Prestige 1600 Universal Access Concentrator ZyNOS Version 3.20 Dec.
Prestige 1600 Universal Access Concentrator Prestige 1600 Universal Access Concentrator Copyright Copyright © 2000 by ZyXEL Communications Corporation.
Prestige 1600 Universal Access Concentrator ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase.
Prestige 1600 Universal Access Concentrator Customer Support If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation offices worldwide, in one of the following ways: When Contacting Customer Support Representative When you contact your customer support representative, have the following information ready: ♦ Prestige model and serial number ♦ Information in Menu 24.2.
Prestige 1600 Universal Access Concentrator Table of Contents Prestige 1600 ............................................................................................................................................................ii Customer Support ....................................................................................................................................................iv Table of Contents ..........................................................................................
Prestige 1600 Universal Access Concentrator 4.2.1 Standards ............................................................................................................................................... 4-2 4.2.2 How To Configure The WAN Port For Frame Relay ........................................................................... 4-3 4.3 How To Configure Frame Relay for Internet Access ..................................................................................... 4-3 4.3.1 Encapsulation ........
Prestige 1600 Universal Access Concentrator 9.1.3 How NAT works ................................................................................................................................... 9-2 9.1.4 NAT Mapping Types ............................................................................................................................ 9-2 9.1.5 SUA (Single User Account) Versus NAT............................................................................................. 9-3 9.2 SMT Menus .....
Prestige 1600 Universal Access Concentrator Chapter 12 System Security................................................................................................................................................. 12-1 12.1 Changing the System Password ............................................................................................................. 12-1 12.2 RADIUS Support.......................................................................................................................
Prestige 1600 Universal Access Concentrator 15.2.3 15.3 Backup using the Console Port ....................................................................................................... 15-3 Restore Configuration ............................................................................................................................. 15-4 15.3.1 Restore using FTP ........................................................................................................................... 15-4 15.3.
Prestige 1600 Universal Access Concentrator List of Figures Figure 1-1 Remote Configuration ...............................................................................................................................................1-4 Figure 2-1 Deployed at a High-rise .............................................................................................................................................2-1 Figure 2-2 Campus Deployment ...............................................................
Prestige 1600 Universal Access Concentrator Figure 8-3 Menu 12.1 - Edit IP Static Route............................................................................................................................... 8-3 Figure 9-1 How NAT Works ....................................................................................................................................................... 9-2 Figure 9-2 Applying NAT for Internet Access.....................................................................
Prestige 1600 Universal Access Concentrator Figure 12-2 Menu 23.1 - System Security - Change Password .................................................................................................12-1 Figure 12-3 RADIUS Authentication Example.........................................................................................................................12-3 Figure 12-4 Menu 23.2 - System Security - External Server....................................................................................
Prestige 1600 Universal Access Concentrator Figure 16-1 Menu 25 - IP Routing Policy Setup....................................................................................................................... 16-2 Figure 16-2 Menu 25 - IP Routing Policy Summary ................................................................................................................ 16-2 Figure 16-3 Menu 25.1.1 - IP Routing Policy.........................................................................................
Prestige 1600 Universal Access Concentrator List of Tables Table 1-1 P1600 DSL Clients......................................................................................................................................................1-5 Table 3-1 Navigating the SMT ....................................................................................................................................................3-2 Table 3-2 Main Menu Summary...............................................................
Prestige 1600 Universal Access Concentrator Table 14-3 NM Status Fields..................................................................................................................................................... 14-4 Table 14-4 Fields in System Maintenance ................................................................................................................................ 14-5 Table 14-5 System Maintenance Menu Syslog Parameters............................................................
Prestige 1600 Universal Access Concentrator Preface Congratulations on your purchase of the Prestige 1600 Universal Access Concentrator. This preface introduces you to your concentrator and discusses the organization and conventions of this user’s guide. It also provides information on other related documentation. About the Prestige The Prestige 1600 is a scalable access concentration platform, delivering networking services at multiple selectable speeds.
Prestige 1600 Universal Access Concentrator For brevity’s sake, we will use “e.g.” as a shorthand for “for instance”, and “i.e.” as a shorthand for “that is” or “in other words” throughout this manual. The Prestige 1600 will also be referred to as the Prestige or the P1600 in this manual. Related Documentation Hardware Installation Guide Support Notes More detailed information about the Prestige and examples of its use can be found in the Support Notes accessible through the ZyXEL web pages at zyxel.com.
Prestige 1600 Universal Access Concentrator What is DSL? DSL stands for Digital Subscriber Line. Local Exchange carriers currently use a single unshielded twisted pair of wire on the local loop (between Central Office and Customer Premises) for transmitting voice, which requires 3003,400 Hz of bandwidth. The wires are, however, capable of carrying information at much higher rate when modern digital processing techniques are deployed.
Prestige 1600 Universal Access Concentrator DSL Comparison Chart Technology Downstream Rate Upstream Rate Wires CO distance IDSL 128 Kbps 128 Kbps 1 Copper Pair 18,000 feet ADSL 256Kbps to 6.
Prestige 1600 Universal Access Concentrator Chapter 1 Getting to Know Your Concentrator This chapter describes the key features, benefits and applications of your Prestige. The Prestige 1600 is a scalable, high-performance, easy-to-configure access concentrator. It consolidates multiple traffic streams onto a single backbone network. It can be deployed at either the customer’s premise (CP) or a service provider’s Central Office (CO).
Prestige 1600 Universal Access Concentrator Network Address Translation (NAT) NAT (Network Address Translation - NAT, RFC 1631) allows the translation of an Internet Protocol address used within one network to a different IP address known within another network.
Prestige 1600 Universal Access Concentrator ! Monitoring of WAN/LAN status and port status ! Diagnostics ! Safety tested and high security 1.3 Detailed Features of the Prestige 1600 Modular Architecture The P1600 chassis is equipped with three network module slots, one system module and two removable fan modules. Configuration Types The Prestige 1600 can be configured via SMT Menu 1 as a primary, secondary or standalone device. 1.
Prestige 1600 Universal Access Concentrator Figure 1-1 Remote Configuration Please note that for figures in this manual, the “Prestige” refers to the Prestige 1600 and that the Prestige 1600 clients are not labeled - please see the next section. Robust Security Features Your Prestige supports CHAP (Challenge Handshake Authentication Protocol), PAP (Password Authentication Protocol) and RADIUS (Remote Authentication Dial in User Service). In addition, the SMT is password protected.
Prestige 1600 Universal Access Concentrator 1.4 Prestige 1600 and Prestige DSL Clients DSL clients suitable for the Prestige 1600 are shown in the following table. Table 1-1 P1600 DSL Clients DSL Network Module Prestige Client IDSL Prestige 100L Omni 128L ADSL Prestige 642 SDSL Prestige 681 Please note that for figures in this manual, the word “Prestige” refers to the Prestige 1600 and that the Prestige 1600 clients are not labeled.
Prestige 1600 Universal Access Concentrator Chapter 2 Prestige 1600 Applications This chapter shows you some applications of the Prestige 1600. 2.1 Multi Purpose Concentrator The Prestige 1600 is a highly flexible, high-speed Internet access solution. It is an integrated, cost-effective solution for line concentration, routing and network management.
Prestige 1600 Universal Access Concentrator For Internet access with the P1600 in standalone mode, you can connect a broadband device such as a DSL modem or cable modem to the Ethernet port. 2.2.2 Campus Connectivity In a campus environment, there are several buildings that need to be interconnected to the computer room. The P1600 offers a long reach and cost effective solution for universities, corporations, etc. to extend networks to multiple buildings spread out over large campuses.
Prestige 1600 Universal Access Concentrator Figure 2-3 Deployed at an ISP A few examples of possible configurations for these deployments are shown next. 2.2.4 Configuration Example One Figure 2-4 A Very High Capacity Concentrator 2.2.5 Configuration Example Two You can also have any number of P1600 standalones chained to an external Ethernet hub as shown next.
Prestige 1600 Universal Access Concentrator Figure 2-5 High Capacity Concentrator 2.2.6 Configuration Example Three Depending on your requirement you can vary the number of Prestige 1600 secondaries as shown next. Figure 2-6 Medium Capacity Concentrator 2.2.7 Configuration Example Four You can also use the P1600 standalone concentrator for Internet Access.
Prestige 1600 Universal Access Concentrator Chapter 3 Initial Setup This chapter shows you how to perform initial setup using the SMT. 3.1 Initial Screen When you power on your Prestige 1600, the router performs several internal tests and initializes the ports. After the initialization, the Prestige asks you to press [ENTER] to continue, as shown below: Copyright (c) 2000 ZyXEL Communications Corp. ethernet address: 00:a0:c5:00:50:02 Press ENTER to continue... Figure 3-1 Power-On Display 3.1.
Prestige 1600 Universal Access Concentrator 3.2 Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your Prestige. Several operations that you should be familiar with before you attempt to modify the configuration are listed in Table 3-1. Table 3-1 Navigating the SMT Operation Keystrokes Description Move down to another menu [ENTER] To move forward to a submenu, type in the number of the desired submenu and press [ENTER].
Prestige 1600 Universal Access Concentrator Initial Setup 3-3
Prestige 1600 Universal Access Concentrator 3.3.1 P1600 Main Menu - Primary The SMT displays a general Main Menu first. Once you configure the system in Menu 1 - General Setup you can see the P1600 primary Main Menu, as shown next. Copyright (c) 2000 ZyXEL Communications Corp. Prestige 1600 Main Menu (MyPrimary) Getting Started 1. 2. 3. 4. 6. General Setup WAN Setup Ethernet Setup Internet Access Setup Port Setup Advanced Applications 11. Remote Node Setup 12. Static Routing Setup 15.
Prestige 1600 Universal Access Concentrator 99 3.3.2 Exit To exit the SMT and return to a blank screen. Secondary and Standalone Main Menu The SMT Main Menu for the secondary and standalone Prestige models is as shown next. Copyright (c) 2000 ZyXEL Communications Corp. Prestige 1600 Main Menu (MySeconda) Advanced Management 21. Filter Set Configuration 22. SNMP Configuration 23. System Security 24. System Maintenance 25. IP Routing Policy Setup Getting Started 1. General Setup 3. Ethernet Setup 6.
Prestige 1600 Universal Access Concentrator Menu 23.1 - System Security - Change Password Old Password= XXXX New Password= XXXX Retype to confirm= XXXX Press ENTER to Confirm or ESC to Cancel: Figure 3-6 Menu 23.1 - System Security - Change Password Step 4. Enter your new system password and press [ENTER]. Step 5. Re-type your new system password for confirmation and press [ENTER]. 3.
Prestige 1600 Universal Access Concentrator Menu 1 - General Setup System Name= MyPrimary Configuration Type= Primary Secondary ID= N/A Location= Contact Person's Name= JohnDoe Primary DNS Server= 0.0.0.0 Secondary DNS Server= 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 3-7 Menu 1 - General Setup (Primary) When you configure the Prestige as a secondary or standalone model (Configuration Type field), you will see the following screen.
Prestige 1600 Universal Access Concentrator Field Description Example Leave these entries at 0.0.0.0 if a WAN DHCP server provides them.
Prestige 1600 Universal Access Concentrator Chapter 4 WAN Port Setup This section describes setting up your WAN port including Frame Relay. Select option 2 from the Main Menu by typing 2 at the menu selection number prompt. You will see a screen as shown next. Menu 2 - WAN Port Setup Clock Source = External Port Speed = N/A Edit Frame Relay Setup= No Only change the default option (No) if you wish to configure the WAN port for frame relay.
Prestige 1600 Universal Access Concentrator Figure 4-2 Configuring The WAN Port for PPP over HDLC To run PPP over HDLC directly without frame relay, the Line Type field in Menu 2.1.2 - Frame Relay Setup must be set to None. To make sure frame relay is disabled, go to menu 2 and then to Menu 2.1.2 – Frame Relay Setup. If the Line Type field is not None, press [SPACE BAR] to change it before saving the configuration. 4.
Prestige 1600 Universal Access Concentrator 4.2.2 How To Configure The WAN Port For Frame Relay Go to menu 2, then move the cursor to the Edit Frame Relay Setup= field, press the [SPACEBAR] once to display Yes and then press [ENTER]. This takes you to Menu 2.1.2 - Frame Relay Setup shown next. Menu 2.1.2 – Frame Relay Setup Line Type = User Link Management = ANSI(T1.618) Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle. Figure 4-4 Menu 2.1.2 - Frame Relay Setup Table 4-2 Menu 2.1.
Prestige 1600 Universal Access Concentrator 4.3.2 DLCI The carrier gives you a DLCI (Data Link Connection Identifier) for each frame relay connection to a destination. Identifiers can range from 1 to 991 with restrictions as shown in the following table. The default DLCI for the first connection is 16. Table 4-3 Data Link Connection Identifiers DLCI 4.3.
Prestige 1600 Universal Access Concentrator Menu 4.2 – Internet Setup Frame Relay Options Encapsulation= RFC 1490 DLCI = 16 CIR (kbps)= 64 EIR (kbps)= 80 Enter here to CONFIRM or ESC to CANCEL: Figure 4-6 Menu 4.2 - Internet Setup Frame Relay Options Table 4-4 Menu 4.2 - Internet Setup Frame Relay Options Field Encapsulation 4.4 Description Options/Examples Be sure to use the encapsulation method required by your ISP. The Prestige supports the following methods. See section 4.3.1 for more information.
Prestige 1600 Universal Access Concentrator Menu 11.
Prestige 1600 Universal Access Concentrator Chapter 5 Internet Access This chapter shows you how to configure the Prestige 1600 primary and Prestige 1600 standalone for Internet access. 5.1 Introduction Menu 4 - Internet Access Setup of the SMT allows you to configure the Internet access parameters in a single screen. For Internet access using the Prestige 1600 standalone you need to only set up a default route using Menu 12 - Static Default Route.
Prestige 1600 Universal Access Concentrator Configuration Type (Menu 1) P1600 IP address Port numbers Slot 2 IP address range assigned to DSL Clients (Menu 6.1) IDSL:16 ports 192.168.253.17 ~ 192.168.253.32 ADSL/SDSL: 192.168.253.17 ~ 192.168.253.24 8 ports Slot 3 IDSL Not Available ADSL/SDSL: 192.168.253.33 ~ 192.168.253.40 8 ports Secondary 3 192.168.1.4 Slot 1 IDSL:16 ports 192.168.252.1 ~ 192.168.252.16 ADSL/SDSL: 8 ports 192.268.252.1 ~ 192.168.252.8 Slot 2 IDSL:16 ports 192.168.
Prestige 1600 Universal Access Concentrator 5.1.2 Standalone IP Pool When the Prestige Configuration Type (Menu 1) is set up as Standalone and Internet access is configured through the Ethernet port, you have to manually enter Ethernet TCP/IP information using Menu 3. There are no dynamic default IP address assignments in this scenario. The default route has to be configured in Menu 12. 5.2 TCP/IP Parameters If you wish to know more about TCP/IP, please read on. Or you can skip to 4.
Prestige 1600 Universal Access Concentrator The Prestige supports both IGMP version 1 (IGMP-v1) and IGMP-v2. At start up, the Prestige queries all directly connected networks to gather group membership. After that, the Prestige periodically updates this information by sending a membership query to 224.0.0.1. IP Multicasting can be enabled/disabled on the Prestige LAN and/or WAN interfaces using menus 3.2 (LAN) and 11.3 (WAN). Select None to disable IP Multicasting on these interfaces. 5.
Prestige 1600 Universal Access Concentrator Field IP Policies Description Example You can apply up to four IP Policy sets (from twelve) by entering their numbers separated by commas, e.g., 3, 4, 6, 11. Please see the NAT chapter for a more detailed discussion on the Network Network Address Translation feature. The choices are Full Feature, Address Translation None and SUA Only.
Prestige 1600 Universal Access Concentrator Menu 4 - Internet Access Setup ISP's Name= ChangeMe My Login= 1234 My Password= ******** Network Address Translation= SUA Only My WAN Addr= 0.0.0.0 Address Mapping Set= N/A Edit Frame Relay Options= No Press ENTER to Confirm or ESC to Cancel: Figure 5-2 Menu 4 - Internet Access Setup Table 5-4 contains instructions on how to configure your Prestige 1600 for Internet access.
Prestige 1600 Universal Access Concentrator Chapter 6 DSL Port Setup This chapter explains how to edit DSL Port information. Use Menu 6 to configure the DSL ports. Select 6 from the Main Menu to enter Menu 6 - Slot Selection. The Prestige automatically detects which network module is inserted in each slot. The following menu appears when you have 2 ISDL network modules inserted in slots 1 and 2. Note that ISDL network modules (32 ports per module) may only be inserted in slots 1 and 2 but not slot 3.
Prestige 1600 Universal Access Concentrator Menu 6 - IDSL Port Setup(Secondary 3, Slot 1) port # Active Type User Name 1. Yes IDSL ________ 2. Yes IDSL ________ 3. Yes IDSL ________ 4. Yes IDSL ________ 5. Yes IDSL ________ 6. Yes IDSL ________ 7. Yes IDSL ________ 8. Yes IDSL ________ 9. Yes IDSL ________ 10. Yes IDSL ________ 11. Yes IDSL ________ 12. Yes IDSL ________ 13. Yes IDSL ________ 14. Yes IDSL ________ 15. Yes IDSL ________ 16.
Prestige 1600 Universal Access Concentrator 6.1 Port Usage Enter a port number to bring up the following menu (for an IDSL module installed). Menu 6.1 - Port Usage Active= Yes Device Type: IDSL Speed= 128K Encapsulation= PPP Authen Method= Local Protocol= None User Name= Password= ******** IP Address Assigned to Client= 192.168.255.1 Start of Public IP Address= 0.0.0.0 IP Count= 0 Multicast= N/A IP Policies= Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle. Figure 6-3 Menu 6.
Prestige 1600 Universal Access Concentrator Field Description Option Authen(ticatio n) Method This field sets the authentication method for incoming calls. You can choose Local or RADIUS. The default for this field is Local. Please see the next section on User Authentication for more details. Local, RADIUS Protocol Press the [SPACE BAR], then [ENTER] to choose from None, CHAP/PAP, CHAP or PAP. The default is None.
Prestige 1600 Universal Access Concentrator Menu 6.1 - Port Usage Active= Yes Device Type: IDSL Speed= 128K Encapsulation= PPP Authen Method= Local Protocol= None User Name= Password= ******** IP Address Assigned to Client= 192.168.255.2 Start of Public IP Address= a.95.1.100 IP Count= 6 Multicast= N/A IP Policies= Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle.
Prestige 1600 Universal Access Concentrator Chapter 7 Remote Node Configuration This chapter shows you how to configure the profile and TCP/IP parameters of a remote node. A remote node is required for placing calls to a remote gateway. A remote node represents both the gateway and the network behind it across a WAN connection. Note that when you use Menu 4 to set up Internet access, you are actually configuring a remote node. 7.
Prestige 1600 Universal Access Concentrator The following table contains the instructions on how to configure the Remote Node Profile Menu for leased lines. Table 7-1 Remote Node Profile Menu Fields for Leased Lines Field Description Options Rem Node Name This is a required field. Enter a descriptive name for the remote node, e.g., myISP. This field can be up to eight characters. Active Press [SPACE BAR] to toggle between Yes and No.
Prestige 1600 Universal Access Concentrator Field Description Options defined. Once you have completed filling in Menu 11.1.1 - Remote Node Profile, press [ENTER] at the message “Press ENTER to Confirm…” to save your configuration, or press [ESC] at any time to cancel. 7.2 Outgoing Authentication Protocol Generally speaking, you should employ the strongest authentication protocol possible, for obvious reasons.
Prestige 1600 Universal Access Concentrator Table 7-2 Remote Node PPP Options Menu Fields Field Encapsulation Compression Description Option Select the vendor-specific encapsulation for the link. The default is Standard PPP. Select Cisco PPP only when the remote gateway is a Cisco machine. Standard PPP - Standard PPP encapsulation will be used. Standard PPP CISCO PPP - Cisco PPP encapsulation will be used. CISCO PPP Turn on/off Stac data compression. The default for this field is Off.
Prestige 1600 Universal Access Concentrator To configure the TCP/IP parameters of a remote node, first configure the two fields in Menu 11 - Remote Node Profile, as shown. Table 7-3 TCP/IP related fields in Menu 11.1 - Remote Node Profile Field Description Rem IP Address Enter the IP address of the remote gateway in Menu 11.1 Remote Node Profile. Edit IP Press [SPACE BAR] to select Yes and press [ENTER] to go to Menu 11.3 - Remote Node Network Layer Options.
Prestige 1600 Universal Access Concentrator Field Description Option IGMP-v2 IGMP-v2 None Multicast Turn on/off IGMP support and select the version from IGMPv2/IGMP-v1/None. IP Policies You can apply up to four IP Policy sets (from twelve) by entering their numbers separated by commas, e.g., 3, 4, 6, 11. Once you have completed filling in the Network Layer Options Menu, press [ENTER] to return to Menu 11. Press [ENTER] at the message “Press ENTER to Confirm...
Prestige 1600 Universal Access Concentrator Chapter 8 Static Route This chapter tells you how to configure static routes for the Prestige. 8.1.1 Basics If you wish to know more about static route basics , please read on. Skip to the Static Route Setup section for the actual configuration. Static routes tell a router routing information that it cannot learn automatically through other means.
Prestige 1600 Universal Access Concentrator To configure an IP static route, use Menu 12 - IP Static Route Setup, as displayed next. Menu 12 - IP Static Route Setup No. 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. Name ________ ________ ________ ________ ________ ________ ________ ________ ________ ________ ________ ________ No. 13. 14. 15. 16. 17. 18. 19. 20. 21. 22. 23. 24. Name ________ ________ ________ ________ ________ ________ ________ ________ ________ ________ ________ ________ No. 25. 26. 27. 28.
Prestige 1600 Universal Access Concentrator Choosing a static route to edit produces the following screen. Menu 12.1 - Edit IP Static Route Route #: 1 Route Name= ? Active= No Destination IP Address= ? IP Subnet Mask= ? Gateway IP Address= ? Metric= 2 Private= No Press ENTER to Confirm or ESC to Cancel: Figure 8-3 Menu 12.1 - Edit IP Static Route The following table describes the fields for Menu 12.1 - Edit IP Static Route Setup.
Prestige 1600 Universal Access Concentrator Chapter 9 Network Address Translation (NAT) This chapter discusses how to configure NAT on the Prestige. 9.1 Introduction NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet, e.g., the source address of an outgoing packet, used within one network to a different IP address known within another network. 9.1.1 NAT Definitions Inside/outside denotes where a host is located relative to the Prestige, e.g.
Prestige 1600 Universal Access Concentrator 9.1.3 How NAT works Each packet has two addresses - a source address and a destination address. For outgoing packets, the ILA (Inside Local Address) is the source address on the LAN, and the IGA (Inside Global Address) is the source address on the WAN. For incoming packets, the ILA is the destination address on the LAN, and the IGA is the destination address on the WAN.
Prestige 1600 Universal Access Concentrator Table 9-1 NAT Mapping Types Type IP Mapping SMT abbreviation One-to-One ILA1"# IGA1 1:1 Many-to-One (SUA/PAT) ILA1"# IGA1 M:1 ILA2"# IGA1 … Many-to-Many Overload ILA1"# IGA1 M:M Ov ILA2"# IGA2 ILA3"# IGA1 ILA4"# IGA2 … One-to-One (range): ILA1"# IGA1 1-1 Ra ILA2"# IGA2 ILA3"# IGA3 … Server Server 1 IP"# IGA1 Server Server 2 IP"# IGA1 Server 3 IP"# IGA1 No Change IGA1"# IGA1 No-Ch IGA2"# IGA2 IGA3"# IGA3 … 9.1.
Prestige 1600 Universal Access Concentrator Menu 4 - Internet Access Setup ISP's Name= ChangeMe My Login= 1234 My Password= ******** Network Address Translation= SUA Only My WAN Addr= 0.0.0.0 Address Mapping Set= N/A Press ENTER to Confirm or ESC to Cancel: Figure 9-2 Applying NAT for Internet Access The following figure shows how you apply NAT to the remote node in Menu 11.1. Step 1. Enter 11 from the Main Menu. Step 2.
Prestige 1600 Universal Access Concentrator 9.2.2 Configuring NAT To configure NAT, enter 15 from the Main Menu to bring up the following screen. Menu 15 – NAT Setup 1. 2. Address Mapping Sets Server Set Enter Menu Selection Number: Figure 9-4 Menu 15 NAT Setup 9.2.3 Address Mapping Sets and NAT Server Sets: Use the Address Mapping Sets menus and submenus to create the mapping table for translation. Each remote node must specify which NAT Address Mapping Set to use.
Prestige 1600 Universal Access Concentrator Menu 15.1.255 - Address Mapping Rules Set Name= SUA Idx --1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Local Start IP --------------0.0.0.0 Local End IP --------------255.255.255.255 Global Start IP --------------0.0.0.0 0.0.0.0 Global End IP --------------- Type -----M-1 Server Press ENTER to Confirm or ESC to Cancel: Figure 9-6 SUA Address Mapping Rules The following table explains the fields in this screen. Please note that the fields in this menu are read-only.
Prestige 1600 Universal Access Concentrator Please note that if the Set Name field is left blank, the entire set will be deleted. Menu 15.1.1 - Address Mapping Rules Set Name= NAT_SET1 Idx --1. 2 3. 4. 5. 6. 7. 8. 9. 10. Local Start IP --------------- Local End IP --------------- Action= Edit Global Start IP --------------- Global End IP --------------- Type ------ Select Rule= Press ENTER to Confirm or ESC to Cancel: Figure 9-7 First Set in Menu 15.1.
Prestige 1600 Universal Access Concentrator N.B.: Save Set in the Action field means to save the whole set. You must do this if you make any changes to the set - including deleting a rule. No changes to the set take place until this action is taken. Be careful when ordering your rules as each rule is executed in sequence beginning from rule 1. Selecting Edit in the Action field and then entering a rule number brings up the following menu, Menu 15.1.1.
Prestige 1600 Universal Access Concentrator 9.3 NAT Server Sets A NAT server set is a list of inside servers (behind NAT on the LAN) that you can make visible to the outside world. Menu 15.2 - NAT Server Sets is used to configure these servers. 9.3.1 Multiple Servers behind NAT If you wish, you can make inside servers for different services, e.g., web or FTP, visible to the outside users, even though NAT makes your whole inside network appear as a single machine to the outside world.
Prestige 1600 Universal Access Concentrator Press [ENTER] at the “Press ENTER to confirm …” prompt to save your configuration after you define all the servers or press ESC at any time to cancel. The most often used port numbers are shown in the following table. Please refer to RFC 1700 for further information about port numbers. Please also refer to the included disk for more examples and details on NAT. Menu 15.2 - NAT Server Sets Port # IP Address -----------------1. (Used by SUA) 0.0.0.0 2.21 3.23 4.
Prestige 1600 Universal Access Concentrator Figure 9-11 NAT Example 1 Menu 4 - Internet Access Setup ISP's Name= EG1 My Login= 1234 My Password= ******** Network Address Translation= SUA Only My IP Addr= 0.0.0.0 Address Mapping Set= N/A Press ENTER to Confirm or ESC to Cancel: Figure 9-12 NAT Example for Internet Access In Menu 4 choose the SUA Only option for the Network Address Translation field. This is a pre-configured Many-to-One mapping discussed in section 9.1.4. 9.4.
Prestige 1600 Universal Access Concentrator Menu 15.2 - NAT Server Sets Port # IP Address -----------------1. (Used by SUA) 192.168.1.10 2. 3. 4. 5. 6. 7. 8. 9. 10. 0 0 0 0 0 0 0 0 0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 9-14 Specifying an Inside Sever 9.4.3 Example 3 - General Case In this example, there are 3 IGAs from your ISP. There are many departments but two have their own FTP server.
Prestige 1600 Universal Access Concentrator Step 1. You need to configure Address Mapping Set 1 from Menu 15.1 - Address Mapping Sets. Therefore you must choose the Full Feature option from the Network Address Translation field (in Menu 4 or Menu 11.3). Step 2. Enter 15 from the Main Menu. Step 3. Enter 1 to configure the Address Mapping Sets. Step 4. Choose 1 to begin configuring this new set. Enter a Set Name, choose the Edit Action and then select 1 from Select Rule field.
Prestige 1600 Universal Access Concentrator Step 9. Enter 2 from this menu and configure it as shown in Figure 9-18. Menu 15.2 - NAT Server Sets Port # IP Address -----------------1. (Used by SUA) 0.0.0.0 2.80 3. 25 4. 0 5. 0 6. 0 7. 0 8. 0 9. 0 10. 0 192.168.1.21 192.168.1.20 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 9-18 Example 3 - Menu 15.2 9.4.4 NAT Unfriendly Application Programs Many applications, e.g.
Prestige 1600 Universal Access Concentrator Figure 9-19 Ethernet SUA Menu 3.2 - TCP/IP Setup TCP/IP Setup: IP Address= 192.168.1.1 IP Subnet Mask= 255.255.255.
Prestige 1600 Universal Access Concentrator Chapter 10 Filter Configuration This chapter shows you how to create and apply filter(s). 10.1 About Filtering Your Prestige uses filters to decide whether to allow passage of a data packet and/or to make a call. There are two types of filter applications: data filtering and call filtering. Filters are subdivided into device and protocol filters, which are discussed later. Data filtering screens the data to determine if the packet should be allowed to pass.
Prestige 1600 Universal Access Concentrator Start Packet into filter Fetch First Filter Set Filter Set Fetch Next Filter Set Fetch First Filter Rule Fetch Next Filter Rule Yes Yes Next Filter Set Available? No Next filter Rule Available? No Active? Yes No Check Next Rule Execute Filter Rule Forward Drop Drop Packet Accept Packet Figure 10-2 Filter Rule Process 10-2 Filter Configuration
Prestige 1600 Universal Access Concentrator 10.3 Configuring a Filter Set To configure a filter sets, follow the procedure below: Step 1. Enter 21 from the Main Menu to open Menu 21 - Filter Set Configuration.
Prestige 1600 Universal Access Concentrator Menu 21.1 - Filter Rules Summary # A Type Filter Rules M m n - - ---- -------------------------------------------- ------ - - 1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=137 N D N 2 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=138 N D N 3 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=139 N D N 4 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=137 N D N 5 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=138 N D N 6 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.
Prestige 1600 Universal Access Concentrator Abbreviations Description Display [F] means to forward the packet immediately and skip checking the remaining rules if any. packet. [D] means to drop the packet. [N] means check the next rule. n Refers to Action Not Matched [F] means to forward the packet immediately and skip checking the remaining rules if any. [F] means to forward the packet. [D] means to drop the packet. [N] means check the next rule.
Prestige 1600 Universal Access Concentrator enabled, the inside IP address and port number are replaced on a connection-by-connection basis, which makes it impossible to know the exact address and port on the wire. Therefore, the Prestige applies the protocol filters to the “native” IP address and port number before NAT for outgoing packets and after NAT for incoming packets. On the other hand, the generic, or device filters are applied to the raw packets that appear on the wire.
Prestige 1600 Universal Access Concentrator Menu 21.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 6 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 137 Port # Comp= Equal Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 0 Port # Comp= None TCP Estab= No More= No Log= None Action Matched= Check Next Rule Action Not Matched= Check Next Rule Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle. Figure 10-6 Menu 21.1.
Prestige 1600 Universal Access Concentrator Field Description Destination: Port #. Option Equal Source: IP Addr Enter the source IP Address of the packet you wish to filter. This field is a ignored if it is 0.0.0.0. Source: IP Mask Enter the IP subnet mask to apply to the Source: IP Addr. Source: Port # Enter the source port of the packets that you wish to filter. The range of this field is 0 to 65535. This field is a ignored if it is 0.
Prestige 1600 Universal Access Concentrator Packet into IP Filter Filter Active? No Yes Apply SrcAddrMask to Src Addr Check Src IP Addr Not Matched Matched Apply DestAddrMask to Dest Addr Check Dest IP Addr Not Matched Matched Check IP Protocol Not Matched Matched Check Src & Dest Port Not Matched Matched More? Yes No Action Not Matched Action Matched Check Next Rule Check Next Rule Drop Drop Forward Forward Drop Packet Check Next Rule Accept Packet Figure 10-7 Executing an IP Filter
Prestige 1600 Universal Access Concentrator Menu 21.1.1 - Device Filter Rule Filter #: 1,1 Filter Type= Device Filter Rule Active= No Offset= 0 Length= 0 Mask= N/A Value= N/A More= No Log= None Action Matched= Check Next Rule Action Not Matched= Check Next Rule Press ENTER to Confirm or ESC to Cancel: Figure 10-8 Menu 21.1.2 - Device Filter Rule The following table describes the fields in the Device Filter Rule Menu.
Prestige 1600 Universal Access Concentrator Field Description Both - All packets will be logged. Action Matched Select the action for a matching packet. Option Both Check Next Rule Forward Drop Action Not Matched Select the action for a packet not matching the rule. Check Next Rule Forward Drop Once you have completed filling in Menu 21.1.1 - Device Filter Rule, press [ENTER] at the message “Press ENTER to Confirm” to save your configuration, or press [ESC] to cancel.
Prestige 1600 Universal Access Concentrator 10.6.2 Remote Node Filters Go to Menu 11.1 (shown next) and enter the number(s) of the filter set(s) as appropriate. You can specify up to four filter sets by entering their numbers separated by commas. Menu 11.
Prestige 1600 Universal Access Concentrator Menu 21 - Filter Set Configuration Filter Set # -----1 2 3 4 5 6 Comments -----------------NetBIOS_WAN _____________ ______________ ______________ ______________ ______________ Filter Set # -----7 8 9 10 11 12 Comments -----------------______________ ______________ ______________ ______________ ______________ ______________ Enter Filter Set Number to Configure= 2 Edit Comments= FTP_WAN Press ENTER to Confirm or ESC to Cancel: Figure 10-11 FTP_WAN Filter Conf
Prestige 1600 Universal Access Concentrator Rule 2- block the inbound FTP packet, TCP (06) protocol with port number 21 Menu 21.2.2 - TCP/IP Filter Rule Filter #: 2,2 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 6 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 21 Port # Comp= Equal Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.
Prestige 1600 Universal Access Concentrator Apply the filter set in Menu 11. 1 - Remote Node Profile. Put the filter set number 2 to the Input Protocol Filter Set for activating the FTP_WAN filter. Menu 11.
Prestige 1600 Universal Access Concentrator Chapter 11 SNMP Configuration This chapter explains how to configure SNMP. 11.1 About SNMP SNMP (Simple Network Management Protocol) is a protocol used for exchanging management information between network devices. SNMP is a member of TCP/IP protocol suite. Your Prestige 1600 supports SNMP agent functionality, which allows a manager station to manage and monitor the Prestige 1600 through the network. The Prestige 1600 supports SNMP version one (SNMPv1).
Prestige 1600 Universal Access Concentrator Management Information Base (MIB) is a collection of managed objects. SNMP allows manager and agents to communicate for the purpose of accessing these objects. SNMP itself is a simple request/response protocol based on the manager/agent model. The manager issues a request and the agent returns responses using the following protocol operations: ♦ Get Allows the manager to retrieve an object variable from the agent.
Prestige 1600 Universal Access Concentrator Menu 22 - SNMP Configuration SNMP: Get Community= public Set Community= public Trusted Hgst= 0.0.0.0 Trap: Community= public Destination= 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: Figure 11-2 Menu 22 - SNMP Configuration The following table describes the SNMP configuration parameters.
Prestige 1600 Universal Access Concentrator Port 2 : PVC 1 Port 3 : PVC 2 Port 4 : PVC 3 Port 5 : xDSL 1 Port 6 : xDSL 2 … Port 36 : xDSL 32 Please note that xDSL refers to the type of network module installed, i.e., ADSL, IDSL, SDSL. 4. linkUp (defined in RFC-1215) : When a link is up, the trap will be sent with the port number . The port number is its interface index under the interface group. 5.
Prestige 1600 Universal Access Concentrator Chapter 12 System Security This chapter discusses the system password and RADIUS authentication. The first step towards ensuring security is changing your system password from the default value to your personal password. 12.1 Changing the System Password To change the system password, following steps below: Step 1. Select option 23. System Security in the Main Menu to open Menu 23 - System Security as shown in Figure 12-1.
Prestige 1600 Universal Access Concentrator 12.2 RADIUS Support This section shows you to configure user authentication and accounting using an external RADIUS server. 12.2.1 About RADIUS RADIUS (Remote Authentication Dial-In User Service) is a client/server protocol that enables remote access servers to communicate with a central server to authenticate dial-in users. RADIUS allows a company to maintain user profiles in a central database that all remote servers can share. 12.2.
Prestige 1600 Universal Access Concentrator Figure 12-3 RADIUS Authentication Example 12.3.2 The Key Field The “key”, or password, must match that in the client file in the RADIUS server’s /etc/raddb directory, as shown in the following example: # Client Name Key #------------------------192.168.1.1 1234 After you configure a RADIUS server, your Prestige will use it to authenticate all users that it can not find in its internal dial-up user list . 12.3.
Prestige 1600 Universal Access Concentrator The early deployment of RADIUS was done using the chosen port number 1645. Currently, the officially assigned port number for RADIUS is 1812. So, check the port number used by your RADIUS server before configuring it in the Prestige. You must reboot your Prestige after changing the RADIUS port number for the change to take effect. Menu 23.
Prestige 1600 Universal Access Concentrator authentication server, or on a separate host. RADIUS accounting can be configured in Menu 24.3.2 - System Maintenance - External Server as shown next. Menu 23.2 - System Security - External Server Authentication Server: Active= No Type: RADIUS Server Address= Port #= 1645 Key= ******** Accounting Server: Active= No Type: RADIUS Server Address= Port #= 1646 Key= ******** Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle. Figure 12-5 Menu 24.3.
Prestige 1600 Universal Access Concentrator The following table describes the accounting attributes mentioned in the above example. Accounting attributes may vary depending on the external server. Table 12-3 Accounting Attributes Field Acct-Status-Type Description Account Status Type has four values: Accounting On, Accounting Off, Start and Stop. An Accounting On message is sent when the Prestige starts the RADIUS Accounting service. An Accounting Off message is sent when the Prestige ends the service.
Prestige 1600 Universal Access Concentrator Chapter 13 Remote Management This chapter discusses Telnet and remote management of the Prestige using NAT. 13.1 About Telnet Before the Prestige 1600 is properly setup for TCP/IP, the only option for configuring it is through the console port. Once your Prestige 1600 is configured, you can use telnet to configure it remotely. You can also use a modem for remote configuration as shown in chapter One.
Prestige 1600 Universal Access Concentrator 13.3 Telnet Capabilities 13.3.1 Single Administrator To prevent confusion and discrepancy on the configuration, your Prestige only allows one administrator to log in at any time. Your Prestige also gives priority to the console port over telnet. If you have already connected to your Prestige via telnet, you will be logged out if another user logs in to the Prestige via the console port. 13.3.
Prestige 1600 Universal Access Concentrator The ISP assigns an IP address of a.b.c.1 to the Prestige primary and IP addresses of a.b.c.2 to a.b.c.5 to the Prestige secondary units. The private IP addresses for the primary and secondaries are 192.168.1.1 to 192.168.1.5 inclusive. We wish to map public IP addresses a.b.c.2 to a.b.c.5 to the secondary units. Please note that “a.b.c.digit” represents a real, public IP address and that alphabetical characters cannot be accepted as parts of an IP address. 13.4.
Prestige 1600 Universal Access Concentrator Menu 15.1.1 - Address Mapping Rules Set Name= NAT_SET1 Idx --1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Local Start IP Local End IP --------------- --------------192.168.1.2 192.168.1.5 Action= Edit Global Start IP --------------a.b.c.2 Global End IP Type --------------- -----a.b.c.5 1-1 Ra Select Rule= Press ENTER to Confirm or ESC to Cancel: Figure 13-5 Address Mapping Rule Summary Step 4.
Prestige 1600 Universal Access Concentrator Chapter 14 System Information and Maintenance This chapter provides information about the diagnostic tools that help you maintain your Prestige. The diagnostic tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter describes how to use these tools in detail. Information about upgrades is provided in the Configuration & Firmware Maintenance chapter.
Prestige 1600 Universal Access Concentrator Menu 24.1 – System Maintenance - Status (Primary) 1. 2. 3. 4. 5. WAN/LAN Status Slot 1 Configuration(IDSL NM) Slot 2 Configuration(IDSL NM) Slot 3 Configuration(N/A) Route Status Press ENTER to Confirm or ESC to Cancel: Figure 14-2 Menu 24.1 - System Maintenance - Status 14.1.1 WAN/LAN Status Type “1” in Menu 24.1 to enter Menu 24.1.1 for detailed WAN/LAN Status. Menu 24.1.
Prestige 1600 Universal Access Concentrator Field Description System Up Time Displays the total elapsed time your system has been running. Current Time Displays the current time according to how you have the time set in Menu 24.9 - System Maintenance - Time and Date Setting. Current Date Displays the current date according to how you have the date set in Menu 24.9 - System Maintenance - Time and Date Setting. Ethernet Status Shows the current speed and duplex mode of the LAN.
Prestige 1600 Universal Access Concentrator (*) indicates the port you can reset (press “b”) or drop (press “d”) the counters. Press “i” to move the asterisk to the preceding port and “j” to the next port. Press “a” to reset all ports. Press [ESC] to exit this menu. Menu 24.1.
Prestige 1600 Universal Access Concentrator 14.2 Len This is the length of the subnet mask (24 bits = 255.255.255.0) Device This is the physical device. Enet0 is Ethernet. Gateway This is the gateway IP address or the remote node name. Metric The metric represents the “cost” of transmission for routing purposes. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Stat This is the bitmap flags of the route status.
Prestige 1600 Universal Access Concentrator 14.2.1 Console Port Speed You can change the console port speeds through Menu 24.2.2 - Console Port Speed. Your Prestige supports 9600 (default), 19200, 38400, 57600, and 115200bps for the console port. Press [SPACE BAR] to select the desired speed in Menu 24.2.2, as shown next. Select option 24 from the Main Menu to open Menu 24 - System Maintenance. From Menu 24, select option 2 then select the second option from Menu 24.2 to display Menu 24.2.
Prestige 1600 Universal Access Concentrator Examples of typical error and information messages are presented in the figure below.
Prestige 1600 Universal Access Concentrator 14.4 Diagnostic The diagnostic facility allows you to test the different aspects of your Prestige to determine if it is working properly. Menu 24.4 allows you to choose among various types of diagnostic tests to evaluate your system, as shown next. “xDSL” refers to the network module type, i.e., ADSL, IDSL or SDSL. Menu 24.4 - System Maintenance – Diagnostic xDSL 1. Drop xDSL Port Connection 2. Reset xDSL Port Hardware 3. xDSL Port Test System 21.
Prestige 1600 Universal Access Concentrator 14.5 Boot Module Commands Prestige boot module commands are shown below. For ATBAx, x denotes the number preceding the colon to give the speed following the colon in the list of numbers that follows; e.g. ATBA3 will give a baud of 9.6 Kbps. ATSE displays the seed that is used to generate a password to turn on the debug flag in the firmware.
Prestige 1600 Universal Access Concentrator For more detailed information, refer to the list of CI commands appended at the end of this guide, check the ZyXEL Web site. Enter Menu Selection Number: 8 Copyright (c) 2000 ZyXEL Communications Corp. Primary> ? Valid commands are: sys exit device wan xdsl frelay radius ip ppp ether config hdap Primary> Figure 14-13 Command Mode 14.7 Time and Date Setting The Prestige 1600 has a battery powered real time clock.
Prestige 1600 Universal Access Concentrator Chapter 15 Configuration & Firmware Maintenance This chapter describes how to backup and restore your configuration file as well as upload new firmware and a new configuration file. 15.1 Filenames The configuration file contains the factory default settings in the menus such as password, DHCP Setup, TCP/IP Setup etc. It arrives from ZyXEL with named “prestige.rom” or something similar.
Prestige 1600 Universal Access Concentrator Password: External 230 Logged in Filename ftp> dir 200 Port command okay 150 Opening data connection for LIST --w--w--w- 1 owner group 885146 Jul 01 12:00 ras --w--w--w- 1 owner group 885146 Jul 01 12:00 ras-m --w--w--w- 1 owner group 885570 Jul 01 12:00 ras-b -rw-rw-rw- 1 owner group 131072 Jul 01 12:00 rom-spt --w--w--w- 1 owner group 327680 Jul 01 12:00 rom-0 226 File sent OK ftp: 325 bytes received in 0.00Seconds 325000.00Kbytes/sec. ftp> put prestige.
Prestige 1600 Universal Access Concentrator 15.2 Backup Configuration 15.2.1 Backup using FTP To transfer the configuration file using FTP to your workstation, follow the instructions as shown in the following screen. See also the FTP example later in this chapter. For details on FTP commands, please consult the documentation of your FTP client program. Menu 24.5 – Back up Configuration To transfer the configuration file to your workstation, follow the procedure below: 1.
Prestige 1600 Universal Access Concentrator You can perform the backup either through FTP or TFTP (preferred methods as they are faster) or through the RS232 console port (if the network is down). For backup via the console port any serial communications program should work fine; however, you must use the XMODEM protocol to perform the download/upload. Menu 24.
Prestige 1600 Universal Access Concentrator Menu 24.6 – Restore Configuration using FTP To transfer your current workstation configuration to your Prestige, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type “open” and the IP address of your Prestige. Then type “root” and your SMT password as requested. 3.
Prestige 1600 Universal Access Concentrator Step 3. Click Transfer in the HyperTerminal menu bar, then Send File from the drop-down menu. Step 4. Enter the configuration filename on your computer. Step 5. Choose the Xmodem Protocol. Step 6. Finally, press Send. Step 7. After a successful restoration you will see the following screen. Save to ROM Hit any key to start system reboot. Figure 15-8 Successful Restoration Confirmation Screen 15.
Prestige 1600 Universal Access Concentrator Menu 24.7.1 – Upload ZyNOS code using FTP To upload the router firmware, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type “open” and the IP address of your Prestige. Then type “root” and your SMT password as requested. 3. Type “put firmwarefilename ras-m” where “firmwarefilename” is the name of your firmware upgrade file on your workstation and “ras-m” is the remote file name on the Prestige.
Prestige 1600 Universal Access Concentrator 15.4.4 Upload Prestige Firmware using TFTP To use TFTP, your workstation must have both telnet and TFTP clients. Follow steps 1 to 4 as outlined previously in 15.2.2, then continue with the steps below. Step 1. Go to SMT menu 24.7.1. You must remain in this menu until file transfer is complete. Step 2. Use the TFTP client to transfer files between the Prestige and the workstation. Step 3.
Prestige 1600 Universal Access Concentrator Menu 24.7.1 - System Maintenance - Upload ZyNOS Code. FTP or TFTP are the preferred methods for uploading router firmware to your Prestige since FTP or TFTP is faster. To upload router firmware: 1. Enter "y" at the prompt below to go into debug mode. 2. Enter "atur" after the "Enter Debug Mode" message. 3. Wait for the "Starting XMODEM upload" message before activating the Xmodem upload on your terminal. 4.
Prestige 1600 Universal Access Concentrator Menu 24.7.2 – System Maintenance - Upload Router Configuration File To upload the router configuration file, follow the procedure below: 1. Launch the FTP client on your workstation. 2. Type “open” and the IP address of your Prestige. Then type “root” and your SMT password as requested. 3.
Prestige 1600 Universal Access Concentrator Step 1. Click Transfer in the HyperTerminal menu bar, then Send File from the drop-down menu. Step 2. Enter the configuration filename on your computer. Step 3. Choose the Xmodem Protocol. Step 4. Finally, press Send.
Prestige 1600 Universal Access Concentrator Chapter 16 IP Policy Routing This chapter explains IP Policy Routing and helps you to configure IP Policy Routing. 16.1 Introduction Traditionally, routing is based on the destination address only and the router takes the shortest path to forward a packet. IP Policy Routing (IPPR) provides a mechanism to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator.
Prestige 1600 Universal Access Concentrator Menu 25 shows all the policies defined.
Prestige 1600 Universal Access Concentrator Table 16-1 IP Routing Policy Summary Abbreviation Meaning Criteria SA Source IP address SP Source port DA Destination IP address DP Destination port P IP layer 4 protocol number(TCP=6,UDP=17…) T Type Of Service of Incoming packet PR Precedence of incoming packet Action GW Gateway IP address T Outgoing Type of Service P Outgoing Precedence Type Of Service NM Normal mD Minimum Delay MT Maximum Throughput MR Maximum Reliability MC Minim
Prestige 1600 Universal Access Concentrator Table 16-2 IP Routing Policy Field Description Policy Set Name This is the name of the policy set assigned in Menu 25 - IP Routing Policy Setup. Active Press the spacebar to select Yes to activate the policy. Criteria IP Protocol IP layer 4 protocol, e.g., UDP, TCP, ICMP, etc. Type of Service Prioritize incoming network traffic by choosing from Don’t Care/ Normal / Min Delay / Max Thruput / Max Reliability.
Prestige 1600 Universal Access Concentrator You can choose up to four IP Policy sets (from twelve) by entering their numbers separated by commas, e.g., 2, 4, 7, 9. Menu 3.2 - TCP/IP Ethernet Setup TCP/IP Setup: IP Address= 192.68.0.1 IP Subnet Mask= 255.255.255.0 RIP Direction= Both Version= RIP-2B Multicast = IGMP-v2 IP Policies= 2,4,7,9 Enter your IP Policy Sets here Enter here to CONFIRM or ESC to CANCEL: Press Space Bar to Toggle. Figure 16-4 Ethernet IP Policies 16.3.
Prestige 1600 Universal Access Concentrator Figure 16-6 Example of IP Policy Routing To force Web packets coming from clients with IP addresses of 192.168.255.1 to 192.168.255.32 to be routed to the Internet via the WAN port of the P1600, follow the steps mentioned next.
Prestige 1600 Universal Access Concentrator Step 1. Create a routing policy set in Menu 25. Step 2. Create a rule for this set in Menu 25.1 - IP Routing Policy as shown next. Menu 25.1 - IP Routing Policy Policy Set Name= set1 Active= Yes Criteria: IP Protocol = 6 Type of Service= Don't Care Precedence = Don't Care Source: addr start= 192.168.255.1 port start= 0 Destination: addr start= 0.0.0.0 port start= 80 Action= Matched Gateway addr = 192.168.1.
Prestige 1600 Universal Access Concentrator Menu 3.2 - TCP/IP Ethernet Setup TCP/IP Setup: IP Address= 192.68.0.1 IP Subnet Mask= 255.255.255.0 RIP Direction= Both Version= RIP-2B Multicast = IGMP-v2 IP Policies= 1,2 Enter here to CONFIRM or ESC to CANCEL: Press Space Bar to Toggle.
Prestige 1600 Universal Access Concentrator Chapter 17 Troubleshooting 17.1 Problems Starting Up the Prestige 1600 Table 17-1 Troubleshooting the Start-Up of your Prestige 1600 Troubleshooting 17.2 Corrective Action None of the LEDs are on when you power on the Prestige 1600. Check the connection between the power cord and your Prestige 1600. Cannot access the Prestige 1600 via the console port. Check to see if the Prestige 1600 is connected to your computer's serial port.
Prestige 1600 Universal Access Concentrator 17.4 Problems with the LAN Interface Table 17-4 Troubleshooting the LAN Interface Troubleshooting Can’t ping any station on the LAN Corrective Action Check the Ethernet LED on the front panel of your Prestige 1600. If it is off, check the cables connecting your Prestige 1600 to the hub. Verify that the IP address and the subnet mask in Menu 3.2 are consistent between the Prestige 1600 and the workstations. 17.
Prestige 1600 Universal Access Concentrator CI Commands Use Menu 24.8 to enter command line mode. Please refer to the section 14.6 Command Interpreter Mode for details about the SMT menu. The following table describes the syntax used to configure your Prestige using Command Interface (CI) commands. For details on other CI commands to configure your Prestige, please consult the supporting CD. ZyXEL recommends that you use CI Commands for debugging purposes only.
Prestige 1600 Universal Access Concentrator CI Command Options Description filter disp Display filter statistic counters clear Clear filter statistic counter sw [on|off] hostname iface Display system hostname disp Display iface list disp Display log error clear Clear log error log online [on|off] Turn on/off error log online display cnt [disp|cl] Display or clear system mbuf count link link List system mbuf link pool [id] [type] List system mbuf pool mbuf status disp Display s
Prestige 1600 Universal Access Concentrator CI Command debug Options Description Enable/disable roadrunner service 0: diable 1: enable restart dump [root|rn|user|slot] socket spt size stdio Dump spt raw data Display spt record size [second] Change terminal timeout value [a|f|u] Display timer cell timer disp trcdisp Monitor packets . . brief . Online display packet content briefly . . parse .
Prestige 1600 Universal Access Concentrator DSL related CI Commands CI Command xdsl cnt test event Options Description disp chann name|scc2|scc4 Display idsl channel/line counter clear chann name|scc2|scc4 Clear idsl channel/line counter disp packet 0|1|2 event chann name inernal chann name cnt Do internal loopback external chann name cnt Do external loopback Set packet display mode in testing on|off disp Display ZyNOS event clear Clear ZyNOS event netstat chann name Display
Prestige 1600 Universal Access Concentrator IP related CI Commands Options CI Command ip address Description display host ip address arp add ether add arp drop [ether] drop arp flush flush arp publish add proxy arp resolve status display ip arp status dhcp set dhcp configuration arpcount dnsserver gateway hostname leasetime netmask pool rebindtime <
Prestige 1600 Universal Access Concentrator ifconfig display ifconfig ping ping remote host pong [ ] pong remote host rip accept activate ip rip dialin_user [show|in|out|both|none] merge [on|off] RIP merging mode [in|out] [mode] mode: 0 - 3 refuse request reverse [on|off] status RIP Poisoned Reverse display rip statistic counters trace route add [/] [] addprivate add route add p
Prestige 1600 Universal Access Concentrator trace [on|off] turn on/off trace for debugging window [size] TCP input window size tftp stats support udp CI Commands status G
Prestige 1600 Universal Access Concentrator Ethernet Related CI Command Options CI Command Description ether config display LAN configuration information driver cnt mac disp display ether driver counters clear ch-name: enet0, enet1 Set LAN Mac address reg ether driver display LAN hardware related registers status ch-name: enet0, enet1 rxmod set LAN receive mode.
Prestige 1600 Universal Access Concentrator Glossary 10BaseT The 10-Mbps baseband Ethernet specification that uses two pairs of twisted-pair cabling (Category 3 or 5): one pair for transmitting data and the other for receiving data. ADSL Asymmetric Digital Subscriber Line. A digital subscriber line (DSL) technology in which the transmission of data from server to client is much faster than the transmission from the client to the server.
Prestige 1600 Universal Access Concentrator are divided into incoming and outgoing filters, depending on the direction of the packet relative to a port. Data filtering can be applied on either the WAN side or the LAN side. J DCE Data Communications Equipment is typically a modem or other type of communication device. The DCE sits between the DTE (data terminal equipment) and a transmission circuit such as a phone line.
Prestige 1600 Universal Access Concentrator FCC The FCC (Federal Communications Commission) is in charge of allocating the electromagnetic spectrum and thus the bandwidth of various communication systems. Filters Your Prestige uses filters to decide whether to allow passage of a data packet and/or to make a call. There are two types of filter applications: data filtering and call filtering.
Prestige 1600 Universal Access Concentrator recommendations about telephone and data (including fax) communications systems for service providers and suppliers. L LAN Local Area Network is a shared communication system to which many computers are attached. A LAN, as its name implies, is limited to a local area. This has to do more with the electrical characteristics of the medium than the fact that many early LANs were designed for departments, although the latter accurately describes a LAN as well.
Prestige 1600 Universal Access Concentrator RADIUS Accounting This facility logs information about dial-in connections. It can be used independently of RADIUS Authentication. It allows data to be sent at the start and the end of sessions, indicating the amount of resources (time, packets, bytes, etc.) used during the session. An ISP could use this function for special security and billing needs.
Prestige 1600 Universal Access Concentrator N Terminal A device that allows you to send commands to a computer somewhere else. At a minimum, this usually means a keyboard and a display screen and some simple circuitry. Terminal Software Software that pretends to be (emulates) a physical terminal and allows you to type commands to a computer somewhere else.
Prestige 1600 Universal Access Concentrator Index DNS, 3-6, 3-7 A DNS Server, 3-6 Acct-Session-Id, 12-6 Domain Name, 3-6, 9-10 Acct-Status-Type, 12-6 DSL clients, 1-4 Action Matched, 10-4 DSL Comparison, xx ADSL (Asymmetric DSL), xix DSL Ports ANSI (American National Standards Institute), 4-2 Example IDSL, 6-4 Authentication, 7-2 Method, 6-4 Setup, 6-1 Outgoing, 7-3 Speed, 6-3 User Authentication, 6-5 B DSL related CI Commands, D Boot Module Commands, 14-9 E C EIR (Excess Information R
Prestige 1600 Universal Access Concentrator Internal Filename, 15-2 Abbreviations, 10-5 Internet Access Configuration Device Filter Rule, 10-9 Executing a Filter Rule, 10-1 Primary, 5-5 IP Standalone, 9-15 Internet Access Setup, 9-3 Abbreviations, 10-5 Logic Flow of an IP Filter, 10-8 Internet Service Provider, 2-2 More, 10-4 IP Address, 5-3, 5-4, 7-2, 7-5 Rules Summary, 10-4 Default, 5-1 Session Options, 7-2 Standalone, 5-3 Structure, 10-1 IP Count, 6-4 TCP/IP Filter Rule, 10-6 IP Multica
Prestige 1600 Universal Access Concentrator Secondary, 3-5 Password, 3-1, 3-5, 5-6, 7-2, 11-2, 12-1 Summary, 3-4 Physical Dimensions, 1-1 Management Information Base (MIB), 11-2 Port Usage, 6-3 MDU, 2-1 Power Requirement, 1-1 Metric, 7-5 PPP, 7-2 Cisco, 7-4 My WAN Addr, 5-6, 7-5 Editing PPP Options, 7-3 N Standard, 7-4 NAS-Port, 12-6 Precedence, 16-1, 16-4 NAS-Port-DNIS, 12-6 Primary, 1-3 NAT, 10-5 Private, 7-5, 8-3 Applying NAT in the SMT Menus, 9-3 Q Configuring, 9-5 Definitions, 9-1
Prestige 1600 Universal Access Concentrator S SDSL (Symmetric DSL), xix Secondary, 1-3 Security, 1-2 Server, 3-7, 9-2, 9-3, 9-4, 9-6, 9-8, 9-10, 9-12 Single User Account, 5-6 slot 3, xvii SMT.
Prestige 1600 Universal Access Concentrator V VT100, 17-1 Z ZyNOS, 9-4, 15-8, 16-1 ZyXEL Limited Warranty, iii W WAN Port Setup, 4-1 Index S
