Prestige 1100 WAN Access Router User's Guide Version 2.
Prestige 1100 Internet Access Router Prestige 1100 WAN Access Router Copyright Copyright © 1999 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation.
Prestige 1100 Internet Access Router ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase.
Prestige 1100 Internet Access Router Customer Support If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation offices worldwide, in one of the following ways: Method Region EMAIL – Support Telephone Web Site EMAIL – Sales support@zyxel.com.tw support@europe.zyxel.com Fax +886-3-578-3942 sales@zyxel.com.tw +886-3-578-2439 ftp.europe.zyxel.com support@zyxel.com +1-714-632-0882 800-255-4101 www.zyxel.com sales@zyxel.com +1-714-632-0858 ftp.
Prestige 1100 Internet Access Router Table of Contents Customer Support.......................................................................................................iv Table of Contents .........................................................................................................v List of Figures .............................................................................................................xi List of Tables ..................................................................
Prestige 1100 Internet Access Router Chapter 3: Internet Access......................................................................................3-1 3.1 Route IP Setup ....................................................................................................................................... 3-1 3.2 TCP/IP Parameters ................................................................................................................................ 3-2 3.2.1 IP Address and Subnet Mask............
Prestige 1100 Internet Access Router 6.4 LAN-to-LAN Application with Novell IPX......................................................................................6-5 6.4.1 IPX Remote Node Setup .............................................................................................................6-6 6.4.2 IPX Static Route Setup................................................................................................................6-8 Chapter 7: Bridging Setup................................
Prestige 1100 Internet Access Router Chapter 12: System Maintenance .........................................................................12-1 12.1 System Status.................................................................................................................................. 12-2 12.2 System Information........................................................................................................................ 12-4 12.2.1 Console Port Speed...................................
Prestige 1100 Internet Access Router Chapter 14: Troubleshooting ................................................................................ 14-1 14.1 Problems Starting Up the Prestige 1100......................................................................................14-1 14.2 Problems With the WAN Port .......................................................................................................14-2 14.3 Problems with the LAN Interface.............................................
Prestige 1100 Internet Access Router List of Figures Figure 1-1 Remote Configuration..................................................................................................................... 1-2 Figure 1-2 Prestige 1100 Front Panel.............................................................................................................. 1-3 Figure 1-3 Back Panel.....................................................................................................................................
Prestige 1100 Internet Access Router Figure 7-2 Menu 11.3 - Remote Node Bridging Options...............................................................................7-3 Figure 7-3 Menu 12.3.1 - Edit Bridge Static Route........................................................................................7-4 Figure 8-1 Filter Rule Process...........................................................................................................................
Prestige 1100 Internet Access Router List of Tables Table 1-1 LED Functions ................................................................................................................................... 1-3 Table 2-1 Main Menu Commands..................................................................................................................... 2-5 Table 2-2 Main Menu Summary ........................................................................................................................
Prestige 1100 Internet Access Router Preface About Your Bridge/Router The Prestige 1100 is a high-performance bridge/router that offers a complete solution for your WAN applications such as Internet access and multi-protocol LAN-to-LAN connections for SMB (Small & Medium Size Businesses). It integrates the routing and bridging functions in a single package and is easy to install and to configure since you do not need to set any switches.
Prestige 1100 Internet Access Router Chapter 1: Getting to Know Your Bridge/Router The Prestige 1100 is a high-performance bridge/router that offers a complete solution for your WAN applications such as Internet access and multi-protocol LAN-to-LAN connections for SMB (Small & Medium Size Businesses). It integrates the routing and bridging functions in a single package and is easy to install and to configure since you do not need to set any switches.
Prestige 1100 Internet Access Router Two 10/100 Ethernet LANs One 10/100M Ethernet interface is designed for high performance LAN environment. The other 10/100M Ethernet interface can be reserved for connecting to a Web/FTP server for public Internet access. Most Complete NAT Support ZyXEL NAT technology supports not only private IP for Internet access sharing and security protection, but also popular Internet multimedia applications such as Microsoft NetMeeting and CuSeeMe.
Prestige 1100 Internet Access Router DHCP Support DHCP (Dynamic Host Configuration Protocol) allows you to dynamically and automatically assign IP address to hosts on your network. Data Compression Your Prestige incorporates Stac data compression to speed up data transfer. Stac is the de facto standard of data compression over PPP links. 1.3 Front Panel LEDs and Back Panel Ports Figure 1-2 Prestige 1100 Front Panel 1.3.
Prestige 1100 Internet Access Router 1.3.2 Prestige 1100 Back Panel Figure 1-3 Back Panel The diagram above shows the rear panel of your Prestige 1100. Refer to this diagram when making connections. •: POWER INPUT = Power cord receptacle and switch ‚: LAN1 = RJ-45 10/100 Mbps Ethernet port ƒ: LAN2 = RJ-45 10/100 Mbps Ethernet port „: CONSOLE = DB-9 Console port …: WAN = 68-pin D-type connector 1.
Prestige 1100 Internet Access Router Corporate LAN Prestige 1100 INTERNET Leased Line WEB/FTP Server Figure 1-4 Internet Access Application Internet Single User Account For a business environment, your Prestige offers the Single User Account (SUA) feature that allows multiple users on the LAN (Local Area Network) to access the Internet concurrently for the cost of a single user. The SUA address mapping can also be used for other LAN to LAN connections.
Prestige 1100 Internet Access Router Multi-protocol/Multilink LAN-to-LAN Connection You can use the Prestige to connect two geographically dispersed networks over the WAN connection. The Prestige supports TCP/IP and Novell IPX routing, as well as transparent bridging for other network layer protocols.
Prestige 1100 Internet Access Router Chapter 2: Hardware Installation & Initial Setup 2.1 Unpacking your Bridge/Router This chapter explains how to connect to the hardware and to perform the initial setup. Before installing be sure that all components listed with the enclosed packing slip are included. 2.2 Additional Installation Requirements In addition to the contents of your package, there are other hardware and software requirements you need before you can install and use your Prestige.
Prestige 1100 Internet Access Router 2.3 Connect your WAN Bridge/Router 2.3.1 Prestige 1100 Connections This section outlines how to make the connections to your Prestige 1100. Please refer to the following figure when making connections to the P1100. Figure 2-1 P1100 Connections Step 1. Connect WAN Devices to your Prestige 1100 Connect the port of a WAN device to the WAN port on the Prestige 1100 using an appropriate cable.
Prestige 1100 Internet Access Router a DTE (Data Terminal Equipment) device, not a DCE (Data Circuit-terminating Equipment) device, so the null modem is needed to allow connection to the workstation console port, which is of course a DTE device also. Connect the 9-pin (smaller) end of the console cable to the console port of the Prestige and the 25-pin (bigger) end to the null modem. Then connect the null modem to a serial port (COM1, COM2 or other COM port) of your workstation.
Prestige 1100 Internet Access Router For your first login, enter the default password [1234]. As you enter the password, the screen displays an (X) for each character you type. Enter Password : XXXX Figure 2-3 Login Screen Please note that if there is no activity for longer than 5 minutes after you log in, your Prestige will automatically log you out and will display a blank screen. If you see a blank screen, press [ENTER] to bring up the password screen again.
Prestige 1100 Internet Access Router 2.5 Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your Prestige. Several operations that you should be familiar with before you attempt to modify the configuration are listed in Table 2-1. Table 2-1 Main Menu Commands Operation Press/ Description Move forward to another menu [ENTER] To move forward to a sub-menu, type in the number of the desired sub-menu and press [ENTER].
Prestige 1100 Internet Access Router The SMT displays the Main Menu, as shown below: Copyright (c) 1999 ZyXEL Communications Corp. P1100 Main Menu Getting Started 1. General Setup 2. WAN Setup 3. Ethernet Setup 4. Internet Access Setup Advanced Management 21. Filter Set Configuration 22. SNMP Configuration 23. System Security 24. System Maintenance 25. IP Routing Policy Setup Advanced Applications 11. Remote Node Setup 12. Static Routing Setup 15. SUA Server Setup 99.
Prestige 1100 Internet Access Router 2.6 Changing the System Password The first thing you should do before anything else is to change the default system password by following the steps below: Step 1. Select option 23. System Security in the Main Menu. This will open Menu 23 - System Security as below: Menu 23 - System Security 1. Change Password Enter Menu Selection Number Figure 2-5 Menu 23 - System Security Step 2. From the System Security Menu, select option 1.
Prestige 1100 Internet Access Router Step 3. When submenu 23.1- System Security-Change Password appears, as shown below, enter the existing system password, i.e., [1234], then press [ENTER]. Menu 23.1 - System Security - Change Password Old Password= XXXX New Password= XXXX Retype to confirm= XXXX Press ENTER to Confirm or ESC to Cancel: Figure 2-6 Menu 23.1 - System Security - Change Password Step 4. Enter your new system password and press [ENTER]. Step 5.
Prestige 1100 Internet Access Router 2.7 General Setup The Menu 1 - General Setup contains administrative and system-related information. Step 1. Select option 1. General Setup in the Main Menu by typing 1 at the menu selection number prompt. Step 2. The Menu 1 - General Setup screen appears, as shown. Fill in the required fields marked [?] and turn on the individual protocols for your particular application, as explained in the following table.
Prestige 1100 Internet Access Router Table 2-3 General Setup Menu Fields Field Description System Name Choose a descriptive name for identification purposes. This name can be up to 8 alphanumeric characters long. Spaces are not allowed, but dashes “-” and underscores "_" are accepted. This name can be retrieved remotely via SNMP and will be displayed at the prompt in the Command Mode. P1100 Location (optional) Enter the geographic location (up to 31 characters) of your Prestige 1100.
Prestige 1100 Internet Access Router 2.8 WAN Setup This section describes how to configure the WAN port and a WAN device using Menu 2- WAN Setup. When you finish the setup, the Prestige uses this information to initialize the WAN port and the attached WAN device. 2.8.1 Prestige 1100 WAN Port Setup Select option 2. WAN Setup in the Main Menu by typing 2 at the menu selection number prompt.
Prestige 1100 Internet Access Router 2.9 Ethernet Setup This section describes how to configure the Ethernet using Menu 3 – Ethernet Setup. There are actually three Menu 3s: 1st. Menu 3 – Ethernet Setup – allows you to select the LAN (1 or 2) you wish to configure. 2nd. Menu 3 - Ethernet Setup (LAN 1) – allows you to configure the LAN 1 Ethernet interfaces. Choose 1 from the first Menu 3 to get to this menu. 3rd.
Prestige 1100 Internet Access Router 2.10 General Ethernet Setup This menu allows you to specify the filter sets that you wish to apply to the Ethernet traffic. You seldom need to filter Ethernet traffic, however, the filter sets may be useful to block certain packets, reducing traffic and preventing security breaches. From Menu 3 - Ethernet Setup, enter 1 to go to Menu 3.1 -General Ethernet Setup. Menu 3.
Prestige 1100 Internet Access Router Chapter 3: Internet Access This chapter shows you how to configure the LAN as well as the WAN of your Prestige for Internet access. 3.1 Route IP Setup The first step is to enable the IP routing in Menu 1 - General Setup. To edit Menu 1, enter 1 in the Main Menu to select 1. General Setup and press [ENTER]. Set the [Route IP] field to [Yes] by pressing the space bar as shown in Figure 3-1.
Prestige 1100 Internet Access Router 3.2 TCP/IP Parameters 3.2.1 IP Address and Subnet Mask Similar to the houses on a street that share a common street name, the machines on a LAN share one common network number, also. Where you obtain your network number depends on your particular situation. If the ISP (Internet Service Provider) or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
Prestige 1100 Internet Access Router 3.2.3 DHCP Configuration DHCP (Dynamic Host Configuration Protocol) allows the individual clients (workstations) to obtain the TCP/IP configuration at start-up from a centralized DHCP server. The Prestige 1100 has the DHCP server capability built-in. The DHCP server is disabled when [DHCP=] is [None.] When [DHCP=] is [Client, ]the Prestige requests an IP address from a DHCP server on the Ethernet on which the [DHCP] field is set to [Client].
Prestige 1100 Internet Access Router Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP Setup: DHCP= None Client IP Pool Starting Address= N/A Size of Client IP Pool= N/A Primary DNS Server= N/A Secondary DNS Server= N/A TCP/IP Setup: IP Address= 192.168.1.1 IP Subnet Mask= 255.255.255.0 RIP Direction= Both Version= RIP-2B Multicast = IGMP-v2 IP Policies= SUA= No Enter here to Confirm or ESC to Cancel: Press Space Bar to Toggle. Figure 3-2 Menu 3.
Prestige 1100 Internet Access Router Follow Table 3-2 to configure TCP/IP parameters for the Ethernet port. Table 3-2 TCP/IP Ethernet Setup Menu Fields Field Description Example TCP/IP Setup IP Address Enter the IP address of your Prestige 1100 in dotted decimal notation. IP Subnet Mask Your Prestige 1100 will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the value computed by the Prestige 1100.
Prestige 1100 Internet Access Router is also compatible with version 1. The multicast setting can be turned on or off on Ethernet and remote nodes. For IP routing policy information, please refer to Chapter 13: IP Routing Policy. 3.5 Internet Access Configuration Menu 4 allows you to enter the Internet access parameters in one screen. Menu 4 is actually a simplified setup for one of the remote nodes that you can access through menu 11.
Prestige 1100 Internet Access Router Table 3-4 contains instructions on how to configure your Prestige 1100 for Internet access. Table 3-4 Internet Access Setup Menu Fields Field Description ISP's Name Enter the name of your Internet Service Provider. (This information is for identification purposes only.) My Login Name Enter the login name assigned to you by your ISP. (required) My Password Enter the password associated with the login name above.
Prestige 1100 Internet Access Router 3.6 Single User Account Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, you will have to lease a block of legal, or globally unique, IP addresses from the ISP. The Single User Account (SUA) feature allows you to have the same benefits as having multiple legal addresses, but only pay for one IP address, thus saving significantly on the subscription fees. (Check with your ISP before you enable this feature).
Prestige 1100 Internet Access Router If you do not define any server, SUA offers the additional benefit of firewall protection. If no server is defined, all incoming inquiries will be filtered out by your Prestige and thus preventing intruders from probing your network. Your Prestige accomplishes this address sharing by translating the internal LAN IP addresses to a single address that is globally unique on the Internet.
Prestige 1100 Internet Access Router To enable the SUA feature in Menu 4, move the cursor to the Single User Account field and select [Yes] (or [No] to disable SUA). Then follow the instructions on how to configure the SUA fields in the following table. Table 3-5 Single User Account Menu Fields Field Description Single User Account Select [Yes] to enable SUA. My IP Addr. If your ISP did not assigns you a static IP address, enter [0.0.0.0]; otherwise, enter that IP address here.
Prestige 1100 Internet Access Router 3.7 LANs & WANs A LAN (Local Area Network) is a computer network limited to the immediate area, usually the same building or floor of a building. A WAN (Wide Area Network), on the other hand is an outside connection to another network or the Internet. 3.7.1 LANs, WANs and the Prestige The actual physical connection determines whether the Prestige ports are LAN or WAN ports.
Prestige 1100 Internet Access Router Chapter 4: Remote Node Configuration for LAN to LAN A remote node is required for placing calls to a remote gateway. A remote node represents both the gateway and the network behind it across a WAN connection. Note that when you use Menu 4 to set up Internet access, you are actually configuring the remote node. In this chapter, we will discuss the parameters that are protocol independent. The protocol-dependent configuration will be covered in subsequent chapters.
Prestige 1100 Internet Access Router Table 4-1 Remote Node Profile Menu Fields for Leased Lines Field Description Options Rem Node Name This is a required field [?]. Enter a descriptive name for the remote node, e.g., Corp. This field can be up to eight characters. This name must be unique from any other remote node name or remote dial-in user name. Active Press the space bar to toggle between [Yes] and [No].
Prestige 1100 Internet Access Router Field Description Edit PPP Options To edit the PPP options for this remote node, move the cursor to this field, use the space bar to select [Yes] and press [Enter]. This will bring you to Menu 11.2 - Remote Node PPP Options. For more information on configuring PPP options, see the section Editing PPP Options. Rem IP Addr This is a required field [?] if IP routing is enabled. Enter the IP address of the remote gateway.
Prestige 1100 Internet Access Router Menu 11.2 - Remote Node PPP Options Encapsulation= Standard PPP Compression= No Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle. Figure 4-2 Menu 11.2 - Remote Node PPP Options Table 4-2 Remote Node PPP Options Menu Fields describes the Remote Node PPP Options Menu, and contains instructions on how to configure the PPP options fields.
Prestige 1100 Internet Access Router Chapter 5: Remote Node TCP/IP Configuration This chapter shows you how to configure the TCP/IP parameters of a remote node. 5.1 LAN-to-LAN Application A typical LAN-to-LAN application is to use your Prestige to connect a branch office to the headquarters, as depicted in the following Figure 5-1.
Prestige 1100 Internet Access Router 5.2 Remote Node Setup Follow the procedure in the Remote Node Configuration Chapter to configure the protocol-independent parameters in Menu 11 - Remote Node Profile. For the TCP/IP parameters, follow the instructions below. Follow the steps below to edit Menu 11.3 - Remote Node Network Layer Options shown in Figure 5-2: Step 1. In Menu 11.1, make sure [IP] is among the protocols in the Route field. (The Route field should display Route = IP or Route = IP + IPX.
Prestige 1100 Internet Access Router The following diagram in Figure 5-3 explains the Sample IP Addresses to help you to understand the field of My Wan Address in Menu 11.3. Remote Network Local Network 192.168.1.0 10.0.0.0 172.16.0.2 192.168.1.1 172.16.0.1 10.0.0.1 Figure 5-3 Sample IP Addresses for a TCP/IP LAN-to-LAN Connection To configure the TCP/IP parameters of a remote node, first configure the three fields in Menu 11 – Remote Node Profile, as shown.
Prestige 1100 Internet Access Router The following table shows the TCP/IP related fields in Menu 11.3 - Remote Node Network Layer Options. Table 5-2 Remote Node TCP/IP Configuration Field Description Option Rem IP Address This shows the IP address you entered for this remote node in the previous menu, Remote Node Profile. Rem IP Subnet Mask Enter the subnet mask for the remote network.
Prestige 1100 Internet Access Router Field Description RIP Direction= Press the space bar to select the RIP direction from [Both]/[In Only]/[Out Only]/[None]. [Both]/[In Only]/[Out Only]/[None] Press the space bar to select the RIP version from [RIP1]/[RIP-2B]/[RIP-2M]. [RIP-1]/ [RIP2B]/ [RIP-2M] Version= Multicast IP Policies Sets IGMP to version 1, version 2 or disables IGMP. You can apply up to four IP Policy sets (from twelve) by entering their numbers separated by commas.
Prestige 1100 Internet Access Router 5.3 Static Route Setup Static routes tell the Prestige routing information that it cannot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly connected to a remote node. Each remote node specifies only the network to which the gateway is directly connected, and the Prestige has no knowledge of the networks beyond.
Prestige 1100 Internet Access Router Figure 5-5 Menu 12 - Static Route Setup From Menu 12, select one of the available IP static routes to open Menu 12.1 - IP Static Route Setup, as shown below. Menu 12.1 - IP Static Route Setup 1. 2. 3. 4. 5. 6. 7. 8. ________ ________ ________ ________ ________ ________ ________ ________ Enter selection number: Figure 5-6 Menu 12.1 - IP Static Route Setup Choosing a static route to edit produces the following screen. Menu 12.1.
Prestige 1100 Internet Access Router The following table describes the fields for Menu 12.1.1 – Edit IP Static Route Setup. Table 5-3 Edit IP Static Route Menu Fields 5-8 Field Description Options Route # This is the index number of the route as listed in Menu 12.1 – IP Static Route Setup. Route Name Enter a descriptive name for this route. This is for identification purpose only. Active This field allows you to activate/deactivate this static route.
Prestige 1100 Internet Access Router Chapter 6: IPX Configuration This chapter shows you how to configure the IPX parameters of the Prestige 1100. 6.1 IPX Network Environment Novell bundles the protocol stack, the server software and routing functionality in their NetWare server products. So a NetWare server is not only a file or print server, it is also a router. 6.1.
Prestige 1100 Internet Access Router Figure 6-1 NetWare Network Numbers 6.1.3 External Network Number Each of the four logical networks (based on frame type) has its own external network number. 6.1.4 Internal Network Number In addition to the external network numbers, each NetWare server has its own internal network number that is a virtual network to which the server is attached.
Prestige 1100 Internet Access Router l LAN with a server (server side) l LAN without a server (client side) Seed Router (Client Side) Assigns Network Number Not Seed Router (Server Side) Learns Network Number Prestige 1100 Netware Clients Prestige 1100 Netware Server Figure 6-2 Prestige in an IPX Environment 6.2.1 Prestige 1100 on LAN with Server If your Prestige is on a LAN with a seed router, you do not need to configure the LAN network numbers.
Prestige 1100 Internet Access Router 6.3 IPX Ethernet Setup From Menu 3 - Ethernet. Setup, select option 3. Novell IPX Setup from the appropriate LAN to go to Menu 3.3 - Novell IPX Ethernet Setup as shown in Figure 6-3. Menu 3.3 - Novell IPX Ethernet Setup Seed Router= No Frame Type 802.2= Yes IPX Network #= N/A Frame Type 802.3= No IPX Network #= N/A Frame Type Ethernet II= No IPX Network #= N/A Frame Type SNAP= No IPX Network #= N/A Enter here to CONFIRM or ESC to CANCEL: Press Space Bar to Toggle.
Prestige 1100 Internet Access Router 6.4 LAN-to-LAN Application with Novell IPX.
Prestige 1100 Internet Access Router 6.4.1 IPX Remote Node Setup Follow the procedure in Chapter 5 to configure the protocol-independent parameters in Menu 11.1 Remote Node Profile. For the IPX-related parameters in Menu 11.3 - Remote Node Network Layer Options, follow the instructions below. To edit Menu 11.3 - Remote Node Network Layer Options shown in Figure 6-5, follow these steps: In Menu 11.1, make sure [IPX] is among the protocols in the Route field.
Prestige 1100 Internet Access Router Table 6-2 describes the IPX protocol-dependent parameters of the remote node Setup. Table 6-2 Remote Node Novell IPX Options Field Description Rem LAN Net # In this field, enter the internal network number of the NetWare server on the remote LAN. My WAN Net # In this field, enter the network number of the WAN link. If you leave this field as [00000000], your Prestige 1100 will determine automatically the network number through negotiation with the PPP peer.
Prestige 1100 Internet Access Router 6.4.2 IPX Static Route Setup Similar to IP, IPX static routes tell the Prestige how to reach servers beyond a remote node before a connection to that remote node is established. From Menu 12, select two, then select one of the IPX Static Routes to open Menu 12.2.1 - Edit IPX Static Route, as shown below. Menu 12.2.
Prestige 1100 Internet Access Router Table 6-3 Edit IPX Static Route Menu Fields Field Description Route # This is the index number of the route as listed in Menu 12.2 – IPX Static Route Setup. Server Name In this field, enter the name of the server. This must be the exact name configured in the NetWare server. Active This field allows you to activate/deactivate this static route. Network # This field contains the internal network number of the remote server that you wish to access.
Prestige 1100 Internet Access Router Chapter 7: Bridging Setup This chapter shows you how to configure the bridging parameters of your Prestige 1100. 7.1 Bridging in General Bridging bases the forwarding decision on the MAC (Media Access Control), or hardware address, while routing does on the network layer (IP or IPX) address. Bridging allows the Prestige 1100 to transport packets of network layer protocols that the Prestige 1100 does not route, e.g., SNA, from one network to another.
Prestige 1100 Internet Access Router From Menu 3 - Ethernet Setup, enter option 4. Bridge Setup for the appropriate LAN and Menu 3.4 Bridge Ethernet Setup displays as shown in Figure 7-1. Menu 3.4 - Bridge Ethernet Setup Bridge = No Press ENTER to CONFIRM or ESC to CANCEL: Press Space Bar to Toggle. Figure 7-1 Menu 3.5 - Bridge Ethernet Setup 7.2.1 Remote Node Bridging Setup Follow the procedure in Chapter 5 to configure the protocol-independent parameters in Menu 11.1 Remote Node Profile.
Prestige 1100 Internet Access Router Menu 11.
Prestige 1100 Internet Access Router 7.2.2 Bridge Static Route Setup Similar to network layer static routes, a bridging static route tells the Prestige 1100 about the route to a node before a connection is established. You configure bridge static routes in Menu 12.3.1(go to Menu 12, choose option 3, then choose a static route to edit) as shown in Figure 7-3. Menu 12.3.
Prestige 1100 Internet Access Router Chapter 8: Filter Configuration 8.1 About Filtering Your Prestige uses filters to decide whether or not to allow passage of a packet. Data filtering is divided into incoming and outgoing filters, depending on the direction of the packet relative to a port. The following sections describe how to configure filter sets. Please see our application notes for more information and examples on creating and configuring filters. 8.
Prestige 1100 Internet Access Router Start Packet into Filter Fetch First Filter Set Filter Set Fetch Next Filter Set Fetch First Filter Rule Yes Fetch Next Filter Rule Yes Next Filter Set Available? No Next Filter Rule Available? Execute Filter Rule Check Next Rule No Drop Drop Packet Forward Accept Packet Figure 8-1 Filter Rule Process 8-2 Filter Configuration
Prestige 1100 Internet Access Router 8.3 Configuring a Filter Set To configure a filter sets, follow the procedure below: Step 1. Enter 21 from the Main Menu to open Menu 21 - Filter Set Configuration.
Prestige 1100 Internet Access Router Menu 21.1 - Filter Rules Summary # A Type Filter Rules M m n - - ---- -------------------------------------------- --------- - - 1 2 3 4 5 6 Y Y Y Y Y Y IP IP IP IP IP IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=137 Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=138 Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=139 Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=137 Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=138 Pr=17, SA=0.0.0.0, DA=0.0.0.
Prestige 1100 Internet Access Router Abbreviations Description Display M Refers to More. [Y] means there are more rules to check. [Y] means an action can not yet be taken as there are more rules to check, which are concatenated with the present rule to form a rule chain. When the rule chain is complete an action can be taken. [N] means there are no more rules to check. [N] means you can now specify an action to be taken i.e., forward the packet, drop the packet or check the next rule.
Prestige 1100 Internet Access Router Table 8-3 Abbreviations Used If Filter Type Is IPX l Abbreviation Description PT IPX Packet Type SS Source Socket DS Destination Socket If the filter type is Dev (device), the following abbreviations listed in the following table will be used. Table 8-4 Abbreviations Used If Filter Type Is Dev Abbreviation Description Off Offset Len Length Refer to the next section for information on configuring the filter rules. 8.
Prestige 1100 Internet Access Router Figure 8-4 Protocol and Device Filter Sets To speed up filtering, all rules in a filter set must be of the same type, i.e., Protocol filters or Device filters. The class of a filter set is determined by the first rule that you create. When applying the filter sets to a port, separate menu fields are provided for protocol and device filter sets.
Prestige 1100 Internet Access Router Menu 21.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 6 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 137 Port # Comp= Equal Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 0 Port # Comp= None TCP Estab= No More= No Log= None Action Matched= Check Next Rule Action Not Matched= Check Next Rule Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle. Figure 8-5 Menu 21.1.
Prestige 1100 Internet Access Router Field Description Option Destination: Port # Enter the destination port of the packets that you wish to filter. The range of this field is 0 to 65535. This field is a don’t-care if it is 0. 0-65535 Destination: Port # Comp Select the comparison to apply to the destination port in the packet against the value given in Destination: Port #. [None]/[Less]/[Greater]/ [Equal]/[Not Equal] Source: IP Addr Enter the source IP Address of the packet you wish to filter.
Prestige 1100 Internet Access Router The following diagram illustrates the logic flow of an IP filter.
Prestige 1100 Internet Access Router 8.4.3 Novell IPX Filter Rule This section shows you how to configure an IPX filter rule. IPX filters allow you to base the rules on the fields in the IPX headers. To configure an IPX rules, select [IPX Filter Rule] from the [Filter Type] field and press Enter to open Menu 21.1.1 IPX Filter Rule, as shown in the figure below. Menu 21.1.
Prestige 1100 Internet Access Router The table below describes the IPX Filter Rule. Table 8-6 IPX Filter Rule Menu Fields Field Description Option Filter # This is the filter set, filter rule co-ordinates, i.e., 2,3 refers to the second filter set and the third filter rule of that set. e.g., 2,3 Filter Type Use the space bar to toggle between types of rules. Parameters displayed below each type will be different.
Prestige 1100 Internet Access Router Field Description Option Source Socket # Enter the source socket number (2-byte in hexadecimal) of the packets that you wish to filter. e.g.,7777 Source Socket # Comp Select the comparison you wish to apply to the source socket in the packet against that specified above. [None]/[Equal]/ [Not Equal]/[Less]/[ Greater] Operation This field is applicable only if one of the Socket # fields is 0452 or 0453 indicating SAP and RIP packets.
Prestige 1100 Internet Access Router Menu 21.1.1 - Device Filter Rule Filter #: 1,1 Filter Type= Device Filter Rule Active= No Offset= 0 Length= 0 Mask= N/A Value= N/A More= No Log= None Action Matched= Check Next Rule Action Not Matched= Check Next Rule Press ENTER to Confirm or ESC to Cancel: Figure 8-8 Menu 21.1.2 - Device Filter Rule The following table describes the fields in the Device Filter Rule Menu.
Prestige 1100 Internet Access Router Field Description Log Select the logging option from the following: Action Matched Option l [None] – No packets will be logged. l [Action Matched] - Only packets that match the rule parameters will be logged. l [Action Not Matched] - Only packets that do not match the rule parameters will be logged. l [Both] – All packets will be logged. Select the action for a matching packet.
Prestige 1100 Internet Access Router 8.5.2 Remote Node Filters Go to Menu 11.1 (shown next) and enter the number(s) of the filter set(s) as appropriate. You can specify up to four filter sets by entering their numbers separated by commas. Menu 11.
Prestige 1100 Internet Access Router Chapter 9: SNMP Configuration 9.1 About SNMP SNMP (Simple Network Management Protocol) is a protocol for network management and monitoring. Your Prestige 1100 supports SNMP agent functionality, which allows a manager station to manage and monitor the Prestige 1100 through the network. Keep in mind that SNMP is only available if TCP/IP is configured on your Prestige 1100. 9.2 SNMP Configuration To configure SNMP, select option 22.
Prestige 1100 Internet Access Router The following table describes the SNMP configuration parameters. Table 9-1 SNMP Configuration Menu Fields Field Description Default Get Community Enter the Get Community, which is the password for the incoming Getand GetNext- requests from the management station. Public Set Community Enter the set community, which is the password for incoming Setrequests from the management station.
Prestige 1100 Internet Access Router Chapter 10: System Security This chapter covers Menu 23, which is for you to change the system password and to configure an external authentication server. 10.1 Changing the System Password To change the system password, following steps below: Step 1. Select option 23. System Security in the Main Menu to open Menu 23 - System Security as shown in Figure 10-1. Menu 23 - System Security 1.
Prestige 1100 Internet Access Router Step 2. From the System Security Menu, select option 1. Change Password to open Menu 23.1 System Security - Change Password. Step 3. Enter your existing system password and press [ENTER]. Menu 23.1 - System Security - Change Password Old Password= ******** New Password= ******** Retype to confirm= ******** Enter here to CONFIRM or ESC to CANCEL: Figure 10-2 Menu 23.1 - System Security - Change Password Step 4. Enter your new system password and press [ENTER].
Prestige 1100 Internet Access Router Chapter 11: Telnet Configuration and Capabilities 11.1 About Telnet Configuration Before the Prestige 1100 is properly setup for TCP/IP, the only option for configuring it is through the console port. Once your Prestige 1100 is configured, you can use telnet to configure it remotely.
Prestige 1100 Internet Access Router 11.2 Telnet Under SUA When Single User Account (SUA) is enabled and an inside server is specified, telnet connections from the outside will be forwarded to the inside server. So to configure the Prestige via telnet from the outside, you must first telnet to the inside server, and then telnet from the server to the Prestige using its inside LAN IP address. If no insider server is specified, telnet to the SUA’s IP address will connect to the Prestige directly. 11.
Prestige 1100 Internet Access Router Chapter 12: System Maintenance This chapter covers the diagnostic tools that help you to maintain your Prestige. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter describes how to use these tools in detail. Select menu 24 in the main menu to open Menu 24 - System Maintenance, as shown below. Menu 24 - System Maintenance 1. 2. 3. 4. 5. 6. 7. 8.
Prestige 1100 Internet Access Router 12.1 System Status The first selection, System Status gives you the status and statistics of the ports, as shown below. System Status is a tool that can be used to monitor your Prestige. Specifically, it gives you information on WAN port status, number of packets sent and number of packets received. To get to the System Status, select number 24 to go to Menu 24 - System Maintenance. From this menu, select number 1, System Status.
Prestige 1100 Internet Access Router Table 12-1 System Maintenance - Status Menu Fields Field Description Status The status of the WAN port. TXPkts The number of transmitted packets on this channel. RXPkts The number of received packets on this channel. Errors The number of error packets on this channel. Tx (Byte / s) The transmission speed in bytes per second. Rx (Byte / s) The reception speed in bytes per second. Up Time Time this channel has been connected to the current remote node.
Prestige 1100 Internet Access Router 12.2 System Information Step 1. Select option 24 from the Main Menu to open Menu 24 - System Maintenance . Step 2. From Menu 24, select option 2 then select the first option from Menu 24.2 to display Menu 24.2.1 - System Maintenance – Information. Menu 24.2.1 - System Maintenance - Information Name: P1100 Routing: IP/IPX ZyNOS S/W Version: V2.50a05 LAN 1: Ethernet Address: 00:a0:c5:30:00:b0 IP Address: 202.132.154.170 IP Mask: 255.255.255.
Prestige 1100 Internet Access Router 12.2.1 Console Port Speed Step 1. Select option 24 from the Main Menu to open Menu 24 - System Maintenance . Step 2. From Menu 24, select option 2 then select the second option from Menu 24.2 to display Menu 24.2.2 – System Maintenance – Change Console Port Speed. You can change the console port speeds through Menu 24.2.2 – Console Port Speed. Your Prestige supports 9600 (default), 19200, 38400, 57600, and 115200bps for the console port.
Prestige 1100 Internet Access Router Examples of typical error and information messages are presented in the figure below. 60 4 61 4 63 e Clear Error PP07 INFO LAN promiscuous mode <0> PINI ERROR System Ert completed PINI INFO Session Begin Log (y/n): Figure 12-5 Examples of Error and Information Messages 12.3.2 Syslog And Accounting The Prestige uses the UNIX syslog facility to log system messages to a syslog server. Syslog and accounting can be configured in Menu 24.3.
Prestige 1100 Internet Access Router Table 12-3 System Maintenance Menu Syslog Parameters Parameter Description Active Use the space bar to turn on or off syslog. Syslog IP Address Enter the IP Address of your syslog server. Log Facility Use the space bar to toggle between the 7 different Local options. The log facility allows you to log the message in different files in the server. Please refer to your UNIX manual for more detail. 12.
Prestige 1100 Internet Access Router The following table describes the diagnostic tests available in Menu 24.4 for your Prestige and the connections. Table 12-4 System Maintenance Menu Diagnostic Field Description Ping Host This diagnostic test pings the host, which determines the functionality of the TCP/IP protocol on both systems and the links in between. Reboot System This option reboots the Prestige. Command Mode This option allows you to enter the command mode.
Prestige 1100 Internet Access Router Table 12-5 Filename Conventions File type Internal Name Description Configuration File Rom-spt This is the router configuration filename on the Prestige when you are backing up and restoring files (menus 24.5 and 24. 6). The rom-spt file contains your Prestige configurations such as IP addresses, DHCP settings, Remote Node settings etc. as well as your personal password.
Prestige 1100 Internet Access Router Menu 24.5 – Backup Configuration FTP or TFTP are the preferred methods for backing up the current Prestige configuration to your workstation since FTP or TFTP is faster. Ready to back up Configuration via Xmodem. Do you want to continue (Y/N): Figure 12-8 Menu 24.5 –Backup Configuration using the Console Port 12.6.2 Back up using FTP To transfer the configuration file, follow the procedure below: Step 1. Launch the FTP client on your workstation. Step 2.
Prestige 1100 Internet Access Router To transfer the configuration file, follow the procedure below: Use telnet from your workstation to connect to the Prestige and log in. Because TFTP does not have any security checks, the Prestige records the IP address of the telnet client and accepts TFTP requests only from this address. Step 1. Launch the TFTP client on your workstation and connect to the Prestige. Step 2. Go to SMT menu 24.5. Note that you must remain in this menu until backup is complete.
Prestige 1100 Internet Access Router Prestige. This restores the configuration to your Prestige. Step 4. The system reboots automatically after the file transfer process is complete. For details on FTP commands, please consult the documentation of your FTP client program. Menu 24.6 – Restore Configuration using FTP To transfer your current workstation configuration to your Prestige, follow the procedure below: 1. Launch the FTP client on your workstation. 2.
Prestige 1100 Internet Access Router normal conditions is not recommended since FTP or TFTP is faster. Please note that the system reboots automatically after the file transfer process is complete. Menu 24.7 -- System Maintenance - Upload Firmware 1. Upload ZyNOS Code 2. Upload Router Configuration File Enter Menu Selection Number: Figure 12-12 Menu 24.7 -- System Maintenance - Upload Firmware 12.8.
Prestige 1100 Internet Access Router Menu 24.7.1 - System Maintenance - Upload ZyNOS Code. FTP or TFTP are the preferred methods for uploading router firmware to your Prestige since FTP or TFTP is faster. To upload router firmware: 1. Enter "y" at the prompt below to go into debug mode. 2. Enter "atur" after the "Enter Debug Mode" message. 3. Wait for the "Starting XMODEM upload" message before activating the Xmodem upload on your terminal. 4.
Prestige 1100 Internet Access Router 12.8.4 Upload Router Firmware using TFTP Even though TFTP should work over WAN as well, it is not recommended. To use TFTP, your workstation must have both telnet and TFTP clients. Use telnet from your workstation to connect to the Prestige and log in. Because TFTP does not have any security checks, the Prestige records the IP address of the telnet client and accepts TFTP requests only from this address. Step 1.
Prestige 1100 Internet Access Router Step 4. After successful file transfer, enter "atgo" to restart the router. Menu 24.7.2 - System Maintenance - Upload Router Configuration File FTP or TFTP are the preferred methods for uploading the router configuration file to your Prestige since FTP or TFTP is faster. To upload the router configuration file: 1. Enter "y" at the prompt to go into debug mode. 2. Enter "atur3" after the "Enter Debug Mode" message 3.
Prestige 1100 Internet Access Router 12.9.3 Upload Router Configuration File using TFTP Even though TFTP should work over WAN as well, it is not recommended. To use TFTP, your workstation must have both telnet and TFTP clients. To transfer the configuration file, follow the procedure below. Use telnet from your workstation to connect to the Prestige and log in.
Prestige 1100 Internet Access Router 12.9.4 Boot Module Commands Prestige boot module commands are shown below. For ATBAx, x denotes the number preceding the colon to give the baud rate following the colon in the list of numbers that follows; e.g. ATBA3 will give a baud of 9.6 kbps. ATSE displays the seed that is used to generate a password to turn on the debug flag in the firmware.
Prestige 1100 Internet Access Router 12.10Command Interpreter Mode This option allows you to enter the command interpreter mode. A list of valid commands can be found by typing [help] at the command prompt. For more detailed information, check the ZyXEL Web site or send email to the ZyXEL Support Group. Please note that the first release of the P1100 does not support L2TP. Enter Menu Selection Number: 8 Copyright (c) 1999 ZyXEL Communications Corp.
Prestige 1100 Internet Access Router Chapter 13: IP Policy Routing 13.1 Introduction Traditionally, routing is based on the destination address only and the router takes the shortest path to forward a packet. IP Policy Routing (IPPR) provides a mechanism to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator. Policy-based routing is applied to incoming packets on a per interface basis, prior to the normal routing. 13.1.
Prestige 1100 Internet Access Router 13.1.
Prestige 1100 Internet Access Router Menu 25.1 - IP Routing Policy Summary # A Criteria/Action - - -------------------------------------------------------------------------1 Y SA=1.1.1.1-1.1.1.1,DA=2.2.2.2-2.2.2.5 SP=20-25,DP=20-25,P=6,T=NM,PR=0 |GW=192.168.1.
Prestige 1100 Internet Access Router Table 13-1 IP Routing Policy Summary Abbreviation Criteria SA SP DA DP P T PR Action GW T P Type Of Service NM mD MT MR MC Meaning Source IP address Source port Destination IP address Destination port IP layer 4 protocol number(TCP=6,UDP=17…) Type Of Service of Incoming packet Precedence of incoming packet Gateway IP address Outgoing Type of Service Outgoing Precedence Normal Minimum Delay Maximum Throughput Maximum Reliability Minimum Cost Enter a number from 1 to 6 t
Prestige 1100 Internet Access Router Table 13-2 IP Routing Policy Field Description Policy Set Name This is the name of the policy set assigned in Menu 25 - IP Routing Policy Setup. Active Press the [SPACEBAR] to select [Yes] to activate the policy. Criteria IP Protocol IP layer 4 protocol, e.g., UDP, TCP, ICMP, etc. Type of Service Prioritize incoming network traffic by choosing from [Don’t Care] / [Normal] / [Min Delay] / [Max Thruput] / [Max Reliability].
Prestige 1100 Internet Access Router 13.2 Applying an IP Policy This section shows you where to apply the IP Policies after you design them. 13.2.1 Ethernet IP Policies From Menu 3 - Ethernet Setup, enter 2 to go to Menu 3.2 -General Ethernet Setup. You can choose up to four IP Policy sets (from twelve) by entering their numbers separated by commas, e.g., 2, 4, 7, 9. Menu 3.
Prestige 1100 Internet Access Router Menu 11.3 - Remote Node Network Layer Options IP Options: Rem IP Addr: 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.0 Single User Account= No Metric= 2 Private= No RIP Direction= Both Version= RIP-2B Multicast = IGMP-v2 IP Policies= 1,2,3,4 IPX Options: Rem LAN Net #= N/A My WAN Net #= N/A Hop Count= N/A Tick Count= N/A W/D Spoofing(min)= N/A SAP/RIP Timeout(min)= N/A Bridge Options: Ethernet Addr Timeout(min)= N/A Enter your IP Policy sets here.
Prestige 1100 Internet Access Router Chapter 14: Troubleshooting This chapter covers the potential problems you may run into and the possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. 14.
Prestige 1100 Internet Access Router 14.2 Problems With the WAN Port Table 14-2 Troubleshooting a WAN Port Connection Troubleshooting Corrective Action RDY LED of a WAN Port is not ON Check if the WAN port is connected to an external WAN device. Check if the power of the external WAN device is turned on. 14.
Prestige 1100 Internet Access Router Acronyms and Abbreviations BAP/BACP Bandwidth Allocation Protocol/Bandwidth Allocation Control protocol BOD Bandwidth on Demand CDR Call Detail Record CHAP Challenge Handshake Authentication Protocol CLID Calling Line IDentification CSU/DSU Channel Service Unit/Data Service Unit DCE Data Communications Equipment DHCP Dynamic Host Configuration Protocol DNS Domain Name System DTE Data Terminal Equipment IANA Internet Assigned Number Authority IP In
Prestige 1100 Internet Access Router SAP (IPX) Service Advertising Protocol SNAP Sub-Network Access Protocol SNMP Simple Network Management Protocol SUA Single User Account TA (ISDN) Terminal Adapter TCP Transmission Control Protocol UDP User Datagram Protocol STP Shielded Twisted Pair (cable) WAN Wide Area Network B Acronyms & Abbreviations
Prestige 1100 Internet Access Router Index A Encapsulation, 4-4 Ethernet Setup, 2-12 Action Matched, 8-5 Applications, 4 Internet Access, 4 SUA, 5 LAN-to-LAN, 6, 5-1 Authentication, 4-2, 4-3 F B Back Panel, 4 Boot Module Commands, 12-18 Bridging, 2, 6, 2-10, 4-2, 7-1 Ether Address, 7-4 Ethernet, 7-1 Ethernet Addr Timeout, 7-3 Remote Node, 7-2 Static Route Setup, 7-4 C CHAP, 4-2 Command Interpreter Mode, 12-19 Community, 9-1 Compression, 4-4 Connections, 2-2 Ethernet, 2-3 Power Cord, 2-3 WAN Devices, 2-
Prestige 1100 Internet Access Router G Gateway, 5-8 General Setup, 2-9 Menu Fields, 2-10 Remote Node Setup, 6-6 Seed Router, 6-3 Static Route Setup, 6-8 IPX Network Number, 6-1, 6-7 IPX Node Number, 6-1 ISP. See Internet Service Provider H L Hop Count, 6-7, 6-9 I IANA.
Prestige 1100 Internet Access Router Q Quality of Service, 13-1 R Remote Configuration, 2 Remote Node, 4-1, 12-3 Leased Line, 4-1 TCP/IP, 5-1 Remote Node Setup, 5-2 RIP. See Routing Information Protocol RJ-45, 2-3 Route IP Setup, 3-1 Routing Information Protocol, 3-2 Direction, 3-2 Version, 3-2 Routing Policy, 13-1 S SAP/RIP Timeout, 6-7 Single User Account, 2 Single User Account, 5, 3-2, 3-7, 3-8, 3-9, 3-10, 5-4, 8-6, B Advantages, 3-9 Configuration, 3-9 Ethernet, 3-10 SMT.
Prestige 1100 Internet Access Router V WAN Setup, 2-11 Watchdog, 6-7 VT100, 2-1 W WAN port, 2-2 F Z ZyNOS, 12-4, 12-13, 12-14, 13-1 ZyXEL Limited Warranty, iii Index
