Instruction/ maintenance manual of the product P-335WT ZyXEL Communications
Go to page of 485
P-335 Firewall Router w i th Print Server P-335WT 802.1 1g Wireless Firewall Router with Print Server User ’ s Guide V ersi on 3.60 9/2005.
.
P-335 Series User’s Guide Copyright 2 Copyright Copyright © 2005 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, transcribed.
P-335 Series User’s Guide 3 Federal Communications Commission (F CC) Interference Statement Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rul es. Operation is subject to the following two conditions: • This device may not cause harmful interference.
P-335 Series User’s Guide Safety Warnings 4 Safety W arnings For your safety , be sure to read and fo llow all warning notices and instructions. • T o reduce the risk of fire, use only No. 26 A WG (American W ire Ga uge) or larger telecommunication line cord.
P-335 Series User’s Guide 5 ZyXEL Limited Warranty ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase .
P-335 Series User’s Guide Customer Support 6 Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your de vice. • Brief description of the problem and the steps yo u took to solve i t .
P-335 Series User’s Guide 7 Customer Suppo rt UNITED KINGDOM support@zyxel.co.uk +44 (0) 1344 303044 08707 555779 (UK only) www .zyxel.co.uk ZyXEL C ommunication s UK Ltd.,1 1 The Courtyard, Eastern Road, Bracknell, Berkshire, RG12 2XB, United Kingdom (UK) sales@zyxel.
P-335 Series User’s Guide Table of Contents 8 T able of Content s Copyright .................................................. ................................................................ 2 Federal Communications Commissi on (FCC) Interference St atement .
P-335 Series User’s Guide 9 Table of Contents 2.4.8 Summary: VPN Monitor .................... ............. ................ ............. ............... 58 Chapter 3 Connection Wizard ........................................................ ......
P-335 Series User’s Guide Table of Contents 10 5.3 Configuring Wireless LAN on the Presti ge .......... ............. ............. ................ ..... 83 5.4 General Wireless LAN Screen ........... ............. ................ ................
P-335 Series User’s Guide 11 Table of Contents Chapter 7 LAN ................................................. ..................................................... .................. 122 7.1 LAN Overview ........ ............ ............. ........
P-335 Series User’s Guide Table of Contents 12 9.7 T rigger Port Forwarding Screen .......... ................ ................ ............. ................ 144 Chapter 10 Firewall ........................................... ......................
P-335 Series User’s Guide 13 Table of Contents Chapter 13 VPN Screens ..................................................... .................................................. 164 13.1 VPN/IPSec Ov erview ....... ................. ................ ..
P-335 Series User’s Guide Table of Contents 14 Chapter 15 St atic Route Screens ......................................................................... .................. 202 15.1 S tatic Route Overview .......... ............. ............. .....
P-335 Series User’s Guide 15 Table of Contents 18.3 UPnP Screen ................ ................ ............. ................ ............. ................ ....... 229 18.4 Installing UPnP in Windows Example ............... ............. .......
P-335 Series User’s Guide Table of Contents 16 23.1.2 Entering Passw ord ......... ................ ............. ............. ................ ............. 260 23.1.3 Prestige SMT Menu Overview ................. ................ ............. ...
P-335 Series User’s Guide 17 Table of Contents 28.4 Remote Node Filter . ...... ............. ............. ................ ............. ............. ............. 290 28.4.1 T raffic Redirect Setup . ............. ................ ..............
P-335 Series User’s Guide Table of Contents 18 Chapter 34 Filter Configuration ............................................ .................................................. 332 34.1 Introduction to Filters ..... ............. ................ ....
P-335 Series User’s Guide 19 Table of Contents 37.2.1 Backup Config uration .... ............. ............. ................ ............. ................ 363 37.2.2 Using the FTP Command from th e Command Line ........... ................... 364 37.
P-335 Series User’s Guide Table of Contents 20 41.3 Problems with the WAN ............. ............. ............. ................ ............. ............. 391 41.4 Problems Accessing the Prestige ..... ...... ................ ............. ...
P-335 Series User’s Guide 21 Table of Contents.
P-335 Series User’s Guide List of Fi gures 22 List of Figures Figure 1 Prestige Print Server Applicat ion ................ ................ ............. ................ ............. 44 Figure 2 Secure Internet Acce ss via Cable, DSL or Wireless Modem .
P-335 Series User’s Guide 23 List of Figures Figure 37 Wireless ............ ............. ............. ... ............. ................ ............. ............. ........... .. 85 Figure 38 Wireless: No Security ... ............. .............
P-335 Series User’s Guide List of Fi gures 24 Figure 80 Schedule ............... ................ ............. ................. ............ ................. ............ ...... .1 5 5 Figure 81 Encryption and Decryption .............. ..........
P-335 Series User’s Guide 25 List of Figures Figure 123 SNMP Management Model .............. .......... ............. ................ ............. ............. 223 Figure 124 SNMP Remote Management ........... .......... ................ ........
P-335 Series User’s Guide List of Fi gures 26 Figure 166 Menu 4 Applying NA T for Internet Access . ................ ............. ................ .......... 297 Figure 167 Menu 1 1.3 Applying NA T to the Re mote Node . ................ ...........
P-335 Series User’s Guide 27 List of Figures Figure 209 SNMP Management Model .............. .......... ............. ................ ............. ............. 346 Figure 210 Menu 22 SNMP Configuration ......... ....... ............. ............
P-335 Series User’s Guide List of Fi gures 28 Figure 252 Example Message Ex change betw een Computer and an ANT ................. ....... 410 Figure 253 Network Print Server Setup Wizard . ................. ................ ............. ...........
P-335 Series User’s Guide 29 List of Figures Figure 295 Windows XP: Local Area Connection Properties . ............. ................ ............. ... 449 Figure 296 Windows XP: Advanced TCP/ IP Sett ings .. ................ ............. .........
P-335 Series User’s Guide List of Tables 30 List of T ables T able 1 Front Panel LEDs ........... ................ ............. ................ ................ ............. ............. 46 T able 2 S tatus Screen Icon Key .. ................ ..
P-335 Series User’s Guide 31 List of Tables T able 37 OTIST ........... ................ ............. ................ ............. ................ ............. ............. ... 99 T able 38 MAC Address Filter ......................... ........
P-335 Series User’s Guide List of Tables 32 T able 80 Virus Protection ............... ............. ................ ................ ............. ................ .......... 1 97 T able 81 Parental Controls ............................. .........
P-335 Series User’s Guide 33 List of Tables T able 123 Applying NA T in Menus 4 & 1 1.3 .......... ................ ............. ................ ................ 298 T able 124 SUA Address Mapping Rules .................. ................ ....
P-335 Series User’s Guide List of Tables 34 T able 166 System Error logs .......... ............. ................ ............. ................ ................ .......... 442 T able 167 System Maintenance Logs ............ ................ ......
P-335 Series User’s Guide 35 List of Tables.
P-335 Series User’s Guide Preface 36 Preface Congratulations on your pu rchase of the P-335, Firewall Router with Print Server or the P-335WT , 802.1 1g Wireless Firewall Router w ith Print Server . This manual is designed to guide you through the configurati on of yo ur Prestige for its various applications.
P-335 Series User’s Guide 37 Pref ace User Guide Feedback Help us help you! E-mail all User Guide-related comments, questions or suggestions for improvement to techwriters@zyxel.com.tw or send regular mail to The T echnical W riting T eam, ZyXEL Communications Corp.
P-335 Series User’s Guide Chapter 1 Getting to K now Your Prestig e 38 C HAPTER 1 Getting to Know Y our Prestige This chapter introduces the main featur es and applications of the Prestige. 1.1 Prestige Overview The Prestige is the ideal secure firewall router for all data passing between the Internet and LAN’ s or WLAN’ s (P-335WT).
P-335 Series User’s Guide 39 Chapter 1 G etting to Know Your Pres tige 10/100 Mbp s Auto-negotiating Ethe rnet/Fast Ethernet Interface(s) This auto-negotiation feature allows the Prestige to detect the speed of incoming transmissions and adjust appropriately without manual intervention.
P-335 Series User’s Guide Chapter 1 Getting to K now Your Prestig e 40 IPSec VPN Cap ability Establish a V irtual Private Network (VPN) to connec t with business partne rs and branch offices using data encryption an d the Internet to provide secu re communications without the expense of leased site-to-site lines.
P-335 Series User’s Guide 41 Chapter 1 G etting to Know Your Pres tige PPTP Encapsulation Point-to-Point T unneling Protocol (PP TP) is a ne twork protocol that enables secure transfer of data from a remote client to a private server , creating a V irtual Private Network (VPN) using a TCP/IP-based network.
P-335 Series User’s Guide Chapter 1 Getting to K now Your Prestig e 42 Port Forwarding Use this feature to forward incoming service re quests to a server on your local ne twork. Y ou may enter a single port number or a range of port numbers to be forwarded, and the lo cal IP address of the desired server .
P-335 Series User’s Guide 43 Chapter 1 G etting to Kn ow Your Pres tige 1.2.3 Wireless Features (P-335WT) Wireless LAN The Prestige supports the IEEE 802.1 1g standard , which is fully compat ible with the IEEE 802.1 1b standard, meaning that you can have both IEEE 802.
P-335 Series User’s Guide Chapter 1 Getting to K now Your Prestig e 44 G-Plus G-plus is an enhancement to the IEEE 802. 1 1g wireless standard . It increases wireless transmission speeds by allowing larger frames to be sent.
P-335 Series User’s Guide 45 Chapter 1 G etting to Kn ow Your Pres tige Figure 2 Secure Internet Access via Cable, DSL or Wireless Modem 1.3.3 VPN Application Prestige VPN is an ideal cost-effective way to connect branch offices and business partners over the Internet without the need (and expense) for leased lines between sites.
P-335 Series User’s Guide Chapter 1 Getting to K now Your Prestig e 46 Figure 4 Internet Access Application Exa mple 1.4 Front Panel LEDs Figure 5 P-335 Front Panel Figure 6 P-335WT Front Panel The following table describes the LEDs.
P-335 Series User’s Guide 47 Chapter 1 G etting to Know Your Pres tige LAN 1-4 Green On The Prestige has a successful 10Mb Ethernet connection. Blinking The Prestige is sending/receiving data. Amber On The Prestige has a successful 100Mb Ethernet connection.
P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configur ator 48 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access the Prestige web config urator and provides an overview of its screens.
P-335 Series User’s Guide 49 Chapter 2 Introducing the Web Configurator Figure 7 Change Password Screen Note: The management session automatically time s out when the time period set in the Administrator Inactivity T imer field expi res (default five minutes).
P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configurator 50 Figure 8 Web Configur ator S tatus Scre en The following table describ es the icons shown in the St a t u s sc reen. Table 2 Status Screen Icon Key ICON DESCRIPTION Select a language from the drop-down list box to have the the web configurator display in that language.
P-335 Series User’s Guide 51 Chapter 2 Introducing the Web Configurator The following table describes the labels shown in the St a t u s screen. Table 3 Web Configurator Status Screen LABEL DESCRIPTION Device Information System Name This is the System Name you enter in the Maintenance , System , General screen.
P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configur ator 52 2.4.1 Navigation Panel After you enter the password, use the sub-menus on the navigation panel to configure Prestige features. The navigation The following table describes the sub-menus.
P-335 Series User’s Guide 53 Chapter 2 Introducing the Web Configurator DHCP Server General Use this screen to enable the Prestige’s DHCP server and to have DNS servers assigned by the DHCP server . S tatic DHCP Use this screen to assign IP addresses on the LAN to specific individual computers based on their MAC ad dresses.
P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configurator 54 2.4.2 Summary: Any IP T able Click the Any IP T able (Details...) hyperlink in the St a t u s screen.
P-335 Series User’s Guide 55 Chapter 2 Introducing the Web Configurator 2.4.3 Summary: DHCP T able DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at star t-up from a server .
P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configurator 56 Figure 1 1 Summary: Parental Control S tatistics The following table describes the labels in this screen. Table 7 Summary: Parental Control Statistics LABEL DESCRIPTION Category All Parental Control categories are displayed as shown.
P-335 Series User’s Guide 57 Chapter 2 Introducing the Web Configurator The following table describes the labels in this screen. Table 8 Summary: Wireless Association List LABEL DESCRIPTION # This is the index number of an associated wireless station.
P-335 Series User’s Guide Chapter 2 Introdu cing the Web Configurator 58 The following table describes the labels in this screen. Table 9 Summary: Packet Statistics LABEL DESCRIPTION Port This is the WA N , LAN or WLAN port.
P-335 Series User’s Guide 59 Chapter 2 Introducing the Web Configurator IPSec Algorithm This field displays the security protocol s used for an SA. Both AH and ESP increase Prestige processing requirement s and communications late ncy (delay). Poll Interval(s) Enter the time interval for refres hing statistics in this field.
P-335 Series User’s Guide Chapter 3 Connection Wizard 60 C HAPTER 3 Connection W izard This chapter provides informa tion o n the W izard setup screens in the web configurato r . 3.1 Wizard Setup The web confi gurator ’ s W izard setup helps you co nfigure your device to access the Internet.
P-335 Series User’s Guide 61 Chapter 3 Connection Wizard Figure 17 Select a Languag e 6 Read the on-screen in formation and click Next . Figure 18 Welcome to the Con nection Wizard 3.2 Connection Wizard: System Information System Information contains administrative and system-related information.
P-335 Series User’s Guide Chapter 3 Connection Wizard 62 Figure 19 Connection Wizard: System Information The following table describes the labels in this screen. Table 11 Connection Wizard: System Infor mation LABEL DESCRIPTION System Name System Name is a unique name to identify the Prestige in an Ethe rnet network.
P-335 Series User’s Guide 63 Chapter 3 Connection Wizard Figure 20 Connection Wizard: Wire less LAN The following table describes the labels in this screen. Table 12 Connection Wiza rd: Wireless LAN LABEL DESCRIPTION Name(SSID) Enter a descriptive name (up to 32 printable 7-bit ASCII character s) for the wireless LAN.
P-335 Series User’s Guide Chapter 3 Connection Wizard 64 Figure 21 Basic(WEP) Security The following table describes the labels in this screen. Table 13 Basi c(WEP) Se curity LABEL DESCRIPTION Passphrase T ype a Passphrase (up to 32 printable characters) and click Generate .
P-335 Series User’s Guide 65 Chapter 3 Connection Wizard 3.3.2 Extend(WP A-PSK) and (WP A2-PSK) Security Choose Extend(WP A-PSK) or Extend(WP A2-PSK) security in the W ireless LAN setup screen to set up a Pr e-Shared Key . Figure 22 Extend(WP A2-PSK) and (WP A2-PSK) Security The following table describes the labels in this screen.
P-335 Series User’s Guide Chapter 3 Connection Wizard 66 Figure 23 OTIST The following table describes the labels in this screen. Table 15 OTIST LABEL DESCRIPTION Do you want to enable OTIST? Select the Ye s radio button and click Next to proce ed with the setup wi zard and enable OTIST only when you click Finish in the final wizard screen.
P-335 Series User’s Guide 67 Chapter 3 Connection Wizard Figure 24 Connection Wizard: W AN Connection T ype. The following table describes the labels in this screen, Table 16 Connection Wiza rd: W AN Connection T ype CONNECTION T YPE DESCRIPTION Ethernet Select the Ethernet option when the WAN port is used as a regular Ethernet.
P-335 Series User’s Guide Chapter 3 Connection Wizard 68 Operationally , PPPoE saves significant effort for bo th the subscriber and the ISP/carrier , as it requires no specifi c configuration of the broadb and modem at the subscriber ’ s site.
P-335 Series User’s Guide 69 Chapter 3 Connection Wizard Figure 27 PPTP Connection T ype The following table describes the fields in this screen Table 18 PPTP Connection T ype LABEL DESCRIPTION ISP Parameters fo r Internet Access User Name T ype the user name given to you by your ISP .
P-335 Series User’s Guide Chapter 3 Connection Wizard 70 Figure 28 Y our IP Addres s The following table describes the labels in this screen Table 19 Your IP Addr ess LABEL DESCRIPTION Get automatically from ISP Select this option If your ISP did not assign you a fixed IP address.
P-335 Series User’s Guide 71 Chapter 3 Connection Wizar d 3.4.6 IP Address and Subnet Mask Similar to the way houses on a street share a common street name, so too do computers on a LAN share one common network number . Where you obtain your netwo rk number depends on your particular situation.
P-335 Series User’s Guide Chapter 3 Connection Wizard 72 Figure 29 IP and DNS Server Address Assignment The following table describes the labels in this screen Table 21 IP and DNS Server Address Ass.
P-335 Series User’s Guide 73 Chapter 3 Connection Wizard Y ou can configure the W AN port's MAC address by either using the factory default or cloning the MAC address from a computer on your LAN. Onc e it is successfully configured, the address will be copied to the "r om" file (ZyNOS configuration f ile).
P-335 Series User’s Guide Chapter 3 Connection Wizard 74 Figure 31 Connection Wizard Complete W ell done! Y ou have successfully set up your Pr estige to operate on your network and access the Internet.
P-335 Series User’s Guide 75 Chapter 3 Connection Wizar d.
P-335 Series User’s Guide Chapter 4 Bandwidth Management Wizard 76 C HAPTER 4 Bandwid th Management W izard This chapter shows you h ow to configure basic bandwidth management usin g the wizard screens.
P-335 Series User’s Guide 77 Chapter 4 Bandwidth Man agement Wizard 4.3 Bandwid th Management Wizard: General Click Next in the We l c o m e to the Bandwidth Manage ment Wizard screen to display the first wizard screen. Figure 33 Bandwidt h Management Wizard: General Information The following fields describe the label in this screen.
P-335 Series User’s Guide Chapter 4 Bandwidth Management Wizard 78 4.4 Bandwid th Manage ment Wizard: Services Use the second wizard screen to select the se rvices that you want to apply bandwidth management. Figure 34 Bandwidt h Management Wizard: Services The following table describes the labels in this screen.
P-335 Series User’s Guide 79 Chapter 4 Bandwidth Man agement Wizard Figure 35 Bandwidt h Management Wizard : Priority The following table describes the fields in this screen. Table 27 Bandwid th Management Wizard : Priority LABELS DESCRIPTION Service These fields display the services selected in the previous screen.
P-335 Series User’s Guide Chapter 4 Bandwidth Management Wizard 80.
P-335 Series User’s Guide 81 Chapter 4 Bandwidth Man agement Wizard.
P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 82 C HAPTER 5 Wireless LAN (P-335WT) This chapter discusses how to configure W ireless LAN.
P-335 Series User’s Guide 83 Chapter 5 Wireles s LAN (P-335WT) 5.2.3 Restricted Access The MAC Filter screen allows you to configure the AP to give exclusive access to devices ( Allow ) or exclude them from accessing the AP ( Deny ).
P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 84 4 If you have OTIST -enabled clients, configure OTIST in the OTIST screen. OTIST transfers device SSID and WEP or WP A-PSK key settings (if enabled) to wireless clients.
P-335 Series User’s Guide 85 Chapter 5 Wireles s LAN (P-335WT) Figure 37 Wirel ess The following table describes the general wireless LAN labels in this screen. Table 29 Wirel ess LABEL DESCRIPTION Enable Wireless LAN Click the check box to activate wireless LAN.
P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 86 Note: If you do not enable any wireless security on your Prestige, your network is accessible to any wireless network ing device that is within range . Figure 38 Wireless: No Security The following table describes the labels in this screen.
P-335 Series User’s Guide 87 Chapter 5 Wireles s LAN (P-335WT) Figure 39 Wireless: S tatic WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 31 Wireless: Static WEP Encryption LABEL DESCRIPTION Passphrase Enter a Passphrase (up to 32 printable characters) and clicking Generate .
P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 88 5.4.4 Introduction to WP A and WP A2 W i-Fi Protected Access (WP A ) is a subset of th e IEEE 802.1 1i standard. WP A is preferred to WEP as WP A has user authentication and improv ed data encryption.
P-335 Series User’s Guide 89 Chapter 5 Wireles s LAN (P-335WT) Figure 41 Wireless: WP A-PSK The following table describes the labels in this screen. Table 32 Wireless: WPA-PSK LABEL DESCRIPTION Pre-Shared Key The encryption mechanisms used for WP A and WP A-PSK are the same.
P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 90 The Funk Software's Odyssey client is bundle d free (at the time of wr iting) with the Prestige client adaptor(s). This adds WP A capability to W indows XP's built-in "Zero Configuration" wireless client.
P-335 Series User’s Guide 91 Chapter 5 Wireles s LAN (P-335WT) Figure 43 Wirel ess: W P A The following table describes the labels in this screen. Table 33 Wirel ess: WPA LABEL DESCRIPTION ReAuthentication T imer (in seconds) S pecify how often wireless stations have to reenter usernames and passwords in order to stay connected.
P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 92 5.4.10 802.1x Overview Y ou need the following for IEEE 802.1x authentication. • A computer with an IEEE 802.1 1 a/b/g wi reless LAN adapter and equipped with a web browser (with JavaScript enabled) and/or T elnet.
P-335 Series User’s Guide 93 Chapter 5 Wireles s LAN (P-335WT) Figure 44 Wireless: 802.1x and Dynamic WE P The following table describes the labels in this screen.
P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 94 5.4.12 802.1x and St atic WEP Key Exch ange Screen In order to configure and enable 8 02.1x and S tatic WEP Key Exchange; click the Wire l e s s LAN link under Network to display the W ireless screen.
P-335 Series User’s Guide 95 Chapter 5 Wireles s LAN (P-335WT) Figure 45 Wireless: 802.1x and S tatic WEP The following table describes the labels in this screen. Table 35 Wireless: 80 2.1x and St atic WEP LABEL DESCRIPTION Passphrase Enter a Passphrase (up to 32 printable characters) and clicking Generate .
P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 96 Key 1 to Key 4 The WEP keys are used to encrypt data. Both the Prestige and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP , then enter any 5 ASCII characters or 10 hexadecimal characters ("0-9", "A-F").
P-335 Series User’s Guide 97 Chapter 5 Wireles s LAN (P-335WT) 5.4.13 802.1x Screen In order to configure and enable 802.1x; click the Wireless LAN link under Network to display the Wire l es s screen. Select 802.1x + No WEP from the Security list. Figure 46 Wireless: 80 2.
P-335 Series User’s Guide Chapter 5 Wireless LAN (P-335WT) 98 5.5 OTIST OTIST (One-T ouch Intelligent Security T echnology ) allows your Prestige to set the wireless client to use the same wireless settings as the Prestige. Note: The wireless client must support OTIST and have OT IST enabled.
P-335 Series User’s Guide 99 Chapter 5 Wireles s LAN (P-335WT) Figure 47 OTIST The following table describes the labels in this screen. Table 37 OTIST LABEL DESCRIPTION Setup Key T ype an OTIST Setup Key of exactly eight ASCII characters in leng th.
P-335 Series User’s Guide Chapter 5 Wireless LAN ( P-335WT) 100 Figure 48 OTIST S tart Note: The process takes thre e minutes. During this time the Prestige assigns its security settings to OTIST -enabled wireless clients within range that have selected to associate with this Prestige.
P-335 Series User’s Guide 101 Chapter 5 Wireless LAN ( P-335WT) Figure 50 MAC Addres s Filter The following table describes the labels in this menu. Table 38 MAC Address F ilter LABEL DESCRIPTION Active Select Ye s from the drop down list box to enable MAC address filtering.
P-335 Series User’s Guide Chapter 5 Wireless LAN ( P-335WT) 102 Figure 51 Advanced The following table describes the labels in this screen. Table 39 Advanced LABEL DESCRIPTION Roaming Configuration Enable Roaming Select the check box to enable ro aming on the Prestige if you have two or more Prestiges on the same subnet.
P-335 Series User’s Guide 103 Chapter 5 Wireless LAN ( P-335WT) 5.8 WMM QoS WMM (W i-Fi MultiMedia) QoS (Qua lity of Service) ensures quality of ser vice in wireless networks for multimed ia applications. WMM allows you to prioritize wireless traf fic according to the deliver y requirements of the individual and applications .
P-335 Series User’s Guide Chapter 5 Wireless LAN ( P-335WT) 104 5.8.3 Services The commonly used services and port numbers ar e shown in the following table. Please refer to RFC 1700 for further information about port numbers. Next to the name of the service, two fields appear in brackets.
P-335 Series User’s Guide 105 Chapter 5 Wireless LAN ( P-335WT) 5.9 QoS Screen The QoS screen by default allows you to au tomatically give a service a priority level according to the T o S value in the IP header of the packets it sends.
P-335 Series User’s Guide Chapter 5 Wireless LAN ( P-335WT) 106 5.9.1 T oS (T ype of Service) and WMM QoS T oS defines the DS(Differentiated Service) fiel d in the IP packet header . The T oS value of outgoing packe ts is between 0 and 255. 0 is the lowest priority .
P-335 Series User’s Guide 107 Chapter 5 Wireless LAN ( P-335WT) 5.10 Application Priority Configuration Screen T o edit a WMM QoS application entry , click the edit icon under Modify . The following screen displays. Figure 53 Application Priority Configuration The following table describes the fields in this screen.
P-335 Series User’s Guide Chapter 5 108 Service The following is a description of the applications you can p rioritize with WMM QoS. Select a service from the drop-down list b ox. • FTP File Transfer Program enables fast transf er of files, including large files tha t may not be possible by e-mail.
P-335 Series User’s Guide 109 Chapter 5.
P-335 Series User’s Guide Chapter 6 WAN 110 C HAPTER 6 WA N This chapter describes how to configure W AN settings. 6.1 W AN Overview See the Connection W izard chapter for more information on the fields in the W AN screens. 6.2 TCP/IP Priority (Metric) The metric represents the "cost of transmissi on".
P-335 Series User’s Guide 111 Chapter 6 WA N 6.4 W AN ISP Screen T o change your Prestige’ s W AN ISP settings, clic k WA N , then the WA N I S P tab. The screen differs by the encapsulation. 6.4.1 Ethernet Encap sulation The screen shown next is for Ethernet encapsulation.
P-335 Series User’s Guide Chapter 6 WAN 112 6.4.2 PPPoE Encap sulation The Prestige supports PPPoE (Point-to-Point Protocol over Ethernet). PPPoE is an IETF Draft standard (RFC 2516) specifying how a personal computer (PC) interacts with a broadband modem (DSL, cable, wireless, etc.
P-335 Series User’s Guide 113 Chapter 6 WA N Figure 55 PPPoE Encapsulation The following table describes the labels in this screen. Table 45 PPPoE Encapsulation LABEL DESCRIPTION ISP Parameters fo r Internet Access Encapsulation The PPP over Ethernet choice is for a dial-up connection using PPPoE.
P-335 Series User’s Guide Chapter 6 WAN 114 6.4.3 PPTP Encap sulation Point-to-Point T unneling Protocol (PP TP) is a ne twork protocol that enables secure transfer of data from a remote client to a private server , creating a V irtual Private Network (VPN) using TCP/IP-based networks.
P-335 Series User’s Guide 115 Chapter 6 WA N Figure 56 PPTP Encapsulation The following table describes the labels in this screen. Table 46 PPTP Encapsulation LABEL DESCRIPTION ISP Parameters for In.
P-335 Series User’s Guide Chapter 6 WAN 116 6.5 Advanced W A N Screen T o change your Prestige’ s ad vanced W AN settings, click the WA N link under Network , and the Advan ced tab. The screen appears as shown. PPTP Configuration My IP Address T ype the (static) IP a ddress assigned to you by your ISP .
P-335 Series User’s Guide 117 Chapter 6 WA N Figure 57 Advanced The following table describes the labels in this screen. Table 47 Advanced LABEL DESCRIPTION DNS Servers First DNS Server Second DNS Server Third DNS Server Select From ISP if your ISP dyn amically assigns DNS server information (and the Prestige's WAN IP address).
P-335 Series User’s Guide Chapter 6 WAN 118 6.6 T raffic Redirect T raffic redirect forwards W AN traffic to a ba ckup gateway when the Pr estige cannot connect to the Internet through its norm al gateway . Connect the backup gateway on the W AN so that the Prestige still provid es firewall protection.
P-335 Series User’s Guide 119 Chapter 6 WA N Figure 59 T raffic Redirect LAN Setup 6.7 T raffic Redirect Screen T o change your Prestige’ s T raf fic Redirect settings, click the W AN link under Network and the T raffic Redirect tab. The screen appears a s shown.
P-335 Series User’s Guide Chapter 6 WAN 120 Check W AN IP Address Configuration of this field is optional. If you do not enter an IP address here, the Prestige will use the default gateway IP a ddress. Configure this field to test your Prestige's W AN accessibility .
P-335 Series User’s Guide 121 Chapter 6 WA N.
P-335 Series User’s Guide Chapter 7 LAN 122 C HAPTER 7 LAN This chapter describes how to configure LAN settings. 7.1 LAN Overview Local Area Network (LAN) is a shared communic ation system to which many computers are attached.
P-335 Series User’s Guide 123 Chapter 7 LAN 7.2.2 IP Address and Subnet Mask Refer to the IP Addr ess and Subnet Mask section in the Wizard Setup chapter for this information. 7.2.3 RIP Setup RIP (Routing Information Protocol, RFC 1058 and RFC 1389) allows a router to exchange routing information with other routers.
P-335 Series User’s Guide Chapter 7 LAN 124 The Prestige support s both IGMP version 1 ( IGMP-v1 ) and IGMP version 2 ( IGMP-v2 ). At start up, the Prestige queries all directly conn ected networks to gather group membership. After that, the Prestige periodically updates this information.
P-335 Series User’s Guide 125 Chapter 7 LAN 7.3.1 How Any IP Works Address Resolution Protocol (ARP) is a prot ocol for mapping an Internet Protocol address (IP address) to a physical machine address, al so known as a Media Access Control or MAC address, on the local area network.
P-335 Series User’s Guide Chapter 7 LAN 126 Figure 62 LAN IP The following table describes the labels in this screen. Table 49 LAN IP LABEL DESCRIPTION LAN TCP/IP IP Address T ype the IP address of your Prestige in dotted decimal notation 192.168.1.
P-335 Series User’s Guide 127 Chapter 7 LAN Figure 63 IP Alias The following table describes the labels in this screen. Table 50 IP Alias LABEL DESCRIPTION IP Alias 1,2 Select the check box to configure another LAN network fo r the Prestige. IP Address Enter the IP address of your Pres tige in do tted decimal notation.
P-335 Series User’s Guide Chapter 7 LAN 128 7.6 Advanced LAN Screen T o change your Prestige’ s advanced IP settings, click the LAN link under Network and the Advanced tab. The screen appears as shown. Figure 64 Advanced The following table describes the labels in this screen.
P-335 Series User’s Guide 129 Chapter 7 LAN Active Select this option to acti vate the Any-IP feature. This allows a comp uter to access the Internet without chan ging the network settings (such as IP address and subnet mask) of the computer, even when the IP addresses of the computer and the Prestige are not in the same subnet.
P-335 Series User’s Guide Chapter 8 DHCP Server 130 C HAPTER 8 DHCP Server 8.1 DHCP DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at star t-up from a server . Y ou can configure the Pre stige as a DHCP server or disable it.
P-335 Series User’s Guide 131 Chapter 8 DHCP Server 8.3 St atic DHCP Screen This table allows you to assign IP addresses on the LAN to specific individual computers based on their MAC addresses. Every Ethernet device has a unique MAC (Med ia Access Control) addre ss.
P-335 Series User’s Guide Chapter 8 DHCP Server 132 Figure 66 S tatic DHCP The following table describes the labels in this screen. Table 53 Static DHCP LABEL DESCRIPTION # This is the index number of the S tatic IP table entry (row). MAC Address T ype the MAC address (with colo ns) of a computer on your LAN.
P-335 Series User’s Guide 133 Chapter 8 DHCP Server Figure 67 Client List The following table describes the labels in this screen. Table 54 Client List LABEL DESCRIPTION # This is the index number of the host computer . IP Address This field displays the IP address relative to the # field liste d above.
P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 134 C HAPTER 9 Network Address T r anslation (NA T) This chapter discusses how to configure NA T on the Prestige. 9.1 NA T Overview NA T (Netw ork Address T rans lation - NA T , RFC 1631) is the translation of the IP address of a host in a packet.
P-335 Series User’s Guide 135 Chapter 9 Network Addr ess Translation (NAT) 9.1.2 What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W AN side.
P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 136 Figure 68 How NA T Works 9.1.4 NA T Application The following figure illustrates a possible NA T application, wher e three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct W AN networks.
P-335 Series User’s Guide 137 Chapter 9 Network Addr ess Translation (NAT) • One to One : In One-to-One mode, the Prestige maps one local IP address to one global IP address. • Many to One : In Many-to-One mode, the Prestige maps multiple local IP addresses to one global IP address.
P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 138 9.2.1 SUA (Single User Account) V ersus NA T SUA (Single User Account) is a ZyNOS implemen tation of a subset of NA T that supports two types of mapping, Many-to-One and Server .
P-335 Series User’s Guide 139 Chapter 9 Network Addr ess Translation (NAT) In addition to the servers for specified servic es, NA T supports a default server . A service request that does not have a server explicitly d esignated for it is forwarded to the default server .
P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 140 Figure 70 Multiple Servers Be hind NA T Example 9.4 General NA T Screen Click the NA T link under Network to open the Gene ral screen. Figure 71 General The following table describes the labels in this screen.
P-335 Series User’s Guide 141 Chapter 9 Network Addr ess Translation (NAT) 9.5 Port Forwarding Screen Ordering your rules is important because the Pr estige applies the rules in the order that you specify . When a rule matche s the current pack et, the Prestige takes the corresponding action and the remaining rules are ignored.
P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 142 9.5.1 Rule Setup Screen T o edit a port forwarding rule, click the edit icon under Modify . The following screen displays. Figure 73 Rule Setup The following table describes the labels in this screen.
P-335 Series User’s Guide 143 Chapter 9 Network Addr ess Translation (NAT) 9.6 T rigger Port Forwarding Some services use a dedicated range of ports on the client side and a dedica ted range of ports on the server side.
P-335 Series User’s Guide Chapter 9 Netwo rk Address Trans lation (NAT) 144 2 Port 7070 is a “trigger” port and causes the Pr estige to record Jane’ s computer IP address. The Prestige associates Jane 's computer IP ad dress with the "incoming" port range of 6970-7170.
P-335 Series User’s Guide 145 Chapter 9 Network Addr ess Translation (NAT) Figure 75 T rigger Port The following table describes the labels in this screen. Table 61 Trigger Port LABEL DESCRIPTION # This is the rule index number (read-on ly). Name T ype a unique name (up to 15 characters) for identification purposes.
P-335 Series User’s Guide Chapter 10 Firewall 146 C HAPTER 10 Firewall This chapter gives some bac kground information on firewalls and explains how to get started with the Prestige firewall.
P-335 Series User’s Guide 147 Chapter 10 Firewall The Prestige has one Ethernet W AN port and fo ur Ethernet LAN ports, which are used to physically separate the network into two areas .The W AN (W ide Area Network) port attaches to the broadband (cab le or DSL) modem to the Internet.
P-335 Series User’s Guide Chapter 10 Firewall 148 Figure 76 General The following table describes the labels in this screen. Table 62 General LABEL DESCRIPTION Enable Firewall Select this check box to activate the fi rewall. The Prestige performs access control and protects against Denial of Service (DoS) attacks when the fire wall is activated.
P-335 Series User’s Guide 149 Chapter 10 Firewall Figure 77 Services The following table describes the labels in this screen. Table 63 Servic es LABEL DESCRIPTION Enable Services Blocking Select this ch eck box to enabl e this feature. Available Service This is a list of pre-defined services (ports) you may prohibit your LAN computers from using.
P-335 Series User’s Guide Chapter 10 Firewall 150 T ime of Day to Block (24-Hour Format) Select the time of day you want service blocking to take effect.
P-335 Series User’s Guide 151 Chapter 10 Firewall.
P-335 Series User’s Guide Chapter 11 Content Filtering 152 C HAPTER 11 Content Filtering This chapter provides a brief overview of co ntent filtering using the embedded W ebGUI. 1 1.1 Introduction to Content Filtering Internet content filtering allows you to create and enforce Internet access policies tailored to their needs.
P-335 Series User’s Guide 153 Chapter 11 Content Filter ing Figure 79 Filter The following table describes the labels in this screen. Table 64 Filter LABEL DESCRIPTION T rusted IP Setup T o enable this feature, type an IP addre ss of any one of the computers in your network that you want to have as a trus ted computer .
P-335 Series User’s Guide Chapter 11 Content Filtering 154 1 1.5 Schedule Click the Content Filter link under Security and the Schedule tab. The following screen displays. Keyword List This list displays the keywords alread y added. Add Click Ad d after you have typed a keyword.
P-335 Series User’s Guide 155 Chapter 11 Content Filter ing Figure 80 Schedule The following table describes the labels in this screen. Table 65 Schedule LABEL DESCRIPTION Day to Block Select check boxes for the days that you want the Prestige to perform conte nt filtering.
P-335 Series User’s Guide Chapter 11 Content Filtering 156 1 1.6.2 Full Path URL Checking Full path URL checking has the Prestige check the c haracters that come be fore the last slash in the URL. For example, with th e URL www .zyxel.com.tw/news/ pressroom.
P-335 Series User’s Guide 157 Chapter 11 Content Filt ering.
P-335 Series User’s Guide Chapter 12 Introd uction to IPSec 158 C HAPTER 12 Introduction to IPSec This chapter introduces the basics of IPSec VPNs 12.1 VPN Overview A VPN (V irtual Private Network) provides sec ure communications between sites without the expense of leased site-to-site lines.
P-335 Series User’s Guide 159 Chapter 12 Introdu ction to IPSec Figure 81 Encryption and Decryption 12.1.3.2 Dat a Confidentiality The IPSec sender can encrypt packets befo re transmitting them across a network.
P-335 Series User’s Guide Chapter 12 Introd uction to IPSec 160 Figure 82 IPSec Architecture 12.2.1 IPSec Algorithms The ESP (Encapsulating Security Payload) Protocol (RFC 2406) and AH (Authentication Header) protocol (RFC 24 02) describe the packe t formats and the default standards for packet structure (including implemen tation algorit hms).
P-335 Series User’s Guide 161 Chapter 12 Introdu ction to IPSec Figure 83 T ransport and T unnel Mode IPSec Encapsulation 12.3.1 T ransport Mode Tr a n s p o r t mode is used to pro tect upper layer prot ocols and only af fects the data in the IP packet.
P-335 Series User’s Guide Chapter 12 Introd uction to IPSec 162 A NA T device in between the IPSec endpoints w ill rewrite either the source or destination address with one of it s own choosing.
P-335 Series User’s Guide 163 Chapter 12 Introdu ction to IPSec.
P-335 Series User’s Guide Chapter 13 VPN Screens 164 C HAPTER 13 VPN Screens This chapter introduces the VPN W eb Co nfigurator . See the Logs chapter for information on viewing logs and the Appendices for IPSec log descriptions.
P-335 Series User’s Guide 165 Chapter 13 VPN Screens . Table 67 AH and ESP ESP AH Encryption DES (default) Data Encryption S tandard (DES) is a widely used method of data encryption using a secret key . DES applies a 56 -bit key to each 64-bit block of data.
P-335 Series User’s Guide Chapter 13 VPN Screens 166 Y ou can also enter a remote secure gateway’ s domain name in the Secure Gateway Addr ess field if the remote secure gateway has a dyna mic W AN IP address and is using DDNS.
P-335 Series User’s Guide 167 Chapter 13 VPN Screens Figure 85 Summary The following table describes the labels in this screen. Table 68 Summary LABEL DESCRIPTION # The VPN po licy index number . Active This field displays whether the VPN policy is active or not.
P-335 Series User’s Guide Chapter 13 VPN Screens 168 13.6 Keep Alive When you initiate an IPSec tunnel with keep alive enabled, the Prestige automatically renegotiates the tunnel when the IPSec SA lif etime period expires ( the IPSec Algorithms section for more on the IPSec SA lifetime).
P-335 Series User’s Guide 169 Chapter 13 VPN Screens In order for IPSec router A (see the figure) to receive an initiating IPSec packet from IPSec router B, set the NA T router to forward UDP port 500 to IPSec router A.
P-335 Series User’s Guide Chapter 13 VPN Screens 170 Note: Regardless of the ID t ype and content configuration, t he Prestige does not allow you to save multiple active rules with overlapping local and remote IP addresses. W ith main mode (s ee Section Negotiation Mode ), the ID type and content are encrypted to provide identity protection.
P-335 Series User’s Guide 171 Chapter 13 VPN Screens The two Prestiges in this example can complete negotiation and establish a VPN tunnel Table 71 Matching ID Type and Cont en t Configuration Example PRESTIGE A PRESTIGE B Local ID type: E-mail Local ID type: IP Local ID content: tom@yourcompany .
P-335 Series User’s Guide Chapter 13 VPN Screens 172 Figure 89 Rule Setup The following table describes the labels in this screen. Table 72 Rule Setup LABEL DESCRIPTION Active Select this check box to ac tivate this VPN tunnel. This option determi nes whether a VPN rule is applied before a packet leaves the firewall.
P-335 Series User’s Guide 173 Chapter 13 VP N Screens DNS Server (for IPSec VPN) If there is a private DNS server that se rvices the VPN, type its IP address here. The Prestige assigns this addition al DNS server to the Prestige’s DHCP clients that have IP addresses in this IPSec rule's range of local addre sses.
P-335 Series User’s Guide Chapter 13 VPN Screens 174 Peer ID T ype Select IP to identify th e remote IPSec router by its IP address. Select DNS to identify the remote IPSec router by a domain name . Select E-mail to identify the remote IPSec router by an e-mail address.
P-335 Series User’s Guide 175 Chapter 13 VPN Screens 13.1 1 IKE Phases There are two phases to every IKE (Internet Key Excha nge) negotiation – phase 1 (Authentication) and ph ase 2 (Key Exchange). A phase 1 exchange establishes an IKE SA and the second one uses that SA to negotiate SAs for IPSe c.
P-335 Series User’s Guide Chapter 13 VPN Screens 176 • Choose whether to enable Perfect Forward Secrecy (PFS) using Dif fie-Hellman public- key cryptograp hy – see Section Perfect Forward Secrecy (PFS) . Select None (the default) to disable PFS.
P-335 Series User’s Guide 177 Chapter 13 VP N Screens This may be unnecessary for data that does not require such security , so PFS is disabled ( None ) by default in the Prestige.
P-335 Series User’s Guide Chapter 13 VPN Screens 178 Figure 91 Advanced Rule Setup The following table describes the labels in this screen. Table 73 Advanced Rule Setup LABEL DESCRIPTION Active Select this check box to activate this VPN policy . Keep Alive Select this check box to turn on the Keep Alive feature fo r this SA.
P-335 Series User’s Guide 179 Chapter 13 VP N Screens NA T Traversal Select this check box to enabl e NA T traversal. NA T traversal al lows you to set up a VPN connection when there are NA T routers between the two IPSec routers. The remote IPSec router must also have NA T traversal enabled.
P-335 Series User’s Guide Chapter 13 VPN Screens 180 Remote Port S tart 0 is the default and signifies an y po rt. T ype a port number from 0 to 65535. Some of the most common IP ports ar e: 21, FTP; 53, DNS; 23, T elnet; 80, HTTP; 25, SMTP; 1 10, POP3 Remote Port End Enter a port number in this field to define a po rt range.
P-335 Series User’s Guide 181 Chapter 13 VP N Screens Encryption Algorithm Select DES or 3DES from the drop-down list box . The Prestige's encryption algorithm shou ld be identical to the secure remote gateway .
P-335 Series User’s Guide Chapter 13 VPN Screens 182 13.13 Manual Key Manual key managemen t is useful if you have pro blems with IKE key managemen t. 13.13.1 Security Pa rameter Index (SPI) An SPI is used to distinguish dif ferent SAs te rminating at the same de stination and using the same IPSec protocol.
P-335 Series User’s Guide 183 Chapter 13 VPN Screens Figure 92 Rule Setup with Manual Key The following table describes the labels in this screen. Table 74 Rule Setup with Manual Key LABEL DESCRIPTION Active Select this check box to activate this VPN policy .
P-335 Series User’s Guide Chapter 13 VPN Screens 184 Remote Addr ess S tart Remote IP addresses must be static and correspond to the remote IPSec router's configured l ocal IP addresse s. The remote address fields do no t apply when the Secure Gateway IP Address field is co nfigured to 0.
P-335 Series User’s Guide 185 Chapter 13 VP N Screens 13.15 SA Monitor Screen In the web configurator , click the VPN link under Security and the SA Monitor tab. Use this screen to display and manage active VPN connections. A Security (SA) is the group of security settings related to a specific VPN tunnel.
P-335 Series User’s Guide Chapter 13 VPN Screens 186 Figure 93 SA Monitor The following table describes the labels in this screen. Table 75 SA Monitor LABEL DESCRIPTION # This is the security index number . Name This field displays the identifi cation name for this VPN policy .
P-335 Series User’s Guide 187 Chapter 13 VPN Screens Figure 94 Global Setting The following table describes the labels in this screen. Table 76 Global Setting LABEL DESCRIPTION Windows Networking (NetBIOS over TCP/IP) NetBIOS (Network Basic Input/Output System) are TCP or UDP broadcast packets that enable a computer to find other computers.
P-335 Series User’s Guide Chapter 13 VPN Screens 188 Having everyone use the same pre-shared key ma y create a vulnerability . If the pre-shared key is compromised, all of the VPN connections using that VPN rule are at risk.
P-335 Series User’s Guide 189 Chapter 13 VPN Screens See the following graphic for an example where three telecommut ers each use a different VPN rule to initiate a VPN connection to a Prestig e l ocated at headquarters.
P-335 Series User’s Guide Chapter 14 Trend Micro Security Serv ices 190 C HAPTER 14 T rend Micro Security Services This chapter contains informa tion about configuring T rend Micr o Security Services (TMSS). 14.1 T rend Micro Security Services Overview TMSS helps protect computers on a network th at access the Internet through the Prestige.
P-335 Series User’s Guide 191 Chapter 14 Trend Micro Security Se rvices Figure 98 Download Active X to View TMSS Web Page 2 In the TMSS web page, click Service Summary . Figure 99 TMSS Web Page (Dashboard) 3 Click Activate My Services to begin a 3-step process to activate TMSS.
P-335 Series User’s Guide Chapter 14 Trend Micro Security Serv ices 192 Figure 101 TMSS 3 S teps 5 Fill in the registration form and submit it. Figure 102 TMSS Registration Form 6 After you submit the registration form, you w ill receive an e-mail w ith instructions for validating your e-mail address.
P-335 Series User’s Guide 193 Chapter 14 Trend Micro Security Se rvices Figure 103 Example TMSS Activated Service Summary Screen Yo u n e e d a Parental Contr ol license to activate configure Parental Contr ol categories on the Prestige (see Figure 108 on page 198 ).
P-335 Series User’s Guide Chapter 14 Trend Micro Security Serv ices 194 2 Use the V irus Protection screen to configur e if and how often u p dates are checked and to display the status of computers under TMSS monitoring.
P-335 Series User’s Guide 195 Chapter 14 Trend Micro Se curity Services 14.3 Exception List Screen Click the TMSS link under Security and the Exception List tab. Use the Exception List to specify which computers should not to be restrict ed by Parental Controls.
P-335 Series User’s Guide Chapter 14 Trend Micro Security Serv ices 196 Figure 106 Exception List The following table describes the labels in this screen.
P-335 Series User’s Guide 197 Chapter 14 Trend Micro Security Se rvices 14.4 V irus Protection Screen Select the V irus Protection tab in the TMSS main screen ( Figure 99 on page 191 ) to display the following screen. The anti-virus software is part of the TIS packag e (see the footnote on page 193 ).
P-335 Series User’s Guide Chapter 14 Trend Micro Security Serv ices 198 14.5 Parent al Controls Screen Select the Parent al Controls tab from the TMSS main screen. The following screen displays. Figure 108 Parent al Controls Scan Engine This field displays the current TMSS anti-virus scan engine version number of a TMSS client.
P-335 Series User’s Guide 199 Chapter 14 Trend Micro Se curity Services The following table describes the labels in this screen. Table 81 Parental Controls LABEL DESCRIPTION Restrict Web Features Select the box(es) to restrict a feature.
P-335 Series User’s Guide Chapter 14 T rend Micro Security Serv ices 200 Alcohol/T obacco Selecting this category excludes pages that pro mote or offer the sale alcohol/tobacco products, or provide the means to create them. It also includes pages that glorify , tout, or otherwise encourage the consumption of alcohol/tobacco.
P-335 Series User’s Guide 201 Chapter 14 Trend Micro Se curity Services.
P-335 Series User’s Guide Chapter 15 Static Route Screens 202 C HAPTER 15 S t atic Route Screens This chapter shows you how to config ure static routes for your Prestige. 15.1 S tatic Route Overview Each remote node specifies only the network to which the gateway is di rectly connected, and the Prestige has no knowledge of the networks b eyond.
P-335 Series User’s Guide 203 Chapter 15 Static Route Screens Figure 1 10 IP S tatic Route The following table describes the labels in this screen. Table 82 IP Static Route LABEL DESCRIPTION # Number of an individual static route. Name Name that describes or identifies this route.
P-335 Series User’s Guide Chapter 15 Static Route Screens 204 Figure 1 1 1 S tatic Route Setup The following table describes the labels in this screen. Table 83 Static Route Setup LABEL DESCRIPTION Route Name Enter the name of the IP static route. Leave this field blank to delete this static route.
P-335 Series User’s Guide 205 Chapter 15 Static Route Screens.
P-335 Series User’s Guide Chapter 16 Bandwidth Management 206 C HAPTER 16 Bandwid th Management This chapter contains information about configuri ng bandwidth management, editing rules and viewing the Prestige’ s bandwidth ma nagement logs .
P-335 Series User’s Guide 207 Chapter 16 Bandwidth Manag ement Figure 1 12 Application-based Bandwidth Manageme n t Example 16.1.2 Subnet-based Band wid th Management Example The following example uses ba ndwidth rules b ased solely on LAN subn ets.
P-335 Series User’s Guide Chapter 16 Bandwidth Managemen t 208 Figure 1 14 Application and Subnet-based Bandwid th Management Example Table 84 Application and Subnet- based Bandwidth Management Exam.
P-335 Series User’s Guide 209 Chapter 16 Bandwidth Manag ement Figure 1 15 Bandwidth Usage Example The following figure shows the bandwidth usage with the maximize b andwidth usage opti on enabled. The Prestige div ides up the unbud geted 64 Kbps among the ru les that require more bandwidth.
P-335 Series User’s Guide Chapter 16 Bandwidth Managemen t 210 Figure 1 16 Maximize Bandwid th Usage Example 16.1.5 Bandwid th Management Priorities The following table describes the priorities that you can apply to traf fic that the Prestige forwards out through an interface.
P-335 Series User’s Guide 211 Chapter 16 Bandwidth Ma nagement V oIP (SIP ) Sending voice signals over the Internet is ca lled V oice over IP or V oIP . Session Initiated Protocol (SIP) is an internationally recogni zed standa rd for implem enting V oIP .
P-335 Series User’s Guide Chapter 16 Bandwidth Management 212 IPSEC_TUNNEL(AH:0) The IPSEC AH (Authentication Header) tunneling protocol use s this service. IPSEC_TUNNEL(ESP:0) The IPSEC ESP (Encapsulation Securi ty Protocol) tun neling protocol uses this service.
P-335 Series User’s Guide 213 Chapter 16 Bandwidth Manag ement 16.2 Bandwid th Management Configuration Screen Click the Bandwidth MGMT link under Management to open the bandwidth management Configuration screen. Figure 1 17 Bandwidth Managemen t Configuration The following table describes the labels in this screen.
P-335 Series User’s Guide Chapter 16 Bandwidth Management 214 16.3 Bandwid th Management Rule and Filter Use the Bandwidth Management Rule Configuration screen to configure a bandwid th management rule. Use bandwidth rul es to allo cate specific amounts of bandwidth capacity (bandwidth budgets) to specific applications and/or subnets.
P-335 Series User’s Guide 215 Chapter 16 Bandwidth Manag ement Figure 1 18 Bandwidth Management Rule and Filter Configur ation The following table describes the labels in this screen. Table 88 Bandwidth Management Edit LABEL DESCRIPTION Active Select this check box to have the Pr estige apply this bandwidth management rule.
P-335 Series User’s Guide Chapter 16 216 Source Port Enter the port number of the source. See T able 86 for some common services and port numb ers. Protocol Enter the protocol (service type) number , for example: 1 for ICMP , 6 for TCP or 17 for UDP .
P-335 Series User’s Guide 217 Chapter 16.
P-335 Series User’s Guide Chapter 17 Remote Management Screens 218 C HAPTER 17 Remote Management Screens This chapter provides information on the Remote Management screens. 17.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) from which computers.
P-335 Series User’s Guide 219 Chapter 17 Remot e Manageme nt Screens 3 The IP address in the Secured Client IP field does not match th e client IP address. If it does not match, the Prestige will disconnect the session immediately . 4 There is already another remote management session with an equal or higher priority running.
P-335 Series User’s Guide Chapter 17 Remote Management Screens 220 17.3 T elnet Y ou can configure your Prestige for remote T e lnet access as shown next. The administrator uses T elnet from a computer on a remo te network to access the Presti ge. Figure 120 T e lnet Configuration on a TCP/IP Network 17.
P-335 Series User’s Guide 221 Chapter 17 Remot e Manageme nt Screens Figure 121 T elnet Remote Manag ement The following table describes the labels in this screen.
P-335 Series User’s Guide Chapter 17 Remote Management Screens 222 Figure 122 FTP Remote Manage ment The following table describes the labels in this screen.
P-335 Series User’s Guide 223 Chapter 17 Remot e Manageme nt Screens Figure 123 SNMP Managemen t Model An SNMP managed network consis ts of two main types of comp onent: agen ts and a manager . An agent is a management software module th at resi des in a managed device (the Prestige).
P-335 Series User’s Guide Chapter 17 Remote Management Screens 224 17.6.1 Supported MIBs The Prestige support s MIB II that is defined in RFC-1213 and RFC-1 215. The focus of the MIBs is to let administrators collect statistical data and monitor status and performance.
P-335 Series User’s Guide 225 Chapter 17 Remot e Manageme nt Screens Figure 124 SNMP Remote Manag ement The following table describes the labels in this screen.
P-335 Series User’s Guide Chapter 17 Remote Management Screens 226 17.8 DNS Screen Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa.
P-335 Series User’s Guide 227 Chapter 17 Remot e Manageme nt Screens Figure 126 Security Remote Mana gement The following table describes the labels in this screen.
P-335 Series User’s Guide Chapter 18 UPnP 228 C HAPTER 18 UP N P This chapter introduces the Universal Plug and Play feature. 18.1 Universal Plug and Play Overview Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectiv ity between devices.
P-335 Series User’s Guide 229 Chapter 18 UPnP All UPnP-enabled devices may communicate freely with eac h other without additional configuration. Disable UPnP if this is not your intention. 18.2 UPnP and ZyXEL ZyXEL has achieved UPnP certification from th e Universal Plug and Play Forum Creates UPnP™ Implementers Corp.
P-335 Series User’s Guide Chapter 18 UPnP 230 18.4 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP .
P-335 Series User’s Guide 231 Chapter 18 UPnP 18.4.1 Inst alling UPnP in Windows Me Follow the steps below to in stall UPnP in W indows Me. 1 Click St a r t and Control Panel . Double- click Add/Remove Programs . 2 Click on the Win d ow s S et u p ta b and select Communication in the Components selection box.
P-335 Series User’s Guide Chapter 18 UPnP 232 18.4.2 Inst alling UPnP in Windows XP Follow the steps below to install UPnP in W indows XP . 1 Click St a r t and Control Panel . 2 Double-click Network Connections . 3 In the Network Connections window , click Advanced in the main menu and select Optional Networking Components … .
P-335 Series User’s Guide 233 Chapter 18 UPnP Make sure the computer is co nnected to a LAN port of the ZyXEL device. Tu rn on your computer and the ZyXEL device.
P-335 Series User’s Guide Chapter 18 UPnP 234 18.5.1 Auto-discover Y our UPnP-enabled Network Device 1 Click St a r t and Control Panel . Double-click Network Connections . An icon displays under Internet Gateway . 2 Right-click the icon and select Prop erties .
P-335 Series User’s Guide 235 Chapter 18 UPnP 18.5.2 We b Configurator Easy Access W ith UPnP , you can access the web-based configur ator on the ZyXEL device without finding out the IP address of the ZyXEL device first. This is helpful if you do not know the IP address of the ZyXEL device.
1 Click St a r t and then Control Panel . 2 Double-click Network Connections . 3 Select My Network Places under Other Places . 4 An icon with the d escription for each UPnP-enabled device display s under Local Network . 5 Right-click the icon for your ZyXEL device and select Invoke .
P-335 Series User’s Guide 237 Chapter 18 UPnP Follow the steps below to access the web configurator . 1 Click Start and then Control Panel. 2 Double-click Network Connections . 3 Select My Network Places under Other Places . 4 An icon with the d escription for each UPnP-enabled device display s under Local Network .
P-335 Series User’s Guide Chapter 18 UPnP 238.
P-335 Series User’s Guide 239 Chapter 18 UPnP.
P-335 Series User’s Guide Chapter 19 Pr int Server 240 C HAPTER 19 Print Server This chapter discusses how to configur e the print server on the Prestige. 19.1 Print Server Overview A print server is a device or software that pr ovides users on a network with shared access to one or more printers.
P-335 Series User’s Guide 241 Chapter 19 Print Server The print server must be set up on each comput er in your network that you want to use the print server . Before you set up the print server , make sure the USB printe r is connected to the Prestige using the USB cable and that both the Prestige and the USB printer are turned on.
P-335 Series User’s Guide Chapter 20 Syste m 242 C HAPTER 20 System This chapter provides informa tion on the System screens. 20.1 System Overview See the W izard Setup chapter for more information on the next few screens. 20.2 General Screen Click the System link under Maintenance and the General tab.
P-335 Series User’s Guide 243 Chapter 20 System 20.3 Dynamic DNS Dynamic DNS allows you to update your curre nt dynamic IP address with one or many dynamic DNS services so that anyone can c ont act you (in NetMeeting, CU-SeeMe, etc.). Y ou can also access your FTP server or W eb site on your own computer using a domain name (for instance myhost.
P-335 Series User’s Guide Chapter 20 Syste m 244 Figure 130 Dynamic DNS The following table describes the labels in this screen. Table 99 Dynamic DNS LABEL DESCRIPTION Enable Dynamic DNS Select this check box to use dy namic DNS. Service Provider Select the name of your Dy namic DNS service provider .
P-335 Series User’s Guide 245 Chapter 20 System 20.5 T ime Setting Screen T o change your Prestige’ s time and date, click the System link under Maintenance and the Time Setting tab. The screen appears as shown. Use this screen to configure the Prestige’ s time based on your local time zone.
P-335 Series User’s Guide Chapter 20 System 246 New Date (yyyy-mm-dd) This field displays the last updated date from the time server or the last date configured manually . When you set Time and Date Setup to Manual , enter the new da te in this fiel d and then click Apply .
P-335 Series User’s Guide 247 Chapter 20 System End Date Configure the day and time when Da ylight Saving Time ends if you selected Daylight Saving . The o'clock field uses the 24 hour format. Here are a couple of examples: Daylight Saving Time ends in the United S tates on the last Sunday of October .
P-335 Series User’s Guide Chapter 21 Logs 248 C HAPTER 21 Logs This chapter contains inform ation about configuring genera l log settings and viewing the Prestige’ s logs. Refer to the appendices for example log message explanations. 21.1 V iew Log The web confi gurator allows you to look at all of the Prestige’ s logs in one location.
P-335 Series User’s Guide 249 Chapter 21 Logs Figure 132 Vi ew Log The following table describes the labels in this screen. Table 101 View Logs LABEL DESCRIPTION Display The categories that you select in the Log Settings p a ge (see section ) display in the drop-do wn list box.
P-335 Series User’s Guide Chapter 21 Logs 250 Use the Log Settings screen to configure to where the Prestig e is to send logs; the schedule for when the Prestige is to send the logs and which logs a nd/or im mediate alerts the Prestige to send. An alert is a type o f log that warrants more serious attention.
P-335 Series User’s Guide 251 Chapter 21 Logs Figure 133 Log Settings The following table describes the labels in this screen. Table 102 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP ad dress of the mail server for the e-mail addresses specified below .
P-335 Series User’s Guide Chapter 21 Logs 252 Send Alerts T o Alerts are real-time notificatio ns that are sent as soon as an event, such as a DoS attack, system error , or forbidden web a ccess attempt occurs. Enter the E-mail address where the alert messages will be sent.
P-335 Series User’s Guide 253 Chapter 21 Logs.
P-335 Series User’s Guide Chapter 22 Tools 254 C HAPTER 22 To o l s This chapter shows you how to upload a new firmware, upload or save backup configuration files and restart the Prestige. 22.1 Firmware Upload Screen Find firmware at www .zyxel .com in a file that (usually) uses the system model name with a "*.
P-335 Series User’s Guide 255 Chapter 22 Tools Figure 135 Upload W arning The Prestige automatically restarts in this time causing a temporary networ k disconnect.
P-335 Series User’s Guide Chapter 22 Tools 256 Figure 138 Configuration 22.2.1 Backup Configuration Backup configuration allows yo u to back up (s ave) the Prestige’ s current configuration to a file on your computer .
P-335 Series User’s Guide 257 Chapter 22 Tools Figure 139 Configuration Restore Su ccessful The Prestige automatically restarts in this time causing a temporary networ k disconnect. In some operating systems, you may see the following icon on your desktop.
P-335 Series User’s Guide Chapter 22 Tools 258 Figure 142 System Restart.
P-335 Series User’s Guide 259 Chapter 22 Tools.
P-335 Series User’s Guide Chapter 23 Intro ducing the SMT 260 C HAPTER 23 Introducing the SMT This chapter explains how to access and na viga te the System Management T erminal and gives an overview of its menus.
P-335 Series User’s Guide 261 Chapter 23 Intr oducing the S MT Figure 143 Login Screen Enter Password : **** 23.1.3 Prestige SMT Menu Overview The following figure gives you an overview of the various SMT menu screens of your Prestige.The following table gives you an over view of your Prestige’ s various SMT menus.
P-335 Series User’s Guide Chapter 23 Intro ducing the SMT 262 23.2 Navigating the SMT Interface The SMT(System Management T e rminal) is the interface that you use to configu re your Prestige. Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below .
P-335 Series User’s Guide 263 Chapter 23 I ntroducing the S MT After you enter the password, the SMT di splays the main menu, as shown next. Move the cursor [ENTER] or [UP]/ [DOWN] arrow keys.
P-335 Series User’s Guide Chapter 23 Intro ducing the SMT 264 Figure 144 SMT Main Menu Copyright (c) 199 4 - 2005 ZyXEL Communications Corp. P -335/P-335WT Main Menu Getting Started Advanced Management 1. General Setup 21. Filter and Firewall S etup 2.
P-335 Series User’s Guide 265 Chapter 23 Intr oducing the S MT 23.3 Changing the System Password Change the P restige defa u lt password by following the steps show n next. 1 Enter 23.1 in the ma in menu to display Menu 23.1 - System Security - Change Password.
P-335 Series User’s Guide Chapter 24 Menu 1 G eneral Setu p 266 C HAPTER 24 Menu 1 General Setup Menu 1 - General Setup contains administrative and system-related informa tion. 24.1 General Setup Menu 1 — General Setup contains administrative and system-related information (shown next).
P-335 Series User’s Guide 267 Chapter 24 Menu 1 G eneral Setup Figure 146 Menu 1 General Setup. Menu 1 - General Setup System Name= Domain Name= zyxel.
P-335 Series User’s Guide Chapter 24 Menu 1 G eneral Setu p 268 24.2.1 Procedure to Configure Dynamic DNS Note: If you have a private W AN IP address, then you cannot use Dynamic DNS. T o configure Dynamic DNS, go to Menu 1 — General Setup and select Ye s in the Edit Dynamic DNS field.
P-335 Series User’s Guide 269 Chapter 24 Menu 1 G eneral Setup Note: The IP address updates when you reconfigu re menu 1 or perform DHCP client renewal. Edit Update IP Address: Y o u can select Ye s in either the Use Server Detected IP field (recommended) or the User Specified IP Addr field, but not both.
P-335 Series User’s Guide Chapter 25 Menu 2 WAN Setup 270 C HAPTER 25 Menu 2 W AN Setup This chapter describes how to config ure the W AN using menu 2. 25.1 Introduction to W AN This chapter explains how to configure settings for your W A N port. 25.
P-335 Series User’s Guide 271 Chapter 25 Menu 2 WAN Setup.
P-335 Series User’s Guide Chapter 26 Menu 3 L AN Setup 272 C HAPTER 26 Menu 3 LAN Setup This chapter covers how to configure your wired Local Area Network (LAN) settings. 26.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 — LAN Setup .
P-335 Series User’s Guide 273 Chapter 26 Menu 3 LAN Setup 26.2 Protocol Dependent Ethernet Setup Depending on the proto cols for your applications, yo u need to configure the respective Ethernet Setup, as outlined below . • For TCP/IP Ethernet setup refer to the Internet Access Application chapter .
P-335 Series User’s Guide Chapter 26 Menu 3 L AN Setup 274 Use the instructions in the following table to configure TCP/IP parameters for the LAN port.
P-335 Series User’s Guide 275 Chapter 26 Menu 3 LAN Setup 26.3.1 IP Alias Setup IP alias allows you to partition a physical network into dif fer ent logical networks over the same Ethernet interface.
P-335 Series User’s Guide Chapter 26 Menu 3 LA N Setup 276 IP Subnet Mask Y our Prestige will automatically calc ula te the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the Prestige.
P-335 Series User’s Guide 277 Chapter 26 Menu 3 LAN Setup.
P-335 Series User’s Guide Chapter 27 In ternet Access 278 C HAPTER 27 Internet Access This chapter shows you how to config ure your Prestige for Internet access . 27.1 Introduction to Internet Access Setup Use information from your ISP along with the in st ructions in this chapter to set up your Prestige to access the Internet.
P-335 Series User’s Guide 279 Chapter 27 Internet Access Figure 154 Menu 4 - Internet Access Setup ISP's Name= MyISP Encapsulation= Ethe rnet Service Type= Stand ard My Login= N/A My Password= .
P-335 Series User’s Guide Chapter 27 In ternet Access 280 27.3 Configuring the PPTP Client Note: The Prestige supports only one PP TP server connection at any given time T o configure a PP TP client, you must configure the My Login and Password fields for a PPP connection and the PP TP parame ters for a PP TP connection.
P-335 Series User’s Guide 281 Chapter 27 Internet Access Figure 155 Internet Access Setup (PPTP) Menu 4 - Internet Access Set up ISP's Name= MyISP Encapsulation= PPTP Service Type= N/A My Login.
P-335 Series User’s Guide Chapter 27 In ternet Access 282 Figure 156 Menu 4 - Internet Access Setup ISP's Name= MyIS P Encapsulation= P PPoE Service Type= N/A My Login= My Password= * ******* R.
P-335 Series User’s Guide 283 Chapter 27 Internet Access.
P-335 Series User’s Guide Chapter 28 Remot e Node Configur ation 284 C HAPTER 28 Remote Node Configuration This chapter covers remo te node configuration. 28.1 Introduction to Remote Node Setup A remote node is required for placing calls to a remote gatewa y .
P-335 Series User’s Guide 285 Chapter 28 Remote Node Configu r ation Figure 157 Menu 11.1 - Remote Node Profile Rem Node Name= MyISP Route= IP Active= Yes Encapsulation= Ethernet Edit IP= No Service.
P-335 Series User’s Guide Chapter 28 Remot e Node Configur ation 286 28.2.2 PPPoE Encap sulation The Prestige supports PPPoE (Point-to-Point Pr otocol over Ethernet). Y ou can only use PPPoE encapsulation when you’re using the Prestige with a DSL modem as the W AN device.
P-335 Series User’s Guide 287 Chapter 28 Remote Node Configu r ation 28.2.2.2 Nailed-Up Connection A nailed-up connection is a dial-u p line where the connectio n is always up regardless of tra ffic demand. The Prestige does two things when you specify a nailed-up connection.
P-335 Series User’s Guide Chapter 28 Remot e Node Configur ation 288 Figure 159 Menu 11 .1 - Remote Node Profile Rem Node Name= MyISP Route= IP Active= Yes Apply Alias= None Encapsulation= PPTP Edit.
P-335 Series User’s Guide 289 Chapter 28 Remote Node Configu r ation Figure 160 Menu 1 1.3 Remote Node Network Layer Options for Ether net Encapsulation Menu 11.
P-335 Series User’s Guide Chapter 28 Remot e Node Configur ation 290 28.4 Remote Node Filter Move the cu rsor to the field Edit Filter Sets in menu 1 1 .1, and then press [SP ACE BAR] to set the value to Ye s . Press [ENTER] to open Menu 1 1.5 - Remote Node Filter .
P-335 Series User’s Guide 291 Chapter 28 Remote Node Configu r ation Figure 161 M Menu 11.5 - Remote Node Filt er Input Filter Sets: protocol filters= device filters= Output Filter Sets: protocol filters= device filters= Enter here to CONFIRM or ESC to CANCEL: enu 1 1 .
P-335 Series User’s Guide Chapter 28 Remot e Node Configur ation 292 Figure 163 Menu 11 .6 - Traffic Redirect Setup Active= Yes Configuration : Backup Gate way IP Address= 0.0.0.0 Metric= 15 Check WAN I P Address= 0.0.0.0 Fail Tole rance= 2 Period(se c)= 5 Timeout(s ec)= 3 Press ENTER to Confirm or ESC to Cancel: Menu 1 1.
P-335 Series User’s Guide 293 Chapter 28 Remote Node Configu ration.
P-335 Series User’s Guide Chapter 29 Static Route Setup 294 C HAPTER 29 S t atic Route Setup This chapter shows how to setup IP static routes. 29.1 IP S tatic Route Setup T o configure an IP static route, use Menu 12 – S tatic Routing Setup (shown next).
P-335 Series User’s Guide 295 Chapter 29 Static Route Setup Figure 165 Menu12.1 Edit IP S tatic Route Menu 12.1 - Edit IP Static R oute Route #: 1 Route Name= ? Active= No Destination IP Addr ess= ?.
P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 296 C HAPTER 30 Network Address T ranslation (NA T) This chapter discusses how to configure NA T on the Prestige.
P-335 Series User’s Guide 297 Chapter 30 Network Addr ess Translation (NAT) Figure 166 Menu 4 Applying NA T for Internet Access M enu 4 - Internet Access Setup ISP's Name= M yISP Encapsulation .
P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 298 Figure 167 Menu 11.3 - R emote Node Network Layer Options IP Address Assig nment= Dynamic IP Address= N/A IP Subnet Mask= N.
P-335 Series User’s Guide 299 Chapter 30 Network Addr ess Translation (NAT) Figure 168 Menu 15 - NAT Setup 1. Address Mappin g Sets 2. Port Forwardin g Setup 3. Trigger Port S etup Enter Menu Selection Number: Menu 15 NA T Setup 30.3.1 Address Mapping Set s Enter 1 to bring up Menu 15.
P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 300 Figure 170 Menu 15.1.255 SUA Address Mapping Rule s Menu 15.1 .255 - Address Mapping Rules Set Name= SUA Idx Local Start IP Local E nd IP Global Start IP Global End IP Type --- -------------- ------- -------- --------------- --------------- ------ 1.
P-335 Series User’s Guide 301 Chapter 30 Network Addr ess Translation (NAT) Figure 171 Menu 15.1.1 - Address Mappin g Rules Set Name= NAT_SET Idx Local Start IP Local End IP Global Start IP Global End IP Type --- --------------- -------------- ---- ----------- --------------- ------ 1.
P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 302 Note: Y ou must press [ENTER] at the bottom of the screen to save the whole set.
P-335 Series User’s Guide 303 Chapter 30 Network Addr ess Translation (NAT) 30.4 Configuring a Server behind NA T Follow these steps to config ure a server behind NA T : 1 Enter 15 in the main menu to go to Menu 15 - NA T Setup. 2 Enter 2 to display Menu 15.
P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 304 Figure 174 Multiple Servers Behind NA T Example 30.5 General NA T Examples The following are some exam ples of NA T configuration.
P-335 Series User’s Guide 305 Chapter 30 Network Addr ess Translation (NAT) Figure 175 NA T Example 1 Figure 176 Menu 4 - In ternet Access Setup ISP's Name= MyISP Encapsulation= Et hernet Servi.
P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 306 Figure 177 NA T Example 2 In this case, you do exactly as above (use the convenient pre-configured SUA Only set) and also go to menu 15.2 to specify the Inside Server behind the NA T as shown in the next figure.
P-335 Series User’s Guide 307 Chapter 30 Network Addr ess Translation (NAT) 4 Y ou also map your th ird IGA to the web server and mail serv er on the LAN. T ype Server allows you to specify multiple servers, of different t ypes, to other computers behind NA T on the LAN.
P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 308 Figure 180 Menu 11.3 - Remote Node Netw ork Layer Options IP Address Assign ment= Dynamic IP Address= N/A IP Subnet Mask= N.
P-335 Series User’s Guide 309 Chapter 30 Network Addr ess Translation (NAT) Figure 181 Example 3: Menu 15.1.1.1 Menu 15.1.1.1 Address Mappin g Rule Type= One-to-One Local IP: Start= 192.168.1.10 End = N/A Global IP: Start= 10.132.50.1 End = N/A Press ENTER to Confirm or ES C to Cancel: Press Space Bar to Toggle.
P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 310 Figure 183 Example 3: Menu 15.2 Menu 15.2 - NAT Server Setup Rule Start Port N o. End Port No. IP Address ------------------- -------------------------------- 1. Default Default 0.
P-335 Series User’s Guide 311 Chapter 30 Network Addr ess Translation (NAT) Figure 185 Example 4: Menu 15.1.1.1 Addre ss Mapping Rule. Menu 15.1.1.1 Address Mappin g Rule Type= Many-One-to-One Local IP: Start= 192.168.1.10 End = 192.168.1.12 Global IP: Start= 10.
P-335 Series User’s Guide Chapter 30 Network Address Translation (NAT) 312 Figure 187 Menu 15.3 T rigger Port Setup Menu 15.3 - Trigger Po rt Setup Incoming Trigger Rule Name St art Port End Port Start Port End Po rt -------------------------- ----------------------------------------- --- 1.
P-335 Series User’s Guide 313 Chapter 30 Network Addr ess Translation (NAT).
P-335 Series User’s Guide Chapter 31 Enablin g the Firewall 314 C HAPTER 31 Enabling the Firewall This chapter shows you how to get started with the Prestige firewall.
P-335 Series User’s Guide 315 Chap ter 31 Enabling the Fir ewall Figure 188 Menu 21.2 Firewa ll Setup Menu 21.2 - Firewall Setup The firewall protects a gainst Denial of Service (DoS) attacks wh en it is active. Your network is vulnera ble to attacks when the firewall is turne d off.
P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 316 C HAPTER 32 VPN/IPSec Setup This chapter introduces the VPN SMT menus. 32.1 VPN/IPSec Overview The VPN/IPSec main SMT menu has these main submenus: 1 Define VPN policies in menu 27.
P-335 Series User’s Guide 317 Chapter 32 VPN/IPSec Setup Figure 190 Menu 27 - VPN/IPSec Setup 1. IPSec Summary 2. SA Monitor Enter Menu Selection Number: Menu 27 VPN/IPSec Setup 32.2 IPSec Summary Screen T ype 1 in menu 27 and the n press [ENTER] to display Menu 27.
P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 318 Local Addr St a r t When the Addr T ype field i n Menu 27.1.1 IPSec Setup is configured to Single , this is a static IP address on the LAN behind your Prestige. When the Addr T y pe field in Menu 27.
P-335 Series User’s Guide 319 Chapter 32 VPN/IPSec Setup Remote Addr End When the Addr T y pe field in Menu 27.1.1 IPSec Setup is configured to Single , this is the same (static) IP address as in the Remote Addr S t art field. When the Addr T y pe field in Menu 27.
P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 320 Figure 192 Menu 27.1.1 IPSec Setup Menu 27.1.1 – IPSec Setup Index= 1 Name= Taiwa n Active= Yes Keep Alive= No Nat Traversal= No Local ID type Con tent= My IP Addr= 0.0.0.0 Peer ID type= IP Con tent= Secure Gateway Address= zw50 test.
P-335 Series User’s Guide 321 Chapter 32 VPN/IPSec Setup Content When you select IP in the Local ID T ype fi eld, type the IP addre ss of your computer or leave the field blank to have the Pres tige automatically use its own IP address.
P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 322 Port S tart 0 is the default and signifies any port. T y pe a port number from 0 to 65535. Y ou cannot create a VPN tunnel if you try to connect using a port number that does no t match this port number or range of port numbers.
P-335 Series User’s Guide 323 Chapter 32 VPN/IPSec Setup 32.3 IKE Setup T o edit this menu, the Key Management field in Menu 27.1.1 – IPSec Setup must be set to IKE . Move the cursor to the Edit Key Management Setup field in Menu 27.1.1 – IPSec Setup ; press [SP ACE BAR] to select Ye s and then press [ENTER] to display Menu 27.
P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 324 Figure 193 Menu 27.1.1.1 - IKE Setu p Phase 1 Negotiation Mode= Ma in Pre-Shared Key= ? Encryption Algorithm = DES Authentication Algor ithm=.
P-335 Series User’s Guide 325 Chapter 32 VPN/IPSec Setup 32.4 Manual Setup Y ou only configure Menu 27.1.1.2 – Manual Setup when you select Manual in the Key Management field in Menu 27.1.1 – IPSec Setup . Manual key mana gement is useful if you have problem s with IKE key management.
P-335 Series User’s Guide Chapter 32 VPN/IPSec Setup 326 32.4.1 Active Protocol This field is a combination of mode and secu rity protocols used for the VPN.
P-335 Series User’s Guide 327 Chapter 32 VPN/IPSec Setup Encryption Algorithm Press [SP ACE BAR] to choose from NULL , 3DES or DES and then press [ENTER]. Fill in the Key1 field below wh en you choose DES and fill in fields Key1 to Key3 when you choose 3DES .
P-335 Series User’s Guide Chapter 33 SA Monitor 328 C HAPTER 33 SA Monitor This chapter teaches you h ow to manage your SAs by using the SA Monitor in SMT menu 27.2. 33.1 SA Monitor Overview A Security (SA) is the group of security settin gs related to a specific VPN tunnel.
P-335 Series User’s Guide 329 Chapter 33 SA Monitor Figure 195 Me nu 27.2 - SA Monitor # --- 001 002 003 004 005 006 007 008 009 010 Name -------------------------------- Taiwan : 3.
P-335 Series User’s Guide Chapter 33 SA Monitor 330 Select Command Press [SP ACE BAR] to choose from Re fresh , Disco nnect , None , Next Page , or Previ - ous Page and then press [ENTER]. Y ou must select a conne ction in the next field when you choose the Disconne ct command.
P-335 Series User’s Guide 331 Chapter 33 SA Monitor.
P-335 Series User’s Guide Chapter 34 Filter Configuration 332 C HAPTER 34 Filter Configuration This chapter shows you how to create and apply filters. 34.1 Introduction to Filters Y our Prestige uses filters to decide whether to a llow passage of a data packet and/or to make a call.
P-335 Series User’s Guide 333 Chapter 34 Filter Configuration 34.1.1 The Filter St ructure of the Prestige A filter set consists of one or more filter rules. Usually , you would group related rules, e.g., all the rules for NetBIOS, into a single set and gi ve it a descriptive name.
P-335 Series User’s Guide Chapter 34 Filter Configuration 334 Figure 197 Filter Rule Process Y ou can apply up to four filter sets to a particular port to block multiple types of packets. W ith each filter set having up to six rules, you can have a maximum of 24 rules active for a single port.
P-335 Series User’s Guide 335 Chapter 34 Filter Configuration Figure 198 Menu 21: Filter and Firewa ll Setup Menu 21 - Filter and Firewal l Setup 1. Filter Setup 2. Firewall Setup Enter Menu Selection Number: 2 Enter 1 to bring up the following menu.
P-335 Series User’s Guide Chapter 34 Filter Configuration 336 The protocol dependent filter rules abbreviation are listed as follows: Table 135 Rule Abbreviations Used ABBREVIA TION DESCRIPTION IP P.
P-335 Series User’s Guide 337 Chapter 34 Filter Configuration T o configure TCP/IP rules, select TCP/IP Filter Rule from the Filter T ype field and press [ENTER] to open Menu 21.1.1.1 - TCP/IP Filter Rule , as shown next Figure 200 Menu 21.1.1.1 TCP/IP Filter Rule.
P-335 Series User’s Guide Chapter 34 Filter Configuration 338 The following figure illustrates th e logic flow of an IP filter . Source IP Address Enter the source IP Address of th e packet you wish to filter . This field is ignored i f it is 0.0.0.
P-335 Series User’s Guide 339 Chapter 34 Filter Configuration Figure 201 Executing an IP Filter 34.2.3 Configuring a Generic Filter Rule This section shows y ou how to configure a gen e ri c filter rule. The purpose of generic rules is to allow you to filter non-IP packets.
P-335 Series User’s Guide Chapter 34 Filter Configuration 340 Figure 202 Menu 21.1.4.1 Gener ic Filter Rule Menu 21.1.4.1 - Generic F ilter Rule Filter #: 4,1 Filter Type= Generi c Filter Rule Activ.
P-335 Series User’s Guide 341 Chapter 34 Filter Configuration 34.3 Example Filter Let’ s look at an example to block outside use rs from accessing the Prestige via telnet. Figure 203 T elnet Filter Example 1 Enter 21 from the main menu to open Menu 21 - Filter and Firewall Setup .
P-335 Series User’s Guide Chapter 34 Filter Configuration 342 Figure 204 Example Filter: Menu 21 .1.3.1 Menu 21.1.3.1 - TCP/IP Filte r Rule Filter #: 3,1 Filter Type= TCP /IP Filter Rule Active= Yes IP Protocol= 6 IP S ource Route= No Destination: IP Addr= 0.
P-335 Series User’s Guide 343 Chapter 34 Filter Configuration Figure 205 Menu 21.1.3 - Filter Rules Summary # A Type Filter Rules M m n - - ---- ------------------ --------------------------------------- - - - 1 Y IP Pr=6, SA=0.
P-335 Series User’s Guide Chapter 34 Filter Configuration 344 Figure 206 Protocol and Device Filter Set s 34.5 Firewall V ersus Filters Firewall configuration is discussed in the firewall chapters of this manual. Furt her comparisons are also made between filtering, NA T and the firewall.
P-335 Series User’s Guide 345 Chapter 34 Filter Configuration Figure 207 Filtering LAN T raffic Menu 3.1 - LAN Port Filter S etup Input Filter Set s: protocol filte rs= device filte rs= Output Filter Se ts: protocol filte rs= device filte rs= Press ENTER to Confirm or ES C to Cancel: 34.
P-335 Series User’s Guide Chapter 35 SNMP Configuration 346 C HAPTER 35 SNMP Configuration This chapter explains SNMP Configuratio n menu 22. 35.1 About SNMP Simple Network Management Protocol is a protocol used for exchanging man agement information between network devices.
P-335 Series User’s Guide 347 Chapter 35 SNMP Configuration The managed devices cont ain object variables/ managed objects that define each piece of information to be collected ab out a device. Examples of vari ables include the number of packets received, node port status etc.
P-335 Series User’s Guide Chapter 35 SNMP Configuration 348 Figure 210 Menu 22 SNMP Configura tion Menu 22 - SNMP Configuration SNMP: Get Community= publ ic Set Community= publ ic Trusted Host= 0.
P-335 Series User’s Guide 349 Chapter 35 SNMP Configuration The port number is its interface index under the interface group. Table 140 Ports and Permanent Virtua l Circuits PORT PVC (PERMANENT VIRTUAL CIRCUIT) 1 Ethernet LAN 2 1 3 2 … … 13 12 14 xDSL 4 linkUp ( defined in RFC-1215 ) A trap is sent with the port number .
P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 350 C HAPTER 36 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. These tools include updates on system status , port status, log and trace capabiliti es and upgrades for the system software.
P-335 Series User’s Guide 351 Chapter 36 System Information and Diagnosis Figure 212 Menu 24.1 System Maintena nce : S tatus Menu 24.1 - System Maintenance - Status 01:55:23 Sat.
P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 352 36.2 System Information T o get to the System Information: 1 Enter 24 to display Menu 24 — System Information a nd Console Port Speed . 2 Enter 2 to display Menu 24.2 — System Information .
P-335 Series User’s Guide 353 Chapter 36 System Information and Diagnosis Figure 214 Menu 24.2.1 System Maintenance : Information Menu 24.2.1 - System Maintenance - Information Name: P- 335/P-335WT.zyxel.com.tw Routing: IP ZyNOS F/ W Version: V3.60(JO.
P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 354 Figure 215 Menu 24.2.2 – System Mainten ance – Change Console Port Speed Console Port Speed: 9600 Press ENTER to Confirm or ES C to Cancel: Menu 24.2.2 System Maintenance : Change Co nsole Port S peed 36.
P-335 Series User’s Guide 355 Chapter 36 System Information and Diagnosis 36.3.1.1 CDR CDR Message Format SdcmdSyslogSend ( SYSLOG_CDR , SYSLOG_INFO, String); String = board xx line xx ch annel xx, .
P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 356 36.3.1.3 Filter log Filter log Message Format SdcmdSyslogSend(SYSLOG_FILLO G, SYSLOG_NOTICE, String ); String = IP[Src=xx.
P-335 Series User’s Guide 357 Chapter 36 System Information and Diagnosis 36.3.1.5 Firewall log Firewall Log Message Format SdcmdSyslogSend(SYSLOG_FIREW ALL, SYSLOG_NOTICE, buf); buf = IP[Src=xx.
P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 358 Figure 217 IP Frame: ENET0-RECV Size: 44/ 44 Time: 17:02:44.262 Frame Type: IP Header: IP Version = 4 Header Length = 20 Typ.
P-335 Series User’s Guide 359 Chapter 36 System Information and Diagnosis Figure 218 Menu 24.4 System Maintenance : Diagnostic Menu 24.4 - System Maintena nce - Diagnostic TCP/IP 1. Ping Host 2. WAN DHCP Release 3. WAN DHCP Renewal 4. Internet Setup T est System 11.
P-335 Series User’s Guide Chapter 36 System Information and Diagnosis 360 W AN D HCP Renewal Enter 3 to renew your W AN DHCP settings. Internet Setu p T est Enter 4 to test the Internet setup. Y o u can also test the Internet setup in Menu 4 - Internet Access .
P-335 Series User’s Guide 361 Chapter 36 System Information and Diagnosis.
P-335 Series User’s Guide Chapter 37 Firm ware and Configuration File Maintenance 362 C HAPTER 37 Firmware and Configuration File Maintenance This chapter tells y ou how to backup and restor e your configuration file as well as upload new firmware and configuration files.
P-335 Series User’s Guide 363 Chapter 37 Firmw are and Configu ration File Mainten ance The following table is a summary . Please note that the internal filename refe rs to the filename on the Prest.
P-335 Series User’s Guide Chapter 37 Firmwa re and Configuration F ile Maintenance 364 Figure 220 T e lnet in Menu 24.5 Menu 24.5 - System Maintenan ce - Backup Configuration To transfer the configuration file to your workstation , follow the procedure below: 1.
P-335 Series User’s Guide 365 Chapter 37 Firmw are and Configu ration File Mainten ance 37.2.3 Example of FTP Comm ands from the Command Line Figure 221 FTP Session Example 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel.
P-335 Series User’s Guide Chapter 37 Firm ware and Configuration File Maintenance 366 37.2.6 Backup Configuration Using TFTP The Prestige support s the up/downloading of the firmware and the configuration file using TFTP (T rivial File T ransfer Protocol) over LA N.
P-335 Series User’s Guide 367 Chapter 37 Firmw are and Configu ration File Mainten ance 37.2.8 GUI-based TFTP Client s The following table describes some of the fiel ds that you may see in GUI-based TFTP clients. Table 147 General Commands for GUI-based TFTP Clients COMMAND DESCRIPTION Host Enter the IP address of the Prestige.
P-335 Series User’s Guide Chapter 37 Firmwa re and Configuration F ile Maintenance 368 Figure 222 T elnet into Menu 24.6. Menu 24.6 -- System Maintena nce - Restore Configuration To transfer the firmware and con figuration file to your workstation, follow the procedure below: 1.
P-335 Series User’s Guide 369 Chapter 37 Firmw are and Configu ration File Mainten ance 37.3.2 Restore Usin g FTP Session Ex ample Figure 223 ftp> put config.rom rom-0 200 Port command okay 150 Opening data connection for STOR rom-0 226 File received OK 221 Goodbye for writing flash ftp: 16384 bytes sent in 0.
P-335 Series User’s Guide Chapter 37 Firmwa re and Configuration F ile Maintenance 370 Figure 224 Menu 24.7.1 - System Mainten ance - Upload System Firmware To upload the system firmwar e, follow the procedure below: 1. Launch the FTP client o n your workstation.
P-335 Series User’s Guide 371 Chapter 37 Firmw are and Configu ration File Mainten ance 4 Enter your password as requested (the default is “1234”). 5 Enter “bin” to set transfer mode to binary . 6 Use “put” to transfer files from the comp uter to the Prestige, for example, “p ut firmware.
P-335 Series User’s Guide Chapter 37 Firm ware and Configuration File Maintenance 372 3 Enter the command “sys stdio 0” to disable th e console t imeout, so the TFTP transfer will not be interrupted. Enter “co mmand sys stdio 5” to restore the five-minute console timeout (default) when the f ile transfer is complete.
P-335 Series User’s Guide 373 Chapter 37 Firmw are and Configu ration File Maint enance.
P-335 Series User’s Guide Chapter 38 System Main tenance 374 C HAPTER 38 System Maintenance This chapter leads you through SM T menus 24.8 to 24.10. 38.
P-335 Series User’s Guide 375 Chapter 38 System Mainte nance 38.1.2 Command Usage A list of commands can be found b y typing help or ? at the command prompt. Always type the full command. T ype exit to return to the SMT ma in menu when finished. Figure 228 Copyright (c) 1994 - 2005 Zy XEL Communications Corp.
P-335 Series User’s Guide Chapter 38 System Main tenance 376 Figure 230 Budget Management Menu 24.9.1 - Budget Management Remote Node Connecti on Time/Total Budget Elapsed Time/Total Period 1.MyISP No Budget No Budget The total budget is the time li mit on the accumulated time for ou tgoing calls to a remo te node.
P-335 Series User’s Guide 377 Chapter 38 System Mainte nance Figure 231 Menu 24.9.2 - Call History M enu 24.9.2 - Call History Phone Number Dir Rate #call Max Min Total 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Ente r Entry to Delete(0 to exit): The following table describes the fields in this menu.
P-335 Series User’s Guide Chapter 38 System Main tenance 378 Figure 232 Menu 24: System Maintenan ce Menu 24 - System Maintenance 1. System Status 2. System Information and C onsole Port Speed 3. Log and Trace 4. Diagnostic 5. Backup Configuration 6.
P-335 Series User’s Guide 379 Chapter 38 System Mainte nance Figure 233 Menu 24.10 - System Maintenance - Time and Date Setting Time Protocol= NTP (RF C-1305) Time Server Address= t ime-b.
P-335 Series User’s Guide Chapter 38 System Mainte nance 380 38.3.1 Resetting the T ime The Prestige resets the time in three instances: 1 On leaving menu 24.10 after making changes. 2 When the Prestige starts up, if there is a timeserver configured in menu 24.
P-335 Series User’s Guide 381 Chapter 38 System Main tenance.
P-335 Series User’s Guide Chapter 39 Remo te Management 382 C HAPTER 39 Remote Management This chapter covers remote ma nagement (SMT menu 24.1 1). 39.1 Remote Management Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) from which computers.
P-335 Series User’s Guide 383 Chapter 39 Remote Manageme nt Figure 234 Menu 24.11 - Remote Management Control TELNET Server: Port = 23 Access = ALL Secure Client IP = 0.0.0.0 FTP Server: Port = 21 Access = ALL Secure Client IP = 0.0.0.0 Web Server: Port = 80 Access = ALL Secure Client IP = 0.
P-335 Series User’s Guide Chapter 39 Remo te Management 38 4 3 The IP address in the Secure Client IP field (menu 24.1 1) does not ma tch the client IP address. If it does not match, the Prestig e will disconnect the session immediately . 4 There is an SMT console session running.
P-335 Series User’s Guide 385 Chapter 39 Remote Manag ement.
P-335 Series User’s Guide Chapter 40 Call Scheduling 386 C HAPTER 40 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulati on only) allows you to dictate when a remote node should be called and for how long.
P-335 Series User’s Guide 387 Chapter 40 Call Scheduling Y ou can design up to 12 schedule sets but you can only apply up to fo ur schedule sets for a remote node. Note: T o delete a schedule set, enter the set number and press [SP ACE BAR] and then [ENTER ] (or delete) in the Edit Name field.
P-335 Series User’s Guide Chapter 40 Call Scheduling 388 Once your schedule sets are conf igured, yo u must then apply them to the desired remote node(s).
P-335 Series User’s Guide 389 Chapter 40 Call Scheduling.
P-335 Series User’s Guide Chapter 41 Trou bleshooting 390 C HAPTER 41 T roubleshooting This chapter covers potential proble ms and the corresponding remedies. 41.1 Problems St arting Up the Prestige Table 153 Troubleshooting Starting Up Your Prestige PROBLEM CORRECTIVE ACTION None of the LEDs turn on when I turn on the Prestige.
P-335 Series User’s Guide 391 Chapter 41 Trou bleshooting 41.3 Problems with the W AN Table 155 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The W AN LED is off. Check the connections between the Pre stige WAN port and the cable/DSL modem or ethernet jack.
P-335 Series User’s Guide Chapter 41 Trou bleshooting 392 41.4 Problems Accessing the Prestige Table 156 Troubleshooting Accessing the Prestig e PROBLEM CORRECTIVE ACTION I cannot access the Prestige. The username is “admin”. The default password is “1234”.
P-335 Series User’s Guide 393 Chapter 41 Trou bleshooting Problems with the Password Problems with Remote Management 41.5.1 Pop-up Windows, Ja vaScript s and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-up windows from your dev ice.
P-335 Series User’s Guide Chapter 41 Trou bleshooting 394 • Java permissions (enabled by default). Note: Internet Explorer 6 screens are used here. Screens for other Internet Explorer versions may vary . 41.5.1.1 Internet Explorer Pop-up Blockers Y ou may have to disable po p-up blocking to log into your device.
P-335 Series User’s Guide 395 Chapter 41 Trou bleshooting Figure 239 Intern et Options 3 Click Apply to save this setting. 41.5.1.1.2 Enable pop-up Blockers with Exceptions Alternatively , if you only want to allow pop-up win d ows from your de vice, see the following steps.
P-335 Series User’s Guide Chapter 41 Trou bleshooting 396 Figure 240 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites .
P-335 Series User’s Guide 397 Chapter 41 Trou bleshooting Figure 241 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 41.5.1.2 JavaScript s If pages of the web configurat or do not display properly in Inte rnet Explorer , check that JavaScripts are allowed.
P-335 Series User’s Guide Chapter 41 Trou bleshooting 398 Figure 242 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting . 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is sele cted (the default).
P-335 Series User’s Guide 399 Chapter 41 Trou bleshooting Figure 243 Security Settings - Java Scripting 41.5.1.3 Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level... button.
P-335 Series User’s Guide Chapter 41 Trou bleshooting 400 Figure 244 Security Settings - Java 41.5.1.3.1 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Adva nced tab. 2 Make sure that Use Java 2 for <applet> under Java (Sun) is selected.
P-335 Series User’s Guide 401 Chapter 41 Trou bleshooting Figure 245 Java (Sun) 41.5.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX cont rols or to use T rend Micro Security Serivces. Make sure that ActiveX controls are allowed in Internet Explorer .
P-335 Series User’s Guide Chapter 41 Trou bleshooting 402 Figure 246 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins . 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected.
P-335 Series User’s Guide 403 Chapter 41 Trou bleshooting Figure 247 Security Setting ActiveX Controls.
P-335 Series User’s Guide Appendix A Prod uct Specification s 404 Appendix A Product S pecifications See also the Introduction chapter for a general ov erview of the key featur es. S p ecification T a bles Table 160 Device Default IP Address 192.168 .
P-335 Series User’s Guide 405 Appendix A Product Sp ecifications Management Embedded Web Configurator Menu-driven SMT (System Manag ement T erminal) mana gement CLI (Command Line Interpreter) Remote Management via T elnet or Web SNMP manageable FTP for firmware downloading, config uration ba ckup and restoration.
P-335 Series User’s Guide Appendix B PPPoE 406 Appendix B PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP ov er Ethernet, RFC 2516) from your computer to an A TM PVC (Permanent V irt ual Circuit) whic h connects to a DSL Access Concentrator where the PPP session terminates (see the next figure).
P-335 Series User’s Guide 407 Appendix B PPPoE Figure 248 Single-Compute r per Router Hardwa re Configuration How PPPoE W orks The PPPoE driver makes the Ethernet appea r as a serial link to the computer and the computer runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC).
P-335 Series User’s Guide Appendix C PPTP 408 Appendix C PPTP What is PPTP? PP TP (Point-to-Point T unneling Protocol) is a Microsoft proprietary pro tocol (RFC 2637 for PP TP is informational only) to tunnel PPP frames.
P-335 Series User’s Guide 409 Appendix C PPTP PPTP Protocol Overview PP TP is very similar to L2TP , since L2TP is based on both PP TP and L2F (Cisco’ s Layer 2 Forwarding). Conceptually , there are three pa rties in PP TP , namely the PNS (PP TP Network Server), the P AC (PP TP Access Concentrator) a nd the PP TP user .
P-335 Series User’s Guide Appendix C PPTP 410 Figure 252 Example Message Exchange between Computer and an ANT PPP Dat a Connection The PPP frames are tunneled between the PN S and P AC over GRE (General Routing Encapsulation, RFC 1701, 1702 ). The individual calls within a tunnel are distingu ished using the Call ID field in the GRE header .
P-335 Series User’s Guide 411 Appendix C PPTP.
P-335 Series User’s Guide Appendix D Print Server 412 Appendix D Print Server This appendix shows you h ow to set up a pr int server for the follo wing op erating systems: •W i n d o w s 9 5 •W i n d o w s 9 8 • Windows 98 SE (S econd Edition) •W i n d o w s M E • Wind o ws 2000 • W indows XP • W indows NT 4.
P-335 Series User’s Guide 413 Appendix D Print Server Inst allation Requirement s T o install the print server driver you will need the following requir ements • Microsoft W indows 95, W i ndows 98 SE (Second Edition) , W indows ME, W indows NT 4.
P-335 Series User’s Guide Appendix D Print Server 414 Figure 254 Network Print Server Se tup Wizard : Welcome 4 The Select A Print Server screen displays. The wizard auto matically detect s whether or not a print server is connected to your computer .
P-335 Series User’s Guide 415 Appendix D Print Server Figure 255 Network Print Server Setup Wi zard : Select A Print Server 5 The Change Set tings screen displa ys. Select the Y es, I want to change settings radio button, type a password and click Next to change your print ser ver settings.
P-335 Series User’s Guide Appendix D Print Server 416 Figure 256 Network Print Server Setup Wizard : Change Settings 6 Select the printer which is connected to the Prestige USB port.
P-335 Series User’s Guide 417 Appendix D Print Server Figure 257 Network Print Server Setup Wizard : Select A Printer 8 If your printer is not listed , you can use the pop-up help dialog box to guide you through the add printer process . After you have added a printer , the Select A Printer screen displays again.
P-335 Series User’s Guide Appendix D Print Server 418 Figure 259 Network Print Server Setup Wizard : Summary 10 Click Finish to save and close your Network Print Server Setup W izard .
P-335 Series User’s Guide 419 Appendix D Print Server Windows 95/98/ME/NT/2000/XP : Print Server Setup Wi zard The following Setup Wizard for Windows 98/ME/NT/2000/XP uses a print server protocol called Line Printer Daemon (LPD ).
P-335 Series User’s Guide Appendix D Print Server 420 Figure 262 Network Print Monitor Setup : W elcome 4 The Choose Destination Lo cation screen displays. C hoose a f ile location to install your print monitor and click Next to continue. Figure 263 Network Print Monitor Setup : L o cation 5 The Setup Complete screen displays.
P-335 Series User’s Guide 421 Appendix D Print Server Figure 264 Network Print Monito r Setup : Complete Windows 2000/NT/XP : Computer W izard Use the following wizard if you do not want to use the provided setup wizards.W i ndows 95, W indows 98, W indows 98 SE (Sec ond Edition) and W indows ME have similar print server setups.
P-335 Series User’s Guide Appendix D Print Server 422 Figure 266 Add Printer Wizard W e lcome Screen 4 Select the Local printer radio button. 5 Click Next to continue. Figure 267 Local Printer Screen 6 Select the Create a new port radio b utton. 7 Choose S tandard TCP/IP Port from the Ty p e drop-down list box.
P-335 Series User’s Guide 423 Appendix D Print Server Figure 268 Select Printer Port Screen 9 Follow the on-screen instructions and click Next to continue. Figure 269 Add S tandard TCP/IP Printer Port Screen 10 T ype the IP Addr e ss of your Prestige.
P-335 Series User’s Guide Appendix D Print Server 424 Figure 270 Add Port Screen 12 Select the Custom radio button and click the Setti ngs… button. Fill in additional print server port information in the following screen. Figure 271 Additional Port Infor mation Screen 13 Select the LPR radio button as the printing Pr otocol .
P-335 Series User’s Guide 425 Appendix D Print Server Figure 272 Port Settings Screen 16 Make sure that your printer po rt settings are correct. Click the Finish button to complete printer TCP/IP and port set up and then return to the Add Printer Wizard .
P-335 Series User’s Guide Appendix D Print Server 426 Figure 274 Add Printer Screen 21 If the following screen displays, select Keep existing driver radio button if you already have a printer driver installed on your comput er and you do not want to change it.
P-335 Series User’s Guide 427 Appendix D Print Server Figure 276 Name Y our Printer Screen 24 Select the Do not share this printer radio button. 25 Click Next to proceed to the following screen. Figure 277 Printer Sharing Screen 26 These fields are optional.
P-335 Series User’s Guide Appendix D Print Server 428 Figure 278 Location and Comme nt Screen 28 Select the Ye s radio button and then click the Next button if you want to print a test page. A pop-up screen displays to ask if the test page printed correctly .
P-335 Series User’s Guide 429 Appendix D Print Server Figure 280 Add Printer Wi zard Complete Macintosh OS X Use the following steps to set up a pr int server on your Macintosh co mputer . 1 Click the Print Center icon located in the Macintosh Do ck.
P-335 Series User’s Guide Appendix D Print Server 430 Figure 283 Applications Folder 5 Double-click the Print Center icon. Figure 284 Utilities Folder 6 Click the Add icon at the top of the screen. Figure 285 Printer List Folder 7 Set up your printer in the Printer List configuration screen.
P-335 Series User’s Guide 431 Appendix D Print Server Figure 286 Printer Configuration 12 Click Add to select a printer model, save a nd close the Printer List configuration screen. Figure 287 Printer Model 13 The Name “ LP1 on 192.168.1.1 ” di splays in the Printer List field.
P-335 Series User’s Guide Appendix D Print Server 432 Figure 288 Print Server 14 Y our Macintosh print server set up is comp lete. Y ou can now use the Prestige’ s print server to print from a M acintosh computer . Refer to the “Print Server” on page 249 for information on yo ur Prestige print serv er configuration screen.
P-335 Series User’s Guide 433 Appendix D Print Server.
P-335 Series User’s Guide Appendix E Print Serv er Specifications 434 Appendix E Print Server S pecifications This appendix provides details on the pr int server interface and system requirements. Table 162 Print Server Interface PRINT SERVER INTERFACE USB USB 1.
P-335 Series User’s Guide 435 Appendix E Print Server Specifica tions CANON i255 Inkjet CANON i320 Inkjet CANON i355 Inkjet CANON i450 Inkjet CANON i455 Inkjet CANON i470D Inkjet CANON i475D Inkjet .
P-335 Series User’s Guide Appendix E Print Serv er Specifications 436 EPSON S tylus C40 Inkjet Disable bi-directional support on printer. EPSON S tylus C43UX Inkjet EPSON S tylus C60 Inkjet Disable bi-directional support on printer.
P-335 Series User’s Guide 437 Appendix E Print Server Specifica tions HP DeskJet 930C Inkjet HP LaserJet 1200 Lase r Disable bi-directional support on printer. HP LaserJet 1220 Lase r Disable bi-directional support on printer. HP LaserJet 1300 La ser HP LaserJet 2200 Lase r Disable bi-directional support on printer.
P-335 Series User’s Guide Appendix E Print Serv er Specifications 438 LEXMARK T420 Laser LEXMARK T620 Laser LEXMARK W812 Laser LEXMARK Z42 Inkjet LEXMARK Z43 Inkjet LEXMARK Z45 Inkjet LEXMARK Z55 In.
P-335 Series User’s Guide 439 Appendix E Print Server Specifica tions.
P-335 Series User’s Guide Appendix F Print Se rver Specifications 440 Appendix F NetBIOS Filter Commands The following describes the Ne tBIOS packet filter commands. Introduction NetBIOS (Network Basic Input/Output System ) are TCP or UDP broadcast packets that enable a computer to connect to and communicate with a LAN.
P-335 Series User’s Guide 441 Appendix F Print Server Specifications The filter types and their defa ult settings are as follows. Table 165 NetBIOS Filter Default Settings NAME DESCRIPTION EXAMPLE Between LAN and WAN This field displays whether NetBIOS packets are blocked or forwarded between the LAN and the WAN.
P-335 Series User’s Guide Appendix G Log Descriptions 442 Appendix G Log Descriptions Configure centralized logs using the embedded web configurator; see online help for details. This appendix provides descrip tions of example log messages. Table 166 System Error logs LOG MESSAGE DESCRIPTION %s exceeds the max.
Table 168 UPnP Logs LOG MESSAGE DESCRIPTION UPnP pass through Firewall UPnP packets can pass through the firewall. Table 169 ICMP Type and Code Explanations TYPE CODE DESCRIPTION 0 Echo Reply 0 Echo r.
P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Addr ess 444 Appendix H Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed.
P-335 Series User’s Guide 445 Appendix H Setting up Your Compu ter’s IP Address Figure 289 WIndows 95/98 /Me: Networ k: Configu ration Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks.
P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Address 446 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect.
P-335 Series User’s Guide 447 Appendix H Setting up Your Compu ter’s IP Address Figure 291 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’ s IP address, remove previ ously installed gateways.
P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Address 448 Figure 292 Windows XP: S tart Menu 2 For W indows XP , click Network Connections . For W indows 2000/NT , click Network and Dial-up Connections . Figure 293 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .
P-335 Series User’s Guide 449 Appendix H Setting up Your Compu ter’s IP Address Figure 294 Windows XP: Control Panel: Network Connections: Proper ties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and click Properties .
P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Address 450 • If you have a static IP address click Us e the following IP Address and fill in the IP addr ess , Subnet mask , and Default gateway fields.
P-335 Series User’s Guide 451 Appendix H Setting up Your Compu ter’s IP Address 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain DNS se rver address automatically if you do not know your DNS server IP address(es ).
P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Address 452 Macintosh OS 8/9 1 Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Contr ol Panel . Figure 298 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list.
P-335 Series User’s Guide 453 Appendix H Setting up Your Compu ter’s IP Address Figure 299 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configur e: list. 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually .
P-335 Series User’s Guide Appendix H Setting up Your Computer’s IP Address 454 • Selec t Built-in Ethernet from the Show list. • Click the TCP/IP tab.
P-335 Series User’s Guide 455 Appendix H Setting up Your Compute r’s IP Address.
P-335 Series User’s Guide Appendix I Wireless LANs 456 Appendix I Wireless LANs Wireless LAN T opologies This section discusses ad-hoc and in frastructure w ireless LAN topologies. Ad-hoc Wireless LAN Configuration The simplest WLAN configuration is an inde pe ndent (Ad-hoc) WLAN that connects a set of computers with wireless stations (A, B, C).
P-335 Series User’s Guide 457 Appendix I Wireless LANs Figure 303 Basic Service Set ESS An Extended Service Set (ESS) consists of a series of overlappi ng BSSs, each containing an access point, with each access point connected together by a wired network.
P-335 Series User’s Guide Appendix I Wireless LANs 458 Figure 304 Infrastructure WLAN Channel A channel is the radio frequency(ies) used by IEEE 802.
P-335 Series User’s Guide 459 Appendix I Wireless LANs Figure 305 RTS / CT S When station A sends data to the AP , it might no t know that the station B is already using the channel.
P-335 Series User’s Guide Appendix I Wireless LANs 460 A large Fragmentation Thr eshold is recommended for networks not prone to interference while you should set a smaller threshold for busy networks or networks tha t are prone to interference.
P-335 Series User’s Guide 461 Appendix I Wireless LANs IEEE 802.1x In June 2001, the IEEE 802.1x st andard was designed to extend th e features of IEEE 802.1 1 to support extended authentication as well as providing additional accounting and control features.
P-335 Series User’s Guide Appendix I Wireless LANs 462 • Access-Challenge Sent by a RADIUS server requesting more information in order to allow access. The access point sends a proper response from the user and then sends another Access- Request message.
P-335 Series User’s Guide 463 Appendix I Wireless LANs 3 The wireless station replies with identity info rmation, including username and password. The RADIUS server checks the user informa tion against its user profile database and determines whether or not to au thenticate the wireless station.
P-335 Series User’s Guide Appendix I Wireless LANs 464 PEAP (Protected EAP) Like EAP-TTLS, server-side certific ate authentication is used to establish a secure connection, then use simple username and p assword methods thro ugh the secured co nnection to authenticate the clients, thus hiding client identity .
P-335 Series User’s Guide 465 Appendix I Wireless LANs Shared key authentication involves a four -mess age procedure. A wire less station sends a shared key authentication request to the AP , which will then reply with a challenge text message.
P-335 Series User’s Guide Appendix I Wireless LANs 466 Key differences between WP A(2) and WEP are improved data encryption and user authentication. Encryption Both WP A and WP A2 improve data encryption by using T emporal Key Integrity Protocol (TKIP), Message Integrity Check (MIC) and IE EE 802.
P-335 Series User’s Guide 467 Appendix I Wireless LANs Security Parameters Summary Refer to this table to see what other secur ity parameters you shou ld configure for each Authentication Method/ key management prot ocol type. MAC address filters are not dependent on how you config ure these security features.
P-335 Series User’s Guide Appendix I Wireless LANs 468 Figure 308 Roaming Example The steps below describe the roaming process. 1 As wireless station Y moves from the coverage area of access point P1 to that of access point 2 P2 , it scans and uses the si gnal of access point P2 .
P-335 Series User’s Guide 469 Appendix I Wireless LANs.
P-335 Series User’s Guide Appendix J Antenna Selection and Positioning Recommen dation 470 Appendix J Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air . A tran smitter within a wireless device sends an RF signal to the antenna, which propagates the signal through the air .
P-335 Series User’s Guide 471 Appendix J Antenna Sele ction and Positioning Recom mendation • Omni-directional antennas send the RF signal out in all directions on a horizontal p lane. The covera ge area is torus -shaped (lik e a donut) which makes these antennas ideal for a room environment.
P-335 Series User’s Guide Appendix K Br ute-Force Password G uessing Prot ection 472 Appendix K Brute-Force Password Guessing Protection The following describes the commands for enablin g, disabling and configuring the brute-force password guessing protect ion mechanism for the password.
P-335 Series User’s Guide 473 Appendix K Brute-Force Password Guessing Pro tection.
P-335 Series User’s Guide Appendix L Triang le Route 474 Appendix L T riangle Route The Ideal Setup When the firewall is on, your Prestige acts as a secure gateway between your LAN and the Internet. In an ideal network topology , all incoming and outgoing network traffic passes through the Prestige to protect your LAN against attacks.
P-335 Series User’s Guide 475 Appendix L Triangle Route Figure 310 “T riangle Route” Problem The “T riangle Route” Solutions This section presents you two solutions to the “triangle route” problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface.
P-335 Series User’s Guide Appendix L Triang le Route 476 Figure 31 1 IP Alias Gateways on the W AN Side A second solution to the “triangle route” problem is to put all of your network gateways on the W AN side as the following figure shows. This en sure s that all incoming network traffic passes through your Prestige to your LAN.
P-335 Series User’s Guide 477 Appendix L Triangle Route.
P-335 Series User’s Guide Index 478 Index Numerics 11 0 V A C 4 230V AC 4 802.1x 92 A Abnormal Working Conditions 5 AC 4 Accessories 4 Active 285 ActiveX 153 , 19 9 Acts of God 5 Address Resolution .
P-335 Series User’s Guide 479 Index Contact Information 6 Cont acting Cust omer Support 6 Content Filtering 152 Days and T imes 152 Restrict Web Features 152 Cookies 153 , 199 Copyright 2 Correcting.
P-335 Series User’s Guide Index 480 G Gas Pipes 4 Gateway 295 Gateway IP Addr 289 Gateway IP Address 280 General Setup 242 General wireless LAN screen 84 Germany , Contac t Informat ion 6 Global 134.
P-335 Series User’s Guide 481 Index My Password 279 , 285 My Server IP Addr 288 N Nailed-Up Connectio n 287 Nailed-up Connecti on 287 NA T 138 , 13 9 , 289 , 343 Applying NA T in the SMT Menus 296 C.
P-335 Series User’s Guide Index 482 Register ed 2 Registered Trademark 2 Regular Mail 6 Related Documentation 36 Relocate 3 Rem Node Name 285 Re-manufact ured 5 Remote Management Firewall 314 Remote.
P-335 Series User’s Guide 483 Index System Maintenance 249 , 350 , 352 , 359 , 363 , 366 , 371 , 374 , 375 , 37 6 , 379 System Name 267 System T imeout 21 9 T T ampering 5 TCP/IP 126 , 336 , 337 , 343 TCP/IP filter rule 336 T elecommu nication Line Co rd.
P-335 Series User’s Guide Index 484 WP A 88 Writ ten Permission 2 WWW 108 www .dyndns.org 268 Z ZyNOS 2 , 352 , 363 ZyNOS F/W V ersi on 352 , 363 ZyXEL Communications Corporation 2 ZyXEL Home Page 3.
An important point after buying a device ZyXEL Communications P-335WT (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought ZyXEL Communications P-335WT yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data ZyXEL Communications P-335WT - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, ZyXEL Communications P-335WT you will learn all the available features of the product, as well as information on its operation. The information that you get ZyXEL Communications P-335WT will certainly help you make a decision on the purchase.
If you already are a holder of ZyXEL Communications P-335WT, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime ZyXEL Communications P-335WT.
However, one of the most important roles played by the user manual is to help in solving problems with ZyXEL Communications P-335WT. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device ZyXEL Communications P-335WT along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
