Zyxel-communications 2864I Manuel d'utilisateur

Prestige 2864IUser’s ManualVersion 2.0JiH5<ACCESSING THE INTERNET & INTRANET

x4 Configuring for Internet Access 40IP Addresses and the Internet 41Internet Access Configuration 42Single User Account 45Configuration for Single Us

Bridging Configuration 87Bridging ConfigurationThis chapter shows you how to configure the Bridging options forthe Prestige. Depending on your part

88 Bridging ConfigurationBridge Ethernet SetupBridging is used to forward packets of unsupported protocolswhose destination is not on the local Ether

Bridging Configuration 89 Figure 9-1 Bridge Ethernet Setup• Handle IPX - Set this parameter to None if there is no IPXtraffic on the LAN or if you

90 Bridging ConfigurationRemote Node SetupFollow the procedure in Chapter 5 to fill the protocol-independentparameters in Menu 11, Remote Node Profil

Bridging Configuration 91Once you have completed filling in the Network Layer OptionsMenu, press ENTER to return to Menu 11. Press ENTER at themessag

92 Bridging Configuration2. Active - Indicates whether the static route is active or not.3. Ether Address -Enter the MAC address of the destination

Filter Configuration 93Filter ConfigurationAbout FilteringThe Prestige uses filters to decide whether or not to allow passageof a data packet and/

94 Filter ConfigurationFor incoming packets, the Prestige applies data filters only. Packetsare processed depending upon whether a match is made. The

Filter Configuration 95The new information will now be displayed in the read-only sectionof Menu 21 - Filter Set Configuration as shown below: Figure

96 Filter Configuration• m - Refers to Action Matched. F means to forward the packet,D means to drop the packet, and N means check the next rule.•

xi9 Bridging Configuration 87IPX Spoofing 87Bridge Ethernet Setup 88LAN-to-LAN Application 89Remote Node Setup 90Default Dial-In Setup for Bridge 91Br

Filter Configuration 97• PT - IPX Packet Type.• SS - Source Socket.• DS - Destination Socket.For more information on configuring the filter rule p

98 Filter Configuration Figure 10-4 Menu 21.1.1 - TCP/IP Filter Rule1. Active - In this field, you can make the filter rule active orinactive. The

Filter Configuration 997. Destination: Port # Comp - In this field, you can select whatcomparison quantifier you wish to enable to compare to theval

100 Filter Configuration• Yes - filter match only established TCP connections.• No - filter match both initial and established TCPconnections.13. M

Filter Configuration 101• Check Next Rule.• Forward.• Drop.Once you have completed filling in Menu 21.1.1 - TCP/IP FilterRule, press ENTER at the

102 Filter Configuration2. Length - This field refers to the length (in bytes) of the data inthe packet that the Prestige should use for comparison

Filter Configuration 103 Figure 10-6 Menu 21.1.3 - IPX Filter Rule1. IPX Packet Type - Enter the IPX packet type value of thepacket you wish to filt

104 Filter Configuration• RIP Response.• SAP Request.• SAP Response.• SAP Get Nearest Server Request.• SAP Get Nearest Server Response.Once you

SNMP 105SNMPAbout SNMPThe Simple Network Management Protocol (SNMP) is a protocolgoverning network management and the monitoring of networkdevices

106 SNMP Figure 11-1 Menu 22 - SNMP Configuration1. From the Main Menu, select option 22. SNMP Configuration.This will bring you to Figure 12.1 Men

xiiSystem Status 117Terminal Baud Rate 120Log and Trace 121View Error Log 121Syslog And Accounting 122Diagnostic 123Backup Configuration 126Restore Co

SNMP 1076. Trap: Community - In this field, enter the community namethat is sent with each trap to the SNMP manager. This shouldbe treated like a pa

108 SNMP

System Security 109System SecurityThe Prestige incorporates a number of security measures to preventunauthorized access to your network. For examp

110 System Securityobtain a copy of the RADIUS software, along withdocumentation for the server, at http://www.livingston.com/Tech/FTP/pub-le-radius.

System Security 111This will bring you to Menu 23.2 - System Security - ExternalServer. Figure 12-1 Menu 23.2 - System Security - External ServerT

112 System Security# Client Name Key#-----------------------------192.168.0.1 1234should be added to the client file. The Cl

System Security 113 User-Name = “joeuser”, Zyxel-Callback-Option = Mandatory, Zyxel-Callback-Phone-Source = Preconfigured Dialback-No

114 System Security5. Re-type your new system password for confirmation purposesand press ENTER.You will now need to enter in this password when you

Telnet Configuration and Capabilities 115Telnet Configuration andCapabilitiesAbout Telnet ConfigurationWhen you first configure your Prestige, it

116 Telnet Configuration and CapabilitiesIP in menu 1, telnet will still be available provided you assignthe Prestige an IP address.Telnet Capabiliti

xiii

System Maintenance 117System MaintenanceThe Prestige provides diagnostic tools that you can use to maintainyour device. Some of these tools includ

118 System Maintenance Figure 14-2 Example of Menu 24.1 - System Maintenance - Status1. To get to the System Status, select option 24. SystemMain

System Maintenance 1199. RXPkt - the number of received packets on this channel.10. Error - the number of error packets on this channel.11. CLU - (C

120 System Maintenance24. Country Code - refers to the one byte country code value (indecimal notation), e.g., 225 indicates North America.25. LAN Pa

System Maintenance 121 Figure 14-4 Menu 24.2 -System Maintenance - Change Terminal Baud RateLog and TraceLog and trace tools allow users of the Prest

122 System MaintenanceYou can also clear the Error Log on your Prestige. After eachdisplay, you are prompted with an option to do so. Enter theapprop

System Maintenance 123and Session information messages. Some examples of thesemessages are shown below:Call Information Messages:line 1 channel 1, ca

124 System Maintenance1. From the Main Menu, select option 24. System Maintenance.This will bring you to Menu 24 - System Maintenance.2. From this

System Maintenance 125 Figure 14-7 Trace Display for a Successful IPCP Connection via Manual CallBelow is an example of a failed Trace Display for a

126 System Maintenance2. Ping Host - This diagnostic test pings the host whichdetermines the functionality of the TCP/IP protocol on yoursystem.3.

Introduction 1IntroductionCongratulations on your purchase of the ZyXEL Prestige 2864IRemote Access Router. The Prestige is the first device to int

System Maintenance 127Software UpdateSoftware updates are only possible through the RS-232 cableconnection. You cannot use telnet to update the softw

128 System Maintenanceperform the upload. After uploading is successful, power offthe Prestige, and then power it back on to restart.Command Interpre

System Maintenance 129Call Control Parameters Figure 14-10 Menu 24.9.1 Call Control Parameters• Dialer Timeout: Digital Call (sec) - The Prestige wi

130 System MaintenanceBlacklist Figure 14-11 BlacklistThe phone numbers on this list cannot be entered directly, instead,they are numbers which ha

System Maintenance 131dropped and further outgoing calls to that Remote Node or RemoteDial-in User (callback) will fail. After each period, the total

132 System Maintenance

Troubleshooting 133TroubleshootingThis chapter contains some problems you may run into when usingyour Prestige. After each problem description, we

134 TroubleshootingProblems With the ISDN LineThe ISDN initialization failedThis problem occurs when you attempt to save the parametersentered in men

Troubleshooting 135Problems with the LAN InterfaceCan’t PING any station on the LAN1. Check the LAN LED on the front panel of your Prestige. If it i

136 Troubleshootingnothing in the log, the call may have been dropped by theremote device that you dialed in to. Make sure that theconfiguration para

2 IntroductionISDN Basic Rate Interface (BRI)Using either a standard S/T or U Interface the Prestige supports afull range of switch types. The switch

ISDN Switch Types 137ISDN Switch TypesThe following table summarizes the different type of switch typessupported by the Prestige and some related

138 ISDN Switch TypesFor AT&T 5ESS National ISDN-1Provisioning Feature SettingTerm Type ACircuit Switched Voice (CSV) 1CSV Additional Call Offeri

ISDN Switch Types 139Provisioning Feature SettingCSV Flexible Call Offering (FCO) UnrestrictedCSV limit 2CSV Notification Busy (NB) limit 1Circuit Sw

140 ISDN Switch TypesProvisioning Feature SettingEKTS)

Index 141Index10Base2, 14, 2410Base5. See AUI10Base-T, 14, 23, 241TR6, 13, 33, 139A/B Adapter, 1Accounting, 123, 124AUI, 14, 24, 37, 121, 137BACP.

142 IndexIP Subnet Mask, 15, 39, 71,74, 78IPX, 1, 2, 5, 12, 14, 36, 40,51, 55, 62, 66, 67, 73, 79,80, 81, 82, 84, 86, 87, 89,90, 91, 92, 97, 98, 99,

Index 143SPID, 11, 13, 14, 30, 136,139Spoofing, 81, 85, 89SUA. See Single UserAccountswitch types, 2, 13, 31, 136,139System ManagementTerminal, 26Tar

Introduction 3Protocol/Multilink Protocol) to bundle two B channels over a BRIline. In addition, the Prestige dynamically allocates bandwidthbetween

4 IntroductionCall ControlThe Prestige provides budget management for outgoing calls andmaintains a blacklist for unreachable phone numbers in order

Introduction 5Multiprotocol LAN-to-LAN ConnectionThe Prestige can dial to or answer calls from another remote accessrouter connected to a different n

6 Introduction4. Part Four - Advanced Management (Chapters 11-14) -provides information on advanced management features fornetwork managers.5. Part

iiZyXEL Limited WarrantyZyXEL warrants to the original end user (purchaser) that thisproduct is free from any defects in materials or workmanship for

Introduction 7Packing ListBefore you proceed further, check all items you received with yourPrestige against this list to make sure nothing is missin

8 Introduction• A computer equipped with communications softwareconfigured to the following parameters:• VT100 terminal emulation.• 9600 Baud rate

Before You Begin 9Before You BeginTo ensure successful installation of your Prestige, we stronglyrecommend that you carefully follow the steps outl

10 Before You Begin Figure 2-1 Installation GuideCompleting the WorksheetBefore you continue locate the worksheet at the end of thischapter. This in

Before You Begin 11Ordering Your ISDN LineIf you do not have the ISDN line installed already, we suggest thatyou order it from your telephone company

12 Before You Begin• System Name - This is the name given to the Prestige foridentification purposes. This name should be no more than 8alphanumeric

Before You Begin 13America, select your ISDN switch type. For DSS1 and 1TR6,verify this field to make sure that you have the proper firmwareloaded.•

14 Before You BeginCollecting Ethernet Setup InformationThis section assumes that you are setting up your Prestige for aTCP/IP connection. If you wan

Before You Begin 15IP Subnet Mask Number of Host IDs Number of Bits255.255.255.128 126 25255.255.255.192 62 26255.255.255.224 30 27255.255.255.255 1

16 Before You BeginPrestige Setup and Installation WorksheetGeneral Setup Information• System Name (for identification purposes):___________________

iiirights, and you may also have other rights which vary from state tostate.Copyright © 1997 by ZyXELThe contents of this book may not be reproduced (

Before You Begin 17North America ISDN• 1st Telephone Number:_______________________________________• • Analog Call (check one): ___Modem ___A/B Ada

18 Before You Begin• Outside Line Prefix Number:_______________________________________• PBX Number (S/T Bus Number):______________________________

Before You Begin 19• PBX Number (S/T Bus Number):_______________________________________• • Incoming Number Matching: ___EAZ ___Don’t Care• • Analo

20 Before You Begin

Installation 21InstallationThis chapter outlines how to connect your Prestige to the LAN andISDN line. A diagram of the right panel and rear panel

22 InstallationA Warning On Connection CablesThe RS-232, ISDN line, and Ethernet cable, are very similar toeach other. It is important that you use t

Installation 23• U interface - This allows you to connect directly to your ISDNwall jack.221127(27(7+(,6'1-$&.,6)25,6'1/,1(

24 Installation• Straight through cable (white tag): Connect your Prestige toa 10Base-T hub.• Crossover cable (red tag): Connect your Prestige to y

Installation 25PWR - This LED (power) comes on as soon as you connect youPrestige to the power supply and switch it to the ‘I’ (on) position.RDY - Th

26 Installation Figure 3-3 Power on MessagesIf you press ENTER, the Prestige will display a login screen andask you to enter the password as shown be

ivgenerates, uses, and can radiate radio frequency energy, and if notinstalled and used in accordance with the instructions, may causeharmful interfer

Installation 27Navigating Through the System ManagementTerminal InterfaceThe SMT is the interface that you use to configure your Prestige.Several ope

28 Installation• Saving Your Configuration. You can save your configurationby pressing ENTER at the message: Press ENTER to confirmor ESC to cancel:

Installation 29#Menu Title Description12 Static Routing Setup Setup static route for different protocols.There are four static routes for each protoc

30 Installationremotely via SNMP, used for CHAP authentication, and will bedisplayed as the prompt in the Command Mode. See Chapter 6for more informa

Installation 31North American ISDN Figure 3-7 Menu 2 - ISDN Setup for North America1. Switch Type - Verify the switch type information with yourtele

32 Installationanalog call for this telephone number to the PHONE port(a.k.a., ‘POTS’ port in North America and a/b adapter inEurope). Set to Modem i

Installation 33 Figure 3-9 Menu 2 - ISDN Setup for 1TR61. Switch Type - This field is fixed as DSS1 or 1TR6.2. B Channel Usage - This field is fixed

34 Installationbe added to all outgoing calls and should be no longer than 3digits. Otherwise, leave this field blank.7. PBX Number (with S/T Bus Nu

Installation 359. Analog Call Routing - All analog calls will be routed to themodem if the setting is Modem. Or they will be routed to theA/B Adapte

36 InstallationEthernet SetupMenu 3 is used to enter Ethernet related information. Dependingon the protocols (TCP/IP or IPX) on your LAN, you will ne

vtelecommunications company. The equipment must also beinstalled using an acceptable method of connection. In some cases,the company’s inside wiring a

Installation 37TCP/IP Ethernet Setup and DHCPIf you are setting up your network for the first time, read Chapter4, Configuring for Internet Access, b

38 Installationprovider. The Client IP Pool Starting Address gives the firstaddress in the reserved block, which is also used as the LANnetwork addre

Installation 39packets that it receives. If set to None, the Prestige will notparticipate in any RIP exchange with other routers. Usually, you shoul

40 Configuring for Internet AccessConfiguring for InternetAccessMenu 4 of the SMT allows you to configure Internet access on onescreen. Before you

Configuring for Internet Access 41 Figure 4-1 Internet AccessIP Addresses and the InternetConventionally, the Internet (with a capital I) refers t

42 Configuring for Internet AccessFor this reason, it is recommended that you choose your networknumber from the above list.You can obtain your IP ad

Configuring for Internet Access 43 Figure 4-2 Menu 4 - Internet Access Setup1. From the Main Menu, enter 4 to go to Menu 4 - InternetAccess Setup a

44 Configuring for Internet Access6. My Password - Enter the password associated with the loginname above. Note that this login name/password pair i

Configuring for Internet Access 45test the Internet connection. If the test fails, note the errormessage that you receive and take the appropriatetro

46 Configuring for Internet Accesstranslation, refer to RFC 1631, The IP Network Address Translator(NAT).In summary:1. SUA is an ideal, cost-effecti

vi• The Council Directive 89/336/EEC of 3 May 1992 on theapproximation of the laws of the member states relation toElectro Magnetic Compatibility. (E

Configuring for Internet Access 47Configuration for Single User AccountThe steps for configuring your Prestige for Single User InternetAccess are ide

48 Configuring for Internet Access1. Configure your primary ISP using Menu 4, as described earlierin this chapter.2. Enter Menu 11, then select the

Configuring for Internet Access 49

50 Remote Node ConfigurationRemote Node ConfigurationA Remote Node represents both a remote gateway and the internetbehind it, across an ISDN conne

Remote Node Configuration 51Enter the Remote Node number to edit and you will go to the nextsubmenu: 11.1 - Remote Node Profile as shown below: Figu

52 Remote Node Configuration4. Incoming: Rem Node Login Name - Enter the login name thatthis Remote Node will use when it calls into the Prestige. T

Remote Node Configuration 53• PAP sends the user name and password in plain text.• CHAP scrambles the password before it is sent over thewire. Gen

54 Remote Node Configuration13. Bridge - Bridging is used for protocols that are not supportedor not turned on in the previous Route field by the Pre

Remote Node Configuration 55• 56K - (For the North America only) The Prestige will place56Kbps digital data calls.• DOVBS - (For the North America

56 Remote Node ConfigurationBandwidth on DemandThe Bandwidth on Demand (BOD) feature allows you to bundleboth B channels in one connection. The secon

vii• Technical support: [email protected] in North [email protected] outside North America.• Product information: Visit our site on th

Remote Node Configuration 57and Receive will only use incoming traffic to make thisdetermination.If, after making the call to bring up a second chann

58 Remote Node Configuration4. Multiple Link Options: Base Trans Rate - Select the basedata transfer rate for this Remote Node. This parameter is in

Dial-In Configuration 59Dial-In ConfigurationYou can configure the Prestige to receive calls from Remote Dial-in Users (e.g. telecommuters) and Rem

60 Dial-In ConfigurationTelecommuting Telecommuting enables people to work at remote sites and yetstill have access to the resources in the business

Dial-In Configuration 61router on the remote network (see Chapter 5). An example ofthe Prestige being used as a dial-in server is shown below: Figur

62 Dial-In Configuration Figure 6-3 Menu 13 - Default Dial-in SetupFrom the Main Menu, enter 13 to go to Menu 13 - Default Dial-inSetup. This sectio

Dial-In Configuration 633. PPP Options: Mutual Authen. - Some vendors, e.g. Cisco,implement a type of mutual authentication. That is, the nodethat i

64 Dial-In Configurationinvalid IP address and potentially disrupting the whole network.If set to No, the remote host must use the IP address assigne

Dial-In Configuration 6516. Session Options: Input Filter Sets and Session Options:Output Filter Sets - In these fields, you need to select thefilter

66 Dial-In Configuration Figure 6-4 Menu 14 - Dial-in User SetupAfter selecting one of eight users by number and pressing enter youwill see Menu 14.1

viiiContentsZyXEL Limited Warranty iiCopyright © 1997 by ZyXEL iiiAcknowledgments iiiFCC Part 15 Information iiiInformation for Canadian Users ivConta

Dial-In Configuration 673. Password - Enter the password for the Remote Dial-in User.4. Callback - This field determines if the Prestige will allow

68 Dial-In ConfigurationOnce you have completed filling in Menu 14.1 - Edit Dial-in User ,press ENTER at the message: Press ENTER to Confirm ... to s

TCP/IP Configuration 69TCP/IP Configuration This chapter shows you how to configure the Prestige forTCP/IP. Depending on your particular applicati

70 TCP/IP Configuration204.247.203.0 with subnet mask 255.255.255.0 into 16 subnets (4bits), the new subnet mask becomes 255.255.255.240.Number of Bi

TCP/IP Configuration 71need to configure Static Routes if some services reside beyond theimmediate remote LAN.Remote Node Setup Follow the procedure

72 TCP/IP Configuration5. Rem IP Subnet Mask - Enter the subnet mask for the remotenetwork.6. My WAN Addr - Some implementations, especially the UN

TCP/IP Configuration 739. Metric - The metric represents the “cost” of transmission forrouting purpose. IP routing uses hop count as the measurement

74 TCP/IP Configurationused to resolve this problem by providing the Prestige with somestatic routing information. As a matter of fact, when you conf

TCP/IP Configuration 75 Figure 7-5 Menu 12 - Static Route Setup - Main Menu Figure 7-6 IP Static Route Setup1. Route Name - Enter a descriptiv

76 TCP/IP Configuration4. IP Subnet Mask - Enter the subnet mask for this destination.Follow the discussion on IP subnet mask in this chapter.5. Ga

ixWhat This Manual Doesn’t Cover 6Other Resources 6Packing List 7Additional Installation Requirements 72 Before You Begin 9Road Map and Flow 9Completi

Novell IPX Configuration 77Novell IPX Configuration This chapter shows you how to configure the Prestige for IPX.Depending on your particular appl

78 Novell IPX ConfigurationThere are two different scenarios in which you would connect yourPrestige to a LAN: one with a server (server side), and o

Novell IPX Configuration 79This Prestige must then be configured as a Seed Router, and thenetwork number can be configured in the Ethernet SetupMenu.

80 Novell IPX Configuration Figure 8-2 Menu 3.3 - Novell IPX Ethernet Setup1. Seed Router - Determine if the Prestige is to act as a seedrouter. Thi

Novell IPX Configuration 81Once you have completed filling in the Menu 3.3, press ENTERthe save message to save your selections, or press ESC at any

82 Novell IPX Configurationconfigure the default dial-in parameters in menu 13 (see Chapter6).1. Route - Make sure IPX is among the protocols in the

Novell IPX Configuration 836. Hop Count - This field indicates the number of intermediatenetworks that must be passed through to reach the RemoteNod

84 Novell IPX Configuration Figure 8-5 NetWare Servers on Both Sides of the LinkThis may present a problem if you desire your client station toaccess

Novell IPX Configuration 85 Figure 8-6 Menu 12.2 - Edit IPX Static Route1. Server Name - In this field, enter in the name that has beenconfigured fo

86 Novell IPX ConfigurationOnce you have completed filling in the menu, press ENTER at themessage: Press ENTER to Confirm ... to save your selections