your Prestige 1100 Troubleshooting None of the LEDs are on when you power on the Prestige 1100...

  • Page 124: Problems With The Wan Port

    Prestige 1100 Internet Access Router 14.2 Problems With the WAN Port Troubleshooting RDY LED of a WAN Port is not ON 14.3 Problems with the LAN Interface Troubleshooting Can’t ping any station on the LAN 14.4 Problems Connecting to a Remote Node or ISP Table 14-4 Troubleshooting a Connection to a Remote Node or ISP Troubleshooting Can’t connect to a remote node or...

  • Page 125: Acronyms And Abbreviations

    BAP/BACP Bandwidth Allocation Protocol/Bandwidth Allocation Control protocol Bandwidth on Demand Call Detail Record CHAP Challenge Handshake Authentication Protocol CLID Calling Line IDentification CSU/DSU Channel Service Unit/Data Service Unit Data Communications Equipment DHCP Dynamic Host Configuration Protocol Domain Name System Data Terminal Equipment IANA Internet Assigned Number Authority Internet Protocol...
  • Page 126 Prestige 1100 Internet Access Router (IPX) Service Advertising Protocol SNAP Sub-Network Access Protocol SNMP Simple Network Management Protocol Single User Account (ISDN) Terminal Adapter Transmission Control Protocol User Datagram Protocol Shielded Twisted Pair (cable) Wide Area Network Acronyms & Abbreviations...

  • Page 127: Index

    Action Matched, 8-5 Applications, 4 Internet Access, 4 SUA, 5 LAN-to-LAN, 6, 5-1 Authentication, 4-2, 4-3 Back Panel, 4 Boot Module Commands, 12-18 Bridging, 2, 6, 2-10, 4-2, 7-1 Ether Address, 7-4 Ethernet, 7-1 Ethernet Addr Timeout, 7-3 Remote Node, 7-2 Static Route Setup, 7-4 CHAP, 4-2 Command Interpreter Mode, 12-19...

  • Page 128: Table 13-2 Ip Routing Policy

    Prestige 1100 Internet Access Router Gateway, 5-8 General Setup, 2-9 Menu Fields, 2-10 Hop Count, 6-7, 6-9 IANA. See Internet Assigned Number Authority Initial Screen, 2-3 Interactive Applications, 13-1 Internet access, 3-1 Internet Access Configuration, 3-6 Internet Assigned Number Authority, 3-2 Internet Service Provider, 3-2 IP Address, 3-2, 3-5, 3-8, 4-3, 5-3, 5-8, 7-4 IP Multicast, 3-5...
  • Page 129 Quality of Service, 13-1 Remote Configuration, 2 Remote Node, 4-1, 12-3 Leased Line, 4-1 TCP/IP, 5-1 Remote Node Setup, 5-2 RIP. See Routing Information Protocol RJ-45, 2-3 Route IP Setup, 3-1 Routing Information Protocol, 3-2 Direction, 3-2 Version, 3-2 Routing Policy, 13-1 SAP/RIP Timeout, 6-7 Single User Account, 2 Single User Account, 5, 3-2, 3-7, 3-8, 3-9, 3-10, 5-4,...
  • Page 130 Prestige 1100 Internet Access Router VT100, 2-1 WAN port, 2-2 WAN Setup, 2-11 Watchdog, 6-7 ZyNOS, 12-4, 12-13, 12-14, 13-1 ZyXEL Limited Warranty, iii Index...

This manual is also suitable for:

Prestige 1100

Table of Contents