ZyXEL Communications P-660H-61 User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Gateway
  5. P-660H-61
  6. User manual
ZyXEL Communications P-660H-61 User Manual

ZyXEL Communications P-660H-61 User Manual

Prestige 660h series adsl 2/2+ gateway
Hide thumbs Also See for P-660H-61:
Table of Contents

Advertisement

Quick Links

Download this manual See also: User Manual, Manual
Prestige 660H Series
ADSL 2/2+ Gateway
User's Guide
Version 3.40 (QT)
April 2004

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the P-660H-61 and is the answer not in the manual?

Questions and answers

Related Manuals for ZyXEL Communications P-660H-61

Summary of Contents for ZyXEL Communications P-660H-61

  • Page 1 Prestige 660H Series ADSL 2/2+ Gateway User's Guide Version 3.40 (QT) April 2004...

  • Page 2: Copyright

    Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
  • Page 3 Certifications 1. Go to www.zyxel.com 2. Select your product from the drop-down list box on the ZyXEL home page to go to that product's page. 3. Select the certification you wish to view from this page FCC Statements...

  • Page 4: Zyxel Limited Warranty

    ZyXEL shall in no event be held liable for indirect or consequential damages of any kind of character to the purchaser.

  • Page 5: Customer Support

    Brief description of the problem and the steps you took to solve it. METHOD SUPPORT E-MAIL TELEPHONE WEB SITE REGULAR MAIL SALES E-MAIL FTP SITE LOCATION WORLDWIDE support@zyxel.com.tw +886-3-578-3942 www.zyxel.com ZyXEL Communications Corp. 6 Innovation www.europe.zyxel.com Road II Science Park sales@zyxel.com.tw +886-3-578-2439 ftp.zyxel.com Hsinchu 300 ftp.europe.zyxel.com Taiwan NORTH support@zyxel.com...

  • Page 6: Table Of Contents

    Prestige 660H Series User’s Guide Table of Contents Copyright ............................ii Federal Communications Commission (FCC) Interference Statement ........iii ZyXEL Limited Warranty .......................iv Customer Support..........................v List of Figures...........................xii List of Tables ...........................xvi List of Charts...........................xix Preface...............................xx Introduction to DSL........................xxii Getting Started............................I Chapter 1 Getting To Know Your Prestige .................
  • Page 7 Firewall and Content Filter........................IV Chapter 10 Firewalls ........................10-1 10.1 Firewall Overview ......................10-1 10.2 Types of Firewalls ......................10-1 10.3 Introduction to ZyXEL’s Firewall ..................10-2 10.4 Denial of Service ......................10-3 10.5 Stateful Inspection ......................10-6 10.6 Guidelines for Enhancing Security with Your Firewall ..........10-9 10.7...
  • Page 8 Configuring Remote Management................. 15-2 Chapter 16 Universal Plug-and-Play (UPnP) ................16-1 16.1 Introducing Universal Plug and Play ................16-1 16.2 UPnP and ZyXEL ......................16-1 16.3 Installing UPnP in Windows Example................16-2 16.4 Using UPnP in Windows XP Example ................16-4 Chapter 17 Logs Screens ......................
  • Page 9 Prestige 660H Series User’s Guide SMT General Configuration ......................VIII Chapter 20 Introducing the SMT....................20-1 20.1 SMT Introduction ......................20-1 20.2 Navigating the SMT Interface ..................20-2 20.3 Changing the System Password..................20-4 Chapter 21 Menu 1 General Setup....................21-1 21.1 General Setup........................21-1 21.2 Procedure To Configure Menu 1 ..................21-1 Chapter 22 Menu 2 WAN Backup Setup..................22-1 22.1 Introduction to WAN Backup Setup................22-1...
  • Page 10 Prestige 660H Series User’s Guide Chapter 30 Filter Configuration....................30-1 30.1 About Filtering....................... 30-1 30.2 Configuring a Filter Set for the Prestige ................ 30-3 30.3 Filter Rules Summary Menus ..................30-4 30.4 Configuring a Filter Rule ....................30-5 30.5 Filter Types and NAT ....................30-10 30.6 Example Filter......................
  • Page 11 Prestige 660H Series User’s Guide 39.2 The Configuration Text File Format................39-1 39.3 Internal SPTGEN FTP Download Example ..............39-3 39.4 Internal SPTGEN FTP Upload Example ................39-3 Appendices and Index..........................X Appenidx A Troubleshooting......................A-1 Problems Starting Up the Prestige ....................A-1 Problems with the LAN LED ......................A-1 Problems with the DSL LED .......................A-1 Problems with the LAN Interface....................A-2 Problems with the WAN Interface....................A-2...

  • Page 12: List Of Figures

    Prestige 660H Series User’s Guide List of Figures Figure 1-1 Prestige Internet Access Application ................. 1-5 Figure 1-2 Firewall Application......................1-6 Figure 1-3 Prestige LAN-to-LAN Application ..................1-6 Figure 2-1 Password Screen......................... 2-1 Figure 2-2 Web Configurator SITE MAP Screen................2-2 Figure 3-1 Wizard Screen 1 .........................
  • Page 13 Prestige 660H Series User’s Guide Figure 13-6 Syslog Rule Configuration Example................13-5 Figure 13-7 Rule Summary Example ....................13-6 Figure 14-1 Content Filter: Keyword ....................14-1 Figure 14-2 Content Filter: Schedule....................14-2 Figure 14-3 Content Filter: Trusted ....................14-3 Figure 15-1 Telnet Configuration on a TCP/IP Network ..............15-2 Figure 15-2 Remote Management Control ..................15-2 Figure 16-1 Configuring UPnP......................16-2 Figure 17-1 Log Settings ........................17-2...
  • Page 14 Prestige 660H Series User’s Guide Figure 27-3 Menu 12.3.1 Edit Bridge Static Route ................27-3 Figure 28-1 Applying NAT in Menus 4..................... 28-2 Figure 28-2 Applying NAT in Menus 11.3..................28-3 Figure 28-3 Menu 15 NAT Setup ...................... 28-4 Figure 28-4 Menu 15.1 Address Mapping Sets ................. 28-4 Figure 28-5 Menu 15.1.255 SUA Address Mapping Rules ...............
  • Page 15 Prestige 660H Series User’s Guide Figure 34-2 FTP Session Example .....................34-3 Figure 34-3 Telnet into Menu 24.6.....................34-5 Figure 34-4 Restore Using FTP Session Example................34-6 Figure 34-5 Telnet Into Menu 24.7.1 Upload System Firmware............34-7 Figure 34-6 Telnet Into Menu 24.7.2 System Maintenance ...............34-7 Figure 34-7 FTP Session Example of Firmware File Upload.............34-8 Figure 35-1 Command Mode in Menu 24 ..................35-1 Figure 35-2 Valid Commands......................35-2...
  • Page 16 Prestige 660H Series User’s Guide List of Tables Table 2-1 Web Configurator Screens Summary .................. 2-2 Table 3-1 Wizard Screen 1 ........................3-3 Table 3-2 Internet Connection with PPPoE ..................3-6 Table 3-3 Internet Connection with RFC 1483..................3-6 Table 3-4 Internet Connection with ENET ENCAP ................3-7 Table 3-5 Internet Connection with PPPoA..................
  • Page 17 Prestige 660H Series User’s Guide Table 18-9 Bandwidth Manager: Summary..................18-7 Table 18-10 Bandwidth Manager: Class Setup ..................18-9 Table 18-11 Bandwidth Manager: Class Setup ..................18-9 Table 18-12 Bandwidth Manager: Class Configuration ..............18-9 Table 18-13 Bandwidth Manager: Class Configuration ..............18-10 Table 18-14 Services and Port Numbers ..................18-11 Table 18-15 Bandwidth Management Statistics ................18-11 Table 18-16 Bandwidth Management Statistics ................18-12 Table 18-17 Bandwidth Manager Monitor ..................18-12...
  • Page 18 Prestige 660H Series User’s Guide Table 35-1 Menu 24.9.1 System Maintenance: Budget Management ..........35-3 Table 35-2 Menu 24.10 System Maintenance: Time and Date Setting ..........35-5 Table 36-1 Menu 24.11 Remote Management Control ..............36-2 Table 37-1 Menu 25.1 IP Routing Policy Setup ................37-3 Table 37-2 Menu 25.1.1 IP Routing Policy ..................
  • Page 19 Prestige 660H Series User’s Guide List of Charts Chart A-1 Troubleshooting the Start-Up of Your Prestige..............A-1 Chart A-2 Troubleshooting the LAN LED ..................A-1 Chart A-3 Troubleshooting the DSL LED...................A-1 Chart A-4 Troubleshooting the LAN Interface..................A-2 Chart A-5 Troubleshooting the WAN Interface ..................A-2 Chart A-6 Troubleshooting Internet Access ..................A-2 Chart A-7 Troubleshooting the Password....................A-3 Chart A-8 Troubleshooting the Web Configurator................A-3...

  • Page 20: Preface

    Web Configurator Online Help Embedded web help for descriptions of individual screens and supplementary information. ZyXEL Glossary and Web Site Please refer to www.zyxel.com for an online glossary of networking terms and additional support documentation. User Guide Feedback Help us help you! E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The Technical Writing Team, ZyXEL...
  • Page 21 Prestige 660H Series User’s Guide • Mouse action sequences are denoted using a comma. For example, “click the Apple icon, Control Panels and then Modem” means first click the Apple icon, then point your mouse pointer to Control Panels and then click Modem. •...

  • Page 22: Introduction To Dsl

    Header Introduction to DSL DSL (Digital Subscriber Line) technology enhances the data capacity of the existing twisted-pair wire that runs between the local telephone company switching offices and most homes and offices. While the wire itself can handle higher frequencies, the telephone switching equipment is designed to cut off signals above 4,000 Hz to filter noise off the voice line, but now everybody is searching for ways to get more bandwidth to improve access to the Web - hence DSL technologies.

  • Page 23: Getting Started

    Getting Started Getting Started This part is structured as a step-by-step guide to help you access your Prestige. It covers key features and applications, accessing the web configurator and configuring the wizard screens for initial setup.

  • Page 25: Chapter 1 Getting To Know Your Prestige

    Prestige 660H Series User’s Guide Chapter 1 Getting To Know Your Prestige This chapter describes the key features and applications of your Prestige Introducing the Prestige Your Prestige integrates high-speed 10/100Mbps auto-negotiating LAN interface(s) and a high-speed ADSL port into a single package. The Prestige is ideal for high-speed Internet browsing and making LAN-to-LAN connections to remote networks.
  • Page 26 Prestige 660H Series User’s Guide High Speed Internet Access Your Prestige ADSL/ADSL2/ADSL2+ router can support downstream transmission rates of up to 24Mbps and upstream transmission rates of 3.5Mbps. Actual speeds attained depend on ISP DSLAM environment. Firewall The Prestige is a stateful inspection firewall with DoS (Denial of Service) protection. By default, when the firewall is activated, all incoming traffic from the WAN to the LAN is blocked unless it is initiated from the LAN.

  • Page 27: Protocol Support

    Prestige 660H Series User’s Guide Dynamic DNS Support With Dynamic DNS support, you can have a static hostname alias for a dynamic IP address, allowing the host to be more easily accessible from various locations on the Internet. You must register for this service with a Dynamic DNS service provider.
  • Page 28 Prestige 660H Series User’s Guide ♦ RIP I/RIP II ♦ IGMP Proxy ♦ ICMP support ♦ ATM QoS support ♦ MIB II support (RFC 1213) Networking Compatibility Your Prestige is compatible with the major ADSL DSLAM (Digital Subscriber Line Access Multiplexer) providers, making configuration as simple as possible for you.

  • Page 29: Applications For The Prestige

    Prestige 660H Series User’s Guide Packet Filters The Prestige's packet filtering functions allows added network security and management. Ease of Installation Your Prestige is designed for quick, intuitive and easy installation. Housing Your Prestige's compact and ventilated housing minimizes space requirements making it easy to position anywhere in your busy office.

  • Page 30: Figure 1-2 Firewall Application

    Prestige 660H Series User’s Guide Figure 1-2 Firewall Application 1.3.3 LAN to LAN Application You can use the Prestige to connect two geogr ly dispersed networks over the ADSL line. A aphical typical LAN-to-LAN application for your Prestige is shown as follows. Figure 1-3 Prestige LAN-to-LAN Application Getting To Know Your Prestige...

  • Page 31: Chapter 2 Introducing The Web Configurator

    Prestige 660H Series User’s Guide Chapter 2 Introducing the Web Configurator This chapter describes how to access and navigate the web configurator. Web Configurator Overview The embedded web configurator allows you to manage the Prestige from anywhere through a browser such as Microsoft Internet Explorer or Netscape Navigator.

  • Page 32: Navigating The Prestige Web Configurator

    Prestige 660H Series User’s Guide 2.3.1 Using The Reset Button Make sure the PWR/SYS LED is on (not blinking). Press the RESET button for ten seconds or until the PWR/SYS LED begins to blink and then release it. When the PWR/SYS LED begins to blink, the defaults have been restored and the Prestige restarts.
  • Page 33 Prestige 660H Series User’s Guide Table 2-1 Web Configurator Screens Summary LINK SUB-LINK FUNCTION Password Use this screen to change your password. Use this screen to configure LAN DHCP and TCP/IP settings. WAN Setup Use this screen to change the Prestige’s WAN remote node settings. WAN Backup Use this screen to configure your traffic redirect properties and WAN backup settings.

  • Page 35: Chapter 3 Wizard Setup

    Prestige 660H Series User’s Guide Chapter 3 Wizard Setup This chapter provides information on the Wizard Setup screens in the web configurator. Wizard Setup Introduction Use the Wizard Setup screens to configure your system for Internet access settings and fill in the fields with the information in the Internet Account Information table of the Compact Guide.

  • Page 36: Multiplexing

    Prestige 660H Series User’s Guide Multiplexing There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the multiplexing method required by your ISP. 3.3.1 VC-based Multiplexing In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit; for example, VC1 carries IP, etc.

  • Page 37: Ip Address And Subnet Mask

    Prestige 660H Series User’s Guide Table 3-1 Wizard Screen 1 LABEL DESCRIPTION Mode From the Mode drop-down list box, select Routing (default) if your ISP allows multiple computers to share an Internet account. Otherwise select Bridge. Encapsulation Select the encapsulation type your ISP uses from the Encapsulation drop-down list box. Choices vary depending on what you select in the Mode field.

  • Page 38: Ip Address Assignment

    Prestige 660H Series User’s Guide IP Address Assignment A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different one each time. The Single User Account feature can be enabled or disabled if you have either a dynamic or static IP.

  • Page 39: Nailed-Up Connection (Ppp)

    Prestige 660H Series User’s Guide Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466, Guidelines for Management of IP Address Space.

  • Page 40: Figure 3-3 Internet Connection With Rfc 1483

    Prestige 660H Series User’s Guide Table 3-2 Internet Connection with PPPoE LABEL DESCRIPTION Service Name Type the name of your PPPoE service here. User Name Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given.

  • Page 41: Figure 3-4 Internet Connection With Enet Encap

    Prestige 660H Series User’s Guide Table 3-3 Internet Connection with RFC 1483 LABEL DESCRIPTION Select None, SUA Only or Full Feature from the drop-sown list box. Refer to the NAT Network Address Translation chapter for more details. Back Click Back to go back to the first wizard screen. Next Click Next to continue to the next wizard screen.

  • Page 42: Figure 3-5 Internet Connection With Pppoa

    Prestige 660H Series User’s Guide Table 3-4 Internet Connection with ENET ENCAP LABEL DESCRIPTION Select None, SUA Only or Full Feature from the drop-sown list box. Refer to the NAT Network Address Translation chapter for more details. Back Click Back to go back to the first wizard screen. Next Click Next to continue to the next wizard screen.

  • Page 43: Dhcp Setup

    Prestige 660H Series User’s Guide Table 3-5 Internet Connection with PPPoA LABEL DESCRIPTION Select Connect on Demand when you don't want the connection up all the time and specify an Connection idle time-out (in seconds) in the Max. Idle Timeout field. The default setting selects Connection on Demand with 0 as the idle time-out, which means the Internet session will not timeout.

  • Page 44: Figure 3-6 Wizard Screen 3

    Prestige 660H Series User’s Guide Figure 3-6 Wizard Screen 3 Step 1. If you want to change your Prestige LAN settings, click Change LAN Configuration to display the screen as shown next. Figure 3-7 Wizard: LAN Configuration The following table describes the fields in this screen. Table 3-6 Wizard: LAN Configuration LABEL DESCRIPTION...

  • Page 45: Wizard Setup Configuration: Connection Tests

    Prestige 660H Series User’s Guide Table 3-6 Wizard: LAN Configuration LABEL DESCRIPTION LAN IP Address Enter the IP address of your Prestige in dotted decimal notation, for example, 192.168.1.1 (factory default). If you changed the Prestige's LAN IP address, you must use the new IP address if you want to access the web configurator again.

  • Page 46: Test Your Internet Connection

    Figure 3-8 Wizard Screen 4 3.14 Test Your Internet Connection Launch your web browser and navigate to www.zyxel.com. Internet access is just the beginning. Refer to the rest of this User’s Guide for more detailed information on the complete range of Prestige features.

  • Page 47: Password, Lan And Wan

    Password, LAN and WAN Password, LAN and WAN This part covers the password, LAN (Local Area Network) and WAN setup.

  • Page 49: Chapter 4 Password Setup

    Prestige 660H Series User’s Guide Chapter 4 Password Setup This chapter provides information on the Password screen. Password Overview It is highly recommended that you change the password for accessing the Prestige. Configuring Password To change your Prestige’s password (recommended), click Password. The screen appears as shown. Figure 4-1 Password The following table describes the fields in this screen.

  • Page 51: Chapter 5 Lan Setup

    Prestige 660H Series User’s Guide Chapter 5 LAN Setup This chapter describes how to configure LAN settings. LAN Overview A Local Area Network (LAN) is a shared communication system to which many computers are attached. A LAN is a computer network limited to the immediate area, usually the same building or floor of a building.

  • Page 52: Dns Server Address Assignment

    Prestige 660H Series User’s Guide the DNS servers are conveyed through IPCP negotiation. The Prestige supports the IPCP DNS server extensions through the DNS proxy feature. If the Primary and Secondary DNS Server fields in the LAN Setup screen are not specified, for instance, left as 0.0.0.0, the Prestige tells the DHCP clients that it itself is the DNS server.

  • Page 53: Configuring Lan

    Prestige 660H Series User’s Guide ♦ Both - the Prestige will broadcast its routing table periodically and incorporate the RIP information that it receives. ♦ In Only - the Prestige will not send any RIP packets but will accept all RIP packets received. ♦...

  • Page 54: Figure 5-2 Lan Setup

    Prestige 660H Series User’s Guide Figure 5-2 LAN Setup The following table describes the fields in this screen. Table 5-1 LAN Setup LABEL DESCRIPTION DHCP If set to Server, your Prestige can assign IP addresses, an IP default gateway and DNS servers to Windows 95, Windows NT and other systems that support the DHCP client.
  • Page 55 Prestige 660H Series User’s Guide Table 5-1 LAN Setup LABEL DESCRIPTION TCP/IP Enter the IP address of your Prestige in dotted decimal notation, for example, 192.168.1.1 IP Address (factory default). IP Subnet Mask Type the subnet mask assigned to you by your ISP (if given). RIP Direction Select the RIP direction from None, Both, In Only and Out Only.

  • Page 57: Chapter 6 Wan Setup

    Prestige 660H Series User’s Guide Chapter 6 WAN Setup This chapter describes how to configure WAN settings. WAN Overview A WAN (Wide Area Network) is an outside connection to another network or the Internet. See the Wizard Setup chapter for more information on the fields in the WAN screens. Metric The metric represents the "cost of transmission".

  • Page 58: Traffic Shaping

    Prestige 660H Series User’s Guide By implementing PPPoE directly on the Prestige (rather than individual computers), the computers on the LAN do not need PPPoE software installed, since the Prestige does that part of the task. Furthermore, with NAT, all of the LANs’ computers will have access. Traffic Shaping Traffic Shaping is an agreement between the carrier and the subscriber to regulate the average rate and fluctuations of data transmission over an ATM network.

  • Page 59: Figure 6-2 Wan Setup (Pppoe)

    Prestige 660H Series User’s Guide Figure 6-2 WAN Setup (PPPoE) The following table describes the fields in this screen. Table 6-1 WAN Setup LABEL DESCRIPTION Name Enter the name of your Internet Service Provider, e.g., MyISP. This information is for identification purposes only.
  • Page 60 Prestige 660H Series User’s Guide Table 6-1 WAN Setup LABEL DESCRIPTION Encapsulation Select the method of encapsulation used by your ISP from the drop-down list box. Choices vary depending on the mode you select in the Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483. If you select Routing in the Mode field, select PPPoA, RFC 1483, ENET ENCAP or PPPoE.

  • Page 61: Traffic Redirect

    Prestige 660H Series User’s Guide Table 6-1 WAN Setup LABEL DESCRIPTION Connection The schedule rule(s) in SMT menu 26 have priority over your Connection settings. (PPPoA and PPPoE encapsulation only) Nailed-Up Connection Select Nailed-Up Connection when you want your connection up all the time. The Prestige will try to bring up the connection automatically if it is disconnected.

  • Page 62: Configuring Wan Backup

    Prestige 660H Series User’s Guide Figure 6-3 Traffic Redirect Example The following network topology allows you to avoid triangle route security issues when the backup gateway is connected to the LAN. Use IP alias to configure the LAN into two or three logical networks with the Prestige itself as the gateway for each LAN network.

  • Page 63: Figure 6-5 Wan Backup

    Prestige 660H Series User’s Guide Figure 6-5 WAN Backup The following table describes the fields in this screen. Table 6-2 WAN Backup LABEL DESCRIPTION Backup Type Select the method that the Prestige uses to check the DSL connection. Select DSL Link to have the Prestige check the DSL connection’s physical layer. Select ICMP to have the Prestige periodically ping the IP addresses configured in the Check WAN IP Address fields.
  • Page 64 Prestige 660H Series User’s Guide Table 6-2 WAN Backup LABEL DESCRIPTION Active Select this check box to have the Prestige use traffic redirect if the normal WAN connection goes down. Metric This field sets this route's priority among the routes the Prestige uses. The metric represents the "cost of transmission".

  • Page 65: Nat, Dynamic Dns And Time And Date

    NAT, Dynamic DNS and Time and Date NAT, Dynamic DNS and Time and Date This part covers NAT (Network Address Translation), dynamic DNS (Domain Name Sever) and Time and Date setup.

  • Page 67: Chapter 7 Network Address Translation (Nat) Screens

    Prestige 660H Series User’s Guide Chapter 7 Network Address Translation (NAT) Screens This chapter discusses how to configure NAT on the Prestige. NAT Overview NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, for example, the source address of an outgoing packet, used within one network to a different IP address known within another network.

  • Page 68: Figure 7-1 How Nat Works

    Prestige 660H Series User’s Guide firewall protection. With no servers defined, your Prestige filters out all incoming inquiries, thus preventing intruders from probing your network. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT). 7.1.3 How NAT Works Each packet has two addresses –...

  • Page 69: Figure 7-2 Nat Application With Ip Alias

    Many to One: In Many-to-One mode, the Prestige maps multiple local IP addresses to one global IP address. This is equivalent to SUA (for instance, PAT, port address translation), ZyXEL’s Single User Account feature that previous ZyXEL routers supported (the SUA Only option in today’s routers).

  • Page 70: Sua (Single User Account) Versus Nat

    Prestige 660H Series User’s Guide Table 7-2 NAT Mapping Types TYPE IP MAPPING SMT ABBREVIATION ILA2 IGA1 … Many-to-Many Overload ILA1 IGA1 M:M Ov ILA2 IGA2 ILA3 IGA1 ILA4 IGA2 … Many-to-Many No Overload ILA1 IGA1 M:M No OV ILA2 IGA2 ILA3 IGA3...

  • Page 71: Selecting The Nat Mode

    Prestige 660H Series User’s Guide If you do not assign an IP address in Server Set 1 (default server), the Prestige discards all packets received for ports that are not specified here or in the remote management setup. 7.3.1 Port Forwarding: Services and Port Numbers The most often used port numbers are shown in the following table.

  • Page 72: Configuring Sua Server

    Prestige 660H Series User’s Guide Click NAT to open the following screen. Figure 7-4 NAT Mode The following table describes the labels in this screen. Table 7-4 NAT Mode LABEL DESCRIPTION None Select this radio button to disable NAT. Select this radio button if you have just one public WAN IP address for your Prestige. The Prestige SUA Only uses Address Mapping Set 1 in the NAT - Edit SUA/NAT Server Set screen.

  • Page 73: Configuring Address Mapping

    Prestige 660H Series User’s Guide Figure 7-5 Edit SUA/NAT Server Set The following table describes the fields in this screen. Table 7-5 Edit SUA/NAT Server Set LABEL DESCRIPTION Start Port No. Enter a port number in this field. To forward only one port, enter the port number again in the End Port No. field. To forward a series of ports, enter the start port number here and the end port number in the End Port No.

  • Page 74: Figure 7-6 Address Mapping Rules

    Prestige 660H Series User’s Guide will be pushed up by that number of empty rules. For example, if you have already configured rules 1 to 6 in your current set and now you configure rule number 9. In the set summary screen, the new rule will be rule 7, not 9.

  • Page 75: Editing An Address Mapping Rule

    One-to-one NAT mapping type. M-1: Many-to-One mode maps multiple local IP addresses to one global IP address. This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported only.

  • Page 76: Table 7-7 Address Mapping Rule Edit

    Note that port numbers do not change for One-to-one NAT mapping type. 2. Many-to-One: Many-to-One mode maps multiple local IP addresses to one global IP address. This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL's Single User Account feature that previous ZyXEL routers supported only.

  • Page 77: Chapter 8 Dynamic Dns Setup

    Prestige 660H Series User’s Guide Chapter 8 Dynamic DNS Setup This chapter discusses how to configure your Prestige to use Dynamic DNS. Dynamic DNS Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services so that anyone can contact you (in NetMeeting, CU-SeeMe, etc.).

  • Page 78: Table 8-1 Dynamic Dns

    Prestige 660H Series User’s Guide Table 8-1 Dynamic DNS LABEL DESCRIPTION Active Select this check box to use dynamic DNS. Service Provider This is the name of your Dynamic DNS service provider. Host Names Type the domain name assigned to your Prestige by your Dynamic DNS provider. E-mail Address Type your e-mail address.

  • Page 79: Chapter 9 Time And Date

    Prestige 660H Series User’s Guide Chapter 9 Time and Date This screen is not available on all models. Use this screen to configure the Prestige’s time and date settings. Configuring Time and Date To change your Prestige’s time and date, click Time And Date. The screen appears as shown. Use this screen to configure the Prestige’s time based on your local time zone.
  • Page 80 Header Table 9-1 Time and Date LABEL DESCRIPTION Use Protocol when Select the time service protocol that your time server sends when you turn on the Bootup Prestige. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use trial and error to find a protocol that works.

  • Page 81: Firewall And Content Filter

    Firewall and Content Filter Firewall and Content Filter This part introduces firewalls in general and the Prestige firewall. It also explains customized services and logs and gives example firewall rules and an overview of content filtering.

  • Page 83: Chapter 10 Firewalls

    Prestige 660H Series User’s Guide Chapter 10 Firewalls This chapter gives some background information on firewalls and introduces the Prestige firewall. 10.1 Firewall Overview Originally, the term firewall referred to a construction technique designed to prevent the spread of fire from one room to another.

  • Page 84: Introduction To Zyxel's Firewall

    Firewalls, of one type or another, have become an integral part of standard security solutions for enterprises. 10.3 Introduction to ZyXEL’s Firewall The Prestige firewall is a stateful inspection firewall and is designed to protect against Denial of Service attacks when activated (in SMT menu 21.2 or in the web configurator). The Prestige’s purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet.

  • Page 85: Denial Of Service

    Prestige 660H Series User’s Guide 10.4 Denial of Service Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to network resources.

  • Page 86: Figure 10-2 Three-Way Handshake

    Prestige 660H Series User’s Guide 2. Weaknesses in the TCP/IP specification leave it open to "SYN Flood" and "LAND" attacks. These attacks are executed during the handshake that initiates a communication session between two applications. Figure 10-2 Three-Way Handshake Under normal circumstances, the application that initiates a session sends a SYN (synchronize) packet to the receiving server.

  • Page 87: Figure 10-4 Smurf Attack

    Prestige 660H Series User’s Guide numerous hosts, this will create a large amount of ICMP echo request and response traffic. If a hacker chooses to spoof the source IP address of the ICMP echo request packet, the resulting ICMP traffic will not only clog up the "intermediary" network, but will also congest the network of the spoofed source IP address, known as the "victim"...

  • Page 88: Stateful Inspection

    Prestige 660H Series User’s Guide Traceroute Traceroute is a utility used to determine the path a packet takes between two endpoints. Sometimes when a packet filter firewall is configured incorrectly an attacker can traceroute the firewall gaining knowledge of the network topology inside the firewall. 4.

  • Page 89: Stateful Inspection Process

    Prestige 660H Series User’s Guide 10.5.1 Stateful Inspection Process In this example, the following sequence of events occurs when a TCP packet leaves the LAN network through the firewall's WAN interface. The TCP packet is the first in a session, and the packet's application layer protocol is configured for a firewall rule inspection: 1.

  • Page 90: Tcp Security

    Prestige 660H Series User’s Guide The ability to define firewall rules is a very powerful tool. Using custom rules, it is possible to disable all firewall protection or block all access to the Internet. Use extreme caution when creating or deleting firewall rules. Test changes after creating them to make sure they work correctly.

  • Page 91: Guidelines For Enhancing Security With Your Firewall

    Prestige 660H Series User’s Guide commands between endpoints, and then "data connections" which are used for transmitting bulk information. Consider the FTP protocol. A user on the LAN opens a control connection to a server on the Internet and requests a file. At this point, the remote server will open a data connection from the Internet. For FTP to work properly, this connection must be allowed to pass through even though a connection from the Internet would normally be rejected.

  • Page 92: Packet Filtering Vs Firewall

    Prestige 660H Series User’s Guide site uses a secure connection, it is safe to submit information. Secure web transactions are quite difficult to crack. ♦ Never reveal your IP address or other system networking information to people outside your company. Be careful of files e-mailed to you from strangers. One common way of getting BackOrifice on a system is to include it as a Trojan horse with other files.
  • Page 93 Prestige 660H Series User’s Guide ♦ The firewall performs stateful inspection. It takes into account the state of connections it handles so that, for example, a legitimate incoming packet can be matched with the outbound request for that packet and allowed in. Conversely, an incoming packet masquerading as a response to a nonexistent outbound request can be blocked.

  • Page 95: Chapter 11 Firewall Configuration

    Prestige 660H Series User’s Guide Chapter 11 Firewall Configuration This chapter shows you how to enable and configure the Prestige firewall. 11.1 Remote Management and the Firewall When remote management is configured to allow management (see the Remote Management chapter) and the firewall is enabled: ♦...

  • Page 96: Threshold Values

    Prestige 660H Series User’s Guide 11.3.1 Alerts Alerts are reports on events, such as attacks, that you may want to know about right away. You can choose to generate an alert when an attack is detected in the Alert screen (Figure 11-2 - select the Generate alert when attack detected checkbox) or when a rule is matched in the Edit Rule screen (see Figure 12-4) When an event generates an alert, a message can be immediately sent to an e-mail...

  • Page 97: Figure 11-2 Alert

    Prestige 660H Series User’s Guide ♦ If the Blocking Time timeout is 0 (the default), then the Prestige deletes the oldest existing half-open session for the host for every new connection request to the host. This ensures that the number of half-open sessions to a given host will never exceed the threshold. ♦...
  • Page 98 Prestige 660H Series User’s Guide Table 11-1 Alert LABEL DESCRIPTION Maximum This is the number of existing half-open sessions (default "80") that causes the firewall to Incomplete Low stop deleting half-open sessions. The Prestige continues to delete half-open requests as necessary, until the number of existing half-open sessions drops below this number.

  • Page 99: Chapter 12 Creating Custom Rules

    Prestige 660H Series User’s Guide Chapter 12 Creating Custom Rules This chapter contains instructions for defining both Local Network and Internet rules. 12.1 Rules Overview Firewall rules are subdivided into “Local Network” and “Internet”. By default, the Prestige’s stateful packet inspection allows all communications to the Internet that originate from the local network, and blocks all traffic to the LAN that originates from the Internet.

  • Page 100: Connection Direction

    Prestige 660H Series User’s Guide 12.2.2 Security Ramifications 1. Once the logic of the rule has been defined, it is critical to consider the security ramifications created by the rule: 2. Does this rule stop LAN users from accessing critical resources on the Internet? For example, if IRC is blocked, are there users that require this service? 3.

  • Page 101: Rule Summary

    Prestige 660H Series User’s Guide Figure 12-1 LAN to WAN Traffic 12.3.2 WAN to LAN Rules The default rule for WAN to LAN traffic blocks all incoming connections (WAN to LAN). If you wish to allow certain WAN users to have access to your LAN, you will need to create custom rules to allow it.

  • Page 102: Figure 12-3 Firewall Rules Summary: First Screen

    Prestige 660H Series User’s Guide Figure 12-3 Firewall Rules Summary: First Screen The following table describes the labels in this screen. Table 12-1 Firewall Rules Summary: First Screen LABEL DESCRIPTION The default action for Use the drop-down list box to select whether to Block (silently discard) or Forward packets not matching (allow the passage of) packets that do not match the following rules.

  • Page 103: Predefined Services

    24032) DNS(UDP/TCP:53) Domain Name Server, a service that matches web names (e.g. ) to IP numbers. www.zyxel.com FINGER(TCP:79) Finger is a UNIX or Internet related command that can be used to find out if a user is logged on. FTP(TCP:20.21) File Transfer Program, a program to enable fast transfer of files, including large files that may not be possible by e-mail.
  • Page 104 Prestige 660H Series User’s Guide Table 12-2 Predefined Services SERVICE DESCRIPTION EL(AH:0) service. IPSEC_TUNNEL(ESP:0) The IPSEC ESP (Encapsulation Security Protocol) tunneling protocol uses this service. IRC(TCP/UDP:6667) This is another popular Internet chat program. MSN Messenger(TCP:1863) Microsoft Networks’ messenger service uses this protocol. MULTICAST(IGMP:0) Internet Group Multicast Protocol is used when sending packets to a specific group of hosts.

  • Page 105: Creating/Editing Firewall Rules

    Prestige 660H Series User’s Guide Table 12-2 Predefined Services SERVICE DESCRIPTION STRMWORKS(UDP:1558) Stream Works Protocol. SYSLOG(UDP:514) Syslog allows you to send system logs to a UNIX server. TACACS(UDP:49) Login Host Protocol used for (Terminal Access Controller Access Control System). TELNET(TCP:23) Telnet is the login and terminal emulation protocol common on the Internet and in UNIX environments.

  • Page 106: Figure 12-4 Creating/Editing A Firewall Rule

    Prestige 660H Series User’s Guide Figure 12-4 Creating/Editing A Firewall Rule The following table describes the labels in this screen. Table 12-3 Creating/Editing A Firewall Rule LABEL DESCRIPTION Source Address Click SrcAdd to add a new address, SrcEdit to edit an existing one or SrcDelete to delete one.

  • Page 107: Figure 12-5 Adding/Editing Source And Destination Addresses

    Prestige 660H Series User’s Guide Table 12-3 Creating/Editing A Firewall Rule LABEL DESCRIPTION This field determines if a log is created for packets that match the rule (Match), don't match the rule (Not Match), match either rule (Both) or no log is created (None). Alert Select the Alert check box to determine that this rule generates an alert when the rule is matched.

  • Page 108: Timeout

    Prestige 660H Series User’s Guide 12.7 Timeout The fields in the Timeout screens are the same for Local and Internet networks, so the discussion below refers to both. 12.7.1 Factors Influencing Choices for Timeout Values The factors influencing choices for timeout values are the same as the factors influencing choices for threshold values –...

  • Page 109: Chapter 13 Customized Services

    Prestige 660H Series User’s Guide Chapter 13 Customized Services This chapter covers creating, viewing and editing custom services. 13.1 Introduction to Customized Services Configure customized services and port numbers not predefined by the Prestige (see Figure 12-4). For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website.

  • Page 110: Creating/Editing A Customized Service

    Prestige 660H Series User’s Guide Table 13-1 Customized Services LABEL DESCRIPTION Back Click Back to return the Firewall Edit Rule screen. 13.2 Creating/Editing A Customized Service Click a rule number in the previous screen to create a new custom port or edit an existing one. This action displays the following screen.

  • Page 111: Figure 13-3 Edit Rule Example

    Prestige 660H Series User’s Guide Click a rule number to open the edit rule screen. Click Any in the Source Address box and then click ScrDelete. Figure 13-3 Edit Rule Example Click ScrAdd to open the Rule IP Config screen. Configure it as follows and click Apply. Figure 13-4 Configure Source IP Example Click Edit Available Service in the Edit rule screen and then click a rule number to bring up the Firewall Customized Services Config screen.

  • Page 112: Figure 13-5 Customized Service For Myservice Example

    Prestige 660H Series User’s Guide Figure 13-5 Customized Service for MyService Example Customized services show up with an “*” before their names in the Services list box and the Rule Summary list box. Click Apply after you’ve created your customized service. 13-4 Customized Services...

  • Page 113: Figure 13-6 Syslog Rule Configuration Example

    Prestige 660H Series User’s Guide Follow the procedures outlined earlier in this chapter to configure all your rules. Configure the rule configuration screen like the one below and apply it. This is the address range of the MyService computers. This is your MyService custom port.

  • Page 114: Figure 13-7 Rule Summary Example

    Prestige 660H Series User’s Guide This rule allows a MyService connection from the WAN. Click Apply to save your settings back to the Prestige. Figure 13-7 Rule Summary Example 13-6 Customized Services...

  • Page 115: Chapter 14 Content Filtering

    Prestige 660H Series User’s Guide Chapter 14 Content Filtering This chapter covers how to configure content filtering. 14.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs. Content filtering gives you the ability to block web sites that contain key words (that you specify) in the URL.

  • Page 116: Configuring The Schedule

    Prestige 660H Series User’s Guide Table 14-1 Content Filter: Keyword LABEL DESCRIPTION Enable Keyword Blocking Select this check box to enable this feature. Block Websites that contain This box contains the list of all the keywords that you have configured the Prestige to these keywords in the URL: block.

  • Page 117: Configuring Trusted Computers

    Prestige 660H Series User’s Guide Table 14-2 Content Filter: Schedule LABEL DESCRIPTION Days to Block: Select a check box to configure which days of the week (or everyday) you want the content filtering to be active. Time of Day to Use the 24 hour format to configure which time of the day (or select the All day check box) you Block: want the content filtering to be active.

  • Page 119: Remote Management, Upnp And Logs

    Remote Management, UPnP and Logs Remote Management, UPnP and Logs This part contains information on how to configure the Prestige for remote management, setting up Universal Plug and Play (UPnP) and setting up and displaying logs.

  • Page 121: Chapter 15 Remote Management Configuration

    Prestige 660H Series User’s Guide Chapter 15 Remote Management Configuration This chapter provides information on configuring remote management. 15.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which Prestige interface (if any) from which computers. When you configure remote management to allow management from the WAN, you still need to configure a firewall rule to allow access.

  • Page 122: Telnet

    Prestige 660H Series User’s Guide ♦ Use the Prestige’s LAN IP address when configuring from the LAN. 15.1.3 System Timeout There is a default system management idle timeout of five minutes (three hundred seconds). The Prestige automatically logs you out if the management session remains idle for longer than this timeout period.

  • Page 123: Table 15-1 Remote Management Control

    Prestige 660H Series User’s Guide Table 15-1 Remote Management Control LABEL DESCRIPTION Server Type Each of these labels denotes a service that you may use to remotely manage the Prestige. Access Status Select the access interface. Choices are All, LAN Only, WAN Only and Disable. This field shows the port number for the remote management service.

  • Page 125: Chapter 16 Universal Plug-And-Play (Upnp)

    Disable UPnP if this is not your intention. 16.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from the Universal Plug and Play Forum Creates UPnP™ Implementers Corp. (UIC). ZyXEL's UPnP implementation supports IGD 1.0 (Internet Gateway Device). At the time of writing ZyXEL's UPnP implementation supports Windows Messenger 4.6 and 4.7 while Windows Messenger 5.0 and Xbox are still being tested.

  • Page 126: Installing Upnp In Windows Example

    Prestige 660H Series User’s Guide See later sections for examples of installing UPnP in Windows XP and Windows Me as well as an example of using UPnP in Windows. 16.2.1 Configuring UPnP From the Site Map in the main menu, click UPnP under Advanced Setup to display the screen shown next.
  • Page 127 Prestige 660H Series User’s Guide Click Start and Control Panel. Double-click Add/Remove Programs. Click on the Windows Setup tab and select Communication in the Components selection box. Click Details. In the Communications window, select the Universal Plug and Play check box in the Components selection box. Click OK to go back to the Add/Remove Programs Properties window and click Next.

  • Page 128: Using Upnp In Windows Xp Example

    Prestige 660H Series User’s Guide In the Networking Services window, select the Universal Plug and Play check box. Click OK to go back to the Windows Optional Networking Component Wizard window and click Next. 16.4 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP.
  • Page 129 Prestige 660H Series User’s Guide In the Internet Connection Properties window, You may edit or delete the port click Settings to see the port mappings there mappings or click Add to manually were automatically created. add port mappings. When the UPnP-enabled device is disconnected from your computer, all port mappings will be deleted automatically.
  • Page 130 Prestige 660H Series User’s Guide Web Configurator Easy Access With UPnP, you can access the web-based configurator on the Prestige without finding out the IP address of the Prestige first. This comes helpful if you do not know the IP address of the Prestige. Follow the steps below to access the web configurator.
  • Page 131 Prestige 660H Series User’s Guide Right-click on the icon for your Prestige and select Properties. A properties window displays with basic information about the Prestige. UPnP 16-7...

  • Page 133: Chapter 17 Logs Screens

    Prestige 660H Series User’s Guide Chapter 17 Logs Screens This chapter contains information about configuring general log settings and viewing the Prestige’s logs. Refer to the appendix for example log message explanations. 17.1 Logs Overview The web configurator allows you to choose which categories of events and/or alerts to have the Prestige log and then display the logs or have the Prestige send them to an administrator (as e-mail) or to a syslog server.

  • Page 134: Figure 17-1 Log Settings

    Prestige 660H Series User’s Guide Figure 17-1 Log Settings The following table describes the fields in this screen. Table 17-1 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below.

  • Page 135: Displaying The Logs

    Prestige 660H Series User’s Guide Table 17-1 Log Settings LABEL DESCRIPTION UNIX Syslog Syslog logging sends a log to an external syslog server used to store logs. Active Click Active to enable syslog logging. Syslog IP Address Enter the server name or IP address of the syslog server that will log the selected categories of logs.

  • Page 136: Smtp Error Messages

    Prestige 660H Series User’s Guide Figure 17-2 View Logs The following table describes the fields in this screen. Table 17-2 View Logs LABEL DESCRIPTION Display The categories that you select in the Log Settings screen (see section 17.2) display in the drop-down list box.

  • Page 137: Figure 17-3 E-Mail Log Example

    You may edit the Firewall Alert From Prestige subject title Date: The date format here Fri, 07 Apr 2000 10:05:42 is Day-Month-Year. From: user@zyxel.com The date format here user@zyxel.com is Month-Day-Year. The time format is 1|Apr 7 00 |From:192.168.1.1 To:192.168.1.255...

  • Page 139: Bandwidth Management

    Bandwidth Management Bandwidth Management This part provides information on the functions and configuration of Bandwidth Management.

  • Page 141: Chapter 18 Bandwidth Management

    Prestige 660H Series User’s Guide Chapter 18 Bandwidth Management This chapter describes the functions and configuration of bandwidth management. 18.1 Bandwidth Management Overview Bandwidth management allows you to allocate an interface’s outgoing capacity to specific types of traffic. It can also help you make sure that the Prestige forwards certain types of traffic (especially real-time applications) with minimum delay.

  • Page 142: Bandwidth Management Usage Examples

    Prestige 660H Series User’s Guide 18.4 Bandwidth Management Usage Examples These examples show bandwidth management allotments on a WAN interface that is configured for 640Kbps. 18.4.1 Application-based Bandwidth Management Example The bandwidth classes in the following example are based solely on application. Each bandwidth class (VoIP, Web, FTP, E-mail and Video) is allotted 128kbps.

  • Page 143: Scheduler

    Prestige 660H Series User’s Guide Table 18-4 Application and Subnet-based Bandwidth Management Example 18.5 Scheduler The scheduler divides up an interface’s bandwidth among the bandwidth classes. The Prestige has two types of scheduler: fairness-based and priority-based. 18.5.1 Priority-based Scheduler With the priority-based scheduler, the Prestige forwards traffic from bandwidth classes according to the priorities that you assign to the bandwidth classes.

  • Page 144: Table 18-5 Bandwidth Allotment Example

    Prestige 660H Series User’s Guide Leave some of the interface’s bandwidth unbudgeted. Do not enable the interface’s Maximize Bandwidth Usage option. Do not enable bandwidth borrowing on the child-classes that have the root class as their parent (see section 18.7). 18.6.2 Maximize Bandwidth Usage Example Here is an example of a Prestige that has maximized bandwidth usage enabled on an interface.

  • Page 145: Bandwidth Borrowing

    Prestige 660H Series User’s Guide Table 18-6 Maximize Bandwidth Usage Example 18.7 Bandwidth Borrowing Bandwidth borrowing allows a child-class to borrow unused bandwidth from its parent class, whereas maximize bandwidth usage allows bandwidth classes to borrow any unused or unbudgeted bandwidth on the whole interface.

  • Page 146: Table 18-7 Bandwidth Borrowing Example

    Prestige 660H Series User’s Guide Table 18-7 Bandwidth Borrowing Example The Bill class can borrow unused bandwidth from the Sales USA class because the Bill class has bandwidth borrowing enabled. The Bill class can also borrow unused bandwidth from the Sales class because the Sales USA class also has bandwidth borrowing enabled.

  • Page 147: Configuring Summary

    Prestige 660H Series User’s Guide 18.7.2 Maximize Bandwidth Usage With Bandwidth Borrowing If you configure both maximize bandwidth usage (on the interface) and bandwidth borrowing (on individual child-classes), the Prestige functions as follows. The Prestige sends traffic according to each bandwidth class’s bandwidth budget. The Prestige assigns a parent class’s unused bandwidth to its child-classes that have more traffic than their budgets and have bandwidth borrowing enabled.

  • Page 148: Configuring Class Setup

    Prestige 660H Series User’s Guide Table 18-9 Bandwidth Manager: Summary LABEL DESCRIPTION Speed Enter the amount of bandwidth for this interface that you want to allocate using bandwidth (kbps) management. This appears as the bandwidth budget of the interface’s root class (see section 18.9). The recommendation is to set this speed to match what the interface’s connection can handle.

  • Page 149: Table 18-10 Bandwidth Manager: Class Setup

    Prestige 660H Series User’s Guide Table 18-10 Bandwidth Manager: Class Setup The following table describes the labels in this screen. Table 18-11 Bandwidth Manager: Class Setup LABEL DESCRIPTION Interface Select an interface from the drop-down list box for which you wish to set up classes. Back Click Back to go to the main BW Manager screen.

  • Page 150: Table 18-13 Bandwidth Manager: Class Configuration

    Prestige 660H Series User’s Guide Table 18-13 Bandwidth Manager: Class Configuration LABEL DESCRIPTION Class Name Use the auto-generated name or enter a descriptive name of up to 20 alphanumeric characters, including spaces. BW Budget (kbps) Specify the maximum bandwidth allowed for the class in kbps. The recommendation is a setting between 20 kbps and 20000 kbps for an individual class.

  • Page 151: Table 18-14 Services And Port Numbers

    Prestige 660H Series User’s Guide Table 18-13 Bandwidth Manager: Class Configuration LABEL DESCRIPTION TOS Mask The ToS mask is used to compare the specified (or entire) bits in the ToS IP header with the value specified in this rule. Enter the TOS Mask value between 0 (lowest priority) and 255. Back Click Back to go to the main BW Manager screen.

  • Page 152: Bandwidth Monitor

    Prestige 660H Series User’s Guide Table 18-16 Bandwidth Management Statistics LABEL DESCRIPTION Class Name This field displays the name of the class the statistics page is showing. Budget (kbps) This field displays the amount of bandwidth allocated to the class. Tx Packets This field displays the total number of packets transmitted.
  • Page 153 Prestige 660H Series User’s Guide Table 18-18 Bandwidth Manager Monitor LABEL DESCRIPTION Class Name This field displays the name of the class. Budget (kbps) This field displays the amount of bandwidth allocated to the class. Current Usage (kbps) This field displays the amount of bandwidth that each class is using. Back Click Back to go to the main BW Manager screen.

  • Page 155: Maintenance

    Maintenance Maintenance This part covers the maintenance screens.

  • Page 157: Chapter 19 Maintenance

    Prestige 660H Series User’s Guide Chapter 19 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 19.1 Maintenance Overview The maintenance screens can help you view system information, upload new firmware, manage configuration and restart your Prestige.

  • Page 158: Figure 19-1 System Status

    System Status System Name This is the name of your Prestige. It is for identification purposes. This is the ZyNOS firmware version and the date created. ZyNOS is ZyXEL's ZyNOS Firmware Version proprietary Network Operating System design. DSL FW Version This is the DSL firmware version associated with your Prestige.

  • Page 159: Figure 19-2 System Status: Show Statistics

    Prestige 660H Series User’s Guide Figure 19-2 System Status: Show Statistics The following table describes the fields in this screen. Table 19-2 System Status: Show Statistics LABEL DESCRIPTION System up Time This is the elapsed time the system has been up. CPU Load This field specifies the percentage of CPU utilization.

  • Page 160: Dhcp Table Screen

    Prestige 660H Series User’s Guide Table 19-2 System Status: Show Statistics LABEL DESCRIPTION Tx B/s This field displays the number of bytes transmitted in the last second. Rx B/s This field displays the number of bytes received in the last second. Up Time This field displays the elapsed time this port has been up.

  • Page 161: Diagnostic Screens

    Prestige 660H Series User’s Guide 19.4 Diagnostic Screens These read-only screens display information to help you identify problems with the Prestige. 19.4.1 Diagnostic General Screen Click Diagnostic and then General to open the screen shown next. Figure 19-4 Diagnostic General The following table describes the fields in this screen.

  • Page 162: Firmware Screen

    Click this button to go back to the main Diagnostic screen. 19.5 Firmware Screen Find firmware at www.zyxel.com in a file that (usually) uses the system model name with a "*.bin" extension, e.g., "Prestige.bin". The upload process uses HTTP (Hypertext Transfer Protocol) and may...

  • Page 163: Figure 19-6 Firmware Upgrade

    Prestige 660H Series User’s Guide take up to two minutes. After a successful upload, the system will reboot. See the Firmware and Configuration File Maintenance chapter in the parts that document the SMT for upgrading firmware using FTP/TFTP commands. Only use firmware for your device’s specific model. Refer to the label on the bottom of your device. Click Firmware to open the following screen.

  • Page 164: Figure 19-7 Network Temporarily Disconnected

    Prestige 660H Series User’s Guide Figure 19-7 Network Temporarily Disconnected After two minutes, log in again and check your new firmware version in the System Status screen. If the upload was not successful, the following screen will appear. Click Back to go back to the Firmware screen.

  • Page 165: Smt General Configuration

    SMT General Configuration SMT General Configuration This part covers System Management Terminal configuration for general setup, WAN backup, LAN setup, Internet access, remote node, static route, NAT and enabling the firewall. See the web configurator parts of this guide for background information on features configurable by web configurator and SMT.

  • Page 167: Chapter 20 Introducing The Smt

    Prestige 660H Series User’s Guide Chapter 20 Introducing the SMT This chapter explains how to access and navigate the System Management Terminal and gives an overview of its menus. 20.1 SMT Introduction The Prestige’s SMT (System Management Terminal) is a menu-driven interface that you can access from a terminal emulator over a telnet connection.

  • Page 168: Navigating The Smt Interface

    Prestige 660H Series User’s Guide Figure 20-2 Prestige 660H-61 SMT Menu Overview 20.2 Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your Prestige. Several operations that you should be familiar with before you attempt to modify the configuration are listed in the table below.

  • Page 169: Figure 20-3 Smt Main Menu

    Type 99 at the main menu prompt and press [ENTER] to exit the [ENTER]. SMT interface. After you enter the password, the SMT displays the main menu, as shown next. Copyright (c) 1994 - 2004 ZyXEL Communications Corp. Prestige 660H-61 Main Menu Getting Started Advanced Management 1.

  • Page 170: Changing The System Password

    Prestige 660H Series User’s Guide Table 20-2 Main Menu Summary MENU TITLE DESCRIPTION General Setup Use this menu to set up your general information. WAN Backup Setup Use this menu to setup traffic redirect and dial-back up. LAN Setup Use this menu to set up your LAN connection. Internet Access Setup A quick and easy way to set up an Internet connection.

  • Page 171: Chapter 21 Menu 1 General Setup

    Prestige 660H Series User’s Guide Chapter 21 Menu 1 General Setup Menu 1 - General Setup contains administrative and system-related information. 21.1 General Setup Menu 1 — General Setup contains administrative and system-related information (shown next). The System Name field is for identification purposes. However, because some ISPs check this name you should enter your computer's "Computer Name".

  • Page 172: Figure 21-2 Menu 1.1 Configure Dynamic Dns

    Domain Name Enter the domain name (if you know it) here. If you leave this field blank, the zyxel.com.tw ISP may assign a domain name via DHCP. You can go to menu 24.8 and type "sys domainname" to see the current domain name used by your gateway.

  • Page 173: Table 21-2 Menu 1.1 Configure Dynamic Dns

    Prestige 660H Series User’s Guide Table 21-2 Menu 1.1 Configure Dynamic DNS FIELD DESCRIPTION EXAMPLE Service Provider This is the name of your Dynamic DNS service provider. WWW.DynDNS.ORG (default) Active Press [SPACE BAR] to select Yes and then press [ENTER] to make dynamic DNS active.

  • Page 175: Figure 22-1 Menu 2 Wan Backup Setup

    Prestige 660H Series User’s Guide Chapter 22 Menu 2 WAN Backup Setup This chapter describes how to configure traffic redirect and dial-backup using menu 2 and 2.1. 22.1 Introduction to WAN Backup Setup This chapter explains how to configure the Prestige for traffic redirect and dial backup connections. 22.2 Configuring Dial Backup in Menu 2 From the main menu, enter 2 to open menu 2.

  • Page 176: Figure 22-2 Menu 2.1Traffic Redirect Setup

    Prestige 660H Series User’s Guide Table 22-1 Menu 2 WAN Backup Setup FIELD DESCRIPTION Recovery Interval(sec) When the Prestige is using a lower priority connection (usually a WAN backup connection), it periodically checks to whether or not it can use a higher priority connection.

  • Page 177: Chapter 22 Menu 2 Wan Backup Setup

    Prestige 660H Series User’s Guide Table 22-2 Menu 2.1Traffic Redirect Setup FIELD DESCRIPTION Metric This field sets this route's priority among the routes the Prestige uses. The metric represents the "cost of transmission". A router determines the best route for transmission by choosing a path with the lowest "cost".

  • Page 179: Chapter 23 Menu 3 Lan Setup

    Prestige 660H Series User’s Guide Chapter 23 Menu 3 LAN Setup This chapter covers how to configure your wired Local Area Network (LAN) settings. 23.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 - LAN Setup. From the main menu, enter 3 to display menu 3.

  • Page 180: Protocol Dependent Ethernet Setup

    Prestige 660H Series User’s Guide 23.2 Protocol Dependent Ethernet Setup Depending on the protocols for your applications, you need to configure the respective Ethernet Setup, as outlined below. ♦ For TCP/IP Ethernet setup refer to the Internet Access Application chapter. ♦...

  • Page 181: Table 23-2 Tcp/Ip Ethernet Setup

    Prestige 660H Series User’s Guide Table 23-1 DHCP Ethernet Setup FIELD DESCRIPTION EXAMPLE Primary DNS Server Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP clients along with the IP address and the subnet Secondary DNS Server mask.

  • Page 183: Chapter 24 Internet Access

    Prestige 660H Series User’s Guide Chapter 24 Internet Access This chapter shows you how to configure the LAN and WAN of your Prestige for Internet access 24.1 Internet Access Overview Refer to the chapters on the web configurator’s wizard, LAN and WAN screens for more background information on fields in the SMT screens covered in this chapter.

  • Page 184: Ip Alias Setup

    Prestige 660H Series User’s Guide 24.4 IP Alias Setup Use menu 3.2 to configure the first network. Move the cursor to Edit IP Alias field and press [SPACEBAR] to choose Yes and press [ENTER] to configure the second and third network. Menu 3.2 - TCP/IP and DHCP Setup DHCP Setup DHCP= Server...

  • Page 185: Route Ip Setup

    Prestige 660H Series User’s Guide Menu 3.2.1 - IP Alias Setup IP Alias 1= No IP Address= N/A IP Subnet Mask= N/A RIP Direction= N/A Version= N/A Incoming protocol filters= N/A Outgoing protocol filters= N/A IP Alias 2= No IP Address= N/A IP Subnet Mask= N/A RIP Direction= N/A Version= N/A...

  • Page 186: Internet Access Configuration

    Prestige 660H Series User’s Guide Menu 1 - General Setup System Name= ? Location= location Contact Person's Name= Domain Name= Edit Dynamic DNS= No Route IP= Yes Bridge= No Press ENTER to Confirm or ESC to Cancel: Figure 24-5 Menu 1 General Setup 24.6 Internet Access Configuration Menu 4 allows you to enter the Internet Access information in one screen.

  • Page 187: Table 24-2 Menu 4 Internet Access Setup

    Prestige 660H Series User’s Guide Table 24-2 Menu 4 Internet Access Setup FIELD DESCRIPTION EXAMPLE ISP’s Name Enter the name of your Internet Service Provider. This information is for MyIsp identification purposes only. Encapsulation SPACE BAR ENET ENCAP Press [ ] to select the method of encapsulation used by your ISP.

  • Page 189: Chapter 25 Remote Node Configuration

    Prestige 660H Series User’s Guide Chapter 25 Remote Node Configuration This chapter covers remote node configuration. 25.1 Remote Node Setup Overview This section describes the protocol-independent parameters for a remote node. A remote node is required for placing calls to a remote gateway. A remote node represents both the remote gateway and the network behind it across a WAN connection.

  • Page 190: Figure 25-1 Menu 11 Remote Node Setup

    Prestige 660H Series User’s Guide Menu 11 - Remote Node Setup 1. MyISP (ISP, NAT) 2. ________ 3. ________ 4. ________ 5. ________ 6. ________ 7. ________ 8. ________ Enter Node # to Edit: Figure 25-1 Menu 11 Remote Node Setup 25.2.2 Encapsulation and Multiplexing Scenarios For Internet access you should use the encapsulation and multiplexing methods used by your ISP.

  • Page 191: Figure 25-2 Menu 11.1 Remote Node Profile

    Prestige 660H Series User’s Guide Menu 11.1 - Remote Node Profile Rem Node Name= MyISP Route= IP Edit IP/Bridge Active= Yes Bridge= No Options in menu 11.3. Encapsulation= RFC 1483 Edit IP/Bridge= No Multiplexing= LLC-based Edit ATM Options= No Service Name= N/A Edit Advance Options= N/A Edit ATM Options Incoming:...
  • Page 192 Prestige 660H Series User’s Guide Table 25-1 Menu 11.1 Remote Node Profile FIELD DESCRIPTION EXAMPLE My Password Type the password assigned by your ISP when the Prestige calls this remote node. Authen This field sets the authentication protocol used for outgoing calls. Options for this field are: CHAP/PAP –...

  • Page 193: Remote Node Network Layer Options

    Prestige 660H Series User’s Guide 25.2.3 Outgoing Authentication Protocol For obvious reasons, you should employ the strongest authentication protocol possible. However, some vendors’ implementation includes specific authentication protocol in the user profile. It will disconnect if the negotiated protocol is different from that in the user profile, even when the negotiated protocol is stronger than specified.

  • Page 194: My Wan Addr Sample Ip Addresses

    Prestige 660H Series User’s Guide Table 25-2 Menu 11.3 Remote Node Network Layer Options FIELD DESCRIPTION EXAMPLE Rem Subnet Type the subnet mask assigned to the remote node. Mask My WAN Some implementations, especially UNIX derivatives, require separate IP network Addr numbers for the WAN and LAN links and each end to have a unique address within the WAN network number.

  • Page 195: Remote Node Filter

    Prestige 660H Series User’s Guide Figure 25-4 Sample IP Addresses for a TCP/IP LAN-to-LAN Connection 25.4 Remote Node Filter Move the cursor to the Edit Filter Sets field in menu 11.1, then press [SPACE BAR] to select Yes. Press [ENTER] to display Menu 11.5 – Remote Node Filter. Use Menu 11.5 –...

  • Page 196: Editing Atm Layer Options

    Prestige 660H Series User’s Guide Menu 11.5 - Remote Node Filter Input Filter Sets: protocol filters= device filters= Output Filter Sets: protocol filters= device filters= Call Filter Sets: protocol filters= device filters= Enter here to CONFIRM or ESC to CANCEL: Figure 25-6 Menu 11.5 Remote Node Filter (PPPoA or PPPoE Encapsulation) 25.5 Editing ATM Layer Options Follow the steps shown next to edit Menu 11.6 –...

  • Page 197: Figure 25-8 Menu 11.6 For Llc-Based Multiplexing Or Ppp Encapsulation

    Prestige 660H Series User’s Guide 25.5.2 LLC-based Multiplexing or PPP Encapsulation For LLC-based multiplexing or PPP encapsulation, one VC carries multiple protocols with protocol identifying information being contained in each packet header. Menu 11.6 - Remote Node ATM Layer Options VPI/VCI (LLC-Multiplexing or PPP-Encapsulation) VPI #= 8 VCI #= 35...

  • Page 198: Figure 25-10 Menu 11.8 Advance Setup Options

    Prestige 660H Series User’s Guide Move the cursor to the Edit Advance Options field, press [SPACE BAR] to select Yes, then press [ENTER] to display Menu 11.8 – Advance Setup Options. Menu 11.8 - Advance Setup Options PPPoE pass-through= No Press ENTER to Confirm or ESC to Cancel: Figure 25-10 Menu 11.8 Advance Setup Options The following table describes the fields in this menu.

  • Page 199: Chapter 26 Static Route Setup

    Prestige 660H Series User’s Guide Chapter 26 Static Route Setup This chapter shows how to setup IP static routes. 26.1 IP Static Route Overview Static routes tell the Prestige routing information that it cannot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly connected to a remote node.

  • Page 200: Figure 26-2 Menu 12 Static Route Setup

    Prestige 660H Series User’s Guide Menu 12 - Static Route Setup 1. IP Static Route 3. Bridge Static Route Please enter selection: Figure 26-2 Menu 12 Static Route Setup From menu 12, select 1 to open Menu 12.1 — IP Static Route Setup (shown next). Menu 12.1 - IP Static Route Setup 1.

  • Page 201: Figure 26-4 Menu12.1.1 Edit Ip Static Route

    Prestige 660H Series User’s Guide Menu 12.1.1 - Edit IP Static Route Route #: 1 Route Name= ? Active= No Destination IP Address= ? IP Subnet Mask= ? Gateway IP Address= ? Metric= 2 Private= No Press ENTER to Confirm or ESC to Cancel: Figure 26-4 Menu12.1.1 Edit IP Static Route The following table describes the fields for Menu 12.1.1 –...

  • Page 203: Chapter 27 Bridging Setup

    Prestige 660H Series User’s Guide Chapter 27 Bridging Setup This chapter shows you how to configure the bridging parameters of your Prestige. 27.1 Bridging in General Bridging bases the forwarding decision on the MAC (Media Access Control), or hardware address, while routing does it on the network layer (IP) address.

  • Page 204: Figure 27-1 Menu 11.1 Remote Node Profile

    Prestige 660H Series User’s Guide Menu 11.1 - Remote Node Profile Rem Node Name= ? Route= IP Active= Yes Bridge= Yes Encapsulation= ENET ENCAP Edit IP/Bridge= Yes Multiplexing= VC-based Edit ATM Options= No Service Name= N/A Edit Advance Options= N/A Incoming: Telco Option: Rem Login= N/A...

  • Page 205: Figure 27-3 Menu 12.3.1 Edit Bridge Static Route

    Prestige 660H Series User’s Guide Table 27-1 Remote Node Network Layer Options: Bridge Fields FIELD DESCRIPTION Bridge (menu 11.1) Make sure this field is set to Yes. Edit IP/Bridge (menu Press [SPACE BAR] to select Yes and press [ENTER] to display menu 11.3. 11.1) Ethernet Addr Timeout Type the time (in minutes) for the Prestige to retain the Ethernet Address information...

  • Page 207: Chapter 28 Network Address Translation (Nat)

    Prestige 660H Series User’s Guide Chapter 28 Network Address Translation (NAT) This chapter discusses how to configure NAT on the Prestige. 28.1 Using NAT You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the Prestige.

  • Page 208: Figure 28-1 Applying Nat In Menus 4

    Prestige 660H Series User’s Guide Menu 4 - Internet Access Setup ISP's Name= MyISP Encapsulation= RFC 1483 Multiplexing= LLC-based VPI #= 8 VCI #= 35 ATM QoS Type= UBR Peak Cell Rate (PCR)= 0 Sustain Cell Rate (SCR)= 0 Maximum Burst Size (MBS)= 0 My Login= N/A My Password= N/A ENET ENCAP Gateway= N/A...

  • Page 209: Nat Setup

    Prestige 660H Series User’s Guide Menu 11.3 - Remote Node Network Layer Options IP Options: Bridge Options: IP Address Assignment = Static Ethernet Addr Timeout(min)= N/A Rem IP Addr = 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.0 NAT= SUA Only Address Mapping Set= N/A Metric= 2 Private= No...

  • Page 210: Figure 28-3 Menu 15 Nat Setup

    Prestige 660H Series User’s Guide Menu 15 - NAT Setup 1. Address Mapping Sets 2. NAT Server Sets Enter Menu Selection Number: Figure 28-3 Menu 15 NAT Setup 28.3.1 Address Mapping Sets Enter 1 to bring up Menu 15.1 — Address Mapping Sets. Menu 15.1 - Address Mapping Sets 255.

  • Page 211: Figure 28-5 Menu 15.1.255 Sua Address Mapping Rules

    Prestige 660H Series User’s Guide Menu 15.1.255 - Address Mapping Rules Set Name= SUA Local Start IP Local End IP Global Start IP Global End IP Type --------------- --------------- --------------- --------------- ------ 0.0.0.0 255.255.255.255 0.0.0.0 0.0.0.0 Serve+ Figure 28-5 Menu 15.1.255 SUA Address Mapping Rules The following table explains the fields in this menu.

  • Page 212: Figure 28-6 Menu 15.1.1 First Set

    Prestige 660H Series User’s Guide Now let’s look at option 1 in menu 15.1. Enter 1 to bring up this menu. We’ll just look at the differences from the previous menu. Note the extra Action and Select Rule fields mean you can configure rules in this screen.

  • Page 213: Figure 28-7 Menu 15.1.1.1 Editing/Configuring An Individual Rule In A Set

    Prestige 660H Series User’s Guide FIELD DESRIPTION EXAMPLE Action The default is Edit. Edit means you want to edit a selected rule (see Edit following field). Insert Before means to insert a rule before the rule selected. The rules after the selected rule will then be moved down by one rule.

  • Page 214: Configuring A Server Behind Nat

    Prestige 660H Series User’s Guide Table 28-4 Menu 15.1.1.1 Editing/Configuring an Individual Rule in a Set FIELD DESCRIPTION EXAMPLE Global IP Start This is the starting inside global IP address (IGA). If you have a dynamic IP, 0.0.0.0 enter 0.0.0.0 as the Global IP Start. Note that Global IP Start can be set to 0.0.0.0 only if the types are Many-to-One or Server.

  • Page 215: General Nat Examples

    Prestige 660H Series User’s Guide Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address --------------------------------------------------- Default Default 0.0.0.0 192.168.1.33 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 28-9 Menu 15.2.1 NAT Server Setup Enter a port number in an unused Start Port No field.

  • Page 216: Figure 28-11 Nat Example 1

    Prestige 660H Series User’s Guide 28.5.1 Example 1: Internet Access Only In the following Internet access example, you only need one rule where your ILAs (Inside Local addresses) all map to one dynamic IGA (Inside Global Address) assigned by your ISP. Figure 28-11 NAT Example 1 Menu 4 - Internet Access Setup ISP's Name= MyISP...

  • Page 217: Figure 28-13 Nat Example 2

    Prestige 660H Series User’s Guide 28.5.2 Example 2: Internet Access with an Inside Server Figure 28-13 NAT Example 2 In this case, you do exactly as above (use the convenient pre-configured SUA Only set) and also go to menu 15.2 to specify the Inside Server behind the NAT as shown in the next figure. Menu 15.2.1 - NAT Server Setup (Used for SUA Only) Rule Start Port No.

  • Page 218: Figure 28-15 Nat Example 3

    Prestige 660H Series User’s Guide Map the other outgoing LAN traffic to IGA3 (Many : 1 mapping). You also map your third IGA to the web server and mail server on the LAN. Type Server allows you to specify multiple servers, of different types, to other computers behind NAT on the LAN. The example situation looks somewhat like this: Figure 28-15 NAT Example 3 In this case you need to configure Address Mapping Set 1 from Menu 15.1 - Address Mapping Sets.

  • Page 219: Figure 28-16 Example 3: Menu 11.3

    Prestige 660H Series User’s Guide Menu 11.3 - Remote Node Network Layer Options IP Options: Bridge Options: IP Address Assignment= Static Ethernet Addr Timeout (min)= 0 Rem IP Addr: 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.0 NAT= Full Feature Address Mapping Set= 2 Metric= 2 Private= No...

  • Page 220: Figure 28-18 Example 3: Final Menu 15.1.1

    Prestige 660H Series User’s Guide Menu 15.1.1 - Address Mapping Rules Set Name= Example3 Local Start IP Local End IP Global Start IP Global End IP Type --------------- --------------- --------------- --------------- ------ 1. 192.168.1.10 10.132.50.1 192.168.1.11 10.132.50.2 3. 0.0.0.0 255.255.255.255 10.132.50.3 10.132.50.3 Server...

  • Page 221: Figure 28-19 Nat Example 4

    Prestige 660H Series User’s Guide Menu 15.2.1 - NAT Server Setup Rule Start Port No. End Port No. IP Address --------------------------------------------------- Default Default 0.0.0.0 192.168.1.21 192.168.1.20 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Example 3: Menu 15.2.1 28.5.4 Example 4: NAT Unfriendly Application Programs Some applications do not support NAT Mapping using TCP or UDP port address translation.

  • Page 222: Figure 28-20 Example 4: Menu 15.1.1.1 Address Mapping Rule

    Prestige 660H Series User’s Guide Follow the steps outlined in example 3 to configure these two menus as follows. Menu 15.1.1.1 Address Mapping Rule Type= Many-to-Many No Overload Local IP: Start= 192.168.1.10 = 192.168.1.12 Global IP: Start= 10.132.50.1 = 10.132.50.3 Server Mapping Set= N/A Press ENTER to Confirm or ESC to Cancel: Figure 28-20 Example 4: Menu 15.1.1.1 Address Mapping Rule...

  • Page 223: Chapter 29 Enabling The Firewall

    Prestige 660H Series User’s Guide Chapter 29 Enabling the Firewall This chapter shows you how to get started with the Prestige firewall. 29.1 Remote Management and the Firewall When SMT menu 24.11 is configured to allow management (see the Remote Management chapter) and the firewall is enabled: ♦...

  • Page 224: Figure 29-1 Menu 21.2 Firewall Setup

    Prestige 660H Series User’s Guide Menu 21.2 - Firewall Setup The firewall protects against Denial of Service (DOS) attacks when it is active. The default Policy sets 1. allow all sessions originating from the LAN to the WAN and 2. deny all sessions originating from the WAN to the LAN You may define additional Policy rules or modify existing ones but please exercise extreme caution in doing so Active: Yes...

  • Page 225: Smt Advanced Management

    SMT Advanced Management SMT Advanced Management This part discusses filtering setup, SNMP, system security, system information and diagnosis, firmware and configuration file maintenance, system maintenance, remote management, IP Policy Routing, call scheduling and Internal SPTGEN for configuration of multiple Prestiges. See the web configurator parts of this guide for background information on features configurable by web configurator and SMT.

  • Page 227: Chapter 30 Filter Configuration

    Prestige 660H Series User’s Guide Chapter 30 Filter Configuration This chapter shows you how to create and apply filters. 30.1 About Filtering Your Prestige uses filters to decide whether or not to allow passage of a data packet and/or to make a call.

  • Page 228: Figure 30-2 Filter Rule Process

    Prestige 660H Series User’s Guide Start Packet intoFilter Fetch First Filter Set Filter Set Fetch Next Fetch First Filter Set Filter Rule Fetch Next Filter Rule Next filter Next Filter Set Rule Active? Available? Available? Execute Filter Rule Check Next Rule Forward Drop...

  • Page 229: Configuring A Filter Set For The Prestige

    Prestige 660H Series User’s Guide 30.2 Configuring a Filter Set for the Prestige To configure a filter set, follow the steps shown next. Enter 21 in the main menu to display Menu 21 – Filter and Firewall Setup. Enter 1 to display Menu 21.1 – Filter Set Configuration as shown next. Menu 21.1 - Filter Set Configuration Filter Filter...

  • Page 230: Filter Rules Summary Menus

    Prestige 660H Series User’s Guide Menu 21.1.3 - Filter Rules Summary # A Type Filter Rules M m n - - ---- --------------------------------------------------------------- - - - 1 Y IP Pr=17, SA=0.0.0.0, SP=137, DA=0.0.0.0, DP=53 N D F Enter Filter Rule Number (1-6) to Configure: Figure 30-5 NetBIOS_LAN Filter Rules Summary Menu 21.1.4 - Filter Rules Summary # A Type...

  • Page 231: Configuring A Filter Rule

    Prestige 660H Series User’s Guide Table 30-1 Abbreviations Used in the Filter Rules Summary Menu FIELD DESCRIPTION Action Matched. “F” means to forward the packet immediately and skip checking the remaining rules. “D” means to drop the packet. “N“ means to check the next rule. Action Not Matched.

  • Page 232: Figure 30-7 Menu 21.1.X.1 Tcp/Ip Filter Rule

    Prestige 660H Series User’s Guide To configure TCP/IP rules, select TCP/IP Filter Rule from the Filter Type field and press [ENTER] to open Menu 21.1.x.1 – TCP/IP Filter Rule, as shown next. Menu 21.1.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule Active= No IP Protocol= 0...
  • Page 233 Prestige 660H Series User’s Guide Table 30-3 Menu 21.1.x.1 TCP/IP Filter Rule FIELD DESCRIPTION EXAMPLE Port # Comp Select the comparison to apply to the destination port in the None packet against the value given in Destination: Port #. Choices are None, Less, Greater, Equal or Not Equal.

  • Page 234: Figure 30-8 Executing An Ip Filter

    Prestige 660H Series User’s Guide Packet into IP Filter Filter Active? Apply SrcAddrMask to Src Addr Check Src Not Matched IP Addr Matched Apply DestAddrMask to Dest Addr Check Dest Not Matched IP Addr Matched Check Not Matched IP Protocol Matched Check Src &...

  • Page 235: Figure 30-9 Menu 21.1.5.1 Generic Filter Rule

    Prestige 660H Series User’s Guide Note that it takes two hexadecimal digits to represent a byte, so if the length is 4, the value in either field will take 8 digits, for example, FFFFFFFF. To configure a generic rule select an empty filter set in menu 21, for example 5. Select Generic Filter Rule in the Filter Type field and press [ENTER] to open Menu 21.1.5.1 Generic Filter –...

  • Page 236: Filter Types And Nat

    Prestige 660H Series User’s Guide Table 30-4 Menu 21.1.5.1 Generic Filter Rule FIELD DESCRIPTION EXAMPLE Select the logging option from the following: None – No packets will be logged. None Action Matched – Only matching packets and rules will be logged. Action Not Matched –...

  • Page 237: Figure 30-11 Sample Telnet Filter

    Prestige 660H Series User’s Guide Figure 30-11 Sample Telnet Filter Enter 1 in the menu 21 to display Menu 21.1 — Filter Set Configuration. Enter the index number of the filter set you want to configure (in this case 6) Type a descriptive name or comment in the Edit Comments field (for example, TELNET_WAN) and press [ENTER].

  • Page 238: Figure 30-12 Menu 21.1.6.1 Sample Filter

    Prestige 660H Series User’s Guide Press [SPACE BAR] to choose this Menu 21.1.6.1 - TCP/IP Filter Rule filter rule type. The first filter rule Filter #: 6,1 type determines all subsequent filter Filter Type= TCP/IP Filter Rule types within a set. Active= Yes IP Protocol= 6 IP Source Route= No...

  • Page 239: Applying Filters And Factory Defaults

    Prestige 660H Series User’s Guide Menu 21.1.6 - Filter Rules Summary # A Type Filter Rules M m n - - ---- --------------------------------------------------------------- - - - 1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F Enter Filter Rule Number (1-6) to Configure: 1 M = N means an action can be taken immediately.

  • Page 240: Figure 30-14 Filtering Ethernet Traffic

    Prestige 660H Series User’s Guide Menu 3.1 – LAN Port Filter Setup Input Filter Sets: protocol filters= 3 device filters= Output Filter Sets: protocol filters= device filters= Press ENTER to Confirm or ESC to Cancel: Figure 30-14 Filtering Ethernet Traffic 30.7.2 Remote Node Filters Go to menu 11.5 (shown next) and type the number(s) of the filter set(s) as appropriate.

  • Page 241: Chapter 31 Snmp Configuration

    Prestige 660H Series User’s Guide Chapter 31 SNMP Configuration This chapter explains SNMP Configuration menu 22. 31.1 About SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your Prestige supports SNMP agent functionality, which allows a manager station to manage and monitor the Prestige through the network.

  • Page 242: Supported Mibs

    Trap - Used by the agent to inform the manager of some events. 31.2 Supported MIBs The Prestige supports RFC-1215 and MIB II as defined in RFC-1213 as well as ZyXEL private MIBs. The focus of the MIBs is to let administrators collect statistic data and monitor status and performance.

  • Page 243: Snmp Traps

    A trap is sent to the manager when receiving any SNMP RFC-1215) gets or sets requirements with wrong community (password). whyReboot (defined in ZYXEL- A trap is sent with the reason of restart before rebooting MIB) when the system is going to restart (warm start).

  • Page 245: Chapter 32 System Security

    Prestige 660H Series User’s Guide Chapter 32 System Security This chapter describes how to configure the system security on the Prestige. 32.1 System Security You can configure the system password.. 32.1.1 System Password Enter 23 in the main menu to display Menu 23 – System Security. You should change the default password.

  • Page 247: Chapter 33 System Information And Diagnosis

    Prestige 660H Series User’s Guide Chapter 33 System Information and Diagnosis This chapter covers the information and diagnostic tools in SMT menus 24.1 to 24.4. 33.1 Overview These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software.

  • Page 248: Figure 33-2 Menu 24.1 System Maintenance : Status

    Prestige 660H Series User’s Guide Menu 24.1 - System Maintenance - Status 04:35:40 Sat. Jan. 01, 2000 Node-Lnk Status TxPkts RxPkts Errors Tx B/s Rx B/s Up Time 1-1483 0:00:00 0:00:00 0:00:00 0:00:00 0:00:00 0:00:00 0:00:00 0:00:00 My WAN IP (from ISP): 0.0.0.0 Ethernet: WAN: Status:...

  • Page 249: System Information

    Prestige 660H Series User’s Guide Table 33-1 Menu 24.1 System Maintenance : Status FIELD DESCRIPTION Upstream This shows the upstream transfer rate in kbps. Speed Downstream This shows the downstream transfer rate in kbps. Speed CPU Load This specifies the percentage of CPU utilization. 33.3 System Information To get to the System Information: Enter 24 to display Menu 24 —...

  • Page 250: Figure 33-4 Menu 24.2.1 System Maintenance : Information

    Routing Refers to the routing protocol used. ZyNOS F/W Version Refers to the ZyNOS (ZyXEL Network Operating System) system firmware version. ZyNOS is a registered trademark of ZyXEL Communications Corporation. ADSL Chipset Vendor Displays the vendor of the ADSL chipset and DSL version.

  • Page 251: Log And Trace

    Prestige 660H Series User’s Guide Menu 24.2.2 – System Maintenance – Change Console Port Speed Console Port Speed: 9600 Press ENTER to Confirm or ESC to Cancel: Figure 33-5 Menu 24.2.2 System Maintenance : Change Console Port Speed Once you change the Prestige consol port speed, you must also set the speed parameter for the communication software you are using to connect to the Prestige.

  • Page 252: Figure 33-8 Menu 24.3.2 System Maintenance: Syslog And Accounting

    C02 CLID call refused L02 Call Terminated C02 Call Terminated Jul 19 11:19:27 192.168.102.2 ZYXEL: board 0 line 0 channel 0, call 1, C01 Outgoing Call dev=2 ch=0 40002 Jul 19 11:19:32 192.168.102.2 ZYXEL: board 0 line 0 channel 0, call 1, C02 OutCall Connected 64000 40002 Jul 19 11:20:06 192.168.102.2 ZYXEL: board 0 line 0 channel 0, call 1, C02...

  • Page 253: Diagnostic

    String = Packet trigger: Protocol=xx Data=xxxxxxxxxx…..x Protocol: (1:IP 2:IPX 3:IPXHC 4:BPDU 5:ATALK 6:IPNG) Data: We will send forty-eight Hex characters to the server Jul 19 11:28:39 192.168.102.2 ZYXEL: Packet Trigger: Protocol=1, Data=4500003c100100001f010004c0a86614ca849a7b08004a5c020001006162636465666768 696a6b6c6d6e6f7071727374 Jul 19 11:28:56 192.168.102.2 ZYXEL: Packet Trigger: Protocol=1,...

  • Page 254: Figure 33-9 Menu 24.4 System Maintenance: Diagnostic

    Prestige 660H Series User’s Guide Menu 24.4 - System Maintenance - Diagnostic xDSL System Reset xDSL 21. Reboot System 22. Command Mode TCP/IP 12. Ping Host Enter Menu Selection Number: Host IP Address= N/A Figure 33-9 Menu 24.4 System Maintenance: Diagnostic The following table describes the diagnostic tests available in menu 24.4 for and the connections.

  • Page 255: Chapter 34 Firmware And Configuration File Maintenance

    The configuration file (often called the romfile or rom-0) contains the factory default settings in the menus such as password, DHCP Setup, TCP/IP Setup, etc. It arrives from ZyXEL with a “rom” filename extension. Once you have customized the Prestige's settings, they can be saved back to your computer under a filename of your choosing.

  • Page 256: Figure 34-1 Telnet In Menu 24.5

    Prestige 660H Series User’s Guide Table 34-1 Filename Conventions FILE TYPE INTERNAL NAME EXTERNAL NAME DESCRIPTION Configuration Rom-0 This is the configuration filename on the Prestige. *.rom File Uploading the rom-0 file replaces the entire ROM file system, including your Prestige configurations, system-related data (including the default password), the error log and the trace log.

  • Page 257: Figure 34-2 Ftp Session Example

    331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel.rom 200 Port command okay 150 Opening data connection for STOR ras 226 File received OK ftp: 16384 bytes sent in 1.10Seconds 297.89Kbytes/sec.

  • Page 258: Backup Configuration

    Prestige 660H Series User’s Guide ♦ The IP address in the Secured Client IP field in menu 24.11 does not match the client IP. If it does not match, the Prestige will disconnect the Telnet session immediately. ♦ You have an SMT console session running. 34.2.6 Backup Configuration Using TFTP The Prestige supports the up/downloading of the firmware and the configuration file using TFTP (Trivial File Transfer Protocol) over LAN.

  • Page 259: Restore Configuration

    Prestige 660H Series User’s Guide Table 34-3 General Commands for GUI-based TFTP Clients COMMAND DESCRIPTION Remote File This is the filename on the Prestige. The filename for the firmware is “ras” and for the configuration file, is “rom-0”. Binary Transfer the file in binary mode. Abort Stop transfer of the file.

  • Page 260: Uploading Firmware And Configuration Files

    Prestige 660H Series User’s Guide Enter “open”, followed by a space and the IP address of your Prestige. Press [ENTER] when prompted for a username. Enter your password as requested (the default is “1234”). Enter “bin” to set transfer mode to binary. Find the “rom”...

  • Page 261: Figure 34-5 Telnet Into Menu 24.7.1 Upload System Firmware

    Prestige 660H Series User’s Guide Menu 24.7.1 - System Maintenance - Upload System Firmware To upload the system firmware, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type "open" and the IP address of your system. Then type "root" and SMT password as requested.

  • Page 262: Figure 34-7 Ftp Session Example Of Firmware File Upload

    Prestige 660H Series User’s Guide Press [ENTER] when prompted for a username. Enter your password as requested (the default is “1234”). Enter “bin” to set transfer mode to binary. Use “put” to transfer files from the computer to the Prestige, for example, “put firmware.bin ras” transfers the firmware on your computer (firmware.bin) to the Prestige and renames it “ras”.

  • Page 263: Tftp Upload Command Example

    Prestige 660H Series User’s Guide Use the TFTP client (see the example below) to transfer files between the Prestige and the computer. The file name for the firmware is “ras”. Note that the telnet connection must be active and the Prestige in CI mode before and during the TFTP transfer.

  • Page 265: Chapter 35 System Maintenance

    SMT, while adding some low-level setup and diagnostic functions. Enter the CI from the SMT by selecting menu 24.8. See the included disk or the zyxel.com web site for more detailed information on CI commands. Enter 8 from Menu 24 — System Maintenance. A list of valid commands can be found by typing help or ? at the command prompt.

  • Page 266: Call Control Support

    Prestige 660H Series User’s Guide Copyright (c) 1994 - 2004 ZyXEL Communications Corp. ras> ? Valid commands are: exit device ether config bridge hdap ras> Figure 35-2 Valid Commands 35.2 Call Control Support Call Control Support is only applicable when Encapsulation is set to PPPoE in menu 4 or menu 11.1.

  • Page 267: Time And Date Setting

    Prestige 660H Series User’s Guide Menu 24.9.1 - System Maintenance - Budget Management Remote Node Connection Elapsed Time/Total Period 1.MyIsp Time/Total Budget No Budget 2.-------- No Budget 3.-------- 4.-------- 5.-------- 6.-------- 7.-------- 8.-------- Reset Node (0 to update screen): Figure 35-4 Menu 24.9.1 System Maintenance: Budget Management The total budget is the time limit on the accumulated time for outgoing calls to a remote node.

  • Page 268: Figure 35-5 Menu 24 System Maintenance

    Prestige 660H Series User’s Guide Menu 24 - System Maintenance System Status System Information and Console Port Speed Log and Trace Diagnostic Backup Configuration Restore Configuration Upload Firmware Command Interpreter Mode Call Control 10. Time and Date Setting 11. Remote Management Enter Menu Selection Number: Figure 35-5 Menu 24 System Maintenance Then enter 10 to go to Menu 24.10 System Maintenance Time and Date Setting to update the time...

  • Page 269: Table 35-2 Menu 24.10 System Maintenance: Time And Date Setting

    Prestige 660H Series User’s Guide Table 35-2 Menu 24.10 System Maintenance: Time and Date Setting FIELD DESCRIPTION Use Time Server Enter the time service protocol that your time server sends when you turn on the when Bootup Prestige. Not all time servers support all protocols, so you may have to check with your ISP/network administrator or use trial and error to find a protocol that works.

  • Page 271: Chapter 36 Remote Management

    Prestige 660H Series User’s Guide Chapter 36 Remote Management This chapter covers remote management (SMT menu 24.11). 36.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which Prestige interface (if any) from which computers. When you configure remote management to allow management from the WAN, you still need to configure a firewall rule to allow access.

  • Page 272: Figure 36-1 Menu 24.11 Remote Management Control

    Prestige 660H Series User’s Guide Menu 24.11 - Remote Management Control TELNET Server: Server Port = 23 Server Access = ALL Secured Client IP = 0.0.0.0 FTP Server: Server Port = 21 Server Access = ALL Secured Client IP = 0.0.0.0 Web Server: Server Port = 80 Server Access = ALL...

  • Page 273: Remote Management And Nat

    Prestige 660H Series User’s Guide 36.3 Remote Management and NAT When NAT is enabled: ♦ Use the Prestige’s WAN IP address when configuring from the WAN. ♦ Use the Prestige’s LAN IP address when configuring from the LAN. 36.4 System Timeout There is a default system management idle timeout of five minutes (three hundred seconds).

  • Page 275: Chapter 37 Ip Policy Routing

    Prestige 660H Series User’s Guide Chapter 37 IP Policy Routing This chapter covers setting and applying policies used for IP routing. 37.1 IP Policy Routing Overview Traditionally, routing is based on the destination address only and the IAD takes the shortest path to forward a packet.

  • Page 276: Figure 37-1 Menu 25 Ip Routing Policy Setup

    Prestige 660H Series User’s Guide Menu 25 - IP Routing Policy Setup Policy Policy Set # Name Set # Name ------ ----------------- ------ ----------------- _______________ _______________ _______________ _______________ _______________ _______________ _______________ _______________ _______________ _______________ _______________ _______________ Enter Policy Set Number to Configure= 0 Edit Name= N/A Press ENTER to Confirm or ESC to Cancel: Figure 37-1 Menu 25 IP Routing Policy Setup...

  • Page 277: Figure 37-3 Menu 25.1.1 Ip Routing Policy

    Prestige 660H Series User’s Guide Table 37-1 Menu 25.1 IP Routing Policy Setup ABBREVIATION MEANING Criterion Source IP Address Source Port Destination IP Address Destination Port IP layer 4 protocol number (TCP=6, UDP=17…) Type of service of incoming packet Precedence of incoming packet Action Gateway IP address Outgoing Type of service...

  • Page 278: Applying An Ip Policy

    Prestige 660H Series User’s Guide Table 37-2 Menu 25.1.1 IP Routing Policy FIELD DESCRIPTION Policy Set Name This is the policy set name assigned in Menu 25 – IP Routing Policy Setup. Active Press [SPACE BAR] and then [ENTER] to select Yes to activate or No to deactivate the policy.

  • Page 279: Ip Policy Routing Example

    Prestige 660H Series User’s Guide Menu 3.2 - TCP/IP and DHCP Setup DHCP Setup DHCP= Server Client IP Pool Starting Address= 192.168.1.33 Size of Client IP Pool= 32 Primary DNS Server= 0.0.0.0 Secondary DNS Server= 0.0.0.0 Remote DHCP Server= N/A TCP/IP Setup: IP Address= 192.168.1.1 IP Subnet Mask= 255.255.255.0...

  • Page 280: Figure 37-6 Example Of Ip Policy Routing

    Prestige 660H Series User’s Guide Route 1 represents the default IP route and route 2 represents the configured IP route. Figure 37-6 Example of IP Policy Routing To force Web packets coming from clients with IP addresses of 192.168.1.33 to 192.168.1.64 to be routed to the Internet via the WAN port of the Prestige, follow the steps as shown next.
  • Page 281 Prestige 660H Series User’s Guide Check Menu 25.1 — IP Routing Policy Setup to see if the rule is added correctly. Create another policy set in menu 25. Create a rule in menu 25.1 for this set to route packets from any host (IP=0.0.0.0 means any host) with protocol TCP and port FTP access through another gateway (192.168.1.100).

  • Page 282: Figure 37-9 Applying Ip Policies Example

    Prestige 660H Series User’s Guide Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP Setup DHCP= Server Client IP Pool Starting Address= 192.168.1.33 Size of Client IP Pool= 64 Primary DNS Server= 0.0.0.0 Secondary DNS Server= 0.0.0.0 Remote DHCP Server= N/A TCP/IP Setup: IP Address= 192.168.1.1 IP Subnet Mask= 255.255.255.0...

  • Page 283: Chapter 38 Call Scheduling

    Prestige 660H Series User’s Guide Chapter 38 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulation only) allows you to dictate when a remote node should be called and for how long. 38.1 Introduction The call scheduling feature allows the Prestige to manage a remote node and dictate when a remote node should be called and for how long.

  • Page 284: Figure 38-2 Menu 26.1 Schedule Set Setup

    Prestige 660H Series User’s Guide Menu 26.1 Schedule Set Setup Active= Yes Start Date(yyyy-mm-dd)= 2000 - 01 - 01 How Often= Once Once: Date(yyyy-mm-dd)= 2000 - 01 - 01 Weekdays: Sunday= N/A Monday= N/A Tuesday= N/A Wednesday= N/A Thursday= N/A Friday= N/A Saturday= N/A Start Time(hh:mm)= 00 : 00...

  • Page 285: Figure 38-3 Applying Schedule Set(S) To A Remote Node (Pppoe)

    Prestige 660H Series User’s Guide Table 38-1 Menu 26.1 Schedule Set Setup FIELD DESCRIPTION EXAMPLE Action Forced On means that the connection is maintained whether or not there is a demand call on the line and will persist for the time period specified in the Forced On Duration field.

  • Page 287: Chapter 39 Internal Sptgen

    Prestige 660H Series User’s Guide Chapter 39 Internal SPTGEN 39.1 Internal SPTGEN Overview Internal SPTGEN (System Parameter Table Generator) is a configuration text file useful for efficient configuration of multiple Prestiges. Internal SPTGEN lets you configure, save and upload multiple menus at the same time using just one configuration text file –...

  • Page 288: Figure 39-1 Configuration Text File Format: Column Descriptions

    Prestige 660H Series User’s Guide This is the name of This is the Field Name column. One “=” sign, followed by one the menu. This is the name of the field as seen in space, must precede the corresponding SMT screen. everything you input.

  • Page 289: Internal Sptgen Ftp Download Example

    Prestige 660H Series User’s Guide field value is not legal error:-1 ROM-t is not saved, error Line ID:10000000 reboot to get the original configuration Bootbase Version: V2.02 | 2/22/2001 13:33:11 RAM: Size = 8192 Kbytes FLASH: Intel 8M *2 Figure 39-2 Invalid Parameter Entered: Command Line Example The Prestige will display the following if you enter parameter(s) that are valid.

  • Page 290: Figure 39-5 Internal Sptgen Ftp Upload Example

    Prestige 660H Series User’s Guide 1. Launch your FTP c:\ftp 192.168.1.1 application. 220 PPP FTP version 1.0 ready at Sat Jan 1 03:22:12 2000 User (192.168.1.1:(none)): 331 Enter PASS command 2. Enter "bin". The Password: command “bin” sets the transfer mode to binary. 230 Logged in ftp>bin 200 Type I OK...

  • Page 291: Appendices And Index

    Appendices and Index This part contains additional background information and an index or key terms.

  • Page 293: Appenidx A Troubleshooting

    Prestige 660H Series User’s Guide Appenidx A Troubleshooting This chapter covers potential problems and the corresponding remedies. Problems Starting Up the Prestige Chart A-1 Troubleshooting the Start-Up of Your Prestige PROBLEM CORRECTIVE ACTION None of the Make sure that the Prestige’s power adaptor is connected to the Prestige and plugged in to an LEDs turn on appropriate power source.

  • Page 294: Problems With The Lan Interface

    Prestige 660H Series User’s Guide Problems with the LAN Interface Chart A-4 Troubleshooting the LAN Interface PROBLEM CORRECTIVE ACTION I cannot access the If the 10M/100M LEDs on the front panel are both off, refer to Chart A-2 Troubleshooting Prestige from the the LAN LED.

  • Page 295: Problems With The Password

    Prestige 660H Series User’s Guide Problems with the Password Chart A-7 Troubleshooting the Password PROBLEM CORRECTIVE ACTION I cannot access the The username is “admin”. The default password is “1234”. The Password and Username Prestige. fields are case-sensitive. Make sure that you enter the correct password and username using the proper casing.

  • Page 297: Appenidx Bip Subnetting

    Prestige 660H Series User’s Guide Appenidx B IP Subnetting IP Addressing Routers “route” based on the network number. The router that delivers the data packet to the correct destination host uses the host ID. IP Classes An IP address is made up of four octets (eight bits), written in dotted decimal notation, for example, 192.168.1.1.

  • Page 298: Chart B-2 Allowed Ip Address Range By Class

    Prestige 660H Series User’s Guide Chart B-2 Allowed IP Address Range By Class CLASS ALLOWED RANGE OF FIRST OCTET ALLOWED RANGE OF FIRST OCTET (BINARY) (DECIMAL) Class A 00000000 to 01111111 0 to 127 10000000 to 10111111 Class B 128 to 191 Class C 11000000 to 11011111 192 to 223...

  • Page 299: Chart B-5 Subnet 1

    Prestige 660H Series User’s Guide Chart B-4 Alternative Subnet Mask Notation SUBNET MASK IP ADDRESS SUBNET MASK “1” BITS LAST OCTET BIT VALUE 255.255.255.240 1111 0000 255.255.255.248 1111 1000 255.255.255.252 1111 1100 The first mask shown is the class “C” natural mask. Normally if no mask is specified it is understood that the natural mask is being used.

  • Page 300: Chart B-7 Subnet 1

    Prestige 660H Series User’s Guide Chart B-6 Subnet 2 NETWORK NUMBER LAST OCTET BIT VALUE Subnet Mask (Binary) 11111111.11111111.11111111. 10000000 Subnet Address: 192.168.1.128 Lowest Host ID: 192.168.1.129 Broadcast Address: 192.168.1.255 Highest Host ID: 192.168.1.254 The remaining 7 bits determine the number of hosts each subnet can have. Host IDs of all zeros represent the subnet itself and host IDs of all ones are the broadcast address for that subnet, so the actual number of hosts available on each subnet in the example above is 2 –...

  • Page 301: Chart B-10 Subnet 4

    Prestige 660H Series User’s Guide Chart B-9 Subnet 3 NETWORK NUMBER LAST OCTET BIT VALUE IP Address (Binary) 11000000.10101000.00000001. 10000000 Subnet Mask (Binary) 11111111.11111111.11111111. 11000000 Subnet Address: 192.168.1.128 Lowest Host ID: 192.168.1.129 Broadcast Address: 192.168.1.191 Highest Host ID: 192.168.1.190 Chart B-10 Subnet 4 NETWORK NUMBER LAST OCTET BIT VALUE IP Address...

  • Page 302: Chart B-13 Class B Subnet Planning

    Prestige 660H Series User’s Guide Chart B-12 Class C Subnet Planning NO. “BORROWED” HOST BITS SUBNET MASK NO. SUBNETS NO. HOSTS PER SUBNET 255.255.255.248 (/29) 255.255.255.252 (/30) 255.255.255.254 (/31) Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet mask also determines which bits are part of the network number and which are part of the host ID.

  • Page 303: Appenidx Cpppoe

    Prestige 660H Series User’s Guide Appenidx C PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your PC to an ATM PVC (Permanent Virtual Circuit) that connects to a xDSL Access Concentrator where the PPP session terminates (see the next figure).

  • Page 304: Prestige As A Pppoe Client

    Prestige 660H Series User’s Guide Prestige as a PPPoE Client When using the Prestige as a PPPoE client, the computers on the LAN see only Ethernet and are not aware of PPPoE. This alleviates the administrator from having to manage the PPPoE clients on the individual PCs.

  • Page 305: Appenidx D Virtual Circuit Topology

    Prestige 660H Series User’s Guide Appenidx D Virtual Circuit Topology ATM is a connection-oriented technology, meaning that it sets up virtual circuits over which end systems communicate. The terminology for virtual circuits is as follows: • Virtual Channel Logical connections between ATM switches •...

  • Page 307: Example Internal Sptgen Screens

    Prestige 660H Series User’s Guide Appenidx E Example Internal SPTGEN Screens This appendix covers Prestige Internal SPTGEN screens. Abbreviations Used in the Example Internal SPTGEN Screens Table ABBREVIATION MEANING Field Identification Number (not seen in SMT screens) Field Name Parameter Values Allowed INPUT An example of what you may enter Applies to the Prestige.
  • Page 308 Prestige 660H Series User’s Guide / Menu 3.1 General Ethernet Setup (SMT menu 3.1) INPUT 30100001 = Input Protocol filters Set 1 30100002 = Input Protocol filters Set 2 = 256 30100003 = Input Protocol filters Set 3 = 256 The valid parameters 30100004 =...
  • Page 309 Prestige 660H Series User’s Guide 30200012 = Multicast <0(IGMP-v2) | 1(IGMP- v1) | 2(None)> 30200013 = IP Policies Set 1 (1~12) = 256 30200014 = IP Policies Set 2 (1~12) = 256 30200015 = IP Policies Set 3 (1~12) = 256 30200016 = IP Policies Set 4 (1~12) = 256...
  • Page 310 Prestige 660H Series User’s Guide 30201017 = RIP Direction <0(None) | 1(Both) | 2(In Only) | 3(Out Only)> 30201018 = Version <0(Rip-1) | 1(Rip-2B) |2(Rip-2M)> 30201019 = IP Alias #2 Incoming protocol = 256 filters Set 1 30201020 = IP Alias #2 Incoming protocol = 256 filters Set 2 30201021 =...
  • Page 311 Prestige 660H Series User’s Guide 30500011 = WEP Key4 */ MENU 3.5.1 WLAN MAC ADDRESS FILTER (SMT MENU 3.5.1) 30501001 = Mac Filter Active <0(No) | 1(Yes)> 30501002 = Filter Action <0(Allow) | 1(Deny)> 30501003 = Address 00:00:00:00:00 30501004 = Address 00:00:00:00:00 30501005 =...
  • Page 312 Prestige 660H Series User’s Guide 40000011 = Single User Account <0(No) | 1(Yes)> 40000012 = IP Address Assignment <0(Static)| 1(Dynamic)> 40000013 = IP Address = 0.0.0.0 40000014 = Remote IP address = 0.0.0.0 40000015 = Remote IP subnet mask This value must be between 0-32.
  • Page 313 Prestige 660H Series User’s Guide / Menu 12.1.1 IP Static Route Setup (SMT Menu 12.1.1) INPUT 120101001 = IP Static Route set #1, Name <Str> 120101002 = IP Static Route set #1, Active <0(No) |1(Yes)> 120101003 = IP Static Route set #1, = 0.0.0.0 Destination IP address 120101004 =...
  • Page 314 Prestige 660H Series User’s Guide INPUT 120104001 = IP Static Route set #4, Name <Str> 120104002 = IP Static Route set #4, Active <0(No) |1(Yes)> 120104003 = IP Static Route set #4, = 0.0.0.0 Destination IP address 120104004 = IP Static Route set #4, Destination IP subnetmask 120104005 = IP Static Route set #4, Gateway...
  • Page 315 Prestige 660H Series User’s Guide 120107001 = IP Static Route set #7, Name <Str> 120107002 = IP Static Route set #7, Active <0(No) |1(Yes)> 120107003 = IP Static Route set #7, = 0.0.0.0 Destination IP address 120107004 = IP Static Route set #7, Destination IP subnetmask 120107005 = IP Static Route set #7, Gateway...
  • Page 316 Prestige 660H Series User’s Guide 120110001 = IP Static Route set #10, Name 120110002 = IP Static Route set #10, Active <0(No) |1(Yes)> 120110003 = IP Static Route set #10, = 0.0.0.0 This value Destination IP address must be between 0- 120110004 = IP Static Route set #10, Destination IP subnetmask...
  • Page 317 Prestige 660H Series User’s Guide 120113002 = IP Static Route set #13, Active <0(No) |1(Yes)> 120113003 = IP Static Route set #13, = 0.0.0.0 Destination IP address 120113004 = IP Static Route set #13, Destination IP subnetmask 120113005 = IP Static Route set #13, Gateway = 0.0.0.0 120113006 = IP Static Route set #13, Metric...
  • Page 318 Prestige 660H Series User’s Guide 120116003 = IP Static Route set #16, = 0.0.0.0 Destination IP address 120116004 = IP Static Route set #16, Destination IP subnetmask 120116005 = IP Static Route set #16, Gateway = 0.0.0.0 120116006 = IP Static Route set #16, Metric 120116007 = IP Static Route set #16, Private <0(No)
  • Page 319 Prestige 660H Series User’s Guide 150000023 = SUA Server #6 Protocol <0(All)|6(TCP)|1 7(UDP)> 150000024 = SUA Server #6 Port Start 150000025 = SUA Server #6 Port End 150000026 = SUA Server #6 Local IP address = 0.0.0.0 150000027 = SUA Server #7 Active <0(No) | 1(Yes)>...
  • Page 320 Prestige 660H Series User’s Guide 150000054 = SUA Server #12 Port Start 150000055 = SUA Server #12 Port End 150000056 = SUA Server #12 Local IP address = 0.0.0.0 You may configure / Menu 21 Filter set #1 (SMT Menu 21) up to 12 filter sets INPUT...
  • Page 321 Prestige 660H Series User’s Guide 210102004 = IP Filter Set 1,Rule 2 Dest IP = 0.0.0.0 address 210102005 = IP Filter Set 1,Rule 2 Dest Subnet Mask 210102006 = IP Filter Set 1,Rule 2 Dest Port = 138 210102007 = IP Filter Set 1,Rule 2 Dest Port <0(none)|1(equal Comp...
  • Page 322 Prestige 660H Series User’s Guide 210103011 = IP Filter Set 1,Rule 3 Src Port <0(none)|1(equal Comp )|2(not equal)|3(less)|4 (greater)> 210103013 = IP Filter Set 1,Rule 3 Act Match <1(check next)|2(forward) |3(drop) 210103014 = IP Filter Set 1,Rule 3 Act Not <1(check Match next)|2(forward)
  • Page 323 Prestige 660H Series User’s Guide 210105003 = IP Filter Set 1,Rule 5 Protocol = 17 210105004 = IP Filter Set 1,Rule 5 Dest IP = 0.0.0.0 address 210105005 = IP Filter Set 1,Rule 5 Dest Subnet Mask 210105006 = IP Filter Set 1,Rule 5 Dest Port = 138 210105007 = IP Filter Set 1,Rule 5 Dest Port...
  • Page 324 Prestige 660H Series User’s Guide 210106010 = IP Filter Set 1,Rule 6 Src Port 210106011 = IP Filter Set 1,Rule 6 Src Port <0(none)|1(equal Comp )|2(not equal)|3(less)|4 (greater)> 210106013 = IP Filter Set 1,Rule 6 Act Match <1(check next)|2(forward) |3(drop)> 210106014 = IP Filter Set 1,Rule 6 Act Not <1(check...
  • Page 325 Prestige 660H Series User’s Guide 210201014 = IP Filter Set 2, Rule 1 Act Not <1(check Match next)|2(forward) |3(drop)> / Menu 21.1.2.2 Filter set #2, rule #2 (SMT Menu 21.1.2.2) INPUT 210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/I P)>...
  • Page 326 Prestige 660H Series User’s Guide 210203006 = IP Filter Set 2, Rule 3 Dest Port = 139 210203007 = IP Filter Set 2, Rule 3 Dest Port <0(none)|1(equal Comp )|2(not equal)|3(less)|4 (greater)> 210203008 = IP Filter Set 2, Rule 3 Src IP = 0.0.0.0 address 210203009 =...
  • Page 327 Prestige 660H Series User’s Guide 210204013 = IP Filter Set 2, Rule 4 Act Match <1(check next)|2(forward) |3(drop)> 210204014 = IP Filter Set 2, Rule 4 Act Not <1(check Match next)|2(forward) |3(drop)> / Menu 21.1.2.5 Filter set #2, rule #5 (SMT Menu 21.1.2.5) INPUT 210205001 = IP Filter Set 2, Rule 5 Type...
  • Page 328 Prestige 660H Series User’s Guide 210206004 = IP Filter Set 2, Rule 6 Dest IP = 0.0.0.0 address 210206005 = IP Filter Set 2, Rule 6 Dest Subnet Mask 210206006 = IP Filter Set 2, Rule 6 Dest Port = 139 210206007 = IP Filter Set 2, Rule 6 Dest Port <0(none)|1(equal...
  • Page 329 Prestige 660H Series User’s Guide 230200008 = Accounting Server IP Address 192.168.1. 230200009 = Accounting Server Port = 1823 230200010 = Accounting Server Shared Secret = 1234 */ Menu 23.4 System security: IEEE802.1x (SMT Menu 23.4) INPUT 230400002 = ReAuthentication Timer (in = 555 second) 230400003 =...
  • Page 330 Prestige 660H Series User’s Guide 990000001 = ADSL OPMD <0(etsi)|1(norma l)|2(gdmt)|3(mul timode)> E-24 Example Internal SPTGEN Screens...

  • Page 331: Installing Components

    Prestige 660H Series User’s Guide Appenidx F Setting up Your Computer’s IP Address All computers must have a 10M or 100M Ethernet adapter card and TCP/IP installed. Windows 95/98/Me/NT/2000/XP, Macintosh OS 7 and later operating systems and all versions of UNIX/LINUX include the software components you need to install and use TCP/IP on your computer.
  • Page 332 Prestige 660H Series User’s Guide In the Network window, click Add. Select Protocol and then click Add. Select Microsoft from the list of manufacturers. Select TCP/IP from the list of network protocols and then click OK. If you need Client for Microsoft Networks: Click Add.

  • Page 333: Verifying Settings

    Prestige 660H Series User’s Guide Click the DNS Configuration tab. -If you do not know your DNS information, select Disable DNS. -If you know your DNS information, select Enable DNS and type the information in the fields below (you may not need to fill them all in).
  • Page 334 Prestige 660H Series User’s Guide default gateway. Windows 2000/NT/XP 1. For Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel. 2. For Windows XP, click Network Right-click Local Area Connection Connections. For Windows 2000/NT, and then click Properties. click Network and Dial-up Connections.
  • Page 335 Prestige 660H Series User’s Guide 4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties. 5. The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). -If you have a dynamic IP address click Obtain an IP address automatically.
  • Page 336 Prestige 660H Series User’s Guide 6. -If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click Do one or more of the following if you want to configure additional IP addresses: -In the IP Settings tab, in IP addresses, click Add.
  • Page 337 Prestige 660H Series User’s Guide 7. In the Internet Protocol TCP/IP Properties window (the General tab in Windows XP): -Click Obtain DNS server address automatically if you do not know your DNS server IP address(es). -If you know your DNS server IP address(es), click Use the following DNS server addresses, and type them in the Preferred DNS server and Alternate DNS...

  • Page 338: Macintosh Os X

    Prestige 660H Series User’s Guide Select Ethernet built- in from the Connect via list. For dynamically assigned settings, select Using DHCP Server from the Configure: list. For statically assigned settings, do the following: -From the Configure box, select Manually. -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask box.
  • Page 339 Prestige 660H Series User’s Guide Click Network in the icon bar. - Select Automatic from the Location list. - Select Built-in Ethernet from the Show list. - Click the TCP/IP tab. For dynamically assigned settings, select Using DHCP from the Configure list. For statically assigned settings, do the following: -From the Configure box, select Manually.

  • Page 341: Appenidx G Splitters And Microfilters

    Prestige 660H Series User’s Guide Appenidx G Splitters and Microfilters This appendix tells you how to install a POTS splitter or a telephone microfilter. Connecting a POTS Splitter When you use the Full Rate (G.dmt) ADSL standard, you can use a POTS (Plain Old Telephone Service) splitter to separate the telephone and ADSL signals.

  • Page 342: Prestige With Isdn

    Prestige 660H Series User’s Guide Diagram G-2 Connecting a Microfilter Prestige With ISDN This section relates to people who use their Prestige with ADSL over ISDN (digital telephone service) only. The following is an example installation for the Prestige with ISDN. Diagram G-3 Prestige with ISDN Splitters and Microfilters...

  • Page 343: Appenidx H Log Descriptions

    Prestige 660H Series User’s Guide Appenidx H Log Descriptions This appendix provides descriptions of example log messages1. Chart H-1 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is The router has adjusted its time based on information from the time server.

  • Page 344: Chart H-3 Content Filtering Logs

    Prestige 660H Series User’s Guide Chart H-3 Content Filtering Logs MESSAGE NOTE DESCRIPTION (Destination) Web Block The Prestige blocked access to an address or domain name that had a forbidden keyword. Keyword Blocking (Destination) Web Block The Prestige blocked access to an IP address or domain name that contains ActiveX because the content filter is set to Contains ActiveX forbid ActiveX.

  • Page 345: Chart H-5 Access Logs

    Prestige 660H Series User’s Guide (Protocol) is the protocol of the packet (for example TCP or UDP) that triggered the log. (Direction) is the direction in which the packet was traveling (for example LAN to WAN or WAN to LAN) (Rule) is the number of the firewall rule that caused the log.

  • Page 346: Chart H-6 Tcp Reset Logs

    Prestige 660H Series User’s Guide Chart H-5 Access Logs LOG MESSAGE DESCRIPTION Router reply ICMP The router sent an ICMP response packet. This packet automatically bypasses the firewall. packet Remote access denied The router blocked a remote access attempt. Chart H-6 TCP Reset Logs LOG MESSAGE DESCRIPTION Firewall sent TCP...
  • Page 347 Prestige 660H Series User’s Guide Chart H-7 ICMP Notes TYPE CODE DESCRIPTION Parameter Problem Pointer indicates the error Timestamp Timestamp request message Timestamp Reply Timestamp reply message Information Request Information request message Information Reply Information reply message Log Descriptions...
  • Page 349 Prestige 660H Series User’s Guide Appenidx I Index Precedence ..........38-1 Precedence Example .....See precedence CDR ............33-6 Action for Matched Packets....... 12-8 CDR (Call Detail Record)......33-6 Address Assignment ........5-2 CHAP............25-4 ADSL, what is it? ........xxii Class Name ..........18-10 Alert ............11-3 Classes of IP Addresses ......
  • Page 350 Prestige 660H Series User’s Guide DSL (Digital Subscriber Line)....xxii Filtering Process DSL, What Is It? .........xxii Outgoing Packets........30-1 DSLAM ..See Digital Subscriber Line Access Finger ............7-5 Multiplexer Firewall Dynamic DNS......1-3, 8-1, 21-2 Access Methods........29-1 DYNDNS Wildcard ........8-1 Address Type.........
  • Page 351 Prestige 660H Series User’s Guide ICMP echo ..........10-5 IGMP ............5-3 Key Fields For Configuring Rules .....12-2 IGMP support ..........25-6 Install UPnP ..........16-2 Windows Me.......... 16-2 LAN ............33-2 Windows XP.......... 16-3 LAN Setup ........... 5-1, 6-1 Interactive Applications......37-1 Internal SPTGEN........
  • Page 352 Prestige 660H Series User’s Guide Ordering Rules ........28-6 Receiving..........33-2 What NAT does ........7-1 Transmission ......... 33-2 NAT Traversal ...........16-1 Read Me First ..........xx NetBIOS commands ........10-5 Related Documentation .........xx Network Address Translation ....24-5 Remote DHCP Server ....... 23-3 Network Address Translation (NAT) ..28-1 Remote Management Network Management......
  • Page 353 Prestige 660H Series User’s Guide Services............7-5 System Parameter Table Generator....39-1 setup a schedule ......... 38-1 System Status ..........33-2 SMT Menu Overview ........ 20-1 System Timeout ....... 15-2, 36-3 SMTP............7-5 SMTP Error Messages ....... 17-4 Smurf ..........10-4, 10-5 TCP Maximum Incomplete....11-2, 11-3 SNMP ............
  • Page 354 Prestige 660H Series User’s Guide WAN Setup..........22-1 ZyNOS ..........34-1, 34-2 WAN to LAN Rules........12-3 ZyNOS F/W Version......... 34-1 Web Configurator ..2-1, 2-2, 10-2, 10-9, 12-2, ZyXEL Limited Warranty 29-2 Note ............iv Wizard Setup..........3-1 ZyXEL’s Firewall Introduction ........... 10-2 XMODEM protocol ........34-2...

This manual is also suitable for:

P-660h-63P-660h-67

Table of Contents