Home

ZyXEL Communications 100 Network Card User Manual

1. Server The IP address of the RADIUS server Address The IP port number used by the authentication server The default is port 1645 1645 Key A password used to authenticate your Prestige to the RADIUS service Please note that this is between the Prestige and the server it has nothing to do with the dial in users Telnet Configuration 11 5 Prestige 153 153X WAN Bridge Routers 11 2 2 1 The Key Field The key or password must match that in the client file in the RADIUS server s etc raddb directory as shown in the following example Client Name Key 192 168 1 1 1234 After you configure a RADIUS server your Prestige will use it to authenticate all users that it can not find in its internal dial up user list see Menu 14 11 2 3 Adding Users to the RADIUS Database To add a user to the RADIUS database edit the users file in the RADIUS server s etc raddb directory and add a line similar to the following Joeuser Password joepassword 11 2 4 Using RADIUS Authentication for CLID To use RADIUS for CLID authentication create a user record in the users file where the user name the first field is the telephone number and the password the second field is always Zyxel CLID case sensitive The regular user name is put in a User Name field The following is an example of a CLID user record 5551212 Password Zyxel CLID User Name joeuser Zyxel Callback Option Mandat
2. Private N A SAP RIP Timeout min 3 RIP Direction N A Version N A Bridge Options Dial On Broadcast No Ethernet Addr Timeout min 0 Enter here to CONFIRM or ESC to CANCEL Figure 7 2 Menu 11 3 Remote Node Bridging Options Bridging Setup 7 3 Prestige 153 153X WAN Bridge Routers Table 7 2 describes the bridging dependent parameters in the Remote Node Profile and Network Layers menus Table 7 2 Remote Node Bridge Options a ERR Make sure this field is set to Yes Edit IP IPX Bridge Press the space bar to change it to Yes and press Enter to go to the Network Layer Options Menu Dial On Broadcast This field is necessary for your Prestige on the caller side LAN When set to Yes any broadcasts coming from the LAN will trigger your Prestige to make a call to this remote node If it is set to No your Prestige will not make the outgoing call Ethernet Addr Timeout min In this field enter the time number of minutes that you wish your Prestige to retain the Ethernet Addr information in its internal tables while the line is down If this information is retained your Prestige will not have to recompile the tables when the line is brought back up Once you have completed filling in the Network Layer Options Menu press Enter to return to Menu 11 1 Then press Enter at the message Press ENTER to Confirm to save your configuration or press Esc to cancel 7 4 Bridging Setup Prestige 153
3. 6 7 Prestige 153 153X WAN Bridge Routers 6 5 1 IPX Remote Node Setup Follow the procedure in Chapter 5 to configure the protocol independent parameters in Menu 11 1 Remote Node Profile For the IPX related parameters in Menu 11 3 Remote Node Network Layer Options follow the instructions below If you want the Prestige to receive incoming calls you must also configure the default dial in parameters in Menu 13 To edit Menu 11 3 Remote Node Network Layer Options shown in Figure 6 4 follow these steps Step 3 In Menu 11 1 make sure IPX is among the protocols in the Route field The Route field should display Route IPX or Route IP IPX Step 4 Move the cursor to the Edit IP IPX Bridge field then press the space bar to toggle and set the value to Yes and press Enter to edit Menu 11 3 Network Layer Options Menu 11 3 Remote Node Network Layer Options IP Options IPX Options Rem IP Addr Dial On Query No Rem Subnet Mask N A Rem LAN Net 00000000 My WAN Addr N A My WAN Net 00000000 Single User Account N A Hop Count 1 Server IP Addr N A Tick Count 2 Metric N A W D Spoofing min 3 Private N A SAP RIP Timeout min 3 RIP Direction N A Version N A Bridge Options Dial On Broadcast N A Ethernet Addr Timeout min N A Enter here to CONFIRM or ESC to CANCEL Figure 6 4 Menu 11 3 Remote Node Novell IPX Options 6 8 IPX Configuration Prestige 153 153X WAN Bridge Routers Ta
4. Call Back No Outgoing My Login My Password Authen CHAP PAP Pri Phone Sec Phone Device Type 56K Modem Route IP Bridge No Edit PPP Options No Rem IP Addr Edit IP IPX Bridge No Edit Script Options No Telco Option Allocated Budget min 0 Period hr 0 Session Options Input Filter Sets Output Filter Sets Call Filter Sets Idle Timeout sec 300 Press ENTER to CONFIRM or ESC to CANCEL Press Space Bar to Toggle Figure 4 2 Menu 11 1 Remote Node Profile for Dial up Lines Remote Node Configuration Prestige 153 153X WAN Bridge Routers Table 4 1 contains the instructions on how to configure the Remote Node Menu for dial up lines Table 4 1 Remote Node Profile Menu Fields for Dial up Lines Rem Node Name This is a required field Enter a descriptive name for the remote node e g Corp This field can be up to eight characters This name must be unique from any other remote node name or remote dial in user name Active Press the space bar to toggle between Yes and No Press space bar to toggle Inactive nodes are displayed with a minus sign at the Yes No beginning of the name in Menu 11 Connection Type Use the space bar to toggle between Switch and Press space Leased If Leased is selected moving the cursor to the bar to toggle next field will bring you to Submenu 11 1 2 for leased line configuration Switch Leased Call Direction If this parameter is
5. N means check the next rule Refers to Action Not Matched F means to forward the packet D means to drop the packet N means check the next rule The protocol dependent filter rules abbreviation are listed as follows If the filter type is IP the following abbreviations listed in Table 9 2 will be used Table 9 2 Abbreviations Used If Filter Type Is IP Protocol Source Address Source Port number a Destination Address DP Destination Port number Filter Configuration 9 5 Prestige 153 153X WAN Bridge Routers e If the filter type is IPX the following abbreviations listed in Table 9 3 will be used Table 9 3 Abbreviations Used If Filter Type Is IPX IPX Packet Type E Source Socket DS 0 Destination Socket e If the filter type is GEN generic the following abbreviations listed in Table 9 4 will be used Table 9 4 Abbreviations Used If Filter Type Is GEN Abbreviation Description Len Length Refer to the next section for information on configuring the filter rules 9 6 Filter Configuration Prestige 153 153X WAN Bridge Routers 9 3 Configuring a Filter Rule To configure a filter rule enter its number in Menu 21 1 Filter Rules Summary and press Enter to open Menu 21 1 1 for the rule There are three types of filter rules TCP IP IPX and Generic Depending on the type of rule the parameters below the type will be different Use the space bar to select the type of rule that yo
6. This symbol refers to an option that is not available Enter Save your configuration by pressing Enter at the message Press ENTER to confirm or ESC to cancel Saving the data on the screen will take you in most cases to the previous menu Exit the SMT Type 99 then Type 99 at the Main Menu prompt and press Enter to exit the SMT press Enter interface Save your configuration 2 8 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers The SMT displays the Main Menu as shown in Figure 2 5 Copyright c 1994 1997 ZyXEL Communications Corp Prestige 153 Main Menu Getting Started Advanced Management 1 General Setup 21 Filter Set Configuration 2 WAN Setup 22 SNMP Configuration 3 Ethernet Setup 23 System Security 4 Internet Access Setup 24 System Maintenance Advanced Applications 11 Remote Node Setup 12 Static Routing Setup 13 Default Dial in Setup 14 Dial in User Setup Enter Menu Selection Number Figure 2 5 SMT Main Menu The following table shows the Main Menu Summary Table 2 3 Main Menu Summary Menu Title Description 1 General Setup Use this menu to setup general information and enable routing or bridging of specific protocols WAN Setup Use this menu to setup WAN port configuration sa Ethernet Setup Use this menu to setup Ethernet configuration ral Internet Access Setup A quick and easy way to setup Internet connection 11 Remote Node Setu
7. 13 16 System Maintenance Prestige 153 153X WAN Bridge Routers 13 9 1 Blacklist The phone numbers on the blacklist are numbers that the Prestige had problems connecting in the past The only operation allowed is for you to take a number off the list by entering its index number Menu 24 9 2 shows the list of telephone numbers that have been blacklisted Menu 24 9 2 Blacklist Phone Number Al 2 3 4 Ds 6 dy 8 Remove Selection 1 14 Figure 13 14 Menu 24 9 2 Blacklist System Maintenance 13 17 Prestige 153 153X WAN Bridge Routers 13 9 2 Budget Management Menu 24 9 3 shows the budget management statistics for outgoing calls Menu 24 9 3 Budget Management Remote Node Connection Time Total Budget Elapsed Time Total Period No Budget No Budget Dial in User Budget Budget Reset Node 0 to update screen Figure 13 15 Menu 24 9 3 Budget Management The total budget is the time limit on the accumulated time for outgoing call to a remote node or for calling back to the dial in users collectively When this limit is reached the call will be dropped and further outgoing calls to that remote node or dial in user callback will be blocked After each period the total budget is reset The default for the total budget is 0 minutes and the period is 0 hours meaning no budget control You can reset the accumulated connection time in this menu by entering the index of a remote node or the dial in use
8. Enter the IP address of the remote gateway Edit IP IPX Bridge Options To edit the parameters select Yes and press Enter Press space bar This will bring you to Menu 11 3 Remote Node to select Yes Network Layer Options For more information on this then press Enter screen refer to the chapter pertaining to your specific protocol Edit Script Options To edit the parameters select Yes and press Enter Select Yes then This will bring you to Menu 11 4 Remote Node Script press Enter Telco Option Allocated Budget This field sets a ceiling for outgoing call time to this Default 0 min remote node The default for this field is 0 for no budget control Period hr This field will set the time interval to reset the above outgoing call budget control Session Options In these fields enter the filter set s you wish to apply to Default Blank the incoming and outgoing traffic between this remote Input Filter Sets node and your Prestige You can choose from 12 Output Filter Sets and different filter sets In addition you can link up to 4 filter Call Filter Sets sets together for further customization e g 1 5 9 12 Note that spaces are accepted in this field For more information on customizing your filter sets see Chapter 9 The default is blank i e no filters defined Remote Node Configuration 4 7 Prestige 153 153X WAN Bridge Routers Table 4 1 Remote Node Profile Menu Fields for Dial up
9. SNAP 6 1 SNMP 10 1 socket 6 11 spoofing 6 4 SUA 1 2 1 9 3 10 3 11 5 4 12 1 subnet mask 3 2 3 6 5 4 5 8 subtract persist 4 10 4 13 synchronous 1 3 2 18 2 19 syslog 13 7 system status 13 2 target utility 4 10 4 12 TCP IP 3 4 5 1 TCP IP Filter Rule 9 7 telecommuter 8 2 telnet 12 1 tick count 6 9 6 11 trace 13 5 troubleshooting 14 1 UTP 2 5 VT100 2 2 WAN port 2 5 2 14 watchdog 6 9 X 25 PAD 2 20 4 6 Prestige 153 153X WAN Bridge Routers 2 Index
10. System Maintenance allows you to backup the current Prestige configuration to your workstation Backup is highly recommended once your Prestige is functioning properly You must perform the backup and restore through the console port Any serial communications program should work fine however you must use XMODEM protocol to perform the download upload Please note that terms download and upload are relative to the workstation Download means to transfer from another machine to the workstation while upload means from your workstation to another machine 13 6 Restore Configuration Selecting option 6 from Menu 24 System Maintenance to restore the configuration from your workstation to the Prestige Again you must use the console port and XMODEM protocol to restore the configuration Keep in mind that the configuration is stored in the flash ROM in the Prestige so even if power failure should occur your configuration is safe 13 12 System Maintenance Prestige 153 153X WAN Bridge Routers 13 7 Firmware Update Menu 24 7 System Maintenance Upload Firmware allows you to upgrade the system firmware and the ROM file system Uploading is only possible through the console port Note that this function erases the old data before installing the new one Do not attempt to update unless you have the new firmware at hand There are 2 components in the system RAS code program code and ROM File system as shown Figure 13 10
11. This device must accept any interference received including interference that may cause undesired operations This equipment has been tested and found to comply with the limits for a CLASS B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications If this equipment does cause harmful interference to radio television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures 1 Reorient or relocate the receiving antenna 2 Increase the separation between the equipment and the receiver 3 Connect the equipment into an outlet on a circuit different from that to which the receiver is connected 4 Consult the dealer or an experienced radio TV technician for help Notice 1 Changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment Notice 2 Shielded RS 232 cables are required to be used to ensure compliance with FCC Part 15 and it is the responsibility of the user to provide and use shielded RS 232 cables FCC Interference Statement iii Pre
12. at any time to cancel 4 1 6 Editing Login Script For some remote gateways text login is required before PPP negotiation is started The Prestige provides a script facility for this purpose The script has six programmable sets each set is composed of an Expect string and a Send string After matching a message from the server to the Expect field the Prestige returns the set s Send string to the server For instance a typical login sequence starts with the server printing a banner a login prompt for you to enter the user name and a password prompt to enter the password Welcome to Acme Inc Login myLogin Password To handle the first prompt you specify ogin as the Expect string and myLogin as the Send string in set 1 The reason for leaving out the leading L is to avoid having to know exactly whether it is upper or lower case Similarly you specify word as the Expect string and your password as the Send string for the second prompt in set 2 You can use two variables SUSERNAME and SPASSWORD all UPPER case to represent the actual user name and password in the script so they will not show in the clear They are replaced with the outgoing login name and password in the remote node when the Prestige sees them in a Send string Please note that both variables must been entered exactly as shown No other characters may appear before or af
13. or press Esc at any time to cancel 3 6 Internet Access Prestige 153 153X WAN Bridge Routers 3 4 Internet Access Configuration Menu 4 allows you to enter the Internet access parameters in one screen Menu 4 is actually a simplified setup for one of the remote nodes that you can access through menu 11 Before you configure your Prestige for Internet access you need to collect your Internet account information from your ISP Use Table 3 3to record your Internet Account Information Table 3 3 Internet Account Information Internet Account Information Write your account information here IP Address of the ISP s Gateway Optional eo 4 DNS server address es for your workstations Sas Internet Access 3 7 Prestige 153 153X WAN Bridge Routers From the Main Menu enter option 4 Internet Access Setup to go to Menu 4 Internet Access Setup as displayed in Figure 3 3 Figure 3 3 Menu 4 Internet Access Setup ISP s Name ISP Gateway IP Addr Connection Type Switch Leased Ports N A Pri Phone Sec Phone My Login My Password x x Single User Account No Local IP Addr N A Server IP Addr N A Edit Script Options No Device Type 56K Modem Enter here to CONFIRM or ESC to CANCEL Menu 4 Internet Access Setup Internet Access Prestige 153 153X WAN Bridge Routers Table 3 4 contain instructions on how to configure your Prestige for Internet access Table 3 4 Internet A
14. to enable SUA Local IP Addr If your ISP did notassigns you a static IP address enter 0 0 0 0 otherwise enter that IP address here Server IP Addr If you want to make a server accessible to outside users enter that server s inside LAN IP address here otherwise enter 0 0 0 0 in this field Press Enter at the message Press ENTER to Confirm to save your configuration or press Esc at any time to cancel At this point your Prestige will ask if you wish to test the Internet connection If you select Yes the Prestige will call the ISP and test the connection If the test fails note the error message on the screen and take the appropriate troubleshooting steps 3 6 Configuring Backup ISP Accounts If you have more than one ISP account you can configure the secondary ISP as a backup You can switch to the backup ISP in the event that the primary ISP is out of service The SUA feature can be enabled for all of these accounts 3 6 1 Configure a Backup ISP To configure a backup ISP Account follow these steps Step 1 Configure your primary ISP using Menu 4 as described earlier in this chapter Step 2 Enter Menu 11 then select an unused remote node Step 3 In Menu 11 1 choose a name for your backup ISP account then set the Active field to No and enter your outgoing login name password and phone number s The Remote IP Address field should be set to 1 1 1 1 Step 4 In Menu 11 3 set the remote node s
15. 1 is probably adequate for most networks unless you have a unusual network topology 3 2 Internet Access Prestige 153 153X WAN Bridge Routers Both RIP 2B and RIP 2M sends the routing data in RIP 2 format the difference being that RIP 2B uses subnet broadcasting while RIP 2M uses multicasting Multicasting can reduce the load on non router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets However if one router uses multicasting then all routers on your network must use multicasting also By default RIP direction is set to both and the version set to RIP 1 3 2 3 DHCP Configuration DHCP Dynamic Host Configuration Protocol allows the individual clients workstations to obtain the TCP IP configuration at start up from a centralized DHCP server The Prestige has the DHCP server capability built in and is enabled by default 3 2 3 1 IP Pool Setup The Prestige is pre configured with a pool of 32 IP addresses starting from 192 168 1 33 to 192 168 1 64 This configuration leaves 31 IP addresses excluding the Prestige itself in the lower range for other server machines e g server for mail FTP telnet web etc that you may have 3 2 3 2 DNS Server Address es DNS Domain Name System is for mapping a domain name to its corresponding IP address and vice versa e g the IP address of www zyxel com is 204 217 0 2 The DNS server s is extremely important because wi
16. 13 18 XV Prestige 153 153X WAN Bridge Routers Table 1 1 Table 2 1 Table 2 2 Table 2 3 Table 2 4 Table 2 5 Table 2 6 Table 2 7 Table 2 8 Table 3 1 Table 3 2 Table 3 3 Table 3 4 Table 3 5 Table 4 1 Table 4 2 Table 4 3 Table 4 4 Table 5 1 Table 5 2 Table 5 3 Table 6 1 Table 6 2 Table 6 3 Table 7 1 Table 7 2 Table 7 3 Table 8 1 Table 8 2 Table 8 3 Table 9 1 Table 9 2 List of Tables LED Function SA EDR ciel tee aa ites arate eee 1 5 item Checkliste ER ede dias ea eaaa a ante te 2 1 Main Menu Commands 2 ccccecceeeece cece ee eeceeeeeaaeeeeeeeeeaeeeeaeeesseeeeaaeeesaeeesaeees 2 8 Main Menmu SUMMA ieren een enen EEEE dasa aA E E EE EE EEA ds 2 9 General Setup Menu Fields ccceceeecceeeeeecceeeeeeceeeeeeeaaeeeeeeaaaaeeeeaaaaeeeeaaaaeees 2 13 Prestige 153 Async WAN Port Setup Menu Fields 2 eeeeeeeeeeeeeeeeeeeees 2 16 Prestige 153X Sync Async WAN Port Setup Menu Fields 0eeeeeeee es 2 19 Advanced WAN Port Setup AT Commands Fields cseeeeeeeneeeeeeeeeeeeeeee 2 22 Advanced WAN Port Setup Call Control Parameters ceeeeeeeeeeeeeeeeees 2 24 DHCP Ethernet Setup Menu Fields ccceeeceeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeaaeeeeeeaaeeees 3 5 TCP IP Ethernet Setup Menu Fields ceeeeeeceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeneees 3 6 Internet Account Informations area le ler ar AT 3
17. 6 6 gateway 5 8 6 11 7 6 Generic Filter Rule 9 10 hop count 6 9 6 11 IANA 3 2 idle timeout 4 9 8 7 8 10 Internet access 1 9 3 1 13 10 IP address 3 2 3 6 3 12 4 7 5 3 5 8 7 6 8 6 IP network number 3 2 IP pool 3 3 3 5 8 6 IP static route 5 6 IPX 1 2 1 10 4 7 6 1 7 2 IPX Filter Rule 9 12 IPX network number 6 1 6 6 6 9 6 11 8 7 IPX node number 6 1 6 11 Index l 1 Prestige 153 153X WAN Bridge Routers IPX pool 8 7 IPX static route 6 10 ISDN 1 1 ISDN TA 1 1 ISP 3 2 3 9 3 14 LAN 1 9 3 2 leased line 1 1 2 16 2 19 3 9 4 2 4 16 leased port 4 17 log 13 5 login 3 9 4 4 4 17 MAC 7 1 manual call 13 10 metric 5 5 5 8 MP 1 1 1 2 4 9 4 12 8 6 Multilink See MP Multilink Protocol See MP mutual authentication 8 5 NAT 1 2 NetWare 6 1 NIC 2 2 PAD 2 16 PAP 1 2 1 11 4 5 4 18 8 5 password 2 7 2 10 3 9 4 4 4 5 4 17 8 9 10 1 11 1 period 4 7 phone number 3 9 4 6 4 19 8 9 ping 13 10 POTS 1 4 PPP 1 1 1 2 4 7 4 11 8 5 private 5 5 5 8 PSTN 1 1 1 3 RADIUS 1 2 8 1 11 3 RAS code 13 14 reboot 13 10 redirect 13 10 remote node 4 1 6 8 7 3 8 1 2 Index restore 13 12 retry count 2 24 retry interval 2 24 RIP 3 2 3 6 5 5 RJ 45 2 5 ROM file 13 13 13 15 SAP 6 4 script 3 10 3 15 4 7 4 13 seed router 6 6 server 3 12 5 4 6 11 7 2 8 3 Single User Account See SUA SMT 2 8
18. CSU DSU 2 20 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers 2 8 3 Prestige 153 153X Advanced WAN Port Setup The Advanced WAN Port Setup Menu allows you to configure additional AT Commands for the WAN device and the call control parameters Follow the common Advanced WAN Port Setup procedure in this section for both Prestige 153 and 153X Step 1 In Menu 2 1 move the cursor to the Advanced Setup field and press the space bar to select Yes then press Enter Step 2 When Menu 2 1 1 appears fill in the appropriate AT commands and call control parameters for the WAN device connected to the WAN port as shown in Figure 2 13 Menu 2 1 1 Advanced WAN Port Setup AT Command Strings Call Control Dial atd Dial Timeout sec 60 Drop ath Retry Counter 0 Answer ata Retry Interval sec N A Drop Timeout sec 20 Drop DTR When Hang Up Call Back Delay sec 15 AT Response String CLID NMBR Called Id TO Speed CONNECT Enter here to CONFIRM or ESC to CANCEL Figure 2 13 Menu 2 1 1 Advanced WAN Port Setup Hardware Installation amp Initial Setup 2 21 Prestige 153 153X WAN Bridge Routers Refer to Table 2 7 for details on how to fill in the AT commands fields Table 2 7 Advanced WAN Port Setup AT Commands Fields feos dC AT Command Strings Dial Drop Answer Drop DTR When Hang Up AT Response Strings CLID Calling Line IDentification Called ID Spe
19. Chapter 8 Dial in Server Configuration You can configure your Prestige to receive calls from remote dial in users e g telecommuters as well as remote nodes There are several differences between dial in users and remote nodes as summarized in Table 8 1 Table 8 1 Remote Dial in Users Remote Nodes Comparison Chart Remote Dial in Users Remote Nodes Your Prestige will only answer calls from remote Your Prestige can make calls to and receive calls dial in users it will not make call to them from the remote node All remote dial in users share one common set of Each remote node can have its own set of parameters as defined in the Default Dial In Setup parameters such as Bandwidth On Demand Menu 13 Protocol Security etc This chapter discusses how to setup default dial in parameters for both remote node and remote dial in users The following sections give two examples of how your Prestige can be configured as a dial in server Due to memory constraints your Prestige can only store a finite number of users locally If there are more remote dial in users than what Prestige can support locally you can use an external RADIUS server to provide authentication service For details on using a RADIUS server see the Using RADIUS Authentication section in Chapter 11 System Security Dial in Server Configuration 8 1 Prestige 153 153X WAN Bridge Routers 8 1 Remote Access Server Telecommuting enables people to work at remote
20. Comp Operation Enter the IPX packet type 1 byte in hexadecimal you wish to filter The popular types are in hexdecimal 01 RIP 04 SAP 05 SPX Sequenced Packet eXchange 11 NCP Netware Core Protocol 14 Novell NetBIOS Enter the destination source network numbers 4 byte in hexadecimal of the packet that you wish to filter Enter in the destination source node number 6 byte in hexadecimal of the packet you wish to filter Enter the destination source socket number 2 byte in hexadecimal of the packets that you wish to filter Select the comparison you wish to apply to the destination source socket in the packet against that specified above This field is applicable only if one of the Socket fields is 0452 or 0453 indicating SAP and RIP packets There are seven options for this field that specify the type of the packet None RIP Request RIP Response SAP Request SAP Response SAP Get Nearest Server Request SAP Get Nearest Server Response Once you have completed filling in Menu 21 1 3 IPX Filter Rule press Enter at the message Press Enter to Confirm to save your configuration or press Esc to cancel This data will now be displayed on Menu 21 1 Filter Rules Summary Filter Configuration 9 13 Prestige 153 153X WAN Bridge Routers Chapter 10 SNMP Configuration 10 1 About SNMP SNMP Simple Network Management Protocol is a protocol for network management and monitor
21. From the System Security Menu select option 1 Change Password to bring up Menu 23 1 System Security Change Password 2 10 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers Step 3 When the Submenu 23 1 System Security Change Password appears as shown in Figure 2 7 enter the existing system password i e 1234 then press Enter Menu 23 1 System Security Change Password Old Password XXXX New Password XXXX Retype to confirm Enter here to CONFIRM or ESC to CANCEL Figure 2 7 Menu 23 1 System Security Change Password Step 4 Enter your new system password and press Enter Step 5 Re type your new system password for confirmation and press Enter Hardware Installation amp Initial Setup 2 11 Prestige 153 153X WAN Bridge Routers 2 7 General Setup The Menu 1 General Setup contains administrative and system related information Step 1 Select option 1 General Setup in the Main Menu by typing 1 at the menu selection number prompt Step 2 The Menu 1 General Setup screen appears as shown in Figure 2 8 Fill in the required fields marked and turn on the individual protocols for your particular application as explained in Table 2 4 Menu 1 General Setup System Name p153 Location location Contact Person s Name name Route IP Yes Route IPX No Bridge No Press ENTER to Confirm or ESC to Cancel Figure 2 8 Menu 1 General Setup 2
22. Lines continued me en oem Session Options This value specifies the number of idle seconds that Default 300sec elapses before the remote node is automatically Idle Timeout sec disconnected Idle seconds is the period of time where no data is transmitted from your Prestige Administrative packets such as RIP are not counted as data The default is 300 seconds 5 minutes Once you have completed filling in Menu 11 1 1 Remote Node Profile press Enter at the message Press ENTER to Confirm to save your configuration or press Esc at any time to cancel 4 1 2 Outgoing Authentication Protocol Generally speaking you should employ the strongest authentication protocol possible for obvious reasons However some vendor s implementation includes specific authentication protocol in the user profile It will disconnect if the negotiated protocol is different from that in the user profile even when the negotiated protocol is stronger than specified If you encounter the case where the peer disconnects right after a successful authentication please make sure that you specify the correct authentication protocol when connecting to such an implementation 4 1 3 PPP Multilink The Prestige uses the PPP Multilink Protocol PPP MP to bundle multiple links in a single connection to boost the effective throughput between two nodes The bundle works best when the member links are of the same type of call e g POTS vs ISDN and at
23. Menu 24 7 System Maintenance Upload Firmware 1 Load RAS Code 2 Load ROM File Enter Menu Selection Number Figure 13 10 Menu 24 7 System Maintenance Upload Firmware System Maintenance 13 13 Prestige 153 153X WAN Bridge Routers 13 7 1 Upload RAS code RAS Remote Access Service code refers to the firmware that controls the main function of the Prestige Menu 24 7 1 shows you the instructions for uploading RAS code If you answer yes to the prompt the Prestige will reboot automatically Press any key when you see the message Press Any key to enter Debug Mode within 3 seconds to enter debug mode Once in debug mode type at ur and wait for your Prestige to respond with Starting XMODEM upload to begin uploading the new firmware upload procedure varies depending on the software used to access your Prestige After successfully uploading the new firmware type at go to restart your Prestige 13 14 Menu 24 7 1 System Maintenance Upload RAS Code To load the RAS code type atur while in debug mode and wait for Starting XMODEM upload before beginning to upload code Type atgo after code has successfully loaded to start RAS Proceeding with the upload will erase the current RAS code Do You Which To Proceed Y N Figure 13 11 Menu 24 7 1 Uploading RAS Code System Maintenance Prestige 153 153X WAN Bridge Routers 13 7 2 Uploading ROM File The configuration system related data
24. No No You can configure this field even if Dial in User is set to Yes in which case your Prestige will accept the IP address if the remote peer specifies one otherwise an IP address is assigned from the pool IP Pool IP Start Addr This field is applicable only if you selected Yes in the Dial In IP Address Supplied By IP Pool field The IP pool contains contiguous IP addresses and this field specifies the first one in the pool IP Count 1 3 In this field enter the number 1 2 or 8 of 1 2 3 addresses in the IP Pool For example if the starting address is 192 168 135 5 and the count is 2 then the pool will have 192 68 135 5 and 192 68 135 6 8 6 Dial in Server Configuration Prestige 153 153X WAN Bridge Routers Table 8 2 Default Dial in Setup Fields continued en on Dial In IPX Net Num This field tells your Prestige to provide the remote host with an Yes No Supplied By IPX Pool IPX network number from the pool Otherwise your Prestige will generate a random IPX network number Default No IPX Start Net Num This field is applicable only if you selected Yes in the Dial In IPX Net Num Supplied By IPX Pool field The IPX pool contains contiguous IPX network numbers and this field specifies the first one in the pool IPX Count 1 16 Enter the number 1 16 of network numbers in the IPX 1 to 16 Pool For example if the starting number is 12345678 and the count is
25. Prestige 153 153X WAN Bridge Routers Table 3 4 Internet Access Setup Menu Fields continued roe ese Single User Account See Section 3 5 for a detailed discussion on the Single User Yes No Account feature Edit Script Option To edit the parameters select Yes and press Enter This will bring you to Menu 4 1 Internet Setup Script This field is not applicable if the Connection Type is Leased Device Type The Prestige only chooses a free device of the selected Device Space bar to Type to dial out This field is not applicable if the Connection Type toggle is Leased Selections Modem ISDN TA X 25 PAD 56K Modem Press Enter at the message Press ENTER to Confirm to confirm your configuration or press Esc at any time to cancel At this point the Prestige will ask if you wish to test the Internet connection If you select Yes your Prestige will call the ISP to test the Internet connection If the test fails note the error message that you receive on screen and take the appropriate troubleshooting steps 3 10 Internet Access Prestige 153 153X WAN Bridge Routers 3 5 Single User Account Typically if there are multiple users on the LAN wanting to concurrently access the Internet you will have to lease a block of legal or globally unique IP addresses from the ISP The Single User Account SUA feature allows you to have the same benefits as having multiple legal addresses but only pay for one IP a
26. Static routes tell the Prestige routing information that it cannot learn automatically through other means This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly connected to a remote node Each remote node specifies only the network to which the gateway is directly connected and the Prestige has no knowledge of the networks beyond For instance the Prestige knows about network N2 in the following diagram through remote node R However the Prestige is unable to route a packet to network N3 because it doesn t know that there is a route through remote node R The static routes are for you to tell the Prestige about the networks beyond the remote nodes N1 N 2 ED i de Prestige 100MH Figure 5 4 Example of Static Routing Topology 5 6 Remote Node TCP IP Configuration Prestige 153 153X WAN Bridge Routers To configure an IP static route use Menu 12 Static Route Setup as displayed in Figure 5 5 Menu 12 Static Route Setup IP Static Route Bridge Static Route distant Srs 23 24 IPX Static Route Enter Selection Number Figure 5 5 Menu 12 Static Route Setup From Menu 12 select one of the IP Static Routes to open Menu 12 2 Edit IP Static Route as shown in Figure 5 6 Menu 12 1 Edit IP Static Route Route 1 Route Name Active No Destination IP Address IP Subnet Mask Gateway IP Address Metric 2 Private No P
27. WAN Bridge Routers Examples of typical error and information messages are presented in Figure 13 5 60 4 PPO7 AN promiseteots mo 61 4 PINI completed 63 e PINI ade lt 0 gt Clear Error Log Figure 13 5 Examples of Error and Information Messages 13 6 System Maintenance Prestige 153 153X WAN Bridge Routers 13 3 2 Syslog And Accounting The Prestige uses the UNIX syslog facility to log the CDR Call Detail Record and system messages to a syslog server Syslog and accounting can be configured in Menu 24 3 2 System Maintenance Syslog and Accounting as shown in Figure 13 6 Menu 24 3 2 System Maintenance Syslog and Accounting Syslog Active No Syslog IP Address Log Facility Local 1 Press ENTER to Confirm or ESC to Cancel Press Space Bar to Toggle Figure 13 6 Menu 24 3 2 System Maintenance Syslog and Accounting You need to configure the following 3 parameters described in Table 13 2 to activate syslog Table 13 2 System Maintenance Menu Syslog Parameters Use the space bar to turn on or off the syslog Syslog IP Address Enter the IP Address of your syslog server Log Facility Use the space bar to toggle between the 7 different Local options The log facility allows you to log the message in different files in the server Please refer to your UNIX manual for more detail System Maintenance 13 7 Prestige 153 153X WAN Bridge Routers Your Prestige sends three types of syslog me
28. approximately the same speed Due to the fragmentation reconstruction overhead associated with MP you may not get a linear increase in throughput when a link is added The overhead becomes more significant as the number of links increases thus bundling more than 2 links is not recommended because of the rapidly diminishing return for the subsequent links The number of links in an MP bundle can be statically configured or dynamically determined at runtime as explained in the following section 4 8 Remote Node Configuration Prestige 153 153X WAN Bridge Routers 4 1 4 Bandwidth on Demand The Bandwidth on Demand BOD feature adds or subtracts links dynamically according to traffic demand After the initial call the Prestige uses BAP Bandwidth Allocation Protocol to ask the peer for additional telephone number if BACP Bandwidth Allocation Control Protocol is negotiated Otherwise the Prestige uses the statically configured primary and secondary telephone numbers of the remote node Bandwidth on demand is controlled by the Minimum and Maximum links of a remote node BOD is enabled if the number of Maximum Ports is greater than the Minimum Ports Otherwise BOD is disabled When BOD is disabled and the number of ports is greater than 1 the Prestige will try to bring up as many links as specified however the number of links will be independent of traffic demand When bandwidth on demand is enabled a second link will be brought
29. are high speed asynchronous RS 232 serial ports that allow you to connect a modem or an ISDN Terminal Adapter TA to the Prestige Two of the ports on P153X can be configured to support synchronous operation also The WAN ports support up to 230 4kbps kilobits per second throughput For brevity s sake we will refer to the modem and the TA categorically as external WAN device or simply WAN device from now on 1 3 1 WAN Terminology e DCE amp DTE On the two ends of an RS 232 connection the equipment closest to the telephone line is called the DCE Data Communications Equipment and the other the DTE Data Terminal Equipment In our case the modem or the ISDN TA is the DCE and the Prestige is the DTE e PSTN amp POTS Collectively the interconnected network of the voice grade networks of the individual telephone companies is called PSTN Public Switched Telephone Network and a regular telephone line is often referred to as a POTS Plain Old Telephone Service line Getting to Know Your Bridge Router 1 3 Prestige 153 153X WAN Bridge Routers 1 4 Front Panel LEDs and Back Panel Ports 1 4 1 Prestige 153 153X Front Panel X 3 R a ETHERNET WAN 1_ WAN 2 _ WAN 3 Prestige 153 153X PWR TST LNK RX TX COL RDY TX RX RDY TXRX RDY TX RX WAN Bridge Router i A A i N PWR Power Indicator I RUN Running Indicator Blinking R ETHERNET LNK RX TX COL Receive Transmit Collisions on LA
30. be used for other LAN to LAN connections 1 8 Getting to Know Your Bridge Router Prestige 153 153X WAN Bridge Routers 1 5 2 Multi protocol Multilink LAN to LAN Connection You can use the Prestige to connect two geographically dispersed networks over the WAN connection The Prestige supports TCP IP and Novell IPX routing as well as transparent bridging for other network layer protocols Your Prestige can also bundle multiple links in a single connection for greater bandwidth A typical LAN to LAN application for your Prestige is shown in Figure 1 5 Branch Office LAN q gt Coporate LAN WIN 95 NT NOVELL BRIDGING Ethernet LAN Ethernet LAN esec PSTN ISDN Network Modem ISDN TA Prestige 153 153X Prestige 153 153X Figure 1 5 LAN to LAN Connection Application Getting to Know Your Bridge Router 1 9 Prestige 153 153X WAN Bridge Routers 1 5 3 Remote Access Server Your Prestige allows remote users to dial in and gain access to your LAN This feature enables users that have workstations with remote access capabilities e g Windows 95 to dial in to access the network resources without physically being in the office Either PAP Password Authentication Protocol or CHAP Challenge Handshake Authentication Protocol authentication can be used to control the access from the remote users You can also use callback for security and or accounting purposes Figure 1 6 shows how a remote u
31. in Server Application ceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeenees 8 3 Menu 13 Default Dial in Setup cece cece eee eeeeeeeeeeeeceeeeeeeaaeeeeeeaaeeeeeeaaenees 8 4 Menu 14 Dial in User Setup ceeececeeeeeeeceeeeeeeceaeeeeeeeaaeeeeaeaaeeeeaeaaeeeeaaaaees 8 8 Menu 14 1 Edit Dial in USer ec cece cece ener cece terse seeeeeeeaaaeeeeesaaeeeeeaaeaees 8 8 Outgoing Packet Filtering ProCeSS ceceeeeeeeeeeeeeeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaaaees 9 2 Menu 21 Filter Set Configuration ceceeeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeaaeeeeeeaaaeees 9 3 Menu 21 1 Filter Rules SUMMALY ceeeeeeeeeeeeeeeeeeeee cee eeeeaaeeeeeeaeaeeeeeaaeeees 9 4 Menu 21 1 1 TCP IP Filter Rule oo eee aaa essens ere ane NERE 9 7 Menu 21 1 2 Generic Filter Rule inn iela es 9 10 Menu 21 1 3 IPX Filter Rule ESS ER SE nog 9 12 Menu 22 SNMP Configuration ccceeceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeaaeeeeenaes 10 1 Menu 23 System SeCUrity eee cecceeee cece eeeeeeeeeeeeeeeeeaeeeeeeeeeeeeeeaeeeeeeeeeeeeeenees 11 1 Menu 23 1 System Security Change Password ceseeeeeeeeeeeeeeeeeeeeeees 11 2 Menu 23 2 System Security External Server ccceeceeeeeeeeeeeeeeeeeeeeeeenees 11 4 Telnet Configuration on a TCP IP Network cseeeeeeeneeeeeeeeeeeeeeeaeeeeeeaneeees 12 1 Menu 24 System Maintenance ecceeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeaeeeeeeeaeeeee
32. is set to None or Server your Prestige will act as a DHCP server If set to None DHCP server will be disabled Server When DHCP is used the following four items need to be set Client IP Pool Starting This field specifies the first of the contiguous addresses in 192 168 1 33 Address the IP address pool Size of Client IP Pool This field specifies the size or count of the IP address pool 32 Primary DNS Server Enter the IP addresses of the DNS servers The DNS Secondary DNS Server Servers are passed to the DHCP clients along with the IP address and the subnet mask Internet Access 3 5 Prestige 153 153X WAN Bridge Routers Follow Table 3 2 to configure TCP IP parameters for the Ethernet port Table 3 2 TCP IP Ethernet Setup Menu Fields pa owns Sd TCP IP Setup IP Address Enter the IP address of your Prestige in dotted decimal notation 192 168 1 1 default IP Subnet Mask Your Prestige will automatically calculate the subnet mask based on 255 255 255 0 the IP address that you assign Unless you are implementing subnetting use the value computed by the Prestige RIP Direction Press the space bar to select the RIP direction among Both In Both Only Out Only default Version Press the space bar to select the RIP version among RIP 1 RIP RIP 1 2B RIP 2M default When you have completed this menu press Enter at the prompt Press ENTER to Confirm to save your configuration
33. must first telnet to the inside server and then telnet from the server to the Prestige using its inside LAN IP address If no insider server is specified telnet to the SUA s IP address will connect to the Prestige directly 12 3 Telnet Capabilities 12 3 1 Single Administrator To prevent confusion and discrepancy on the configuration your Prestige only allows one administrator to log in at any time Your Prestige also gives priority to the console port over telnet If you have already connected to your Prestige via telnet you will be logged out if another user logs in to the Prestige via the console port 12 3 2 System Timeout There is a system timeout of 5 minutes 300 seconds for either the console port or telnet Your Prestige will automatically log you out if you do nothing in this timeout period except when it is continuously updating the status in Menu 24 1 12 2 Telnet Configuration Prestige 153 153X WAN Bridge Routers Chapter 13 System Maintenance This chapter covers the diagnostic tools that help you to maintain your Prestige These tools include updates on system status port status log and trace capabilities and upgrades for the system software This chapter describes how to use these tools in detail Select menu 24 in the main menu to bring up Menu 24 System Maintenance as shown in Figure 13 1 Menu 24 System Maintenance System Status Terminal Baud Rate Log and Trace Diagnostic Backup Configurati
34. number see below No The default is no callback No o Optional The user can choose to disable callback i Optional Mandatory The user can not disable callback Mandatory Phone This option allows the user to specify the call back telephone number on a Default No Supplied call by call basis This is useful for when your Prestige returns a call back to by Caller a mobile user at different numbers e g a sales rep in a hotel If the setting is Yes the user must send the callback number of his her choice to the Prestige in PPP negotiation Note that the default is No i e your Prestige always calls back to the fixed callback number specified in the next field Callback If Phone Supplied by Caller is No then you must enter the telephone Phone number to which your Prestige will call back Otherwise a N A will appear in the field Dial in Server Configuration 8 9 Prestige 153 153X WAN Bridge Routers Table 8 3 Edit Dial in User Menu Fields continued rat onion Ca Rem CLID If you enable CLID Authen field in Menu 13 then you need to specify the telephone number from which this user calls Your Prestige will check the CLID in the incoming call against the CLIDs in the database If they do not match and CLID Authen is Required your Prestige will not answer the call Idle Time Enter the idle time in seconds This time out determines how long the dial in Default 3
35. number is busy or does not answer your Prestige will dial the Secondary Phone number if available Some areas require dialing the pound sign before the phone number for local calls A symbol may be included at the beginning of the phone numbers as required Device Type Use the space bar to choose the following selections Modem Modem ISDN TA X 25 PAD 56K Modem ISDN TA X25 PAD 56K Modem The Prestige only selects a idle device of the indicated Device Type to dial out Route This fields determines the protocols that your Prestige will route Bridging is used for protocols that the Prestige does not Press space bar route e g SNA or not turned on in the previous Route to toggle field When bridging is enabled your Prestige will Yes N forward any packet that it does not route to this remote Yes No node otherwise the packets are discarded 4 6 Remote Node Configuration Prestige 153 153X WAN Bridge Routers Table 4 1 Remote Node Profile Menu Fields for Dial up Lines continued e o orm Edit PPP Options To edit the PPP options for this remote node move the Press space bar cursor to this field use the space bar to select Yes and to select Yes press Enter This will bring you to Menu 11 2 Remote then press Enter Node PPP Options For more information on configuring PPP options see the section Editing PPP Options Rem IP Addr This is a required field if IP routing is enabled
36. set to Both your Prestige can both place and receive calls to from this remote node If set to Incoming your Prestige will not place a call Incoming to this remote node If set to Outgoing your Prestige will drop the calls Outgoing from this remote ode Several other fields in this menu depend on this parameter For example in order to enable Call Back the Call Direction must be Both Remote Node Configuration 4 3 Prestige 153 153X WAN Bridge Routers Table 4 1 Remote Node Profile Menu Fields for Dial up Lines continued pe eee a Incoming Rem Node Enter the login name that this remote node will use when Login Name it calls your Prestige The login name in this field combined with the Rem Node Password will be used to authenticate this node Incoming Rem Node Enter the password used when this remote node calls Password your Prestige Incoming Rem CLID This field is applicable only if Call Direction is either Both or Incoming Otherwise an N A appears in the field This is the Calling Line ID the telephone number of the calling party of this remote node If you enable the CLID Authen field in Menu 13 Default Dial In your Prestige will check the CLID in the incoming call against the CLIDs in the database If no match is found and CLID Authen is Required the call will be dropped Incoming Call Back This field is applicable only if Call Direction is Both Enable Otherwis
37. taken else the packet is disposed of according the action fields 9 8 Filter Configuration Prestige 153 153X WAN Bridge Routers ree omen en If More is Yes then Action Matched and Action Not Matched will be N A Select the logging option from the following None No packets will be logged None Action Matched Only packets that match the rule Action Matched parameters will be logged Action Not Matched Only packets that do not match Action Not Matched the rule parameters will be logged Both Both All packets will be logged Action Matched Select the action for a matching packet Check Next Rule Forward Drop Action Not Matched Select the action for a packet not matching the rule Check Next Rule Forward Drop Once you have completed filling in Menu 21 1 1 TCP IP Filter Rule press Enter at the message Press Enter to Confirm to save your configuration or press Esc to cancel This data will now be displayed on Menu 21 1 Filter Rules Summary Filter Configuration 9 9 Prestige 153 153X WAN Bridge Routers 9 3 2 Generic Filter Rule This section shows you how to configure a generic filter rule The purpose of generic rules is to allow you to filter non IP IPX packets For IP and IPX packets it is generally easier to use the IP and IPX rules directly For generic rules the Prestige treats a packet as a byte stream as opposed to an IP or IPX packet You specify the porti
38. the error log and the trace log are all stored in the ROM file system Menu 24 7 2 shows you the instructions for uploading ROM file Please be aware that uploading the ROM file replaces everything contained within If you answer yes to the prompt the Prestige will reboot automatically Press any key when you see the message Press Any key to enter Debug Mode within 3 seconds to enter debug mode Once in debug mode type atur3 and wait for your Prestige to respond with Starting XMODEM upload to begin uploading the ROM file upload procedure varies depending on the software used to access your Prestige After successfully uploading the ROM file type at go to restart your Prestige If you upload the default ROM file you will lose all configurations that you had before and the console port will be set to the default of 9600 baud You will need to change the baud rate of your serial communications software to 9600 before you can connect to the Prestige again Menu 24 7 2 System Maintenance Upload ROM File To load the ROM file type atur3 while in debug mode and wait for Starting XMODEM upload before beginning to upload file Type atgo after file has successfully loaded to start RAS Then change the baud rate to 9600 Proceeding with the upload will erase the current ROM file Do You Which To Proceed Y N Figure 13 12 Menu 24 7 2 System Maintenance Upload ROM File System Maintenance 13 15 Prestige 153 15
39. the remote gateway in Remote Node aa Profile Edit IP IPX Bridge Press the space bar to select Yes and press Enter to go to Yes Menu 11 3 Remote Node Network Layer Options Menu Yes No Remote Node TCP IP Configuration 5 3 Prestige 153 153X WAN Bridge Routers The following table shows the TCP IP related fields in Menu 11 3 Remote Node Network Layer Options Table 5 2 Remote Node TCP IP Configuration Rem IP Address This shows the IP address you entered for this remote node in the previous menu Remote Node Profile Rem IP Subnet Enter the subnet mask for the remote network Mask My WAN Addr Single User Account Server IP address 5 4 not the remote router See Figure 5 3 for an explanation of My WAN Addr With Sample IP Addresses Set this field to Yes to enable the Single User Account feature Yes No for your Prestige Use the space bar to toggle between Yes and No See Chapter 3 Internet Access Application for more information on the Single User Account feature If you enable the Single User Account feature and you want to make a server on your LAN accessible to the outside world enter that server s inside IP address here Some implementations especially the UNIX derivatives require the WAN link to have a separate IP network number from the LAN and each end must have a unique address within the WAN network number If this is the case enter the IP address assigned to the WAN port of
40. the services of this warranty contact ZyXEL s Service Center refer to the separate Warranty Card for your Return Material Authorization number RMA Products must be returned Postage Prepaid It is recommended that the unit be insured when shipped Any returned products without proof of purchase or those with an out dated warranty will be repaired or replaced at the discretion of ZyXEL and the customer will be billed for parts and labor All repaired or replaced products will be shipped by ZyXEL to the corresponding return address Postage Paid USA and territories only If the customer desires some other return destination beyond the U S borders the customer shall bear the cost of the return shipment This warranty gives you specific legal rights and you may also have other rights which vary from state to state vi ZyXEL Limited Warranty Prestige 153 153X WAN Bridge Routers Customer Support If you have questions about your ZyXEL product or desire assistance contact ZyXEL Communications Corporation offices worldwide in one of the following ways North America ZyXEL Communications Inc 4920 E La Palma Avenue Anaheim CA 92807 USA Telephone 714 693 0808 call between 8 00 AM and 5 00 PM PST Facsimile 714 693 8811 E mail Sales Inquiries sales zyxel com Technical Support support zyxel com Worldwide Support ZyXEL Communications Corporation 6 Innovation Road II Science Based Industrial Park Hsinchu Taiwa
41. type your new system password for confirmation and press Enter As you enter the password the screen displays an X for each character you type 11 2 Telnet Configuration Prestige 153 153X WAN Bridge Routers 11 2 Using RADIUS Authentication Your Prestige has a built in dial up user list however the number of users that can be stored locally is limited due to memory constraints If you have more users than what the Prestige can store locally use an external RADIUS Remote Authentication Dial In User Service server that provides authentication service for unlimited number of users 11 2 1 Installing a RADIUS Server To use RADIUS authentication you need to have a UNIX or Windows NT machine on your network as the RADIUS server as well as the RADIUS software itself You can obtain the RADIUS server software along with documentation at http www livingston com Tech FTP pub le radius shtml or ftp ftp livingston com pub le radius Follow the included instructions to install the software on your server After you install the server software you will need to edit the dictionary file in the RADIUS configuration directory usually etc raddb Using any text editor add the following lines to the dictionary file Zyxel proprietary attributes ATTRIBUTE Zyxel Callback Option 192 integer VALUE Zyxel Callback Option None 0 VALUE Zyxel Callback Option Optional 1 VALUE Zyxel Callback Option Mandatory 2 Callback phone
42. up if traffic on the initial link is higher than the high Target Utility number for the second port for longer than the specified Add Persist value Similarly the second link will be dropped if the traffic level falls below the low Target Utility number for longer than the Subtract Persist value The Target Utility for a second link specifies the line utilization range at which you want your Prestige to add or subtract bandwidth The parameters are separated by a For example 10 20 means the add threshold is 20 kbps and the subtract threshold is 10 kbps Your Prestige will perform bandwidth on demand only if it initiates the call Addition and subtraction are based on the selection in the BOD Calculation field If this field is set to Transmit or Receive then traffic in either direction will be used to determine if a link should be added or dropped Transmit will only use outgoing traffic to make this determination and Receive will only use incoming traffic If the second link is not successful in joining the bundle because the remote device does not recognize the second call as coming from the same device your Prestige will hang up the second link and continue with the first link alone Similarly a third link will be brought up or dropped based on the target utility for the third link The target utility for the third link is based on the Target Utility for the second link and Bandwidth Increment for Additional Ports For example when B
43. your Prestige Note that this is the address assigned to your local Prestige Remote Node TCP IP Configuration Prestige 153 153X WAN Bridge Routers Table 5 2 Remote Node TCP IP Configuration continued pe oem The metric represents the cost of transmission for routing 1 to 16 purposes IP routing uses hop count as the measurement of cost with a minimum of 1 for directly connected networks Enter a number that approximates the cost for this link The number need not be precise but it must be between 1 and 16 In practice 2 or 3 is usually a good number Private This parameter determines if the Prestige will include the route Yes No to this remote node in its RIP broadcasts If set to Yes this route is kept private and not included in RIP broadcast If No the route to this remote node will be propagated to other hosts through RIP broadcasts RIP Direction Press the space bar to select the RIP direction from Both In Default Both Only Out Only Version Press the space bar to select the RIP version from RIP RIP 1 default 1 RIP 2B RIP 2M Once you have completed filling in the Network Layer Options Menu press Enter to return to Menu 11 Press Enter at the message Press ENTER to Confirm to save your configuration or press Esc at any time to cancel Remote Node TCP IP Configuration 5 5 Prestige 153 153X WAN Bridge Routers 5 1 2 IP Static Route Setup
44. 00 out user can be idle before your Prestige disconnects the call when the Prestige seconds is calling back Idle time is defined as the period of time where there is no data traffic between the dial in user and your Prestige The default is 300 seconds 5 minutes Once you have completed filling in Menu 14 1 Edit Dial in User press Enter at the message Press ENTER to Confirm to save your configuration or press Esc at any time to cancel 8 5 CLID Authentication CLID Calling Line Dentification authentication affords you the security of limiting a user to only initiate connections from a fixed location The Prestige uses the caller ID sent by the switch to match against the CLIDs in the database Please note that for CLID authentication to work on the Prestige your telephone company must support caller ID You must also include the AT command in the initAT string in Menu 2 to enable caller ID detection on the modem 8 6 Callback Callback serves two purposes One is security When set to callback to a fixed number an intruder will not gain access to your network even if he she stole the password from your user because the Prestige always calls back to the pre configured number The other is ease of accounting For instance your company pays for the connection charges for telecommuting employees and you use your Prestige as the dial in server When you turn on the callback option for the dial in users all usage are charg
45. 10 Chapter 9 Filter Configuration Oat About FENO sarena E EEE NAA E AEE EEEE E eas 9 1 9 2 Configuring a Filter Set seeria ea E aE A A Eia ETENA 9 3 99 Configuring aFilter Rula s sisisi e a Ae E E E Ane sik abedages 9 7 Chapter 10 SNMP Configuration TOT About SNMP rerai inner r e a eee eet 10 1 x Table of Contents Prestige 153 153X WAN Bridge Routers 1 0 2 SNMP Gonfiguratioms ae eS cetacean ate ie hac dace E acter tector 10 1 Chapter 11 System Security 11 1 Changing the System Password ccceeeeeeeeeeeeeeeeeee eee eeeeaeaeeeeeaaeeeeeeaaeeeeeeaaeeeees 11 1 11 2 Using RADIUS Authentication 0 ceccee cece ee ee tree eee eres saeeeeeesaaeeeeeaaieeeeeaaaeeees 11 3 Chapter 12 Telnet Configuration and Capabilities 12 1 About Telnet Configuration 0 ce ccecceeeeee cette a a 12 1 122 Telnet Under SUA s18 siclstcciadstecestiadscosbbtance A EAE E eA nce AEA EE EARE 12 1 12 3 Telhet Capabilities sc ca otic eee ee ieee en ae 12 2 Chapter 13 System Maintenance 13 1 System Status ne raa a ES A eee laa se eau dee Heenan 13 2 13 2 terminal Baud Rates anne eee E REA E EA E nha ead ee 13 5 tao WOGLANG Maan fa crctiehagsticnciad itn hha SEERE re SEEREN SEE BST hain SER ET SEEST LEDER FS oe 13 5 TRS Diago SN ane SSB ESKE SEES SE SENERE SEER ENES a ESS SR a tae 13 9 13 5 Backup Configurator eret aSpa ae ee eres S p e a a aa 13 12 136 Restor Contigurationy aaisa nania A AEE AREE 13 12 13 7 Firmwa
46. 12 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers Table 2 4 General Setup Menu Fields rae oss O System Name Choose a descriptive name for identification purposes This name can be up to 8 alphanumeric characters long Spaces are not allowed but dashes and underscores _ are accepted This name can be retrieved remotely via SNMP and will be displayed at the prompt in the Command Mode Location optional Enter the geographic location up to 31 characters of your Prestige location Contact Person s Enter the name up to 8 characters of the person in charge of this name Name optional Prestige Protocols Turn on or off the individual protocols for your particular application Press space bar to toggle Route IP Selecting Yes to enable IP routing You must enable IP routing for Yes No Internet access Route IPX Yes No Selecting Yes to enable IPX routing Bridge Yes No Selecting Yes to enable bridging Packets that the Prestige does not route are transparently bridged 2 7 1 1 Note on Bridge When bridging is enabled your Prestige forwards any packet that it does not route Without bridging the packets that the Prestige does not route are simply discarded Compared to routing bridging generates far more traffic for the same network layer protocol and uses more CPU cycles and memory Hardware Installation amp Initial Setup 2 13 Prestige 153 153X WAN Bridge Rout
47. 153X WAN Bridge Routers 7 2 2 Bridge Static Route Setup Similar to network layer static routes a bridging static route tells the Prestige about the route to a node before a connection is established You configure bridge static routes in Menu 12 3 as shown in Figure 7 3 Menu 12 3 Edit Bridge Static Route Route 21 Route Name Active No Ether Address IP Address Gateway Node 1 Press ENTER to CONFIRM or ESC to CANCEL Figure 7 3 Menu 12 3 Edit Bridge Static Route Bridging Setup 7 5 Prestige 153 153X WAN Bridge Routers The following Table 7 3 describes the Bridge Static Route Menu Table 7 3 Bridge Static Route Menu Fields Route Name Enter a name for the bridge static route for identification purposes Indicates whether the static route is active or not Ether Address Enter the MAC address of the destination machine that you wish to bridge the packets to IP Address If available enter the IP address of the destination machine that you wish to bridge the packets to Gateway Node Enter the number of the remote node that is the gateway of this static route When a packet s destination Ethernet MAC address matches the value entered above it will trigger a call to this remote node Once you have completed filling in this menu press Enter at the message Press ENTER to Confirm to save your configuration or press Esc to cancel 7 6 Bridging Setup Prestige 153 153X WAN Bridge Routers
48. 153X WAN Bridge Routers Table 8 2 Default Dial in Setup Fields fre owen omen Telco Options CLID Authen PPP Options Recv Authen PPP Options Mutual Authen PAP Login PAP Password Dial in Server Configuration This field sets the CLID authentication parameter for all incoming calls There are three options for this field None No CLID is required Required CLID must be available or the Prestige will not answer the call Preferred If the CLID is available then CLID will be used otherwise authentication is performed in PPP negotiation This field sets the authentication protocol for incoming calls Individual user names and passwords are configured in the next section Remote users Dial in Users Setup Options for this field are CHAP PAP Your Prestige will try CHAP first but PAP will be used if CHAP is not available CHAP Use CHAP only PAP Use PAP only None Your Prestige will try CHAP first but no authentication is required if CHAP is not available Some vendors e g Cisco require mutual authentication i e the node that initiates the call will request a user name and password from the far end that it is dialing to If the remote node that is dialing in implements this type of authentication set this field to Yes This field is applicable only if the Mutual Authen Field is set to Yes Enter the login name for your Prestige This field does not apply to CHAP authenticatio
49. 2 then the IPX pool will have 12345678 and 12345679 Session Options In these fields you select the filter set s to apply to the traffic Default blank Input Filter Sets between your Prestige and the remote dial in users Keep in mind that these filter set s will only apply to remote dial in Output Filter Sets users but not the remote nodes You can choose from 12 different filter sets In addition you can link up to 4 filter sets together for further customization e g 1 5 9 12 Note that spaces and symbol are accepted in this field For more information on customizing your filter sets see Chapter 9 Filter Configuration The default is blank i e no filters Session Options The Idle Timeout sets the limit on the time that the connection is idle before the call is automatically disconnected when the Idle Timeout Prestige is calling back The idle timer is reset whenever there is traffic from the Prestige This field will only be used when calling back otherwise the idle timeout is governed by the caller Once you have completed filling in Menu 13 Default Dial in Setup press Enter at the message Press ENTER to Confirm to save your configuration or press Esc at any time to cancel Dial in Server Configuration 8 7 Prestige 153 153X WAN Bridge Routers 8 4 Dial in Users Setup The following steps describe the procedure for setting up a remote dial in user Step 1 From the Main Menu enter optio
50. 3 4 xiv LAN to LAN Application with TCP IP c ceceeeeeeeeeaeeneeeeeeeeeeeeaeaaeeeeeeeeeeeeaea 5 1 Menu 11 3 Remote Node TCP IP Options cceceeeeeeeeeeeeeeeeeeeeaeeeeeeeaaee ees 5 2 Sample IP Addresses for a TCP IP LAN to LAN Connection 00 0 cee 5 3 Example of Static Routing TOpology ceeeeeeceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeenees 5 6 Menu 12 Static Route SetUPe acionar a a re REE RS TEE Er TE Ree ES 5 7 Menu 12 1 Edit IP Static Route 0 cece ceeceeee cece eeeeeeeeeeeeeesaaeeeeeaaeeeeeeaaeeees 5 7 Prestige in an IPX Environment oiiae EEA EEE AEEA ET AAA 6 3 Menu 3 3 Novell IPX Ethernet Setup ececceeeeceeeeeeeeeeeeeeeeeeaeeeeeeaaeeeeeeaaeeees 6 5 LAN to LAN Application with Novell IPX ccceceeeeeeeeeeeeeeeeeseeeeeeeaeeeeeeeaaaeees 6 7 Menu 11 3 Remote Node Novell IPX Options ceeeeeeeeeeeeeeeeeeeeeeeeeeaaee ees 6 8 Menu 12 2 Edit IPX Static ROUtC ce eeceeeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeeaeeeeenees 6 10 Menu 3 5 Bridge Ethernet Setup cccececeeeeeeeeeeeeeeeeeeeeeeesaeeeeeeaaeeeeeeaaeeees 7 2 Menu 11 3 Remote Node Bridging Options cccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeenees 7 3 Menu 12 3 Edit Bridge Static ROute ccc ceeeeeeceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaes 7 5 Example of TelecOMMUING ceceeeeeeeee ee eeee eect ee eeeeeeeeeeeeeeaaeeeeeeeeeeeseeaaeeeeenees 8 2 Example of a Dial
51. 3X WAN Bridge Routers 13 8 Command Interpreter Mode This option allows you to enter the command interpreter mode A list of valid commands can be found by typing help at the command prompt For more detailed information check the ZyXEL Web site or send an e mail to the ZyXEL Support Group 13 9 Call Control The Prestige provides two call control functions budget management and blacklist The budget management function allows you to set a limit on the total outgoing call time of the Prestige over a period of time When the total outgoing call time exceeds the limit the current call will be dropped and any future outgoing calls will be blocked The blacklist function prevents the Prestige from re dialing to an unreachable phone number It is a list of phone numbers up to a maximum of 14 to which the Prestige will not make an outgoing call If the Prestige tries to dial to a phone number and fails a certain number of times configurable in Menu 24 9 1 then the phone number is put in the blacklist You will have to enable the number manually before the Prestige will dial that number again To enter the call control menu select option 9 Call Control in Menu 24 to go to Menu 24 9 System Maintenance Call Control as shown in Figure 13 13 Menu 24 9 System Maintenance Call Control 1 Blacklist 2 Budget Management 3 Call History Enter Menu Selection Number Figure 13 13 Menu 24 9 System Maintenance Call Control
52. 4 17 Prestige 153 153X WAN Bridge Routers Table 4 4 Remote Node Profile Menu Fields for Leased Lines continued pe o omen Backup Line Call Direction Device Type for backup line only Pri mary Backup Phone for backup line only Sec ondary Backup Phone for backup line only 4 18 When the backup function is enabled and if all links WAN Ports in a leased line connections drop your Prestige will pick up an available dial up WAN port to trigger a backup connection If this parameter is set to Both your Prestige can both place and receive calls to from this remote node Set this parameter to None to de activate the Backup Line function If set to Incoming your Prestige will not place a call to a remote node If set to Outgoing your Prestige will drop any call from a remote node Use the space bar to choose the following selections Modem ISDN TA X 25 PAD 56K Modem Your Prestige will only select a free device of the specified device type to place a call Enter the primary telephone number that your Prestige will dial when the backup line function is triggered Enter the secondary telephone number that your Prestige will dial when the backup line function is triggered Press space bar to toggle Both None Out going Incoming Both default None Incoming Outgoing Modem ISDN TA X25 PAD 56K Modem Remote Node Co
53. 7 Internet Access Setup Menu Fields cccececeeeeeeeeeeeeeeeeeeeeeeeaaeeeeeesaeeeeeeaaaeeees 3 9 Single User Account Menu Fields ccececneeeeeeeeeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaeeeees 3 14 Remote Node Profile Menu Fields for Dial up Lines ceeeeeeeeeeeeeeeeeeeeeeeee es 4 3 Remote Node PPP Options Menu Fields seeeeeeeeeeeeeeeeeeeeeaaeeeeeeaaeeeeeeaa 4 11 Remote Node Script Menu Fields cceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeeaeeeeeeaees 4 14 Remote Node Profile Menu Fields for Leased Lines 4 16 TCP IP related fields in Remote Node Profile ccececseeeeeeneeeeeeeaaeeeeeeaaeeeeeeaa 5 3 Remote Node TCP IP Configuration cceccseeeeeeneeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaa 5 4 Edit IP Static Route Menu Fields erener de laag R ager 5 8 Novell IPX Ethernet Setup Fields 0 00 eeeeeeceeeeeee ea eeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaaeees 6 6 Remote Node Novell IPX Options 0 ccecceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeneees 6 9 Edit IPX Static Route Menu Fields cceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaaeeeeeeeees 6 11 Bridge Ethernet Setup Menu Handle IPX Field Configuration 7 2 Remote Node Bridge Options ccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeaaeeeeeeeeeeeeeeeees 7 4 Bridge Static Route Menu Fields 0 ccceeeeeeeeneeeeeeeeeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaeeeees 7 6 Remote Dial in Users Remote
54. Bridge Setup Enter Menu Selection Number Figure 2 14 Menu 3 Ethernet Setup 2 9 1 General Ethernet Setup This menu allows you to specify the filter sets that you wish to apply to the Ethernet traffic You seldom need to filter Ethernet traffic however the filter sets may be useful to block certain packets reduce traffic and prevent security breaches From Menu 3 Ethernet Setup enter 1 to go to Menu 3 1 General Ethernet Setup Menu 3 1 General Ethernet Setup Input Filter Sets Output Filter Sets Press ENTER to Confirm or ESC to Cancel Figure 2 15 Menu 3 1 General Ethernet Setup Hardware Installation amp Initial Setup 2 25 Prestige 153 153X WAN Bridge Routers If you need to define filters please read Chapter 9 Filter Set Configuration then return to this menu to define the filter sets 2 10 Protocol Dependent Ethernet Setup For the protocol dependent setup go to the appropriate section for details e For TCP IP Ethernet Setup refer to Chapter 3 Internet Access Application For Novell IPX Ethernet Setup refer to Section 7 4 IPX Ethernet Setup in Chapter 7 Novell IPX Configuration for LAN to LAN For Bridge Ethernet Setup refer to Chapter 6 Bridge Configuration for LAN to LAN 2 26 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers Chapter 3 Internet Access This chapter shows you how to configure the LAN as well as the WAN of your Prestige for Inte
55. MP to boost bandwidth Two of the WAN ports on P 53X also support synchronous mode operation for leased lines e Leased Lines Backup For leased lines the Prestige provides backup support in the event of leased line failure with dial up lines Getting to Know Your Bridge Router 1 1 Prestige 153 153X WAN Bridge Routers Multiple Protocol Support TCP IP Transmission Control Protocol Internet Protocol network layer protocol Novel IPX Internetwork Packet eXchange protocol Transparently bridging for network layers that the Prestige does not route PPP Point to Point Protocol link layer protocol SUA Single User Account for NAT Network Address Translation 5 gt gt e Dial On Demand The Dial On Demand feature allows the Prestige to automatically place a call to a remote gateway based on the triggering packet s destination without user intervention e PPP Multilink Support The Prestige can bundle multiple links in a single connection using PPP MP Point to Point Protocol Multilink Protocol The number of links can be statically configured or dynamically managed based on traffic demand e Bandwidth On Demand The Prestige 153 153X dynamically allocates bandwidth by dialing and dropping connections according to traffic demand e Full Network Management Your Prestige 153 153X supports SNMP Simple Network Management Protocol and allows menu driven network management via the console port or a telnet con
56. N WAN 1 RDY TX RX WAN port 1 Ready Transmit Receive Q WAN 2 RDY TX RX WAN port 2 Ready Transmit Receive WAN 3 RDY TX RX WAN port 3 Ready Transmit Receive Figure 1 1 Prestige 153 153X Front Panel 1 4 Getting to Know Your Bridge Router Prestige 153 153X WAN Bridge Routers 1 4 2 Front Panel LEDS The LED indicator lights on the front panel of your Prestige indicate the bridge router functional status The following Table 1 1 describes the LED functions Table 1 1 LED Functions LEDs Indicator Description Status Pwr Poner Indicator Green Jon fine poweris orot The ponerisoniof power is on off oe Running LED iGreen Green Binkng Bing The Prestige is functioning properly ETHER LNK RX LAN Receive Green lon The Prestige is connected to a working Ethernet network NET Blinking Traffic is being received on the LAN ca a pen p fe preen Getting to Know Your Bridge Router 1 5 Prestige 153 153X WAN Bridge Routers 1 4 3 Prestige 153 Back Panel Figure 1 2 shows the rear panel of your Prestige 153 Refer to this diagram when attempting to make connections X 3 R p CONSOLE WAN 3 WAN 2 WAN 1 N POWER power connector to the AC adapter I LAN RJ 45 Ethernet 10Base T port metallic R CONSOLE RJ 45 Console port off white WAN 1 RJ 45 WAN port 1 black Q WAN 2 RJ 45 WAN port 2 black WAN 3 RJ 45 WAN port 3 black Figure 1 2 Pre
57. Nodes Comparison Chart cceeeeeeeeeeeeeeeeeees 8 1 Default Dial in Setup Fields esterase ea E AAE EENE SEREAS 8 5 Edit Dial in User Menu Fields cece eeeeeeeeeeeeeeeeeeeeeeaeeeeeeeaaeeeeeeaaeeeeseaaneeeeeaaes 8 9 Abbreviations Used in the Filter Rules Summary Menu ceeceeeeeeeeeeeeeeeeeees 9 4 Abbreviations Used If Filter Type Is IP W u u u sssseseeeeeeereereenn ene nn ere nn enken ener erne 9 5 List of Tables xvii Prestige 153 153X WAN Bridge Routers Table 9 3 Table 9 4 Table 9 5 Table 9 6 Table 9 7 Table 10 1 Table 11 1 Table 13 1 Table 13 2 Table 13 3 Table 14 1 Table 14 2 Table 14 3 Table 14 4 Table 14 5 xviii Abbreviations Used If Filter Type Is IPX cece cecceeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeeaeeeeenees 9 6 Abbreviations Used If Filter Type Is GEN 00 ee eee eeeeeeeeeeeeeeeeeeeeeeeeeeeeeaaeeeeenaes 9 6 TCP IP Filter Rule Menu Fields cceeeceeeeeeceeeeeeeeeeeeeeeaeeeeeeeaaeeeeeeaaeeeeeeaaeeees 9 8 Generic Filter Rule Menu Fields ceceeceeeeeeee ee eeeeeenaeeeeeeaaeeeeeeaaeeeeeeaaeeeeees 9 11 IPX Filter Rule Menu Fjeld eee cence E A E E S AS 9 13 SNMP Configuration Menu Fields 0cceceeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeaaeeeeeeaaaeees 10 2 System Security External Server Menu Fields ceeeeeeeeeeeeeeeeeeeeeanee ees 11 5 System Maintenance Status Menu Fields ccceeeeeeeeeeeeeeeeeeeeeeeee
58. Prestige 153 153X User s Manual Version 1 0 ZyXEL TOTAL INTERNET ACCESS SOLUTION Prestige 153 153X WAN Bridge Routers Prestige 153 Prestige 153X WAN Bridge Routers Copyright Copyright 1998 by ZyXEL Communications Corporation The contents of this publication may not be reproduced in any part or as a whole transcribed stored in a retrieval system translated into any language or transmitted in any form or by any means electronic mechanical magnetic optical chemical photocopying manual or otherwise without the prior written permission of ZyXEL Communications Corporation Published by ZyXEL Communications Corporation All rights reserved Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products or software described herein Neither does it convey any license under its patent rights nor the patents rights of others ZyXEL further reserves the right to make changes in any products described herein without notice This publication is subject to change without notice Trademarks Trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners Prestige 153 153X WAN Bridge Routers Federal Communications Commission FCC Interference Statement This device complies with Part 15 of FCC rules Operation is subject to the following two conditions 1 This device may not cause harmful interference 2
59. Prestige will decide when i to answer an incoming call To edit the Advanced Setup for this WAN port move the cursor to this Yes No field use the space bar to select Yes and press Enter This will bring you to Menu 2 1 1 Advanced Setup When you complete this menu press Enter to save your configuration or Esc to cancel After you press Enter the Prestige uses the information you have saved to initialize the WAN Port and the connected modem ISDN TA Hardware Installation amp Initial Setup 2 17 Prestige 153 153X WAN Bridge Routers 2 8 2 Prestige 153X WAN Port Setup In addition to asynchronous devices WAN ports and 2 on Prestige 153X also support synchronous devices such as CSU DSU You can only connect an asynchronous device to WAN Port 3 To configure the WAN ports go to Menu 2 WAN Port Setup as shown in Figure 2 11 and select the number 1 2 or 3 of the port you wish to configure Menu 2 WAN Port Setup Port 1 Sync Async Port 2 Sync Async Port 3 Async Only Select WAN Port Figure 2 11 Prestige 153X Menu 2 WAN Port Setup Selecting WAN port 1 or 2 will bring up Menu 2 1 Sync Async WAN Port Setup as shown in Figure 2 12 while selecting WAN port 3 opens the standard Menu 2 1 Async WAN Port Setup 2 18 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers Figure 2 12 shows the menu for Sync Async WAN port configuration Menu 2 1 Sync Async WAN Po
60. Step 2 Select the filter set you wish to configure no 1 12 and press Enter Step 3 Enter a descriptive name or comment in the Edit Comments field and press Enter Step 4 Press Enter at the message Press ENTER to confirm to open Menu 21 1 Filter Rules Summary Filter Configuration 9 3 Prestige 153 153X WAN Bridge Routers Menu 21 1 Filter Rules Summary Filter Rules Enter Filter Rule Number 1 6 to Configure Figure 9 3 Menu 21 1 Filter Rules Summary 9 2 1 Filter Rules Summary Menu This screen shows the summary of the existing rules in the filter set The following tables contain a brief description of the abbreviations used in Menu 21 1 Table 9 1 Abbreviations Used in the Filter Rules Summary Menu Refers to the filter rule number 1 6 A Refers to Active Y means the filter rule is active N means the filter rule is inactive Refers to the type of filter rule GEN for Generic This shows GEN for generic IP for IP for TCP IP TCP IP and IPX for Novell IPX IPX for Novell IPX 9 4 Filter Configuration Prestige 153 153X WAN Bridge Routers Table 9 1 Abbreviations Used in the Filter Rules Summary Menu continued Filter Rules The filter rule parameters will be displayed here see below Refers to More Y means there are more rules to check N means there are no more rules to check Refers to Action Matched F means to forward the packet D means to drop the packet
61. Wan Port numbers of this remote node for a Leased Line connection Leased Port s can be a single port 1 to 3 or any combination of ports e g 1 2 3 or 1 3 or any other combination The Connection Type of these WAN Ports must be set to Leased in Menu 2 WAN Port Setup All WAN Ports specified in this remote node are bundled in one connection Enter the login name this remote node uses when it calls into your Prestige The login name in this field combined with the Rem Node Password will be used to authenticate the incoming calls from this node Enter the password used when this Remote Node calls into your Prestige This is a required field if Call Direction is either Both or Outgoing Enter the login name for your Prestige when it calls this remote node This is a required field if Call Direction is either Both or Outgoing Enter the password for your Prestige when it calls this remote node Leased Remote Node Configuration Prestige 153 153X WAN Bridge Routers Table 4 4 Remote Node Profile Menu Fields for Leased Lines continued pe o eee omen Outgoing Authen This field sets the authentication protocol used for outgoing calls for backup line only Options for this field are CHAP PAP Your Prestige will accept either CHAP PAP CHAP or PAP when calling this remote node CHAP accept CHAP only CHAP PAP accept PAP only PAP Remote Node Configuration
62. andwidth Increment for an Additional Port is 5 Kbps and the Target Utility for a second Port is 10 20 then the Target Utility for a third link is 15 25 The BOD configuration is through Menu 11 2 Remote Node PPP Options Remote Node Configuration 4 9 Prestige 153 153X WAN Bridge Routers 4 1 5 Editing PPP Options To edit the remote node PPP Options move the cursor to the Edit PPP Options field in Menu 11 1 Remote Node Profile and use the space bar to select Yes Press Enter to open Menu 11 2 as shown in Figure 4 3 Menu 11 2 Remote Node PPP Options Encapsulation Standard PPP Compression No Multiple Link Options BOD Calculation Transmit or Receive Min Ports 1 Max Ports 1 Target Utility for 2nd Port Kbps 32 48 Bandwidth increment for Additional Ports Kbps 0 Add Persist sec 5 Subtract Persist sec 5 Press ENTER to CONFIRM or ESC to CANCEL Press Space Bar to Toggle Figure 4 3 Menu 11 2 Remote Node PPP Options 4 10 Remote Node Configuration Prestige 153 153X WAN Bridge Routers Table 4 2 describes the Remote Node PPP Options Menu and contains instructions on how to configure the PPP options fields Table 4 2 Remote Node PPP Options Menu Fields ee omme me Encapsulation Select the vendor specific encapsulation for the link There are two options in this field Standard PPP Standard PPP encapsulation Standard PPP will be used CISCO PPP Cisco PPP encap
63. ation via the SMT for details information on PWC please refer to the Prestige Web Configuration User s Manual This manual consists of fourteen chapters to guide you through a correct configuration of your Prestige 153 153X depending on your particular application For brevity s sake we will use e g as a shorthand for for example and i e for that is or in other words throughout this manual Preface xix Prestige 153 153X WAN Bridge Routers Structure of this Manual This manual is divided into five parts Step 1 Getting Started Chapters 1 2 is structured as a step by step guide to help you connect install and setup your Prestige 153 153X to operate on your network Step 2 The Internet Chapter 3 describes how to configure your Prestige 153 153X to connect to the Internet Step 3 Setting Up Advanced Applications Chapters 4 8 describes how to use your Prestige for more advanced applications such as Telecommuting and LAN to LAN in TCP IP Novell IPX and Bridging environments Step 4 Management amp Maintenance Chapters 9 13 provides information on access control and logging features for network administrators Step 5 Troubleshooting Chapter 14 provides information about solving common problems Regardless of your particular application it is important that you follow the steps outlined in Chapters 1 2 to correctly connect your Prestige 153 153X to your LAN You can then refe
64. automatically log you out and will display a blank screen If you see a blank screen press Enter to bring up the password screen again Hardware Installation amp Initial Setup 2 7 Prestige 153 153X WAN Bridge Routers 2 5 Navigating the SMT Interface The SMT System Management Terminal is the interface that you use to configure your Prestige Several operations that you should be familiar with before you attempt to modify the configuration are listed in Table 2 2 Table 2 2 Main Menu Commands Move forward to Enter To move forward to a sub menu type in the number of the desired another menu sub menu and press Enter Move backward to Esc Press the Esc key to move back to the previous menu a previous menu Enter or Within a menu press Enter to move to the next field You can also use the Up Down arrow keys to move to the previous and the next Up Down field respectively arrow keys Move the cursor Enter information Fill in or There are two types of fields that you will need to fill in The first requires you to type in the appropriate information The second gives Press the you choices to choose from In the second case press the Space Space bar to bar to cycle through the available choices toggle Required fields 225 All fields with the symbol lt gt must be filled in order be able to save the new configuration N A fields lt N A gt Some of the fields in the SMT will show a lt N A gt
65. ble 6 2describes the IPX protocol dependent parameters of the remote node Setup Table 6 2 Remote Node Novell IPX Options CREEK Dial On Query This field is necessary for your Prestige on the client side When set Yes No to Yes any Get Service SAP or RIP broadcasts will trigger your Prestige to make a call to that remote node Rem LAN Net In this field enter the internal network number of the NetWare server on the remote LAN My WAN Net In this field enter the network number of the WAN link If you leave 00000000 this field as 010000000 your Prestige will determine automatically the network number through negotiation with the PPP peer Hop Count This field indicates the number of intermediate networks that must be 1 passed through to reach the remote node default default Tick Count This field indicates the time ticks required to reach the remote node 2 default W D Spoofing This field is for the Prestige on the server side Your Prestige can min spoof a response to a server s WatchDog request after the connection is dropped In this field type in the time number of minutes that you want your Prestige to spoof the WatchDog response SAP RIP Timeout This field indicates the amount of time that you want your Prestige to min maintain the SAP and RIP entries learned from this remote node in its internal tables after the connection has been dropped If this information is retained then your Prestige wil
66. ccess Setup Menu Fields ISP s Name Enter the name of your Internet Service Provider This information is for identification purposes only ISP IP Addr Enter the IP Address of the remote gateway at the ISP s site If you optional do not have this data just leave it blank Connection Type Select Switch if you connect to the ISP through a dial up line Space bar to select Leased if through a leased line toggle Switch Leased Leased Ports If Leased is selected in Connection Type enter the WAN port numbers in this field Leased Ports can be a single port 1 to 3 or any combination of ports e g 1 2 3 or 1 3 etc All leased line links specified here are bundled in one connection to your ISP The Connection Type of these WAN ports must also be specified as Leased in Menu 2 Pri mary Phone The first number your Prestige will dial to connect to the ISP if the required connection is a dial up line een Phone If the primary phone number is busy or does not answer your optional Prestige will call the Secondary Phone number if specified My Login Name Enter the login name assigned to you by your ISP required My Password Enter the password associated with the login name above Note required that this login name password pair is only for your Prestige to connect to the ISP s gateway For TCP IP applications e g FTP you will need a separate login name and password for each server Internet Access 3 9
67. contains the address of the node on which the server resides If you are using a Novell IPX implementation this value is 000000000001 Socket This field contains the socket number on which the server will receive service requests The default for this field is hex 0451 This field identifies the type of service the server provides The default for this field is hex 0004 Gateway Node In this field enter the number of the remote node that is the gateway for this static route Hop Countand These two fields have the same meaning as those in the Ethernet setup Tick Count Once you have completed filling in the menu press Enter at the message Press ENTER to Confirm save your configuration or press Esc to cancel to cancel IPX Configuration 6 11 Prestige 153 153X WAN Bridge Routers Chapter 7 Bridging Setup This chapter shows you how to configure the bridging parameters of your Prestige 7 1 Bridging in General Bridging bases the forwarding decision on the MAC Media Access Control or hardware address while routing does on the network layer IP or IPX address Bridging allows the Prestige to transport packets of network layer protocols that the Prestige does not route e g SNA from one network to another The caveat is that compared to routing bridging generates more traffic for the same network layer protocol and it also demands more CPU cycles and memory For efficiency reason do not turn on bridg
68. d press Enter to edit Menu 11 3 Network Layer Options Menu 11 3 Remote Node Network Layer Options IP Options IPX Options Rem IP Addr 0 0 0 0 Dial On Query N A Rem Subnet Mask 0 0 0 0 Rem LAN Net N A My WAN Addr 0 0 0 0 My WAN Net N A Single User Account No Hop Count N A Server IP Addr N A Tick Count N A Metric 2 W D Spoofing min N A Private No SAP RIP Timeout min N A RIP Direction Both Version RIP 2B Bridge Options Dial On Broadcast N A Ethernet Addr Timeout min N A Enter here to CONFIRM or ESC to CANCEL Figure 5 2 Menu 11 3 Remote Node TCP IP Options 5 2 Remote Node TCP IP Configuration Prestige 153 153X WAN Bridge Routers The following diagram in Figure 5 3 explains the Sample IP Addresses to help you to understand the field of My Wan Address in Menu 11 3 Remote Network Local Network 204 247 203 Y Prestige 153 153X Prestige 153 153X as estige 153 153 Figure 5 3 Sample IP Addresses for a TCP IP LAN to LAN Connection To configure the TCP IP parameters of a remote node first configure the three fields in Menu 11 Remote Node Profile as shown in Table 5 1 For more details on the IP Option fields refer to Chapter 3 Internet Access Application Table 5 1 TCP IP related fields in Remote Node Profile Field Description Option Route Make sure IP is among the protocols in the Route field in the Remote Node Profile Rem IP Address Enter the IP address of
69. ddress thus saving significantly on the subscription fees Check with your ISP before you enable this feature Figure 3 4 illustrates a typical Single User Account topology Private Network IP Addresses ae Assigned by User IP Address Assigned by ISP 109 162 a a 192 68 135 5 Gh INTERNET Prestige 153 153X Ethernet LAN Figure 3 4 Single User Account Topology The Single User Account feature may also be used on connections to remote networks other than the ISP For example this feature can be used to simplify the allocation of IP addresses when connecting branch offices to the corporate network Internet Access 3 11 Prestige 153 153X WAN Bridge Routers The IP address for the SUA can be either fixed or dynamically assigned when a call is connected In addition you can designate a server e g a web server on your local network and make it accessible to outside world If you do not define a server SUA offers the additional benefit of firewall protection If no server is defined all incoming inquiries will be filtered out by your Prestige and thus preventing intruders from probing your network Your Prestige accomplishes this address sharing by translating the internal LAN IP addresses to a single address that is globally unique on the Internet For more information on IP address translation refer to RFC 1631 The IP Network Address Translator NAT 3 5 1 Advantages of SUA In summary SUA is a cost eff
70. e NEN ee ee ed Drop packet if line not up Send packet Send packet but do not reset but do not reset Idle Timer Idle Timer Outgoing Packet Send packet and reset Idle Timer Drop packet if line not up Jil Figure 9 1 Outgoing Packet Filtering Process For incoming packets your Prestige applies data filters only Packets are processed depending upon whether a match is found The following sections describe how to configure filter sets The Filter Structure of the Prestige A filter set consists of one or more filter rules Usually you would group related rules e g all the rules for NetBIOS into a single set and give it a descriptive name The Prestige allows you to configure up to twelve filter sets with six rules in each set for a total of 72 filter rules in the system You can apply up to four filter sets to a particular port to block multiple types of packets With each filter set having up to six rules you can have a maximum of 24 rules active for a single port 9 2 Filter Configuration Prestige 153 153X WAN Bridge Routers 9 2 Configuring a Filter Set To configure a filter sets follow the procedure below Step 1 Select option 21 Filter Set Configuration from the Main Menu to open Menu 21 Menu 21 Filter Set Configuration Comments Comments Enter Filter Set Number to Configure Edit Comments Press ENTER to CONFIRM or ESC to CANCEL Figure 9 2 Menu 21 Filter Set Configuration
71. e Step 1 From this menu select option 4 Diagnostic This will open Menu 24 4 System Step 2 Maintenance Diagnostic System Maintenance 13 9 Prestige 153 153X WAN Bridge Routers The following Table 13 3 describes the diagnostic tests available in Menu 24 4 for your Prestige and the connections Table 13 3 System Maintenance Menu Diagnostic Test Options Drop WAN Port This command drops the call on a WAN port Selecting this option brings you to the Select WAN Port field to specify the port Reset WAN Port This command resets the specified WAN port Selecting this option brings you to the Select WAN Port field to specify the port Manual Call This option allows you to manually place a call to a remote node The Prestige will show you the traces of what is happening during the call setup and PPP negotiation Redirect to WAN Port This command redirects the keyboard to the WAN port Anything you type will be sent to the modem and the modem s response will be shown on your screen Selecting this option brings you to the Select WAN Port field to specify the port Internet Setup Test This test checks to see if your Internet access configuration is correct When this option is chosen your Prestige will call the ISP and perform the PPP negotiations If everything is working properly you will see an appropriate response Otherwise note the error message and take the appropriate troubleshooting steps Ping Host This diagnos
72. e an N A appears in the field Disable This field determines whether or not your Prestige will call back after receiving a call from this remote node If this option is enabled your Prestige will disconnect the initial call from this node and call it back at the Outgoing Primary Phone Number see below Outgoing My Login This is a required field if Call Direction is either Both Name or Outgoing Enter the login name for your Prestige when it calls this remote node 4 4 Remote Node Configuration Prestige 153 153X WAN Bridge Routers Table 4 1 Remote Node Profile Menu Fields for Dial up Lines continued me men oem Outgoing My This is a required field if Call Direction is either Both Password or Outgoing Enter the password for your Prestige when it calls this remote node Outgoing Authen This field sets the authentication protocol used for outgoing calls Options for this field are CHAP PAP Your Prestige will accept either CHAP CHAP PAP or PAP when requested by this remote node CHAP accept CHAP only CHAP PAP accept PAP only PAP Remote Node Configuration 4 5 Prestige 153 153X WAN Bridge Routers Table 4 1 Remote Node Profile Menu Fields for Dial up Lines continued ee on oem Outgoing Pri mary Your Prestige always calls this remote node using the Sec ondary Primary Phone number first for a dial up line Phone Numbers If the Primary Phone
73. e Prestige the tags or labels immediately preceding the various call parameters sent from the WAN device The response strings have not been standardized please consult the documentation of your WAN device to find the correct tags Hardware Installation amp Initial Setup 2 23 Prestige 153 153X WAN Bridge Routers Table 2 8 below describes the call control parameters Table 2 8 Advanced WAN Port Setup Call Control Parameters ce Dial Timeout sec The Prestige will timeout if it can not set up an outgoing call 60 seconds within the timeout value Retry Count How many times a busy or no answer phone number is 0 to disable the retried before it is put on the blacklist blacklist control Retry Interval sec Elapsed time after a call fails before another call may be retried Applies before a phone number is blacklisted Drop Timeout sec The Prestige will drop the DTR signal if it does not receive a 20 seconds positive confirmation of disconnect within the timeout period Call Back Delay Elapsed time between dropping a callback request call and 15 seconds sec dialing a callback call 2 24 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers 2 9 Ethernet Setup This section describes how to configure the Ethernet using Menu 3 Ethernet Setup From the Main Menu enter 3 to bring up Menu 3 Menu 3 Ethernet Setup General Setup TCP IP and DHCP Setup Novell IPX Setup
74. eaneeees 13 3 System Maintenance Menu Syslog Parameters ceeeeeeeeeeeeeeeeeeeeeaaeeees 13 7 System Maintenance Menu Diagnostic Test Options eeeeeeeeeeeeeeee eee 13 10 Troubleshooting the Start Up of your Prestige ceecee 14 1 Troubleshooting a WAN Port Connection ccceeeeeeeeneeeeeeeeeeeeeeaaeeeeeeaaeeees 14 2 Troubleshooting the LAN Interface cccceeeeeeeeeeeeeeeaeeeeeeeaaeeeeeaaeeeeeeaaaeees 14 2 Troubleshooting a Connection to a Remote Node or ISP 14 3 Troubleshooting for Remote User to Dial in 0 0 cceceeeeeeeeeeeeeaeeeeeeaeeeeeeeaneeees 14 4 List of Tables Prestige 153 153X WAN Bridge Routers Preface About Your Bridge Router The Prestige 153 153X is a high performance bridge router that offers a complete solution for your WAN applications such as Internet access multi protocol LAN to LAN connections telecommuting and remote access The Prestige 153 153X is a universal router that can connect over PSTN Public Switch Telephone Network and ISDN Integrated Service Digital Network lines The Prestige 153 153X supports multi protocol routing and transparent bridging About This User s Manual This user s manual covers the operations of your Prestige 153 and Prestige 153X All functions of the Prestige are software configurable via either the SMT System Management Terminal Interface or the Java based Prestige Web Configurator PWC This manual concentrates on configur
75. eck that either the remote dial in user is supplying a valid IP address or that the Prestige is assigning a valid address from the IP pool If the remote dial in user is negotiating IPX verify that the IPX network number is valid from the IPX pool if it is being used 14 4 Troubleshooting BAP BACP BOD CDR CHAP CLID CSU DSU DCE DHCP DNS DTE IANA IP IPCP IPX ISDN ISP LAN MAC MP NAT PAP POTS PPP Prestige 153 153X WAN Bridge Routers Chapter 15 Acronyms and Abbreviations Bandwidth Allocation Protocol Bandwidth Allocation Control protocol Bandwidth on Demand Call Detail Record Challenge Handshake Authentication Protocol Calling Line Dentification Channel Service Unit Data Service Unit Data Communications Equipment Dynamic Host Configuration Protocol Domain Name System Data Terminal Equipment Internet Assigned Number Authority Internet protocol IP Control Protocol Internetwork Packet eXchange Integrated Service Digital Network Internet Service Provider Local Area Network Media Access Control PPP Multilink Protocol Network Address Translation Password Authentication Protocol Plain Old Telephone Service Point to Point Protocol Acronyms and Abbreviations 15 1 Prestige 153 153X WAN Bridge Routers PSTN RADIUS RIP SAP SNAP SNMP SUA TA TCP UDP UTP WAN Public Switched Telephone Network Remote Authentication Dial In User Service Routing Information Protocol IPX Service Adver
76. ective solution for small offices with less than 20 hosts to access the Internet or other remote TCP IP networks SUA supports one server to be accessible to the outside world SUA can provide firewall protection if you do not specify a server All incoming inquiries will be filtered out by your Prestige UDP and TCP datagrams can be routed In addition partial ICMP is supported 3 12 Internet Access Prestige 153 153X WAN Bridge Routers 3 5 2 Single User Account Configuration The steps for configuring your Prestige for Single User Account are identical to the conventional Internet access See configuration instructions in Table 3 4 with the exception that you need to fill in three extra fields in Menu 4 Internet Access Setup as shown in Figure 3 5 Menu 4 Internet Access Setup ISP s Name ISP Gateway IP Addr Connection Type Switch Leased Ports N A SUA Pri Phone My Login Password k Single User Account Yes Local IP Addr Server IP Addr Edit Script Options No Figure 3 5 Menu 4 Internet Access Setup for Single User Account To enable the SUA feature in Menu 4 move the cursor to the Single User Account field and select Yes or No to disable SUA Then follow the instructions on how to configure the SUA fields in Table 3 5 Internet Access 3 13 Prestige 153 153X WAN Bridge Routers Table 3 5 Single User Account Menu Fields o ne Single User Account Select Yes
77. ed Enter the AT Command string to make a call atdt Enter the AT Command string to drop a call represents a one ath second wait Enter the AT Command string to answer a call ata When Yes is selected your Prestige will drop the DTR signal Toggle after sending out AT Command String Drop Yes No Default Yes Enter the keyword preceding the CLID in the response from the NMBR WAN device CLID is required for CLID authentication Enter the keyword preceding the dialed number TO Enter the keyword preceding the connection speed CONNECT 2 8 3 1 AT Command Strings For regular telephone lines the default Dial string tells the modem that the line uses tone dialing If your switch still requires pulse dialing change the string to at dp For ISDN lines there are far more protocols and operational modes Please consult the documentation of your TA for you may need additional commands in both Dial and Init strings 2 22 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers 2 8 3 2 DTR Signal The majority of WAN devices default to hanging up the current call when the DTR Data Terminal Ready signal is dropped by the DTE When Drop DTR When Hang Up is set to yes the Prestige will use this hardware signal to force the WAN device to hang up in addition to issuing the drop command ATH 2 8 3 3 Response Strings The response strings tell th
78. ed to the company instead of the employees and your accounting department can avoid the hassles of accountability and reimbursement 8 10 Dial in Server Configuration Prestige 153 153X WAN Bridge Routers Chapter 9 Filter Configuration 9 1 About Filtering Your Prestige uses filters to decide whether or not to allow passage of a data packet and or to make a call There are two types of filters data filters and call filters Data filters screen the data to determine if the packet should be allowed to pass Data filters are further divided into incoming and outgoing filters depending on the direction of the packet direction relative to a port Call filters are used to determine if a packet should be allowed to trigger a call Outgoing packets must pass through the data filters before they encounter the call filters Call filters are divided into two groups the built in call filters and user defined call filters Your Prestige has built in call filters that prevent administrative e g RIP and SAP Service Advertising Protocol packets from triggering calls These filters are always enabled and not accessible to you Your Prestige applies the built in filters first and then the user defined call filters if applicable as illustrated in Figure 9 1 Outgoing Packet Filtering Process Filter Configuration 9 1 Prestige 153 153X WAN Bridge Routers Call Filters Built in User defined paa default Call Filters Call Filters if applicabl
79. empt to make such connections themselves but should contact the appropriate electrical inspection authority or electrician as appropriate Note This digital apparatus does not exceed the class A limits for radio noise emissions from digital apparatus set out in the radio interference regulations of Industry Canada iv Information for Canadian Users Prestige 153 153X WAN Bridge Routers The declarations of CE marking C The Prestige 153 and Prestige 153X have been approved for connection to the Public Switched Telecommunication Network using interfaces compatible with ITU TSS recommendation 1 420 Basic Rate ISDN user access The Prestige 153 and Prestige 153X comply with the following directives 1 Declarations of CE Marking The Council Directive 72 23 EEC of 19 February 1973 on the harmonization of the laws of the Member States relating to electrical equipment designed for use within certain voltage limits The Low Voltage Directive The Council Directive 89 336 EEC of 3 May 1992 on the approximation of the laws of the Member States relating to Electro Magnetic Compatibility EMC Directive Council Directive 91 263 EEC of 29 April 1991 on the approximation of the laws of the Member States concerning telecommunication terminal equipment The Telecom Terminal Equipment Directive 93 68 EEC of 22 July 1993 amending the Directives 89 336 EEC 91 263 EEC and 92 31 EEC Marking Directive The Council Directive 92 31 EEC
80. enees 13 1 Menu 24 1 System Maintenance Status eecceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeenees 13 2 LAN Packet Which Triggered Last Calll ecceeeeceeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeenees 13 4 Menu 24 2 System Maintenance Change Terminal Baud Rate 13 5 List of Figures Figure 13 5 Figure 13 6 Figure 13 7 Figure 13 8 Figure 13 9 Figure 13 10 Figure 13 11 Figure 13 12 Figure 13 13 Figure 13 14 Figure 13 15 List of Figures Prestige 153 153X WAN Bridge Routers Examples of Error and Information MeSSageS cecseeeeeeeneeeeeeeeeeeeeeaneeeees 13 6 Menu 24 3 2 System Maintenance Syslog and Accounting eeeeee 13 7 Menu 24 4 System Maintenance Diagnostic enere eeens 13 9 Trace Display for a Successful IPCP Connection Via Manual Call 13 11 Trace Display for a Failed Authentication 2 0 cecceeeeeeeeeeeeeeeeeeeeeeeeeeeees 13 11 Menu 24 7 System Maintenance Upload Firmware sseeeeeeeeeeeees 13 13 Menu 24 7 1 Uploading RAS Code ccceeeeeeeeeeeeeeeeeeeeeseeeeeeaaeeeeeaaeeees 13 14 Menu 24 7 2 System Maintenance Upload ROM File saec 13 15 Menu 24 9 System Maintenance Call Control ecceeeeeeeeeeeeeeeeees 13 16 Menu 24 9 2 Blacklist 00 ecceeeceeceeeeeee a a eg de he ge 13 17 Menu 24 9 3 Budget Management ceceeeceeeeeeeeeeeeeeeeeeeeeesaaeeeeeeaaeeeees
81. eneral Ethernet Setup ccceeeeeeeeeeeeeeaeeeeeeeaaeeeeeeaaeeeeeeaaeeeees 2 25 Menu 1 General S tup cece de be an aKa erer de he ler eden de 3 1 Menu 3 2 TCP IP and DHCP Ethernet Setup W W u u ssseeeeeeeerereere ere rn kr rn nn nene 3 4 Menu 4 Internet Access Setup ccceeececseeeeceeaeeeeeeaaeeeeeeaaeeeeeeaaaeeeeeaaaeeeeeaa 3 8 Single User Account Topology seceeeceeeeeceaaeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaa 3 11 Menu 4 Internet Access Setup for Single User Account 3 13 Menu 11 Remote Node Setup ceceeceeeeeeeeeeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaa 4 2 Menu 11 1 Remote Node Profile for Dial up Lines ccceeeeeeeneeeeeeeeeeeeeeeee 4 2 Menu 11 2 Remote Node PPP Options ccceeeeeeeeeeeeeaeeeeeeeaaeeeeeeaaeeeees 4 10 Menu 11 4 Remote Node Setup Script eeeceeeeeeeeeeeeeeeaaeeeeeeaaeeeeeeaaeeeees 4 13 Menu 11 1 Remote Node Profile for Leased Lines 4 15 xiii Prestige 153 153X WAN Bridge Routers Figure 5 1 Figure 5 2 Figure 5 3 Figure 5 4 Figure 5 5 Figure 5 6 Figure 6 1 Figure 6 2 Figure 6 3 Figure 6 4 Figure 6 5 Figure 7 1 Figure 7 2 Figure 7 3 Figure 8 1 Figure 8 2 Figure 8 3 Figure 8 4 Figure 8 5 Figure 9 1 Figure 9 2 Figure 9 3 Figure 9 4 Figure 9 5 Figure 9 6 Figure 10 1 Figure 11 1 Figure 11 2 Figure 11 3 Figure 12 1 Figure 13 1 Figure 13 2 Figure 13 3 Figure 1
82. ers 2 8 WAN Setup This section describes how to configure the WAN ports and the WAN devices using Menu 2 WAN Setup If advanced setup is required go to Menu 2 2 When you finish the setup the Prestige uses this information to initialize the WAN port and the attached WAN device 2 8 1 Prestige 153 WAN Port Setup This section describe the WAN port setup for P 53 only Setup for P 53X is described in the following section Step 1 Select option 2 WAN Setup in the Main Menu by typing 2 at the menu selection number prompt Step 2 In Menu 2 WAN Port Setup enter the number 1 2 or 3 of the WAN port you wish to configure Menu 2 WAN Port Setup 1 Wan Port 1 2 Wan Port 2 3 Wan Port 3 Enter Menu Selection Number Figure 2 9 Prestige 153 Menu 2 WAN Port Setup 2 14 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers Step 3 This will bring up Menu 2 1 Async WAN Port Setup as shown in Figure 2 10 Menu 2 1 Async WAN Port Setup Modem Name ZyXEL Active Yes Connection Type Switch Phone Number Device Type 56K Modem Port Speed 115200 AT Command String Init ats0 0 Advanced Setup No Press ENTER to Confirm or ESC to Cancel Figure 2 10 Prestige 153 Menu 2 1 Async WAN Port Setup Hardware Installation amp Initial Setup 2 15 Prestige 153 153X WAN Bridge Routers Table 2 5 describes how to configure a WAN port Table 2 5 Prestige 153 Async WAN Po
83. exit this screen Please note that entering 9 will reset all counters except the Total Outcall Time System Maintenance Prestige 153 153X WAN Bridge Routers The following Table 13 1 describes the fields present in Menu 24 1 System Maintenance Status Table 13 1 System Maintenance Status Menu Fields Shows statistics for the WAN ports respectively 2 Status Shows the status of the port Idle Calling or Answering When the connection is up it shows the name of the remote node or the dial in user currently connected The connection speed of the current call TXPkts The number of transmitted packets on this port RXPkts The number of received packets on this port The number of packets both in and out with errors and discarded on this port The running display of the number bytes transmitted in the last second The running display of the number bytes received in the last second The elapsed time of the current call 10 Total Outgoing The grand total outgoing call time for all WAN ports since the system was last call Time powered on 11 Ethernet The following 4 fields show the status of the Ethernet port 12 Status Shows the current status Speed and half full duplex of the LAN 13 TX Pkts The number of transmitted packets to LAN 14 RX Pkts The number of received packets from LAN 15 Collision The number of collisions more than 1 station trying to transmit at the same time System Mai
84. f the remote nodes Once a remote node is configured correctly traffic to the remote network will trigger your Prestige to make a call automatically i e Dial On Demand In this chapter we will discuss the parameters that are protocol independent The protocol dependent configuration will be covered in subsequent chapters For TCP IP see Chapter 5 for IPX see Chapter 6 For Bridging see Chapter 7 4 1 Remote Node Setup This section describes the protocol independent parameters for a remote node 4 1 1 Remote Node Profile To configure a remote node follow these steps Step 1 From the Main Menu select menu option 11 Remote Node Setup Step 2 When Menu 11 appears as shown in Figure 4 1 enter the number of the remote node that you wish to configure Remote Node Configuration 4 1 Prestige 153 153X WAN Bridge Routers Menu 11 Remote Node Setup Enter Node to Edit Figure 4 1 Menu 11 Remote Node Setup Step 3 When Submenu 11 1 Remote Node Profile appears select the type of line that will be used dial up line or leased line Set the Connection Type to one of the following values e Switch for dial up lines Leased for leased lines Selecting Leased will bring you to Submenu 11 1 2 Remote Node Profile for leased line Menu 11 1 Remote Node Profile Rem Node Name Active Yes Connection Type Switch Call Direction Both Incoming Rem Login Rem Password Rem CLID
85. fore comparison Enter the value in Hexadecimal to compare with the data portion Once you have completed filling in Menu 21 1 2 generic Filter Rule press Enter at the message Press Enter to Confirm to save your configuration or press Esc to cancel This data will now be displayed on Menu 21 1 Filter Rules Summary Filter Configuration 9 11 Prestige 153 153X WAN Bridge Routers 9 3 3 Novell IPX Filter Rule This section shows you how to configure an IPX filter rule IPX filters allow you to base the rules on the fields in the IPX headers To configure an IPX rules select IPX Filter Rule from the Filter Type field and press Enter to open Menu 21 1 3 IPX Filter Rule as shown in Figure 9 6 Menu 21 1 3 IPX Filter Rule Filter 1 1 Filter Type IPX Filter Rule Active No IPX Packet Type Destination Network Node Socket Socket Comp None Source Network Node Socket Socket Comp None Operation N A More No Log None Action Matched Check Next Rule Action Not Matched Check Next Rule Press ENTER to Confirm or ESC to Cancel Press Space Bar to Toggle Figure 9 6 Menu 21 1 3 IPX Filter Rule 9 12 Filter Configuration Prestige 153 153X WAN Bridge Routers Table 9 7 describes the IPX Filter Rule Table 9 7 IPX Filter Rule Menu Fields IPX Packet Type Destination Source Network Destination Source Node Destination Source Socket Destination Source Socket
86. gle Figure 4 4 Menu 11 4 Remote Node Setup Script Remote Node Configuration 4 13 Prestige 153 153X WAN Bridge Routers The following Table 4 3 describes each field in Menu 11 4 Remote Node Setup Script Table 4 3 Remote Node Script Menu Fields Active Press the space bar to toggle between Yes and No Yes No Set 1 6 Expect Enter an Expect string to match After matching the Expect string the Prestige returns the string in the Send field Set 1 6 Send Enter a string to send out after the Expect string is matched 4 14 Remote Node Configuration Prestige 153 153X WAN Bridge Routers 4 2 Leased Line Support A leased line provides a connection that is always up without dialing and modem negotiation which can take tens of second The WAN port on the Prestige allows you to connect a leased line modem async Obviously the Connection Type of the WAN port must be selected as Leased in Menu 2 1 Async WAN Port Setup Please note that synchronous device support is available only on WAN port and 2 of Prestige 153X 4 2 1 Dial up Backup for Leased Line If you have a dial up line in addition to the leased line you can use the dial up line as a backup for the leased line in the event that the leased line is down When the leased line connection drops your Prestige will select an available modem to place a phone call to establish a backup connection When the leased line is up again your Prestige will drop
87. hapter 4 Remote Node Configuration 4 1 Remote Node Setup sussie SE EU eeeeducdagebdeaies eeenedag Ea nen erne ahr bene 4 1 4 2 Leased Eine Supports aen sa a N rese N S A a 4 15 Chapter 5 Remote Node TCP IP Configuration 5 1 LAN to LAN Application ELERS ES AEEA EIN AERA REAREA ANA GES 5 1 Chapter 6 IPX Configuration 6 1 IPX Network Environment sssseeseeeee cece ce eeeeeeeeceeeeeaeeeeeeeeesaeeeeaeeesaeeeesaeeeseeeeaaees 6 1 6 2 Prestige in an IPX Environment W u u u sssssesesessveveee sense teens nes sneen enes snes anes enna aa teeeees 6 3 6 3 IPX SpOOfing aa EA Ea epa N vveesie ldweeds r E Er aa Shwe vs 6 4 6 4 IPX Ethernet Setup ssvie vers eeseeen ered ndisveene a geen ere See eo veces 6 5 6 5 LAN to LAN Application with Novell IPX u u u ssseseeeeeeeener ennen ennen ennen ennen ennen ennen ennen 6 7 Chapter 7 Bridging Setup A Bridging ir Generali esses EA oo ODESSA rd a 7 1 7 2 Bridge Ethernet Setup ducenda ii Aa ile nen bis heden reder 7 1 Chapter 8 Dial in Server Configuration 8 1 Remote Access Servel aiurri i iea a a e aera TEA 8 2 8 2 LAN to LAN Application s cccsccssceesec sscenstadacocaneaswe A AANEEN hue ERE AAEE 8 3 8 3 Default Dialeln Setup rn sos ne seins E EE A Adga eins ESE AR a 8 4 8 4 Dikh Ussi SOtUp s 28 sid thet eeseaetcstvetdat a teestel REE A SEES SES MERE NEDE SEERE ERE FEER 8 8 8 5 CLID Authenticate SS RS DS NE SR ESAE AEEA es 8 10 8 0 alba Ko DEDE ri e a i a a aa en roer er Bendel 8
88. hernet II DIX and SNAP Sub Network Access Protocol Each frame type is a separate logical network even though they exist on one physical network Even though there are four frame types available on the Ethernet you should configure as few frame types as possible on your NetWare server and use automatic frame detection on the clients to simplify management and to reduce network overhead IPX Configuration 6 1 Prestige 153 153X WAN Bridge Routers 6 1 3 External Network Number Each of the four logical networks based on frame type has its own external network number 6 1 4 Internal Network Number In addition to the external network numbers each NetWare server has its own internal network number that is a virtual network to which the server is attached It is important to remember that every network number must be unique for that entire internetwork either internal or external 6 2 IPX Configuration Prestige 153 153X WAN Bridge Routers 6 2 Prestige in an IPX Environment There are two different scenarios in which your Prestige is deployed LAN with a server server side LAN without a server client side Figure 6 1 illustrates a typical IPX LAN to LAN application Seed Router Client Side Not Seed Router Server Side Assigns Network Number Learns Network Number pal NetWare Clients NE yA NetWare lt C Prestige 153 153X Prestige 153 153X Server Figure 6 1 Prestige in an IPX Environme
89. ing Your Prestige supports SNMP agent functionality which allows a manager station to manage and monitor the Prestige through the network Keep in mind that SNMP is only available if TCP IP is configured on your Prestige 10 2 SNMP Configuration To configure SNMP select option 22 SNMP Configuration from the Main Menu to open Menu 22 SNMP Configuration as shown in Figure 10 1 The community for Get Set and Trap fields is simply SNMP s terminology for password Menu 22 SNMP Configuration SNMP Get Community public Set Community public Trusted Host 0 0 0 0 Trap Community public Destination 0 0 0 0 Press ENTER to Confirm or ESC to Cancel Figure 10 1 Menu 22 SNMP Configuration SNMP Configuration 10 1 Prestige 153 153X WAN Bridge Routers The following table describes the SNMP configuration parameters Table 10 1 SNMP Configuration Menu Fields Coe Get Community Enter the Get Community which is the password for the incoming Get and GetNext requests from the management station Set Community Enter the set community which is the password for incoming Set requests from the management station Trusted Host If you enter a trusted host your Prestige will only respond to SNMP messages from this address If you leave the field blank default your Prestige will respond to all SNMP messages it receives regardless of source Trap Enter the trap community which is the password sent w
90. ing unless you need to support protocols other than IP and IPX on your network For IP and IPX enable the respective routing if you need it do not bridge what the Prestige can route 7 2 Bridge Ethernet Setup Basically all non local packets are bridged to the WAN however your Prestige applies special handling for certain IPX packets to reduce the number of calls depending on the setting of the Handle IPX field Bridging Setup 7 1 Prestige 153 153X WAN Bridge Routers From Menu 3 Ethernet Setup enter option 4 Bridge Setup and Menu 3 5 Bridge Ethernet Setup displays as shown in Figure 7 1 Menu 3 5 Bridge Ethernet Setup Handle IPX None Press ENTER to CONFIRM or ESC to CANCEL Press Space Bar to Toggle Figure 7 1 Menu 3 5 Bridge Ethernet Setup Table 7 1 describes how to configure the Handle IPX field in Menu 3 5 Table 7 1 Bridge Ethernet Setup Menu Handle IPX Field Configuration Handle IPX Field Description Menu 3 5 None When there is no IPX traffic on the LAN or when you do not want to apply any special handling for IPX Client When there are only client workstations on the LAN RIP and SAP Service Advertising Protocol response packets will not trigger calls Server When there are only IPX servers on the LAN No RIP or SAP packets will trigger calls In addition during the time when the line is down your Prestige will reply to watchdog messages from the servers on behalf of remote client
91. ith each trap to Community the SNMP manager Blank Trap Enter the IP address of the station to send your SNMP traps to blank Destination Once you have completed filling in Menu 22 SNMP Configuration press Enter at the message Press ENTER to Confirm to save your configuration or press Esc to cancel 10 2 SNMP Configuration Prestige 153 153X WAN Bridge Routers Chapter 11 System Security This chapter covers Menu 23 which is for you to change the system password and to configure an external authentication server 11 1 Changing the System Password To change the system password following steps below Step 1 Select option 23 System Security in the Main Menu to open Menu 23 System Security as shown in Figure 11 1 Menu 23 System Security 1 Change Password 2 External Server Enter Menu Selection Number 1 Figure 11 1 Menu 23 System Security Telnet Configuration 11 1 Prestige 153 153X WAN Bridge Routers Step 2 From the System Security Menu select option 1 Change Password to open Menu 23 1 System Security Change Password Step 3 Enter your existing system password and press Enter Menu 23 1 System Security Change Password Old Password XXXXXXXX New Password XXXXXXXX Retype to confirm XXXXXXXX Enter here to CONFIRM or ESC to CANCEL Figure 11 2 Menu 23 1 System Security Change Password Step 4 Enter your new system password and press Enter Step 5 Re
92. ket Which Triggered Last Call 13 4 System Maintenance Prestige 153 153X WAN Bridge Routers 13 2 Terminal Baud Rate You can set up different baud rates for the console port through Menu 24 2 Terminal Baud Rate Your Prestige supports 9600 default 19200 38400 57600 and 115200bps for the console port Use the space bar to select the desired baud rate in Menu 24 2 as shown in Figure 13 4 Menu 24 2 System Maintenance Change Terminal Baud Rate Terminal Baud Rate 115200 Press ENTER to Confirm or ESC to Cancel Press Space Bar to Toggle Figure 13 4 Menu 24 2 System Maintenance Change Terminal Baud Rate 13 3 Log and Trace There are two logging facilities in the Prestige The first is the error logs and trace records that are stored locally The second is the UNIX syslog facility for message logging 13 3 1 Viewing Error Log The first place you should look for clues when something goes wrong is the error trace log Follow the procedure below to view the local error trace log Step 1 Select option 24 from the Main Menu to open Menu 24 System Maintenance Step 2 From Menu 24 select option 3 to open Menu 24 3 System Maintenance Log and Trace Step 3 Select the first option from Menu 24 3 System Maintenance Log and Trace to display the error log in the system After the Prestige finishes displaying you will have the option to clear the error log System Maintenance 13 5 Prestige 153 153X
93. l not have to get the SAP information when the line is brought back up Enter the time number of minutes in this field Once you have completed filling in the Network Layer Options Menu press Enter to return to Menu 11 1 Then press Enter at the message Press ENTER to Confirm to save your configuration press Esc to cancel IPX Configuration 6 9 Prestige 153 153X WAN Bridge Routers 6 5 2 IPX Static Route Setup Similar to IP IPX static routes tell the Prestige how to reach servers beyond a remote node before a connection to that remote node is established From Menu 12 select one of the IPX Static Routes to open Menu 12 2 Edit IPX Static Route as shown in Figure 6 5 Menu 12 2 Edit IPX Static Route Route 11 Server Name Active Yes Network Node 000000000001 Socket 0451 Type 0004 Hop Count 2 Tick Count 3 Gateway Node Press ENTER to CONFIRM or ESC to CANCEL Figure 6 5 Menu 12 2 Edit IPX Static Route 6 10 IPX Configuration Prestige 153 153X WAN Bridge Routers Table 6 3 contains the instructions on how to configure the Edit IP Static Route Menu Table 6 3 Edit IPX Static Route Menu Fields Server Name In this field enter the name of the server This must be the exactname configured in the NetWare server Network This field contains the internal network number of the remote server that you wish to access 00000000 or FFFFFFFF are reserved This field
94. ment cceceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaaaeeeeeaaeeeeeeaneeees 2 2 2 3 Connect your WAN Bridge Router ss causes ennen ennen cee eeeeaaieeeeeaaeeeeeeaaeeeeeeaaeeeees 2 3 2 4 Power On Your Prestige ioeie rae ee Aii O div raa e 2 6 2 5 Navigating the SMT Interface munido rato na A OE EE AN A NEEE E OEN E E 2 8 2 6 Changing the System PaSSWOM 0ceceeeeeeeeeeeeeeeeeeeee nese eeaeeeeeeeaaeeeeeeaaeeeseeaeeeeeeneees 2 10 27 General Setup eae Ae ees ee a es es ee a ee Se E 2 12 2 8 WAN SEUD Acts eeceisiacest stands etna pecetebpzocuia bs SEERE SES acing SEES E SENE TAEAE 2 14 2 9 Ethermet Setup viccs ecterssiveneteetlaesh iieeelag e ive T ance tive DL 2 25 2 10 Protocol Dependent Ethernet Setup cececeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeeaeeeseeeees 2 26 Chapter 3 Internet Access 3 1 Route IP Setup erena a Windies davies ered g Sarde ine div eds raiat aSa 3 1 3 2 TCP IP Parameters AS ENE E ne ee es 3 2 3 3 TCP IP and DHCP Ethernet Setup e ccc ceeeecceeeeeeeeeeeeeeeeeeeeeeaaeeeeeeaaaeeeesaaaeeeeeaaeeeees 3 4 3 4 Internet Access Configuration ccceeeeeeceeeeeeeeeeeeeee eee sees a ie A i Re ia 3 7 3 5 Single Wser ACCOUNT craras a A EE cyan bactata sd ed seuidh staat ER TEASE 3 11 3 6 Configuring Backup ISP ACCOUNTS casin iaa a a aR e A E aaa 3 14 3 70 Editing Script Options erani einkenna EENE AE AEAEE EAEE AR 3 15 Table of Contents ix Prestige 153 153X WAN Bridge Routers C
95. mportant for you to make sure that the correct cable is used for each connection otherwise your Prestige could be damaged Step 1 Connect your Computer and your Prestige For the initial setup of your Prestige you need to use a terminal emulator software on a workstation and connect it to the Prestige through the console port Connect the RJ 45 end of the enclosed console cable to the console port of the Prestige and the other end to a serial port COM1 COM or other COM port of your workstation Use the enclosed DB 25 DB 9 converter if necessary After your Prestige has been successfully installed and configured you can modify the setup remotely through telnet sessions See Chapter 12 Telnet Configuration and Capabilities for detailed instructions Step 2 Connect WAN Devices to your Prestige Connect the DTE port of a WAN device to a WAN port black on the Prestige using an appropriate cable and connect the WAN device to the telephone network Please consult the documentation of your WAN device for detailed information when making the connections Step 3 Connect your Prestige to Ethernet Connect one end of an UTP Unshielded Twisted Pair cable to the Ethernet port metallic of the Prestige and the other to a 10Base T hub using a straight through UTP Unshielded Twisted Pair cable with RJ 45 connectors If you connect the Prestige to a workstation directly without a hub you must use a crossover cable Step 4 Connect the Powe
96. n This field is applicable only if the Mutual Authen Field is set to Yes Enter the PAP password for your Prestige This field does not apply to CHAP authentication None Required Preferred CHAP PAP CHAP PAP None Yes No 8 5 Prestige 153 153X WAN Bridge Routers Table 8 2 Default Dial in Setup Fields continued pe o ener omen Multiple Link Options Max Enter the maximum number of ports in an MP bundle Default 1 Port between your Prestige and a remote dial in user Callback Budget This field sets the budget callback time for all remote Default 0 Management Allocated dial in users The default for this field is 0 for no budget Budget min control Callback Budget This field sets the time interval to reset the above Management Period hr callback budget control Dial In IP Address Supplied If set to Yes the Prestige will allow a remote host to Default Yes By Dial in User specify its own IP address Yes No If set to No the remote host must use the IP address assigned by your Prestige from the IP pool configured below This is to prevent the remote host from using an invalid IP address and potentially disrupting the whole network Dial In IP Address Supplied This field tells your Prestige to provide the remote host Yes No By IP Pool with an IP address from the pool This field is required if Dial In IP Address Supplied By Dial in User is set to Default
97. n 14 to go to Menu 14 Dial in User Setup as shown in Figure 8 4 Menu 14 Dial in User Setup johndoe Enter Menu Selection Number Figure 8 4 Menu 14 Dial in User Setup Step 2 Select one of the users by number this will bring you to Menu 14 1 Edit Dial in User as shown in Figure 8 5 Menu 14 1 Edit Dial in User User Name Active Yes Password Callback No Phone Supplied by Caller N A Callback Phone N A Rem CLID Idle Timeout 300 Press ENTER to Confirm or ESC to Cancel Figure 8 5 Menu 14 1 Edit Dial in User 8 8 Dial in Server Configuration Prestige 153 153X WAN Bridge Routers Table 8 3 provides instructions on how to fill in the Edit Dial In User fields Table 8 3 Edit Dial in User Menu Fields fess fm OOOO o This is a required field This will be used as the login name for authentication Choose a descriptive word for login e g johndoe You can disallow dial in access to this user by setting this field to Inactive Active Inactive users are displayed with a minus sign at the beginning of the name in Menu 14 Inactive Enter the password for this user o Callback This field determines if your Prestige will allow call back to this user upon Default No dial in If this option is enabled your Prestige will call back to the user if requested In such a case your Prestige will disconnect the initial call from this user and dial back to the specified callback
98. n 300 R O C Telephone 886 3 578 3942 Ext 266 call between 8 00 AM and 5 00 PM Taiwan time GMT 8 00 Facsimile 886 3 578 2439 E mail Sales Inquiries sales zyxel com tw Technical Support support zyxel com tw Product Information For product information visit our site on the World Wide Web http www zyxel com FTP Information Information such as ZyXEL software and ROM updates is available for download at these FTP addresses North America ftp zyxel com Europe ftp zyxel co at Customer Support vii Prestige 153 153X WAN Bridge Routers Table of Contents Table Of CoOmtentsi R A A T E A A E A A ix LiSt ol FIGUES ioia octet ee eee ae A ar EAE AEDA EEEN AA AE EEA N xiii EROTI EEN ED N E A AE AS xvii PROTACC A E E E E E E T O O E ERERERER xix Chapter 1 Getting to Know Your Bridge Router 1 1 Prestige 153 153X WAN Bridge Routers ccceeeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeaaeeeeeeaaeeeees 1 1 1 2 Features of Prestige 153 153X Area ir na EAEAN AAEE ETE rs EEN 1 1 t3 The WAN PORNS e ae aie anti ae id tee oo 1 3 1 4 Front Panel LEDs and Back Panel Ports c ceceeccseeeeeeaeeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaae ees 1 4 1 5 Applications for Prestige 153 153X ccccccccceeeeeenneeee cena eeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaeeeeesaaaaeees 1 8 Chapter 2 Hardware Installation amp Initial Setup 2 1 Unpacking your Bridgea ROUTO ereere tanen aE nne E E AE EE RENAE ANAR 2 1 2 2 Additional Installation Require
99. nection Your Prestige is also equipped with a Call Detail Record to help to analyze and manage your telephone bill e RADIUS Support RADIUS Remote Authentication Dial In User Service is the most popular protocol for user authentication on dial up lines RADIUS support allows you to use an external server for unlimited number of users and the ease of centralized management e PAP and CHAP Security The Prestige supports PAP Password Authentication Protocol and CHAP Challenge Handshake Authentication Protocol CHAP is more secure than PAP however PAP is readily available on more platforms 1 2 Getting to Know Your Bridge Router Prestige 153 153X WAN Bridge Routers e DHCP Support DHCP Dynamic Host Configuration Protocol allows you to dynamically and automatically assign IP address settings to hosts on your network e Call Control Your Prestige provides budget management for outgoing calls and maintains a blacklist for unreachable phone numbers in order to save you the expense of unnecessary charges e Data Compression Your Prestige incorporates Stac data compression to speed up data transfer Stac is the de facto standard of data compression over PPP links e Networking Compatibility Your Prestige is compatible with remote access products from other manufacturers such as Ascend Cisco and 3Com Furthermore it supports Microsoft Windows 95 and Windows NT remote access capability 1 3 The WAN Ports The WAN ports
100. nfiguration Prestige 153 153X WAN Bridge Routers Chapter 5 Remote Node TCP IP Configuration This chapter shows you how to configure the TCP IP parameters of a remote node 5 1 LAN to LAN Application A typical LAN to LAN application is to use your Prestige to connect a branch office to the headquarters as depicted in the following Figure 5 1 qe w Prestige 153 153X Prestige 153 153X Figure 5 1 LAN to LAN Application with TCP IP For the branch office you need to configure a remote node to dial out to the headquarters Additionally you may also need to define static routes if some services reside beyond the immediate remote LAN Remote Node TCP IP Configuration 5 1 Prestige 153 153X WAN Bridge Routers 5 1 1 Remote Node Setup Follow the procedure in Chapter 5 Remote Node Configuration to configure the protocol independent parameters in Menu 11 Remote Node Profile For the TCP IP parameters follow the instructions below If you are configuring your Prestige to receive incoming calls you also need to set the default dial in parameters in Menu 13 Follow the steps below to edit Menu 11 3 Remote Node Network Layer Options shown in Figure 5 2 Step 1 In Menu 11 1 make sure IP is among the protocols in the Route field The Route field should display Route IP or Route IP IPX Step 2 Move the cursor to the Edit IP IPX Bridge field then press the space bar to toggle and set the value to Yes an
101. nications software configured to the following parameters gt VT100 terminal emulation gt 9600 Baud gt No parity 8 Data bits 1 Stop bit After the Prestige is properly set up you can make future changes to the configuration through telnet connections 2 2 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers 2 3 Connect your WAN Bridge Router 2 3 1 Prestige 153 Connections Power Power Adapter Outlet PSTN ISDN Network CONSOLE WAN 3 WAN 2 WAN 1 Ethernet LAN Computer Figure 2 1 Prestige 153 Connections Hardware Installation amp Initial Setup 2 3 Prestige 153 153X WAN Bridge Routers 2 3 2 Prestige 153X Connections Power Power Adapter Outlet gt PSTN ISDN Network Fractional T1 E1 Modem ISDN T A 0000000 pe POWER CONSOLE Ethernet LAN Computer Figure 2 2 Prestige 153X Connections 2 4 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers This section outlines how to connect your Prestige 153 153X to the LAN and the WAN Refer to Figure 2 1 or Figure 2 2 depending on your model when you are making the connections To minimize confusion over the various RJ 45 ports they are color coordinated as follows Port Color Ethernet 10Base T Port Metallic WAN Ports Black Console Port Off White The enclosed cables are of the same color as the ports for which they are intended however it is still i
102. nt 6 2 1 Prestige on LAN with Server If your Prestige is on a LAN with a seed router you do not need to configure the LAN network numbers Your Prestige will learn the network number from the seed router and add the routes to its routing table 6 2 2 Prestige on LAN without Server Each IPX network must have a seed router If you only have NetWare clients on your network then you must configure the Prestige as a seed router and set up unique network numbers for each frame type enabled using the Ethernet Setup Menu IPX Configuration 6 3 Prestige 153 153X WAN Bridge Routers 6 3 IPX Spoofing Your Prestige comes with several pre defined call filters designed to prevent certain IPX packets from triggering a call to a remote node The built in call filters are defined as follows Block periodical RIP Routing Information Protocol and SAP Service Advertising Protocol response messages Block NetWare serialization packets Allow SAP and RIP inquiry packets 6 4 IPX Configuration Prestige 153 153X WAN Bridge Routers 6 4 IPX Ethernet Setup From Menu 3 Ethernet Setup select option 3 Novell IPX Setup to go to Menu 3 3 Novell IPX Ethernet Setup as shown in Figure 6 2 Menu 3 3 Novell IPX Ethernet Setup Seed Router No Frame Type 802 2 Yes IPX Network N A Frame Type 802 3 No IPX Network N A Frame Type Ethernet II No IPX Network N A Frame Type SNAP No IPX Network N A Enter here
103. ntenance 13 3 Prestige 153 153X WAN Bridge Routers Table 13 1 System Maintenance Status Menu Fields continued me o a o O O O Displays the system name of your Prestige This information can be modified in Menu 1 General Setup 17 RAS S W Refers to the version of the current RAS firmware Version 18 Ethernet Refers to the Ethernet MAC address assigned to your Prestige Address 19 LAN Packet Shows the first 48 octets of the LAN packet that triggered the last outgoing call Which Triggered There are three different types of packets IP IPX and RAW By viewing the Last Call packet information you can determine which station sends a packet to trigger an outgoing call Figure 13 3 shows two examples of triggering packets from the LAN the first of an ICMP ping packet Type IP and the second a SAP broadcast packet Type Raw With this information you can determine the workstation from the source IP address or the source MAC address of the packet LAN Packet Which Triggered Last ca11 GType 12 D 45 00 00 3C 02 12 00 00 3B 01 36 49 00 00 00 0 CO 44 87 22 44 87 22 08 00 62 2B 20 04 00 00 00 08 A9 DO CO 44 87 22 00 01 02 03 04 03 06 07 08 09 OA OB Source IP Address IP Address Source MAC Address MAC Address N LAN Packet Which Triggered Last Call Cena Raw FF FF 00 22 00 11 00 00 00 00 FF FF FF FF FF FF 04 52 00 00 00 00 D0 40 95 90 09 BJ 40 08 00 03 02 78 01 A5 A5 A5 A5 AS A5 A5 AS Figure 13 3 LAN Pac
104. number source ATTRIBUTE Zyxel Callback Phone Sourc 193 integer VALU Zyxel Callback Phone Sourc Preconfigured 0 VALUI Zyxel Callback Phone Sourc User 1 Ae These changes add the support for CLID authentication as described in the section below Telnet Configuration 11 3 Prestige 153 153X WAN Bridge Routers 11 2 2 RADIUS Server Configuration To configure the RADIUS server select option 23 System Security from the Main Menu to open Menu 23 System Security Select option 2 External Server from this menu to open Menu 23 2 System Security External Server shown in Figure 11 3 Menu 23 2 System Security External Server Authentication Server Active No Type RADIUS Server Address Port 1645 Key Press ENTER to Confirm or ESC to Cancel Press Space Bar to Toggle Figure 11 3 Menu 23 2 System Security External Server 11 4 Telnet Configuration Prestige 153 153X WAN Bridge Routers The fields in the System Security External Server Menu are listed in Table 11 1 Table 11 1 System Security External Server Menu Fields ret Beinn Jr Active Determines whether the external security facility is enabled If No only the built in dial up user list will be used If Yes the built in dial up user list will be searched first then the external authentication server Type Determines the type of the external authentication server At present only RADIUS is supported
105. of 28 April 1992 amending directive on the approximation of the laws of the Member States relating to Electro Magnetic Compatibility Prestige 153 153X WAN Bridge Routers ZyXEL Limited Warranty ZyXEL warrants to the original end user purchaser that this product is free from any defects in materials or workmanship for a period of up to two 2 years from the date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or materials ZyXEL will at its discretion repair or replace the defective products or components without charge for either parts or labor and to whatever extent it shall deem necessary to restore the product or components to proper operating condition Any replacement will consist of a new or re manufactured functionally equivalent product of equal value and will be solely at the discretion of ZyXEL This warranty shall not apply if the product is modified misused tampered with damaged by an act of God or subjected to abnormal working conditions Note Repair or replacement as provided under this warranty is the exclusive remedy of the purchaser This warranty is in lieu of all other warranties express or implied including any implied warranty of merchantability or fitness for a particular use or purpose ZyXEL shall in no event be held liable for indirect or consequential damages of any kind of character to the purchaser To obtain
106. on Restore Configuration Software Update Command Interpreter Mode Call Control leg Ra Sis 4 Dis 6 Ts 8 Aa Enter Menu Selection Number Figure 13 1 Menu 24 System Maintenance System Maintenance 13 1 Prestige 153 153X WAN Bridge Routers 13 1 System Status The first selection System Status gives you information on the version of your system firmware and the status and statistics of the ports as shown in Figure 13 2 CMDS Menu 24 1 System Maintenance Status Status Speed TXPkts RXPkts Errs Tx B s Rx B s Up Time Idle OKbps s a 0 0 Down OKbps gt 0 0 Down OKbps a 0 0 Total Outcall Time Ethernet Name p153 Status 10M Full Duplex RAS S W Version V1 6 e01 2 6 98 TX Pkts 26 Ethernet Address 00 a0 c5 01 23 45 RX Pkts U Collisions 0 LAN Packet Which Triggered Last Call Press Command 1 Drop Porti 2 Drop Port 3 Drop Port3 8 Drop All 9 Rst Cnt ESC Exit Figure 13 2 Menu 24 1 System Maintenance Status Follow the procedure below to go to the System Status Menu Step 1 Step 2 Step 3 13 2 Select option 24 from the Main Menu to access Menu 24 System Maintenance From Menu 24 select option 1 System Status There are five possible commands in Menu 24 1 System Maintenance Status Entering 1 or 2 or 3 to disconnect the call on the specified WAN port Entering 8 to disconnect the calls on all WAN ports Entering 9 to reset the counters and Esc to
107. on of the packet to check with the Offset from 0 and the Length fields both in bytes The Prestige applies the Mask bit wise ANDing to the data portion before comparing the result against the Value to determine a match The Mask and Value are specified in hexadecimal numbers Note that it takes two hexadecimal digits to represent a byte so if the length is 4 the value in either field will take 8 digits e g FFFFFFFF To configure a generic rule select Generic Filter Rule in the Filter Type field and press Enter to open Menu 21 1 2 Generic Filter Rule as shown in Figure 9 5 Menu 21 1 2 Generic Filter Rule Filter 1 1 Filter Type Generic Filter Rule Active No Offset 0 Length 0 Mask N A Value N A More No Log None Action Matched Check Next Rule Action Not Matched Check Next Rule Press ENTER to Confirm or ESC to Cancel Figure 9 5 Menu 21 1 2 Generic Filter Rule 9 10 Filter Configuration Prestige 153 153X WAN Bridge Routers Table 9 6 describes the fields in the Generic Filter Rule Menu Table 9 6 Generic Filter Rule Menu Fields ret Oesipion Offset Enter the starting byte of the data portion in the packet that you wish to Default 0 compare The range for this field is from 0 to 255 Length Enter the byte count of the data portion in the packet that you wish to Default compare The range for this field is 0 to 8 Mask Enter the mask in Hexadecimal to apply to the data portion be
108. ory Zyxel Callback Phone Source Preconfigured Dialback No 5551212 Note that if CLID is turned off in your Prestige you need to have a separate user record for joeuser so the regular user name password mechanism still works 11 6 Telnet Configuration Prestige 153 153X WAN Bridge Routers Chapter 12 Telnet Configuration and Capabilities 12 1 About Telnet Configuration Before the Prestige is properly setup for TCP IP the only option for configuring it is through the console port Once your Prestige is configured you can use telnet to configure it remotely as shown in Error Reference source not found Telnet from any station on the Network TCP IP Network Prestige with Network IP Address Telnet from any oo TA R te Locati PSTNISDN Network gmote bocation PSTN Network BENS ae ISDN TA Ethernet LAN Figure 12 1 Telnet Configuration on a TCP IP Network If your Prestige is configured for IPX but not IP routing in Menu 1 telnet is still available provided you assign the Prestige a correct IP address and subnet mask When IP routing is disabled the Prestige can still function as a host 12 2 Telnet Under SUA When Single User Account SUA is enabled and an inside server is specified telnet connections from the outside will be forwarded to the inside server So to configure the Prestige via telnet Telnet Configuration 12 1 Prestige 153 153X WAN Bridge Routers from the outside you
109. ource route option The majority of IP packets do not have source route Destination IP Enter the destination IP Address of the packet you wish to IP address Addr filter This field is a don t care if it is 0 0 0 0 Destination IP Enter the IP subnet mask to apply to the Destination IP Subnet mask Mask Addr Destination Port Enter the destination port of the packets that you wish to 0 65535 filter The range of this field is 0 to 65535 This field is a don t care if it is 0 Destination Port Select the comparison to apply to the destination port in None Less Greater E Comp the packet against the value given in Destination Port qual Not Equal Source IP Addr Enter the source IP Address of the packet you wish to IP Address filter This field is a don t care if it is 0 0 0 0 Source IP Mask Enter the IP subnet mask to apply to the Source IP Addr IP Mask Source Port Enter the source port of the packets that you wish to filter 0 65535 The range of this field is 0 to 65535 This field is a don t care if itis 0 Source Port Select the comparison to apply to the source port in the Yes No Comp packet against the value given in Source Port TCP Estab This field is applicable only when IP Protocol field is 6 Yes No TCP If yes the rule matches only established TCP connections else the rule matches all TCP packets More If yes a matching packet is passed to the next filter rule Yes N A before an action is
110. p Use this menu to setup the remote node for LAN to LAN connection including Internet connection Prestige supports up to four remote nodes 12 Static Routing Setup Use this menu to setup static route for different protocols There are four static routes for each protocol Default Dial in Setup Use this menu to setup default dial in parameters so that your Prestige can be a dial in server for the remote node and Remote Dial in User 14 Dial in User Setup Setup Remote Dial in User Prestige has eight Remote Dial in Users 21 Filter Set Configuration Setup filters to be used in Menu 3 and Menu 11 to provide security call control etc SNMP Configuration Use this menu to setup SNMP related parameters 23 System Security Use this menu to setup security related parameters System Maintenance Provides system status diagnostics firmware upload etc og ext To exit from SMT and return to the blank screen Hardware Installation amp Initial Setup 2 9 Prestige 153 153X WAN Bridge Routers 2 6 Changing the System Password The first thing you should do before anything else is to change the default system password by following the steps below Step 1 Select option 23 System Security in the Main Menu This will open Menu 23 System Security as shown in Figure 2 6 Menu 23 System Security 1 Change Password 2 External Server Enter Menu Selection Number 1 Figure 2 6 Menu 23 System Security Step 2
111. r Adapter to your Prestige Connect the power adapter to the port labeled POWER on the rear panel of your Prestige Hardware Installation amp Initial Setup 2 5 Prestige 153 153X WAN Bridge Routers 2 4 Power On Your Prestige At this point you should have connected the console cable the WAN devices the Ethernet cable and the power supply You can now power on your Prestige by plugging the AC adapter to a power outlet of correct voltage Step 1 Initial Screen When you power on your Prestige the router performs several internal tests and initializes the WAN devices After the initialization the Prestige asks you to press Enter to continue as shown in Figure 2 3 Copyright c 1994 1997 ZyXEL Communications Corp ethernet address 00 a0 c5 01 23 45 Wan port init done Modem 0 init inactive Modem 1 init inactive Modem 2 init inactive Press ENTER to continue Figure 2 3 Power On Display 2 6 Hardware Installation amp Initial Setup Prestige 153 153X WAN Bridge Routers Step 2 Enter Password After you press Enter the Login screen appears prompting you to enter the password as shown in Figure 2 4 For your first login enter the default password 1234 As you enter the password the screen displays an X for each character you type Enter Password XXXX Figure 2 4 Login Screen Please note that if there is no activity for longer than 5 minutes after you log in your Prestige will
112. r the appropriate chapters of the manual depending on which applications you wish to use XX Preface Prestige 153 153X WAN Bridge Routers Chapter 1 Getting to Know Your Bridge Router This chapter describes the key features and applications of your Prestige 153 153X WAN Bridge Router 1 1 Prestige 153 153X WAN Bridge Routers Congratulations on the purchase of your ZyXEL Prestige 153 153X Remote Access Router Your Prestige integrates the routing and bridging functions in a single package and is ideal for everything from Internet browsing to receiving calls from telecommuters to making LAN to LAN connections to remote networks Both Prestige 153 and 153X are equipped with three WAN Wide Area Network ports that can be connected to the PSTN Public Switched Telephone Network via modems or to the ISDN Integrated Service Digital Network via TAs Terminal Adapters In addition the Prestige 153X supports synchronous mode on two of the WAN ports allowing it to connect to FT1 FE1 Fractional T1 E1 leased lines via CSU DSUs Channel Service Unit Data Service Units 1 2 Features of Prestige 153 153X The following are the key features of the P 53 P153X e Multiple WAN Ports Your Prestige 153 features three WAN ports WAN 1 2 and 3 Each WAN port can be connected to a dial up leased line modem or to an ISDN TA Terminal Adapter The WAN ports can be used independently or they can be bundled to support PPP Multilink Protocol PPP
113. re Update c orie a e a ar a i leila eed ee edd 13 13 13 8 Command Interpreter MOde 0 ccecceeeeeeeeeeee cece ee eeeeeeeeeeeeeeaeeeeeeeeaeeeeeeaaeeeeeeeees 13 16 13 9 Call Control cisini e O EDER ce ere ande 13 16 Chapter 14 Troubleshooting 14 1 Problems Starting Up the Prestige ccccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeaaeeeeeeaaeeeeeaaaeeees 14 1 14 2 Problems With the WAN Ports ccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeseaeeeeeaaeeeeeeaaeeeeeeaaieeees 14 2 14 3 Problems with the LAN Interface eccecceeeeee neces ee eee eeeeseeeeeeeaaeeeeeeaaeeeeeeaaaeeees 14 2 14 4 Problems Connecting to a Remote Node or ISP cceeeeeeeeeeeeeeeeeeeeesaeeeeeeaaeeeees 14 3 14 5 Problems for Remote Users cccccceeeeeceeeeeeeceeeeeeeceaaeeeeceaaeeeeaeaaeeeeaeaaeeeeaaaa ees 14 4 Chapter 15 Acronyms and Abbreviations Index Table of Contents xi Figure 1 1 Figure 1 2 Figure 1 3 Figure 1 4 Figure 1 5 Figure 1 6 Figure 2 1 Figure 2 2 Figure 2 3 Figure 2 4 Figure 2 5 Figure 2 6 Figure 2 7 Figure 2 8 Figure 2 9 Figure 2 10 Figure 2 11 Figure 2 12 Figure 2 13 Figure 2 14 Figure 2 15 Figure 3 1 Figure 3 2 Figure 3 3 Figure 3 4 Figure 3 5 Figure 4 1 Figure 4 2 Figure 4 3 Figure 4 4 Figure 4 5 List of Figures Prestige 153 153X WAN Bridge Routers List of Figures Prestige 153 153X Front Panel ecececseeeeeeeeeeeeeaeeeeeeeaaeeeeeeaaeeeeeaaeeeeeeaaaeeee
114. ress ENTER to Confirm or ESC to Cancel Figure 5 6 Menu 12 1 Edit IP Static Route Remote Node TCP IP Configuration 5 7 Prestige 153 153X WAN Bridge Routers Table 5 3 describes the fields for Menu 12 1 Edit IP Static Route Setup Table 5 3 Edit IP Static Route Menu Fields a en Route Name Enter a descriptive name for this route This is for identification purpose only Acie This field allows you to activate deactivate this static route Destination IP Address This parameter specifies the IP address of the final destination Routing is always based on network number If you need to specify a route to a single host use a subnet mask of 255 255 255 255 in the subnet mask field to force the network number to be identical to the host ID IP Subnet Mask Enter the subnet mask for this destination Follow the discussion on IP subnet mask in this chapter Gateway IP Address Enter the IP address of the gateway The gateway is an immediate neighbor of your Prestige that will forward the packet to the destination On the LAN the gateway must be a router on the same segment as your Prestige over WAN the gateway must be the IP address of one of the remote nodes Metric Same meaning as those in the Remote Node Setup See Table 5 2 Same meaning as those in the Remote Node Setup See Table 5 2 5 8 Remote Node TCP IP Configuration Prestige 153 153X WAN Bridge Routers Chapter 6 IPX Configuration This chapter shows yo
115. rnet access 3 1 Route IP Setup The first step is to enable the IP routing in Menu 1 General Setup To edit Menu 1 enter 1 in the Main Menu to select 1 General Setup and press Enter Set the Route IP field to Yes by pressing the space bar as shown in Figure 3 1 Menu 1 General Setup System Name p153 Location location Contact Person s Name name Route IP Yes Route IPX No Bridge No Press ENTER to Confirm or ESC to Cancel Figure 3 1 Menu 1 General Setup Internet Access 3 1 Prestige 153 153X WAN Bridge Routers 3 2 TCP IP Parameters 3 2 1 IP Address and Subnet Mask Similar to the houses on a street that share a common street name the machines on a LAN share one common network number also Where you obtain your network number depends on your particular situation If the ISP Internet Service Provider or your network administrator assigns you a block of registered IP addresses follow their instructions in selecting the IP addresses and the subnet mask If the ISP did not explicitly give you an IP network number then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established If this is the case it is recommended that you select a network number from 192 168 0 0 to 192 168 255 0 ignoring the trailing zero and you must enable the Single User Account feature of the Prestige The Internet Assigned Number Authority IANA reserved
116. rs The budget and the reset period can be configured in the Menu 11 and 13 for a remote node and for the dial in user respectively 13 18 System Maintenance Prestige 153 153X WAN Bridge Routers Chapter 14 Troubleshooting This chapter covers the potential problems you may run into and the possible remedies After each problem description some instructions are provided to help you to diagnose and to solve the problem 14 1 Problems Starting Up the Prestige Table 14 1 Troubleshooting the Start Up of your Prestige Troubleshooting Corrective Action None of the LEDs are on when Check the connection between the AC adapter and your Prestige you power on the Prestige If the error persists you may have a hardware problem In this case you should contact technical support Cannot access the Prestige via 1 Check to see if the Prestige is connected to your computer s serial the console port 2 Check to see if the VT100 terminal emulation communications program is configured correctly The 9600 Baud communications software should be configured as follows No parity 8 Data bits 1 Stop bit Troubleshooting 14 1 Prestige 153 153X WAN Bridge Routers 14 2 Problems With the WAN Ports Table 14 2 Troubleshooting a WAN Port Connection Troubleshooting Corrective Action RDY LED of a WAN Port is not ON Check if the WAN port is connected to an external modem ISDN TA Check if the power of the external modem ISDN TA i
117. rt Setup Modem Name ZyXEL Active Yes Connection Type Switch Async Phone Number Clock Source Internal External Device Type 56K Modem Port Speed 115200 AT Command String Init ats0 0 Advanced Setup No Press ENTER to Confirm or ESC to Cancel Figure 2 12 Prestige 153X Menu 2 1 Sync Async WAN Port Setup Table 2 6 describes how to configure the Prestige 153X Async WAN ports Table 2 6 Prestige 153X Sync Async WAN Port Setup Menu Fields Field Description Example Enter a descriptive name for the WAN device connected to this port ZyXEL Active Set to Yes to activate the WAN port Press space bar to toggle Yes No Connection Select the line and the port type combination Select Switch for dial up Press space bar Type line or Leased for leased line Select Async if the connection to toggle between the WAN device and the WAN port is asynchronous Sync otherwise Switch Async Leased Async Note that synchronous devices are allowed only on leased lines Leased Sync Hardware Installation amp Initial Setup 2 19 Prestige 153 153X WAN Bridge Routers Table 2 6 Prestige 153X Sync Async WAN Port Setup Menu Fields continued ee ae Phone Enter the telephone number assigned to your line by your telephone Number company Note that your Prestige only accepts digits do not include dashes and spaces in this field Clock Source Use the space bar to select the clock source of the
118. rt Setup Menu Fields pe me Modem Name Connection Type Phone Number Device Type Port Speed Enter a descriptive name for the WAN device connected to this port Set to Yes to activate a WAN port Select the connection type for this line Select Switch for a dial up line or Leased for leased line Enter the telephone number assigned to your dial up line by your telephone company Note that your Prestige only accepts digits do not include dashes and spaces in this field Use the space bar to select from one of the following devices Modem ISDN TA X 25 PAD 56K Modem that matches your WAN device This field is not applicable if the Connection Type is set to Leased Use the space bar to select the speed of the connection between the WAN port and the external device Available speeds are 9600 19200 38400 57600 115200 234000 bps Press space bar to toggle Yes No Press space bar to toggle Switch Leased Space bar to toggle Modem ISDN TA X 25 PAD 56K Modem 115200 default Hardware Installation amp Initial Setup Table 2 5 AT Command String Init Advanced Setup Prestige 153 153X WAN Bridge Routers Prestige 153 Async WAN Port Setup Menu Fields continued Enter the AT command string to initialize the WAN device When the Connection Type is set to Switch you must include AT command Default ats0 0 s0 0 to disable modem auto answer your
119. s The period of time that your Prestige will do this is linked to the Ethernet Address Timeout parameter in each remote node see Remote Node Configuration When a remote Ethernet address is aged out there is no need to maintain its connection to the IPX server If there are both clients and servers on the LAN and the local clients will access the remote servers set this field to Server but turn on the Dial On Broadcast parameter in Menu 11 3 to allow the client queries to trigger calls 7 2 Bridging Setup Prestige 153 153X WAN Bridge Routers 7 2 1 Remote Node Bridging Setup Follow the procedure in Chapter 5 to configure the protocol independent parameters in Menu 11 1 Remote Node Profile For bridging related parameters you need to configure Menu 11 3 Remote Node Network Layer Options To setup Menu 11 3 Remote Node Network Layer Options shown in Figure 7 2 follow these steps Step 1 In Menu 11 1 make sure the Bridge field is set to Yes Step 2 Move the cursor to the Edit IP IPX Bridge field then press the space bar to toggle and set the value to Yes and press Enter to edit Menu 11 3 Network Layer Options Menu 11 3 Remote Node Network Layer Options IP Options IPX Options Rem IP Addr Dial On Query No Rem Subnet Mask N A Rem LAN Net 00000000 My WAN Addr N A My WAN Net 00000000 Single User Account N A Hop Count 1 Server IP Addr N A Tick Count 2 Metric N A W D Spoofing min 3
120. s 1 4 Prestige 153 Back Panel Ports uire reier e iei E RA 1 6 Prestige 153X Back Panel Ports sionerien iei erain a Ea AAA EEES 1 7 Internet Access Application cccececccceeeeeeceeeeeeeceeeeeeeaaeaeeeeaaaaeeeeaaaaeeeeaaaaeees 1 8 LAN to LAN Connection Application ccceceeeeeeeeeeeaeeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaa 1 9 Telecommuting Remote Access Application cececeeeeeeeeeeeeeeeeeeeeeeeeeneees 1 10 Prestige 153 Connections 242 oo h a rollen 2 3 Prestige 153X Connections cossaire iaae aa EREE EASE e AN AARE 2 4 Power On Display yeten a e e iain es thee 2 6 Logit SCORN a e a E A EAE EE NEA RN 2 7 SME Main MO R T 2 9 Menu 23 System SeCurity 22 0 0 cecececceeeeeeceeeeeeecceeeeeeacaaeeeeaaaaeeeeaaaaeeeeaaaaeees 2 10 Menu 23 1 System Security Change Password c eecseeeeeeeeeeeeeeees 2 11 Menu 1 General Setup cee eececeeececceeeeee cance eeaaeeeeeeaaaaeeeeaaaaeeeeaaaaeeeeaaaa ees 2 12 Prestige 153 Menu 2 WAN Port Setup ccceeeceeeeeeeeeeeeeeeeeeeeeeaaeeeeeeaaeeeees 2 14 Prestige 153 Menu 2 1 Async WAN Port Setup ceeeeeeeeeeeeeeeeeeeeeaneeeees 2 15 Prestige 153X Menu 2 WAN Port Setup ceeeceeeeeeeeeeeeeeeeeeeeeaaeeeeeeaaee eres 2 18 Prestige 153X Menu 2 1 Sync Async WAN Port Setup e 2 19 Menu 2 1 1 Advanced WAN Port Setup cccseeceeeeeeeeeeeeeeeeeeaaeeeeeeaaeeeees 2 21 Menu 3 Ethernet Setup i een n ERRAT 2 25 Menu 3 1 G
121. s turned on 14 3 Problems with the LAN Interface Table 14 3 Troubleshooting the LAN Interface Troubleshooting Corrective Action Can t ping any station on the LAN Check the Ethernet LED on the front panel of your Prestige If itis off check the cables connecting your Prestige to the hub Verify that the IP address and the subnet mask in Menu 3 2 are consistent between the Prestige and the workstations 14 2 Troubleshooting Prestige 153 153X WAN Bridge Routers 14 4 Problems Connecting to a Remote Node or ISP Table 14 4 Troubleshooting a Connection to a Remote Node or ISP Troubleshooting Corrective Action Can t connect to a remote node or Check Menu 24 1 to verify the line status If it indicates down then ISP refer to the section on the line problems In Menu 24 4 5 do a manual call to that remote node Observe the messages and take appropriate actions Troubleshooting 14 3 Prestige 153 153X WAN Bridge Routers 14 5 Problems for Remote Users Table 14 5 Troubleshooting for Remote User to Dial in Troubleshooting Corrective Action Remote user can t dial in to the First verify that you have configured the authentication parameters in Prestige Menu 13 These would be CLID Authen Recv Authen and Mutual Authen In Menu 14 verify the user name and password for the remote dial in user If the remote dial in user is negotiating IP verify that the IP address is supplied correctly in Menu 13 Ch
122. ser can connect to the corporate office y Coporate LAN 4 Telecommuter Remote User Ethernet LAN spe 5000007 PSTN ISDN Network i oaz Modem Modem ISDN TA R m ISDNTA es Prestige 153 153X Figure 1 6 Telecommuting Remote Access Application 1 10 Getting to Know Your Bridge Router Prestige 153 153X WAN Bridge Routers Chapter 2 Hardware Installation amp Initial Setup 2 1 Unpacking your Bridge Router Before you proceed further check all items you received with your Prestige against this list to make sure nothing is missing The complete package should include Table 2 1 Item Checklist Package Contents Prestige 153 Prestige 153X Prestige 153 or Prestige 153X Bridge Router 1 1 power adapter RJ 45 DB 25 female console cable off white DB 25 male DB 9 female converter LAN crossover cable red tag LAN straight cable white tag RJ 45 DB 25 male WAN cable black 3 user s manual user s manual pinto RS 449oable optional Hardware Installation amp Initial Setup 2 1 Prestige 153 153X WAN Bridge Routers 2 2 Additional Installation Requirements In addition to the contents of your package there are other hardware and software requirements you need before you can install and use your Prestige These requirements include External modems or ISDN TAs A computer with Ethernet 10Base T NIC Network Interface Card A computer equipped with commu
123. sites and yet still have access to the resources in the business office Typically a telecommuter will use a client workstation with TCP IP and dial out capabilities e g a Windows PC or a Macintosh connected to a modem For telecommuters to call in to your Prestige you need to configure a dial in user profile for each telecommuter Additionally you need to configure the Default Dial In Setup to set the operational parameters for all dial in users An example of telecommuting is shown in Figure 8 1 CORPORATE OFFICE ___ gt Telecommuter cecco Remote User nih Modem A ISDN TA Prestige 153 153X ISDN TA aria Ethernet LAN Figure 8 1 Example of Telecommuting 8 2 Dial in Server Configuration Prestige 153 153X WAN Bridge Routers 8 2 LAN to LAN Application Your Prestige can also be used as a dial in server for LAN to LAN application to provide access for the workstations on a remote network For your Prestige to be set up as a LAN to LAN server you need to configure the Default Dial In Setup to set the operational parameters for incoming calls Additionally you must create a remote node for the router on the remote network See Chapter 5 Remote node Configuration An example of your Prestige being used as a LAN to LAN server is shown in Figure 8 2 Remote Network Local Network LAN to LAN Server Prestige Prestige Figure 8 2 Example of a Dial in Server Application Dial in Server Config
124. ssages call information messages i e CDR error information messages and session information messages Some examples of these syslog messages are shown below Call Information Messages line 1 channel 1 call 41 C01 Incoming Call 40001 line 1 channel 1 call 41 C01 ANSWER Connected 64K 40001 line 1 channel 1 call 41 C01 Incoming Call Call Terminated Error Information Messages line 1 channel 1 call 44 E01 CLID call refuse line 1 channel 1 call 45 E02 IP address mismatch a Session Information Messages line 1 channel 1 call 41 101 IPCP up myPrestige line 1 channel 1 call 41 101 IPCP down myPrestige 13 8 System Maintenance Prestige 153 153X WAN Bridge Routers 13 4 Diagnostic The diagnostic facility allows you to test the different aspects of your Prestige to determine if it is working properly Menu 24 4 allows you to choose among various types of diagnostic tests to evaluate your system as shown in Figure 13 7 Menu 24 4 System Maintenance Diagnostic WAN System 1 Drop Modem Call 21 Reboot System 2 Reset Modem 22 Command Mode 3 Manual Call 4 Redirect to Modem TCP IP 11 Internet Setup Test 12 Ping Host Enter Menu Selection Number Manual Call Remote Node N A Host IP Address N A Figure 13 7 Menu 24 4 System Maintenance Diagnostic Follow the procedure below to get to Diagnostic From the Main Menu select option 24 to open Menu 24 System Maintenanc
125. stige 153 153X WAN Bridge Routers Information for Canadian Users The Industry Canada label identifies certified equipment This certification means that the equipment meets certain telecommunications network protective operation and safety requirements The Industry Canada does not guarantee that the equipment will operate to a user s satisfaction Before installing this equipment users should ensure that it is permissible to be connected to the facilities of the local telecommunications company The equipment must also be installed using an acceptable method of connection In some cases the company s inside wiring associated with a single line individual service may be extended by means of a certified connector assembly The customer should be aware that the compliance with the above conditions may not prevent degradation of service in some situations Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated by the supplier Any repairs or alterations made by the user to this equipment or equipment malfunctions may give the telecommunications company cause to request the user to disconnect the equipment For their own protection users should ensure that the electrical ground connections of the power utility telephone lines and internal metallic water pipe system if present are connected together This precaution may be particularly important in rural areas Caution Users should not att
126. stige 153 Back Panel Ports 1 6 Getting to Know Your Bridge Router Prestige 153 153X WAN Bridge Routers 1 4 4 Prestige 153X Back Panel Figure 1 3 shows the rear panel of your Prestige 153X Refer to this diagram when making connections N R 2 3 3 POWER CONSOLE N POWER power connector to the AC adapter I LAN RJ 45 Ethernet 10Base T port metallic R CONSOLE Ru 45 Console port off white 2 1 WAN 1 68 pin WAN port 1 Q WAN 2 68 pin WAN port 2 WAN 3 RJ 45 WAN port 3 black Figure 1 3 Prestige 153X Back Panel Ports Getting to Know Your Bridge Router 1 7 Prestige 153 153X WAN Bridge Routers 1 5 Applications for Prestige 153 153X The following sections show you the possible applications that you can use your Prestige for 1 5 1 Internet Access The Prestige 153 153Xis the ideal high speed Internet access solution Your Prestige 153 153X supports the TCP IP protocol that the Internet uses exclusively A typical Internet access application is shown in Figure 1 4 Coporate LAN vie INTERNET Ges snsowenor ISDN TA Prestige 153 153X Figure 1 4 Internet Access Application 1 5 1 1 Internet Single User Account For a SOHO Small Office Home Office environment your Prestige offers the Single User Account SUA feature that allows multiple users on the LAN Local Area Network to access the Internet concurrently for the cost of a single user The SUA address mapping can also
127. subnet mask to 0 0 0 0 and set RIP to None Step 5 Save the new configuration Please note that the remote IP address of 1 1 1 1 is only a placeholder to avoid conflicting with that of the primary ISP which is implicitly set at 0 0 0 0 When the backup ISP is activated the 3 14 Internet Access Prestige 153 153X WAN Bridge Routers remote IP addresses of 1 1 1 1 combined with the subnet mask of 0 0 0 0 creates a default route that is equivalent to the one derived from the primary ISP 3 6 2 Switch ISP Follow these steps when you need to switch from your primary ISP to a backup ISP Step 1 Step 2 Step 3 Step 4 Enter Menu 11 and select your Primary ISP In Menu 11 1 set the Active field to No Enter Menu 11 again and select your Backup ISP In Menu 11 1 set the Active field to Yes You will now be able to access the Internet through the backup ISP remote node 3 7 Editing Script Options Some ISPs requires text login before it starts PPP negotiation If this is the case for your ISP please refer to section 4 1 6 Editing Login Script on how to create a login script Internet Access 3 15 Prestige 153 153X WAN Bridge Routers Chapter 4 Remote Node Configuration A remote node is required for placing calls to a remote gateway A remote node represents both the gateway and the network behind it across a WAN connection Note that when you use Menu 4 to set up Internet access you are actually configuring one o
128. sulation will be CISCO PPP used Compression Turn on off Stac data compression The default for On Off this field is Off Default Off Multiple Link Options BOD Calculation Select the direction of the traffic you wish to use in Default determining when to add or subtract a link The Transmit or default for this field is Transmit or Receive Receive Min Ports Enter the minimum number of ports for this remote node Max Ports Enter the maximum number of ports for this remote node Target Utility for 2 Port Enter the two thresholds separated by a for Default 1 0 20 kbps subtracting and adding the second port Bandwidth Increment Enter the Bandwidth Increment to define the two for Additional Ports thresholds for subtracting and adding the third port Kbps Remote Node Configuration 4 11 Prestige 153 153X WAN Bridge Routers Table 4 2 Remote Node PPP Options Menu Fields continued e o oem Add Persist This parameter specifies the number of seconds Default 5 sec where traffic is above the adding threshold before the Prestige will bring up the second link Subtract Persist This parameter specifies the number of seconds Default 5 sec where traffic is below the subtraction threshold before your Prestige drops the second link Once you have completed filling in Menu 11 2 Remote Node PPP Options press Enter at the message Press ENTER to Confirm to save your configuration or press Esc
129. sync device Default Space bar to is External and the Port Speed field is not applicable N A toggle Internal External Device Type Use the space bar to select one of the following Modem ISDN TA Space bar to X 25 PAD 56K Modem that specifies the WAN device type This field is toggle not applicable if the Connection Type is set to Leased Modem ISDN TA X 25 PAD 56K Modem Port Speed Use the space bar to select the speed between the Prestige and the 115200 WAN device default Available speeds for Async Device are 9600 19200 38400 57600 115200 230400 bps Available speeds for Sync Device are 2400 4800 9600 14400 19200 28800 56000 64000 128000 192000 256000 bps AT Command Enter an AT command string to initialize the WAN device When the String Init Connection Type is set to Switch you must include AT command s0 0 to disable auto answer your Prestige will decide when to answer the incoming call Default ats0 0 Advanced To edit the Advanced Setup for this WAN port move the cursor to this Yes No Setup field use the space bar to select Yes and press Enter This will bring you to Menu 2 1 1 Advanced Setup When you complete this menu press Enter to save your configuration or Esc to cancel After you press Enter the Prestige uses the information you have saved to initialize the WAN Port and the connected modem ISDN TA
130. ter either i e they must be used alone in response to login and password prompts Please note that the ordering of the sets is significant i e starting from set 1 the Prestige will 4 12 Remote Node Configuration Prestige 153 153X WAN Bridge Routers wait until the Expect string is matched before it proceeds to set 2 and so on for the rest of the script When both the Expect and the Send fields of the current set are empty the Prestige will terminate the script processing and start PPP negotiation This implies two things first the sets must be contiguous the sets after an empty one are ignored Second the last set should match the final message sent by the server For instance if the server prints login successful Starting PPP after you enter the password then you should create a third set to match the final PPP but without a Send string Otherwise the Prestige will start PPP prematurely right after sending your password to the server If there are errors in the script and it gets stuck at a set for longer than the Dial Timeout in menu 2 default 60 seconds the Prestige will timeout and drop the line To debug a script go to Menu 24 4 to initiate a manual call and watch the trace display to see if the sequence of messages and prompts from the server differs from what you expect Menu 11 4 Remote Node Setup Script Press ENTER to CONFIRM or ESC to CANCEL Press Space Bar to Tog
131. the backup link 4 2 2 Leased Line Remote Node Profile From Submenu 11 1 2 select Leased in the Connection Type field to go to Submenu 11 1 2 Remote Node Profile for Leased Line application as shown in Figure 4 5 Menu 11 1 Remote Node Profile Rem Node Name Route IP Active Yes Bridge No Connection Type Leased Leased Ports Edit PPP Options No Incoming Rem IP Addr Rem Login Edit IP IPX Bridge No Rem Password Outgoing Session Options My Login Input Filter Sets My Password Output Filter Sets Authen CHAP PAP Idle Timeout sec 300 Backup Line Call Direction Both Device Type 56K Modem Pri Backup Phone Sec Backup Phone Press ENTER to CONFIRM or ESC to CANCEL Press Space Bar to Toggle Figure 4 5 Menu 11 1 Remote Node Profile for Leased Lines Remote Node Configuration 4 15 Prestige 153 153X WAN Bridge Routers Table 4 4 describes the fields in Menu 11 1 2 Remote Node Profile for Leased Line that are specific to leased lines Table 4 4 Connection Type Leased Leased Port s Incoming Rem Node Login Name for backup line only Incoming Rem Node Password for backup line only Outgoing My Login Name for backup line only Outgoing My Password for backup line only 4 16 Remote Node Profile Menu Fields for Leased Lines a ERE Use space bar to toggle Switch Leased select Leased and press Enter Enter the
132. this block of addresses specifically for private use please do not use any other number unless you are told otherwise Let s say you select 192 168 1 0 as the network number which covers 254 individual addresses from 192 168 1 1 to 192 168 1 254 zero and 255 are reserved In other words the first 3 numbers specify the network number while the last number identifies an individual workstation on that network Once you have decided on the network number pick an IP address that is easy to remember e g 192 168 1 1 for your Prestige The subnet mask specifies the network number portion of an IP address Your Prestige will compute the subnet mask automatically based on the IP address that you entered You don t need to change the subnet mask computed by the Prestige unless you are instructed to do otherwise 3 2 2 RIP Setup RIP Routing Information Protocol allows a router to exchange routing information with other routers The RIP Direction field controls the sending and receiving of RIP packets When set to both the Prestige will broadcast its routing table periodically and incorporate the RIP information that it receives when set to none it will not send any RIP packets and will ignore any RIP packets received The Version field controls the format and the broadcasting method of the RIP packets that the Prestige sends it recognizes both formats when receiving RIP 1 is universally supported but RIP 2 carries more information RIP
133. thout it you must know the IP address of a machine before you can access it The DNS server address es that you enter in the DHCP setup is passed to the client machines along with the assigned IP address and subnet mask Make sure that you obtain the IP address of the DNS server s from your ISP Your workstations will need this information even if you don t use the Prestige s DHCP server Internet Access 3 3 Prestige 153 153X WAN Bridge Routers 3 3 TCP IP and DHCP Ethernet Setup You will now use Menu 3 2 to configure the Ethernet of your Prestige for a TCP IP connection To edit Menu 3 2 select the menu option 3 Ethernet Setup in the Main Menu When Menu 3 appears select the submenu option 2 TCP IP and DHCP Setup and press Enter The screen now displays Menu 3 2 TCP IP and DHCP Ethernet Setup as shown in Figure 3 2 Menu 3 2 TCP IP and DHCP Ethernet Setup DHCP Setup DHCP None Client IP Pool Starting Address N A Size of Client IP Pool N A Primary DNS Server N A Secondary DNS Server N A TCP IP Setup IP Address 192 68 0 1 IP Subnet Mask 255 255 255 0 RIP Direction Both Version RIP 2B Figure 3 2 Menu 3 2 TCP IP and DHCP Ethernet Setup 3 4 Internet Access Prestige 153 153X WAN Bridge Routers Follow the instructions in Table 3 1 to configure the DHCP fields Table 3 1 DHCP Ethernet Setup Menu Fields free omin amee DHCP DHCP This field enables disabled the DHCP server If it
134. tic sends an ICMP echo packet to the remote host and shows you the round trip time when the Prestige gets a response This is to test if the host is reachable via TCP IP Reboot System This option reboots the system Command Mode This option allows you to enter the command mode This mode allows you to diagnose and test your Prestige using a specified set of commands 13 10 System Maintenance Prestige 153 153X WAN Bridge Routers Figure 13 8 shows an example of a successful connection after selecting option 3 Manual Call in Menu 24 4 Start dialing for node lt 1 gt Hit any key to continue Dialing chan lt 2 gt phone lt last 9 digit gt 40101 Call CONNECT speed lt 64000 gt chan lt 2 gt prot lt 1 gt LCP up CHAP send response CHAP login to remote OK IPCP negotiation started IPCP up Figure 13 8 Trace Display for a Successful IPCP Connection Via Manual Call Figure 13 9 shows a trace example where authentication failed Strat dialing for node lt 1 gt Hit any key to continue Dialing chan lt 2 gt phone lt last 9 digit gt 40101 Call CONNECT speed lt 64000 gt chan lt 2 gt prot lt 1 gt LCP up CHAP send response Login to remote failed Check name passwd Receive Terminal REQ IPCP down Line Down chan lt 2 gt Figure 13 9 Trace Display for a Failed Authentication System Maintenance 13 11 Prestige 153 153X WAN Bridge Routers 13 5 Backup Configuration Option 5 from Menu 24
135. tising Protocol Sub Network Access Protocol Simple Network Management Protocol Single User Account ISDN Terminal Adapter Transmission Control Protocol User Datagram Protocol Unshielded Twisted Pair cable Wide Area Network Acronyms and Abbreviations 10Base T 2 5 802 2 6 1 802 3 6 1 add persist 4 10 4 13 asynchronous 2 19 AT command 2 17 2 20 2 22 authentication 4 5 4 9 4 18 8 5 backup 3 14 4 19 13 12 BACP 4 10 bandwidth increment 4 12 Bandwidth on Demand See BOD BAP 4 10 blacklist 13 16 13 17 BOD 4 10 bridge See bridging bridge static route 7 5 bridging 1 2 1 10 2 13 4 6 7 1 budget 4 7 8 6 13 16 13 18 call back delay 2 24 call control 1 3 13 16 call direction 4 3 callback 1 11 2 24 4 4 8 6 8 9 8 10 CHAP 1 2 1 11 4 5 4 18 8 5 CLID 2 22 4 4 8 5 8 10 client 7 2 clock source 2 20 community 10 1 compression 1 3 4 12 console 2 5 13 5 CSU DSU 1 1 2 18 DCE 1 3 default dial in 8 4 device type 3 10 4 6 4 19 Prestige 153 153X WAN Bridge Routers Index DHCP 1 3 3 3 3 4 3 5 Dial On Demand 4 1 dial timeout 2 24 dial in user 8 1 8 8 Dial On Broadcast 7 4 Dial On Query 6 9 dial up line 2 16 2 19 3 9 4 2 4 16 DNS 3 3 3 5 drop timeout 2 24 DTE 1 3 DTR 2 22 2 23 encapsulation 4 12 Ethernet 2 25 6 5 7 1 Ethernet II 6 1 filter 2 25 4 7 8 7 9 1 firmware 13 13 Fractional T1 E1 1 1 frame type 6 1
136. to CONFIRM or ESC to CANCEL Press Space Bar to Toggle Figure 6 2 Menu 3 3 Novell IPX Ethernet Setup IPX Configuration 6 5 Prestige 153 153X WAN Bridge Routers The following Table 6 1 describes the Novell IPX Ethernet Setup Menu Table 6 1 Novell IPX Ethernet Setup Fields ce Seed Router Determine if your Prestige is to act as a seed router Yes No Frame Type Enable Disable the individual frame type Remember to enable only 802 2 the ones that are actually used on your network 802 3 Ethernet II SNAP IPX Network If your Prestige is a seed router enter a unique network number for each frame type enabled Press Enter at the message Press ENTER to Confirm to save your configuration or press Esc at any time to cancel 6 6 IPX Configuration Prestige 153 153X WAN Bridge Routers 6 5 LAN to LAN Application with Novell IPX A typical LAN to LAN application is to use your Prestige to call from a branch office to the corporate headquarters to enable the stations in the branch office to access the NetWare servers at the headquarters as depicted in Figure 6 3 Branch Office LAN PO HERE ERE FEEL rer External Network Number 333 NetWare Clients Prestige 153 153X eS Coporate LAN gt External Network Number 222 NetWare Prestige 153 153X Server Internal Network Number 111 Figure 6 3 LAN to LAN Application with Novell IPX IPX Configuration
137. u wish to create in the Filter Type field and press Enter to open the respective menu 9 3 1 TCP IP Filter Rule This section shows you how to configure a TCP IP filter rule TCP IP rules allow you to base the rule on the fields in the IP and the upper layer protocol e g UDP and TCP headers To configure a TCP IP rules select TCP IP Filter Rule from the Filter Type field and press Enter to open Menu 21 1 1 TCP IP Filter Rule as shown in Figure 9 4 Menu 21 1 1 TCP IP Filter Rule Filter 1 1 Filter Type TCP IP Filter Rule Active No IP Protocol 0 IP Source Route No Destination IP Addr IP Mask Port 0 Port Comp None IP Addr IP Mask Port 0 Port Comp None TCP Estab N A More No Log None Action Matched Check Next Rule Action Not Matched Check Next Rule Press ENTER to Confirm or ESC to Cancel Press Space Bar to Toggle Figure 9 4 Menu 21 1 1 TCP IP Filter Rule Filter Configuration 9 7 Prestige 153 153X WAN Bridge Routers The following Table 9 5 describes how to configure your TCP IP filter rule Table 9 5 TCP IP Filter Rule Menu Fields ree or ton Active This field activates deactivates the filter rule Yes No IP Protocol Protocol refers to the upper layer protocol e g TCP is 6 0 255 UDP is 17 and ICMP is 1 This value must be between 0 and 255 IP Source Route If Yes the rule applies to packet with IP source route Yes No option else the packet must not have s
138. u how to configure the IPX parameters of the Prestige 6 1 IPX Network Environment Novell bundles the protocol stack the server software and routing functionality in their NetWare server products So a NetWare server is not only a file or print server it is also a router 6 1 1 Network and Node Number Every IPX machine has a network number and a node number together they form the complete address of the machine The IPX network number is a 32 bit quantity and is usually expressed in 8 hexadecimal digits e g O8893A8CF The host number is a 48 bit quantity and usually is taken from the MAC Media Access Control address of the Ethernet hardware so you don t have to explicitly configure the node number An IPX client obtains its network number from a server that has the network numbers statically configured If there are multiple servers on a network only one server need to have the network numbers configured and all other stations clients and servers can obtain the network numbers from it The server with configured network numbers is called a seed router If you have a NetWare server on the same LAN as the Prestige we recommend that you set up a NetWare server as a seed router Even though the Prestige is capable as a seed router a NetWare server offers a much more extensive facility for network management 6 1 2 Frame Types IPX can run on top of four different frame types on the Ethernet These frame types are 802 2 802 3 Et
139. uration 8 3 Prestige 153 153X WAN Bridge Routers 8 3 Default Dial In Setup This section covers the default dial in parameters The parameters in Menu 13 affect incoming calls from all remote dial in users and remote nodes until authentication is completed Once authentication is completed and if it matches a remote node your Prestige will use parameters from that particular remote node Menu 13 Default Dial in Setup Telco Options CLID Authen None PPP Options Recv Authen CHAP PAP Compression Yes Mutual Authen No PAP Login N A PAP Password N A Multiple Link Options Max Ports 2 Callback Budget Management Allocated Budget min Period hr IP Address Supplied By Dial in User Yes IP Pool No IP Start Addr N A IP Count 1 3 N A IPX Net Num Supplied By IPX Pool No IPX Start Net Num N A IPX Count 2 16 N A Session Options Input Filter Sets Output Filter Sets Idle Timeout 300 Press ENTER to CONFIRM or ESC to CANCEL Press Space Bar to Toggle Figure 8 3 Menu 13 Default Dial in Setup From the Main Menu enter 13 to go to Menu 13 Default Dial in Setup This section describes how to configure the protocol independent fields in this menu For the protocol dependent fields refer to the appropriate chapters Table 8 2 describes and contains information on how to configure each parameter in Menu 13 Default Dial in Setup Dial in Server Configuration Prestige 153

ZyXEL Communications 100 Network Card User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents