ZyXEL Communications PRESTIGE 128 User Manual
ZyXEL Communications PRESTIGE 128 User Manual

ZyXEL Communications PRESTIGE 128 User Manual

Remote access router
Hide thumbs Also See for PRESTIGE 128:
Table of Contents

Advertisement

Quick Links

Prestige 128
User's Manual
Version 2.0
A
I
& I
CCESSING
NTERNET
NTRANET

Advertisement

Table of Contents
loading

Summary of Contents for ZyXEL Communications PRESTIGE 128

  • Page 1 Prestige 128 User’s Manual Version 2.0 & I CCESSING NTERNET NTRANET...
  • Page 2: Zyxel Limited Warranty

    ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts...
  • Page 3: Acknowledgments

    The contents of this book may not be reproduced (in any part or as a whole) or transmitted in any form or by any means without the written permission of the publisher. Published by ZyXEL Communications Corporation. All rights reserved. Note: ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
  • Page 4: Information For Canadian Users

    These limits are designed to provide reasonable protection against harmful interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. If this equipment does cause harmful interference to radio/television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the...
  • Page 5 This digital apparatus does not exceed the class A limits for radio noise emissions from digital apparatus set out in the radio interference regulations of Industry Canada. The declarations of CE marking: The Prestige 128 has been approved for connection to the Public Switched Telecommunication Network using interfaces compatible...
  • Page 6: Contacting Zyxel

    ITU-TSS recommendation I.420 (Basic Rate ISDN user access). The Prestige 128 complies with the following directives: 1. The Council Directive 89/336/EEC of 3 May 1992 on the approximation of the laws of the member states relation to Electro Magnetic Compatibility. (EMC Directive) 2.
  • Page 7 For European and Asian versions and related files, use the address: ftp.zyxel.co.at Postal Service: You can send written communications at the following address: ZyXEL Communications Corporation 6, Innovation Road II, Science-Based Industrial Park Hsinchu, Taiwan 300, R.O.C. ZyXEL Communications Inc.
  • Page 8: Table Of Contents

    Contents ZyXEL Limited Warranty ii Copyright © 1997 by ZyXEL iii Acknowledgments iii FCC Part 15 Information iii Information for Canadian Users iv Contacting ZyXEL vi 1 Introduction 1 Features 1 Ease of Installation 1 ISDN Basic Rate Interface (BRI) 2 Multiple Networking Protocol Support 2 Standard Phone Jack 2 Dial On Demand 2...
  • Page 9 Packing List 6 Additional Installation Requirements 7 2 Before You Begin 9 Road Map and Flow 9 Completing the Worksheet 10 Ordering Your ISDN Line 11 Collecting General Setup Information 11 Collecting ISDN Phone Line Information 12 Collecting Ethernet Setup Information 14 3 Installation 21 A Warning On Connection Cables 21 Connecting Your Computer and Your Prestige 21...
  • Page 10 Internet Access Configuration 42 Single User Account 44 Configuration for Single User Account 46 Configuring Backup ISP Accounts 47 5 Remote Node Configuration 50 Bandwidth on Demand 56 Editing PPP Options 57 6 Dial-In Configuration 60 Telecommuting 61 Dial-In Server Application 61 Default Dial-In Setup 62 Dial-In Users Setup 66 More on CLID 69...
  • Page 11 Bridge Ethernet Setup 89 LAN-to-LAN Application 90 Remote Node Setup 91 Default Dial-In Setup for Bridge 92 Bridge Static Route Setup 92 10 Filter Configuration 94 About Filtering 94 Prestige’s Filter Structure 95 Configuring a Filter Set 95 Configuring a Filter Rule 98 TCP/IP Filter Rule 98 Generic Filter Rule 102 Novell IPX Filter Rule 103...
  • Page 12 Log and Trace 122 View Error Log 123 Syslog And Accounting 123 Diagnostic 124 Backup Configuration 127 Restore Configuration 128 Software Update 128 Command Interpreter Mode 129 Call Control 129 Call Control Parameters 130 Blacklist 131 Budget Management 132 15 Troubleshooting 134 Problems Starting Up the Prestige 134 None of the LEDs are on when you power up the Prestige 134 Connecting the RS-232 cable, cannot access the SMT 134...
  • Page 13 xiii...
  • Page 14: Introduction

    Introduction Congratulations on your purchase of the ZyXEL Prestige 128 Remote Access Router. The Prestige is the first device to integrate a Router and Bridge into a single package. In a modem-sized box, the Prestige offers inexpensive yet complete telecommunications and internetworking solutions for your home or branch office.
  • Page 15: Isdn Basic Rate Interface (Bri)

    ISDN Basic Rate Interface (BRI) Using either a standard S/T or U Interface (128 uses the S/T interface and 128U uses the U interface) the Prestige supports a full range of switch types. The switch type depends on the CO (Central Office) switch your ISDN line is connected to.
  • Page 16: Full Network Management

    needed to allow for greater efficiency in data transfer. It supports BAP (Bandwidth Allocation Protocol) and BACP (Bandwidth Allocation Control Protocol) to manage the number of links in multilink bundle. Full Network Management The Prestige incorporates SNMP (Simple Network Management Protocol) support and menu-driven network management via an RS-232 or Telnet connection.
  • Page 17: Data Compression

    Data Compression The Prestige incorporates Stac data compression and CCP (Compression Control Protocol). Networking Compatibility The Prestige is compatible with remote access products from other companies such as Ascend, Cisco, and 3Com. Furthermore, it supports Microsoft Windows 95 and Windows NT remote access capability.
  • Page 18: Telecommuting Server

    Telecommuting Server The Prestige allows Remote Dial-in Users to dial-in and gain access to your LAN. This feature enables users that have workstations with remote access capabilities, e.g., Windows 95, to dial in using an ISDN terminal adapter (TA) to access the network resources without physically being in the office.
  • Page 19: What This Manual Doesn't Cover

    If you have questions about using either one, refer to the manual for the product. Other Resources For more information about the Prestige 128 check the following sources: Quick Start Guide. Prestige Support disk.
  • Page 20: Additional Installation Requirements

    One LAN crossover cable (red tag). One LAN straight cable (white tag). One Prestige Support Disk. One Prestige 128/100 Quick Start Guide. This Prestige 128 User’s Manual. Additional Installation Requirements In addition to the contents of your package, there are other hardware and software requirements you need before you can install and use your Prestige.
  • Page 21 8 Introduction...
  • Page 22: Before You Begin

    Before You Begin To ensure successful installation of your Prestige, we strongly recommend that you carefully follow the steps outlined in Chapters 2 and 3. These chapters are designed as a guide for you to collect the necessary information about your ISDN phone line, and the LAN which you will be connected to.
  • Page 23: Completing The Worksheet

    Completing the Worksheet Before you continue locate the worksheet at the end of this chapter. This information worksheet has been provided to help you get through setup and installation of your Prestige as easily as possible. 10 Before You Begin Figure 2-1 Installation Guide...
  • Page 24: Ordering Your Isdn Line

    Ordering Your ISDN Line If you do not have the ISDN line installed already, we suggest that you order it from your telephone company as soon as possible to avoid the long waits common when ordering a new line. Use the information in this section to place the order (see Chapter 16 for information on provisioning your ISDN line).
  • Page 25: Collecting Isdn Phone Line Information

    System Name - This is the name given to the Prestige for identification purposes. This name should be no more than 8 alphanumeric characters. Spaces are not allowed, but “-” and “_” are accepted. This name can be obtained remotely via the SNMP management protocol and will be displayed as the prompt when the user enters the Command Mode.
  • Page 26 America, select your ISDN switch type. For DSS1 and 1TR6, verify this field to make sure that you have the proper firmware loaded. B Channel Usage - Determine which connection is appropriate for your B channel and check the corresponding option on the worksheet.
  • Page 27: Collecting Ethernet Setup Information

    your worksheet before you continue to the next section. For DSS1 and 1TR6 ISDN, refer to Chapter 3. Collecting Ethernet Setup Information This section assumes that you are setting up your Prestige for a TCP/IP connection. If you want to configure the Prestige for other protocols (e.g., IPX), refer to the appropriate chapters.
  • Page 28 IP Subnet Mask Number of Host IDs 255.255.255.0 255.255.255.128 255.255.255.192 255.255.255.224 255.255.255.255 Number of Bits Before You Begin 15...
  • Page 29 Prestige Setup and Installation Worksheet General Setup Information System Name (for identification purposes): _______________________________________ Protocol Routing: ___TCP/IP ___IPX ___Bridging ISDN Setup Information Switch Type (check one): ___AT&T 5ESS NI-1 ___AT&T Point to Point ___AT&T 5ESS Multipoint ___Northern Telecom NI-1 ___Northern Telecom Custom ___DSS1 ___1TR6 B-Channel Usage (check one):...
  • Page 30 North America ISDN Telephone Number: _______________________________________ Analog Call (check one): ___Phone1 ___Phone2 ___DOVBS SPID Number: _______________________________________ Telephone Number: _______________________________________ Analog Call (check one): ___Phone1 ___Phone2 ___DOVBS SPID Number: _______________________________________ DSS1 ISDN ISDN Data Number & Subaddress: _______________________________________ A/B Adapter 1 Number & Subaddress: _______________________________________ Before You Begin 17...
  • Page 31 A/B Adapter 2 Number & Subaddress: _______________________________________ Outside Line Prefix Number: _______________________________________ PBX Number (S/T Bus Number): _______________________________________ Incoming Number Matching: ___MSN ___CDSA ___Don’t Care Analog Call Routing: ___A/B #1 ___A/B #2 ___Ignore Global Analog Call: ___Accept ___Ignore 1TR6 ISDN: ISDN Data Number: _______________________________________ A/B Adapter 1 Number:...
  • Page 32 A/B Adapter 2 Number: _______________________________________ Outside Line Prefix Number: _______________________________________ PBX Number (S/T Bus Number): _______________________________________ Incoming Number Matching: ___EAZ ___Don’t Care Analog Call Routing: ___A/B #1 ___A/B #2 ___Ignore Ethernet Setup Information Ethernet Interface (check one): ___AUI ___UTP IP Address: _______._______._______._______ IP Subnet Mask: _______._______._______._______...
  • Page 33 Notes: 20 Before You Begin...
  • Page 34: Installation

    Installation This chapter outlines how to connect your Prestige to the LAN and ISDN line. Refer to the diagram below to identify all of the ports on your device when you attempt to make the various connections. A Warning On Connection Cables The RS-232, ISDN line, and Ethernet cable, are very similar to each other.
  • Page 35: Connecting The Rs-232 Cable To Your Prestige

    After the Prestige has been successfully installed, you can modify the configuration through a remote Telnet connection. See Chapter 13 for detailed instructions on using Telnet to configure your Prestige. Connecting the RS-232 Cable to your Prestige One 9-25 pin adapter is included in your package. To connect a RS-232 cable, connect the 9-pin end of the cable to the DTE port on the back panel of the Prestige.
  • Page 36: Connecting An Ethernet Cable To Your Prestige

    normal phone line. It should be noted that this is optional and is not required for you to run other applications using your Prestige. Plug one end of the telephone cord from a phone, fax, or modem into the socket on the rear panel of the Prestige labeled PHONE 1 or PHONE 2.
  • Page 37: Connecting A Power Adapter To Your Prestige

    If you have a 10Base2 network using BNC connectors and thin coaxial cables, you will need a transceiver between the AUI port and the 10Base2 cabling. Connecting a Power Adapter to your Prestige Plug a 16VAC 1200mA power adapter into the outlet on the rear panel of the Prestige labeled POWER At this point, you should have connected the RS-232 cable, the ISDN phone line, the Ethernet cable, and the power supply.
  • Page 38: Powering On Your Prestige

    ETHERNET: TX and RX - Transmit and Receive LEDs will blink to indicate when there is traffic on the LAN. ETHERNET: COL - Indicates that there is transmission collision over the LAN. PHONE: 1 - Indicates the functionality of the POTS port 1 on the Prestige.
  • Page 39: Navigating Through The System Management Terminal Interface

    Enter the default password, 1234 to get into the Main Menu of System Management Terminal (SMT). Note that once you are in the SMT and if there is no activity for longer than 5 minutes, the Prestige will automatically log you out and will display a blank screen.
  • Page 40 Main Menu, where typing 99 is the only method to exit the SMT. Moving the Cursor. Within a menu, press ENTER (carriage return) to move to the next field. You can also use the Up and Down keys to move to the previous and the next field, respectively.
  • Page 41: System Management Terminal Interface Summary

    System Management Terminal Interface Summary This section summarizes all major SMT Menus: Menu Title General Setup ISDN Setup Ethernet Setup Internet Access Setup Remote Node Setup Static Routing Setup Default Dial-in Setup Dial-in User Setup Filter Set Configuration 28 Installation Figure 3-5 SMT Main Menu Description Setup general information and enable routing...
  • Page 42: General Setup

    Menu Title SNMP Configuration System Security System Maintenance Exit General Setup This menu contains administrative and system-related information. Enter 1 in the main menu to go to Menu 1 - General Setup. 1. System Name - Choose a descriptive name for the Prestige for identification purposes, e.g., p128.
  • Page 43: Isdn Setup

    2. Location - Enter the geographic location (up to 31 characters) of your Prestige, e.g., San Jose. 3. Contact Person’s Name - Enter the name (up to 8 characters) of the person in charge of this Prestige, e.g., Brent Harper. The Location and the Contact Person fields are optional.
  • Page 44 1. Switch Type - Verify the switch type information with your telephone company. For North America, select the type of switch used by your telephone company. If your switch type is not currently shown, press the space bar to change to the next switch;...
  • Page 45: Dss1 & 1Tr6 Isdn

    DSS1 & 1TR6 ISDN 1. Switch Type - This field is fixed as DSS1 or 1TR6. 2. B Channel Usage - This field is fixed as Switch/Switch. 3. ISDN Data & Subaddress - Enter the telephone number and subaddress assigned to the ISDN data call for the Prestige. It will be used as the outgoing CGPN(Calling Party Number) setting for ISDN data calls.
  • Page 46 be no longer than 19 digits for the number and 5 digits for the Subaddress. The Subaddress is only available for DSS1. 4. A/B Adapter 1 & Subaddress - Enter the telephone number and subaddress assigned to A/B Adapter 1 (POTS port 1) calls. It will be used as outgoing Calling Party Number setting for A/B Adapter 1 calls.
  • Page 47 subaddress. Or it will be answered as A/B Adapter 2 call when there is a match for the A/B Adapter 2 subaddress. If A/B Adapter 1 or 2 subaddress is specified, then the analog call will not be answered. This option is only available for DSS1.
  • Page 48: Ethernet Setup

    the ISDN line. If the loop-back test fails, note the error message that you receive and take the appropriate troubleshooting action. Figure 3-10 ISDN Loop-Back Test Screen Ethernet Setup Menu 3 is used to enter Ethernet related information. Depending on the protocols (TCP/IP or IPX) on your LAN, you will need to configure each protocol separately.
  • Page 49: Tcp/Ip Ethernet Setup And Dhcp

    1. Ethernet Interface - The Prestige supports two types of Ethernet connections, the AUI (15-pin) or the connection for the 10BaseT network (looks like a bigger telephone plug). Determine which type you are using and select the appropriate option in this field. 2.
  • Page 50 Figure 3-12 Menu 3.2 - TCP/IP Ethernet Setup 1. DHCP - This field determines what mode of DHCP (Dynamic Host Configuration Protocol) support the Prestige should use. If it is set to None, DHCP will not be used. If it is set to Server, the Prestige will act as a DHCP server, capable of automatically assigning IP addresses to Windows 95, Windows NT, and other systems that support the DHCP client.
  • Page 51 itself uses the first address in the block, and the remaining addresses in the pool are assigned to clients. 4. Primary DNS Server/Secondary DNS Server - These two fields are used by DHCP clients (such as Windows 95 and Windows NT systems) for Domain Name Servers. Usually your Internet provider will provide one or more name service hosts.
  • Page 52: Novell Ipx Ethernet Setup

    Novell IPX Ethernet Setup Refer to the chapter on Novell IPX configuration. Bridge Ethernet Setup Refer to the chapter on Bridging configuration. Installation 39...
  • Page 53: Configuring For Internet Access

    Configuring for Internet Access Menu 4 of the SMT allows you to configure Internet access on one screen. Before you configure the Prestige for Internet access, you need to collect the following information from your ISP (Internet Service Provider). IP address of the ISP’s gateway (optional). Telephone number(s) of your ISP.
  • Page 54: Ip Addresses And The Internet

    IP Addresses and the Internet Conventionally, the Internet (with a capital I) refers the large-scale interconnected networks across the world that was originally developed by the US Department of Defense. The Internet uses exclusively the TCP/IP suite of protocols. The term “internet” (lower case i), however, refers to any interconnected networks using any protocol.
  • Page 55: Internet Access Configuration

    Once you have determined the IP address range for your local network, you may want to use DHCP (Dynamic Host Configuration Protocol) to assign addresses to individual hosts on the network, as an alternative to manually configuring each host’s IP settings. See the TCP/IP Ethernet Setup and DHCP section on page 36 for more information about DHCP.
  • Page 56 4. Pri(mary) Phone # and Sec(ondary) Phone Number - Both the Primary and the Secondary Phone number refer to the number that the Prestige will dial to connect to the ISP. The Prestige will always call your ISP using the Primary Phone number first.
  • Page 57: Single User Account

    call. Some phone companies in North America charge less if calls are made using DOVBS. 9. Press ENTER at the message: Press ENTER to Confirm ... to confirm your selections, or press ESC at any time to cancel your selections. 10.
  • Page 58 defined, all incoming inquiries will be filtered out by the Prestige even if you do have a server on your network. This can prevent intruders from probing your system. The Prestige accomplishes this address sharing by translating the internal LAN IP addresses to a single address that is globally unique on the Internet.
  • Page 59: Configuration For Single User Account

    Configuration for Single User Account The steps for configuring your Prestige for Single User Internet Access are identical to conventional Internet Access with the exception that you need to fill in three extra fields. Follow steps 1-8 from the previous section, Internet Access Configuration.
  • Page 60: Configuring Backup Isp Accounts

    At this point, the Prestige will ask if you wish to test the Internet connection. If you select Yes, the Prestige will call the ISP to test the Internet connection. If the test fails, note the error message that you receive and take the appropriate troubleshooting steps.
  • Page 61 You will now be able to access the Internet through the backup ISP Remote Node. 48 Configuring for Internet Access...
  • Page 62 Configuring for Internet Access 49...
  • Page 63: Remote Node Configuration

    Remote Node Configuration A Remote Node represents both a remote gateway and the internet behind it, across an ISDN connection. A Remote Node is required for placing calls to or answering calls from a remote network. Note that when you use Menu 4 to configure the Internet, the Prestige will automatically add a Remote Node for you.
  • Page 64 Figure 5-1 Menu 11 - Remote Node Setup Enter the Remote Node number to edit and you will go to the next submenu: 11.1 - Remote Node Profile as shown below: Figure 5-2 Menu 11.1 - Remote Node Profile 1. Rem Node Name - This is a required field. Enter a descriptive name for the Remote Node, e.g., SJHQ.
  • Page 65 operation of the Prestige, even though it is still kept in the database, and can be activated in the future. Deactivated nodes are displayed with a - (minus sign) at the beginning of the name in Menu 11. 3. Call Direction - If this parameter is set to Both, the Prestige can both place and receive calls to/from this Remote Node.
  • Page 66 from this node and call it back at the Outgoing Primary Phone Number (see below). 8. Outgoing: My Login Name - This is a required field if Call Direction is either Both or Out. Enter the login name for the Prestige when it calls this Remote Node.
  • Page 67 Remote Node using the Primary Phone number first. If the Primary Phone number is busy or does not answer, the Prestige will call the Secondary Phone number if available. Once connected, the Prestige will use the BACP (Bandwidth Allocation Control Protocol) to establish the second B-channel if Multilink PPP is enabled, and the Remote Node supports MP and BACP.
  • Page 68 Options. For more information on filling out this screen, refer to the chapter pertaining to your specific protocol. 17. Telco Options: Transfer Rate - This field (which only applies to outgoing calls) controls the rate at which the data is transferred between your Prestige and the Remote Node.
  • Page 69: Bandwidth On Demand

    where no data is passed between the Remote Node and your Prestige. Administrative packets such as RIP are not counted as data. The default is 300 seconds (5 minutes). Once you have completed filling in Menu 11.1 - Remote Node Profile, press ENTER at the message: Press ENTER to Confirm ...
  • Page 70: Editing Ppp Options

    64 kbps (kilobits per second). The parameters are separated by a -. For example, 30-60 means the add threshold is 60 kbps and subtract threshold is 30 kbps. The Prestige will perform bandwidth on demand only if it initiates the call. Addition and subtraction are based on the value set in the BOD Calculation field.
  • Page 71 CISCO PPP - Cisco PPP options will be used. 2. Compression - Turn on the Stac Compression. The default for this field is Off. 3. Multiple Link Options: BOD Calculation - Select the direction of the traffic you wish to calculate in order to determine when to add or subtract a link.
  • Page 72 Once you have completed Menu 11.2 - Remote Node PPP Options, press ENTER at the message: Press ENTER to Confirm ... to confirm your selections, or press ESC to cancel your selections. Remote Node Configuration 59...
  • Page 73: Dial-In Configuration

    Dial-In Configuration You can configure the Prestige to receive calls from Remote Dial- in Users (e.g. telecommuters) and Remote Nodes. There are several differences between Remote Dial-in Users and Remote Nodes: 1. The Prestige can make calls to or answer calls from the Remote Node.
  • Page 74: Telecommuting

    Telecommuting Telecommuting enables people to work at remote sites and yet still have access to the resources in the business office. Typically, a telecommuter will uses a client workstation with TCP/IP or IPX and dial-out capabilities, e.g., a Windows 95 PC or a Macintosh and an ISDN Terminal Adapter (TA).
  • Page 75: Default Dial-In Setup

    router on the remote network (see Chapter 5). An example of the Prestige being used as a dial-in server is shown below: Default Dial-In Setup This section covers the default dial-in parameters. The parameters in Menu 13 affect incoming calls from all Remote Dial-in Users and Remote Nodes before authentication is completed.
  • Page 76 Figure 6-3 Menu 13 - Default Dial-in Setup From the Main Menu, enter 13 to go to Menu 13 - Default Dial-in Setup. This section will describe how to configure the protocol- independent fields in this menu. For the protocol-dependent fields, refer to the appropriate chapters.
  • Page 77 None - No authentication required. 3. PPP Options: Mutual Authen. - Some vendors, e.g. Cisco, implement a type of mutual authentication. That is, the node that initiates the call will request a user name and password from the far end that they are dialing to. If the Remote Node that is dialing in implements this type of authentication, set this field to Yes.
  • Page 78 address. This is to prevent the remote host from using an invalid IP address and potentially disrupting the whole network. If set to No, the remote host must use the IP address assigned by the Prestige from the IP pool, configured below. The default is Yes.
  • Page 79: Dial-In Users Setup

    16. Session Options: Input Filter Sets and Session Options: Output Filter Sets - In these fields, you need to select the filter set(s) to filter the incoming and outgoing traffic between your Prestige and the Remote Dial-in User. Keep in mind that these filter set(s) will only apply to all Remote Dial-in Users but not the Remote Nodes.
  • Page 80 Figure 6-4 Menu 14 - Dial-in User Setup Select one of eight users by number, this will bring you to Figure 6- 2Menu 14.1 - Edit Dial-in User. Figure 6-5 Menu 14.1 - Edit Dial-in User 1. User Name - This is a required field. This will be used as the login name for authentication.
  • Page 81 are displayed with a - (minus sign) at the beginning of the name in Menu 14. 3. Password - Enter the password for the Remote Dial-in User. 4. Callback - This field determines if the Prestige will allow call back to the Remote Dial-in User upon dial-in. If this option is enabled, the Prestige will be able to call back to the Remote Dial-in User if they request it.
  • Page 82: More On Clid

    Once you have completed filling in Menu 14.1 - Edit Dial-in User , press ENTER at the message: Press ENTER to Confirm ... to save your selections, or press ESC at any time to cancel your selections. More on CLID CLID allows the Prestige to authenticate the caller before a call is answered, thus saving the cost of a connection.
  • Page 83: Tcp/Ip Configuration

    TCP/IP Configuration This chapter shows you how to configure the Prestige for TCP/IP. Depending on your particular applications, you will need to configure different menus. For instance, Internet access is the most common application of TCP/IP. For this application, you should configure Menu 4. We will illustrate the configuration for other applications in the following sections.
  • Page 84: Lan-To-Lan Application

    204.247.203.0 with subnet mask 255.255.255.0 into 16 subnets (4 bits), the new subnet mask becomes 255.255.255.240. Number of Bits LAN-to-LAN Application A typical LAN-to-LAN application is to use the Prestige to call from a branch office to the headquarters, as depicted in the following diagram.
  • Page 85: Remote Node Setup

    Remote Node Setup Follow the procedure in Chapter 5 to fill the protocol- independent parameters in Menu 11, Remote Node Profile. For the protocol-dependent parameters, follow the instructions below. If you are configuring the Prestige to receive an incoming call, you also need to set the default dial-in parameters in menu 13 (see Chapter 6).
  • Page 86 6. My WAN Addr - Some implementations, especially the UNIX derivatives, require hosts on both ends of the ISDN link to have separate addresses from the LAN, and that the addresses must have the same network number. If this is the case, enter the IP address assigned to the WAN port of the Prestige.
  • Page 87: Static Route Setup

    10. Private - This parameter determines if the Prestige will include the route to this Remote Node in its RIP broadcasts. If set to yes, this route is kept private and not included in RIP broadcast. If no, the route to this Remote Node will be propagated to other hosts through RIP broadcasts.
  • Page 88 destination of 204.5.1.64/26 with the gateway address being that of the Remote Node (204.5.1.150). Figure 7-4 Static Routing Example Note that in normal circumstances, the Prestige will have adequate routing information after you configure the Internet access and Remote Nodes; you do not need to configure additional static routes.
  • Page 89 1. Route Name - Enter a descriptive name for this route. This is for identification purpose only. 2. Active - This fields allows you to activate/deactivate this static route. 3. Destination IP Address - This parameter specifies the IP network address of the final destination. Routing is always based on network number.
  • Page 90 6. The Metric and the Private parameters have the same meaning as those in the Remote Node Setup. Once you have completed filling in the menu, press ENTER at the message: Press ENTER to Confirm ... to save your selections, or press ESC at any time to cancel your selections.
  • Page 91: Novell Ipx Configuration

    Novell IPX Configuration This chapter shows you how to configure the Prestige for IPX. Depending on your particular applications, you will need to configure different menus. We will illustrate the configuration for some applications in the following sections. IPX Network Environment Frame Type The stations on an IPX network (both clients and servers) can run on four different frame types existing on one physical Ethernet...
  • Page 92: Prestige On Lan With Server

    There are two different scenarios in which you would connect your Prestige to a LAN: one with a server (server side), and one without a server (client side). Prestige on LAN with Server When the Prestige is being connected to a LAN with an existing NetWare server station, you will not need to configure the Prestige as a seed router, and hence the network number parameter in the Ethernet Setup Menu for the Prestige.
  • Page 93: Ipx Spoofing

    IPX Spoofing The Prestige comes with several pre-defined call filters designed to prevent certain IPX packets from triggering a call to a Remote Node. These filters should inform your Prestige which packets should be ignored as traffic. When you are routing IPX packets, the default call filters are defined as follows: Block periodical SAP and RIP response messages.
  • Page 94 Figure 8-2 Menu 3.3 - Novell IPX Ethernet Setup 1. Seed Router - Determine if the Prestige is to act as a seed router. This value depends on the existing network. If there is a NetWare server providing the network number, select No. If there is no NetWare server providing the network number, select Yes.
  • Page 95: Lan-To-Lan Application

    Once you have completed filling in the Menu 3.3, press ENTER the save message to save your selections, or press ESC at any time to cancel your selections. LAN-to-LAN Application A typical LAN-to-LAN application is to use the Prestige to call from a branch office to headquarters such that all of the stations on the branch office network have access to the server at the headquarters, as depicted in the following diagram:...
  • Page 96 1. Route - Make sure IPX is among the protocols in the Route field. 2. Edit IP/IPX/Bridge - Press the space bar to change it to Yes and press Enter to go to the network layer options menu. Figure 8-4 Menu 14.1 - Edit Dial-in User 3.
  • Page 97: Static Route Setup

    6. Hop Count - This field indicates the number of intermediate networks that must be passed through to reach the Remote Node. The default is one (1). 7. Tick Count - This field indicates the time-ticks required to reach the Remote Node. The default is two (2). 8.
  • Page 98 Figure 8-5 NetWare Servers on Both Sides of the Link This may present a problem if you desire your client station to access a server at a remote site. For example, in the above diagram, suppose that a client station on the network on the left wishes to access the NetWare server on the right (internal network number = 111).
  • Page 99 1. Server Name - In this field, enter in the name that has been configured for the server. This name must be the exact name configured in the NetWare server. 2. Network # - This field contains the internal network number of the remote server which you wish to access.
  • Page 100 Novell IPX Configuration 87...
  • Page 101: Bridging Configuration

    Bridging Configuration This chapter shows you how to configure the Bridging options for the Prestige. Depending on your particular applications, you will need to configure different menus. We will illustrate the configuration for some applications in the following sections. IPX Spoofing The Prestige comes with several pre-defined call filters designed to prevent certain IPX packets from triggering a call to a Remote Node.
  • Page 102: Bridge Ethernet Setup

    Bridge Ethernet Setup Bridging is used to forward packets of unsupported protocols whose destination is not on the local Ethernet to the WAN. Basically, all non-local packets are bridged to the WAN, however, the Prestige applies a special handling for certain IPX packets to reduce the number of calls, depending on the setting of the “Handle IPX”...
  • Page 103: Lan-To-Lan Application

    Handle IPX - Set this parameter to None if there is no IPX traffic on the LAN or if you do not want to apply any special handling for IPX. Set it to Client if there are only client workstations on the LAN. Set to Server if there are only IPX servers on the LAN.
  • Page 104: Remote Node Setup

    need to configure a Remote Node in order to dial out to another office. Remote Node Setup Follow the procedure in Chapter 5 to fill the protocol-independent parameters in Menu 11, Remote Node Profile. For the protocol- dependent parameters, follow the ensuing instructions: 1.
  • Page 105: Default Dial-In Setup For Bridge

    have to re-negotiate the protocol and recompile the tables when the line is brought back up. Once you have completed filling in the Network Layer Options Menu, press ENTER to return to Menu 11. Press ENTER at the message: Press ENTER to Confirm ... to save your selections, or press ESC at any time to cancel your selections.
  • Page 106 Figure 9-3 Menu 12.4 - Bridge Static Route 1. Route Name - For identification purposes enter a name for the bridge static route. 2. Active - Indicates whether the static route is active or not. 3. Ether Address -Enter the MAC address of the destination device that you wish to bridge your packets to.
  • Page 107: Filter Configuration

    Filter Configuration About Filtering The Prestige uses filters to decide whether or not to allow passage of a data packet and/or to make a call over the ISDN line. There are three types of filters involved: incoming data filters, outgoing data filters, and call filters.
  • Page 108: Prestige's Filter Structure

    For incoming packets, the Prestige applies data filters only. Packets are processed depending upon whether a match is made. The Prestige allows you to customize the filter sets that you wish to use. This following sections describe how to configure the Prestige’s filter sets.
  • Page 109 The new information will now be displayed in the read-only section of Menu 21 - Filter Set Configuration as shown below: Once you press ENTER, you will be taken to Menu - 21.1 - Filter Rules Summary as seen below. The information displayed in this menu is read-only.
  • Page 110 m - Refers to Action Matched. F means to forward the packet, D means to drop the packet, and N means check the next rule. n - Refers to Action Not Matched. F means to forward the packet, D means to drop the packet, and N means check the next rule.
  • Page 111: Configuring A Filter Rule

    If the filter type is IPX (Novell IPX), the following abbreviations will be used: PT - IPX Packet Type. SS - Source Socket. DS - Destination Socket. For more information on configuring the filter rule parameters, refer to the next section. To configure a specific filter rule, simply select the number of the filter rule (1-6) you wish to configure and press ENTER.
  • Page 112 Figure 10-4 Menu 21.1.1 - TCP/IP Filter Rule 1. Active - In this field, you can make the filter rule active or inactive. There are two options: Yes. 2. IP Protocol - Protocol refers to the IP specific number of the protocol.
  • Page 113 7. Destination: Port # Comp - In this field, you can select what comparison quantifier you wish to enable to compare to the value given in Destination: Port #. There are five options for this field: None. Less. Greater. Equal. Not Equal.
  • Page 114 Yes - filter match only established TCP connections. No - filter match both initial and established TCP connections . 13. More - In this field, you can determine if you want to pass the packet through the next filter rule before an action is taken. There are two options for this field: Yes.
  • Page 115: Generic Filter Rule

    Check Next Rule . Forward. Drop. Once you have completed filling in Menu 21.1.1 - TCP/IP Filter Rule, press ENTER at the message: Press ENTER to Confirm ... to confirm your selections, or press ESC at any time to cancel your selections.
  • Page 116: Novell Ipx Filter Rule

    2. Length - This field refers to the length (in bytes) of the data in the packet that the Prestige should use for comparison and masking. The starting point of this data is determined by Offset. The range for this field is 0 to 8. Default = 0 3.
  • Page 117 1. IPX Packet Type - Enter the IPX packet type value of the packet you wish to filter. This value should be two hex-bytes. 2. Destination/Source Network # - Enter the four hex-byte destination/source network numbers of the packet that you wish to filter.
  • Page 118 RIP Request. RIP Response. SAP Request. SAP Response. SAP Get Nearest Server Request. SAP Get Nearest Server Response. Once you have completed filling in Menu 21.1.3 - IPX Filter Rule, press ENTER at the message: Press ENTER to Confirm ... to confirm your selections, or press ESC at any time to cancel your selections.
  • Page 119: Snmp

    SNMP About SNMP The Simple Network Management Protocol (SNMP) is a protocol governing network management and the monitoring of network devices and their functions. The Prestige supports the utilization of SNMP to regulate the communication that occurs between the manager station and the agent stations in a network. Basically, the Prestige, when connected to the LAN, acts as an agent station.
  • Page 120 Figure 11-1 Menu 22 - SNMP Configuration 1. From the Main Menu, select option 22. SNMP Configuration. This will bring you to Figure 12.1 Menu 22 - SNMP Configuration. 2. You will then be prompted to enter the following information. Steps 3 -7 will describe the specific parameters involved in the configuration.
  • Page 121 If you leave the field blank (default), then the Prestige will respond to all SNMP messages it receives, regardless of origin. 6. Trap: Community - In this field, enter the community name that is sent with each trap to the SNMP manager. This should be treated like a password and match what the SNMP manager is expecting.
  • Page 122 SNMP 109...
  • Page 123: System Security

    System Security The Prestige incorporates a number of security measures to prevent unauthorized access to your network. For example, the Prestige supports both PAP (Password Authentication Protocol) and CHAP (Challenge Handshake Authentication Protocol) in authenticating a Remote Node. More information on CHAP and PAP can be found in Chapter 6.
  • Page 124: Configuring The Prestige For Radius Authentication

    obtain a copy of the RADIUS software, along with documentation for the server, at http://www.livingston.com/Tech/FTP/pub-le-radius.shtml or at ftp://ftp.livingston.com/pub/le/radius/ Follow the included instructions to install the server on your UNIX-based server. Once you have installed the server, you will need to edit the dictionary file in the RADIUS configuration directory (which will usually be /etc/raddb).
  • Page 125 This will bring you to Menu 23.2 - System Security - External Server. Figure 12-1 Menu 23.2 - System Security - External Server The fields in the System Security - External Server menu are as follows: 1. Active - Determines whether the external security facility is enabled.
  • Page 126: Adding Users To The Radius Database

    # Client Name #----------------------------- 192.168.0.1 1234 should be added to the client file. The Client Name field in the file gives the IP address of the Prestige router, and the Key field should be the same as the Key field in Menu 23.2. After a RADIUS server has been configured, the Prestige will use it to authenticate all users that it cant find in its internal Dial-Up User List (Menu 14).
  • Page 127: Configuring The Smt Password

    Note that if CLID is turned off in the Prestige, you still need to have a separate user record for joeuser so the regular user name/password mechanism still works. Configuring the SMT Password Figure 12-2 Menu 23.1 - System Security - Change Password The following steps describe a simple setup procedure for configuring the SMT password.
  • Page 128 5. Re-type your new system password for confirmation purposes and press ENTER. You will now need to enter in this password when you try to get into the SMT. In addition, this password will also be used when a network administrator attempts to telnet to the Prestige. System Security 115...
  • Page 129: Telnet Configuration And Capabilities

    Telnet Configuration and Capabilities About Telnet Configuration When you first configure your Prestige, it must be done via a computer connected to the RS-232 port. However, once the Prestige has been initially configured, you can use telnet to configure the device remotely as shown below: Figure 13-1 Telnet Configuration on a TCP/IP Network In order to configure your Prestige in this way, you need to have assigned an IP Address to your device and have connected it to...
  • Page 130: Telnet Capabilities

    IP in menu 1, telnet will still be available provided you assign the Prestige an IP address. Telnet Capabilities Single Administrator To prevent confusion and discrepancy on the configuration, Prestige will only allow one terminal connection at any time. Prestige also gives priority to the RS-232 connection over telnet.
  • Page 131: System Maintenance

    System Maintenance The Prestige provides diagnostic tools that you can use to maintain your device. Some of these tools include updates on system status, ISDN B channel status, log and trace capabilities and upgrades to the system software. This chapter will describe how to use these tools in greater detail.
  • Page 132 Figure 14-2 Example of Menu 24.1 - System Maintenance - Status 1. To get to the System Status, select option 24. System Maintenance. This will bring you to Menu 24 - System Maintenance. 2. From this menu, select option 1. System Status. 3.
  • Page 133 8. TXPkt - the number of transmitted packets on this channel. 9. RXPkt - the number of received packets on this channel. 10. Error - the number of error packets on this channel. 11. CLU - (Current Line Utilization) - percentage of current bandwidth used on this channel.
  • Page 134: Terminal Baud Rate

    24. Country Code - refers to the one byte country code value (in decimal notation), e.g., 225 indicates North America. 25. LAN Packet Which Triggered Last Call - shows the first 48 octets of the LAN packet that triggered the last outgoing call. There are three different types of packets: IP, IPX, and RAW.
  • Page 135: Log And Trace

    Figure 14-4 Menu 24.2 -System Maintenance - Change Terminal Baud Rate Log and Trace Log and trace tools allow users of the Prestige to view the error logs and trace records to troubleshoot any errors that may occur. The Prestige is also able to generate syslogs to send to other machines.
  • Page 136: View Error Log

    View Error Log Selecting the first option from Menu 24.3 - System Maintenance - Log and Trace will display the Error Log in the system. The Error Log does not only provide the error messages but it is also a source of information about your Prestige.
  • Page 137: Diagnostic

    decimal notation such as a.b.c.d where a, b, c, and d are numbers between 0 and 255. 3. Log Facility - Use the space bar to toggle between the 7 different Local options. This feature is used for UNIX application. The Prestige will send three different types of syslog messages: Call information messages (i.e.
  • Page 138 Figure 14-6 Menu 24.4 - System Maintenance - Diagnostic 1. From the Main Menu, select option 24. System Maintenance. This will bring you to Menu 24 - System Maintenance. 2. From this menu, select option 4. Diagnostic. This will bring you to Figure 15.4 Menu 24.4 - System Maintenance - Diagnostic.
  • Page 139 note the error message that you receive and consult your network administrator. 8. Manual Call - This provides a way for the users of the Prestige to place a manual call to a Remote Node. This tests the connectivity to that Remote Node. When you use this command, you will see traces displayed on the screen showing what is happening during the call setup and protocol negotiation.
  • Page 140: Backup Configuration

    Figure 14-8 Trace Display for a Failed IPCP Connection via Manual Call 1. Internet Setup Test - This test checks to see if your Internet access configuration has been done correctly. When this option is chosen, the Prestige will PING the Internet IP Address. If everything is working properly, you will receive an appropriate response.
  • Page 141: Restore Configuration

    highly recommended once your Prestige configuration is functioning. You need to download the configuration onto disk. Procedure for downloading varies depending on the type of software used to access the Prestige but you must use the XMODEM protocol to perform the download. Restore Configuration Selecting option 6 from Menu 24 - Maintenance will restore backup configuration from disk to the Prestige.
  • Page 142: Command Interpreter Mode

    Command Interpreter Mode This option allows the user to enter the command interpreter mode. This mode allows you to diagnose, test, and configure your Prestige using a specified set of commands. A list of valid commands can be found by typing help at the command prompt. For more detailed information, check the ZyXEL Web site or send email to the ZyXEL Support Group.
  • Page 143: Call Control Parameters

    the set limit, future outgoing calls will not be made and the current call will be dropped. The Blacklist function prevents the Prestige from re-dialing to an unreachable phone number. It is a list of phone numbers, up to a maximum of 14, to which the Prestige will not make an outgoing call.
  • Page 144: Blacklist

    Retry Timer (sec) - Elapse time after a call fails before another call may be retried. Applies before a phone number is blacklisted. Blacklist Figure 14-11 Blacklist The phone numbers on this list cannot be entered directly, instead, they are numbers which have had problems connecting in the past. The user can take a number off the list by entering the index number of entry.
  • Page 145: Budget Management

    Budget Management Figure 14-12 Budget Management The total budget is the time limit for an outgoing call to a Remote Node or Dial-in User. When this limit is reached, the call will be dropped and further outgoing calls to that Remote Node or Remote Dial-in User (callback) will fail.
  • Page 146 System Maintenance 133...
  • Page 147: Troubleshooting

    Troubleshooting This chapter contains some problems you may run into when using your Prestige. After each problem description, we have provided some instructions to help you diagnose and solve the problem. Problems Starting Up the Prestige None of the LEDs are on when you power up the Prestige Check the power cord and the power supply and make sure it is properly connected to your Prestige.
  • Page 148: Problems With The Isdn Line

    Problems With the ISDN Line The ISDN initialization failed This problem occurs when you attempt to save the parameters entered in menu 2, but receive the message, “Save successful, but Failed to initialize ISDN; Press ESC to exit”. 1. Check the error log (in menu 24.3.1), you should see a log entry for the ISDN initialization failure in the format, “ISDN init failed.
  • Page 149: Problems With The Lan Interface

    Problems with the LAN Interface Can’t PING any station on the LAN 1. Check the LAN LED on the front panel of your Prestige. If it is on, then the link is up. If it is off, then check the cables connecting your Prestige to your LAN.
  • Page 150: Problems Connecting To A Remote User

    nothing in the log, the call may have been dropped by the remote device that you dialed in to. Make sure that the configuration parameters between these two devices are consistent. Problems Connecting to a Remote User 1. First verify that you have configured the authentication parameters in menu 13.
  • Page 151: Isdn Switch Types

    ISDN Switch Types The following table summarizes the different type of switch types supported by the Prestige and some related information on the switch types (number of phone numbers and SPID numbers). It should be noted that the information in this table is for the common case and is recommended for those cases.
  • Page 152 For AT&T 5ESS National ISDN-1 Provisioning Feature Term Type Circuit Switched Voice (CSV) CSV Additional Call Offering (ACO) CSV limit CSV Notification Busy (NB) limit Circuit Switched Data (CSD) CSD Additional Call Offering (ACO) CSD limit CSD Notification Busy (NB) limit MTERM For AT&T 5ESS Multipoint Provisioning Feature...
  • Page 153: Provisioning For The Northern Telecom Switch

    Provisioning Feature CSV limit CSV Notification Busy (NB) limit Circuit Switched Data (CSD) CSD Flexible Call Offering (FCO) CSD limit CSD Notification Busy (NB) limit MTERM Provisioning For the Northern Telecom Switch The Northern Telecom switch type supports two types of ISDN service.
  • Page 154 Provisioning Feature Setting EKTS) ISDN Switch Types 141...
  • Page 155: Index

    Index 10Base2, 14, 24 10Base5. See AUI 10Base-T, 14, 23 1TR6, 13, 33, 34, 139 A/B Adapter, 1, 32, 34, 35 Accounting, 123, 124 AUI, 14, 24, 37, 121, 137 BACP. See Bandwidth Allocation Control Protocol Bandwidth Allocation Control Protocol, 3, 44, 55, Bandwidth Allocation Protocol, 3 Bandwidth On Demand.
  • Page 156 IOC, 11. See ISDN Ordering Code IP Address, 14, 39 IP Subnet Mask, 15, 39, 71, 73, 78 IPX, 1, 2, 5, 12, 14, 36, 40, 51, 56, 62, 66, 67, 73, 79, 80, 81, 82, 84, 86, 87, 89, 90, 91, 92, 97, 99, 103, 105, 106, 117, 122, 138 ISDN...
  • Page 157 SNMP, 3, 12, 29, 30, 107, 108, 109 SPID, 11, 13, 14, 31, 136, Spoofing, 81, 85, 89 SUA. See Single User Account switch types, 2, 13, 32, 136, System Management Terminal, 26 Target Utility, 58, 60 TCP/IP, 1, 2, 4, 5, 14, 15, 36, 37, 38, 39, 42, 44, 51, 62, 144 Index 71, 97, 98, 99, 100, 103,...
  • Page 158 Bringing the power of ISDN to your LAN has never been ISDN Bridge/Router simpler, more convenient or more cost-effective. The ZyXEL Prestige 128 is your complete solution for ISDN applications such as corporate Internet/intranet Access, Wide Area Networking, Electronic Commerce and Remote Network Access.
  • Page 159 ZyXEL Prestige 128 ISDN Bridge Router Local console and remote console via Telnet Menu-driven user interface for configuration and management Integrated SNMP (Simple Network Management Protocol) provides the ability to monitor usage and troubleshoot from corporate sites Call Detail Records feature provides efficient tracking of incoming and outgoing calls...
  • Page 160 ZyXEL Prestige 128 ISDN Bridge Router Seite 3 von 3 HOME INDEX MODEMS ISDN TA'S ROUTERS CHASSIS http://www.zyxel.com/html/prodguide/datasheets/routers/p128_ds.html 28.12.98...
  • Page 161 ®...

Table of Contents