Prestige 153/153X User's Manual Version 1.
Prestige 153/153X WAN Bridge/Routers Prestige 153 Prestige 153X WAN Bridge/Routers Copyright Copyright © 1998 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation.
Prestige 153/153X WAN Bridge/Routers Federal Communications Commission (FCC) Interference Statement This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: 1. This device may not cause harmful interference. 2. This device must accept any interference received, including interference that may cause undesired operations. This equipment has been tested and found to comply with the limits for a CLASS B digital device pursuant to Part 15 of the FCC Rules.
Prestige 153/153X WAN Bridge/Routers Information for Canadian Users The Industry Canada label identifies certified equipment. This certification means that the equipment meets certain telecommunications network protective, operation, and safety requirements. The Industry Canada does not guarantee that the equipment will operate to a user's satisfaction. Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local telecommunications company.
Prestige 153/153X WAN Bridge/Routers The declarations of CE marking The Prestige 153 and Prestige 153X have been approved for connection to the Public Switched Telecommunication Network using interfaces compatible with ITU-TSS recommendation I.420 (Basic Rate ISDN user access). The Prestige 153 and Prestige 153X comply with the following directives: 1.
Prestige 153/153X WAN Bridge/Routers ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase.
Prestige 153/153X WAN Bridge/Routers Customer Support If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation offices worldwide, in one of the following ways: North America ZyXEL Communications Inc. 4920 E. La Palma Avenue Anaheim, CA 92807 USA Telephone: (714) 693-0808 (call between 8:00 AM and 5:00 PM PST) Facsimile: (714) 693-8811 E-mail: - Sales Inquiries: sales@zyxel.com - Technical Support: support@zyxel.
Prestige 153/153X WAN Bridge/Routers Table of Contents Table of Contents................................................................................................................. ix List of Figures.................................................................................................................... xiii List of Tables.................................................................................................................... xvii Preface .........................................
Prestige 153/153X WAN Bridge/Routers Chapter 4 Remote Node Configuration 4.1 Remote Node Setup.................................................................................................. 4-1 4.2 Leased Line Support................................................................................................ 4-15 Chapter 5 Remote Node TCP/IP Configuration 5.1 LAN-to-LAN Application.............................................................................................
Prestige 153/153X WAN Bridge/Routers 10.2 SNMP Configuration ............................................................................................10-1 Chapter 11 System Security 11.1 Changing the System Password ........................................................................... 11-1 11.2 Using RADIUS Authentication............................................................................... 11-3 Chapter 12 Telnet Configuration and Capabilities 12.1 About Telnet Configuration...............
Prestige 153/153X WAN Bridge/Routers List of Figures Figure 1-1. Figure 1-2. Prestige 153/153X Front Panel ........................................................................1-4 Prestige 153 Back Panel Ports ........................................................................1-6 Figure 1-3. Figure 1-4. Figure 1-5. Prestige 153X Back Panel Ports ......................................................................1-7 Internet Access Application ..................................................
Prestige 153/153X WAN Bridge/Routers Figure 5-1. Figure 5-2. LAN-to-LAN Application with TCP/IP................................................................ 5-1 Menu 11.3- Remote Node TCP/IP Options ....................................................... 5-2 Figure 5-3. Figure 5-4. Figure 5-5. Sample IP Addresses for a TCP/IP LAN-to-LAN Connection ............................. 5-3 Example of Static Routing Topology.................................................................
Prestige 153/153X WAN Bridge/Routers Figure 13-5. Figure 13-6. Examples of Error and Information Messages.................................................13-6 Menu 24.3.2 - System Maintenance - Syslog and Accounting ..........................13-7 Figure 13-7. Figure 13-8. Figure 13-9. Menu 24.4 - System Maintenance - Diagnostic...............................................13-9 Trace Display for a Successful IPCP Connection Via Manual Call..................
Prestige 153/153X WAN Bridge/Routers List of Tables Table 1-1. Table 2-1. Table 2-2. LED Functions ..................................................................................................1-5 Item Checklist ...................................................................................................2-1 Main Menu Commands ......................................................................................2-8 Table 2-3. Table 2-4. Table 2-5. Main Menu Summary..............................
Prestige 153/153X WAN Bridge/Routers Table 9-3. Table 9-4. Abbreviations Used If Filter Type Is IPX.............................................................. 9-6 Abbreviations Used If Filter Type Is GEN ............................................................ 9-6 Table 9-5. Table 9-6. Table 9-7. TCP/IP Filter Rule Menu Fields .......................................................................... 9-8 Generic Filter Rule Menu Fields ..............................................................
Prestige 153/153X WAN Bridge/Routers Preface About Your Bridge/Router The Prestige 153/153X is a high-performance bridge/router that offers a complete solution for your WAN applications such as Internet access, multi-protocol LAN-to-LAN connections, telecommuting and remote access. The Prestige 153/153X is a universal router that can connect over PSTN (Public Switch Telephone Network) and ISDN (Integrated Service Digital Network) lines.
Prestige 153/153X WAN Bridge/Routers Structure of this Manual This manual is divided into five parts: Step 1. Getting Started (Chapters 1-2), is structured as a step-by-step guide to help you connect, install and setup your Prestige 153/153X to operate on your network. Step 2. The Internet (Chapter 3), describes how to configure your Prestige 153/153X to connect to the Internet. Step 3.
Prestige 153/153X WAN Bridge/Routers Chapter 1 Getting to Know Your Bridge/Router This chapter describes the key features and applications of your Prestige 153/153X WAN Bridge/Router. 1.1 Prestige 153/153X WAN Bridge Routers Congratulations on the purchase of your ZyXEL Prestige 153/153X Remote Access Router.
Prestige 153/153X WAN Bridge/Routers • Multiple Protocol Support ♦ ♦ ♦ ♦ ♦ TCP/IP (Transmission Control Protocol/Internet Protocol) network layer protocol. Novel IPX (Internetwork Packet eXchange) protocol. Transparently bridging for network layers that the Prestige does not route. PPP (Point-to-Point Protocol) link layer protocol. SUA™ (Single User Account) for NAT (Network Address Translation).
Prestige 153/153X WAN Bridge/Routers • DHCP Support DHCP (Dynamic Host Configuration Protocol) allows you to dynamically and automatically assign IP address settings to hosts on your network. • Call Control Your Prestige provides budget management for outgoing calls and maintains a blacklist for unreachable phone numbers in order to save you the expense of unnecessary charges. • Data Compression Your Prestige incorporates Stac data compression to speed up data transfer.
Prestige 153/153X WAN Bridge/Routers 1.4 Front Panel LEDs and Back Panel Ports 1.4.
Prestige 153/153X WAN Bridge/Routers 1.4.2 Front Panel LEDS The LED indicator lights on the front panel of your Prestige indicate the bridge/router functional status. The following Table 1-1 describes the LED functions: Table 1-1. LED Functions LEDs Function Indicator Active Status Description PWR Power Indicator Green On The power is on/off. RUN Running LED Green Blinking The Prestige is functioning properly.
Prestige 153/153X WAN Bridge/Routers 1.4.3 Prestige 153 Back Panel Figure 1-2 shows the rear panel of your Prestige 153. Refer to this diagram when attempting to make connections. ℵ POWER ℵ: ℑ ℜ CONSOLE LAN ℘ ⊗ ⊕ WAN-3 WAN-2 WAN-1 POWER = power connector to the AC adapter. ℑ : LAN = RJ-45 Ethernet 10Base-T port (metallic). ℜ : CONSOLE = RJ-45 Console port (off-white). ℘ : WAN-1 = RJ-45 WAN port 1 (black). ⊗ : WAN-2 = RJ-45 WAN port 2 (black). ⊕ : WAN-3 = RJ-45 WAN port 3 (black). Figure 1-2.
Prestige 153/153X WAN Bridge/Routers 1.4.4 Prestige 153X Back Panel Figure 1-3 shows the rear panel of your Prestige 153X. Refer to this diagram when making connections. ℵ POWER ℵ: ℜ ℘ CONSOLE ⊗ WAN-1 WAN-2 ⊕ WAN-3 ℑ LAN POWER = power connector to the AC adapter. ℑ : LAN = RJ-45 Ethernet 10Base-T port (metallic). ℜ : CONSOLE = RJ-45 Console port (off-white). ℘ : WAN-1 = 68-pin WAN port 1. ⊗ : WAN-2 = 68-pin WAN port 2. ⊕ : WAN-3 = RJ-45 WAN port 3 (black). Figure 1-3.
Prestige 153/153X WAN Bridge/Routers 1.5 Applications for Prestige 153/153X The following sections show you the possible applications that you can use your Prestige for. 1.5.1 Internet Access The Prestige 153/153X is the ideal high-speed Internet access solution. Your Prestige 153/153X supports the TCP/IP protocol that the Internet uses exclusively. A typical Internet access application is shown in Figure 1-4.
Prestige 153/153X WAN Bridge/Routers 1.5.2 Multi-protocol/Multilink LAN-to-LAN Connection You can use the Prestige to connect two geographically dispersed networks over the WAN connection. The Prestige supports TCP/IP and Novell IPX routing, as well as transparent bridging for other network layer protocols. Your Prestige can also bundle multiple links in a single connection for greater bandwidth. A typical LAN-to-LAN application for your Prestige is shown in Figure 1-5.
Prestige 153/153X WAN Bridge/Routers 1.5.3 Remote Access Server Your Prestige allows remote users to dial-in and gain access to your LAN. This feature enables users that have workstations with remote access capabilities, e.g., Windows 95, to dial in to access the network resources without physically being in the office. Either PAP (Password Authentication Protocol) or CHAP (Challenge Handshake Authentication Protocol) authentication can be used to control the access from the remote users.
Prestige 153/153X WAN Bridge/Routers Chapter 2 Hardware Installation & Initial Setup 2.1 Unpacking your Bridge/Router Before you proceed further, check all items you received with your Prestige against this list to make sure nothing is missing. The complete package should include: Table 2-1.
Prestige 153/153X WAN Bridge/Routers 2.2 Additional Installation Requirements In addition to the contents of your package, there are other hardware and software requirements you need before you can install and use your Prestige. These requirements include: l External modems or ISDN TAs. l A computer with Ethernet 10Base-T NIC (Network Interface Card). l A computer equipped with communications software configured to the following parameters: Ø VT100 terminal emulation. Ø 9600 Baud.
Prestige 153/153X WAN Bridge/Routers 2.3 Connect your WAN Bridge/Router 2.3.1 Prestige 153 Connections Power Adapter Power Outlet PSTN/ISDN Network Modem / ISDN TA POWER CONSOLE LAN Modem / ISDN TA Modem / ISDN TA Modems or ISDN TAs WAN-3 WAN-2 WAN-1 Ethernet LAN Computer or Figure 2-1.
Prestige 153/153X WAN Bridge/Routers 2.3.2 Prestige 153X Connections Power Adapter Power Outlet PSTN/ISDN Network Fractional T1/E1 Modem ISDN TA CSU/DSU Modem / ISDN TA POWER CONSOLE WAN-1 Modem ISDN TA CSU/DSU Modem / ISDN TA WAN-2 Modem ISDN TA Modem / ISDN TA WAN-3 LAN Ethernet LAN Computer or Figure 2-2.
Prestige 153/153X WAN Bridge/Routers This section outlines how to connect your Prestige 153/153X to the LAN and the WAN. Refer to Figure 2-1 or Figure 2-2, depending on your model, when you are making the connections.
Prestige 153/153X WAN Bridge/Routers 2.4 Power On Your Prestige At this point, you should have connected the console cable, the WAN devices, the Ethernet cable, and the power supply. You can now power on your Prestige by plugging the AC adapter to a power outlet of correct voltage. Step 1. Initial Screen When you power on your Prestige, the router performs several internal tests and initializes the WAN devices.
Prestige 153/153X WAN Bridge/Routers Step 2. Enter Password After you press [Enter], the Login screen appears prompting you to enter the password, as shown in Figure 2-4. For your first login, enter the default password 1234. As you enter the password, the screen displays an (X) for each character you type. Enter Password : XXXX Figure 2-4.
Prestige 153/153X WAN Bridge/Routers 2.5 Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your Prestige. Several operations that you should be familiar with before you attempt to modify the configuration are listed in Table 2-2. Table 2-2. Main Menu Commands Operation Press/ Description Move forward to another menu [Enter] To move forward to a sub-menu, type in the number of the desired sub-menu and press [Enter].
Prestige 153/153X WAN Bridge/Routers The SMT displays the Main Menu, as shown in Figure 2-5. Copyright (c) 1994 - 1997 ZyXEL Communications Corp. Prestige 153 Main Menu Getting Started 1. General Setup 2. WAN Setup 3. Ethernet Setup 4. Internet Access Setup Advanced Management 21. Filter Set Configuration 22. SNMP Configuration 23. System Security 24. System Maintenance Advanced Applications 11. Remote Node Setup 12. Static Routing Setup 13. Default Dial-in Setup 14. Dial-in User Setup 99.
Prestige 153/153X WAN Bridge/Routers 2.6 Changing the System Password The first thing you should do before anything else is to change the default system password by following the steps below. Step 1. Select option [23. System Security] in the Main Menu. This will open Menu 23 System Security as shown in Figure 2-6 Menu 23 - System Security 1. Change Password 2. External Server Enter Menu Selection Number: 1 Figure 2-6. Step 2.
Prestige 153/153X WAN Bridge/Routers Step 3. When the Submenu 23.1- System Security-Change Password appears, as shown in Figure 2-7, enter the existing system password, i.e., 1234, then press [Enter]. Menu 23.1 - System Security - Change Password Old Password= XXXX New Password= XXXX Retype to confirm= XXXX Enter here to CONFIRM or ESC to CANCEL: Figure 2-7. Menu 23.1 - System Security - Change Password Step 4. Enter your new system password and press [Enter]. Step 5.
Prestige 153/153X WAN Bridge/Routers 2.7 General Setup The Menu 1 - General Setup contains administrative and system-related information. Step 1. Select option [1. General Setup] in the Main Menu by typing 1 at the menu selection number prompt. Step 2. The Menu 1 - General Setup screen appears, as shown in Figure 2-8. Fill in the required fields marked [?] and turn on the individual protocols for your particular application, as explained in Table 2-4.
Prestige 153/153X WAN Bridge/Routers Table 2-4. General Setup Menu Fields Field Description System Name Choose a descriptive name for identification purposes. This name can be up to 8 alphanumeric characters long. Spaces are not allowed, but dashes “-” and underscores "_" are accepted. This name can be retrieved remotely via SNMP and will be displayed at the prompt in the Command Mode. Location (optional) Enter the geographic location (up to 31 characters) of your Prestige.
Prestige 153/153X WAN Bridge/Routers 2.8 WAN Setup This section describes how to configure the WAN ports and the WAN devices using Menu 2WAN Setup. If advanced setup is required, go to Menu 2.2. When you finish the setup, the Prestige uses this information to initialize the WAN port and the attached WAN device. 2.8.1 Prestige 153 WAN Port Setup This section describe the WAN port setup for P153 only. Setup for P153X is described in the following section. Step 1. Select option [2.
Prestige 153/153X WAN Bridge/Routers Step 3. This will bring up Menu 2.1 - Async WAN Port Setup, as shown in Figure 2-10. Menu 2.1 - Async WAN Port Setup Modem Name= ZyXEL Active= Yes Connection Type= Switch Phone Number= Device Type= 56K Modem Port Speed= 115200 AT Command String: Init= ats0=0 Advanced Setup= No Press ENTER to Confirm or ESC to Cancel: Figure 2-10. Prestige 153 Menu 2.
Prestige 153/153X WAN Bridge/Routers Table 2-5 describes how to configure a WAN port. Table 2-5. Prestige 153 Async WAN Port Setup Menu Fields Field Description Example Modem Name Enter a descriptive name for the WAN device connected to this port. Active Set to [Yes] to activate a WAN port. Press space-bar to toggle [Yes/No] Connection Type Select the connection type for this line. Select [Switch] for a dial-up line or [Leased] for leased line.
Prestige 153/153X WAN Bridge/Routers Table 2-5. Prestige 153 Async WAN Port Setup Menu Fields (continued) AT Command String: Init Enter the AT command string to initialize the WAN device. When the Connection Type is set to [Switch], you must include AT command “s0=0” to disable modem auto-answer; your Prestige will decide when to answer an incoming call. Advanced Setup To edit the Advanced Setup for this WAN port, move the cursor to this field, use the space bar to select [Yes] and press [Enter].
Prestige 153/153X WAN Bridge/Routers 2.8.2 Prestige 153X WAN Port Setup In addition to asynchronous devices, WAN ports 1 and 2 on Prestige 153X also support synchronous devices such as CSU/DSU. You can only connect an asynchronous device to WAN Port 3. To configure the WAN ports, go to Menu 2- WAN Port Setup as shown in Figure 2-11, and select the number (1, 2 or 3) of the port you wish to configure. Menu 2 - WAN Port Setup 1. Wan Port 1 (Sync/Async) 2. Wan Port 2 (Sync/Async) 3.
Prestige 153/153X WAN Bridge/Routers Figure 2-12 shows the menu for Sync/Async WAN port configuration . Menu 2.1 - Sync/Async WAN Port Setup Modem Name= ZyXEL Active= Yes Connection Type= Switch-Async Phone Number= Clock Source= Internal/External Device Type= 56K Modem Port Speed= 115200 AT Command String: Init= ats0=0 Advanced Setup= No Press ENTER to Confirm or ESC to Cancel: Figure 2-12. Prestige 153X Menu 2.
Prestige 153/153X WAN Bridge/Routers Table 2-6. Prestige 153X Sync/Async WAN Port Setup Menu Fields (continued) Field Description Example Phone Number Enter the telephone number assigned to your line by your telephone company. Note that your Prestige only accepts digits; do not include dashes and spaces in this field. Clock Source Use the space bar to select the clock source of the sync device. Default is [External], and the Port Speed field is not applicable ([N/A]).
Prestige 153/153X WAN Bridge/Routers 2.8.3 Prestige 153/153X Advanced WAN Port Setup The Advanced WAN Port Setup Menu allows you to configure additional AT Commands for the WAN device and the call control parameters. Follow the common Advanced WAN Port Setup procedure in this section for both Prestige 153 and 153X Step 1. In Menu 2.1, move the cursor to the Advanced Setup field and press the space bar to select [Yes], then press [Enter]. Step 2. When Menu 2.1.
Prestige 153/153X WAN Bridge/Routers Refer to Table 2-7 for details on how to fill in the AT commands fields. Table 2-7. Advanced WAN Port Setup AT Commands Fields Field Description Default AT Command Strings: Dial Drop Answer Drop DTR When Hang Up Enter the AT Command string to make a call. Enter the AT Command string to drop a call. [~] represents a one second wait. Enter the AT Command string to answer a call.
Prestige 153/153X WAN Bridge/Routers 2.8.3.2 DTR Signal The majority of WAN devices default to hanging up the current call when the DTR (Data Terminal Ready) signal is dropped by the DTE. When “Drop DTR When Hang Up” is set to yes, the Prestige will use this hardware signal to force the WAN device to hang up, in addition to issuing the drop command (ATH). 2.8.3.
Prestige 153/153X WAN Bridge/Routers Table 2-8 below describes the call control parameters. Table 2-8. Advanced WAN Port Setup Call Control Parameters Field Description Dial Timeout (sec) The Prestige will timeout if it can not set up an outgoing call within the timeout value. Retry Count How many times a busy or no-answer phone number is retried before it is put on the blacklist. Retry Interval (sec) Elapsed time after a call fails before another call may be retried.
Prestige 153/153X WAN Bridge/Routers 2.9 Ethernet Setup This section describes how to configure the Ethernet using Menu 3 - Ethernet Setup. From the Main Menu, enter 3 to bring up Menu 3. Menu 3 - Ethernet Setup 1. 2. 3. 4. General Setup TCP/IP and DHCP Setup Novell IPX Setup Bridge Setup Enter Menu Selection Number: Figure 2-14. Menu 3 - Ethernet Setup 2.9.1 General Ethernet Setup This menu allows you to specify the filter sets that you wish to apply to the Ethernet traffic.
Prestige 153/153X WAN Bridge/Routers If you need to define filters, please read Chapter 9 - Filter Set Configuration, then return to this menu to define the filter sets. 2.10 Protocol Dependent Ethernet Setup For the protocol-dependent setup, go to the appropriate section for details: l For TCP/IP Ethernet Setup refer to Chapter 3 - Internet Access Application. l For Novell IPX Ethernet Setup refer to Section 7.4 - IPX Ethernet Setup in Chapter 7 Novell IPX Configuration for LAN-to-LAN.
Prestige 153/153X WAN Bridge/Routers Chapter 3 Internet Access This chapter shows you how to configure the LAN as well as the WAN of your Prestige for Internet access. 3.1 Route IP Setup The first step is to enable the IP routing in Menu 1 - General Setup. To edit Menu 1, enter 1 in the Main Menu to select [1. General Setup] and press [Enter]. Set the Route IP field to [Yes] by pressing the space bar as shown in Figure 3-1.
Prestige 153/153X WAN Bridge/Routers 3.2 TCP/IP Parameters 3.2.1 IP Address and Subnet Mask Similar to the houses on a street that share a common street name, the machines on a LAN share one common network number, also. Where you obtain your network number depends on your particular situation. If the ISP (Internet Service Provider) or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
Prestige 153/153X WAN Bridge/Routers Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP2B uses subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so will not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also.
Prestige 153/153X WAN Bridge/Routers 3.3 TCP/IP and DHCP Ethernet Setup You will now use Menu 3.2 to configure the Ethernet of your Prestige for a TCP/IP connection. To edit Menu 3.2, select the menu option [3. Ethernet Setup] in the Main Menu. When Menu 3 appears, select the submenu option [2. TCP/IP and DHCP Setup] and press [Enter]. The screen now displays Menu 3.2 - TCP/IP and DHCP Ethernet Setup, as shown in Figure 3-2. Menu 3.
Prestige 153/153X WAN Bridge/Routers Follow the instructions in Table 3-1. to configure the DHCP fields. Table 3-1. DHCP Ethernet Setup Menu Fields Field Description Example This field enables/disabled the DHCP server. If it is set to [Server], your Prestige will act as a DHCP server. If set to [None], DHCP server will be disabled.
Prestige 153/153X WAN Bridge/Routers Follow Table 3-2 to configure TCP/IP parameters for the Ethernet port. Table 3-2. Field TCP/IP Ethernet Setup Menu Fields Description Example TCP/IP Setup IP Address Enter the IP address of your Prestige in dotted decimal notation. 192.168.1.1 (default) IP Subnet Mask Your Prestige will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the value computed by the Prestige. 255.255.255.
Prestige 153/153X WAN Bridge/Routers 3.4 Internet Access Configuration Menu 4 allows you to enter the Internet access parameters in one screen. Menu 4 is actually a simplified setup for one of the remote nodes that you can access through menu 11. Before you configure your Prestige for Internet access, you need to collect your Internet account information from your ISP. Use Table 3-3to record your Internet Account Information. Table 3-3.
Prestige 153/153X WAN Bridge/Routers From the Main Menu, enter option [4. Internet Access Setup] to go to Menu 4 - Internet Access Setup, as displayed in Figure 3-3. Menu 4 - Internet Access Setup ISP's Name= ? ISP Gateway IP Addr= Connection Type= Switch Leased Ports= N/A Pri Phone #= ? Sec Phone #= My Login= My Password= ******** Single User Account= No Local IP Addr= N/A Server IP Addr= N/A Edit Script Options= No Device Type= 56K Modem Enter here to CONFIRM or ESC to CANCEL: Figure 3-3.
Prestige 153/153X WAN Bridge/Routers Table 3-4 contain instructions on how to configure your Prestige for Internet access. Table 3-4. Internet Access Setup Menu Fields Field Description Observation ISP's Name Enter the name of your Internet Service Provider. (This information is for identification purposes only.) Myisp ISP IP Addr Enter the IP Address of the remote gateway at the ISP's site. If you do not have this data, just leave it blank.
Prestige 153/153X WAN Bridge/Routers Table 3-4. Internet Access Setup Menu Fields (continued) Field Description Single User Account See Section 3.5 for a detailed discussion on the Single User Account feature. Edit Script Option To edit the parameters, select [Yes] and press [Enter]. This will bring you to Menu 4.1 – Internet Setup Script. This field is not applicable if the Connection Type is [Leased]. Device Type The Prestige only chooses a free device of the selected Device Type to dial out.
Prestige 153/153X WAN Bridge/Routers 3.5 Single User Account Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, you will have to lease a block of legal, or globally unique, IP addresses from the ISP. The Single User Account (SUA) feature allows you to have the same benefits as having multiple legal addresses, but only pay for one IP address, thus saving significantly on the subscription fees. (Check with your ISP before you enable this feature).
Prestige 153/153X WAN Bridge/Routers The IP address for the SUA can be either fixed or dynamically assigned when a call is connected. In addition, you can designate a server, e.g., a web server, on your local network and make it accessible to outside world. If you do not define a server, SUA offers the additional benefit of firewall protection. If no server is defined, all incoming inquiries will be filtered out by your Prestige and thus preventing intruders from probing your network.
Prestige 153/153X WAN Bridge/Routers 3.5.2 Single User Account Configuration The steps for configuring your Prestige for Single User Account are identical to the conventional Internet access (See configuration instructions in Table 3-4) with the exception that you need to fill in three extra fields in Menu 4 - Internet Access Setup, as shown in Figure 3-5.
Prestige 153/153X WAN Bridge/Routers Table 3-5. Single User Account Menu Fields Field Description Single User Account Select [Yes] to enable SUA. Local IP Addr. If your ISP did not assigns you a static IP address, enter [0.0.0.0]; otherwise, enter that IP address here. Server IP Addr. If you want to make a server accessible to outside users, enter that server's inside LAN IP address here; otherwise, enter 0.0.0.0 in this field. Press [Enter] at the message [Press ENTER to Confirm ...
Prestige 153/153X WAN Bridge/Routers remote IP addresses of 1.1.1.1 combined with the subnet mask of 0.0.0.0 creates a default route that is equivalent to the one derived from the primary ISP. 3.6.2 Switch ISP Follow these steps when you need to switch from your primary ISP to a backup ISP: Step 1. Enter Menu 11 and select your Primary ISP. Step 2. In Menu 11.1, set the Active field to [No]. Step 3. Enter Menu 11 again and select your Backup ISP. Step 4. In Menu 11.1, set the Active field to [Yes].
Prestige 153/153X WAN Bridge/Routers Chapter 4 Remote Node Configuration A remote node is required for placing calls to a remote gateway. A remote node represents both the gateway and the network behind it across a WAN connection. Note that when you use Menu 4 to set up Internet access, you are actually configuring one of the remote nodes. Once a remote node is configured correctly, traffic to the remote network will trigger your Prestige to make a call automatically, i.e., Dial On Demand.
Prestige 153/153X WAN Bridge/Routers Menu 11. - Remote Node Setup 1. ________ 2. ________ 3. ________ 4. ________ Enter Node # to Edit: Figure 4-1. Step 3. Menu 11 - Remote Node Setup When Submenu 11.1. - Remote Node Profile appears, select the type of line that will be used (dial-up line or leased line). Set the Connection Type to one of the following values: l [Switch] for dial-up lines. l [Leased] for leased lines. Selecting [Leased] will bring you to Submenu 11.1.
Prestige 153/153X WAN Bridge/Routers Table 4-1 contains the instructions on how to configure the Remote Node Menu for dial-up lines. Table 4-1. Remote Node Profile Menu Fields for Dial-up Lines Field Description Rem Node Name This is a required field [?]. Enter a descriptive name for the remote node, e.g., Corp. Options This field can be up to eight characters. This name must be unique from any other remote node name or remote dial-in user name.
Prestige 153/153X WAN Bridge/Routers Table 4-1. Remote Node Profile Menu Fields for Dial-up Lines (continued) Field Incoming: Description Rem Node Login Name Options Enter the login name that this remote node will use when it calls your Prestige. The login name in this field combined with the Rem Node Password will be used to authenticate this node. Incoming: Rem Node Password Enter the password used when this remote node calls your Prestige.
Prestige 153/153X WAN Bridge/Routers Table 4-1. Remote Node Profile Menu Fields for Dial-up Lines (continued) Field Description Outgoing: My Password This is a required field [?] if [Call Direction] is either [Both] or [Outgoing]. Enter the password for your Prestige when it calls this remote node. Outgoing: Authen This field sets the authentication protocol used for outgoing calls.
Prestige 153/153X WAN Bridge/Routers Table 4-1. Remote Node Profile Menu Fields for Dial-up Lines (continued) Field Outgoing: Description Pri(mary) Sec(ondary) Phone Numbers Options Your Prestige always calls this remote node using the Primary Phone number first for a dial-up line. If the Primary Phone number is busy or does not answer, your Prestige will dial the Secondary Phone number if available. Some areas require dialing the pound sign # before the phone number for local calls.
Prestige 153/153X WAN Bridge/Routers Table 4-1. Remote Node Profile Menu Fields for Dial-up Lines (continued) Field Description Options Edit PPP Options To edit the PPP options for this remote node, move the cursor to this field, use the space bar to select [Yes] and press [Enter]. This will bring you to Menu 11.2 - Remote Node PPP Options. For more information on configuring PPP options, see the section Editing PPP Options. Rem IP Addr This is a required field [?] if IP routing is enabled.
Prestige 153/153X WAN Bridge/Routers Table 4-1. Remote Node Profile Menu Fields for Dial-up Lines (continued) Field Description Session Options: This value specifies the number of idle seconds that elapses before the remote node is automatically disconnected. Idle seconds is the period of time where no data is transmitted from your Prestige. Administrative packets such as RIP are not counted as data. The default is 300 seconds (5 minutes).
Prestige 153/153X WAN Bridge/Routers 4.1.4 Bandwidth on Demand The Bandwidth on Demand (BOD) feature adds or subtracts links dynamically according to traffic demand. After the initial call, the Prestige uses BAP (Bandwidth Allocation Protocol) to ask the peer for additional telephone number if BACP (Bandwidth Allocation Control Protocol) is negotiated. Otherwise, the Prestige uses the statically configured (primary and secondary) telephone numbers of the remote node.
Prestige 153/153X WAN Bridge/Routers 4.1.5 Editing PPP Options To edit the remote node PPP Options, move the cursor to the [Edit PPP Options] field in Menu 11.1 - Remote Node Profile, and use the space bar to select [Yes]. Press [Enter] to open Menu 11.2, as shown in Figure 4-3. Menu 11.2 - Remote Node PPP Options Encapsulation= Standard PPP Compression= No Multiple Link Options: BOD Calculation= Transmit or Receive Min. Ports= 1 Max.
Prestige 153/153X WAN Bridge/Routers Table 4-2 describes the Remote Node PPP Options Menu, and contains instructions on how to configure the PPP options fields. Table 4-2. Remote Node PPP Options Menu Fields Field Description Encapsulation Select the vendor-specific encapsulation for the link. There are two options in this field. Compression l Standard PPP - Standard PPP encapsulation will be used. l CISCO PPP - Cisco PPP encapsulation will be used. Turn on/off Stac data compression.
Prestige 153/153X WAN Bridge/Routers Table 4-2. Remote Node PPP Options Menu Fields (continued) Field Description Option Add Persist This parameter specifies the number of seconds where traffic is above the adding threshold before the Prestige will bring up the second link. Default = 5 sec Subtract Persist This parameter specifies the number of seconds where traffic is below the subtraction threshold before your Prestige drops the second link.
Prestige 153/153X WAN Bridge/Routers wait until the ‘Expect’ string is matched before it proceeds to set 2, and so on for the rest of the script. When both the ‘Expect’ and the ‘Send’ fields of the current set are empty, the Prestige will terminate the script processing and start PPP negotiation. This implies two things: first, the sets must be contiguous; the sets after an empty one are ignored. Second, the last set should match the final message sent by the server.
Prestige 153/153X WAN Bridge/Routers The following Table 4-3 describes each field in Menu 11.4 – Remote Node Setup Script. Table 4-3. Remote Node Script Menu Fields Field Description Option Active Press the space bar to toggle between [Yes] and [No]. [Yes/No] Set 1-6: Expect Enter an Expect string to match. After matching the Expect string, the Prestige returns the string in the [Send] field. Set 1-6: Send Enter a string to send out after the Expect string is matched.
Prestige 153/153X WAN Bridge/Routers 4.2 Leased Line Support A leased line provides a connection that is always up without dialing and modem negotiation, which can take tens of second. The WAN port on the Prestige allows you to connect a leased line modem (async). Obviously, the Connection Type of the WAN port must be selected as [Leased] in Menu 2.1 - Async WAN Port Setup. Please note that synchronous device support is available only on WAN port 1 and 2 of Prestige 153X. 4.2.
Prestige 153/153X WAN Bridge/Routers Table 4-4 describes the fields in Menu 11.1.2 - Remote Node Profile for Leased Line that are specific to leased lines. Table 4-4. Remote Node Profile Menu Fields for Leased Lines Field Description Option Connection Type: [Leased] Use space bar to toggle [Switch/Leased], select [Leased] and press [Enter]. Leased Port(s) Enter the Wan Port numbers of this remote node for a Leased Line connection.
Prestige 153/153X WAN Bridge/Routers Table 4-4. Remote Node Profile Menu Fields for Leased Lines (continued) Field Description Outgoing: Authen This field sets the authentication protocol used for outgoing calls. Option (*for backup line only) Options for this field are: Remote Node Configuration l CHAP/PAP - Your Prestige will accept either CHAP or PAP when calling this remote node. l CHAP - accept CHAP only. l PAP - accept PAP only.
Prestige 153/153X WAN Bridge/Routers Table 4-4. Remote Node Profile Menu Fields for Leased Lines (continued) Field Description Backup Line Call Direction When the backup function is enabled and if all links (WAN Ports) in a leased line connections drop, your Prestige will pick up an available dial-up WAN port to trigger a backup connection. Device Type Option l If this parameter is set to [Both], your Prestige can both place and receive calls to/from this remote node.
Prestige 153/153X WAN Bridge/Routers Chapter 5 Remote Node TCP/IP Configuration This chapter shows you how to configure the TCP/IP parameters of a remote node. 5.1 LAN-to-LAN Application A typical LAN-to-LAN application is to use your Prestige to connect a branch office to the headquarters, as depicted in the following Figure 5-1. Coporate LAN Branch Office LAN Prestige 153/153X Figure 5-1.
Prestige 153/153X WAN Bridge/Routers 5.1.1 Remote Node Setup Follow the procedure in Chapter 5 - Remote Node Configuration to configure the protocolindependent parameters in Menu 11 - Remote Node Profile. For the TCP/IP parameters, follow the instructions below. If you are configuring your Prestige to receive incoming calls, you also need to set the default dial-in parameters in Menu 13. Follow the steps below to edit Menu 11.3 - Remote Node Network Layer Options shown in Figure 5-2: Step 1. In Menu 11.
Prestige 153/153X WAN Bridge/Routers The following diagram in Figure 5-3 explains the Sample IP Addresses to help you to understand the field of My Wan Address in Menu 11.3. Remote Network Local Network 204.247.203.Y 204.247.203.X Prestige 153/153X Figure 5-3. 204.5.1.Z 204.247.203.Y Prestige 153/153X Sample IP Addresses for a TCP/IP LAN-to-LAN Connection To configure the TCP/IP parameters of a remote node, first configure the three fields in Menu 11 – Remote Node Profile, as shown in Table 5-1.
Prestige 153/153X WAN Bridge/Routers The following table shows the TCP/IP related fields in Menu 11.3 - Remote Node Network Layer Options. Table 5-2. Remote Node TCP/IP Configuration Rem IP Address This shows the IP address you entered for this remote node in the previous menu, Remote Node Profile. Rem IP Subnet Mask Enter the subnet mask for the remote network.
Prestige 153/153X WAN Bridge/Routers Table 5-2. Remote Node TCP/IP Configuration (continued) Field Description Metric The metric represents the “cost” of transmission for routing purposes. IP routing uses hop count as the measurement of cost, with a minimum of [1] for directly connected networks. Enter a number that approximates the cost for this link. The number need not be precise, but it must be between [1] and [16]. In practice, [2] or [3] is usually a good number.
Prestige 153/153X WAN Bridge/Routers 5.1.2 IP Static Route Setup Static routes tell the Prestige routing information that it cannot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly connected to a remote node. Each remote node specifies only the network to which the gateway is directly connected, and the Prestige has no knowledge of the networks beyond.
Prestige 153/153X WAN Bridge/Routers To configure an IP static route, use Menu 12, Static Route Setup, as displayed in Figure 5-5. Menu 12 - Static Route Setup IP Static Route 1. distant 2. ________ 3. ________ 4. ________ Bridge Static Route 21. ________ 22. ________ 23. ________ 24. ________ IPX Static Route 11. ________ 12. ________ 13. ________ 14. ________ Enter Selection Number: Figure 5-5. Menu 12 - Static Route Setup From Menu 12, select one of the IP Static Routes to open Menu 12.
Prestige 153/153X WAN Bridge/Routers Table 5-3 describes the fields for Menu 12.1 - Edit IP Static Route Setup. Table 5-3. Edit IP Static Route Menu Fields Field Description Route Name Enter a descriptive name for this route. This is for identification purpose only. Active This field allows you to activate/deactivate this static route. Destination IP Address This parameter specifies the IP address of the final destination. Routing is always based on network number.
Prestige 153/153X WAN Bridge/Routers Chapter 6 IPX Configuration This chapter shows you how to configure the IPX parameters of the Prestige. 6.1 IPX Network Environment Novell bundles the protocol stack, the server software and routing functionality in their NetWare server products. So a NetWare server is not only a file or print server, it is also a router. 6.1.1 Network and Node Number Every IPX machine has a network number and a node number, together they form the complete address of the machine.
Prestige 153/153X WAN Bridge/Routers 6.1.3 External Network Number Each of the four logical networks (based on frame type) has its own external network number. 6.1.4 Internal Network Number In addition to the external network numbers, each NetWare server has its own internal network number that is a virtual network to which the server is attached. It is important to remember that every network number must be unique for that entire internetwork, either internal or external.
Prestige 153/153X WAN Bridge/Routers 6.2 Prestige in an IPX Environment There are two different scenarios in which your Prestige is deployed: l LAN with a server (server side) l LAN without a server (client side) Figure 6-1 illustrates a typical IPX LAN-to-LAN application. Seed Router (Client Side) Not Seed Router (Server Side) Assigns Network Number Learns Network Number NetWare Clients NetWare Prestige 153/153X Figure 6-1. Prestige 153/153X Server Prestige in an IPX Environment 6.2.
Prestige 153/153X WAN Bridge/Routers 6.3 IPX Spoofing Your Prestige comes with several pre-defined call filters designed to prevent certain IPX packets from triggering a call to a remote node. The built-in call filters are defined as follows: l Block periodical RIP (Routing Information Protocol) and SAP (Service Advertising Protocol) response messages. l Block NetWare serialization packets. l Allow SAP and RIP inquiry packets.
Prestige 153/153X WAN Bridge/Routers 6.4 IPX Ethernet Setup From Menu 3 - Ethernet Setup, select option [3. Novell IPX Setup] to go to Menu 3.3 - Novell IPX Ethernet Setup as shown in Figure 6-2. Menu 3.3 - Novell IPX Ethernet Setup Seed Router= No Frame Type 802.2= Yes IPX Network #= N/A Frame Type 802.3= No IPX Network #= N/A Frame Type Ethernet II= No IPX Network #= N/A Frame Type SNAP= No IPX Network #= N/A Enter here to CONFIRM or ESC to CANCEL: Press Space Bar to Toggle. Figure 6-2.
Prestige 153/153X WAN Bridge/Routers The following Table 6-1 describes the Novell IPX Ethernet Setup Menu. Table 6-1. Novell IPX Ethernet Setup Fields Field Description Options Seed Router Determine if your Prestige is to act as a seed router. [Yes/No] Frame Type Enable/Disable the individual frame type. Remember to enable only the ones that are actually used on your network. IPX Network # If your Prestige is a seed router, enter a unique network number for each frame type enabled. [802.
Prestige 153/153X WAN Bridge/Routers 6.
Prestige 153/153X WAN Bridge/Routers 6.5.1 IPX Remote Node Setup Follow the procedure in Chapter 5 to configure the protocol-independent parameters in Menu 11.1 - Remote Node Profile. For the IPX-related parameters in Menu 11.3 - Remote Node Network Layer Options, follow the instructions below. If you want the Prestige to receive incoming calls, you must also configure the default dial-in parameters in Menu 13. To edit Menu 11.
Prestige 153/153X WAN Bridge/Routers Table 6-2describes the IPX protocol-dependent parameters of the remote node Setup. Table 6-2. Remote Node Novell IPX Options Field Description Option Dial-On-Query This field is necessary for your Prestige on the client side. When set to [Yes], any Get Service SAP or RIP broadcasts will trigger your Prestige to make a call to that remote node. [Yes/No] Rem LAN Net # In this field, enter the internal network number of the NetWare server on the remote LAN.
Prestige 153/153X WAN Bridge/Routers 6.5.2 IPX Static Route Setup Similar to IP, IPX static routes tell the Prestige how to reach servers beyond a remote node before a connection to that remote node is established. From Menu 12, select one of the IPX Static Routes to open Menu 12.2 - Edit IPX Static Route, as shown in Figure 6-5. Menu 12.
Prestige 153/153X WAN Bridge/Routers Table 6-3 contains the instructions on how to configure the Edit IP Static Route Menu. Table 6-3. Edit IPX Static Route Menu Fields Field Description Server Name In this field, enter the name of the server. This must be the exact name configured in the NetWare server. Network # This field contains the internal network number of the remote server that you wish to access. [00000000] or [FFFFFFFF] are reserved.
Prestige 153/153X WAN Bridge/Routers Chapter 7 Bridging Setup This chapter shows you how to configure the bridging parameters of your Prestige. 7.1 Bridging in General Bridging bases the forwarding decision on the MAC (Media Access Control), or hardware, address, while routing does on the network layer (IP or IPX) address. Bridging allows the Prestige to transport packets of network layer protocols that the Prestige does not route, e.g., SNA, from one network to another.
Prestige 153/153X WAN Bridge/Routers From Menu 3 - Ethernet Setup, enter option [4. Bridge Setup] and Menu 3.5 - Bridge Ethernet Setup displays as shown in Figure 7-1. Menu 3.5 - Bridge Ethernet Setup Handle IPX= None Press ENTER to CONFIRM or ESC to CANCEL: Press Space Bar to Toggle. Figure 7-1. Menu 3.5 - Bridge Ethernet Setup Table 7-1 describes how to configure the [Handle IPX] field in Menu 3.5. Table 7-1.
Prestige 153/153X WAN Bridge/Routers 7.2.1 Remote Node Bridging Setup Follow the procedure in Chapter 5 to configure the protocol-independent parameters in Menu 11.1 - Remote Node Profile. For bridging-related parameters, you need to configure Menu 11.3 Remote Node Network Layer Options. To setup Menu 11.3 - Remote Node Network Layer Options shown in Figure 7-2, follow these steps: Step 1. In Menu 11.1, make sure the [Bridge] field is set to [Yes]. Step 2.
Prestige 153/153X WAN Bridge/Routers Table 7-2 describes the bridging-dependent parameters in the Remote Node Profile and Network Layers menus. Table 7-2. Remote Node Bridge Options Field Description Bridge Make sure this field is set to [Yes]. Edit IP/IPX/Bridge Press the space bar to change it to [Yes] and press [Enter] to go to the Network Layer Options Menu. Dial-On-Broadcast This field is necessary for your Prestige on the caller side LAN.
Prestige 153/153X WAN Bridge/Routers 7.2.2 Bridge Static Route Setup Similar to network layer static routes, a bridging static route tells the Prestige about the route to a node before a connection is established. You configure bridge static routes in Menu 12.3, as shown in Figure 7-3. Menu 12.3 - Edit Bridge Static Route Route #: 21 Route Name= Active= No Ether Address= ? IP Address= Gateway Node= 1 Press ENTER to CONFIRM or ESC to CANCEL: Figure 7-3. Bridging Setup Menu 12.
Prestige 153/153X WAN Bridge/Routers The following Table 7-3 describes the Bridge Static Route Menu. Table 7-3. Bridge Static Route Menu Fields Field Description Route Name Enter a name for the bridge static route for identification purposes. Active Indicates whether the static route is active or not. Ether Address Enter the MAC address of the destination machine that you wish to bridge the packets to.
Prestige 153/153X WAN Bridge/Routers Chapter 8 Dial-in Server Configuration You can configure your Prestige to receive calls from remote dial-in users, e.g., telecommuters, as well as remote nodes. There are several differences between dial-in users and remote nodes, as summarized in Table 8-1. Table 8-1. Remote Dial-in Users/Remote Nodes Comparison Chart Remote Dial-in Users Remote Nodes Your Prestige will only answer calls from remote dial-in users, it will not make call to them.
Prestige 153/153X WAN Bridge/Routers 8.1 Remote Access Server Telecommuting enables people to work at remote sites and yet still have access to the resources in the business office. Typically, a telecommuter will use a client workstation with TCP/IP and dial-out capabilities, e.g., a Windows PC or a Macintosh, connected to a modem. For telecommuters to call in to your Prestige, you need to configure a dial-in user profile for each telecommuter.
Prestige 153/153X WAN Bridge/Routers 8.2 LAN-to-LAN Application Your Prestige can also be used as a dial-in server for LAN-to-LAN application to provide access for the workstations on a remote network. For your Prestige to be set up as a LAN-toLAN server, you need to configure the Default Dial-In Setup to set the operational parameters for incoming calls. Additionally, you must create a remote node for the router on the remote network (See Chapter 5 - Remote node Configuration).
Prestige 153/153X WAN Bridge/Routers 8.3 Default Dial-In Setup This section covers the default dial-in parameters. The parameters in Menu 13 affect incoming calls from all remote dial-in users, and remote nodes until authentication is completed. Once authentication is completed, and if it matches a remote node, your Prestige will use parameters from that particular remote node.
Prestige 153/153X WAN Bridge/Routers Table 8-2. Default Dial-in Setup Fields Field Description Telco Options: CLID Authen This field sets the CLID authentication parameter for all incoming calls. There are three options for this field: PPP Options: Recv. Authen [None] l None - No CLID is required. l Required - CLID must be available, or the Prestige will not answer the call.
Prestige 153/153X WAN Bridge/Routers Table 8-2. Default Dial-in Setup Fields (continued) Field Description Option Multiple Link Options: Max Port Enter the maximum number of ports in an MP bundle between your Prestige and a remote dial-in user. Default = 1 Callback Budget Management: Allocated Budget (min) This field sets the budget callback time for all remote dial-in users. The default for this field is [0] for no budget control.
Prestige 153/153X WAN Bridge/Routers Table 8-2. Default Dial-in Setup Fields (continued) Field Description Option Dial-In IPX Net. Num. Supplied By: IPX Pool This field tells your Prestige to provide the remote host with an IPX network number from the pool. Otherwise, your Prestige will generate a random IPX network number. [Yes/No] IPX Start Net. Num. This field is applicable only if you selected [Yes] in the Dial-In IPX Net. Num. Supplied By: IPX Pool field.
Prestige 153/153X WAN Bridge/Routers 8.4 Dial-In Users Setup The following steps describe the procedure for setting up a remote dial-in user. Step 1. From the Main Menu, enter option 14 to go to Menu 14 - Dial-in User Setup, as shown in Figure 8-4. Menu 14 - Dial-in User Setup 1. 2. 3. 4. 5. 6. 7. 8. johndoe ________ ________ ________ ________ ________ ________ ________ Enter Menu Selection Number: Figure 8-4. Step 2.
Prestige 153/153X WAN Bridge/Routers Table 8-3 provides instructions on how to fill in the Edit Dial-In User fields. Table 8-3. Edit Dial-in User Menu Fields Field Description User Name This is a required field. This will be used as the login name for authentication. Choose a descriptive word for login, e.g., johndoe Active You can disallow dial-in access to this user by setting this field to [Inactive]. Inactive users are displayed with a [-] (minus sign) at the beginning of the name in Menu 14.
Prestige 153/153X WAN Bridge/Routers Table 8-3. Edit Dial-in User Menu Fields (continued) Field Description Option Rem CLID If you enable CLID Authen field in Menu 13, then you need to specify the telephone number from which this user calls. Your Prestige will check the CLID in the incoming call against the CLIDs in the database. If they do not match and CLID Authen is Required, your Prestige will not answer the call. Idle Timeout Enter the idle time (in seconds).
Prestige 153/153X WAN Bridge/Routers Chapter 9 Filter Configuration 9.1 About Filtering Your Prestige uses filters to decide whether or not to allow passage of a data packet and/or to make a call. There are two types of filters: data filters and call filters. Data filters screen the data to determine if the packet should be allowed to pass. Data filters are further divided into incoming and outgoing filters, depending on the direction of the packet direction relative to a port.
Prestige 153/153X WAN Bridge/Routers Call Filters Outgoing Packet No match Data Filters Match Drop packet No match Built-in default Call Filters User-defined Call Filters (if applicable) Match Drop packet if line not up Active Data Initiate call if line not up Send packet and reset Idle Timer Match Drop packet if line not up Or Or Send packet but do not reset Idle Timer Figure 9-1.
Prestige 153/153X WAN Bridge/Routers 9.2 Configuring a Filter Set To configure a filter sets, follow the procedure below: Step 1. Select option [21. Filter Set Configuration] from the Main Menu to open Menu 21.
Prestige 153/153X WAN Bridge/Routers Menu 21.1 - Filter Rules Summary # A Type Filter Rules M m n - - ---- -------------------------------------------- --------- - - 1 N 2 N 3 N 4 N 5 N 6 N Enter Filter Rule Number (1-6) to Configure: Figure 9-3. Menu 21.1 - Filter Rules Summary 9.2.1 Filter Rules Summary Menu This screen shows the summary of the existing rules in the filter set. The following tables contain a brief description of the abbreviations used in Menu 21.1. Table 9-1.
Prestige 153/153X WAN Bridge/Routers Table 9-1. Abbreviations Used in the Filter Rules Summary Menu (continued) Abbreviations Description Filter Rules The filter rule parameters will be displayed here (see below). M Refers to More. Display [Y] means there are more rules to check. [N] means there are no more rules to check. m Refers to Action Matched. [F] means to forward the packet. [D] means to drop the packet. [N] means check the next rule.
Prestige 153/153X WAN Bridge/Routers l If the filter type is IPX, the following abbreviations listed in Table 9-3 will be used. Table 9-3. Abbreviations Used If Filter Type Is IPX Abbreviation Description PT IPX Packet Type SS Source Socket DS Destination Socket l If the filter type is GEN (generic), the following abbreviations listed in Table 9-4 will be used. Table 9-4.
Prestige 153/153X WAN Bridge/Routers 9.3 Configuring a Filter Rule To configure a filter rule, enter its number in Menu 21.1 - Filter Rules Summary and press Enter to open Menu 21.1.1 for the rule. There are three types of filter rules: TCP/IP, IPX and Generic. Depending on the type of rule, the parameters below the type will be different. Use the space bar to select the type of rule that you wish to create in the Filter Type field and press Enter to open the respective menu. 9.3.
Prestige 153/153X WAN Bridge/Routers The following Table 9-5 describes how to configure your TCP/IP filter rule. Table 9-5. TCP/IP Filter Rule Menu Fields Field Description Active This field activates/deactivates the filter rule. IP Protocol Protocol refers to the upper layer protocol, e.g., TCP is 6, UDP is 17 and ICMP is 1.
Prestige 153/153X WAN Bridge/Routers Field Description Option If More is [Yes], then Action Matched and Action Not Matched will be N/A. Log Action Matched Select the logging option from the following: l None – No packets will be logged. l Action Matched - Only packets that match the rule parameters will be logged. l Action Not Matched - Only packets that do not match the rule parameters will be logged. l Both – All packets will be logged. Select the action for a matching packet.
Prestige 153/153X WAN Bridge/Routers 9.3.2 Generic Filter Rule This section shows you how to configure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP/IPX packets. For IP and IPX packets, it is generally easier to use the IP and IPX rules directly. For generic rules, the Prestige treats a packet as a byte stream as opposed to an IP or IPX packet. You specify the portion of the packet to check with the Offset (from 0) and the Length fields, both in bytes.
Prestige 153/153X WAN Bridge/Routers Table 9-6 describes the fields in the Generic Filter Rule Menu. Table 9-6. Generic Filter Rule Menu Fields Field Description Default Offset Enter the starting byte of the data portion in the packet that you wish to compare. The range for this field is from 0 to 255. Default = 0 Length Enter the byte count of the data portion in the packet that you wish to compare. The range for this field is 0 to 8.
Prestige 153/153X WAN Bridge/Routers 9.3.3 Novell IPX Filter Rule This section shows you how to configure an IPX filter rule. IPX filters allow you to base the rules on the fields in the IPX headers. To configure an IPX rules, select IPX Filter Rule from the Filter Type field and press Enter to open Menu 21.1.3 IPX Filter Rule, as shown in Figure 9-6. Menu 21.1.
Prestige 153/153X WAN Bridge/Routers Table 9-7 describes the IPX Filter Rule. Table 9-7. IPX Filter Rule Menu Fields Field Description IPX Packet Type Enter the IPX packet type (1-byte in hexadecimal) you wish to filter. The popular types are (in hexdecimal): 01 - RIP 04 - SAP 05 - SPX (Sequenced Packet eXchange) 11 - NCP (Netware Core Protocol) 14 - Novell NetBIOS Destination/Source Network # Enter the destination/source network numbers (4-byte in hexadecimal) of the packet that you wish to filter.
Prestige 153/153X WAN Bridge/Routers Chapter 10 SNMP Configuration 10.1 About SNMP SNMP (Simple Network Management Protocol) is a protocol for network management and monitoring. Your Prestige supports SNMP agent functionality, which allows a manager station to manage and monitor the Prestige through the network. Keep in mind that SNMP is only available if TCP/IP is configured on your Prestige. 10.2 SNMP Configuration To configure SNMP, select option [22.
Prestige 153/153X WAN Bridge/Routers The following table describes the SNMP configuration parameters. Table 10-1. SNMP Configuration Menu Fields Field Description Default Get Community Enter the Get Community, which is the password for the incoming Getand GetNext- requests from the management station. public Set Community Enter the set community, which is the password for incoming Setrequests from the management station.
Prestige 153/153X WAN Bridge/Routers Chapter 11 System Security This chapter covers Menu 23, which is for you to change the system password and to configure an external authentication server. 11.1 Changing the System Password To change the system password, following steps below: Step 1. Select option [23. System Security] in the Main Menu to open Menu 23 - System Security as shown in Figure 11-1. Menu 23 - System Security 1. Change Password 2.
Prestige 153/153X WAN Bridge/Routers Step 2. From the System Security Menu, select option [1. Change Password] to open Menu 23.1 - System Security - Change Password. Step 3. Enter your existing system password and press [Enter]. Menu 23.1 - System Security - Change Password Old Password= XXXXXXXX New Password= XXXXXXXX Retype to confirm= XXXXXXXX Enter here to CONFIRM or ESC to CANCEL: Figure 11-2. Menu 23.1 - System Security - Change Password Step 4.
Prestige 153/153X WAN Bridge/Routers 11.2 Using RADIUS Authentication Your Prestige has a built-in dial-up user list; however, the number of users that can be stored locally is limited due to memory constraints. If you have more users than what the Prestige can store locally, use an external RADIUS (Remote Authentication Dial-In User Service) server that provides authentication service for unlimited number of users. 11.2.
Prestige 153/153X WAN Bridge/Routers 11.2.2 RADIUS Server Configuration To configure the RADIUS server, select option 23, System Security, from the Main Menu to open Menu 23 - System Security. Select option 2, External Server from this menu to open Menu 23.2 System Security - External Server, shown in Figure 11-3. Menu 23.
Prestige 153/153X WAN Bridge/Routers The fields in the System Security - External Server Menu are listed in Table 11-1. Table 11-1. System Security - External Server Menu Fields Field Description Active Determines whether the external security facility is enabled. Default If No, only the built-in dial-up user list will be used. If Yes, the built-in dial-up user list will be searched first, then the external authentication server. Type Determines the type of the external authentication server.
Prestige 153/153X WAN Bridge/Routers 11.2.2.1 The Key Field The “key”, or password, must match that in the client file in the RADIUS server’s /etc/raddb directory, as shown in the following example: # Client Name Key #------------------------192.168.1.1 1234 After you configure a RADIUS server, your Prestige will use it to authenticate all users that it can not find in its internal dial-up user list (see Menu 14) 11.2.
Prestige 153/153X WAN Bridge/Routers Chapter 12 Telnet Configuration and Capabilities 12.1 About Telnet Configuration Before the Prestige is properly setup for TCP/IP, the only option for configuring it is through the console port. Once your Prestige is configured, you can use telnet to configure it remotely as shown in Error! Reference source not found..
Prestige 153/153X WAN Bridge/Routers from the outside, you must first telnet to the inside server, and then telnet from the server to the Prestige using its inside LAN IP address. If no insider server is specified, telnet to the SUA’s IP address will connect to the Prestige directly. 12.3 Telnet Capabilities 12.3.1 Single Administrator To prevent confusion and discrepancy on the configuration, your Prestige only allows one administrator to log in at any time.
Prestige 153/153X WAN Bridge/Routers Chapter 13 System Maintenance This chapter covers the diagnostic tools that help you to maintain your Prestige. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter describes how to use these tools in detail. Select menu 24 in the main menu to bring up Menu 24 - System Maintenance, as shown in Figure 13-1. Menu 24 - System Maintenance 1. 2. 3. 4. 5. 6. 7. 8. 9.
Prestige 153/153X WAN Bridge/Routers 13.1 System Status The first selection, System Status, gives you information on the version of your system firmware and the status and statistics of the ports, as shown in Figure 13-2. Menu 24.
Prestige 153/153X WAN Bridge/Routers The following Table 13-1 describes the fields present in Menu 24.1 - System Maintenance Status. Table 13-1. System Maintenance - Status Menu Fields Field Description 1. Port Shows statistics for the WAN ports, respectively. 2. Status Shows the status of the port ([Idle], [Calling], or [Answering]). When the connection is up, it shows the name of the remote node or the dial-in user currently connected. 3. Speed The connection speed of the current call. 4.
Prestige 153/153X WAN Bridge/Routers Table 13-1. System Maintenance - Status Menu Fields (continued) Field Description 16. Name Displays the system name of your Prestige. This information can be modified in Menu 1 - General Setup. 17. RAS S/W Version Refers to the version of the current RAS firmware. 18. Ethernet Address Refers to the Ethernet MAC address assigned to your Prestige. 19.
Prestige 153/153X WAN Bridge/Routers 13.2 Terminal Baud Rate You can set up different baud rates for the console port through Menu 24.2 - Terminal Baud Rate. Your Prestige supports 9600 (default), 19200, 38400, 57600, and 115200bps for the console port. Use the space bar to select the desired baud rate in Menu 24.2, as shown in Figure 13-4. Menu 24.2 -- System Maintenance - Change Terminal Baud Rate Terminal Baud Rate: 115200 Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle.
Prestige 153/153X WAN Bridge/Routers Examples of typical error and information messages are presented in Figure 13-5. 60 4 PP07 61 4 PINI 63 e PINI Clear Error Log Figure 13-5.
Prestige 153/153X WAN Bridge/Routers 13.3.2 Syslog And Accounting The Prestige uses the UNIX syslog facility to log the CDR (Call Detail Record) and system messages to a syslog server. Syslog and accounting can be configured in Menu 24.3.2 - System Maintenance - Syslog and Accounting, as shown in Figure 13-6. Menu 24.3.2 -- System Maintenance - Syslog and Accounting Syslog: Active= No Syslog IP Address= ? Log Facility= Local 1 Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle.
Prestige 153/153X WAN Bridge/Routers Your Prestige sends three types of syslog messages: call information messages (i.e. CDR), error information messages and session information messages.
Prestige 153/153X WAN Bridge/Routers 13.4 Diagnostic The diagnostic facility allows you to test the different aspects of your Prestige to determine if it is working properly. Menu 24.4 allows you to choose among various types of diagnostic tests to evaluate your system, as shown in Figure 13-7. Menu 24.4 - System Maintenance - Diagnostic WAN 1. 2. 3. 4. Drop Modem Call Reset Modem Manual Call Redirect to Modem System 21. Reboot System 22. Command Mode TCP/IP 11. Internet Setup Test 12.
Prestige 153/153X WAN Bridge/Routers The following Table 13-3 describes the diagnostic tests available in Menu 24.4 for your Prestige and the connections. Table 13-3. System Maintenance Menu Diagnostic Test Options Fields Description Drop WAN Port This command drops the call on a WAN port. Selecting this option brings you to the Select WAN Port field to specify the port. Reset WAN Port This command resets the specified WAN port.
Prestige 153/153X WAN Bridge/Routers Figure 13-8 shows an example of a successful connection after selecting option [3. Manual Call] in Menu 24.4. Start dialing for node <1> ### Hit any key to continue. ### Dialing chan<2> phone:40101 Call CONNECT speed<64000> chan<2> prot<1> LCP up CHAP send response CHAP login to remote OK! IPCP negotiation started IPCP up Figure 13-8.
Prestige 153/153X WAN Bridge/Routers 13.5 Backup Configuration Option 5 from Menu 24 - System Maintenance allows you to backup the current Prestige configuration to your workstation. Backup is highly recommended once your Prestige is functioning properly. You must perform the backup and restore through the console port. Any serial communications program should work fine; however, you must use XMODEM protocol to perform the download/upload.
Prestige 153/153X WAN Bridge/Routers 13.7 Firmware Update Menu 24.7 -- System Maintenance - Upload Firmware allows you to upgrade the system firmware and the ROM file system. Uploading is only possible through the console port. Note that this function erases the old data before installing the new one. Do not attempt to update unless you have the new firmware at hand. There are 2 components in the system: RAS code (program code) and ROM File system, as shown Figure 13-10 Menu 24.
Prestige 153/153X WAN Bridge/Routers 13.7.1 Upload RAS code RAS (Remote Access Service) code refers to the firmware that controls the main function of the Prestige. Menu 24.7.1 shows you the instructions for uploading RAS code. If you answer yes to the prompt, the Prestige will reboot automatically. Press any key when you see the message “Press Any key to enter Debug Mode within 3 seconds.” to enter debug mode.
Prestige 153/153X WAN Bridge/Routers 13.7.2 Uploading ROM File The configuration, system-related data, the error log and the trace log are all stored in the ROM file system. Menu 24.7.2 shows you the instructions for uploading ROM file. Please be aware that uploading the ROM file replaces everything contained within. If you answer yes to the prompt, the Prestige will reboot automatically. Press any key when you see the message “Press Any key to enter Debug Mode within 3 seconds.” to enter debug mode.
Prestige 153/153X WAN Bridge/Routers 13.8 Command Interpreter Mode This option allows you to enter the command interpreter mode. A list of valid commands can be found by typing [help] at the command prompt. For more detailed information, check the ZyXEL Web site or send an e-mail to the ZyXEL Support Group. 13.9 Call Control The Prestige provides two call control functions: budget management and blacklist.
Prestige 153/153X WAN Bridge/Routers 13.9.1 Blacklist The phone numbers on the blacklist are numbers that the Prestige had problems connecting in the past. The only operation allowed is for you to take a number off the list by entering its index number. Menu 24.9.2 shows the list of telephone numbers that have been blacklisted. Menu 24.9.2 - Blacklist Phone Number 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. Remove Selection(1-14): Figure 13-14. System Maintenance Menu 24.9.
Prestige 153/153X WAN Bridge/Routers 13.9.2 Budget Management Menu 24.9.3 shows the budget management statistics for outgoing calls. Menu 24.9.3 - Budget Management Remote Node 1. isp1 2. -------3. -------4. -------5. Dial-in User Connection Time/Total Budget No Budget ------No Budget Elapsed Time/Total Period No Budget ------No Budget Reset Node (0 to update screen): Figure 13-15. Menu 24.9.
Prestige 153/153X WAN Bridge/Routers Chapter 14 Troubleshooting This chapter covers the potential problems you may run into and the possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. 14.1 Problems Starting Up the Prestige Table 14-1.
Prestige 153/153X WAN Bridge/Routers 14.2 Problems With the WAN Ports Table 14-2. Troubleshooting a WAN Port Connection Troubleshooting Corrective Action RDY LED of a WAN Port is not ON Check if the WAN port is connected to an external modem/ISDN TA. Check if the power of the external modem/ISDN TA is turned on. 14.3 Problems with the LAN Interface Table 14-3.
Prestige 153/153X WAN Bridge/Routers 14.4 Problems Connecting to a Remote Node or ISP Table 14-4. Troubleshooting a Connection to a Remote Node or ISP Troubleshooting Corrective Action Can’t connect to a remote node or ISP Check Menu 24.1 to verify the line status. If it indicates [down], then refer to the section on the line problems. In Menu 24.4.5, do a manual call to that remote node. Observe the messages and take appropriate actions.
Prestige 153/153X WAN Bridge/Routers 14.5 Problems for Remote Users Table 14-5. Troubleshooting for Remote User to Dial-in Troubleshooting Corrective Action Remote user can’t dial-in to the Prestige. First verify that you have configured the authentication parameters in Menu 13. These would be CLID Authen, Recv. Authen, and Mutual Authen. In Menu 14, verify the user name and password for the remote dial-in user.
Prestige 153/153X WAN Bridge/Routers Chapter 15 Acronyms and Abbreviations BAP/BACP Bandwidth Allocation Protocol/Bandwidth Allocation Control protocol BOD Bandwidth on Demand CDR Call Detail Record CHAP Challenge Handshake Authentication Protocol CLID Calling Line IDentification CSU/DSU Channel Service Unit/Data Service Unit DCE Data Communications Equipment DHCP Dynamic Host Configuration Protocol DNS Domain Name System DTE Data Terminal Equipment IANA Internet Assigned Number Author
Prestige 153/153X WAN Bridge/Routers PSTN Public Switched Telephone Network RADIUS Remote Authentication Dial-In User Service RIP Routing Information Protocol SAP (IPX) Service Advertising Protocol SNAP Sub-Network Access Protocol SNMP Simple Network Management Protocol SUA Single User Account TA (ISDN) Terminal Adapter TCP Transmission Control Protocol UDP User Datagram Protocol UTP Unshielded Twisted Pair (cable) WAN Wide Area Network 15-2 Acronyms and Abbreviations
Prestige 153/153X WAN Bridge/Routers Index 10Base-T, 2-5 802.2, 6-1 802.3, 6-1 add persist, 4-10, 4-13 asynchronous , 2-19 AT command, 2-17, 2-20, 2-22 authentication, 4-5, 4-9, 4-18, 8-5 backup, 3-14, 4-19, 13-12 BACP, 4-10 bandwidth increment, 4-12 Bandwidth on Demand. See BOD BAP, 4-10 blacklist, 13-16, 13-17 BOD, 4-10 bridge.
Prestige 153/153X WAN Bridge/Routers IPX pool, 8-7 IPX static route, 6-10 ISDN, 1-1 ISDN TA, 1-1 ISP, 3-2, 3-9, 3-14 LAN, 1-9, 3-2 leased line, 1-1, 2-16, 2-19, 3-9, 4-2, 4-16 leased port, 4-17 log, 13-5 login, 3-9, 4-4, 4-17 MAC, 7-1 manual call, 13-10 metric, 5-5, 5-8 MP, 1-1, 1-2, 4-9, 4-12, 8-6 Multilink. See M P Multilink Protocol.
Prestige 153/153X WAN Bridge/Routers I-2 Index
