Instruction/ maintenance manual of the product P-660H-D Series ZyXEL Communications
Go to page of 421
P-660R/H-D Series ADSL 2+ Gateway User ’ s Guide V ersion 3.40 1 1/2005 Edition 1.
.
P-660R/H-D Series User’s Guide Copyright 2 Copyright Copyright © 2005 by ZyXEL Communications Corpo ration. The contents of this publication may not be reprod uced in any part or as a whole, transc.
P-660R/H-D Series User’s Guide 3 Federal Communications Commission (FCC) Interfer ence Statement Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rul es. Operation is subject to the following two conditions: • This device may not cause harmful interference.
P-660R/H-D Series User’s Guide Federal Com munications Commission (FCC) Interf erence St atement 4 Certifications 1 Go to www .zyxel.com 2 Select your product from t he drop-down list box on the ZyXEL home page to g o to that product's page. 3 Select the certification you wish to view from this page.
P-660R/H-D Series User’s Guide 5 Safety Warnings Safety W arnings For your safety , be sure to read and fo llow all warning notices and instructions. • T o reduce the risk of fire, use only No. 26 A WG (American W ire Gauge) or larger telecommunication line cord.
P-660R/H-D Series User’s Guide ZyXEL Limited Warranty 6 ZyXEL Limited W arranty ZyXEL warrants to the original en d user (purchaser) that this product is free from any defects in materials or workmansh ip for a period of up to tw o years from the date of purchase .
P-660R/H-D Series User’s Guide 7 Customer Suppo rt Customer Support Please have the following information r eady when you contact customer support. • Product model and serial number . • W arranty Information. • Date that you received your device.
P-660R/H-D Series User’s Guide Customer Support 8 POLAND info@pl.zyxel.com +48-22-5286603 www .pl.zyxel.com ZyXEL Communications ul.Emilli Plater 53 00-1 13 W arszawa Poland +48-22-5206701 RUSSIA http://zyxel.ru/support +7-095-542- 89-29 www .zyxel.
P-660R/H-D Series User’s Guide 9 Customer Suppo rt.
P-660R/H-D Series User’s Guide Table of Contents 10 T able of Content s Copyright ....................................... ........................................... ................................ 2 Federal Communications Commissi on (FCC) Interference St atement .
P-660R/H-D Series User’s Guide 11 Table of Contents Chapter 4 Wizard Setup for Media Bandwid th Management ............................................... 58 4.1 Introduction ............................ ............. ............. ............ ....
P-660R/H-D Series User’s Guide Table of Contents 12 6.4 T r affic Shaping ....................... ............. ............. ................ ............. ............ ......... 73 6.5 Zero Configuration Internet Access ........ ............. ....
P-660R/H-D Series User’s Guide 13 Table of Contents 10.3.1 Denial of Service Attacks ..... .... ......... ............. ............. ............. ............. 100 10.4 Denial of Service .. ............ ............. ............. ................
P-660R/H-D Series User’s Guide Table of Contents 14 1 1.1 1 Anti-Probing ....... ............ ............. ................. ............ ............. ............. .......... 128 1 1.12 DoS Thres holds ................. ............. ............
P-660R/H-D Series User’s Guide 15 Table of Contents 15.4 SMTP Error Messages ............... .................... ................ ................ ................ 157 15.4.1 Example E-mail Log .... ................ ... .......... ............. ...
P-660R/H-D Series User’s Guide Table of Contents 16 Chapter 18 Introducing the SMT ........... .......................................... ....................................... 186 18.1 SMT Introduction ........................ ................ ...
P-660R/H-D Series User’s Guide 17 Table of Contents 23.2.2 Encapsulation and Multiplexing Scenarios . ................ ............. ............. 21 1 23.2.2.1 Scenario 1: One VC, Multiple P rotocols ............ ................ .......... 21 1 23.
P-660R/H-D Series User’s Guide Table of Contents 18 Chapter 27 Enabling the Firewall ......................................................................... .................. 246 27.1 Remote Management and the Firewall ... ................... ...
P-660R/H-D Series User’s Guide 19 Table of Contents 31.2 Backup Configuration . ................ ............. ............. ............. ................ ............. 277 31.2.1 Backup Config uration . ................ ............. .............
P-660R/H-D Series User’s Guide Table of Contents 20 34.5 Applying an IP Policy ........................ ................ ................ ................ ............. 302 34.5.1 Ethernet IP Policie s ....... ............. ............. ...........
P-660R/H-D Series User’s Guide 21 Table of Contents Appendix F IP Subnetting ............................................................................ ............................ 350 IP Addressing ................... ............. ............. .
P-660R/H-D Series User’s Guide Table of Contents 22 Command Examples .............. ................ ............. ............. ............. ................ ......... 395 Appendix M Log Descriptions ........................... ...................
P-660R/H-D Series User’s Guide 23 Table of Contents.
P-660R/H-D Series User’s Guide List of Figures 24 List of Figures Figure 1 Protected Internet A ccess Applications ................................ ................ ................ 42 Figure 2 LAN-to-LAN Applicat ion Example ............ ..........
P-660R/H-D Series User’s Guide 25 List of Figures Figure 39 SYN Flood .......... ............. ............. ............. ................ ............. ............. ............. ... 102 Figure 40 Smurf Attack ...................... .............
P-660R/H-D Series User’s Guide List of Figures 26 Figure 82 Dif fServ: Differentiated Service Fiel d .................. ............ ............. ................ ....... 170 Figure 83 Media Bandwidth Management: Class Configuration ..... .........
P-660R/H-D Series User’s Guide 27 List of Figures Figure 125 Menu 12 S tatic Route Setup ................... ................ ................... ................ ....... 223 Figure 126 Menu 12.1 IP S tatic Route Setup .. .......... ................
P-660R/H-D Series User’s Guide List of Figures 28 Figure 168 Filtering Remote Node T raffic . ...... ............. ............. ............. ................ ............. 260 Figure 169 SNMP Management Model . ............. ............. ........
P-660R/H-D Series User’s Guide 29 List of Figures Figure 21 1 Internet Options ................... ....... .......... ............. ............ ............. ................ ....... 31 8 Figure 212 Security Settings - Java Scripting .... .........
P-660R/H-D Series User’s Guide List of Figures 30 Figure 254 Displaying Log Cat egories Example ................. ................ ................... ............. 410 Figure 255 Displaying Log Parameters Example ................... ............. .
P-660R/H-D Series User’s Guide 31 List of Figures.
P-660R/H-D Series User’s Guide List of Tables 32 List of T ables T able 1 ADSL S tandards ................ ............. ............. ................ ............. ............. ............. ... 38 T able 2 Model S p ecific Features .............
P-660R/H-D Series User’s Guide 33 List of Tables T able 39 Firewall: Threshold .......... ................ ................ ............. ............. ............. ............. 132 T able 40 ......... ............. ............. ............ ....
P-660R/H-D Series User’s Guide List of Tables 34 T able 82 Menu12.1.1 Edit IP S tatic Route ................ ................ ................ ................ .......... 224 T able 83 Remote Node Network Layer Options: Br idge Fields ..............
P-660R/H-D Series User’s Guide 35 List of Tables T able 125 S ubnet 3 .............. ............. ............. ............. ................ ............. ............. ............ .3 5 4 T able 126 S ubnet 4 .............. ............. .......
P-660R/H-D Series User’s Guide Preface 36 Preface Congratulations on you r purchase of the P-66 0R/H-D series ADSL 2+ gateway . The P-660H has a 4-port switch that allows you to conn ect up to 4 computers to the Prestige without purchasing a switch/hub.
P-660R/H-D Series User’s Guide 37 Preface Embedded web help for descriptions of individual screens and supplementary information. • ZyXEL Glossary and W eb Site Please refer to www .zyxel.com for an online gl ossary of networking terms and additional support documentatio n.
P-660R/H-D Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 38 C HAPTER 1 Getting T o Know Y our Prestige This chapter describes the key features and applications of your Prestige .
P-660R/H-D Series User’s Guide 39 Chapter 1 Getting To Know Your Pr estige Note: See the product specifications in t he appendix for deta iled features and standards support. T able Key: An O in a mode’ s column shows that the device mode has the specified feature.
P-660R/H-D Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 40 Content Filtering Content filtering allows you to block access to fo rbidden Internet web sit es, schedule when the Prestige should perform the filtering and give trusted LAN IP addresses unfiltered Internet access.
P-660R/H-D Series User’s Guide 41 Chapter 1 Getting To Know Your Pr estige DHCP DHCP (Dynamic Host Configuration Protocol ) al lows the individual clients (computers) to obtain the TCP/IP configuration at start-up from a centralized DHCP server . The Prestige has built-in DHCP server capability enab led by default.
P-660R/H-D Series User’s Guide Chapter 1 Getting To Kn ow Your Prestige 42 1.3.1 Protected Internet Access The Prestige is the ideal high-speed Internet acc ess solution. It is comp atible with all major ADSL DSLAM (Digital Subscriber Line Acces s Multiplexer) provider s and supports the ADSL standards as shown in T able 1 on pa ge 38 .
P-660R/H-D Series User’s Guide 43 Chapter 1 Getting To Know Your Pr estige Figure 3 Front Panel The following table describes the LEDs. 1.5 Hardware Connection Refer to the Quick S tart Guide for in formation on hard ware connection.
P-660R/H-D Series User’s Guide Chapter 2 Introducing the Web Configur ator 44 C HAPTER 2 Introducing the W eb Configurator This chapter describes how to access and navigate the web configurator .
P-660R/H-D Series User’s Guide 45 Cha pter 2 Introducing the Web Configurator 6 It is highly recommended you change th e default password! Enter a new password between 1 and 30 characters, re type it to confirm and click Apply ; alternatively click Ignore to proceed to the main menu if you do not want to change the password now .
P-660R/H-D Series User’s Guide Chapter 2 Introducing the Web Configur ator 46 • Click a link un der Maintenance to se e Prestige performance statistics, upload firmware and back up, rest ore or upload a configura tion file. • Click Site Map to go to the Site Map screen.
P-660R/H-D Series User’s Guide 47 Cha pter 2 Introducing the Web Configurator Firewall (P-660H-D only) Default Policy Use this screen to activate /deactivate the fire wall and the direction of network traffic to which to apply the rule. Rule Summary This screen shows a summary of the fi rewall rules, and allows you to edit/add a firewall rule.
P-660R/H-D Series User’s Guide Chapter 2 Introducing the Web Configur ator 48 2.2 Change Login Password It is highly recommended that you periodic ally change the password for accessing the Prestige.
P-660R/H-D Series User’s Guide 49 Cha pter 2 Introducing the Web Configurator.
P-660R/H-D Series User’s Guide Chapter 3 Wizard Setup for Internet Access 50 C HAPTER 3 W izard Setup for Internet Access This chapter provides informatio n on the W izard Setup screens for Internet access in the web configurator .
P-660R/H-D Series User’s Guide 51 Chapter 3 W izard Set up for Inte rnet Access 2 The next wizard screen varies depending on wh at mode and encapsulation ty pe you use. All screens shown are with routing mode. Configure the fields and click Next to continue.
P-660R/H-D Series User’s Guide Chapter 3 Wizard Setup for Internet Access 52 Figure 10 Internet Connection with RFC 1483 The following table describes the fields in this screen. Table 7 Internet Connection with PPPoE LABEL DESCRIPTION Service Name T ype the name of your PPPoE service here.
P-660R/H-D Series User’s Guide 53 Chapter 3 W izard Set up for Inte rnet Access Figure 1 1 Internet Connectio n with ENET ENCAP The following table describes the fields in this screen. Back Click Back to g o back to the first wizard screen. Next Click Next to continue to the next wizard screen.
P-660R/H-D Series User’s Guide Chapter 3 Wizard Setup for Internet Access 54 Figure 12 Internet Connection with PPPoA The following table describes the fields in this screen. Table 10 Internet Connection with PPPoA LABEL DESCRIPTION User Name Ente r the login name that your ISP gi ves you.
P-660R/H-D Series User’s Guide 55 Chapter 3 W izard Set up for Inte rnet Access 3 V erify the settings in the screen shown next. T o change the LAN information on the Prestige, click Change LAN Configurations . Otherwise cli c k Save Settings to save the configuration and skip to the section 3.
P-660R/H-D Series User’s Guide Chapter 3 Wizard Setup for Internet Access 56 The following table describes the fields in this screen. 4 The Prestige automatically tests the connectio n to the computer(s) connected to the LAN ports. T o test the connection from the Prestige to the ISP , click S tart Diagnose .
P-660R/H-D Series User’s Guide 57 Chapter 3 W izard Set up for Inte rnet Access.
P-660R/H-D Series User’s Guide Chapter 4 Wiza rd Setup fo r Media Ban dwidth Ma nagement 58 C HAPTER 4 Wizard Setup for Media Bandwid th Management This chapter shows you h ow to configure basic bandwidth management usin g the wizard screens. This chapter applies to the P-660H-D.
P-660R/H-D Series User’s Guide 59 Chapter 4 Wizard Setup for Media Ban dwidth Management 4.2 Media Bandwid th Management Setup 1 Click Media Bandwidth Mgnt.
P-660R/H-D Series User’s Guide Chapter 4 Wiza rd Setup fo r Media Ban dwidth Ma nagement 60 The following table describes the labels in this screen. 2 The Prestige automatically creates the band width class for each service you select. Y ou may set the priority for each bandwidt h class in the second wiza rd screen.
P-660R/H-D Series User’s Guide 61 Chapter 4 Wizard Setup for Media Ban dwidth Management 3 W ell done! Y ou have finished config uratio n of Media Bandwidth Managemen t. Y ou m ay now continue configu ring your device. Click Return to Main Menu to return to the Site Map screen.
P-660R/H-D Series User’s Guide Chapter 5 LAN Setup 62 C HAPTER 5 LAN Setup This chapter describes how to configure LAN settings. 5.1 LAN Overview A Local Area Network (LAN) is a shared comm unication system to which many computers are attached.
P-660R/H-D Series User’s Guide 63 Chapter 5 LAN Setup 5.1.2 DHCP Setup DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at star t-up from a server . Y ou can configure the Prestige as a DHCP server or disable it.
P-660R/H-D Series User’s Guide Chapter 5 LAN Setup 64 There are two ways that an ISP disseminates the DNS se rver addresses. • The ISP tells you the DNS server addresses, us ually in the form of an information sheet, when you sign up. If your ISP gives you DNS server addresses, enter them in the DNS Server fields in the LAN Setup screen.
P-660R/H-D Series User’s Guide 65 Chapter 5 LAN Setup 5.2.1.1 Private IP Addresses Every machine on the Internet must ha ve a unique address. If your ne tworks are isolate d from the Internet, for example, only between your two branch of fice s, you can assign any IP addresses to the hosts without problems.
P-660R/H-D Series User’s Guide Chapter 5 LAN Setup 66 5.2.3 Multicast T raditionally , IP packets are transmitted in one of either two ways - Unicast (1 sender - 1 recipient) or Broadcast (1 sender - everybody on the network). Multicast delivers IP packets to a group of ho sts on the n etwork - not everybo dy and not just 1.
P-660R/H-D Series User’s Guide 67 Chapter 5 LAN Setup Figure 20 Any IP Example The Any IP fe ature does not apply to a computer using either a dynami c IP address or a static IP address that is in the same subnet as the Prestige’ s IP address. Note: Y ou must enable NA T/SUA to use the Any IP feature on the Prest ige.
P-660R/H-D Series User’s Guide Chapter 5 LAN Setup 68 5.3 Configuring LAN Click LAN to open the LAN Setup screen. See Section 5.1 on page 62 for background information.
P-660R/H-D Series User’s Guide 69 Chapter 5 LAN Setup Size of Client IP Pool This field specifies the size or count of the IP address pool. Primary DNS Server Enter the IP addresses of the DNS se rvers. The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask.
P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 70 C HAPTER 6 W AN Setup This chapter describes how to configure W AN settings. 6.1 W AN Overview A W AN (W ide Area Network) is an outside conn ection to another network or the Internet. 6.1.1 Encap sulation Be sure to use the encapsulat ion method required by your IS P .
P-660R/H-D Series User’s Guide 71 Chapter 6 WAN Setup 6.1.1.4 RFC 1483 RFC 1483 describes two methods for Multipro tocol Encapsulation over A TM Adaptation Layer 5 (AAL5).
P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 72 6.1.4.2 IP Assignment wi th RFC 1483 Encap sulation In this case the IP Address Assignment must be static with the same requirements for the IP Address an d ENET ENCAP Gateway fiel ds as stated above.
P-660R/H-D Series User’s Guide 73 Chapter 6 WAN Setup For example, if the normal route has a metric of "1" and the traffic-redirect route has a metric of "2" and dial-backup route has a metric of "3", then the normal route acts as the primary default route.
P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 74 Sustained Cell Rate (SCR) is the mean cell rate of each bursty traf fic source. It specifies the maximum average rate at whic h cells can be sent over the virtual connection. SCR may not be greater than the PCR.
P-660R/H-D Series User’s Guide 75 Chapter 6 WAN Setup Figure 23 WA N The following table describes the links in this screen. 6.7 Configuring W AN Setup T o change your Prestige’ s W A N remote node settings, click WA N and W AN Setup . The screen dif fers by the encapsulation.
P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 76 Figure 24 W AN Setup (PPPoE) The following table describes th e fields in this screen. Table 17 WAN Se tu p LABEL DESCRIPTION Name Enter the name of your Internet Service Provider , e.g., MyISP .
P-660R/H-D Series User’s Guide 77 Chapter 6 WAN Setup Encapsulation Select th e method of encapsulatio n used by your ISP from the drop-down list box. Choices vary depending on the mode you select in th e Mode field. If you select Bridge in the Mode field, select either PPPoA or RFC 1483 .
P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 78 6.8 T raffic Redirect T raffic redirect forwards traffic to a backup gateway when the Prestige cannot connect to the Internet. An exampl e is shown in th e figure below . Max Idle Timeout S pecify an idle time-out in the Max Id le Timeout field when you select Connect on Demand .
P-660R/H-D Series User’s Guide 79 Chapter 6 WAN Setup Figure 25 T raffic Redirect Example The following network topology allows you to avoid triangle route security issues when the backup gateway is conn ected to the LAN.
P-660R/H-D Series User’s Guide Chapter 6 WAN Setup 80 Figure 27 W AN Backup The following table describes th e fields in this screen. Table 18 WAN Ba ck up LABEL DESCRIPTION Backup T ype Select the method tha t the Pr estige uses to check the DSL con nection.
P-660R/H-D Series User’s Guide 81 Chapter 6 WAN Setup T imeout T ype the number of seconds (3 recommended) for your Prestige to wait for a ping response from one of the IP addresses in the Check W AN IP Address field before timing out the request.
P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 82 C HAPTER 7 Network Address T ranslation (NA T) Screens This chapter discusses how to configure NA T on the Prestige.
P-660R/H-D Series User’s Guide 83 Chapter 7 Network Address Transla tion (NAT) Scr eens 7.1.2 What NA T Does In the simplest form, NA T changes the sour ce IP address in a packet received from a subscriber (the inside local address) to anothe r (the inside global address) before forwarding the packet to the W A N side.
P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 84 7.1.4 NA T Ap plication The following figure illustrates a possible NA T application, wher e three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct W AN networks.
P-660R/H-D Series User’s Guide 85 Chapter 7 Network Address Transla tion (NAT) Scr eens Port numbers do NOT change for One-to-One and Many-to-Many No Overload NA T mapping types.
P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 86 Y ou may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server . The port number identifies a service; for example, web service is on port 80 and FTP on port 21.
P-660R/H-D Series User’s Guide 87 Chapter 7 Network Address Transla tion (NAT) Scr eens 7.3.3 Configuring Ser vers Behind SUA (Example) Let's say you want to assign po rts 21-25 to one FTP , T elnet and SMTP server (A in the example), port 80 to another (B in the exam ple) and assign a default server IP address of 192.
P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 88 The following table describes the labels in this screen. 7.5 Configuring SUA Server Set If you do not assign an.
P-660R/H-D Series User’s Guide 89 Chapter 7 Network Address Transla tion (NAT) Scr eens Figure 32 Edit SUA/NA T Server Set The following table describes th e fields in this screen. T able 23 Edit SUA/NA T Server Set LABEL DESCRIPTION S tart Port No.
P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 90 7.6 Configuring Address Mapping Rules Ordering your rules is important because the Pr estige applies the rules in the order that you specify .
P-660R/H-D Series User’s Guide 91 Chapter 7 Network Address Transla tion (NAT) Scr eens 7.7 Editing an Address Mapping Rule T o edit an address mapping rule, click the rule’ s link in the NA T Address Mapping Rules screen to display the screen sh own next.
P-660R/H-D Series User’s Guide Chapter 7 Network Address Transla tion (NAT) Screens 92 The following table describes th e fields in this screen. Table 25 Edit Address Ma pping Rule LABEL DESCRIPTION Ty p e Choose the port mappi ng type from one of the follow ing.
P-660R/H-D Series User’s Guide 93 Chapter 7 Network Address Transla tion (NAT) Scr eens.
P-660R/H-D Series User’s Guide Chapter 8 Dynamic DNS Setup 94 C HAPTER 8 Dynamic DNS Setup This chapter discusses how to configure your Prestige to use Dynamic DNS.
P-660R/H-D Series User’s Guide 95 Chapter 8 Dynamic DNS Setup Figure 35 Dynamic DNS The following table describes th e fields in this screen. Table 26 Dynamic DNS LABEL DESCRIPTION Active Select this check box to use dynamic DNS. Service Provider This is the name of yo ur Dynamic DNS service p rovider .
P-660R/H-D Series User’s Guide Chapter 9 Time and Date 96 C HAPTER 9 T ime and Date This screen is not available on all models. Us e this screen to configur e the Prestige’ s time and date settings. 9.1 Configuring T ime and Date T o change your Prestige’ s time and date, click Time And Date .
P-660R/H-D Series User’s Guide 97 Chapter 9 Time and Date Table 27 T ime and Date LABEL DESCRIPTION T ime Server Use Protocol when Bootup Select the time service protocol that your time server sends w hen you turn on the Prestige.
P-660R/H-D Series User’s Guide Chapter 10 Firewalls 98 C HAPTER 10 Firewalls This chapter gives some backgr ound information on firewalls and introduces the Prestige firewall.
P-660R/H-D Series User’s Guide 99 Chapter 10 Firewalls 10.2.2 Application-level Firewalls Application-level firewalls restrict access by serv ing as proxies for e xternal servers. Since they use programs written for specific Internet servic es, such as HTTP, FTP and tel net, they can evaluate network packets for valid applicatio n-sp ecific data.
P-660R/H-D Series User’s Guide Chapter 10 Firewalls 100 • The LAN (Local Area Network) port attaches to a network of computers, which ne eds security from the outside world. These computer s will have access to Internet services such as e-mail, FTP , and the W orld W ide W e b.
P-660R/H-D Series User’s Guide 101 Chapter 10 Firewalls 10.4.2 T ypes of DoS Attacks There are four types of DoS attacks: 1 Those that exploit bugs in a TCP/IP implementation. 2 Those that exploit weaknesses in the TCP/IP specification. 3 Brute-force attacks that flood a network with useless data.
P-660R/H-D Series User’s Guide Chapter 10 Firewalls 102 Figure 38 Three-W ay Handshake Under normal circumstances, the applica tion that initiates a session sends a SYN (synchronize) packet to the receiving server .
P-660R/H-D Series User’s Guide 103 Chapter 10 Firewalls the broadcast address of the network, the router will broadcast the ICMP echo request packet to all hosts on the network. If there are numerous hosts, this will create a large amount of ICMP echo request and response traffic.
P-660R/H-D Series User’s Guide Chapter 10 Firewalls 104 All SMTP commands are illegal except for tho se displayed in the following tables. 10.4.2.3 T racero ute T raceroute is a utility used to determine th e path a packet takes between two endpoints.
P-660R/H-D Series User’s Guide 105 Chapter 10 Firewalls Figure 41 S tateful Inspection The previous figure shows the Prestige’ s default firewall rules in action as well as demonstrates how stateful inspection works. User A can initiate a T elnet session from within the LAN and responses to this request are allowe d.
P-660R/H-D Series User’s Guide Chapter 10 Firewalls 106 temporary entries might be modified, in order to permit only packets that a re valid for the current state of the co nnection.
P-660R/H-D Series User’s Guide 107 Chapter 10 Firewalls When the Prestige receives any subsequent packet (from the In ternet or from the LAN), its connection information is extracted and checked against the cache.
P-660R/H-D Series User’s Guide Chapter 10 Firewalls 108 • Limit who can telnet into your router . • Don't enable any local service (such as SN MP or NTP) that you don't use. An y enabled service could present a potential sec urity risk.
P-660R/H-D Series User’s Guide 109 Chapter 10 Firewalls • Always shred confidential in formation, particularly about your computer , before throwing it away . Some hackers dig through the trash of companies or individuals for information that might he lp them in an attack.
P-660R/H-D Series User’s Guide Chapter 10 Firewalls 110 • A range of source and destination IP ad dress es as well as port numbers can be specified within one firewall rule making the fire wall a better choice when complex rules are required.
P-660R/H-D Series User’s Guide 111 Chapter 10 Firewalls.
P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 12 C HAPTER 11 Firewall Configuration This chapter shows you how to enable and configure the Prestige firewall. 1 1.1 Access Methods The web configurator is, by far , the most co mprehensive firewall configuration tool your Prestige has to offer .
P-660R/H-D Series User’s Guide 113 Chapter 11 Firewall Configuration Note: If you configure firewall rules wit hout a good underst anding of how they work, you might inadvertently introduce securi ty risks to the f irewall and to the protected network.
P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 14 4 Does a rule that allows Internet users acces s to resources on the LAN create a security vulnerability? For example, if FTP ports (TCP 20, 21) are al lowed from the Internet to the LAN, Internet users may be able to connect to computers with running FTP servers.
P-660R/H-D Series User’s Guide 115 Chapter 11 Firewall Configuration The default rule for W AN to LAN traffic bloc ks all incoming connections (W AN to LAN). If you wish to allow certain W A N users to have access to your LAN, you will need to create custom rules to allow it.
P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 16 Figure 42 Firewall: Default Policy The following table describes the labels in this screen. 1 1.6 Rule Summary Note: The ordering of your rule s is very important as rules are applie d in turn.
P-660R/H-D Series User’s Guide 117 Chapter 11 Firewall Configuration Click on Fire wall , then Rule Summary to bring up the following screen. This screen is a summary of the existing rules. Note the order in which the rules are listed. Figure 43 Firewall: Rule Summary The following table describes the labels in this screen.
P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 18 1 1.6.1 Configuring Firewall Rules Refer to Section 10.1 on page 98 for more information. Follow these directions to create a new rule. 1 In the Rule Summary screen, type the index number for where you want to put the rule.
P-660R/H-D Series User’s Guide 119 Chapter 11 Firewall Configuration Figure 44 Firewall: Edit Rule The following table describes the labels in this screen.
P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 20 Table 34 Firewall: Edit Rule LABEL DESCRIPTION Active Select this option to ena ble this firewall rule. Action for Matched Packet Use the radio button to select whether to discard ( Block ) or allow th e passage of ( Forward ) packets that match this rule.
P-660R/H-D Series User’s Guide 121 Chapter 11 Firewall Configuration 1 1.7 Customized Services Configure customized services and port numbers not predefined by the Prestige. For a comprehensive list of port numbers and services, visit the IANA (Internet Assigned Number Authority) website.
P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 22 Refer to Section 10.1 on page 98 for more information. Figure 46 Firewall: Configure Customized Services The following table describes the labels in this screen.
P-660R/H-D Series User’s Guide 123 Chapter 11 Firewall Configuration Figure 47 Firewall Example: Rule Summary 3 In the Rule Summary screen, type the index number for where you want to put the rule. For example, if you type “6”, your new rule becomes number 6 and the previous rule 6 (i f there is one) becomes rule 7.
P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 24 Figure 48 Firewall Example: Edit Ru le: Des tination Addres s 7 In the Edit Rule screen, click the Customized Servic es link to open the Customized Service screen.
P-660R/H-D Series User’s Guide 125 Chapter 11 Firewall Configuration Figure 50 Firewall Example: Edit Rule: Select Customized Services Note: Custom ports show up with an “*” before their names in the Services list box and the Rule Summary list box.
P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 26 Rule 2 allows a “My Service” connection fro m the W AN to IP addresses 10.0.0.10 through 10.0.0.15 on the LAN. Figure 51 Firewall Example: Rule Summary: My Service 1 1.10 Predefined Services The A vailable Services list box in the Edit Ru le screen (see Section 1 1.
P-660R/H-D Series User’s Guide 127 Chapter 11 Firewall Configuration CU-SEEME(TCP/UDP:7648, 24032) A popular videocon ferencing so lution from White Pines So ftware. DNS(UDP/TCP:53) Domain Name Server , a servi ce that matches web names (e.g. www .zyxel.
P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 28 1 1.1 1 Anti-Probing If an outside user attempts to probe an unsupp orted port on your Prestige, an ICMP respon se packet is automatically returned. This allows the outside user to know the Prestige exists.
P-660R/H-D Series User’s Guide 129 Chapter 11 Firewall Configuration Figure 52 Firewall: Anti Probing The following table describes the labels in this screen. 1 1.12 DoS Thresholds For DoS attacks, the Prestige uses thresholds to determine whe n to drop sessions that do not become fully established.
P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 30 1 1.12.1 Threshold V alues T une these para meters when some thing is not working and after y ou have checked the firewall counters. These default values sh ould work fine for most small offices.
P-660R/H-D Series User’s Guide 131 Chapter 11 Firewall Configuration Whenever the number of half-o pen sessions with the same destin ation host address rises above a threshold ( TCP Maximum Incomple.
P-660R/H-D Series User’s Guide Chapter 11 Firewall Configuration 1 32 Table 39 Firewall: Thre shold LABEL DESCRIPTION DEF AUL T V ALUES Denial of Service Thresholds One Minute Low This is the rate of new half-open sessions that causes the firewall to stop deleting hal f-open sessions.
P-660R/H-D Series User’s Guide 133 Chapter 11 Firewall Configuration Deny new connection request for Select this radio button and specify for how long the Prestige should block new connection requests when TCP Maximum Incomplete is reached. Enter the length of blocking time in minutes (between 1 and 256).
P-660R/H-D Series User’s Guide Chapter 12 Content Filtering 134 C HAPTER 12 Content Filtering This chapter covers how to configure content f iltering. This chapter ap plies to the P-660H-D. 12.1 Content Filtering Overview Internet content filtering allows you to create and enforce Internet access policies tailored to your needs.
P-660R/H-D Series User’s Guide 135 Chapter 12 Content Filtering 12.3 Configuring Keyword Blocking Use this screen to block sites containing certai n keywords in the URL. For example, if you enable the keyword "bad", the Prestige blocks all sites contai ning this keyword including the URL http://www .
P-660R/H-D Series User’s Guide Chapter 12 Content Filtering 136 12.4 Configuring the Schedule T o set the days and times for the Prestige to perform content filtering, click Content Filter and Schedule . The screen appears as shown. Figure 56 Content Filter: Schedule The following table describes the labels in this screen.
P-660R/H-D Series User’s Guide 137 Chapter 12 Content Filtering Figure 57 Content Filter: T rusted The following table describes the labels in this screen.
P-660R/H-D Series User’s Guide Chapter 13 Remote Management Configura tion 138 C HAPTER 13 Remote Management Configuration This chapter provides information on config uring remote management.
P-660R/H-D Series User’s Guide 139 Chapter 13 Remote Manag ement Configuration • A filter in SMT menu 3.1 (LAN) or in menu 1 1.5 (W AN) is applied to block a T elnet, FTP or W eb service. • Y ou have disabled that service in one of the remote management screens.
P-660R/H-D Series User’s Guide Chapter 13 Remote Management Configura tion 140 13.3 FTP Y ou can upload and download Prestige firmware and configuration files using FTP . T o use this feature, your computer must have an FTP client. 13.4 W e b Y ou can use the Prestige’ s embedded web configurator for config uration and file management.
P-660R/H-D Series User’s Guide 141 Chapter 13 Remote Manag ement Configuration.
P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 142 C HAPTER 14 Universal Plug-and-Play (UPnP) This chapter introduces the UPnP feature in the web configura tor .
P-660R/H-D Series User’s Guide 143 Chapter 14 Universa l Plug-and-Play (UPnP) 14.1.3 Cautions with UPnP The automated nature of NA T traversal applications in establishing their own services and opening firewall ports ma y present network security issues.
P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 144 14.3 Inst alling UPnP in Windows Example This section shows ho w to install UPnP in W indows Me and W indows XP . Inst alling UPnP in Windows Me Follow the steps below to inst all the UPnP in W indows Me.
P-660R/H-D Series User’s Guide 145 Chapter 14 Universa l Plug-and-Play (UPnP) Figure 61 Add/Remove Programs: Windo ws Setup: Communication 3 In the Communications window , select the Universal Plug and Play check bo x in the Components selection box.
P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 146 Inst alling UPnP in Windows XP Follow the steps below to install the UPnP in Windows XP .
P-660R/H-D Series User’s Guide 147 Chapter 14 Universa l Plug-and-Play (UPnP) 5 In the Networking Services window , select the Universal Plug and Play check box. Figure 65 Networking Servic es 6 Click OK to go back to the W indows Optional Networking Component W izard window and click Next .
P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 148 Figure 66 Network Connections 3 In the Internet Connection Properties window , click Settings to see the port mappings there were automatically created.
P-660R/H-D Series User’s Guide 149 Chapter 14 Universa l Plug-and-Play (UPnP) Figure 67 Internet Co nnection Prop erties 4 Y ou may edit or delete the port mappings o r click Add to manually add port mappings.
P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 150 Figure 68 Internet Connection Properties: Advanced Settin gs Figure 69 Internet Connection Properties: Advanced Settin gs: Add 5 When the UP nP-enabled device is disco nnected from your computer , all port mapping s will be deleted automatically .
P-660R/H-D Series User’s Guide 151 Chapter 14 Universa l Plug-and-Play (UPnP) Figure 70 System T ray Icon 7 Double-click on the icon to display yo ur curr ent Internet co nnection status.
P-660R/H-D Series User’s Guide Chapter 14 Univer sal Plug-and-Play (UPnP) 152 Figure 72 Network Connections 4 An icon with the description for e ach UPnP-enabled device disp lays under Local Network . 5 Right-click on the icon for your Prestige and select Invoke .
P-660R/H-D Series User’s Guide 153 Chapter 14 Universa l Plug-and-Play (UPnP) Figure 73 Network Con nections: M y Network Places 6 Right-click on the icon for your Prestige and select Pr operties . A properties window displays with basic information about the Prestige.
P-660R/H-D Series User’s Guide Chapter 15 Logs Scr eens 154 C HAPTER 15 Logs Screens This chapter contains inform ation about configuring genera l log settings and viewing the Prestige’ s logs. Refer to the appendix for ex ample log message e xplan ations.
P-660R/H-D Series User’s Guide 155 Chapter 15 Logs Scree ns Figure 75 Log Settings The following table describes the fields in this screen. Table 46 Log Settings LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e-mail addresses specified below .
P-660R/H-D Series User’s Guide Chapter 15 Logs Scr eens 156 15.3 Displaying the Logs Click Logs and then Vi e w L o g to open the Vi e w L o g s screen. Us e the Vi e w L o gs screen to see the logs for the categorie s that you selected in the Log Settings screen (s ee Section 15.
P-660R/H-D Series User’s Guide 157 Chapter 15 Logs Scree ns Figure 76 Vi ew Logs The following table describes the fields in this screen. 15.4 SMTP Error Messages If there are d iffic ulties in se nding e-mail th e following erro r messages appear .
P-660R/H-D Series User’s Guide Chapter 15 Logs Scr eens 158 15.4.1 Example E-mail Log An "End of Log" message displays for each ma il in which a complete log has been sent. The following is an example of a log sent by e-mail. • Y ou may edit the subject title.
P-660R/H-D Series User’s Guide 159 Chapter 15 Logs Scree ns.
P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 160 C HAPTER 16 Media Bandwid th Management Advanced Setup This chapter describes bandwidth management wi th one level of child class. This chapte r applies to the P-660H-D.
P-660R/H-D Series User’s Guide 161 C hapter 16 Media Bandwidth Man agement Advanced Setup 16.2 Bandwid th Classes and Filters Use bandwidth classes and child-classes to alloca te spe cific amounts of bandwidth capacity (bandwidth budgets).
P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 162 Figure 78 Subnet-based Bandwid th Management Example 16.6 Application and Subnet-based Bandwid th Management Y ou could also create bandwidth clas ses based on a combination of a subnet and an application.
P-660R/H-D Series User’s Guide 163 C hapter 16 Media Bandwidth Man agement Advanced Setup 16.7.2 Fairness-based Scheduler The Prestige divides b andwidth equally among bandwidth classes when using the fairness- based scheduler; thus preventing one bandwidth class from using all of the interface’ s bandwidth.
P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 164 16.7.5 Maximize Ba ndwid th Usag e Example Here is an example of a Prestige that has ma ximize bandwidth usage enabled on an interface. The following table shows each bandwidth class’ s bandwidth budget.
P-660R/H-D Series User’s Guide 165 C hapter 16 Media Bandwidth Man agement Advanced Setup • Research requires more bandwidth but only gets its budgeted 20 48 kbps because all of the unbudgeted and unu sed bandwidth go es to the higher priority sales and marketing classes.
P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 166 16.8.1 Bandwid th Borrowing Example Here is an example of bandw idth manageme nt with cla sses configured for bandwidth borrowing. The classes are set up based on de partments and individuals within certain departmen ts.
P-660R/H-D Series User’s Guide 167 C hapter 16 Media Bandwidth Man agement Advanced Setup Figure 79 Media Bandwid th Mgnt. The following table describes the links in this screen. 16.1 1 Configuring Summary Click Media Bandwidth Management , Summary to open the screen as shown next.
P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 168 The following table describes the labels in this screen. 16.12 Configuring Class Setup The class setup screen displays the configured band width classes by individual interface.
P-660R/H-D Series User’s Guide 169 C hapter 16 Media Bandwidth Man agement Advanced Setup Figure 81 Media Bandwid th Management: Class Setup The following table describes the labels in this screen.
P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 170 DSCP is backward compatible with the three precedence bits in the T oS octet so that non- DiffServ compliant , T oS-enabled network device will not conflict with the DSCP mapping.
P-660R/H-D Series User’s Guide 171 C hapter 16 Media Bandwidth Man agement Advanced Setup Figure 83 Media Bandwid th Management: Class Configuration The following table describes the labels in this screen.
P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 172 Enable DiffServ Marking Select this option to enable DiffServ marking on the Prestige. DiffServ Mark Select the marking rule from the drop-do wn list. The first three digits are the DiffServ code point.
P-660R/H-D Series User’s Guide 173 C hapter 16 Media Bandwidth Man agement Advanced Setup 16.12.3 Media Ba ndwidth Ma nagement S tatis tics Use the Media Bandwidth Management S tatistics screen to view network performance information. Click the S tatistics button in the Clas s Setup screen to open the St a t i s t i c s screen.
P-660R/H-D Series User’s Guide Chapter 16 M edia Bandwid th Manage ment Advan ced Setup 174 The following table describes the labels in this screen. 16.13 Bandwid th Monitor T o view the Pres tige’ s bandwidt h usage and allotments, click Media Bandwidth Management , then Monitor .
P-660R/H-D Series User’s Guide 175 C hapter 16 Media Bandwidth Man agement Advanced Setup The following table describes the labels in this screen. T able 60 Media Bandwidth Mana gement: Monitor LABEL DESCRIPTION Interface Select an interface from the drop-down li st box to view the bandwidth usage of its bandwidth classes.
P-660R/H-D Series User’s Guide Chapter 17 Maintenance 176 C HAPTER 17 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics.
P-660R/H-D Series User’s Guide 177 Chapter 17 Maintenance Figure 86 System S tatus The following table describes th e fields in this screen. Table 61 System S tatus LABEL DESCRIPTION System S tatus System Name This is the name of yo ur Prestige. It is for identification purposes.
P-660R/H-D Series User’s Guide Chapter 17 Maintenance 178 17.2.1 System St atistics Click Show S tatistics in the System S tatus scre en to open the following screen. Read-only information here includes port status and packet specific statistics. Also provided are "system up time" and "poll interval(s)".
P-660R/H-D Series User’s Guide 179 Chapter 17 Maintenance The following table describes th e fields in this screen. 17.3 DHCP T able Screen DHCP (Dynamic Host Configuration Protocol , RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at star t-up from a server .
P-660R/H-D Series User’s Guide Chapter 17 Maintenance 180 Figure 88 DHCP T able The following table describes th e fields in this screen. 17.4 Any IP T able Screen Click Maintenance , Any IP .
P-660R/H-D Series User’s Guide 181 Chapter 17 Maintenance 17.5 Diagnostic Screens These read-only screens display information to help you identify proble ms with the Prestige. 17.5.1 General Diagnostic Click Diagnostic and then General to open the screen sho wn next.
P-660R/H-D Series User’s Guide Chapter 17 Maintenance 182 The following table describes th e fields in this screen. 17.5.2 DSL Line Diagnostic Click Diagnostic and then DSL Line to o pen the screen shown next.
P-660R/H-D Series User’s Guide 183 Chapter 17 Maintenance The following table describes th e fields in this screen. 17.6 Firmware Upgrade Find firmware at www .zyxel.com in a file that (usually) uses the system model name with a.bin extension, for example, "Prestige.
P-660R/H-D Series User’s Guide Chapter 17 Maintenance 184 Figure 92 Firmware Upg rade The following table describes the labels in this screen. Note: Do NOT turn off th e Prestige while firmware upload is in progress! After you see the Firmware Upload in Pr ocess screen, wait two minutes before logging into the Prestige again.
P-660R/H-D Series User’s Guide 185 Chapter 17 Maintenance Figure 94 Error Message.
P-660R/H-D Series User’s Guide Chapter 18 Intro ducing the SMT 186 C HAPTER 18 Introducing the SMT This chapter explains how to access and naviga te the System Management T erminal and gives an overview of its menus.
P-660R/H-D Series User’s Guide 187 C hapter 18 In troducing the SM T 18.1.3 Prestige SMT Menus Overview The following table gi ves you an overview o f your Prestige’ s various SMT menus. Table 68 SMT Menus Overview MENUS SUB MENUS 1 General Setup 1 .
P-660R/H-D Series User’s Guide Chapter 18 Intro ducing the SMT 188 18.2 Navigating the SMT Interface The SMT (System Manage ment T erminal) is the interface that you use to configure your Prestige. Several operations that you should be fam iliar with before you a ttempt to modify the configuration are listed in the table below .
P-660R/H-D Series User’s Guide 189 C hapter 18 In troducing the SM T After you enter the password, the SMT di splays the main menu, as shown next. 18.2.1 System Manage ment T erminal Interface Summary Entering information T ype in or press [SP ACE BAR], then press [ENTER].
P-660R/H-D Series User’s Guide Chapter 18 Intro ducing the SMT 190 18.3 Changing the System Password Change the P restige defa u lt password by following the steps show n next. 1 Enter 23 in the main menu to display Menu 23 - System Password as shown next.
P-660R/H-D Series User’s Guide 191 C hapter 18 In troducing the SM T.
P-660R/H-D Series User’s Guide Chapter 19 Menu 1 General Setup 192 C HAPTER 19 Menu 1 General Setup Menu 1 - General Setup contains administra tive an d system-related information. 19.1 General Setup Menu 1 — General Setup contains administrative and system-related information (shown next).
P-660R/H-D Series User’s Guide 193 Chapter 19 Menu 1 General Setup Figure 98 Menu 1 General Setup Fill in the required fields. Refer to the tabl e shown next for more information about these fields. 19.2.1 Procedure to Configure Dynamic DNS Note: If you have a private W AN IP address, then you can not use dynamic DNS.
P-660R/H-D Series User’s Guide Chapter 19 Menu 1 General Setup 194 Figure 99 Menu 1.1 Configure Dynamic DNS Follow the instructions in the next tabl e to configure dynamic DNS parameters. Menu 1.1 - Configure Dynamic DNS Service Provider= WWW.Dyn DNS.
P-660R/H-D Series User’s Guide 195 Chapter 19 Menu 1 General Setup.
P-660R/H-D Series User’s Guide Chapter 20 Menu 2 WAN Backup Setup 196 C HAPTER 20 Menu 2 W AN Backup Setup This chapter describes how to co nfigure traffic redirect and dial-backup using menu 2 and 2.1. 20.1 Introduction to W AN Backup Setup This chapter explains how to configure the Pr estige for traf fic redirect and dial backup connections.
P-660R/H-D Series User’s Guide 197 Chapter 20 Menu 2 WAN Backup Setup 20.2.1 T raffic Redirect Setup Configure parameters that determine when th e Prestige will forward W AN traffic to the backup gateway using Menu 2.1 — T raffic Redir ect Setup .
P-660R/H-D Series User’s Guide Chapter 20 Menu 2 WAN Backup Setup 198 Metric Th is field sets this route's prio rity among the routes the Prestige uses. The metric represents the "cost of transm ission". A router determines the best route for transmission by choosing a path with th e lowest "cost".
P-660R/H-D Series User’s Guide 199 Chapter 20 Menu 2 WAN Backup Setup.
P-660R/H-D Series User’s Guide Chapter 21 Menu 3 LAN Setup 200 C HAPTER 21 Menu 3 LAN Setup This chapter covers how to configure your wired Local Area Network (LAN) settings. 21.1 LAN Setup This section describes how to configure the Ethernet using Menu 3 — LAN Setup .
P-660R/H-D Series User’s Guide 201 C hapter 21 Men u 3 LAN Setup 21.2 Protocol Dependent Ethernet Setup Depending on the proto cols for your applications, you need to co nfigure the respective Ethernet Setup, as outlined below . • TCP/IP Ethernet setup • Bridging Ethernet setup 21.
P-660R/H-D Series User’s Guide Chapter 21 Menu 3 LAN Setup 202 Follow the instructions in the following table on how to configure th e DHCP fields. Follow the instructions in the following tabl e to configure TCP/IP parameters for the Ethernet port.
P-660R/H-D Series User’s Guide 203 C hapter 21 Men u 3 LAN Setup.
P-660R/H-D Series User’s Guide Chapter 22 Internet Access 204 C HAPTER 22 Internet Access This chapter shows you how to configure the LAN and W AN of your Prestige for Int ernet access .
P-660R/H-D Series User’s Guide 205 Chapter 22 Internet Access Figure 105 IP Alias Network Example Use menu 3.2.1 to configure IP Alias on your Prestige.
P-660R/H-D Series User’s Guide Chapter 22 Internet Access 206 Figure 107 Menu 3.2.1 IP Alias Setup Follow the instructions in the following table to configure IP Alias parameters. 22.5 Route IP Setup The first step is to en able the IP routing in Menu 1 — General Setup .
P-660R/H-D Series User’s Guide 207 Chapter 22 Internet Access Figure 108 Menu 1 General Setup 22.6 Internet Access Configuration Menu 4 allows you to enter the Internet Access information in one screen. Menu 4 is actually a simplified setup for one of t he remote nodes that you can access in menu 1 1.
P-660R/H-D Series User’s Guide Chapter 22 Internet Access 208 . If all your settings are correct your Prestige shou ld connect automatically to the Internet. If the connection fails, note the error message that you receive on the screen and take the appropriate troubleshooting steps.
P-660R/H-D Series User’s Guide 209 Chapter 22 Internet Access.
P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 210 C HAPTER 23 Remote Node Configuration This chapter covers remo te node configuration. 23.1 Remote Node Setup Overview This section describes the protocol-independent parameters for a remote node.
P-660R/H-D Series User’s Guide 211 Chapte r 2 3 Remote Node Configuration Figure 1 10 Menu 1 1 Remote No de Setup 23.2.2 Encap sulation and Multiplexing Scenarios For Internet access you should use the encapsulation and multiple xing methods used by your ISP .
P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 212 Figure 1 1 1 Menu 1 1.1 Remote Node Profile In Menu 1 1 .1 – Remote Node Pr ofile , fill in the fields as describ ed in the following table.
P-660R/H-D Series User’s Guide 213 Chapte r 2 3 Remote Node Configuration 23.2.3 Outgoing Au thentication Protocol For obvious reasons, you sho uld employ the strongest authentication protocol possible. However , some vendors’ implementation includ es specific authentication protocol in the user profile.
P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 214 1 In menu 1 1.1, make sure IP is among the protocols in the Route fi eld. 2 Move the cu rs or to the Edit IP/Bridge field, press [ SP ACE BAR ] to select Ye s , then press [ ENTER] to display Menu 1 1.
P-660R/H-D Series User’s Guide 215 Chapte r 2 3 Remote Node Configuration 23.3.1 My W AN Addr Sample IP Addresses The following figure uses sample IP addresses to help you understand the field of My W AN Addr in menu 1 1.3. My W AN Addr indicates the local Prestige W AN IP (172.
P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 216 Figure 1 13 Sample IP Addresses for a TC P/IP LAN -to-LAN Connection 23.4 Remote Node Filter Move the cu rs or to the Edit Filter Sets field in menu 1 1 .1, then press [SP ACE BAR] to select Ye s .
P-660R/H-D Series User’s Guide 217 Chapte r 2 3 Remote Node Configuration Figure 1 15 Menu 1 1.5 Remote Node Filter (PPPoA or PPPoE Encapsulation) 23.4.1 W eb Configurator Inte rnet Security Filter Rules In the web configurator , open the Security screen as shown next.
P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 218 Figure 1 17 Menu 21 Filer Set Configuration The following figures display the filte r rules in filter sets 1 1 and 12. Figure 1 18 Menu 21.1 1 We bSet 1 1 Figure 1 19 Menu 21.
P-660R/H-D Series User’s Guide 219 Chapte r 2 3 Remote Node Configuration Note: Do not edit filter sets 1 1 and 12. They are used exclusively by the web configurator . Any rules you configured in sets 1 1 and 12 will be erased and replaced when you apply the web configura tor-generated filter rules.
P-660R/H-D Series User’s Guide Chapter 23 Remot e Node Configur ation 220 Figure 121 Menu 1 1.6 for LLC-based Multip lexing or PPP Encapsulation In this case, only one set of VPI and VCI numb ers need be specified for all protocols.
P-660R/H-D Series User’s Guide 221 Chapte r 2 3 Remote Node Configuration Figure 123 Menu 1 1.8 Advance Setu p Options The following table describes the fields in this menu. Menu 11.8 - Ad vance Setup Options PPPoE pass-through = No Press ENTER to Con firm or ESC to Cancel: T able 81 Menu 1 1.
P-660R/H-D Series User’s Guide Chapter 24 Static Route Setup 222 C HAPTER 24 S t atic Route Setup This chapter shows how to setup IP static routes. 24.1 IP S tatic Route Overview Stat ic routes tell the Prestige ro uting information that it cann ot learn automatically through other means.
P-660R/H-D Series User’s Guide 223 Chapter 24 Static Route Setup Figure 125 Menu 12 S ta tic Route Setup From menu 12, select 1 to open Menu 12.1 — IP S tatic Route Setup (show n next). Figure 126 Menu 12.1 IP S tatic Route Setup Now , type the route number of a st atic route you want to configure.
P-660R/H-D Series User’s Guide Chapter 24 Static Route Setup 224 The following table describes the fields for Menu 12.1.1 – Edit IP S tatic Route Setup . T able 82 Menu12.1.1 Edit IP S tatic Route FIELD DESCRIPTION Route # This is the index number of the stat ic route that you chose in menu 12.
P-660R/H-D Series User’s Guide 225 Chapter 24 Static Route Setup.
P-660R/H-D Series User’s Guide Chapter 25 Bridgin g Setup 226 C HAPTER 25 Bridging Setup This chapter shows you how to configure the brid ging parameters of your Prestig e.
P-660R/H-D Series User’s Guide 227 Chapter 25 Bridging Setup Figure 128 Menu 1 1.1 Remote Node Profile 3 Move the cursor to the Edit IP/Bridge field, then press [ SP ACE BAR ] to set the value to Ye s and press [E NTER] to edit Menu 1 1.3 – Remote Node Network Layer Options .
P-660R/H-D Series User’s Guide Chapter 25 Bridgin g Setup 228 25.2.2 Bridge St atic Route Setup Similar to network layer static routes, a bridging static route tells the Prestige the route to a node before a connectio n is established. Y ou c onfigure bridge static routes in menu 12.
P-660R/H-D Series User’s Guide 229 Chapter 25 Bridging Setup.
P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 230 C HAPTER 26 Network Address T ranslation (NA T) This chapter discusses how to configure NA T on the Prestige. 26.1 Using NA T Y ou must create a firewall rule in addition to setting up SUA/NA T , to allow traffic from the W AN to be forwarded through the Prestige.
P-660R/H-D Series User’s Guide 231 Chapter 26 Network Address Translat ion (NAT) Figure 131 Menu 4 Applying NA T for Internet Access The following figure shows how you apply NA T to the remote node in menu 1 1.
P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 232 26.3 NA T Setup Use the address mapping sets me nus and submenus to create the mapping table used to assign global addresses to computers on the LAN. Set 255 is used for SUA.
P-660R/H-D Series User’s Guide 233 Chapter 26 Network Address Translat ion (NAT) Figure 134 Menu 15.1 Addr ess Mapping Sets 26.3.1.1 SUA Address Mapping Set Enter 255 to display th e next screen (see also Sect ion 26.1.1 on page 230 ). The fields in this menu cannot be changed.
P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 234 26.3.1.2 User-Defined Address Mapping Set s Now let’ s look at option 1 in menu 15.1. En ter 1 to bring up this menu. W e’ll just look at the differences from the previous menu.
P-660R/H-D Series User’s Guide 235 Chapter 26 Network Address Translat ion (NAT) 26.3.1.3 Ordering Y our Rules Ordering your rules is important because the Pr estige applies the rules in the order that you specify . When a rule matches the current pack et, the Prestige takes the corresponding action and the remaining rules are ignored.
P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 236 The following table explains the fields in t his menu. 26.4 Configuring a Server behind NA T Follow these steps to config ure a server behind NA T : 1 Enter 15 in the main menu to go to Menu 15 - NA T Setup .
P-660R/H-D Series User’s Guide 237 Chapter 26 Network Address Translat ion (NAT) Figure 139 Menu 15.2.1 NA T Server Setup 4 Enter a port number in an unused St a r t P o r t N o field. T o forward only one port, enter it again in the End Port No field.
P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 238 26.5.1 Example 1: Internet Access Only In the following Internet access example, you only need one rule where your ILAs (Inside Local addresses) all map to one dynamic IGA (In side Global Address) assigned by your ISP .
P-660R/H-D Series User’s Guide 239 Chapter 26 Network Address Translat ion (NAT) Figure 143 NA T Examp le 2 In this case, you do exactly as above (use the convenient pre-configured SUA Only set) and also go to menu 15.2 to specify the Inside Server behind the NA T as shown in the next figure.
P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 240 Map the other outgoing LAN traffic to IGA3 ( Many : 1 mapping). Y ou also map your third IGA to the web server and mail server on the LAN. T ype Server allows you to specify multiple se rvers, of dif ferent types, to other computers behind NA T on the LAN.
P-660R/H-D Series User’s Guide 241 Chapter 26 Network Address Translat ion (NAT) Figure 146 Example 3: Menu 1 1.3 The following figures show how to configure the first rule Figure 147 Example 3: Menu 15.
P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 242 Figure 148 Example 3: Final Menu 15.1.1 Now configure the IGA3 to map to our web server and mail server on the LAN. 1 Enter 15 from the main menu. 2 Enter 2 in Menu 15 - NA T Setup .
P-660R/H-D Series User’s Guide 243 Chapter 26 Network Address Translat ion (NAT) 26.5.4 Example 4: NA T Unfr iendly Application Programs Some applications do not support NA T Mapping using TCP or UDP port address translation.
P-660R/H-D Series User’s Guide Chapter 26 Network Address Translation (NAT) 244 Figure 152 Example 4: Menu 15.1.1 Addre ss Mapping Rules Menu 15.1.1 - Address Mappin g Rules Set Name= Example4 Idx Local Start IP Local End IP Global Start IP Global End IP T ype --- --------------- ------------ --------------- ----------- ---- ---- 1.
P-660R/H-D Series User’s Guide 245 Chapter 26 Network Address Translat ion (NAT).
P-660R/H-D Series User’s Guide Chapter 27 Enabling the Firewall 246 C HAPTER 27 Enabling the Firewall This chapter shows you how to ge t started with the Prestige fire wall. This chapter applies to the P-660H-D. 27.1 Remote Management and the Firewall When SMT menu 24.
P-660R/H-D Series User’s Guide 247 Chapte r 27 Enabling the Fir ewall Figure 153 Menu 21.2 Firewa ll Setup Use the we b configurator or the co mmand in terpreter to confi gure the firewall rules Menu 21.2 - Firewall Setup The firewall protects against Denial of Service (DOS) attacks w hen it is active.
P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 248 C HAPTER 28 Filter Configuration This chapter shows you how to create and apply filters. 28.1 About Filtering Y our Prestige uses filters to deci de whether or not to allow passage of a data packet and/or to make a call.
P-660R/H-D Series User’s Guide 249 Chapter 28 Filter Configuration Figure 155 Filter Rule Process Y ou can apply up to four filter sets to a partic ular port to block various types of packets. Because each filter set can have up to six rules, you can have a maximum of 24 rules active for a single port.
P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 250 28.2 Configuring a Filter Set for the Prestige T o configure a filter set, follow the steps shown ne xt. 1 Enter 21 in the main menu to display Menu 21 – Filter and Fir ewall Setup .
P-660R/H-D Series User’s Guide 251 Chapter 28 Filter Configuration Figure 158 NetBIOS_LAN Filter Rules Summary Figure 159 IGMP Filter Rules Summary 28.3 Filter Rules Summary Menus The following tables briefly descri be the abbreviations used in menus 21.
P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 252 The protocol dependent filter rules abbreviation are listed as follows: 28.4 Configuring a Filter Rule T o configure a filter rule , type its number in Menu 21.1.x – Filter Rules Summary and press [ENTER] to open menu 21.
P-660R/H-D Series User’s Guide 253 Chapter 28 Filter Configuration 28.4.1 TCP/IP Filter Rule This section shows you how to configure a TCP/IP filter rule. TCP/IP rules allow you to base the rule on the fiel ds in the IP and the upper layer protocol, for example, UDP and TCP headers.
P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 254 The following figure illustrates th e logic flow of an IP filter. Port # T ype the desti nation port of the packets you want to filter . The fie ld range is 0 to 65535. A 0 field i s ignored.
P-660R/H-D Series User’s Guide 255 Chapter 28 Filter Configuration Figure 161 Executing an IP Filter 28.4.2 Generic Filter Rule This section shows you how to co nfigure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets.
P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 256 T o configure a generic rule select an empty filter set in menu 21, for example 5. Select Generic Filter Rule in the Filter T ype field and press [ENTER] to open Menu 21.1.5.1 – Generic Filter Rule , as shown in th e following figure.
P-660R/H-D Series User’s Guide 257 Chapter 28 Filter Configuration 28.5 Filter T ypes and NA T There are two classes of filter rules, Generic Filter Device rules and Protocol Filter ( TCP/IP ) rules. Generic Filter rules act on the raw data from/ to LAN and W AN.
P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 258 Figure 164 Sample T elnet Filter 1 Enter 1 in the menu 21 to display Menu 21. 1 — Filter Set Configuration . 2 Enter the index number of th e filter set you want to configure (in this case 6) .
P-660R/H-D Series User’s Guide 259 Chapter 28 Filter Configuration 2 Go to the Edit Filter Sets field, press [SP ACE BAR] to choose Ye s and press [ENTER]. This brings you to menu 1 1.5. Apply the example filter set (for example, filter set 3) in this menu as shown in the next section.
P-660R/H-D Series User’s Guide Chapter 28 Filter Configuration 260 28.7.1 Ethernet T raffic Y ou seldom need to filter Ethernet traffic; however , the filter sets may be useful to block certain packets, reduce traffic and prevent secur ity breaches.
P-660R/H-D Series User’s Guide 261 Chapter 28 Filter Configuration.
P-660R/H-D Series User’s Guide Chapter 29 SNMP Configuration 262 C HAPTER 29 SNMP Configuration This chapter explains SNMP Configuratio n menu 22. 29.1 About SNMP Simple Network Management Protocol (SNM P) i s a protocol u sed for exchanging management information b etween network devices.
P-660R/H-D Series User’s Guide 263 Chapter 29 SNMP Configuration The managed devices cont ain object variables/ managed objects that define each piece of information to be collected ab out a device. Examples of vari ables include the number of packets received, node port status etc.
P-660R/H-D Series User’s Guide Chapter 29 SNMP Configuration 264 Figure 170 Menu 22 SNMP Configura tion The following table describes the SNMP configuration parameters.
P-660R/H-D Series User’s Guide 265 Chapter 29 SNMP Configuration The port number is its interface index under the interface group. 6 whyReboot (defin ed in ZYXEL-MIB) A trap is sent with the reason of restart before rebooting when the system is going to restart (warm start).
P-660R/H-D Series User’s Guide Chapter 30 System Inform ation and Diagnosis 266 C HAPTER 30 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.
P-660R/H-D Series User’s Guide 267 Chapter 30 System Information and Diagnosis The following table describes the fields present in Menu 24.1 - System Maintenance - St a t u s which are read-only and mean t for diagnostic purposes. Figure 172 Menu 24.
P-660R/H-D Series User’s Guide Chapter 30 System Inform ation and Diagnosis 268 30.3 System Information T o get to the System Information: 1 Enter 24 to display Menu 24 - System Maintenance . 2 Enter 2 to display Menu 24.2 - System Information and Console Port Speed .
P-660R/H-D Series User’s Guide 269 Chapter 30 System Information and Diagnosis Figure 174 Menu 24.2.1 System Maintena nce: Information The following table describes the fields in this menu. 30.3.2 Console Port Speed Note: The console port is intern al and reserved for technician use only .
P-660R/H-D Series User’s Guide Chapter 30 System Inform ation and Diagnosis 270 Figure 175 Menu 24.2.2 System Maintena nce : Change Console Port S peed Once you change the Prestige console port speed , you must also set the speed parameter for the communication software you are using to connect to the Prestige.
P-660R/H-D Series User’s Guide 271 Chapter 30 System Information and Diagnosis Figure 177 Sample Error an d Informat ion Message s 30.4.2 Syslog and Accounting The Prestige uses the syslog fa cility to log the CDR (Call Deta il Record) and system messages to a syslog server.
P-660R/H-D Series User’s Guide Chapter 30 System Inform ation and Diagnosis 272 Figure 179 Syslog Example 1 - CDR SdcmdSyslogSend ( SYSLOG_CDR , SYSLOG_INFO, String); String = board xx line xx ch an.
P-660R/H-D Series User’s Guide 273 Chapter 30 System Information and Diagnosis 30.5 Diagnostic The diagnostic facility allows you to test the di f ferent aspects of your Prestige to determine if it is working properly .
P-660R/H-D Series User’s Guide Chapter 30 System Inform ation and Diagnosis 274 The following table describes the diagnostic tests available in menu 24.4 for and the connections. T able 100 Menu 24.4 System Maintenance Menu: Diagnostic FIELD DESCRIPTION Reset xDSL R e-initialize the xDSL link to the tel ephone company .
P-660R/H-D Series User’s Guide 275 Chapter 30 System Information and Diagnosis.
P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 276 C HAPTER 31 Firmware and Configuration File Maintenance This chapter tells you how to backup an d restor e your configuration file as well as upload new firmware and configuration files.
P-660R/H-D Series User’s Guide 277 Chapter 31 Firm ware and Config uration File Main tenance The following table is a summary . Please note that the internal filename refe rs to the filename on the .
P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 278 Figure 181 T elnet in Menu 24.5 31.2.2 Using the FTP Command from the Comman d Line 1 Launch the FTP client on your computer . 2 Enter “ open ”, followed by a space and the IP address of your Prestige.
P-660R/H-D Series User’s Guide 279 Chapter 31 Firm ware and Config uration File Main tenance Figure 182 FTP Session Example 31.2.4 GUI-based FTP Clients The following table describes some of the commands that you may see in GUI-based FTP clients. 31.
P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 280 31.2.6 Backup Configuration Using TFTP The Prestige support s the up/downloading of the firmware and the configuration file using TFTP (T rivial File T ransfer Protocol) over LA N.
P-660R/H-D Series User’s Guide 281 Chapter 31 Firm ware and Config uration File Main tenance Refer to Section 31.2.5 on page 279 to read about configurations that disallow TFTP and FTP over W AN. 31.3 Restore Configuration This section shows you how to restore a previ ously saved configuration.
P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 282 Figure 183 T elnet into M enu 24.6 1 Launch the FTP client on your computer . 2 Enter “ open ”, followed by a space and the IP address of your Prestige. 3 Press [ENTER] when prompted for a username.
P-660R/H-D Series User’s Guide 283 Chapter 31 Firm ware and Config uration File Main tenance 31.4 Uploading Firmware and Configuration Files This section shows you how to upload firmware and configuratio n files. Y ou can upload configuration files by following the procedure in Section 31.
P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 284 Figure 186 T elnet Into Menu 24.7.2 System Maintenance T o upload the firmware and the configuration file, follow these examples 31.4.3 FTP File Upload Comman d from the DOS Prompt Example 1 Launch the FTP client on your computer .
P-660R/H-D Series User’s Guide 285 Chapter 31 Firm ware and Config uration File Main tenance 31.4.4 FTP Session Exampl e of Firmware File Upload Figure 187 FTP Session Example of Firmware File Upload More commands (found in GUI-based FTP clie nts) are listed earlier in this chapter .
P-660R/H-D Series User’s Guide Chapter 31 Firmware and Confi guration File Maintena nce 286 31.4.6 TFTP Upload Command Example The following is an example TFTP command: tftp [-i] host put firmware.
P-660R/H-D Series User’s Guide 287 Chapter 31 Firm ware and Config uration File Main tenance.
P-660R/H-D Series User’s Guide Chapter 32 System Maintenance 288 C HAPTER 32 System Maintenance This chapter leads you through SM T menus 24.8 to 24.10. 32.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the ma in system firmware.
P-660R/H-D Series User’s Guide 289 Chapter 32 System Maintena nce 32.2 Call Control Support Call Control Support is only applicable when Encapsulation is set to PPPoE in menu 4 or menu 1 1 .1. The budget management func tion allows you to set a limit on the total outgoing call time of the Prestige within certain times.
P-660R/H-D Series User’s Guide Chapter 32 System Maintenance 290 The total budget is the time li mit on the accumulated time for ou tgoing calls to a remo te node. When this limit is reached, th e call will be dropped and further outgoing calls to that remote node will be blocked.
P-660R/H-D Series User’s Guide 291 Chapter 32 System Maintena nce Figure 193 Menu 24.10 System Maintenance : T ime and Date Setting 32.3.1 Resetting the T ime • The Prestige resets the time in three instances: Menu 24.
P-660R/H-D Series User’s Guide Chapter 32 System Maintenance 292 • On leaving menu 24.10 after making changes. • When the Prestige starts up, if there is a timeserver co nfigured in menu 24.
P-660R/H-D Series User’s Guide 293 Chapter 32 System Maintena nce.
P-660R/H-D Series User’s Guide Chapter 33 R emote Managem ent 294 C HAPTER 33 Remote Management This chapter covers re mote mana gement (SM T menu 24. 11). 33.1 Remote Management Overview Remote management allows you to determ ine which services/protocols can access which Prestige interface (if any) from which computers.
P-660R/H-D Series User’s Guide 295 Chapter 33 Remote Manageme nt Figure 194 Menu 24.1 1 Remote Ma nagement Control The following table describes the fields in this menu. 33.2.2 Remote Management Limit ations Remote management over LAN or W AN will not work when: • A filter in menu 3.
P-660R/H-D Series User’s Guide Chapter 33 R emote Managem ent 296 33.3 Remote Management and NA T When NA T is enabled: • Use the Prestige’ s W A N IP address when configuring from the W AN. • Use the Prestige’ s LAN IP address when configuring from the LAN.
P-660R/H-D Series User’s Guide 297 Chapter 33 Remote Manageme nt.
P-660R/H-D Series User’s Guide Chapter 34 IP Policy Routing 298 C HAPTER 34 IP Policy Routing This chapter covers setting and appl ying policies used for IP routing. 34.1 IP Policy Routing Overview T raditionally , routing is based on the destinatio n address only and the IAD takes the shortest path to forward a packet.
P-660R/H-D Series User’s Guide 299 Chapter 34 IP Policy Routing • routing the packet to a dif ferent gateway (and hence the outgoing interface). • setting the TO S and precedence fields in the IP header . IPPR follows the existing packet filtering facility of RAS in st yle and in impl ementation.
P-660R/H-D Series User’s Guide Chapter 34 IP Policy Routing 300 Figure 196 Menu 25.1 IP Routing Po licy Setup T ype a number from 1 to 6 to display Menu 25.1.1 – IP Routing Policy (see the next figure). This menu allows you to configure a policy rule.
P-660R/H-D Series User’s Guide 301 Chapter 34 IP Policy Routing Figure 197 Menu 25.1.1 IP Routing Po licy The following table describes the fields in this menu.
P-660R/H-D Series User’s Guide Chapter 34 IP Policy Routing 302 34.5 Applying an IP Policy This section shows yo u where to apply the IP policies after you design them. 34.5.1 Ethernet IP Policies From Menu 3 - Ethern et Setup , type 2 to go to Menu 3.
P-660R/H-D Series User’s Guide 303 Chapter 34 IP Policy Routing Figure 198 Menu 3.2 TCP/IP and DHCP Ethernet Se tup Go to menu 1 1.3 (shown next) and typ e the number(s) of the IP Rout ing Policy set(s) as appropriate. Y ou ca n cascade up to four polic y sets by typing their numbers separated by commas.
P-660R/H-D Series User’s Guide Chapter 34 IP Policy Routing 304 Route 1 represents the default IP route and route 2 represents the configured IP route. Figure 200 Example of IP Policy Routing T o force packets coming from clients with IP addresses of 192.
P-660R/H-D Series User’s Guide 305 Chapter 34 IP Policy Routing 1 Check Menu 25.1 — IP Routing Po licy Setup to see if the rule is added correctly . 2 Create another policy set in menu 25. 3 Create a rule in menu 25.1 for this set to route packets from any host ( IP=0.
P-660R/H-D Series User’s Guide Chapter 34 IP Policy Routing 306 Figure 203 Applying IP Policies Example Menu 3.2 - TCP/IP and DHCP E thernet Setup DHCP Setup DHCP= Server Client IP Pool Starti ng Address= 192.168.1.33 Size of Client IP Poo l= 64 Primary DNS Server= 0 .
P-660R/H-D Series User’s Guide 307 Chapter 34 IP Policy Routing.
P-660R/H-D Series User’s Guide Chapter 35 Call Scheduling 308 C HAPTER 35 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulati on only) allows you to dictate when a remote node should be called and for how long.
P-660R/H-D Series User’s Guide 309 Chapter 35 Call Scheduling T o setup a schedule set, select the schedule set you want to setup from menu 26 (1-12) and press [ENTER] to see Menu 26.1 - Schedule Set Setup as shown next. Figure 205 Menu 26.1 Schedule Set Setup If a connection has been already established, your Prestige will not drop it.
P-660R/H-D Series User’s Guide Chapter 35 Call Scheduling 310 Once your schedule sets are conf igured, yo u must then apply them to the desired remote node(s).
P-660R/H-D Series User’s Guide 311 Chapter 35 Call Scheduling.
P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 312 C HAPTER 36 T roubleshooting This chapter covers potential proble ms and the corresponding remedies.
P-660R/H-D Series User’s Guide 313 Chapter 36 Trouble shooting 36.3 Problems with the W AN Table 112 Troubleshooting the WAN PROBLEM CORRECTIVE ACTION The DSL LED is off. Check the telephone wire and connections betwee n the Prestige DSL port and the wall jack.
P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 314 36.4 Problems Accessing the Prestige 36.4.1 Pop-up Windows, Ja vaScript s and Java Permissions In order to use the web configurator yo u need to allow: • W eb browser pop-u p windows from your device.
P-660R/H-D Series User’s Guide 315 Chapter 36 Trouble shooting Figure 207 Pop-up Blocker Y ou can also chec k if pop-up blocking is disable d in the Pop-up Blocker section in the Privacy tab. 1 In Internet Explorer , select To o l s , Internet Options , Privacy .
P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 316 Figure 209 Internet Options 3 T ype the IP address of your device (the web page that you do not want to have blocked) with the prefix “http://”. For example, http://192.168.1.1. 4 Click Add to move the IP address to the list of Allowed sites .
P-660R/H-D Series User’s Guide 317 Chapter 36 Trouble shooting Figure 210 Pop-up Blocker Settings 5 Click Close to return to the Privacy screen. 6 Click Apply to save this setting. 36.4.1.2 JavaScript s If pages of the web configurat or do not display properly in Inte rnet Explorer , ch eck that JavaScripts are allowed.
P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 318 Figure 21 1 Internet Options 2 Click the Custom Level... button. 3 Scroll down to Scripting . 4 Under Active scripting make sure that Enable is selected (the default). 5 Under Scripting of Java applets make sure that Enable is sele cted (the default).
P-660R/H-D Series User’s Guide 319 Chapter 36 Trouble shooting Figure 212 Security Settings - Java Scripting 36.4.1.3 Java Permissions 1 From Internet Explorer , click To o l s , Internet Options and then the Security tab. 2 Click the Custom Level..
P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 320 Figure 213 Security Settings - Java 36.4.1.3.1 JA V A (Sun) 1 From Internet Explorer , click To o l s , Internet Options and then the Advanced tab. 2 make sure that Use Java 2 for <applet> u nder Java (Sun) is selected.
P-660R/H-D Series User’s Guide 321 Chapter 36 Trouble shooting Figure 214 Java (Sun) 36.4.2 ActiveX Controls in Internet Explorer If ActiveX is disabled, you will not be able to download ActiveX cont rols or to use T rend Micro Security Services. Make sure that ActiveX controls are allowed in Internet Explorer .
P-660R/H-D Series User’s Guide Chapter 36 Troubleshooting 322 Figure 215 Internet Options Security 3 Scroll down to ActiveX controls and plug-ins . 4 Under Download signed ActiveX controls select the Prompt radio button. 5 Under Run ActiveX controls and plug-ins make sure the Enable radio button is selected.
P-660R/H-D Series User’s Guide 323 Chapter 36 Trouble shooting Figure 216 Security Setting ActiveX Controls.
P-660R/H-D Series User’s Guide Appendix A Product Specificat ions 324 Appendix A Product S pecifications See also the Introduction chapter for a general ov erview of the key featu res. S p ecification T ables Table 114 Device Default IP Address 192.
P-660R/H-D Series User’s Guide 325 Appendix A Product Specifications Table 115 Firmware ADSL S tandards Multi-Mode st andard (ANSI T1.413,Issu e 2; G .dmt(G .992.1); G .lite(G992.2)). ADSL2 G .dmt.bis (G .992 .3) ADSL2 G .lite.bis (G .992.4) ADSL2+ (G .
P-660R/H-D Series User’s Guide Appendix A Product Specificat ions 326 NA T/SUA Port Forwarding 1024 NA T sessions Multimedia application PPTP under NA T/SUA IPSec passthrough SIP ALG passthrough VPN passthrough Content Filtering (P-660H-D only) Web page blocking by URL keyword.
P-660R/H-D Series User’s Guide 327 Appendix A Product Specifications.
P-660R/H-D Series User’s Guide Appendix B About ADSL 328 Appendix B About ADSL Introduction to DSL DSL (Digital Subscriber Line) te chnology enhances the data ca pacity of the existing twisted- pair wire that runs betwee n the local telephone co mpany switching offi ces and most homes and offices.
P-660R/H-D Series User’s Guide 329 Appendix B About ADSL cable modems, transmission sp eeds drop significantly as mo re users go on-line because the line is shared.
P-660R/H-D Series User’s Guide Appendix C Virtual Circuit Topology 330 Appendix C V irtual Circuit T opology A TM is a connection-oriented techno logy , meaning that it sets up virt ual circuits over which end systems communicate.
P-660R/H-D Series User’s Guide 331 Appendix C Virtual Circuit Topology.
P-660R/H-D Series User’s Guide Appendix D Wa ll-mounting Instructions 332 Appendix D W all-mounting Instructions Do the following to hang your Prestige on a wall. Note: See the product specifications appe ndix for the size of screws to use and how far apart to place them.
P-660R/H-D Series User’s Guide 333 Appendix D Wall-mounting In structions.
P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 334 Appendix E Setting up Y our Computer ’ s IP Address All computers must have a 10M or 100M Et hernet adapter card and TCP/IP installed.
P-660R/H-D Series User’s Guide 335 Appendix E Setting up Your Compute r’s IP Address Figure 219 WIndows 95/98 /Me: Networ k: Configu ration Inst alling Component s The Network window Configuration tab displays a list of installed components. Y ou need a network adapter , the TCP/IP protocol and Client for Microso ft Networks.
P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 336 3 Select Microsoft from the list of manufacturers. 4 Select Client for Microsoft Networks from the list of network clients and then click OK . 5 Restart your computer so the changes you made take ef fect.
P-660R/H-D Series User’s Guide 337 Appendix E Setting up Your Compute r’s IP Address Figure 221 Windows 95/98/Me : TCP/IP Pr operties: DNS Configuration 4 Click the Gateway tab. • If you do not know your gateway’ s IP address, remove previou sly installed gateways.
P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 338 Figure 222 Windows XP: S tar t Menu 2 In the Control Panel , double-click Network Connections ( Network and Dial-up Connections in W indow s 2000/NT). Figure 223 Windows XP: Control Panel 3 Right-click Local Area Connection and then click Pr operties .
P-660R/H-D Series User’s Guide 339 Appendix E Setting up Your Compute r’s IP Address Figure 224 Windows XP: Control Panel: Network Connections: Proper ties 4 Select Internet Protocol (TCP/IP) (under the Genera l tab in W in XP) and then click Properties .
P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 340 • Click Advanced . Figure 226 Windows XP: Internet Protocol (TCP/IP) P roperties 6 If you do not know your gateway's IP address, remove any previously installed gateways in the IP Settings tab and click OK .
P-660R/H-D Series User’s Guide 341 Appendix E Setting up Your Compute r’s IP Address Figure 227 Windows XP: Advanced TCP/IP Properties 7 In the Internet Protocol TCP/IP Pr operties window (the General tab in W indows XP): • Click Obtain DNS ser ver address automatically if you do not know your DNS server IP address(es).
P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 342 Figure 228 Windows XP: Internet Protocol (TCP/IP) P roperties 8 Click OK to close the Internet Protocol (TCP/IP) Properties window . 9 Click Close ( OK in W ind ows 2000/NT) to close the Local Area Connection Properties window .
P-660R/H-D Series User’s Guide 343 Appendix E Setting up Your Compute r’s IP Address Figure 229 Macintosh OS 8/9: Apple Menu 2 Select Ethernet built-in from the Connect via list. Figure 230 Macintosh O S 8/9: TC P/IP 3 For dynamically assigned settings, select Using DHCP Server from the Configur e: list.
P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 344 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Addr ess box. • T ype your subnet mask in the Subnet mask box.
P-660R/H-D Series User’s Guide 345 Appendix E Setting up Your Compute r’s IP Address Figure 232 Macintosh O S X: Netw ork 4 For statically assigned settings, do the following: •F r o m t h e Configure box, select Manually . • T ype your IP address in the IP Addr ess box.
P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 346 Note: Make sure you are logged in as the ro ot administrator . Using the K Desktop Environment (KDE) Follow the steps below to configure your computer IP address using the KDE.
P-660R/H-D Series User’s Guide 347 Appendix E Setting up Your Compute r’s IP Address • If you have a dynamic IP address click Automatically obtain IP addr ess settings with and select dhcp from the drop down list.
P-660R/H-D Series User’s Guide Appendix E Setting up Your Compu ter’s IP Address 348 1 Assuming that you have only one network card on th e computer , locate the ifconfig- eth0 configuration file (where eth0 is the name of the Ethernet card). Open the configuration file with any plain text editor .
P-660R/H-D Series User’s Guide 349 Appendix E Setting up Your Compute r’s IP Address Figure 240 Red Hat 9.0: Resta rt Ethernet Card V erifying Settings Enter ifconfig in a terminal screen to ch eck your TCP/IP properties. Figure 241 Red Hat 9.0: Checking TCP/IP Properties [root@localhost init.
P-660R/H-D Series User’s Guide Appendix F IP S ubnetting 350 Appendix F IP Subnetting IP Addressing Routers “route” based on the network number .
P-660R/H-D Series User’s Guide 351 Appendix F IP Subnetting Since the first octet of a class “A” IP address must contain a “0”, the first octet of a class “A” address can have a value of 0 to 127.
P-660R/H-D Series User’s Guide Appendix F IP S ubnetting 352 Since the mask is always a continuous number of ones begin ning from the left, fo llowed by a continuous number of zeros for the remainder of the 32 bit mask, you can simply specify the number of ones instead of writing the value of each octet.
P-660R/H-D Series User’s Guide 353 Appendix F IP Subnetting Note: In the following chart s, shaded/bolded last octet bit values indicate host ID bit s “borrowed” to form network ID bits. The number of “borrowed” host ID bits determin es the number of subnets you can have.
P-660R/H-D Series User’s Guide Appendix F IP S ubnetting 354 Example: Four Subnet s The above exampl e illustrated using a 25-bit subne t mask to divide a class “C” address space into two subnets.
P-660R/H-D Series User’s Guide 355 Appendix F IP Subnetting Example Eight Subnet s Similarly use a 27-bit mask to create 8 subnets (001, 010, 01 1, 100, 101, 1 10). The following table shows class C IP ad dress last octet values for each subnet. The following table is a summary for class “C” subnet planning.
P-660R/H-D Series User’s Guide Appendix F IP S ubnetting 356 Subnetting With Class A and Class B Networks. For class “A” and class “B” addresses the subnet ma sk also determines which bits are part of the network number and which are part of the host ID.
P-660R/H-D Series User’s Guide 357 Appendix F IP Subnetting.
P-660R/H-D Series User’s Guide Appendix G B oot Comma nds 358 Appendix G Boot Commands The BootModule A T commands execute fro m wi thin the router ’ s bootup software, when debug mode is selected before the main router firmware is start e d.
P-660R/H-D Series User’s Guide 359 Appendix G Boo t Commands Figure 243 Boot Module Commands AT just answer OK ATHE print help ATBAx change baudrat e.
P-660R/H-D Series User’s Guide Appendix H Com mand Interpreter 360 Appendix H Command Interpreter The following describes how to use the comman d interpreter . Enter 24 in the main menu to bring up the system maintena nce menu. Enter 8 to go to Menu 24.
P-660R/H-D Series User’s Guide 361 Appendix H Command Interpreter.
P-660R/H-D Series User’s Guide Appendix I Firewall Commands 362 Appendix I Firewall Commands The following describes the firewall commands. Table 130 Firewall Commands FUNCTION COMMAND DESCRIPTION Firewall Se tUp config edit firewall active <yes | no> This command turns the firewall on or off.
P-660R/H-D Series User’s Guide 363 Appendix I Firewall Commands config edit firewall e-mail return-addr <e-mail address> This command sets the source e-mail add ress of the firewall e-mails. config edit firewall e-mail email-to <e-mail address> This command sets the e-mail address to which the fire wall e-mails ar e sent.
P-660R/H-D Series User’s Guide Appendix I Firewall Commands 364 config edit firewall attack minute-low <0-255> This command sets the threshold of half-open sessions where the Prestige stops deleting half-opened sessions.
P-660R/H-D Series User’s Guide 365 Appendix I Firewall Commands Config edit firewall set <se t #> log <yes | no> This command sets whether or not the Prestige creates logs for packet s that match the firewall’s default rule set.
P-660R/H-D Series User’s Guide Appendix I Firewall Commands 366 config edit firewall set <se t #> rule <rule #> destaddr- range <start ip address> <en d ip address> This command sets a rule to have the Prestige check for traffic going to this range of addresses.
P-660R/H-D Series User’s Guide 367 Appendix I Firewall Commands.
P-660R/H-D Series User’s Guide Appendix J Splitters and Microfilters 368 Appendix J S plitters and Microfilters This appendix tells you how to install a POTS splitter or a telephone microfilter . Connecting a POTS S p litter When you use the Full Rate (G .
P-660R/H-D Series User’s Guide 369 Appen dix J Splitters and Micr ofilters 2 Connect a cable from the double jack end of the Y -Connector to th e “wall side” of the microfilter . 3 Connect another cable from the double jack end of the Y -Connec tor to the Prestige.
P-660R/H-D Series User’s Guide Appendix K PPPoE 370 Appendix K PPPoE PPPoE in Action An ADSL modem bridges a PPP session over Ethernet (PPP ov er Ethernet, RFC 2516) from your computer to an A TM PVC (Permanent V irt ual Circuit) whic h connects to a DSL Access Concentrator where the PPP session ter minates (see Figure 247 on p age 371 ).
P-660R/H-D Series User’s Guide 371 Appendix K PPPoE Figure 247 Single-Compute r per Router Hard ware Configuration How PPPoE W orks The PPPoE driver makes the Ethernet appea r as a serial link to the computer and the computer runs PPP over it, while the modem bridges the Ethernet frames to the Access Concentrator (AC).
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 372 Appendix L Internal SPTGEN Internal SPTGEN Overview Internal SP TGEN (System Parame ter T able Generator) is a configuration text file useful for efficient configuration of multiple Prestiges.
P-660R/H-D Series User’s Guide 373 Appendix L Internal SPTGEN Some parameters are dependent on othe rs. For example, if you disable the Configur ed field in menu 1 (see Figure 249 on page 372 ), then you disable every field in this menu.
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 374 Figure 252 Internal SP TGEN FTP Download Example Note: Y ou can rename your “ rom-t ” file when you save it to your computer but it must be named “ rom-t ” when you uplo ad it to your Prestige.
P-660R/H-D Series User’s Guide 375 Appendix L Internal SPTGEN This section covers Prestige Internal SP TGEN sc reens. The following ar e Internal SP TGEN screens asso ciated with the SMT screens of your Prestige.
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 376 30100014 = Outp ut device filters Set 2 = 256 30100015 = Outp ut device filters Set 3 = 256 30100016 = Outp ut device filters Set 4 = 256 / Menu 3.2 TCP/IP and DHCP E thernet Setup (SMT Menu 3.
P-660R/H-D Series User’s Guide 377 Appendix L Internal SPTGEN 30201006 = IP Ali as #1 Incoming protocol filters Set 1 = 256 30201007 = IP Ali as #1 Incoming protocol filters Set 2 = 256 30201008 = I.
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 378 Table 134 Menu 4 Internet Acce ss Setup (SMT Menu 4) / Menu 4 Internet Access Set up (SMT Menu 4) FIN FN PVA INPUT 40000000 = Conf igure.
P-660R/H-D Series User’s Guide 379 Appendix L Internal SPTGEN 40000027 = ATM Qo S Type <0(CBR) | (1 (UBR)> = 1 40000028 = Peak C ell Rate (PCR) = 0 40000029 = Sustai n Cell Rate (SCR) = 0 4000.
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 380 120103002 = IP Static Route set #3, Active <0(No) |1(Yes)> = 0 120103003 = IP Static Route set #3, Destination IP address = 0.0.0.0 120103004 = IP Static Route set #3, Destination IP subnetmask = 0 120103005 = IP Static Route set #3, Gateway = 0.
P-660R/H-D Series User’s Guide 381 Appendix L Internal SPTGEN FIN FN PVA INPUT 120107001 = IP Static Route set #7, Name <Str> = 120107002 = IP Static Route set #7, Active <0(No) |1(Yes)> = 0 120107003 = IP Static Route set #7, Destination IP address = 0.
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 382 120110007 = IP Static Route set #10, Private < 0(No) |1(Yes)> = 0 */ Menu 12.1.11 IP Static Ro ute Setup (SMT Menu 12.
P-660R/H-D Series User’s Guide 383 Appendix L Internal SPTGEN 120114005 = IP Static Route set #14, Gateway = 0.0.0.0 120114006 = IP Static Route set #14, Metric = 0 120114007 = IP Static Route set #14, Private < 0(No) |1(Yes)> = 0 */ Menu 12.1.
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 384 150000008 = SUA Server #3 Protocol <0(All)|6(TCP)|17(U DP)> = 0 150000009 = SUA Server #3 Port Start = 0 150000010 = SUA Server #3 Port End = 0 150000011 = SUA Server #3 Local IP address = 0.
P-660R/H-D Series User’s Guide 385 Appendix L Internal SPTGEN 150000042 = SUA Server # 10 Active <0(No) | 1(Yes)> = 0 150000043 = SUA Server #10 Protocol <0(All)| 6(TCP)|17(U DP)> = 0 150000044 = SUA Server #10 Port Start = 0 150000045 = SUA Server #10 Port End = 0 150000046 = SUA Server #10 Local IP address = 0.
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 386 210101011 = IP Filter Set 1,Rule 1 Src Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 0 210101013 = IP Filter Se.
P-660R/H-D Series User’s Guide 387 Appendix L Internal SPTGEN 210103007 = IP Filter Set 1,Rule 3 Dest Port Comp <0(none)|1(equal) |2(not equal)|3(less)|4( greater)> = 1 210103008 = IP Filter Set 1,Rule 3 Src IP address = 0.
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 388 210105002 = IP Filter Set 1,Rule 5 Active <0(No)|1(Yes)> = 1 210105003 = IP Filter Set 1,Rule 5 Protocol = 17 210105004 = IP Filter Set 1,Rule 5 Des t IP address = 0.
P-660R/H-D Series User’s Guide 389 Appendix L Internal SPTGEN 210106013 = IP Filter Set 1,Rule 6 Act Match <1(check next)|2(forward)| 3(drop)> = 3 210106014 = IP Filter Set 1,Rule 6 Act Not Match <1(check next)|2(forward)| 3(drop)> = 2 Table 137 Menu 21.
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 390 210202001 = IP Filter Set 2, Rule 2 Type <0(none)|2(TCP/IP)> = 2 210202002 = IP Filter Set 2, Rule 2 Active <0(N o)|1(Yes)> = 1 210202003 = IP Filter Set 2, Rule 2 Protocol = 6 210202004 = IP Filter Set 2, Rule 2 Dest IP address = 0.
P-660R/H-D Series User’s Guide 391 Appendix L Internal SPTGEN 210203011 = IP Filter Set 2, Rule 3 S rc Port Comp <0(none)|1(equal)|2 (not equal)|3(less)|4(gr eater)> = 0 210203013 = IP Filter .
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 392 210205004 = IP Filter Set 2, Rule 5 Dest IP address = 0.0.0.0 210205005 = IP Filter Set 2, Rule 5 Dest Subnet Mask = 0 210205006 = IP Fi.
P-660R/H-D Series User’s Guide 393 Appendix L Internal SPTGEN 210206013 = IP Filter Set 2,Rule 6 Ac t Match <1(check next)|2(forward)|3( drop)> = 3 210206014 = IP Filter Set 2,Rule 6 Ac t Not .
P-660R/H-D Series User’s Guide Appendix L Internal SPTGEN 394 230400001 = Wireless Port Control <0(Authentication Required) |1(No Access Allowed) |2(No Authentication Required)> = 2 230400002 .
P-660R/H-D Series User’s Guide 395 Appendix L Internal SPTGEN Command Examples The following are example Internal SP TGEN scr eens associated with the Prestige’ s command interpreter commands. Table 141 Command Examples FIN FN PV A INPUT /ci command (for annex A): w an adsl opencmd FIN FN PVA INPUT 990000001 = ADSL OPMD <0(glite)|1(t1.
P-660R/H-D Series User’s Guide Appendix M Log Descriptions 396 Appendix M Log Descriptions This appendix provides descrip tions of example log messages. Table 142 System Maintenance Logs LOG MESSAGE DESCRIPTION Time calibration is successful The router has adjusted its time based on informati on from the time server .
P-660R/H-D Series User’s Guide 397 Appendix M Lo g Descriptions Configuration Change: PC = 0x%x, Task ID = 0x%x The router is saving configuration changes. Successful SSH login Someone has logged on to the router ’s SSH server . SSH login failed Someone has failed to log on to the router ’s SSH server .
P-660R/H-D Series User’s Guide Appendix M Log Descriptions 398 Table 145 TCP Reset Lo gs LOG MESSAGE DESCRIPTION Under SYN flood attack, sent TCP RST The router sent a TCP reset packet when a host was unde r a SYN flood attack (the TCP incompl ete count is per d estination host.
P-660R/H-D Series User’s Guide 399 Appendix M Lo g Descriptions Table 147 ICMP Logs LOG MESSAGE DESCRIPTION Firewall default policy: ICM P <Packet Direction>, <type:%d >, <code:%d> ICMP access matched the default policy and was blocked or forwarded according to the user's setting.
P-660R/H-D Series User’s Guide Appendix M Log Descriptions 400 ppp:LCP Closing Th e PPP connection’s Link Control Protocol stage is closing. ppp:IPCP Closing The PPP connection’s Internet Protocol Control Protoc ol stage is closing.
P-660R/H-D Series User’s Guide 401 Appendix M Lo g Descriptions Connecting to content filter server fail The connection to the external content fi ltering server failed. License key is invalid The external content filter in g license key is invalid.
P-660R/H-D Series User’s Guide Appendix M Log Descriptions 402 Table 153 IPSec Logs LOG MESSAGE DESCRIPTION Discard REPLAY packet The router re ceived and discarded a packet with an incorrect sequence number . Inbound packet authentication failed The router received a packet that has been altered.
P-660R/H-D Series User’s Guide 403 Appendix M Lo g Descriptions Cannot resolve Secure Gate way Addr for rule <%d> The router couldn’t resolve t he IP address from the domain name that was used for the secure gateway address.
P-660R/H-D Series User’s Guide Appendix M Log Descriptions 404 XAUTH fail! Username: <Username> The router was not able to use extended authentication to authenticate the listed username. Rule[%d] Phase 1 negotiation mode mismatch The listed rule’s IKE phase 1 negotiation mode did not ma tch between the router and the peer .
P-660R/H-D Series User’s Guide 405 Appendix M Lo g Descriptions Rule [%d] phase 2 mismatch The l isted rule’s IKE phase 2 di d not ma tch betwe en the router and the peer . Rule [%d] Phase 2 key len gth mismatch The listed rule’s IKE phase 2 key lengths (with the AES encryption algorithm) di d not match between the router and the peer .
P-660R/H-D Series User’s Guide Appendix M Log Descriptions 406 Rcvd data <size> too large! Max size allowed: <max size> The router received dire ctory data that was too large (the size is listed) from the LDAP server whose address and port are recorded in the Source field.
P-660R/H-D Series User’s Guide 407 Appendix M Lo g Descriptions 26 Database method failed. 27 Path was not verified. 28 Maximum path length reached. Table 157 802.1X Logs LOG MESSAGE DESCRIPTION Local User Database accepts user. A user was authenticated by the local user database.
P-660R/H-D Series User’s Guide Appendix M Log Descriptions 408 Table 158 ACL Setting Notes P ACKET DIRECTION DIRECTION DESCRIPTION (L to W) LAN to W AN ACL set for packets traveling from the LAN to the W AN. (W to L) W AN to LAN ACL set for packets traveling from the W AN to the LAN.
P-660R/H-D Series User’s Guide 409 Appendix M Lo g Descriptions The following table shows RFC-2408 ISAKMP payload types that the log displays. Please refer to the RFC for detailed information on each type.
P-660R/H-D Series User’s Guide Appendix M Log Descriptions 410 Log Commands Go to the command in terpreter interface. Configuring What Y ou W ant the Prestige to Log 1 Use the sys logs load command to load the log setting buffer that allows you to configure which logs the Prestige is to record.
P-660R/H-D Series User’s Guide 411 Appendix M Lo g Descriptions Use 0 to not record logs for that cate g ory , 1 to record only logs for that category , 2 to record only alerts for that category , and 3 to record both logs and alerts for that category .
P-660R/H-D Series User’s Guide Index 412 Index Numerics 11 0 V A C 5 230V AC 5 A Abnormal Working Conditions 6 AC 5 Access methods 246 Accessories 5 Acts of God 6 Address Assignment 63 Address mappi.
P-660R/H-D Series User’s Guide 413 Index Charge 6 Circuit 3 Class B 3 Class Name 171 Class of Service 169 Class of Service (CoS) 169 Collision 268 Command Interpreter Mode 288 Communications 3 Commu.
P-660R/H-D Series User’s Guide Index 414 Electric Shock 5 Electrical Pipes 5 Electrocution 5 E-mail Log Example 158 embedded help 46 Encapsulated Routing Link Protocol (ENET ENCAP) 70 Encapsulation .
P-660R/H-D Series User’s Guide 415 Index High V oltage Points 5 Hop Count 215 , 224 Host 48 Host IDs 350 HTTP 86 , 99 , 10 0 , 101 HTTP (Hypertext Transfer Protocol) 183 I IANA 65 IANA (Internet Ass.
P-660R/H-D Series User’s Guide Index 416 Login 212 Logs 154 M MAC (Media Access Control) 180 MAC address 228 Main Menu 189 maintenance 176 management idle timeout period 45 Management Information Ba.
P-660R/H-D Series User’s Guide 417 Index Point-to-Point 328 Point-to-Point Tunneling Protocol 86 policy-based routing 298 Pool 5 POP3 86 , 100 , 10 1 Port Numbers 86 Postage Prepaid.
P-660R/H-D Series User’s Guide Index 418 Rights 2 Rights, Legal 6 RIP 202 , 215 RIPSee Routing Information Protocol 65 Risk 5 Risks 5 RMA 6 romfile 276 Root Class 168 Routing 204 Routing Information.
P-660R/H-D Series User’s Guide 419 Index System Management T erminal 188 System Parameter T able Generator 37 2 System S tatus 267 System T imeout 13 9 , 296 T T ampering 6 TCP Maximum Incomplete 130 , 131 TCP Security 106 TCP/IP 100 , 101 , 139 , 257 , 274 T eardrop 101 T elecommunication Line Cord.
P-660R/H-D Series User’s Guide Index 420 Web Configurator 44 , 45 , 46 , 99 , 107 , 11 4 , 24 7 web configurator screen summary 46 Web Site 7 Wet B a se me n t 5 Wizard Setup 59 Workmanship 6 Worldw.
An important point after buying a device ZyXEL Communications P-660H-D Series (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought ZyXEL Communications P-660H-D Series yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data ZyXEL Communications P-660H-D Series - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, ZyXEL Communications P-660H-D Series you will learn all the available features of the product, as well as information on its operation. The information that you get ZyXEL Communications P-660H-D Series will certainly help you make a decision on the purchase.
If you already are a holder of ZyXEL Communications P-660H-D Series, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime ZyXEL Communications P-660H-D Series.
However, one of the most important roles played by the user manual is to help in solving problems with ZyXEL Communications P-660H-D Series. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device ZyXEL Communications P-660H-D Series along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
