ZyXEL Communications PRESTIGE310 User Manual 49082

ZyXEL Communications Corporation 49082

8

Download:
Mirror Download [FCC.gov]
Document ID	49082
Application ID	I1FI0+s5NSGOgnDH+vpDMg==
Document Description	8
Short Term Confidential	No
Permanent Confidential	No
Supercede	No
Document Type	User Manual
Display Format	Adobe Acrobat PDF - pdf
Filesize	112.16kB (1401972 bits)
Date Submitted	1999-07-20 00:00:00
Date Available	1999-08-03 00:00:00
Creation Date	2001-06-13 03:17:48
Producing Software	Acrobat Distiller 4.0 for Windows
Document Lastmod	2001-06-13 03:18:10
Document Title	49082.pdf
Document Author:	jsoscia

Prestige 310
User 's Guide
Version 1.0
ZyXEL
TOTAL INTERNET Access SOLunoN
Preslige 310 Bmadband Internet Access Router
The declarations of CE marking:
The Prestige 310 has been approved for connection to the Public Switched Telecommunication
Network using interfaces compatible with lTU-TSS recommendation L420 (Basic Rate ISDN user
access). The Prestige 310 complies with the following directiVes:
1. The Council Directive 89/336/EEC of 3 May 1992 on the approximation of the laws of the
member states relation to Electra Magnetic Compatibility. (EMC Directive).
2. Council Directive 9l/263/EEC of29 April 1991 on the approximation of the laws of the Member
States concerning telecommunication terminal equipment. (The Telecom Terminal Equipment
Directive).
3. 93/6S/EEC of 22 July 1993 amending the Directives 89/336/EEC, 91/263 IEEC and 92/31/EEC.
(Marking Directive).
4. The Council Directive 92/31/EEC of 28 April 1992 amending directive on the approximation of
the laws of the member states relating to Electra Magnetic Compatibility
ECG Interference Statement iii
Customer Suppon
Prestige 3 I 0 Broadband Internet Access Router
Ifyou have questions about your ZyXEL product or desire assistance, contact ZyXEL
Communicanons Corporatmn ofﬁces worldwide, in one of the following ways:
Method
E-MaiI-Tech
Support
E-Mail~
Sales
lnlemalional
support@zyxel.oom.tw
suggon@zyxe!.co.at
(Europe)
sales@zyxel.com,tw
NorthAmarica
gunmﬁzyxslxom su rt Ldk
sale 1 xI m §§I§@zyxel.dk
Web Site
Phone
FTP 401mm
and ROM upwzdes
Regular
Mail
WW
wee-36733942 Ext.sz
+888—3A5782439
ftgzyxeLdk
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsin—chu, Taiwan 300,
R.O.C<
www gyxgldk
+45-3955—0700
www.zyxeLcom
+1-714—S320882
800-255-4101
+1-714-632—0858 +45-3955-0707
Mum
ZyXEL ZyXEL AIS
ﬁzv‘nmumcatbns Columbusvs] 5,
1650 Miraloma 235° subm-
Avenue, P|aoenlia, Copenhagen, Denmafk
CA 92870,
U.S.A.
Customer Suppan‘
Prestige 3 IO Broadband Internet Access Rauler
Table of Contents
Table of Contents .............. in
List of Figures ...............
List of Tables ................
Preface ..........................
Chapter 1 .......................
Getting to Know Your Router.
1.1 Prestige 310 Broadband Route
1.2 Features of Prestige 310 ................................................................................................... 1-1
13 Applications for Prestige 310 ............................................................................................ 1—3
1.3.1 Intemet Access .......................................................................................................... 1-3
Chapter 2 ..........
Hardware lnstalla on a In Setup
2.1 Front Panel LEDs and Back Panel Ports.
2.1.1 FrontPanelLEDS
2.2 Prestige 310 Rear Panel and Connections ....................................................................... 2-2
2.3 Additional Installation Requirements ................................................................................. 2-3
2.4 Slacking ZyXEL Routers
2.5 Power On Your Prestige...
2.6 Navigating the SMT Interfac
2.6.1 MamMenuZ-7
2.6.2 System Management Terminal Interface Summary .................................................. 2.7
2.7 Changing the System Password ....................................................................................... 248
2.8 General Setup ................................................................................................................... 2-9
2.9 WAN Semg.........
2.10 LAN Setup......
Table of Contents vii
Prestige 3 I 0 Broadband [merrier Access Rnuter
6.2.3 TCP/IP Filter Rule
62.4 Generic Filter Ru1e
6.3 Applying a Filter.........
6.3.1 Ethernet trafﬁc ........................................................................................................ 641
6.3.2 Remote Node Filters ............................................................................................... 6-12
Chapter 7 .............................. 7-1
System Malntenance ........... ...1-1
7.1 System Status ............................................................... .7-2
7.2 Console Port Speed .7-4
7.3 Log and Trace.
7.3.1 Viewing Error Log
7.3.2 Unix Syslog ............................................................................................................... 7-6
74 Diagnostic ....................................................................................................................... 7~7
7.5 Backup Conﬁguration ........................................................................................................ 7—8
7.6 Restore Conﬁguration ........................................
7,7 Firmware Update ..................
7.7.1 Uploading the RAS Code
7.7.2 Uploading ROM File
7.7.3 TFTP Transfer......
7.8 Cummand Interpreter Mode ............................................................................................ 7-13
7.8.1 Boot commands7-14
chapter 8 ......
Telnet Conﬁguration and Capabllltles ..........
8.1 About Telnet Conﬁguration
8.2 Telnet UnderSUA
8.3 Telnet Capabilities.
8.3.1 Single AdmmtstratorS-Z
Table of Contents ix
Pres/we 310 Broadband lnte‘mel Access Router
List of Figures
Figure l-l lntemet Access Application ...... 1.3
Figure 2-1 Front Panel ...2-1
Figure 2-2 Prestige 310 Rear Panel and Connections ...2—2
Figure 2—3 Initial Screen ...... 2—4
Figure 2—4 Login Screen. 2-5
Figure 2-5 Prestige 310 Main Menu. 2-7
Figure 2-6 Menu 23 - System Security 248
Figure 2-7 Menu 1 - General Setup,.
FigureZ-S Menu 2 — WAN Setup...
Figure2-9 Menu 3 - LAN Setupw
Figure 2-10 Menu 3.1 - General LAN Setup...
Figure 3-1 Menu 3 - LAN(10/100Mbps Ethernet) Setup,....
Figure 3-2 Menu 3.2 — TCP/lP and DHCP LAN Setup
Figure 3-3 Menu 4 - Internet Access Setupm
2-9
-10
Figure 34 Single User Account Topology ......
Figure 3-5 Menu 4 — Internet Access Semp for Single User Account
Figure 4-1 Example of Static Routing Topology
Figure 4:2 Menu 12.1 » Edit IP Static Route
Figure 4-3 Menu 12. Edit H’ Static Route
Figure 5-1 Multiple Sewer Conﬁguration
Figure 6-1 Outgoing Packet Filtering Process
Figure 6-2 Menu 21 - Filter Set Conﬁguration
Figure 6—3 Menu 21.1 » Filter Rules Summary
Figure 6-4 Menu 212 » Filter Rules Summary
Figure 6-5 Menu 21.1.1 ~ TCPIIP Filter Rule .....
Figure 6-6 Menu 21.1.2 - Generic Filter Rule.....
List of Figures/Tablas xi
Pres/[gs 3 / 0 Broadband Internet Access Rouler
List of Tables
Table 2-1 LED functions ..... ...2-l
Table 2~2 Main Menu Commands“. 2-6
Table 2~3 Main Menu Summary 2-7
Table 2-4 General Setup Menu Fields... ,..2»9
Table 3-1 DHCP LAN Setup Menu Fields ....... 345
Table 3»2 TCP/lP LAN Setup Menu Fields 3-6
Table 3-3 lntemet Access Setup Menu Fields .....
Table 3—4 Single User Account Menu Fields ......
Table 4~l 1? Static Route Menu Fields ,
Table 5-1 Services vs. Port number
Table 6-1 Abbreviations Used in the Filter Rules Summary Men
Table 7~1 System Maintenance - Status Menu Fields
Table 7-2 System Maintenance Menu Syslog Parameters .....
Table 7-3 System Maintenance Menu Diagnostic...
Table 9-1 Troubleshooting the Start-Up of your Prestige
Table 9-2 Troubleshooting the LAN Interface
Table 9-3 Troubleshooting the WAN interface..."
List of Figures/Tables xiii
Prestige 310 Broadband Internet Access Roulet-
Syntax Conventions
For brevity's sake, we will use “cg." as a shorthand for “for instance" and “Le." for “that is" or
“in other words" throughout this manual.
Preface xv
Pres/iqe 3 I 0 Broadband [meme] Access Ron/er
Chapter 1
Getting to Know Your Router
This chapter describes the key features and applications of your Prestige.
1.1 Prestige 310 Broadband Router
The Prestige 310 is a high bandwidth Internet access router that connects your LAN to the
Internet using the existing television cable. It is ideal for cable users with more than one PC and
as an alternative to the more expensive leased lines.
1.2 Features of Prestige 310
The following are the key features of the Prestige 310.
Auto-negotiating 10/100Mbps Ethernet
The LAN interface automatically detects if it’s on a 10/100 Mbps Ethernet.
Single User Account (SUA)
The SUATM (Single User Account) features allows multiple users to share a single ISP account.
Packet Filter
The Packet Filter blocks unwanted trafﬁc from entering your network
DHCP Server
The Prestige's DHCP (Dynamic Host Conﬁguration Protocol) server capability allows you to
automatically assign TCP/[P settings to a workstation on your network. ‘
DHCP Client
['he Prestige's DHCP client capability allows it to get automatically its IP address from the ISP on
he WAN.
Full Network Management
Accessing SMT (System Management Terminal) through the console port or telnet connection.
Getting to know your Prestige 1-1
Prestige 1 I 0 Broadband Internet Access Router
1.3 Applications for Prestige 310
The followmg sections show you the possible applications for your Prestige.
1.3.1 Internet Access
The Prestige is the ideal high-speed Intemet access solution. Your Prestige supports the TCP/IP
protocol, which the Internet uses excluswely. A typical Internet Access application is shown
below.
small I Home Ofﬁce LAN
1 0/1 DOM Ethernet
lNTERN E 10m Etnemet
Cable Modem
Prestige 310
Figure 1-1 Internet Access Application
Meme! Single User Account
Tor a SOHO (small ofﬁce/Home Ofﬁce) environment, your Prestige offers a Single User Account
SUA) feature that allows multiple users on the LAN (Local Area Network) to access the Internet
zencun'ently for the cost of a single userl
Getting to know your Prestige
Prestige 310 Broadband lntzrnet Access Ron/er
Chapter 2
Hardware Installation & Initial Setup
This chapter shows you how to connect the hardware and to perform the initial setup.
2.1 Front Panel LEDs and Back Panel Ports
2.1.1 Front Panel LEDS
The LED indicators on the front panel indicate the functional status of the Prestige.
ZyXEL PRESTIZG‘E
km "‘1;' "4 «rm 4
Figure 2-1 Front Panel
The following table describes the LED functions:
Table 24 LED functions
LEDs Funcﬁon [Fm-cater Status Active Description
=WFt Power Green I9" The power adapter is connected to the Prestige.
SYS S/stem F— Off The system is not ready or failed. _I
On The system is ready and running
Flashing The system Is rebooting.
10M LAN LAN Green On The Prestige is connected to a 10Mbps LAN.
Flashing The 1DM LAN is sendinglraceiving packets.
r— Off Ths10M LAN is not connected.
any Orange On The Prestlge is connected to a 100Mbps LANi ——l
Flashing The 100M LAN is sending/receiving packets.
_._'_
l _r—
Hardwans Installation and Setup 2-1
Prestige 310 Broadband lnlernet Access Router
This section outlines how to connect your Prestige 3l 0 to the LAN and the WAN.
Step 1. Connecting the Cable Modem
Connect the coaxial cable from your cable service to the threaded coaxial CABLE connector on
the back of the cable modern.
Step 2. Connecting the Presn'ge to Cable Modem
Connect the WAN port (silver) on the Prestige to the LAN port on the cable modem using a
straight through Ethernet cable. The Ethernet port on the cable modem is sometimes labeled "PC"
or "Workstation'ﬂ
Step 3. Connecting the Prestige to the LAN
If you have more than one PC, you must use an external hubt Connect the 10/ IOOM LAN port
(gold) on the Prestige to a port on the hub using a straight through Ethernet cable. If you only
have on PC, you can connect the Prestige to the PC directly without a hub. For a single PC,
connect the lO/lOOM LAN port on the Prestige to the Network Adapter on the PC using a
crossover cable (red tag).
Step 4. Connecting the Power Adapter to your Prestige
Connect the power adapter to the port labeled POWER on the rear panel of your Prestige.
Step 5. Connecting the Console Port
For the initial configuration of your Prestige, you need to use terminal emulator soﬁware on a
workstation and connect it to the Prestige through the console port. Connect the 9-pin (smaller)
end of the console cable to the console port of the Prestige and the 25»pin (bigger) end to a serial
wort (COMl, COMZ or other COM port) of your workstation. You can use an extension RS-232
table if the enclosed one is too short.
\ﬁer the initial setup, you can modify the conﬁguration remotely through telnet connections.
2.3 Additional Installation Requirements
n addition to the contents of your package, there are other hardware and software requirements
you need before you can install and use your Prestige. These requirements include:
\ computer with an Ethernet NIC (Network Interface Card) installed.
\ computer equipped with communications soﬁware conﬁgured to the following parameters:
0 VT] 00 terminal emulationi
0 9600 Baud.
0 No parity, 8 Data bits, 1 Stop bitt
Hardware Installation and Setup 2-3
Pleslige 310 Broadband [merrier Accexs Router
Step 2. Entering Password
The login screen appears after you press [Enter], promptmg you to enter the password, as shown
below.
For your ﬁrst login, enter the default password 1234. As you type the password, the screen
displays an (X) for each character you type.
Please note that ifthere is no activity for longer than 5 minutes after you log in, your Prestige will
automatically log you out and will display a blank screen If you see a blank screen, press [Enter]
to bring up the login screen again.
Enter Plsiword xxxx
Figure 2-4 Login Screen
Hardware Installation and Setup 2-5
Preslige 5 l 0 Emndband Internet Access Router
2.6.1 Main Menu
Aﬁer you enter the password, the SMT displays the Prestige 310 Main Menu, as shown below.
presuge nu nun Wenu
Geccmg Started Advanced mmgemenz
L General Setup 21. Filter set: Cenfkquratsﬂﬂ
2. mm Setup
3. w Setup 23. system Password
14. System Maintenance
Advanced Applicatxuns
11. Static Hauling Setup
12. sun Server Setup 99. man
Enter Menu Selectman Number:
Figure 2-5 Prestige 310 Main Menu
2.6.2 System Management Terminal Interface Summary
Table 2-3 Main Menu Summary
g at Menu Title Description
1 General Setup Use this menu in setup general information.
2 jWAN Setup Use this menu to setup the WAN,
3 LAN Setup Use this menu to setup the LAN.
4 Internet Access Setup rA quick and easy way to setup lntemet connection
12 Static Routing Setup Use this menu to setup static route for dlﬂerent protocols
15 SUA SSW“ 59109 Use this menu to specify lnsida sewers when SUA is enabled.
21 Filter Set Conﬁguration Use this menu to setup ﬁlters to provide eewrity.
A 1
23 System Passworﬂ Use this menu to setup a new password.
24 System Maintenance 1T_hls menu provides system status, diagnostics, ﬁrmware upload, etc.
99 Exit To exit from SMT and return to the blank screen.
Hardware Installation and Setup 2-7
Prestige 3 I 0 Bmadband Internet Access Router
2.7 Changing the System Password
The ﬁrst thing your should do before anything else is to change the default system password by
following the steps below.
Stop 1. Enter 23 in the Main Menu to open Menu 23 - System Password as shown below.
Menu 23 l , system Password
old Fasswcrd- xxxx
New Password: xxxx
Retype to cannrm: xxxx
Enter here =o CONFIRM or as: no CANCEL-
Flgure 2-6 Menu 23 - System Security
Step 2. Enter your existing password and press [Enter].
Stop 3. Enter yuur new system password and press [Enter].
Step 4. Re—type your new system password for conﬁrmation and press [Enter].
Note that as you type a password, the screen displays a (X) for each character you type.
2-B Hardware Installation and Seth
Prestige 3 I 0 Broadband [merrier Access Router
2.6 Navigating the SMT Interface
The SMT (System Management Terminal) is the interface that you use to conﬁgure your Prestige.
Several operations that you should be familiar with before you attempt to modify the
conﬁguration are listed in the table below.
Table 2-2 Main Menu Commands
Operation Prastl Description
Move lorward to [Enter] To move forward to a sub-menu, type in the number of the desired
another menu sub-menu and press [Enter].
Move backward to [Esc] Press the [Esc] key to move back to the previous menu.
a previous menu
[Enter] or Within a menu, press [Enter] to move to the next field. You can also
M°Ve the cursor use the [Up]/[Down] arrow keys to move to the previous and the nexl
[U PVlDOWn] ﬁeld, respectively.
arrow keys
Enter‘irrferrnation Fill in, or You need to ﬁll in two types of ﬁelds. The ﬁrst requires you to type ir
the appropriate information. The second allows you to cycle through
Press the the available choices by pressing the [Space] bar.
[Space bar] to
toggle
Required ﬁelds <7) All ﬁelds with the symbol <7> must be ﬁlled in order be able to save
the new conﬁguration.
N/A ﬁelds Some of the ﬁelds in the SMT will show a . This symbol refer
to an option that is Not Appllcable.
[Enter] Save your conﬁguration by pressing [Enter] at the message [Press
Save WW, ENTER to conﬁrm or ESC to cancel]. Saving the data on the soreer
conﬁguration will take you. in most cases to the previous menu.
T e 99, then T e 99 at the Ma'n Men rom and ress Enter to exit the SMT
ExittheSMT W Y” ' "p m p l ]
press [Enter].
interface.
245
Hardware Installation and Sen.
Prestige 3 I 0 Broadband Inlernet Access Ran/er
A cable modem and an 15? account
After the Prestige is properly set up, you can make future changes to the conﬁguration through
telnet connections.
2.4 Stacking ZyXEL Routers
Your Presttge's has legs that ﬁt together for sturdy stacking. You should not stack more than four
routers for maximum stack stability.
2.5 Power On Your Prestige
At this point, you should have connected the console port, the LAN port, the WAN port and the
power port to the appropriate devices or lines, Plug the power adapter into a wall outlet. The
Power LED should be on. The SYS LED will come on aﬁer the system tests are complete. The
WAN LED and one of the LAN LED‘s come on immediately after the SYS LED comes on, if
connections have been made to the LAN and WAN ports.
Step 1. Initial Screen
When you power on your Prestige, it performs several internal tests as well as line initialization.
After the tests, the Prestige asks you to preﬁ [Enter] to continue, as shown.
ZyXEL Bros. Build en en Mar 05 1315.20 1999
um: Size = cuss Khytes
nun POST: Testing: mssk ox
Fus‘u. inter an
romoxnsooauou
zyxei. Buotzxtensinn Version beam], mind at wed Mar in 11:13:21 1995
Press any key to enter debug mode menu. 3 “Candi.
Enter Debug mode.
Figure 2-3 Initial Screen
24 Hardware Installation and Sam
Prestige 3 10 Broadband Internet Access Router
Of! The 100M LAN is not connected.
WAN WAN Green Of! The WAN Link is not ready. or failed.
On The WAN Link is ok
Flashing The 100M LAN link is sending/receiving packets.
2.2 Prestige 310 Rear Panel and Connections
The ﬁgure below shows the rear panel of your Prestige 310 and the connection diagram.
[E
[D
Power
Outlet
10/100Mbps Ethernet
Power
Adapter
SMT Management
Cable Modem
ou'cToE’iaCE
Figure 2-2 Prestige 310 Rear Panel and Connections
2-2
Hardware Installation and Sam;
Pres/[gs 3 IO andband Internet Access Romer-
1.4 Getting to know your Prestig‘
Prestige 1 I 0 andband Inlemer Access Router
RoadRunner Support
In addition to standard cable modem services, the Presnge supports Time Warner's RoadRunner
Service.
Logging and Tracing
0 Built-in message logging and packet tracing.
0 Unix syslog faculty support.
Upgrade P310 Firmware via LAN
The ﬁrmware of the Prestige 310 can be upgraded via the LAN,
1-2 Getting to know your Prestigl
Prextige 31 0 Broadband Inlernel Access Ramm-
xvi Prefac
Prestige 3 [0 Broadband Internet Access Router
Preface
About Your Router
Congratulations on your purchase of the Prestige 310 Broadband Router.
The Prestige 3 IO router connects your 10/ lOOMbps LAN to the Internet through your a cable
modem.
Your Prestige 310 is easy to install and to conﬁgure since you do not need to set any switches,
The Prestige Network Corru-nander (PNC) is a GUI based utility that allows you to access the
Prestige‘s management settings. Moreover, all functions of the Prestige 310 are software
conﬁgurable via the SMT (System Management Terminal) Interface. The SMT 15 a menu-driven
interface that you can access from either a terminal emulator or Telnet on a PC.
About This User's Manual
The nine chapters ofthis manual are designed to guide you through the conﬁguration of your
Prestige 310 for its various applications.
Structure of this Manual
This manual is divided into ﬁve parts:
1. Getting Started (Chapters 1-2) is structured as a step-by-step guide to help you connect,
install and setup your Prestige to operate on your network.
2. The Intemet (Chapter 3) describes how to conﬁgure your Prestige for Internet access.
3. Management & Maintenance (Chapters 4-7) provides information on management and
maintenance facilities for network administrators
4. Telnet Conﬁguration and Capabilities (Chapter 8) provides information conﬁguring
using Telnet.
5. Troubleshooting (Chapter 9), provides information about solving common problems.
Regardless of your particular application, it is important that you follow the steps outlined in
Chapters 1-2 to connect your Prestige to your LAN. You can then refer to the appropriate
chapters of the manual, depending on your applications.
xiv Prefer:
Prestige 3/0 Broadband Internet Access Router
...6-1l
,. 6-12
Figure 67 Filtering Ethernet traffic ......
Figure 6-8 Filtering Remote Node traffic
Figure 7-l Menu 24 - System Maintenance .....
Figure 7-2 Menu 24.1 - System Maintenance — Status
Figure 7-3 Menu 24.2 — System Maintenance — Change Console Port Speed .....
Figure 7-4 Examples of Ermr and lnfonnation Messages...
Figure 7-5 Menu 24.3 2 - System Maintenance - Syslog and Accounting .....
Figure 7-6 Menu 24.4 - System Maintenance - Diagnostic
Figure 7-7 Menu 24.7 - System Maintenance - Backup Conﬁguration...
Figure 7-8 Menu 24.5 ~ System Maintenance - Backup Configuration...
Figure 7-9 Menu 24.7 - System Maintenance - Upload Firmware
Figure 7-10 Menu 24.7.1 — System Maintenance - Upload RAS Code
Figure 7-11 Menu 24.7.2 - System Maintenance — Upload ROM File .....
,. 7413
Figure 7-12 Command mode
Figure 7~13 Boot module commands...
Figure 8-1 Telnet Conﬁguration on a TCPIIP Network...
xii List of Figures/Table.
Prexn'ge 3 If} Bmmﬂmnd Intemel Anem- Router
8.3.2 System Timeout ......................
Chapter 9 ..........................
Troubleshootlng
9.1 Problems Starting Up the Prestige
9.2 Problems with the LAN Interface,
93 Problems with the WAN interface
Appendix A ......
Acronyms and Abbreviations .....
Index
x Table of Content
Prestige 3 I 0 Broadband Internet Access aner
2.10.l General LAN Setup ............................................................................................. 2-H
2.11 Protocol Dependent LAN Setup. .......................... 2-12
Chapter 3 .. .3-1
.3-1
lnternet Access
3.1 TCP/IP and DHCP for LAN ................................................................... .3-1
3.1.1 Factory LAN Defaults ............................................................................................... 3-1
3.1.2 1? Address and Subnet Mask .................................................................................... 3—1
3.1.3 RIP Setup ................................................................................................. 3-2
31.4 DHCP Conﬁguration ................................................................................................. 3-2
3.2 TCP/lP LAN Setup and DHCP .......................................................................................... 3-4
3.3 internal Access Setup ......................... 3-7
3.4 Single User Account"
3.4.1 Advantages of SUA
3.4.2 Single User Account Conﬁguration
Chapter 4 .....................................
lP Static Route Setup .................................................................................................................. 4-1
4.1 IP Stalic Route Setup.
Chapter 5
Multiple SUA Servers
5.1 Multiple Servers behind SUA ...............................................
5.1.1 Conﬁguring a Server behind SUA ............................................................................ 5-
Chapter 6...
Filter Configuration
62 Conﬁguring a Filter Se
6.2.1 Filter Rules Summary Menu ...........................
6.2.2 Conﬁguring a Filter Rule .
viii Table of Content
Prestige 310 Broadband Internet Access Rauter
vi Customer Supper
Prestige 310 Broadband Internet Access Router FC C I D ‘. I 81 ‘P R 25116 a 9 /0
ZyXEL Limited Warranty
ZyX EL warrants to the original end user (purchaser) that this product is free from any defects in materials or
workmanship For a period of up to two (1) years from the date of purchase. During the warranty period, and upon proof
ptpurcnnse, should the product have indications offailure due to rnulty workmanship and/or materials, ZyXEL will, at
Its discretion, repair or replace the defective products or components wtthour charge for either pans or labor‘ and to
whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any
replacement will consist ofa new or re—manufaclurcd functionally equivalent product of equal value, and will be solely
at the discretlon onyXEL. This warranty shall not apply it'the product is modiﬁed, misused, tampered with, damaged
by an act of God, or subjected to abnormal working condilicns
Note
Repair or replacement, as pmVided under this warranty, is the exclusive remedy oflhe purchaser. This warranty is in
lieu orsii other warranties express or implied. including any implied warranty ofmcrchamability or ﬁtness for a
particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind of
character to the purchaser.
To obtain the services of this warranty, contact ZyXEL‘s Service Center; refer to the separate Warranty Card for your
Return Material Authorization number(RMA). Products must be retumed Postage Prepaid. it is recommended that the
unit be insured when shipped. Any returned products without proof of purchase or those with an out—dated warranty
will be repaired or replaced (at the discretion onyXEL) and the customer will be bllled for parts and labor. All
repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid (USA and
territories only). If the customer desires some other retum destination beyond the Us. borders, the customer shall bear
the cost of the return shipment. This warranty gives you speciﬁc legal rights, and you may also have other rights which
vary ﬁ-om state to state.
Thiseqiumnem' hasbecnteﬂedandfmmdmumplywiththclimitsfmaClxss‘Bdtglml
device, pursumtml’nn l5 ofthe FCC Rules. Theselimits'atedcst'gnedtoynwdc
reasonable protection agamsthmnfullmerfetmoemnmdmmlmsullaunn This
equipment gmemes, um and can radiate radio ﬂcqncncy energy end, ifnot mstallcd
mdusodntamdmcewnbthcmmncﬁmmaycanschamﬁumtetmmwmxddm
oummmtications HoweverJhcxeisnoguamntoethminmfemoevuﬂnotoccnrma
panicularinmﬂatim. chiseqinymentdocsunsehmﬁﬂlntetfemoetondinm
televiximrowpﬁmwhichunbedeteminedhymmingmeoqmpmmtoﬂ‘mdmthe
userisoncmmgedwttytc correct the interferencehynne ofthe followmg measures:
- Romimtotrelocuethercoeivinsantmna. and '
- lncteasethcsepanﬁonbetweentlieeqmpmcnt _t'ewlvet. ,
, Connoameomnpmemmmanmkxmacimmwﬂ‘exmﬁvmthatwwhmh
thereceivexisconnouetl ..
- Consultthedoalet oranexpetienccdradiofI‘V technician for help.
FCCCautinn: Toessntecunﬁnnodmpﬁanwmsemlyshieldidnmdﬁmﬁce
cableswhmcmmect’mgLANandWANnetworkcannomuns. y {363m 4
iv modiﬁcations not expresslyapptovod hythe panyrcspnnsxble for compliance ounldvmd
thensct‘sauthoritytnopemtethiseqmpnent.
Varranh
Prestige 3117 Broadband Internal Access [miner
Prestige 310
Broadband Internet Access Router
Copyright
Copyright © 1999 by ZyX EL Communications Curpnmtion.
The contents oflhis publication may not be reproduced in any pm or as a whole, transcribed, stored in a relrievzl]
system, translated into any language. or transmitted in any form or by any means, electronic, mechanical, magnetic,
optical, chemical, photocopying, manual, or otherwise, without the prior written permission onyXEL
Communications Corporation,
Published by ZyXEL Communications Corporation All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out ofihs application or use ofsny producls. or software described herein.
Neither does it convey any license under its patent rights not the patent rights ofothers. ZyXEL further reserves the
right to make changes in any products described herein Without notice. This publication is subject to change Without
notice.
Trademarks
Trademarks mentioned in this publication are used for identiﬁcation purposes only and may be pmperiies uitheir
respective owners.
Prestige 3/0 Hmadband Inlernet Access Router
2.8 General Setup
Menu 1 - General Setup contains administrative and system-related information.
To enter Menu 1 and ﬁll in the required information, follow these steps:
step 1. Enter 1 in the Main Menu to open Menu 1 - General Setupt
Step 2. The Menu 1 - General Setup screen appears, as shown below. Fill in the required ﬁeld
marked [7].
Menu 1 , General Setup
System Mime: 7
Prgls ENTER to cannm or has: to Cancel:
Figure 2-7 Menu 1 — General Setup
The fields for General Setup as shuwn belnw
Table 24 General Setup Menu Fields
Field Description
Choose a descriptive name for identiﬁcation purposes. Thls name can be
up to 30 alphanumeric characters long. Spaces are not silt/wed. but
dashes "-' and underscores "." are accepted.
System Name
Hardware Installation and Setup 2-9
Prexggg 310 Broadband Inlemet Access Router
2.10 LAN Setup
This section describes how to conﬁgure the LAN using Menu 3 — LAN Setup (10/100Mbps
Ethernet). From the Main Menu, enter 3 to open Menu 3.
Menu J , mu Setup
i. Genazai Setup 4
2. rep/n: and DHCP Setup i
Enter Menu seleceten Number:
. ; i%¢;a¢.xmwwsﬂwv1~a
Flgure2-9 Menu 3 - LAN Setup
2.10.1 General LAN Setup
This menu allows you to specify the ﬁlter sets that you wish to apply to the LAN trafﬁc, You
;eldom need to ﬁlter the LAN trafﬁc, however, the ﬁlter sets may be useful to block certain
7ackets, reduce trafﬁc and prevent security breaches.
Menu 3.x A Better!) um Setup
input me" Sens:
protocol filters-
duviee sneer;-
output 1:11“: sees:
prneocnl unen-
aemee ixlcnrss
Press mm to conﬁrm or 55: to Cancel:
Figure 2-10 Menu 3.1 - General LAN Setup
5 you need to deﬁne ﬁlters, please read Chapter 7- Filter Slat Configuration, then retum ta this
menu to apply the ﬁlter sets.
Hardware Installation and Setup 2—11
Prestige 310 Broadband Internet Access Ron/er
Chapter 3
Internet Access
This chapter shows you how to conﬁgure the LAN as well as the WAN of your Prestige for
Internet access.
3.1 TCPIIP and DHCP for LAN
The Prestige has built-in DHCP server capability that assrgns IP addresses and DNS sewers to
systems that support DHCP client capability.
3.1.1 Factory LAN Defaults
l'he LAN parameters of the Prestige are preset in the factory with the following values:
IP address of l92.168.l.l with subnet mask of255.255.255.0 (24 bits)
DHCP server enabled with 32 client IP addresses starting from l92.168.1.33.
These parameters should work for the majority of installations lithe parameters are
satisfactory, you can skip to section 3.2 TCP/IP LAN Setup and DHCP to enter the DNS
server address(es) it‘ your ISP gives you explicit DNS sewer address(es). If you wish to
change the factory defaults or to learn more about TCP/IP, please read on.
:.1.2 IP Address and Subnet Mask
imilar to the houses on a street that share a common street name, the machines on a LAN share
ne common network number, also
’here you obtain your network number depends on your particular situation. If the ISP or your
etwork administrator assigns you a block of registered 1? addresses, follow their instructions in
electing the IP addresses and the subnet mask.
fthe ISP did not explicitly give you an IP network number, then most likely you have a single
ser account and the ISP will assign you a dynamic IP address when the connection is established.
{this is the case, it is recommended that you select a network number from 192.168.00 to
92,168.2550 (ignoring the trailing zero) and you must enable the Single User Account feature of
he Prestige. The lntemet Assigned Number Authority (IANA) reserved this block of addresses
speciﬁcally for private use; please do not use any other number unless you are told otherwise,
lntemet Access 3-1
Pnexngiila Broadband Internet Access Router
When conﬁgured as a relay, the Prestige relays the requests and responses between the clients and
the real DHCP sever.
IF Pool Setup
The Prestige is pre-configured with a pool of 32 IP addresses staning from 192.168.1314 to
192.168, 1.64. This conﬁguration leaves 31 IP addresses (excluding the Prestige itself) in the
lower range for other server machines, e.g., server for mail, FTP, telnet, web, etc., that you may
have.
DNS Server Address
DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and
vice versa, e.g.. the IP address of www.zyxel.com is 204.2l 7.0.2. The DNS server is extremely
important because without it, you must know the IP address of a machine before you can access
it. The DNS server addresses that you enter in the DHCP setup are passed to the client machines
along With the assrgned [P address and subnet mask.
[here are two ways that an ISP disseminates the DNS server addresses. The ﬁrst is for an ISP to
all a customer the DNS server addresses, usually in the form of an information sheet, when you
ign up. If your lSP does give you the DNS server addresses, enter them in the DNS Server ﬁelds
n DHCP Setup, otherwise leave this ﬁeld blank
Erelay Server Address
When the DHCP is set to Relay, the Prestige will request H> addresses from a real DHCP server
nd relay the address to the workstation making the request.
meme! Access 3-3
Pres/Age 3 I 0 Broadband Internal Access Ron/er
Follow the instructions in the foilowmg table on how to conﬁgure the DHCP ﬁelds.
Table 3-1 DHCP LAN Setup Menu Fields
Field Description Example
DHCP Setup
DHCP= This ﬁeld enables/disabled the DHCP server/relay. If it is set to None
Server. your Prestige will act as a DHCP sewer. If set to None, Se d 1 I
DHCP service will be disabled and you must have another rveri e au ‘)
DHCP sever or relay on your LAN, or else the workstation must Relay
be manually conﬁgured.
When DHCP is set to Server, the following ﬁve items need to
be set. it set to Relay, you must specify the Remote DHCP
server.
Client IP Pool This ﬁeld speciﬁes the ﬁrst of the ecntigucus addresses in the 192.168.1433
Starting Address IP address pool.
Size of Client lF' Pool This ﬁeld speciﬁes the size, or count, of lhe IP address pool. 32
Primary DNS
Server
Secondary DNS
Sewer
Remote DHCP
Server =
Enter the IP addresses of the DNS sewers. The DNS sewers
are passed to the DHCP clients along with the IP address and
the subnet mask.
Enter the lP address of the true DHCP server when the Prestige
is conﬁgured as a DHCP Relay.
lntemstAccsss
3-5
Prestige 3 I 0 Broadband Internet Accexs Router
3.3 Internet Access Setup
Menu 4 allows you to enter the lntemet Access information m one screen.
From the Main Menu, enter 4 to go to Menu 4 - Internet Access Setup, as displayed below.
Menu 4 » xmeme: Access Setup
ISP'! Blame;
Sarvlce Type- Standard
server KP: m/A
My Logm. N/A
My Password: u/A
11> Address Assignmenz- Dynamxl:
n: Addresl- N/A
n= Subnel Hask- N/l
Gateway-0.0.0.0
up DSracL’in—m: Nene
Vazsxonx luv-1
single User Account- Yes
Enter hue (o comma or use to CANCEL:
Figure 3-3 Menu 4 — Intarnot Access Setup
ntemet Access 3-7
Preslige 31!) Broadband Internet Access Router
3.4 Single User Account
Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, you
will have to lease a block of legal, or globally unique, IP addresses from the ISP.
Same Network
Number
192.158.1.33
1924584434
192.155.141
192.168.1.35
Canle Modem
Prestige 310
192.168.1.36
The SUA network appears as a
single host to the Internet
Figure 3-4 Single User Account Topology
he IP address for the SUA can be either ﬁxed or dynamically assigned, In addition, you can
esignate servers, e.g., a web sewer and a telnet server, on your local network and make them
caessible to the outside world.
{you do not deﬁne any server, SUA offers the additional beneﬁt of ﬁrewall protection If no
ervcr is deﬁned, incoming inquiries will be ﬁltered out by your Prestige thus preventing intruders
tom probing your network.
’our Prestige accomplishes this address sharing by translating the internal LAN IP addresses to a
ingle address that is globally unique on the Intemctr For more information on IP address
ranslation, refer to RFC 1631, The IP Network Address Translator (NAT).
meme! Access 3-9
Prexrrge J I 0 Broadband Internet Access Router
3.4.2 Single User Account Conﬁguration
The steps for conﬁguring your Prestige for Single User Account are identical to the conventional
Internet access with the exception that you need to ﬁll in one extra ﬁelds in Menu 4 - Internet
Access Setup, as shown below;
Menu 1 , Internet Access Setup
15p- 5 Name- HI
Senate Tm: Home
Server rp- N/A
My Loginx N/l
My Paesword= Nu
it: Address Asstgnment- Stan:
xp Addresh zn: 132,154,125
1p Subnet Hask- 255.255.2554:
my ouecnom None
[313m -
single User Accoun a
Knee: here no coupmn Or 535 to cmczn.
SUA
Figure 3-5 Menu 4 — Int-mat Access Setup for Single User Account
to enable the SUA feature in Menu 4, move the cursor to the Single User Account ﬁeld and
elect Yes (or No to disable SUA). Then follow the instructions on how to conﬁgure the SUA
ields.
Table 3-4 Single User Account Menu Fields
=Ielcl Description
Single User Account Select Ves to enable SUA.
3fess [Enter] at the message [Press ENTER to Conﬁrm ...] to save your conﬁguration, or press [Eco] at
anytime to cancel.
nlernet Access 3-1 1
Prerrige 3/0 Broadband Internet Access Romm-
Chapter 4
IP Static Route Setup
This chapter shows you how to conﬁgure Static routes of your Prestige.
Static routes tell the Prestige routing information that it cannot learn automatically through other
means. This can arise in cases where RIP is disabled on the LAN.
Each remote node specrﬁes only the network to which the gateway is directly connected, and the
Prestige has no knowledge of the networks beyond. For instance, the Prestige knows about
network N2 in the following diagram through remote node Router 1, However, the Prestige is
unable to route a packet to network N3 because it doesn't know that there IS a route through
remote node Router 2. The static routes are for you to tell the Prestige about the networks beyond
the remote nodes.
911]
Huh
Prenize 31 0
Figure 4-1 Example of Static Routing Topology
P Static Route Setup 4.1
Prestige 3 I 0 Broadband Internet Access Router
The following table describes the IP Static Route Menu.
Table 4-1 IF Static Route Menu Fields
Field Descrlptton
Route it The staﬁc route. (lvB)
Route Name Enter a name tor the lF‘ static route for identiﬁcation purposes.
Active Activate/deactivate the static route.
Destination IP Enter the Destination lP Address
Address
IP Subnet Mast Enter the IP subnet mast.
Gateway IP Enter the number of the remote node that is the gateway of this static route. When a
LAddress packers destination LAN (MAC) address matches the value entered above
Metric Metric represents the “cost" of transmission for muting purposes. IP routing uses hop
count as the measurement of cost. with a minimum at1 for directly connected
networks. Enter a number that approximates the cost for this link. The number need
not be precise, but it must be between 1 and 15. In practice. 2 or 3 is usually a good
number. 1 to 15
Private This parameter determines if the Prestige will inctude the route to this remote node in
its RlP broadcasts. ll set to Yes, this mute is kept private and not included In RIP
broad—st, If No, the route to this remote node will be propagated to other hosts
through RIP broadcasts. Yes/Nu
Once you have completed ﬁlling in this menu. press [Enter] at the message [Press ENTER to Conﬁrm...]
to save your conﬁguration. or press [Esc] to cancel.
P Static Route Setup 4-3
Flange 310 Broadband Internet Access Router
Chapter 5
Multiple SUA Servers
The Chapter describes how to SetAup multiple servers when SUA is enabled,
5.1 Multiple Sewers behind SUA
If you wish, you can make inside servers for different services, e.g., web or FTP, Visible to the
outside users, even though SUA makes your whole insrde network appear as a single machine
to the outside world. A service is identiﬁed by the port number, e,g., web service is on port 80
and FTPon port 21.
As an example, ifyou have a web server at 192.168.12 and an FTP server 192.16S.l.3, then
you need to specify for port 80 (web) the server at IP address 192.168.12 and for pon 21
(FTP) another at IP address l92.168. I .3.
Please note that a server can support more than one service, e.g., a server can provide both
FTP and DNS servrce, while another provides only web service. Also, since you need to
specify the IP address of a server in the Prestige, a server must have a ﬁxed IP address and not
be a DHCP client whose IP address potentially changes each time it is powered-on.
In addition to the sewers for speciﬁc services, SUA supports a default sewer. A service
request that does not have a server explicitly designated for it is forwarded to the default
server. If the default server is not deﬁned, the service request is simply discarded.
To make a sewer visible to the outside world, specify the port number of the service and the
inside IP address of the server in Menu 15 - SUA Server Setup.
5.1.1 Conﬁguring a Sewer behind SUA
Follow the steps below to conﬁgure a sewer behind SUA:
1. Enter 15 in the min menu to go to Menu 15 - Multiple Server Conﬁguration.
2. Enter the service port number in the Port it ﬁeld and the inside IP address of the server in the
IP Address ﬁeld.
Multiple S UA Servers 5—1
Pregng 310 Broadband Internet Access Rauter
Chapter 6
Filter Conﬁguration
6.1 About Filtering
Your Prestige uses ﬁlters to decide whether to allow passage of a data packet.
Data ﬁlters screen the data to determine if the packet should be allowed to pass. Data ﬁlters are
further divided into incoming and outgoing ﬁlters, depending on the direction of the packet
relative to a port.
N0
Cum Data
Packet ’ ﬁle's mm
Matt"
Drop
padret
Figure 6-1 Simpllﬂed outgoing Packet Fllterlng Process
"he Filter Structure of the Prestlge
L ﬁlter set consists of one or more ﬁlter rules. Usually, you would group related rules, e.g., all the
iles for NetBIOS, into a single set and give it a descriptive name. The Prestige allows you to
onﬁgure up to twelve ﬁlter sets with six rules in each set, for a total of 72 ﬁlter rules in the
ystem.
’ou can apply up to four ﬁlter sets to a particular port to block multiple types ofpackets, With
ach ﬁlter set having up to six rules, you can have a maximum of 24 rules active for a single port.
rilter Conﬁguration 6-1
Preslige 310 Broadband Internet Access Router
Menu 21.1 — hue: Rulzs hungry
u A Type Filter Rules 71
1 y m Pr-G, sn-umvmo, mm.n.o,n, nP-117 N
2 y m Pr=6. snxa.u,n.o, m-u,q,oln, np-ua n
1 y 1? lane, 5A-n.n.o.a, DA-o c,o,o,up-139 u
A y 1? ppm. s more, DA .o.a.u, DF=1J7 u
s y n: pr-n, SA-DvOﬁ-ﬂ, nA-o.o.n.a, 01,1119 1-
s v 1? mm, s .DADAD, DA=0 0.0.0, DF=lJS u
Enter Filter Rule Number (1—5) m Contiguxe. 1
mn (claimants; Netams_wm
a . uwmzumW-M ,,m.m WM ~
Figure 6-3 Menu 2141 - Filter Rules Summary
Menu 11 z , Filter Rules summary
u A Type ﬁlter Rules u m
.o.u.u, 59 137. DA=O.V.U.U, mas;
Entgr mm Rule Number (145) to Configure; 1
Figure 8-4 Menu 21.2 - Filter Rules Summary
ﬁlter Configuration 6-3
Prestige 310 Broadband Internet Access Router
The protocol dependent ﬁlter rules abbreviation are listed as follows:
0 If the ﬁlter type is [Pr the following abbreviations listed in the following table will be used.
Table 6-2 Abbreviations Used If Filter Type Is IP
Abbreviation Description
Pr Protocol
SA Source Address
SP Source Port number
DA Destination Address
DP Destination Port number
0 If the ﬁlter type is GEN (generic), the following abbreviations listed in the following table
will be used,
Table 6-3 Abbreviations Used if Filter Type Is GEN
Abbrevlatlon Description
Off Oflset
Len Length
Refer to the next section for information on conﬁguring the ﬁlter rules.
i.2.2 Conﬁguring a Filter Rule
”0 conﬁgure a ﬁlter rule, enter its number in Menu 21.1 - Filter Rules Summary and press Enter
3 open Menu 21.I,1 for the rule.
here are two types of ﬁlter rules: TCP/IP and Generic. Depending on the type of rule, the
iarameters below the type will be different. Use the space bar to select the type of rule that you
vish to create in the Filter Type ﬁeld and press Enter to open the respective menu.
Fhe network layer ﬁlters are collectively called protocol ﬁlters. When NAT/SUA (Network
\ddress Translation/Single User Account) is enabled, the inside IP address and port number are
eplaced on a connection-by-connection basis, which makes it impossible to know the exact
lddl’ESS and port on the wire. Therefore, the Prestige applies the protocol ﬁlters to the “native” IP
iddreSS and port number before NAT ISUA for outgoing packets and after NAT/SUA for
=ilter Configuration 6-5
Prestige 3/0 Broadband Internet Access Router
incoming packets. On the other hand, the generic, or device, ﬁlters are applied to the raw packets
that appear on the wire.
To speed up ﬁltering, all rules in a ﬁlter set must be of the same class, i.e., protocol ﬁlters or
generic ﬁlters. The class of a ﬁlter set is determined by the ﬁrst rule that you create. When
applying the ﬁlter ses to a port, separate menu ﬁelds are provided for protocol and device ﬁlter
sets. If you include a protocol ﬁlter set in a device ﬁlters ﬁeld or Vice versa. the Prestige will
warn you and will not allow you to save.
6.2.3 TCPIIP Filter Rule
This section shows you how to conﬁgure a TCP/IP ﬁlter rule. TCP/IP rules allow you to base th
rule on the ﬁelds in the IP and the upper layer protocol, e.g., UDP and TCP, headers.
To conﬁgure a TCP/IP rules, select TCP/IP Filter Rule from the Filter Type ﬁeld and press Entev
to open Menu 21ll.l - TCP/IP Filter Rule, as shown below,
Menu 21 1 1 ~ TCP/XP sneer Rule
Filter a: 1,1
Filter Type- TCF/XP Fillet Rule
Active- Yes
tr Protocol: 5 rt: source Route: no
Destination- rl> Addr- olu.o.n
IP Mask 0.0 a n
Farr. u: m
Porr. » cenp- Equal
Sauxce: rp Mdr- o o.o.n
re Maek= 0.0 0.0
Part u- o
For: n Ccnrp! Non-
rel: Ester no
More! Me Log- Nam
Action Matched= Cheek Next. Rule
Action Nor, Matched- Check Next Rule
pr“: men to Confirm at ES: to c-nc-l:
Pres: Space Bar to Toggle.
Figure 6-5 Menu 21.1.1 - TCPIIP Filter Rule
6-6 Filter Conﬁgurati
Prestige 3 l 0 Broadband Internet Access Router
6.2.1 Filter Rules Summary Menu
This screen shows the summary of the existing rules in the ﬁlter set The following tables contain
a brief description ofthe abbreviations used in Menu 21.1.
Table 6-1 Abbreviations Used in the Filter Rules Summary Menu
Abbrevlatlons Description Display
it Relers to the ﬁlter rule number (1-6).
A Refers to Active. [Y] means the ﬁlter rule IS active.
L [N] means the ﬁller rule is inactive.
Type Refers to the type cf ﬁlter rule [GEN] for Generic
This shows GEN for generic, IP for [IP] tor TCP/IP
TCF’HF'
Filter Rules The lilter rule parameters will be
displayed here (see below).
M Raters; to More. ﬂ [Y] means there are more mles to check.
4 [N] means there are no more rules to the
m Refers ta Action Matched. [F] means to torward the packet.
[D] means to drop the packet.
[N] means check the next mist
n Relers to Acﬁcn Net Matched [F] means to iorward the packet.
[D] means to drop the packet.
[N] means check the next rule.
6-4 Filter Conﬁguratl
Prexlzgg310 Broadband Interner Access Router
6.2 Configuring a Filter Set
To conﬁgure a ﬁlter sets, follow the procedure below:
Step 1r Select option 21, Filter Set Conﬁguration from the Main Menu to open Menu 21.
Menu 21 , leeer Ser. Conﬁguration
Filter Fxlter
Set it Set u Comments
1 7
2 a
J 9
4 1c
5 n
e n
Enter meg: Set. Number [a Cuntxgure:
em: Comments-
Press err-rs: to com-1m ax use no emcee
Mowemwm M. Ma
Figure 6-2 Menu 21 - Ftlter Sal Configuration
Step 2A Select the ﬁlter set you wish to conﬁgure (no, l~12) and press [Enter].
Step 3. Enter a descriptive name or comment in the E111! Cements ﬁeld and press Enter.
Step 4. Press [Enter] at the message: [Press ENTER to conﬁrm] to open Menu 2141 - Ftlter
Rules Summary,
6-2 Filter Conﬂgurati
Prestige 3 [0 Broadband Internet Access Runner
3. Press [ENTER] at the “Press ENTER Io conﬁrm .. prompt to save your conﬁguration aﬂer
you deﬁne all the servers or press ESC at any time to cancel,
Menu 15 - Multiple Server Setup
Fun: v [F Address
Default
1.
aaaaaoo
Prees ENTER [0 Conﬁrm or ESC to Cancel:
Figure 5-1 Multiple Server Configuration
The most oﬂen used port numbers are:
Table 5-1 Services vs. Port number
Services Part Number
FTP (File Transfer Protocol) 21 .
Telnet $3
POPS (Post Ofﬁce Protocol, version 3) 110
SMTP (Simple Mail Transfer Protocol) 25
DNS (Domain Name Syswm) 53 _l
HTTP (Hyper Text Transfer protocol or W, Web) 80
PPTP (Point-m-Poinl Tunneling Protocol) 1723 J
5-2 MultipIe SUA Serve.
Prestige 3/ 0 Broadband Inlernet Access Router
4-4
IP Static Route Set
Preslige_310 Broadband Internet Access Router
4.1 IP Static Route Setup
Similar to network layer static routes, an 1? static route tells the Prestige about the route to a node
before'a connection is established. You conﬁgure IP static mules in Menu 12. 1, by pressing
selecting one of the IP static routes as shown below.
Menu 12 - u> scant: Route Setup
Enter selection number
Flgure 4-2 Menu 12.1 - Edit IP Static Route
Menu 11.1 , Bax: 1p sun: Rants
Rance h 1
Route Mama: daE-lult
Activa- Y“
Deltlnatinn (1: Address: 0.01 u
11: Sub“! Haﬂk- u.n.o.o
Gateway us Address: “12432454459
Metric: z
Pxxvate- Yes
Pres: sum to cowsmn or ESC m CANCEL:
Figure 4-3 Menu 12. Edit IP Static Route
4.2 [P Static Raute Se.
Prestige 3 I (I Bmadbaml Internet Access Rauter
3.4.1 Advantages of SUA
In summary:
0 SUA is a cost»effect1ve solution for small ofﬁces with less than 64 hosts to access the
Intemeti
0 SUA supports servers to be accessible to the outslde world.
0 SUA can provide ﬁrewall protection if you do not specify a server. All incoming inquiries
will be ﬁltered out by your Prestige.
0 UDP and TCP packets can be routed. In addition, partial lCMP, including echo and trace
route, is supported.
3-10 Internet Acce‘
Prestige 3 l 0 Broadband Internet Access Router
The following table contains instructions on how to conﬁ
gure your Prestige for Internet access.
Time Warner
Table 3-3 Internet Access Setup Menu Fields
Field Description
ISP’s Name Enter the name of your Internet Service Provider, e.g.. mylSP. This
information is for identiﬁcation purposes only.
Service Type Toggle between Standard and RoadRunner, the Time Warner's RoadRunner
Service.
Sewer IP Enter the IP Address of the remote gateway at the ISP's site. it you don't
have this data, just leave it blank.
My Login Name
Enter the login name given to you by your ISP.
My Password
Enter the password associated with the login name above,
IP Address Assignment
If your ISP did not assign you an explicit ip address. select Dynamic,
othsnnise select Static and enter the IP address & subnet mask in the
following ﬁelds.
IP Address Enter the IP address assigned to you when Static Assignment is selected.
IP Subnut Mask Enter the subnet mask you assign when Static Assignment is selected,
Getaway Enter the delault gateway
L RIP Direction Select the RIP Direction.
Verslon Select the RP Version.
Single User Account
Please see the following section for a more detailed discussion on the Singlt
User Account feature. The default is You.
3»8
Internet Acoe.
Prestige 3 I 0 Broadband Internet After: Router
Follow the instructions in the following table to conﬁgure TCP/IP parameters for the LAN port.
Table 3-2 TCPIIP LAN Setup Menu Fields
Field LDQSCﬂpﬂOn Example
TOP/IF| Setup
IP Address Enter the IP address at your Prestige in dotted decimal notation 192.168.“
(delault)
IF' Subnet Mask Your Prestige will automatically calculate the subnel mask based 255,255.255.C
on the IP address that you assign. Unless yuu are implementing
suhnetting. use the subnet mask computed by the Prestige
RIP Direction Press the space bar to select the RIP direction from Both/In Non.
Only/Out Only/Nona. (default)
Version Press the space bar to select the RIP version lrorn RlP-lIRIP- RlP-‘l
2BIRlP-2M,
(default)
When you have completed this menu, press [Ente
your conﬁguration, or press [Esc] at any time to cancel.
r] at the prompt [Press ENTER to Conﬁnn...] to sa~
Internet Aces.
Prestige 310 anrlbzmd [VI/emf! ACCESX Router
3.2 TCPIIP LAN Setup and DHCP
From the Main Menu, enter 3 to open Menu 3 - LAN (IO/ODMbps Ethernet) Setup to conﬁgure
TCP/IP LAN and DHCP.
Menu 1 , LAN ua/mthps Ethernet) Setup
x General Setup
2 TCP/IP and DHCP Setup
Press Menu Selectian Numbar:
Figure 3-1 Menu 3 - LAN (10/100Mbps Ethernet) Setup
To edit me TCPIIP and DHCP conﬁguration, enter 2 to open Menu 3.2 - TCP/[P and BBC"
LAN Setup, as shown below.
Menu 3,2 - TCP/IP and mac? LAN setup
use? Satup:
DHCP. sen-r
Client 11: Pool Snarting Addresi- 192.153 1.13
Sue at Client 11: Pool- 5
Primary nus Servez- c o n.u
Secnndary Bus Servers u/A
xemc. DHCP server: N/A
rep/n: Setup:
1? Mdress- 19245me
11> subuet Mask- 255455355»
1m: Direction- "one
Vexsxen= RIP-1
Enter here tn commm or use to mum:
Exes; Syace Bar cc Toggle.
Figure 3-2 Menu 32 — TCPIIP and DHCP LAN Setup
3.4 Intems! Aces
Pres_li‘ge J/ 0 Broadband Internet Access Router
Let‘s say you select [92,168.10 as the network number; which covers 254 individual addresses,
from l92.168.l.l to 192.168.1254 (zero and 255 are reserved). In other words, the ﬁrst 3
numbers specify the network number while the last number identiﬁes an individual workstation
on that network.
Once you have decided on the network number, pick an IP address that is easy to remember, e.g.,
l92.l68.l.l. for your Prestige
The subnet mask speciﬁes the network number portion of an IP address. Your Prestige will
compute the subnet mask automatically based on the IP address that you entered. You don’t need
to change the subnet mask computed by the Prestige unless you are instructed to do otherwise.
3.1.3 RIP Setup
RIP (Routing Information Protocol) allows a router to exchange routing information with other
routers. The RIP Direction field controls the sending and receiving of RIP packets. When set to
Both or Out Only, the Prestige wrll broadcast its routing table periodically. When set to Both
In Only, it will incorporate the RIP information that it receives; when set to None, it will not
send any RIP packets and will ignore any RIP packets received. The default is None, i.e., RIP i
disabled.
The Version ﬁeld controls the format and the broadcasting method of the RIP packets that the
Prestige sends (it recognizes both formats when receiving). RIP-1 is universally supported; but
RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have
an unusual network topology.
Both RIP-28 and RIP-2M sends the routing data in RIP-2 format; the difference being that RIF
ZB uses subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the loar'
on non~router machines since they generally do not listen to the RIP multicast address and so vs.
not receive the RIP packets. However, if one router uses multicasting, then all routers on your
network must use multicasting, also.
By default, RIP direction is set to None and the Version set to RIP-1.
3.1.4 DHCP Conﬁguration
DHCP (Dynamic Host Conﬁguration Protocol) allows the individual clients (workstations) to
obtain the TCP/IP conﬁguration at start-up from a server. Unless you are instructed by your ISI
leave the DHCP at the Server. the default You can conﬁgure the Prestige as a DHCP sewer or
relay. When conﬁgured as a server, the Prestige provides the TCP/D> conﬁguration for the clien.
312 Intemel Acce.
Prestige 3 I 0 Bmadband [rue/net Access Router
2.11 Protocol Dependent LAN Setup
For TCP/IP LAN Setup, refer to Chapter 3 - Internet Access.
2-12 Hardware lnsiallatl’an and Sen
Prestige 3! 0 Bmadband Interns! Acres: Router
2.9 WAN Setup
This section describes how to conﬁgure the WAN using Menu 2 — WAN (lOMbps Ethernet)
Setup. From the Main Menu, enter 2 to open menu 2.
Menu 2 , Hun Setup (innings Ethernet!
Link Mode; Half duplex
Press mm m Confirm or as: to Clueel:
Frees space Bar m Toggle
FigureZ-s Menu 2 — WAN Setup
Use the space bar to toggle between half and full duplex, Half-duplex means the link is used to
Hansrnit or to receive exclusively at any given time, while full duplex means it can transmit am
receive at the same time Half duplex will always work. While full duplex is obviously faster, i
requires the modem to support it in order to work. You can try full duplex ﬁrst; if it works, the
leave it at full duplex; otherwise, change it back to half duplexr
2-10 Hardware Installation and Sen
Prestige 310 Broadband Internet Access Router
The following table describes how to conﬁgure your TCP/IP ﬁlter mle.
Table 6-4 TCP/IP Filter Rule Menu Fields
TCP. If yes, the rule matches only established TCP
connections: else the rule matches all TCP packets.
Field Description Option
Active This ﬁeld activates/deactivatos the ﬁlter rule. Yes/No
IP Protocol Protocol refers to the upper layer protocol, e.g., TCP is 6, 0-255
UDP is 17 and ICMP is 1, This value must be between 0
and 255. 0 means IP protocol is a don't-care.
IP Source Route If Yes. the rule applies to packet with IP source route Yes/No
option; else the packet must not have source route optlon.
The majority of IP packets do not have source route.
Destination: IF" Enter the destination IF‘ Address of the packet you wish to IP address
Addr ﬁlter. This ﬁeld is a don'taoare if it is 0.0.0.0,
Destination: IP Enter the P subnet mask to apply to the Destination: IF Subnet mask
Mask Addr. If you wish to ﬁlter a single host. enter
255255255255.
Destination: Port it Enter the destination port of the packets that you wish to 0-65535
ﬁlter. The range of this ﬁeld is 0 to 55535. Thls ﬁeld is a
don't—care if it is 0.
Destination: Port # Select the comparison to apply to the destination port in Nonn/LusIGroaterI
Comp the packet against the value given in Destination: Port #. Equal/Not Equal]
Source: IP Addr Enter the source IP Address of the packet you wish to IP Address
ﬁlter. This ﬁeld is a don‘t-care if it is 0.0.0.0.
Source: IP Mask Enter the IP subnet mask to appty to the Source: IP Adar." lP Mask
you wish t ﬁter a single host. enter 255255255255.
Source: Port it Enter the source port of the packets that you wish to ﬁlter. 0435535
The range at this ﬁeld is 0 to 65535. This ﬁeld Is a don't-
care if it is 0.
Source: Port # Select the comparison to apply to the source port in the None/LesslGroator/ .
Comp packet against the value given in Source: Port #. Equal/Not Equal
TCl= Estab This ﬁeld is appllcaole only when IP Protocol ﬁeld is S, Yes/No
Filler Conﬁguration
6—7
Prestige 3/0 Broadband Internet Access ROM/er
6.2.4 Generic Filter Rule
This section shows you how to conﬁgure a generic ﬁller rule. The purpose of generic rules is to
allow you to ﬁlter non-[P packets. For IP, it is generally easier to use the IP rules directly.
For generic rules, the Prestige treats a packet as a byte stream as opposed to an IP or IPX packet.
You specify the portion of the packet to check with the Offset (from 0) and the Length ﬁelds, both
in bytes. The Prestige applies the Mask (bit-wise ANDing) to the data portion before comparing
the result against the Value to determine a match. The Mask and Value are speciﬁed in
hexadecimal numbers. Note that it takes two hexadecimal digits to represent a byte, so if the
length is 4, the value in either ﬁeld will take 8 digits, e.g.. FFFFFFFF.
To conﬁgure a generic rule, select Genetic Filter Rule in the Filter Type ﬁeld and press Enter lo
open Menu 21.1.2 - Generic Filter Rule, as shown below.
Menu 21.1.2 , GEnQKlC Fxlrer Rule
mm- in: Ll
Filter 1-pr- Generic Filter Rule
Active- Na
Offser- 0
Length: u
nuk- H/A
value. N/A
um.- No mg- None
Action Matched: Check Next Rule
Action Not Hutched- Check Nexr Rule
Puss ENTER to eunrmn or ass to Cancel:
Figure 6-6 Menu 21.1.2 - Generic Filter Rule
Filter Conﬁguration &9
Pres/we 310 Bmadband Internet Access Ran/er
Action Not Select the action for a packet not l'l'lzlchlng the rule. Check Next
Rule
Forward
Drop
Once you have completed ﬁlling in Menu 21.1.2 - generic Filler Rule, press [Enter] at the message [Press
Enter (0 Conﬁrm] lo save your conﬁguration, or press [Esc] to cancel. This dala will new be displayed on
Menu 21.1 - Filler Rules Summary.
6.3 Applying a Filter
This section shows you where to apply the ﬁlter(s) aﬂcr you deny it (them).
6.3.1 Elhemet trafﬁc
Go tn Menu 3.1 (shown below) and enter the number(s) of the ﬁlter sel(s) that you Want to apply
as appropriate. You can specify up to four ﬁller sets (from twelve) by entering their numbers
separated by commas, e.g., 3, 4, 6, l].
Menu ;.1 - General Ethernet sung
Ethernet Interface: ”Base“!
rnpuz rum sus-
prezneoz Exlterl=
device ﬁlters-
Output hue: sets:
prutuccl fxlters-
dwice tilt-rs-
pzau men to conﬁrm or 85: to CAncel:
Figure 5-7 Filtering Ethernet trafﬁc
Filter Conﬁguration 6-11
Prestige 310 Broadband Internet Access Router
Chapter 7
System Maintenance
This chapter covers the diagnostic tools that help you to maintain your Prestige These tools
include updates on system status, port status, log and trace capabilities and upgrades for the
system software This chapter describes how to use these tools in detail.
Select menu 24 in the main menu to open Menu 24 - System Maintenance, as shown below,
Menu 24 ~ System Maintenance
System status
console Port Speed
Lo; and Trace
Diagnaszic
Backup Cunflguxatlun
Reltuxe Configuratxnn
Firmware Update
Cnmmand Interprzte! Mode
mdmmﬁuwu
Enter Menu Selection nut-mu.
Flgure 7-1 Menu 24 - System Malntenanoe
7-l
Presri e 3 I 0 Broadband Internet Access Router
The following table describes the fields present in Menu 24.1 - System Maintenance - Status.
Table 7-1 System Maintenance - Status Menu Fields
Field Description
Port The WAN or LAN port.
?tatus Shows the port‘s speed and duplex setting.
TXPkts The number of transmitted packets on this port.
Rkats The number of received packets on this port.
Cols The number of collisions on this port.
Tx Bis Shows the transmit Bytes per second on this port.
Rx Bis Shows the receive Bytes per second on this port,
Up Time Time the line has been up.
LAN
Ethernet Address The LAN side Ethernet address.
IP Address The LAN side lF' address,
IP Mask The LAN side IF’ mask.
DHCP The LAN side DHCP role.
WAN
Elhemet Address The WAN side Ethemel address.
IP Address The WAN side lP address
IP Mask The WAN side lF' mask.
DHCP The WAN slde DHCP role.
System up Time The total time the Prestige has been powered on
CPU Load Shows the load on the CPU in percent
Name The name that identiﬁes the Prestige,
RAS FNV Version The RAS Firmware version.
Telnet Conﬁguration and Capabilities 7-3
Pres/(gs 3 I 0 Bmadband Internet Access Router
After the Prestige ﬁnishes displaying, you will have the option to clear the error log.
Examples of typical error and information messages are presented in the ﬁgure below.
mm. and » System Muxnterunel ~ Leg and Trace
i. Vxew Error Log
2. Syslug
Please enter selectxun
Figure 7-4 Examples of Error and Information Messages
Telnet Conﬁguration and CapabiIilies 7-5
Preslige J 10 Broadband Internet Access Router
Your Prestige sends two types of syslog messages: error information messages and session
information messages Some examples of these syslog messages are shown below:
7.4 Diagnostic
The diagnostic facility allows you to test the different aspects of your Prestige to determine if it is
working properly. Menu 244 allows you to choose among various types of diagnostic tests to
evaluate your system, as shown below.
Menu 14.4 , Diagnostic
system Maintenance -
TcP/XP
1. pins Host
System
11. lehnnt System
12, Command Mode
Enter Menu Selection Number-
Host it: Address- n/A
Figure 7-6 Menu 24.4 - System Maintenance - Diagnostic
Follow the procedure below to get to Diagnostic
Step 1. From the Main Menu, select option 24 to open Menu 24 - System Maintenance.
Step 2. From this menu, select option 4. Diagnostic. This will open Menu 24.4 - System
Maintenance - Diagnostic.
Telnet Conﬁguration and CapabiIi‘tiex 7-7
Pres/age 3 I 0 Broadband Internet Access Ramer
7.6 Restore Conﬁguration
Menu 24.5 —— System Maintenance - Restore Conﬁguration allows you to restore tte
conﬁguration via the console port. Note that this function erases the current conﬁguration before
restoring to the previous back up conﬁguration; please do not attempt to restore unless you have
the a backup conﬁguration stored on disk
Menu uvs ~- System Maintenance , Restore Conftguratlon
Ready [a restore canhgumnan na Xmodem,
Do you want. to conctnue ly/m:
Flgure 7-8 Menu 24.5 - System Maintenance - Backup Conﬁguration
7.7 Firmware Update
Menu 24.7 —— System Maintenance - Upload Firmware allows you to upgrade the ﬁrmware and
the conﬁguration ﬁle via the console port. Note that this function erases the old data before
installing the new one; please do not attempt to update unless you have the new ﬁrmware at hand
There are two components in the system: the router ﬁrmware and the conﬁguration ﬁle, as shown
below.
mm. us: -- System mtnzemmce - Upload Firm-are
1. Load us coder
2. Load RDH me
Enter Menu sn-cnen "umber:
Flgure 7-9 Menu 24.7 - System Maintenance - Upload Firmware
Telnet Conﬁguration and Capabilities 7.9
Prexlige 310 Broadband Internet Access Router
lf you replace the current conﬁguration file with the default conﬁguration ﬁle, i.e., p310.rom, you
will lose all conﬁgurations that you had before and the speed of the console port will be reset to
the default of 9600 bps With 8 data bit, no parity and 1 stop bit (8nl). You will need to change
your serial communications software to the default before you can connect to the Prestige again.
The password will be reset to the default of 1234, also.
Menu 24 7.2 - System Maintenance - Upload son rue
To load the ROM file. type “Anni" while in debug mode and wait
for
"Startxng mom upload" ”before beguuung to upload me.
Type ‘atgo" after rue hal succeasruny loaded to start: RAS.
Then change the baud rate to 9500.
Proceeding with the upload will erase the current: ROM file.
Dc You which Tc Proceed: u/Ni
mm . , ”mum-w .. w , ~ tsnwv-wmm
Flgure 7-11 Menu 24.7.2 - system Maintenance - Upload ROM File
7.7.3 TFTP Transfer
In addition to the direct console port connection, the Prestige supports the up/downloading ofthe
ﬁrmware and the conﬁguration file using [F] P (Trivial File Transfer Protocol) over LAN,
Although TFI'P should work over WAN as well, it is not recommended because of the potential
data corruption problems.
To use TFTP, your workstation must have both telnet and TFTP clients. To transfer the ﬁrmware
and the conﬁguration file, follow the procedure below:
step 1. Use telnet from your workstation to connect to the Prestige and log in. Because TFTP
does not have any security check, the Prestige records the IP address of the telnet client
and accepts TFTP requests only from this address.
Step 2. Put the SMT in command interpreter (Cl) mode by entering 8 in Menu 24 — System
Maintenance.
Telnet Conﬁguration and Capabilities 7-11
Prestige 310 Broadband Internet Access Router
7.8 Command Interpreter Mode
This option allows you to enter the command interpreter mode. A list of valid commands can be
found by typing [help] at the command prompt. For more detailed information, check the ZyXEL
Web site or send e-mail to the ZyXEL Support Group
Menu 24 - System Maintenance
system Status
console port Speed
10g and Trace
Diagnostic
Backup Configuration
Restore Configuration
saftware Update
command Interpreter Mode
Enter Menu selection “what: 8
Copyright (c) 1994 ~ 1999 ZyXEL Communications corpl
ras>
Figure 7-12 Command mode
Telnet Conﬁguration and Capabilities 7-13
Prestige 3 / 0 Broadband Internet Access Rainer
Chapter 8
Telnet Configuration and Capabilities
This chapter covers the Telnet Conﬁguration and Capabilities of the Prestige.
8.1 About Telnet Configuration
Before the Prestige is properly setup for TCP/ﬂ’, the only option for conﬁguring it is through the
console port. Once your Prestige IS conﬁgured, you can use telnet to conﬁgure it remotely as
shown below.
Prestige 310 Ca”? ”we”
Figure 8-1 Telnet Conﬁguration on a TCPIIP Network
When H’ routing is disabled, the Prestige can still function as a host.
Telnet Conﬁguration and Capabilities 8-1
Prestige 3 I 0 Broadband Internet Access Router
Chapter 9
Troubleshooting
This chapter covers the potential problems you may run into and the possible remedies. Aﬁer
each problem description, some instructions are provided to help you to diagnose and to solve the
problem.
9.1 Problems Starting Up the Prestige
Table 9-1 Troubleshooting the Start-Up of your Prestige
Problem Corrective Action
None of the LEDs are on when Check the connection between the AC adapter and the Prestige.
y°” WW” ““ the P “351.95 I! the error persists, you may have a hardware problem. In this case,
you should contact technical support
Cannot access the Prestige via 1. Check to see if the Prestige is oonneoted to your computer's serial
the console port. port.
2. Check to see it the VT100 terminal emulation
communications program is M
conﬁgured oorrectiyi The 9600 bps
communicah‘ons software should
be conﬁgured as follows: No parity, 8 Data bilS. 1 Stop bil-
Troub/eshooting 9-1
Prestige 310 Broadband Internet Access Router
Appendix A
Acronyms and Abbreviations
DCE Data Communications Equipment
DHCP Dynamic Host Conﬁguration Protocol
DNS Domain Name System
DTE Data Tenmnal Equipment
IANA Internet Assigned Number Authority
IP Internet protocol
IPCP IP Control Protocol
ISP Internet Service Provider
LAN Local Area Network
MAC Media Access Control
NAT Network Address Translation
RIP Routing Information Protocol
SAP (IPX) Service Advertising Protocol
SNAP Sub~Network Access Protocol
SNMP Simple Network Management Protocol
SUA Single User Account
TA (ISDN) Terminal Adapter
TFI‘ P Trivial File Transfer Protocol
TCP Transmission Control Protocol
UDP User Datagmm Protocol
UTP Unshielded Twisted Pair (cable)
WAN Wide Area Network
Acronyms and Abbreviations A-l
console pan, 24
DHCP, 3-2
diagnostic, 7-7
DNS, 3-3, 3—5
ﬁ|l€f, 2-12. ﬁ-I
Geneml Setup, 2-10
generic ﬁller mic, 6-3
IANA, 3—I
Internet access, 1-3. 3-1
IP address, 3-2. 3—6
IP network number, 3~l
IP Poo]. 3-3
[F static route. 4-l
LAN, 7-3. 74
log, 7-4
Main Menu, 28
password, 2-6, 2»?
Prestige 310 Broadband Internet Access Router
power adapter, 24
Remote Node, 7—3. 7-8
RIP, 3-2, 3-6
ROM Fllc, 740
Smgle User Account, 3»8. See SUA
SMT, 2—7
suﬂwnre update, 7-10
SUA, I-3, 341
Subnet mask, 3-2, 3—6
syslog, 7-6
system name, 2-10
system slams, 7»:
TCP/IP ﬁller rule, 6-6
lelnct, 8-15
(race, 7-4
troubl:shooting, 9-1
VTIOO, 2-4
Index
Index
Prestige 3/ 0 Broadband lnlernet Acres: Rourer
A-Z
Acronyms and Abbreviations
Pnexn‘ge J 10 Broadband Internet Access Router
9.2 Problems with the LAN Interface
Table 9-2 Troubleshooting the LAN interface
Problem
Corrective Actlon
Can't ping any workstation on the
LAN
Check the 10MI100M LEDs on the front panel. One at these LED's
should be on. If they are both oft, check the cables between your
Prestige and hub or the station‘
Verify that the IP address and the subnet mask are consistent
between the Prestige and the workstations.
9.3 Problems with the WAN interface
Table 9-3 Troubleshootlng the WAN interface
Problem I
Corrective Action
Can't connect to a remote node or
ISF‘
Check Menu 24.1 to verify the line status if it indicates [down]. then
refer to the section on the llne problems‘
9-2
Troubleshooting
Prestige 3! 0 Bmadbrmd Internet Access Router
8.2 Telnet Under SUA
When Single User Account (SUA) is enabled and an inside server is speciﬁed, telnet connections
from the outside will be forwarded to the inside server. So to conﬁgure the Prestige via telnet
from the outside, you must ﬁrst telnet to the inside server, and then telnet from the server to the
Prestige using its inside LAN IP address. If no insider server 18 speciﬁed, telnet to the SUA's IP
address will connect to the Prestige directly.
8.3 Telnet Capabilities
8.3.1 Single Administrator
To prevent confusion and discrepancy on the conﬁguration, your Prestige only allows one
administrator to log in at any time. Your Prestige also gives priority to the console port over
telnet. If you have already connected to your Prestige via telnet, you will be logged out if another
user logs in to the Prestige via the console port.
8.3.2 System Timeout
There is a system timeout of 5 minutes (300 seconds) for either the console port or telnet. Your
Prestige will automatically log you out if you do nothing in this timeout period, except when it is
continuously updating the status in Menu 24.l.
8-2 Telnet Conﬁguration and Capabilities
Preslize 3 I 0 Broadband Internet Access Ron/er
7.8.1 Boot commands
Prestige boot module commands are shown below, For ATBAx, x denotes the number preceding
the colon to give the baud rate following the colon in the list of numbers that follows; ego,
ATBA} will give a baud of 96 kbps. ATSE displays the seed that is used to generate a
password to turn on the debug ﬂag in the ﬁrmware. The ATSH command shows product related
information such as boot module version, vendor name, product model, RAS code revision, em
= Debug Command Listing =
ATHE A print help
ATGO boot system
ATUR upload RAS oode
ATUR3 upload RAS mnﬁgurallon ﬁle
ATEAx change baud rats. 1:38.4,2:19.2,3:9.6,4:57.6,5:115.2
ATTD download oonﬁguration to PC
ATSE dlsplay seed for password genemﬁon
ATSH display Revision and etc
Figure 7-13 Boot module commands
7-14 System Maintenance
Prestige 3 I 0 andband Internet Access Router
stop 3. Enter command “sys stdio 0" to disable SMT timeout, so the TFTP transfer will
not be interrupted.
Step 4. Launch TFTP client on your workstation and connect to the Prestige. Set the transfer
mode to binary before starting data transfer.
Stop 5‘ Use the TH“? climt to transfer files between the Prestige and the workstation. The ﬁle
name for the ﬁrmware is “ras” and for the conﬁguration ﬁle, “rome 0" (rom»zero, not
capital 0).
If you upload the ﬁrmware to the Prestige, it will reboot automatically when the ﬁle transfer is
completed .
Note that the telnet connection must be active and the SMT in CI mode before and during the
TFTP transfer. For details on TI-‘l‘P commands, please consult the documentation of your TFFP
client program. For UNIX, use “get" to transfer from the Prestige to the workstation, “put” the
other way around, and “binary" to set binary transfer mode.
7-12 System Maintenance
Prestige 3 IO Broadband Internet Access Router
7.7.1 Uploading the RAS Code
Menu 24.7.2 shows you the instructions for uploading the RAS Code. If you answer yes to the
prompt, the Prestige will go into debug mode. Follow the procedure below to upload the
conﬁguration ﬁle:
Step 1. Enter “atur” alter the “Enter Debug Mode" message.
Step 2. Wait for the “5 bar: ing XMODEM upload" message before activating Xmodem
upload on your terminal.
Step 3. After successful ﬁrmware upload, enter “atgo” to restart the Prestige.
Menu 24.7.1 - Syotem Maintenance - Upload Rns Code
To load the nuts code, type men" while in debug mode and waie
in:
"Starting xnonm uninaa- before beginning to upload code
Type "atgc' alter code has Sirens-furry loaded to stare ms.
Pmceedxng with the upload will erase the current as code.
Do You wish To Proceed: (r/m
.. _1. . ... .
Figure 7-10 Menu 24.7.1 - System Maintenance - Upload RAS Code
7.7.2 Uploading ROM File
The conﬁguration data, system-related data, the error log and the trace log are all stored in the
conﬁguration ﬁle. Please be aware that uploading the conﬁguration ﬁle replaces everything
contained within.
Menu 24.7.2 shows you the instructions for uploading the ROM ﬁle. If you answer yes to the
prompt, the Prestige will go into debug mode. Follow the procedure below to upload the
conﬁguration ﬁle:
Step 1. Enter “atur” after the “Enter Debug Mode" message.
step 2. Wait for the “Starting xMODEM upload” message before activating Xmodem
upload on your terminal.
Step 3. After successful] ﬁrmware upload, enter “at-.go" to restart the Prestige.
7-10 System Maintenance
Prestige 3 I 0 Broadband Internet Access Router
The following table describes the diagnostic tests available in Menu 24.4 for your Prestige and the
connections.
Table 7-3 System Maintenance Menu Diagnostic
Field 4Description
Ping Host This diagnostic test pings the host, which determines the functionality of the
TCP/IP protocol on both systems and the links in between.
Reboot System This option reboots the Prestige.
Command Mode This option allows you to enter the command mode. This mode allows you to
diagnose and test your Prestige using a speciﬁed set of commands.
7.5 Backup Conﬁguration
Option 5 from Menu 24 - System Maintenance allows you to backup the current Prestige
conﬁguration to your workstation. Backup is highly recommended once your Prestige is
functioning properly.
You can only perform the backup and restore using menu 24 through the console port, not telnet.
Any serial communications program should work ﬁne; however, you must use XMODEM
protocol to perform the download/upload.
Please note that terms “download" and “upload“ are relative to the workstation. Download means
to transfer from another machine to the workstation, while upload means from your workstation
to another machine.
Menu 24.5 -- system neinumnee - Backup Configuration
Ready to haCkup conﬁguratiun vu made-n.
Do you want: to continue ly/nix
Figure 7-7 Menu 24.7 - System Maintenance - Backup Conﬁguration
7»8 System Maintenance
Prestige 3 I 0 Broadband Internet Access Router
7.3.2 Unix Syslog
The Prestige uses the UNIX syslog facility to log the messages to 3 syslog sewer. Syslog can be
conﬁgured in Menu 24.3.2 - System Maintenance - Syslug, as shown below.
Menu u.3.z ., System Mnntenance , SyleS
Unxx Syslng:
Active: Ho
Sysleg 1p Addrese- 1
bag nanny- meat 1
Figure 7-5 Menu 24.3.2 - System Maintenance - Syslog and Accounting
You need to conﬁgure the following three parameters described in the table below to activate
syslog.
Table 7-2 System Maintenance Menu Syslog Parameters
Parameter Description
Active Use the space bar to turn on or off syslog.
Syslog IP Address Enter the IP Address of your syslog server.
Log Facility Use the space bar to toggle between the 7 different Local options. The log
facility allows you to log the message in different ﬁles in the serverr Please
refer to your UNIX manual for more detail.
7-6 System Maintenance
Prestige 3 I 0 Broadband Internet Access Router
7.2 Console Port Speed
You can set up different port speeds for the console port through Menu 24.2 — Console Port
Speed. Your Prestige supports 9600 (default), 19200, 38400, 57600, and 115200 bps for the
console port. Use the space bar to select the desired speed in Menu 24.2, as shown below.
Menu 24,2 - System Mintenance - Change Console Port Speed
Consote Pox: speed; usznn
Fresi mm cu confirm or ES: to Cancel:
Press Spice Bar to Toggle.
Figure 7-3 Menu 24.2 — System Maintenance — Change Console Port Speed
7.3 Log and Trace
There are two logging facilities in the Prestige. The ﬁrst is the error logs and trace records that are
stored locally. The second is the UNIX syslog facility for message logging.
7.3.1 Viewing Error Log
The ﬁrst place you should look for clues when something goes wrong is the error/trace log.
Follow the procedure below to view the local error/trace log:
step 1. Select option 24 from the Main Menu to open Menu 24 - System Maintenance.
Step 2. From Menu 24, select option 3 to open Menu 24.3 - System Maintenance - Log and
Trace.
Step 3. Select the ﬁrst option from Menu 24.3 - System Maintenance - Lng and Trace to
display the error log in the system.
74 System Maintenance
Prestige 310 Bmadbzmd Internet Access Router
7.1 System Status
The ﬁrst selection, System Status, gives you information on the version of your system ﬁrmware
and the status and statistics of the ports, as shown in below System Status is a tool that can be
used to monitor your Prestige. Speciﬁcally, it gives you information on your system ﬁrmware
version, number of packets sent and number of packets received.
To get to the System Status, Enter number 24 to go to Menu 24 - System Maintenance. in this
menu, enter number 1 to open, System Maintenance - Status. There are two commands in
Menu 24.1 - System Maintenance - Status. Entering 9 resets the counters, and E80 takes you
back to the previous screen.
The table below describes the ﬁelds present in Menu 24.1 - System Maintenance - Status. It
should be noted that these ﬁelds are READ-ONLY and are meant to be used for diagnostic
purposes.
Menu 24.) ., Syltem Maintenance A sums
Farr. status ‘rxekrs nxeku Eels 1x E/s Rx 815
um mun/Pull an a u o u
wan Down (2! o o a a
Part: Ethernet Address re Address re Mask
um no - ax.“ 202.132.5n.17 255.255.zss.z¢u
mm at - 102,112,154 125 25515455»
System up rime. ems-z: cw Load:
llama:
Roun'xngx it)
we F/n version. Anzlssnsw
Press Commanﬁ:
mes amen: Counter!
Flgure 7-2 Menu 24.1 - System Maintenance — status
7»2 System Maintenance
Prexnge 310 Broadband Internet ACEEJ‘S Router
6.3.2 Remote Node Filters
Go to Menu 11.5 (shovm below) and enter the number(s) of the ﬁlter sct(s) as appropnate. You
can specify up to four ﬁlter sets by entering their numbers separated by commas.
Menu us — nemu Node mm:
Input sun: sets:
prnceccl filtexsx
dens; Ulcers.
Output Fxlter Secs
ptetecol ﬁlters.
device ﬁlters:
Call Filter Sets:
protocol filtars:
device tuneu-
Figure 6-8 Fllterinq Remote Node trafﬁc
6-12 Filter Conﬁguration
Prestige 1 I 0 Broadband Internet Access Router
The following table describes the ﬁelds in the Generic Filter Rule Menu.
Table 6-5 Generic Filter Rule Menu Fields
Field Description Option
Filter ff This is the ﬁlter set, tilter rule eta-ordinates, i.e.. 2.3 refers to the second
ﬁlter set and the third mle of that set.
Filter Type Use the space bar to toggle between both types of rules. Parameters Generic Filter
displayed below each type will be dlﬂerent. Rule! TCPIIP
Filter Rule
Active Select Yes to turn on the ﬁlter rule. Yes/No
Offset Enter the starting byte of the data portion in the packet that you wish to Default = 0
compare. The range tor this ﬁeld is from D to 255,
Length Enter the byte count at the data portion in the packet that you wish to Default = 0
compare. The range for this ﬁeld is 0 to a.
Mask Enter the mask (in Hexadecimal) to apply to the data portion before
comparison.
Value Enter the value (in Hexadecimal) to compare with the data portion.
More If yes, a matching packet is passed to the next ﬁtter rule beiore an action is Yes I N/A
taken; else the packet is disposed of according m the action ﬁelds.
It More is Yes. then Action Matched and Action Not Matched will be NIA.
Log Select the logging option from the iollowing:
0 None — No packets will be logged, None
0 Action Matched — Only packem that match the rule parameters will Action
be logged. Matched
0 Action Not Matched - Only packets that do not match the mle Action Not
parameters Will be logged. Matched
l Both — All packets will be logged,
Both
Action Select the action for a matching packet. check Next_|
Matched Rule
Forward
Drop
6-10 Filter Conﬁguration
Prestige 3 I 0 Broadband [merrier Access Router
Field
Description
Option
More
ll yes. a matching packet is passed to the next ﬁlter rule
before an action is taken; else the packet is disposed of
according to the acuon ﬁelds.
It More is Yes, then Action Matched and Action Not
Matched will be NIA.
Select the logging option from lhe following:
0 None — No packets will be logged.
0 Action Matched - Only packets that match the mle
parameters will be tagged,
0 Action Not Matched - Only packets that do not
match the rule parameters will be logged.
0 Both - All packets will be logged.
Yes I NIA
None
Action Matched
Action Not Matched
Both
Action Matched
l_____—
Atm‘on Not Matched
Select the action for a matching packet.
Sclccl the action for a packet not matching the rule.
Check Next Rule
Forward
Drop
Check Next Rule
Forward
Drop
Once you have completed ﬁlling in Menu 21.1.1 ~ TCPIIP Fitter Rule. press {Enter} at the message [Press
Enter to Conﬁrm] to save your conﬁguration, or press [5501 to ancelt This data will now be displayed on
Menu 21.1 - Fitter Rules Summary,
Filter Conﬁguration

Source Exif Data:

File Type                       : PDF
File Type Extension             : pdf
MIME Type                       : application/pdf
PDF Version                     : 1.3
Linearized                      : Yes
Create Date                     : 2001:06:13 03:17:48
Producer                        : Acrobat Distiller 4.0 for Windows
Author                          : jsoscia
Title                           : 49082.pdf
Modify Date                     : 2001:06:13 03:18:10-04:00
Page Count                      : 84

EXIF Metadata provided by EXIF.tools

ZyXEL Communications PRESTIGE310 User Manual 49082

ZyXEL Communications Corporation 49082

Contents

8

FCC ID Filing: I88PRESTIGE310

Navigation menu

Namespaces

Views

Navigation