Prestige 480 Dual BRI ISDN Router User’s Guide Version 2.42 Dec.
Prestige 480 Dual BRI ISDN Router ii
Prestige 480 Dual BRI ISDN Router Prestige 480 ISDN Router Copyright Copyright © 02.08.1999 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation.
Prestige 480 Dual BRI ISDN Router Declaration of Conformity We, the Manufacturer/Importer ZyXEL Communications Services GmbH.
Prestige 480 Dual BRI ISDN Router • • EN 61000-4-8 EN61000-4-11 Power Magnetic Measurement Voltage dips, short interruptions and voltage variations immunity tests 1993 1994 v
Prestige 480 Dual BRI ISDN Router ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two (2) years from the date of purchase.
Prestige 480 Dual BRI ISDN Router Customer Support If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation offices worldwide, in one of the following ways: Method E- MAIL – Support/ Sales Telephone/Fax Web Site/ FTP Site Regular Mail support@zyxel.com.tw +886-3-578-3942 www.zyxel.com ZyXEL Communications Corp., 6 Innovation Road II, Science Based Industrial Park, HsinChu, Taiwan 300, R.O.C. Location Worldwide support@europe.zyxel.
Prestige 480 Dual BRI ISDN Router Table of Contents Declaration of Conformity ......................................................................................................iv Table of Contents .................................................................................................................. ix List of Figures..................................................................................................................... xix List of Tables.........................................
Prestige 480 Dual BRI ISDN Router 2.8 Changing the System Password................................................................................... 2-8 2.9 Resetting the Prestige ................................................................................................. 2-9 2.10 General Setup ....................................................................................................... 2-12 2.11 European ISDN Setup Menus ..................................................................
Prestige 480 Dual BRI ISDN Router 3.5.1 Basics ........................................................................................................................................................ 3-7 3.5.2 IP Alias Setup .......................................................................................................................................... 3-8 3.6 Internet Access Configuration..................................................................................... 3-11 3.
Prestige 480 Dual BRI ISDN Router Remote Node TCP/IP Configuration ..................................................................................... 5-1 5.1 LAN-t o-LAN Application ............................................................................................... 5-1 5.2 Remote Node Setup.................................................................................................... 5-3 5.2.1 Static Route Setup...........................................................................
Prestige 480 Dual BRI ISDN Router Chapter 8.............................................................................................................................. 8-1 Dial-in Server Configuration................................................................................................. 8-1 8.1 Remote Access Server ................................................................................................ 8-2 8.2 LAN-t o-LAN Server Application ..............................................
Prestige 480 Dual BRI ISDN Router 9.4.2 Remote Node Filters..............................................................................................................................9-16 9.4.3 Default Dial-in Filter.............................................................................................................................9-17 Chapter 10 .......................................................................................................................... 10-1 SNMP Configuration..
Prestige 480 Dual BRI ISDN Router 13.1 System Status ....................................................................................................... 13-2 13.1.1 System Information.......................................................................................................................... 13-6 13.1.2 Console Port Speed.......................................................................................................................... 13-7 13.2 Log and Trace .................
Prestige 480 Dual BRI ISDN Router 14.2.3 14.3 Restore using TFTP..........................................................................................................................14-6 Firmware Update................................................................................................... 14-7 14.3.1 Upload through the Console Port ...................................................................................................14-8 14.3.2 Upload using FTP ...........................
Prestige 480 Dual BRI ISDN Router Table of Contents xvii
Prestige 480 Dual BRI ISDN Router List of Figures Figure 1-1 Internet Access Application ....................................................................................................................... 1-6 Figure 1-2 Internet Access Application ....................................................................................................................... 1-8 Figure 1-3 LAN-to-LAN Application......................................................................................................
Prestige 480 Dual BRI ISDN Router Figure 3-4 Partitioned Logical Networks.....................................................................................................................3-8 Figure 3-5 IP Alias Example ..........................................................................................................................................3-8 Figure 3-6 Menu 3.2 - TCP/IP and DHCP Ethernet Setup........................................................................................
Prestige 480 Dual BRI ISDN Router Figure 8-9 Edit Dial-in-User for RAS........................................................................................................................ 8-11 Figure 8-10 LAN 1 LAN-to-LAN Application ........................................................................................................ 8-13 Figure 8-11 LAN2 LAN-to-LAN Application .........................................................................................................
Prestige 480 Dual BRI ISDN Router Figure 13-1 Menu 24 - System Maintenance............................................................................................................13-1 Figure 13-2 Menu 24.1 - System Maintenance – Status..........................................................................................13-2 Figure 13-3 Menu 24.1 after Toggle Status...............................................................................................................
Prestige 480 Dual BRI ISDN Router Figure 14-9 Menu 24.7.1 - Uploading Router Firmware ........................................................................................ 14-9 Figure 14-10 Menu 24.7.2 - System Maintenance - Upload Router Configuration File .................................14-10 Figure 14-11 FTP Example ........................................................................................................................................14-11 Figure 14-12 Edit Host......................
Prestige 480 Dual BRI ISDN Router List of Tables Table 2-1 LED Functions............................................................................................................................................... 2-1 Table 2-2 Main Menu Commands................................................................................................................................ 2-5 Table 2-3 Main Menu Summary ......................................................................................................
Prestige 480 Dual BRI ISDN Router Table 9-3 Abbreviations used if Filter Type is GEN ..................................................................................................9-6 Table 9-4 TCP/IP Filter Rule Menu Fields ..................................................................................................................9-8 Table 9-5 Generic Filter Rule Menu Fields ...............................................................................................................
Prestige 480 Dual BRI ISDN Router Preface About Your Router Congratulations on your purchase of the Prestige 480 dual BRI ISDN Router. The Prestige 480 is a high-performance router that offers a complete solution for your WAN (Wide Area Network) applications such as Internet access, multi-protocol LAN-to-LAN connections, telecommuting and remote access over ISDN (Integrated Service Digital Network).
Prestige 480 Dual BRI ISDN Router For more information about the Prestige check the following sources: ♦ Prestige Support disk. ♦ Release notes for firmware upgrades and other information. These can be accessed through ZyXEL FTP server site and ZyXEL web Page. For ZyXEL support information see the Customer Support section in page v. Syntax Conventions • “Enter” means for you to type one or more characters and press the carriage return.
Prestige 480 Dual BRI ISDN Router Prestige Scenarios For fast access to example SMT menus to show you how to configure the Prestige for various scenarios go to the following sections SCENARIO GO TO SECTION To reset your Prestige 2.9 NetCAPI 2.12 DHCP 3.4 Internet Access 3.5 To configure SUA 3.7.2 IP Alias 3.5 Mega Bundle or Multiple ISPs Support 3.8 LAN-to-LAN application 5.1 Remote Access under Windows 8.4.1 Callback 8.4.3 Callback with CLID 8.4.4 To apply filters 9.3.
Prestige 480 Dual BRI ISDN Router General Structure of this Manual Getting Started (Chapters 1-2) This helps you connect, install and setup your Prestige to operate on your network. The Internet (Chapter 3) This shows you how to configure your Prestige for Internet access.
Prestige 480 Dual BRI ISDN Router Chapter 1 Getting to Know Your Router This chapter describes the key features and applications of your Prestige. 1.1 Prestige 480 ISDN Router The Prestige 480 is a dual-line multi-protocol ISDN router. The Prestige is ideal for everything from Internet browsing or receiving calls from remote dial-in users to making LAN-to-LAN connections to remote networks. 1.2 Features of Prestige 480 The following are the key features of the Prestige 480.
Prestige 480 Dual BRI ISDN Router User Account feature. The ability to partition physical network into logical network over the same Ethernet interface is referred to as IP Alias functionality. Dial-in Server The four B-channels and the dial-in capability make the Prestige an ideal platform as a dial-in server to provide remote access for up to four telecommuting employees.
Prestige 480 Dual BRI ISDN Router IP Policy Routing Support The Prestige can now override the default routing behavior and forward packets based on the policies defined by the network administrator. PPP Support The Prestige supports PPP (Point-to-Point Protocol) link layer protocol. PPP Multilink Support The Prestige can bundle up to four B-channels in a single connection using the PPP Multilink Protocol The number of links can be either statically configured or dynamically managed based on traffic demand.
Prestige 480 Dual BRI ISDN Router SMT The System Management Terminal (SMT) is a menu-driven interface to configure your Prestige using either console port (through RS232 cable) connection or telnet (through LAN) connection. You can access the SMT from either a VT100 compatible terminal or a terminal emulation program on a computer. Logging and Tracing ♦ CDR (Call Detail Record) for assistance in analyzing and managing the telephone bill. ♦ Built-in message logging and packet tracing.
Prestige 480 Dual BRI ISDN Router Packet Filtering The Prestige supports packet filtering that stops leakage of private data to the outside world and controls access to undesirable locations. Call Control Your Prestige provides budget management for outgoing calls and maintains a blacklist for unreachable phone numbers, thus saving you the expense of unnecessary charges. Data Compression Your Prestige incorporates Stac data compression to speed up data transfer.
Prestige 480 Dual BRI ISDN Router 1.3.1 Internet Access The Prestige is the ideal high-speed Internet access solution. Your Prestige supports the TCP/IP protocol that the Internet uses exclusively. It is also compatible with access servers manufactured by major vendors such as Cisco and Ascend. A typical Internet Access application is shown next.
Prestige 480 Dual BRI ISDN Router the cost of a single account. Single User Account address mapping can also be used for other LAN to LAN connections. Intranet Application Small/Medium Office users can access the Internet via one ISDN BRI at speed up to 128Kbps even when the branch office users are connected remotely. The branch office users can access the Internet without extra ISP subscription fee. The application is shown next in Figure 1.2 Internet Access Application.
Prestige 480 Dual BRI ISDN Router Figure 1-2 Internet Access Application 1-8 Getting to know your Prestige
Prestige 480 Dual BRI ISDN Router 1.3.2 LAN-to-LAN Connection You can use the Prestige to connect two geographically dispersed networks at speeds of up to 256Kbps over two ISDN BRI lines. It incorporates PPP/MP (Point-to-Point Protocol/Multilink Protocol) to bundle the B channels. The Prestige supports TCP/IP protocols. A typical LAN-to-LAN application for your Prestige is shown next.
Prestige 480 Dual BRI ISDN Router 1.3.3 Remote Access Server Your Prestige allows remote users to dial in and gain access to your LAN. This feature enables users that have workstations with remote access capabilities, e.g., Windows 95, to dial in to access the network resources without physically being in the office. Either PAP (Password Authentication Protocol) or CHAP (Challenge Handshake Authentication Protocol) authentication can be used to control the access from the remote users.
Prestige 480 Dual BRI ISDN Router Chapter 2 Hardware Installation & Initial Setup This chapter shows you how to make the cable connections to your Prestige as well as set up your ISDN connection using the SMT. 2.1 Front Panel LEDs The LED indicators on the front panel indicate the router functional status of the Prestige.
Prestige 480 Dual BRI ISDN Router Field Description ISDN 1 & 2 B1/B2 LNK The LNK (Link) LED is on when the Prestige is connected to an ISDN switch and the line has been successfully initialized; otherwise, it is off. The B1/B2 LED is on when the corresponding B Channel is in use. ISDN 1 SMT Management ISDN 2 Hub Power Power Outlet Adapter LAN 2.2 Prestige 480 Rear Panel and Connections This section outlines how to connect your Prestige 480 to the LAN and to the ISDN network.
Prestige 480 Dual BRI ISDN Router Step 1. Connecting the ISDN lines Connect the Prestige to the ISDN network using the included ISDN (black) cable. Plug one end of the cable into the port labeled ISDN BRI and the other to the ISDN wall jack. Step 2. Connecting Ethernet to your Prestige Use a Unshielded Twisted Pair (UTP) cable and RJ -45 connectors that look like a bigger telephone plug with eight pins to connect your Prestige to a 10/100M LAN.
Prestige 480 Dual BRI ISDN Router Note: You cannot access the PNC if you use the RS232 cable. You must use only the Ethernet cable. 2.4 Additional Installation Requirements In addition to the contents of your package, there are other hardware and software requirements you need before you can install and use your Prestige. These requirements include: 1. A computer with Ethernet 10Base-T NIC (Network Interface Card). 2.
Prestige 480 Dual BRI ISDN Router Figure 2-3 Power-On Display Step 2. Entering Password The login screen appears after you press [Enter], prompting you to enter the password, as shown next. For your first login, enter the default password 1234. As you type the password, the screen displays a (X) Enter Password : XXXX for each character you type.
Prestige 480 Dual BRI ISDN Router Operation Press/ to YES then press [ENTER]. Description to a submenu. Move the cursor [Enter] or [Up]/[Down] arrow keys Within a menu, press [Enter] to move to the next field. You can also use the [Up]/[Down] arrow keys to move to the previous and the next field, respectively. Enter information Fill in, or Press the [Space bar] to toggle You need to fill in two types of fields. The first requires you to type in the appropriate information.
Prestige 480 Dual BRI ISDN Router Copyright (c) 1994 – 1999 ZyXEL Communications Corp. Prestige 480 Main Menu Getting Started 1. General Setup 2. ISDN Setup 3. Ethernet Setup 4. Internet Access Setup Advanced Management 21. Filter Set Configuration 22. SNMP Configuration 23. System Security 24. System Maintenance 25. IP Policy Routing Advanced Applications 11. Remote Node Setup 12. Static Routing Setup 13. Defau lt Dial-in Setup 14. Dial-in User Setup 15. SUA Server Setup 99.
Prestige 480 Dual BRI ISDN Router 24 25 System Maintenance IP Policy Routing This menu provides system status, diagnostics, firmware upload, etc. This menu allows you to configure Routing Policies, 99 Exit To exit from SMT and return to the blank screen. 2.8 Changing the System Password The first thing your should do before anything else is to change the default system password by following the steps below. Step 1. Enter 23 in the Main Menu to open Menu 23 - System Security as shown next.
Prestige 480 Dual BRI ISDN Router When the Menu 23.1- System Security-Change Password appears, as shown in the next figure , type in your existing default system password, i.e., 1234, and press [Enter]. Menu 23.1 – System Security - Change Password Old Password= ? New Password= ? Retype to confirm= ? Enter here to CONFIRM or ESC to CANCEL: Figure 2-7 Menu 23.1 - System Security - Change Password Step 3. Enter your new system password and press [Enter]. Step 4.
Prestige 480 Dual BRI ISDN Router Turn on the Prestige again. You should see the following screen. Bootbase Version: V1.10 | 6/11/1999 15:04:51 RAM: Size = 8192 Kbytes DRAM POST: Testing: 8192k OK FLASH: intel 8M* 2 ZyNOS Version: V2.40(o.00)b02/ 7/13/1999 15:37:32 Press any key to enter debug mode within 3 seconds. ........................................
Prestige 480 Dual BRI ISDN Router Hardware Installation and Setup 2-11
Prestige 480 Dual BRI ISDN Router 2.10 General Setup Menu 1 - General Setup contains administrative and system-related information. To enter Menu 1 and fill in the required information, follow these steps: Step 1. Enter 1 in the Main Menu to open Menu 1 – General Setup. Step 2. The Menu 1 - General Setup screen appears, as shown next. Fill in the required fields marked [?] as explained in the following table.
Prestige 480 Dual BRI ISDN Router 2.11 European ISDN Setup Menus Menu 2 is for you to enter the information about your ISDN lines. Please note that the Prestige only accepts digits in phone number fields; please do not include ‘-‘ or spaces in these fields. Menu 2 - ISDN Setup 1. 2. 3. ISDN Line 1 Setup ISDN Line 2 Setup NetCAPI Setup Enter Menu Selection Number: Figure 2-10 Menu 2 – ISDN Setup From Menu 2 select 1 or 2 to display Menu 2.1 - ISDN Basic Setup. Menu 2.
Prestige 480 Dual BRI ISDN Router Table 2-5 Menu 2.1 – ISDN Basic Setup Field ISDN Line Description. Refers to ISDN line 1 or line 2 setup that you selected in Menu 2 - ISDN Setup Switch Type B Channel Usage This field is fixed as DSS-1 for European switches. In general, this will be Switch/Switch (the default). If you are only using one B channel (e.g., your Prestige is sharing the ISDN BRI line with another device), then select Switch/Unused.
Prestige 480 Dual BRI ISDN Router Figure 2-12 Menu 2.1.
Prestige 480 Dual BRI ISDN Router Table 2-6 Menu 2.1.1 - ISDN Advanced Setup Field Calling Line Indication PABX Outside Line Prefix PABX Number (Include S/T Bus Number) Outgoing Calling Party Number ISDN Data Description The Calling Line Indication, or Caller ID, governs whether the other party can see your number when you call. If set to Enable, the Prestige sends the caller ID and the party you call can see your number; if it is set to Disable, the caller ID is blocked.
Prestige 480 Dual BRI ISDN Router Setup LoopBack Test... Dialing to 40000 ... Sending and Receiving Data ... Disconnecting... LoopBack Test OK Figure 2-13 Loopback Test 2.12 NetCAPI Setup 2.12.1 Basics NetCAPI is ZyXEL's implementation of CAPI (Common ISDN Application Program Interface) capabilities over a network. It runs over DCP (Device Control Protocol) developed by RVS-COM. NetCAPI can be used for applications such as Eurofile transfer, file transfer, G3/G4 Fax, Autoanswer host mode, telephony, etc.
Prestige 480 Dual BRI ISDN Router Using ISDN-DCP, the Prestige acts as a DCP server. By default, the Prestige listens for DCP messages on TCP port number 2578 (the Internet-assigned number for RVS-COM DCP). When the Prestige receives a DCP message from a DCP client i.e., a workstation, the Prestige processes the message and acts on it. Your Prestige supports all the DCP messages specified in the ISDN-DCP specification. 2.12.4 RVS-COM RVS-COM includes an ISDN CAPI driver with its communication program.
Prestige 480 Dual BRI ISDN Router Figure 2-14 Configuration Example Before entering any configurations, you must install the CAPI driver (RVS-CE) and communication program such as RVS -COM Lite on your workstation. 2.13.1 Installing the CAPI driver and Communication Software [Note: Please uninstall previous versions of "RVS -CAPI" and "RVS-COM lite" before you install the new versions. You may use the Windows "START | Settings | Control Panel | Add/Remove Programs" to uninstall RVS-CAPI and RVS-COM.
Prestige 480 Dual BRI ISDN Router Figure 2-15 Menu 2.2 - NetCAPI Setup Step 2. Set the fields in the above menu according to the following description. Table 2-7 NetCAPI Setup Fields Field Description Active This field allows you to enable or disable NetCAPI.
Prestige 480 Dual BRI ISDN Router Hardware Installation and Setup 2-21
Prestige 480 Dual BRI ISDN Router 2.14 Ethernet Setup This section describes how to configure the Ethernet using Menu 3 – Ethernet Setup. From the Main Menu, enter 3 to open Menu 3. Menu 3 - Ethernet Setup 1. General Setup 2. TCP/IP and DHCP Setup Enter Menu Selection Number: Figure 2-16 Menu 3 - Ethernet Setup 2.14.1 General Ethernet Setup This menu allows you to specify the filter sets that you wish to apply to the Ethernet traffic.
Prestige 480 Dual BRI ISDN Router Figure 2-17 General Ethernet Setup If you need to define filters, please read Chapter 9 - Filter Set Configuration, then return to this menu to define the filter sets.
Prestige 480 Dual BRI ISDN Router Chapter 3 Internet Access This chapter shows you how to configure the LAN as well as the WAN of your Prestige for Internet access. 3.1 Factory Ethernet Defaults The Ethernet parameters of the Prestige are preset in the factory with the following values: 1. IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits). 2. DHCP server enabled with 32 client IP addresses starting from 192.168.1.33. These parameters should work for the majority of installations.
Prestige 480 Dual BRI ISDN Router Figure 3-1 General Setup To edit Menu 1, enter 1 in the Main Menu to select General Setup and press [Enter]. 3.3 TCP/IP Parameters 3.3.1 IP Address and Subnet Mask Similar to the houses on a street that share a common street name, the machines on a LAN share one common network number, also. Where you obtain your network number depends on your particular situation.
Prestige 480 Dual BRI ISDN Router 3.3.2 RIP Setup RIP (Routing Information Protocol) allows a router to exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. When set to Both, the Prestige will broadcast its routing table periodically and incorporate the RIP information that it receives; when set to None, it will not send any RIP packets and will ignore any RIP packets received.
Prestige 480 Dual BRI ISDN Router DNS Server Address DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa, e.g., the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, a user must know the IP address of a machine before s/he can access it. The DNS server addresses that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and subnet mask.
Prestige 480 Dual BRI ISDN Router 3.4 TCP/IP Ethernet Setup and DHCP You will now use Menu 3.2 to configure your Prestige for TCP/IP. To edit Menu 3.2, select the menu option Ethernet Setup in the Main Menu. When Menu 3 appears, select the submenu option TCP/IP and DHCP Setup and press [Enter]. The screen now displays Menu 3.2 TCP/IP and DHCP Ethernet Setup, as shown next. Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP Setup DHCP= Server Client IP Pool Starting Address= 192.168.1.
Prestige 480 Dual BRI ISDN Router Table 3-1 DHCP Ethernet Setup Menu Fields Field DHCP Description This field enables/disables the DHCP server. If it is set to Server, your Prestige will act as a DHCP server. If set to None, the DHCP server will be disabled. If set to Relay, the Prestige acts as a surrogate DHCP server and relays requests and responses between the remote server and the clients.
Prestige 480 Dual BRI ISDN Router Field Description third IP Alias. Example When you have completed this menu, press [Enter] at the prompt [Press ENTER to Confirm…] to save your configuration, or press [Esc] at any time to cancel. 3.5 IP Alias 3.5.1 Basics The P480 supports three logical LAN interface via its single physical Ethernet interface. The Prestige is the gateway for all the LAN networks. You can also route packets from one network to another.
Prestige 480 Dual BRI ISDN Router Prestige LAN 1 IP Address (Menu 3.2) LAN 2 IP Alias 1 (Menu 3.2.1) LAN 3 IP Alias 2 (Menu 3.2.1) Figure 3-4 Partitioned Logical Networks For example, in a school you can partition the single physical network into administration network, teachers network and students network as shown next. Prestige ADMINISTRATION TEACHERS STUDENTS Figure 3-5 IP Alias Example 3.5.
Prestige 480 Dual BRI ISDN Router You must use Menu 3.2 to configure the first network and move the cursor to Edit IP Alias field and toggle the space bar to choose Yes and press [Enter] to configure the second and third network. Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP Setup: DHCP= None Client IP Pool Starting Address= N/A Size of Client IP Pool= N/A Primary DNS Server= N/A Secondary DNS Server= N/A TCP/IP Setup: IP Address= 192.168.1.1 IP Subnet Mask= 255.255.255.
Prestige 480 Dual BRI ISDN Router IP Alias Setup Menu Fields Field Description Example IP Alias Choose Yes to configure the LAN network for the Prestige. Yes IP Address Enter the IP address of your Prestige in dotted decimal notation 192.168.2.1 IP Subnet Mask Your Prestige will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the Prestige 255.255.255.
Prestige 480 Dual BRI ISDN Router 3.6 Internet Access Configuration Menu 4 allows you to enter the Internet Access information in one screen. Menu 4 is actually a simplified setup for one of the remote nodes that you can access in Menu 11. Before you configure your Prestige for Internet access, you need to collect your Internet account information from your ISP. Use the table below to record your Internet Account Information.
Prestige 480 Dual BRI ISDN Router Internet access.
Prestige 480 Dual BRI ISDN Router Table 3-4 Internet Access Setup Menu Fields Field ISP’s Name Pri Phone and Sec Phone Number Description Enter the name of your Internet Service Provider, e.g., myISP. This information is for identification purposes only. Both the Primary and the Secondary Phone number refer to the number that the Prestige dials to connect to the ISP. My Login Name My Password Enter the login name given to you by your ISP. Enter the password associated with the login name above.
Prestige 480 Dual BRI ISDN Router 3.7 Single User Account Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, you will have to lease a block of legal, or globally unique, IP addresses from the ISP. The Single User Account (SUA) feature allows you to have the same benefits as having multiple legal addresses, but only pay for one IP address, thus saving significantly on the subscription fees. (Check with your ISP before you enable this feature).
Prestige 480 Dual BRI ISDN Router The IP address for the SUA can be either fixed or dynamically assigned when a call is connected. In addition, you can designate servers using Menu 15, e.g., a web server and a telnet server, on your local network and make them accessible to the outside world. For more information on setting up servers see the section Multiple Servers behind SUA in the chapter Dial-in Server Configuration.
Prestige 480 Dual BRI ISDN Router 3.7.2 Single User Account Configuration The steps for configuring your Prestige for Single User Account are identical to the conventional Internet access with the exception that you need to fill in two extra fields in Menu 4 - Internet Access Setup, as shown next . Menu 4 - Internet Access Setup ISP's Name= ChangeMe Pri Phone #= 1234 Sec Phone #= My Login= ChangeMe My Password= ******** Single User Account= Yes IP Addr= 0.0.0.
Prestige 480 Dual BRI ISDN Router At this point, your Prestige will ask if you wish to test the Internet connection. If you select Yes, the Prestige will call the ISP and test the configuration. If the test fails, note the error messages on the screen and take the appropriate troubleshooting steps. 3.8 Mega Bundle or Multiple ISPs Support 3.8.
Prestige 480 Dual BRI ISDN Router 3.8.2 ISP Remote Node and Supplementary Remote Node The previous ZyNOS versions supported only one ISP account. That remote node is called as the “ISP remote node”. Now in ZyNOS v2.42, you can setup other ISP accounts and this is called as “supplementary remote node”. You can have several “Supplementary remote node”, but only one “ISP remote node”. These remote nodes can work at the same time.
Prestige 480 Dual BRI ISDN Router 5. In Menu 11.2, set Max. Channels= 3 or Max. Channels= 4 6. Save the configuration. Step 2. Configure a supplementary remote node. 1. Setup a remote node in Menu 11. 2. Set Edit PPP Options= Yes and then press [Enter]. You will enter Menu 11.2 3. Set Mega Bundle= Supplementary. Return to Menu 11.1. 4. Set Rem IP Addr = 1.2.3.4. The value can be arbitrary IP address except 0.0.0.0 and 1.1.1.1. 5. Set Edit IP/IPX/Bridge= Yes and then press [Enter].
Prestige 480 Dual BRI ISDN Router 3.10 Configuring Backup ISP Accounts If you have more than one ISP account, you can configure the secondary ISP as a backup. You can switch to the backup ISP in the event that the primary ISP is out of service. The SUA feature can be enabled for all these accounts. 3.10.1 Configure a Backup ISP To configure a backup ISP Account, follow these steps: Step 1. Configure your primary ISP using Menu 4, as described earlier in this chapter. Step 2.
Prestige 480 Dual BRI ISDN Router You will now be able to access the Internet through the backup ISP Remote Node.
Prestige 480 Dual BRI ISDN Router Chapter 4 Remote Node Configuration This chapter covers the parameters that are protocol independent. The protocoldependent configuration (TCP/IP) is covered in the next chapter. A remote node is required for placing calls to a remote gateway. A remote node represents both the remote gateway and the network behind it across a WAN connection. Note that when you use Menu 4 to set up Internet access, you are actually configuring one of the remote nodes.
Prestige 480 Dual BRI ISDN Router Menu 11 - Remote Node Setup 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. ChangeMe (ISP, SUA) ________ ________ ________ ________ ________ ________ ________ ________ ________ ________ ________ Enter Node # to Edit: Figure 4-1 Menu 11 – Remote Node Setup When Menu 11.1. - Remote Node Profile appears, fill in the fields as described in the table below to define this remote profile. The Remote Node Profile Menu Fields table shows how to configure the Remote Node Menu. Menu 11.
Prestige 480 Dual BRI ISDN Router Figure 4-2 Menu 11.1 Remote Node Profile Table 4-1 Remote Node Profile Menu Fields Field Rem Node Name Description This is a required field [?]. Enter a descriptive name for the remote node, for example, Corp. This field can be up to eight characters. This name must be unique from any other remote node name or remote dial-in user name. Options Active Press the space bar to toggle between Yes and No.
Prestige 480 Dual BRI ISDN Router This field determines whether or not your Prestige will call back after receiving a call from this remote node. If this option is enabled, your Prestige will disconnect the initial call from this node and call it back at the Outgoing Primary Phone Number (see below). This is a required field [?] if Call Direction is either Both or Outgoing. Enter the login name for your Prestige when it calls this remote node.
Prestige 480 Dual BRI ISDN Router and this remote node. When set to Leased, the Allocated Budget and Period do not apply. Carrier Access Code Nailed-up Connection Session Option: Edit Filter Sets Session Option: Idle Timeout (sec) This field allows you to select a specific carrier to take advantage of discount telephone rates. Enter the carriers access code. This field specifies if you want to make the connection to this remote node a nailed-up connection. See below for more details.
Prestige 480 Dual BRI ISDN Router successful authentication, please make sure that you specify the correct authentication protocol when connecting to such an implementation. 4.1.4 PPP Multilink The Prestige uses the PPP Multilink Protocol (PPP/MP) to bundle multiple links in a single connection to boost the effective throughput between two nodes. The bundle works best when the member links are of the same type of call and at approximately the same speed.
Prestige 480 Dual BRI ISDN Router Table 4-2 BTR v MTR for BOD BTR & MTR Setting No. of channel(s) used Max No. of channel(s) used Bandwidth on demand BTR = 64, MTR = 64 1 1 Off BTR = 64, MTR = 128 1 2 On BTR = 128, MTR = 128 2 2 Off BTR = 256, MTR = 256 4 4 On The Min. Channels and Max. Channels allows you to force the Prestige to use a minimum and maximum number of channels.
Prestige 480 Dual BRI ISDN Router 4.1.6 Editing PPP Options To edit the remote node PPP Options, move the cursor to the Edit PPP Options field in Menu 11.1 Remote Node Profile, and use the space bar to select Yes. Press [Enter] to open Menu 11.2, as shown next. Menu 11.2 - Remote Node PPP Options Encapsulation= Standard PPP Compression= No BACP= Enable Multiple Link Options: BOD Calculation= Transmit or Receive Min. Channels= 1 Max.
Prestige 480 Dual BRI ISDN Router Table 4-3 Remote Node PPP Options Menu Fields Field Encapsulation Compression BACP Description Select the CISCO PPP only when this remote node is a Cisco machine; otherwise, select the Standard PPP. Option Standard PPP You can turn on or off Stac Compression. The default for this field is Yes. Yes/No Allows you to enable or disable the Bandwidth Allocation Control Protocol (BACP).
Prestige 480 Dual BRI ISDN Router 4.1.7 Remote Node Filter Move the cursor to the field Edit Filter Sets in Menu 11.1, then press the space bar to toggle and set the value to YES. Press [ENTER] to open Menu 11.5 – Remote Node Filter. Use Menu 11.5 to specify the filter set(s) to apply to the incoming and outgoing traffic between this remote node and the Prestige and to prevent certain packets from triggering calls. You can specify up to 4 filter sets separated by a comma, e.g.
Prestige 480 Dual BRI ISDN Router Chapter 5 Remote Node TCP/IP Configuration This chapter shows you an example of LAN-to-LAN application and explains how to configure the TCP/IP parameters of a remote node. 5.1 LAN-to-LAN Application A typical LAN-to-LAN application is to use your Prestige to connect a branch office (remote LAN) to the headquarters (office LAN), as depicted in the following diagram.
Prestige 480 Dual BRI ISDN Router For the branch office, you need to configure a remote node in order to dial out to the headquarters. Additionally, you may also need to define static routes if some services reside beyond the immediate remote LAN. LAN 1 Setup Menu 11.1 - Remote Node Profile Rem Node Name= LAN_2 Active= Yes Call Direction= Both IP address of Edit PPP Options= No Rem IP Addr= 192.168.2.
Prestige 480 Dual BRI ISDN Router Figure 5-3 LAN 2 Setup 5.2 Remote Node Setup Follow the procedure in Chapter 4 - Remote Node Configuration to configure the protocol-independent parameters in Menu 11 - Remote Node Profile. For the TCP/IP parameters, follow the instructions below. If you are configuring your Prestige to receive incoming calls, you also need to set the default dial-in parameters in Menu 13. Follow the steps below to edit Menu 11.3 - Remote Node Network Layer Options shown next.
Prestige 480 Dual BRI ISDN Router The following diagram explains the Sample IP Addresses to help you to understand the field of My Wan Addr in Menu 11.3. Remote Network Local Network 192.168.1.0 192.168.2.0 192.168.3.1 192.168.3.2 ISDN Prestige 480 Prestige 480 Figure 5-5 Sample IP Addresses for a TCPI/IP LAN-to-LAN Connection To configure the TCP/IP parameters of a remote node, first configure the two fields in Menu 11-1 Remote Node Profile, as shown in the table below.
Prestige 480 Dual BRI ISDN Router The next table shows the TCP/IP related fields in Menu 11.3 - Remote Node Network Layer Options. Table 5-2 TCP/IP Remote Node Configuration Rem IP Address This will show the IP address you entered for this remote node in the previous menu. Rem IP Subnet Mask My WAN Addr Enter the subnet mask for the remote network.
Prestige 480 Dual BRI ISDN Router 5.2.1 Static Route Setup Static routes tell the Prestige routing information that it cannot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is directly N1 N2 N3 Router 1 Prestige 480 Router 2 connected to a remote node.
Prestige 480 Dual BRI ISDN Router To configure an IP static route, use Menu 12 -IP Static Route Setup, as displayed next. Menu 12 - IP Static Route Setup 1. ________ 2. ________ 3. ________ 4. ________ 5. ________ 6. ________ 7. ________ 8. ________ Enter selection number: Figure 5-7 Menu 12.1 – IP Static Route Setup Menu 12.
Prestige 480 Dual BRI ISDN Router The following table describes the fields for Menu 12.1 – Edit IP Static Route Setup. Table 5-3 Edit IP Static Route Menu Fields Field Route Name Description Enter a descriptive name for this route. This is for identification purposes only. Active Destination IP Address This field allows you to activate/deactivate this static route. This parameter specifies the IP network address of the final destination. Routing is always based on network number.
Prestige 480 Dual BRI ISDN Router Chapter 6 IPX Configuration This chapter shows you how to configure the IPX parameters of the Prestige. 6.1 IPX Network Environment Novell bundles the protocol stack, the server software and routing functionality in their NetWare server products. So a NetWare server is not only a file or print server, it is also a router. 6.1.1 Network and Node Number Every IPX machine has a network number and a node number, together they form the complete address of the machine.
Prestige 480 Dual BRI ISDN Router Although there are four frame types available on the Ethernet, you should configure as few frame types as possible on your NetWare server and use automatic frame detection on the clients to simplify management and to reduce network overhead. NetWare Server Disk drive File/Print Server International Network Number Printer IPX router Ethernet 802.3 802.2 SNAP External Network Numbers NetWare Server 6.1.
Prestige 480 Dual BRI ISDN Router 6.2 Prestige in an IPX Environment There are two scenarios in which your Prestige is deployed, depending on whether there is a NetWare server on the LAN or not, as depicted in the following diagram. Seed Router (Client Side) Not Seed Router (Server Side) Assigns Network Number Learns Network Number NetWare Clients NetWare Prestige 480 Prestige 480 Server Prestige in an IPX Environment 6.2.
Prestige 480 Dual BRI ISDN Router 6.2.2 Prestige on LAN without Server Each IPX network must have a seed router. If you only have NetWare clients on your network, then you must configure the Prestige as a seed router and set up unique network numbers for each frame type enabled using the Ethernet Setup Menu. 6.3 IPX Spoofing Your Prestige comes with several pre-defined call filters designed to prevent certain IPX packets from triggering a call to a remote node.
Prestige 480 Dual BRI ISDN Router Menu 3.
Prestige 480 Dual BRI ISDN Router The following table describes the Novell IPX Ethernet Setup Menu. Novell IPX Ethernet Setup Fields Field Description Options Seed Router Determine if your Prestige is to act as a seed router. Yes/No Frame Type Enable/Disable the individual frame type. Remember to enable only the ones that are actually used on your network. 802.2 802.3 Ethernet II SNAP IPX Network # If your Prestige is a seed router, enter a unique network number for each frame type enabled.
Prestige 480 Dual BRI ISDN Router 6.5 LAN-to-LAN Application with Novell IPX A typical LAN-to-LAN application is to use your Prestige to call from a branch office to the corporate headquarters to enable the stations in the branch office to access the NetWare servers at the headquarters, as depicted in the next figure.
Prestige 480 Dual BRI ISDN Router 6.6 IPX Remote Node Setup Follow the procedure in Chapter 5 to configure the protocol-independent parameters in Menu 11.1 Remote Node Profile. For the IPX-specific parameters in Menu 11.3 - Remote Node Network Layer Options follow the instructions below. If you want the Prestige to receive incoming calls, you must also configure the default dial-in parameters in Menu 13. To edit Menu 11.3 - Remote Node Network Layer Options shown next, follow these steps: Step 1.
Prestige 480 Dual BRI ISDN Router The table below describes the IPX-specific parameters of the remote node setup. Remote Node Novell IPX Options Field Description Option Dial-OnQuery This field is necessary for your Prestige on the client side. When set to Yes, any Get Service SAP or RIP broadcasts will trigger your Prestige to make a call to that remote node. Yes/No Rem LAN Net # In this field, enter the internal network number of the NetWare server on the remote LAN.
Prestige 480 Dual BRI ISDN Router 6.6.1 IPX Static Route Setup Similar to IP, IPX static routes tell the Prestige how to reach servers beyond a remote node before a connection to that remote node is established. From Menu 12, select two, then select one of the IPX Static Routes to open Menu 12.2.1 - Edit IPX Static Route, as shown next. Menu 12.2.
Prestige 480 Dual BRI ISDN Router The following table contains the instructions on how to configure the Edit IP Static Route Menu. Edit IPX Static Route Menu Fields Field Description Server Name In this field, enter the name of the server. This must be the exact name configured in the NetWare server. This field contains the internal network number of the remote server that you wish to access. [00000000] or [FFFFFFFF] are reserved.
Prestige 480 Dual BRI ISDN Router Chapter 7 Bridging Setup This chapter shows you how to configure the bridging parameters of your Prestige. 7.1 Bridging in General Bridging bases the forwarding decision on the MAC (Media Access Control), or hardware address, while routing does it on the network layer (IP or IPX) address. Bridging allows the Prestige to transport packets of network layer protocols that the Prestige does not route, e.g., SNA, from one network to another.
Prestige 480 Dual BRI ISDN Router Menu 3.5 - Bridge Ethernet Setup The following table describes how to configure the Handle IPX field in Menu 3.5. Bridge Ethernet Setup Menu - Handle IPX Field Configuration Handle IPX Field Description (Menu 3.5) None When there is no IPX traffic on the LAN or when you do not want to apply any special handling for IPX. Client When there are only client workstations on the LAN. RIP and SAP (Service Advertising Protocol) response packets will not trigger calls.
Prestige 480 Dual BRI ISDN Router Step 2. Move the cursor to the Edit IP/IPX/Bridge field, then press the space bar to select Yes and press Menu 11.3 - Remote Node Network Layer Options IP Options: Rem IP Addr:0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.0.0.
Prestige 480 Dual BRI ISDN Router Timeout (min) retain the Ethernet Addr information in its internal tables while the line is down. If this information is retained, your Prestige will not have to recompile the tables when the line is brought back up. Once you have completed filling in the Network Layer Options Menu, press [Enter] to return to Menu 11.1. Then press [Enter] at the message [Press ENTER to Confirm…] to save your configuration, or press [Esc] to cancel. Menu 12.
Prestige 480 Dual BRI ISDN Router Menu 12.3.
Prestige 480 Dual BRI ISDN Router The following table describes the Bridge Static Route Menu. Bridge Static Route Menu Fields Field Description Route Name Enter a name for the bridge static route for identification purposes. Active Activate/deactivate the static route. Ether Address Enter the MAC address of the destination machine that you wish to bridge the packets to. IP Address If available, enter the IP address of the destination machine that you wish to bridge the packets to.
Prestige 480 Dual BRI ISDN Router Chapter 8 Dial-in Server Configuration This chapter shows you how to configure your Prestige to receive calls from remote dial-in users, e.g., telecommuters, as well as remote nodes. There are several differences between dial-in users and remote nodes, as summarized in the table. Table 8-1 Remote Dial-in Users/Remote Nodes Comparison Chart Remote Dial-in Users Remote Nodes Your Prestige will only answer calls from remote dial-in users; it will not make calls to them.
Prestige 480 Dual BRI ISDN Router 8.1 Remote Access Server Telecommuting enables people to work at remote sites and yet still have access to the resources in the business office. Typically, a telecommu ter will use a client workstation with TCP/IP and dial-out capabilities, e.g., a Windows PC or a Macintosh. For telecommuters to call in to your Prestige, you need to configure a dial-in user profile for each telecommuter.
Prestige 480 Dual BRI ISDN Router 8.2 LAN-to-LAN Server Application Your Prestige can also be used as a dial-in server for LAN-to-LAN application to provide access for the workstations on a remote network. For your Prestige to be set up as a LAN-to-LAN server, you need to configure the Default Dial-In Setup to set the operational parameters for incoming calls. Additionally, you must create a remote node for the router on the remote network (see Chapter 5 - Remote Node Configuration).
Prestige 480 Dual BRI ISDN Router 8.3 Default Dial-in Setup This section covers the default dial-in parameters. The parameters in Menu 13 affect incoming calls from both remote dial-in users, and remote nodes until authentication is completed.
Prestige 480 Dual BRI ISDN Router Telco Options: CLID Authen This field sets the CLID authentication parameter for all incoming calls. There are three options for this field: l None - No CLID is required. l Required – CLID must be available, or the Prestige will not answer the call. l Preferred - If the CLID is available then CLID will be used; otherwise, authentication is performed in PPP negotiation. None Required Preferred PPP Options: Recv.
Prestige 480 Dual BRI ISDN Router Callback Budget Management: Allocated Budget (min) This field sets the budget callback time for all the remote dial-in users. The default for this field is 0 for no budget control. Period (hr) This field sets the time interval to reset the above callback budget control. Default = 0 IP Address Supplied By: Dial-in User IP Pool IP Pool: IP Start Addr If set to Yes, the Prestige will allow a remote host to specify its own IP address.
Prestige 480 Dual BRI ISDN Router 8.3.1 Default Dial-in Filter Move cursor to the field Edit Filter Sets in Menu 13, press space bar to toggle and set the value to Yes and then press [Enter] to open Menu 13.1 – Default Dial-in Filter. Use this menu to specify the filter set(s) to apply to the incoming and outgoing traffic between all dial-in users and your Prestige. Note that the filter set(s) only applies to the dial-in users but not the remote nodes.
Prestige 480 Dual BRI ISDN Router Menu 14 - Dial-in User Setup 1. 2. 3. 4. 5. 6. 7. 8. --------________ ________ ________ ________ ________ ________ ________ Enter Menu Selection Number: Figure 8-5 Menu 14 - Dial-in User Setup Step 2. Select one of the users by number, this will bring you to Menu 14.1 - Edit Dial-in User, as shown next. Menu 14.
Prestige 480 Dual BRI ISDN Router The following table provides instructions on how to fill in the Edit Dial-In User fields. Table 8-3 Edit Dial-in User Menu Fields Field Description User Name This is a required field. This will be used as the login name for authentication. Choose a descriptive word for login, for example, [JohnDoe]. Active You can disallow dial-in access to this user by setting this field to No.
Prestige 480 Dual BRI ISDN Router Idle Timeout Enter the idle time (in seconds). This time-out determines how long the dial-in user can be idle before your Prestige disconnects the call when the Prestige is calling back. Default=300 seconds Idle time is defined as the period of time where there is no data traffic between the dial-in user and your Prestige. The default is 300 seconds (5 minutes). Once you have completed filling in Menu 14.
Prestige 480 Dual BRI ISDN Router Configuring your Prestige Menu 13 - Default Dial -in Setup Telco Options: CLID Authen= None IP Address Supplied By: Dial-in User= Yes IP Pool= Yes IP Start Addr= 192.168.250.
Prestige 480 Dual BRI ISDN Router Note: The caller always controls Idle Timeout, so the Idle Timeout field does not apply when there is callback. 8.4.2 CLID Authentication CLID (Calling Line IDentification) authentication affords you the security of limiting a user to only initiate connections from a fixed location. The Prestige uses the caller ID sent by the switch to match against the CLIDs in the database.
Prestige 480 Dual BRI ISDN Router Menu 11.1 - Remote Node Profile Set Call Direction and Rem Node Name= LAN_2 Active= Yes Call Direction= Both Edit PPP Options= No Rem IP Addr= 192.168.2.1 Edit IP= No Call Back to Both and No respectively.
Prestige 480 Dual BRI ISDN Router Testing Callback with your Connection Go to Menu 24.4.5 of the Prestige on LAN 1 and enter the numbers that correspond to the menu in the above LAN 1. Start dialing for node … ### Hit any key to continue ### $$$ DIALING dev=2 ch=0…..
Prestige 480 Dual BRI ISDN Router Menu 11.1 - Remote Node Profile Rem Node Name= LAN_1 Active= Yes Call Direction= Both Edit PPP Options= No Rem IP Addr= 192.168.1.
Prestige 480 Dual BRI ISDN Router Menu 13 Menu 13 - Default Dial -in Setup Telco Options: CLID Authen= Required PPP Options: Recv Authen= CHAP/PAP Compression= Yes Mutual Authen= No PAP Login= N/A PAP Password= N/A Multiple Link Options: Max Trans Rate= 256 IP Address Supplied By: Dial-in User= Yes IP Pool= No IP Start Addr= N/A IP Count(1,4)= N/A Set this field to Required Session Options: Edit Filter Sets= No Callback Budget Management: Allocated Budget(min)= Period(hr)= Press ENTER to CONFIRM or ESC
Prestige 480 Dual BRI ISDN Router Copyright (c) 1994 - 1999 ZyXEL Communications Corp. LAN_2>sys trcl call CLID Authentication Tracelog type 9080 level 1 Prestige on LAN ### Hit any key to terminate 2 calls back. *** INT L CLID check: ch=7743bc reason=-3026 *** INTL chanErr: chp=7743bc state=6 evt=0300 Connection Established Figure 8-15 Callback and CLID Connection Test 8.5 Multiple Servers behind SUA If you wish, you can make inside servers for different services, e.g.
Prestige 480 Dual BRI ISDN Router Menu 15 - Multiple Server Configuration Port # IP Address -----------------1. Default 2. 0 3. 0 4. 0 5. 0 6. 0 7. 0 8. 0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: 8.5.1 Configuring a Server behind SUA Follow the steps below to configure a server behind SUA: 1. Enter 15 in the main menu to go to Menu 15, Multiple Server Configuration. 2. Enter an index number in menu 15 to go to Menu 15.
Prestige 480 Dual BRI ISDN Router Services Port Number FTP (File Transfer Protocol) 21 Telnet 23 SMTP (Simple Mail Transfer Protocol) 25 DNS(Domain Name System) 53 HTTP (Hyper Text Transfer protocol or WWW, Web) 80 PPTP (Point-to-Point Tunneling Protocol) 1723 Dial-In Server Configuration 8-19
Prestige 480 Dual BRI ISDN Router Chapter 9 Filter Configuration This chapter shows you how to create and apply filter(s). 9.1 About Filtering Your Prestige uses filters to decide whether or not to allow passage of a packet. Data filters are further divided into incoming and outgoing filters, depending on the direction of the packet relative to a port. The following sections describe how to configure filter sets.
Prestige 480 Dual BRI ISDN Router Start Packet into Filter Fetch First Filter Set Filter Set Fetch Next Filter Set Fetch First Filter Rule Yes Fetch Next Filter Rule Yes Next Filter Set Available? No Next Filter Rule Available? Execute Filter Rule Check Next Rule No Drop Drop Packet Forward Accept Packet Figure 9-1 Filter Rule Process 9-2 Filter Configuration
Prestige 480 Dual BRI ISDN Router 9.2 Configuring a Filter Set To configure a filter sets, follow the procedure below: Step 1. Select option 21. Filter Set Configuration from the Main Menu to open Menu 21. Figure 9-2 Menu 21 - Filter Set Configuration Step 2. Select the filter set you wish to configure (no. 1-12) and press [Enter] . Step 3. Enter a descriptive name or comment in the Edit Comments field and press Enter. Step 4. Press [Enter] at the message: [Press ENTER to confirm] to open Menu 21.
Prestige 480 Dual BRI ISDN Router Menu 21.1 - Filter Rules Summary # A Type - - ---1 Y IP 2 Y IP 3 Y IP 4 Y IP 5 Y IP 6 Y IP Filter Rules M -------------------------------------------- ------- -- Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=137 N Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=138 N Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=139 N Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=137 N Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=138 N Pr=17, SA=0.0.0.0, DA=0.0.0.
Prestige 480 Dual BRI ISDN Router [N] means the filter rule is inactive. Type Refers to the type of filter rule. This shows GEN for Generic and IP for TCP/IP. Filter Rules The filter rule parameters will be displayed here (see below). M Refers to More. [Y] means an action can not yet be taken as there are more rules to check, which are concatenated with the present rule to form a rule chain. When the rule chain is complete an action can be taken. [GEN] for Generic. [IP] for TCP/IP.
Prestige 480 Dual BRI ISDN Router Table 9-2 Abbreviations used if Filter Type is IP l Abbreviation Description Pr Protocol SA Source Address SP Source Port number DA Destination Address DP Destination Port number If the filter type is GEN (generic), the following abbreviations listed in the following table will be used.
Prestige 480 Dual BRI ISDN Router 9.3.1 Filter Types and SUA There are two categories of filter rules, Device Filter (Generic) rules and Protocol Filter (TCP/ IP) rules. Device Filter rules act on the raw data from/to LAN and WAN. Protocol Filter rules act on the IP packets. Generic and TCP/IP filter rules are discussed in more detail in the next section.
Prestige 480 Dual BRI ISDN Router 9.3.2 TCP/IP Filter Rule This section shows you how to configure a TCP/IP filter rule. TCP/IP rules allow you to base the rule on the fields in the IP and the upper layer protocol, e.g., UDP and TCP, headers. To configure a TCP/IP rules, select TCP/IP Filter Rule from the Filter Type field and press [Enter] to open Menu 21.1.1 - TCP/IP Filter Rule, as shown next. Menu 21.1.
Prestige 480 Dual BRI ISDN Router The majority of IP packets do not have source route. Destination: IP Addr Destination: IP Mask Enter the destination IP Address of the packet you wish to filter. This field is a don’t-care if it is 0.0.0.0. Enter the IP subnet mask to apply to the Destination: IP Addr. Destination: Port # Enter the destination port of the packets that you wish to filter. The range of this field is 0 to 65535. This field is a don’t-care if it is 0.
Prestige 480 Dual BRI ISDN Router Drop Once you have completed filling in Menu 21.1.1 - TCP/IP Filter Rule, press [Enter] at the message [Press Enter to Confirm] to save your configuration, or press [Esc] to cancel. This data will now be displayed on Menu 21.1 - Filter Rules Summary. The following diagram illustrates the logic flow of an IP filter.
Prestige 480 Dual BRI ISDN Router Packet into IP Filter Filter Active? No Yes Apply SrcAddrMask to Src Addr Check Src IP Addr Not Matched Matched Apply DestAddrMask to Dest Addr Check Dest IP Addr Not Matched Matched Check IP Protocol Not Matched Matched Check Src & Dest Port Not Matched Matched More? Yes No Action Not Matched Action Matched Check Next Rule Check Next Rule Drop Drop Packet Drop Forward Forward Check Next Rule Accept Packet Figure 9-7 Executing a Filter Rule Filter C
Prestige 480 Dual BRI ISDN Router 9.3.3 Generic Filter Rule This section shows you how to configure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP, it is generally easier to use the IP rules directly. For generic rules, the Prestige treats a packet as a byte stream as opposed to an IP packet. You specify the portion of the packet to check with the Offset (from 0) and the Length fields, both in bytes.
Prestige 480 Dual BRI ISDN Router Table 9-5 Generic Filter Rule Menu Fields Field Filter # Filter Type Active Offset Length Description This is the filter set, filter rule co-ordinates, i.e., 2,3 refers to the second filter set and the third rule of that set. Use the space bar to toggle between both types of rules. Parameters displayed below each type will be different. Option Select Yes to turn on the filter rule. Enter the starting byte of the data portion in the packet that you wish to compare.
Prestige 480 Dual BRI ISDN Router 9.3.4 IPX Filter Rule This section shows you how to configure an IPX Filter Rule. IPX filters allow you to base the rules on the fields in the IPX headers. To configure an IPX rule, select IPX Filter Rule from the Filter Type field and press [Enter] to open Menu 21.1.3 IPX Filter Rule, as shown in the figure below. Menu 21.1.
Prestige 480 Dual BRI ISDN Router The table below describes the IPX Filter Rule. Table 9-6 IPX Filter Rule Menu Fields Field IPX Packet Type Destination/Source Network # Destination/Source Node # Destination/Source Socket # Destination/Source Socket # Comp Operation Description Enter the IPX packet type (1-byte in hexadecimal) you wish to filter.
Prestige 480 Dual BRI ISDN Router 9.4 Applying Filters and Factory Defaults This section shows you where to apply the filter(s) after you design it (them). Two sets of factory default filter rules have been configured in Menu 21 to prevent NetBIOS traffic from triggering calls (see Figure 8-7 Menu 21 - Filter Set Configuration). 9.4.
Prestige 480 Dual BRI ISDN Router Factory Menu 11.5 - Remote Node Filter Default Filter Input Filter Sets: protocol filters= device filters= Output Filter Sets: Figure 9-11 Filtering Remote Node traffic 9.4.3 Default Dial-in Filter Use Menu 13.1 Default Dial-in Filter to specify the filter set(s) to apply to the incoming and outgoing traffic between all dial-in users and your Prestige. Note that these filter set(s) only apply to the dial-in users but not to the remote nodes.
Prestige 480 Dual BRI ISDN Router Chapter 10 SNMP Configuration This chapter explains how to configure SNMP. 10.1 About SNMP SNMP (Simple Network Management Protocol) is a protocol for network management and monitoring. Your Prestige supports SNMP agent functionality, which allows a manager station to manage and monitor the Prestige through the network. Keep in mind that SNMP is only available if TCP/IP is configured on your Prestige. 10.
Prestige 480 Dual BRI ISDN Router Figure 10-1 Menu 22 - SNMP Configuration 10-2 SNMP Configuration
Prestige 480 Dual BRI ISDN Router The following table describes the SNMP configuration parameters. Table 10-1 SNMP Configuration Menu Fields Field Description Default Get Community Enter the get community, which is the password for the incoming Get- and Get Next- requests from the management station. public Set Community Enter the set community, which is the password for incoming Setrequests from the management station.
Prestige 480 Dual BRI ISDN Router Chapter 11 System Security This chapter helps you to change the system password and to configure an external authentication server. 11.1 Changing the System Password To change the system password, follow the steps shown next: Step 1. Select option System Security in the Main Menu to open Menu 23 – System Security as shown next. Menu 23 - System Security 1. Change Password 2.
Prestige 480 Dual BRI ISDN Router Step 2. From the System Security Menu, select option Change Password to open Menu 23.1 - System Security - Change Password. Step 3. Enter your existing system password and press [Enter]. Menu 23.1 - System Security - Change Password Old Password= ? New Password= ? Retype to confirm= ? Enter here to CONFIRM or ESC to CANCEL: Figure 11-2 Menu 23.1 - System Security - Change Password Step 4. Enter your new system password and press [Enter]. Step 5.
Prestige 480 Dual BRI ISDN Router 11.2 Using RADIUS Authentication Your Prestige has a built-in dial-up user list; however, the number of users that can be stored locally is limited due to memory constraints. If you have more users than what the Prestige can store locally, use an external RADIUS (Remote Authentication Dial-In User Service) server that provides authentication service for unlimited number of users. 11.2.
Prestige 480 Dual BRI ISDN Router These changes add the support for CLID authentication, as described in the following section.
Prestige 480 Dual BRI ISDN Router 11.2.2 RADIUS Server Configuration To configure the RADIUS server, select option 23, System Security, from the Main Menu to open Menu 23 System Security. Select option 2, External Server from this menu to open Menu 23.2 - System Security External Server, shown next. The radius authentication port has changed from 1645 to 1812. It is necessary to reboot your Prestige after changing the RADIUS port number before the change takes effect. Menu 23.
Prestige 480 Dual BRI ISDN Router The fields in the System Security - External Server Menu are listed in the following table. Table 11-1 System Security - External Server Menu Fields Field Active Description Determines whether the external security facility is enabled. If No, only the built-in dial-up user list will be used. If Yes, the built-in dial-up user list will be searched first, then the external authentication server. Determines the type of the external authentication server.
Prestige 480 Dual BRI ISDN Router 11.2.5 Using RADIUS Authentication for CLID To use RADIUS for CLID authentication, create a user record in the users file where the user name (the first field) is the telephone number, and the password (the second field) is always Zyxel-CLID (casesensitive). The regular user name is put in a User-Name field.
Prestige 480 Dual BRI ISDN Router The fields in Menu 24.3.3 are listed in the following table. Table 11-2 System Maintenance – Accounting Server Fields Field Active Description Determines whether the accounting facility is on or off. Type Determines the type of the accounting server. At present only RADIUS is supported. Server Address Port # The IP address of the accounting server. Key The IP port number used by the accounting server. The default is port 1646.
Prestige 480 Dual BRI ISDN Router The following table describes the accounting attributes mentioned in the above example. Note: Accounting attributes may vary depending on the external server. Table 11-3 Accounting Attributes Field Acct-Status-Type Acct-Session-Id User-Name NAS-Port NAS-Port-DNIS Caller Id System Security Description Account Status Type has four values: Accounting On, Accounting Off, Start and Stop.
Prestige 480 Dual BRI ISDN Router Chapter 12 Telnet Configuration and Capabilities This chapter discusses using telnet to remotely configure your Prestige. 12.1 About Telnet Configuration Before the Prestige is properly setup for TCP/IP, the only option for configuring it is through the console port. Once your Prestige is configured, you can use telnet to configure it remotely as shown next.
Prestige 480 Dual BRI ISDN Router Figure 12-1 Telnet Configuration on a TCP/IP Network 12.2 Telnet Under SUA When Single User Account (SUA) is enabled and an inside server is specified, telnet connections from the outside will be forwarded to the inside server. So to configure the Prestige via telnet from the outside, you must first telnet to the inside server, and then telnet from the server to the Prestige using its inside LAN IP address.
Prestige 480 Dual BRI ISDN Router Chapter 13 System Maintenance This chapter covers the diagnostic tools that help you to maintain your Prestige. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter describes how to use these tools in detail. Select menu 24 in the main menu to open Menu 24 - System Maintenance, as shown next. Menu 24 - System Maintenance 1. 2. 3. 4. 5. 6. 7. 8. 9. 10.
Prestige 480 Dual BRI ISDN Router 13.1 System Status The first selection, System Status, gives you information on the version of your system firmware and the status and statistics of the ports, as shown next. System Status is a tool that can be used to monitor your Prestige. Specifically, it gives you information on your system software version, ISDN telephone line status, number of packets sent and number of packets received.
Prestige 480 Dual BRI ISDN Router If you enter 9 in the Press Command field you will see the following menu: Menu 24.1 - System Maintenance - Status 09:59:41 28, 1999 Fri. May. ISDN ----ISDN ----- Chan ----Chan ----- Status Down Down Down Down Speed 0kbps 0kbps 0kbps 0kbps Own IP Total Outcall Time: TxPkts 0 0 0 0 RxPkts 0 0 0 0 Own CLID 0:00:00 Errors 0 0 0 0 CLU 0% 0% 0% 0% ALU 0% 0% 0% 0% Peer IP Up Time 0:00:00 0:00:00 0.00.00 0.00.00 Peer CLID CPU Load = 7.
Prestige 480 Dual BRI ISDN Router Speed Shows the current connecting speed. TxPkts Shows the number of transmitted packets on this channel. RxPkts Shows the number of received packets on this channel. Errors Shows the number of error packets on this channel. CLU (Current Line Utilization) percentage of current bandwidth used on this channel ALU (Average Line Utilization) a 5-second moving average of channel usage for this channel.
Prestige 480 Dual BRI ISDN Router The following figure shows two examples of triggering packets from the LAN: the first of an ICMP ping packet (Type: IP) and the second a SAP broadcast packet (Type: Raw). With this information, you can determine the workstation from the source IP address or the source MAC address of the packet.
Prestige 480 Dual BRI ISDN Router 13.1.1 System Information Menu 24.2.1 – System Maintenance - Information Name: Routing: IP ZyNOS S/W Version: V2.40(O.00)b02 | 7/13/1999 Country Code: 255 LAN Ethernet Address:00:a0:c5:ff:00:35 IP Address: 192.168.1.1 IP Mask: 255.255.255.0 DHCP: Server Press ESC or RETURN to Exit: Figure 13-5 System Maintenance - Information Table 13-2 Fields in System Maintenance Field Description Name displays the system name of your Prestige.
Prestige 480 Dual BRI ISDN Router 13.1.2 Console Port Speed You can change the console port speed through Menu 24.2.2 – Console Port Speed. Your Prestige supports 9600 , 19200, 38400, 57600, and 115200bps for the console port. Use the space bar to select the desired speed in Menu 24.2.2, as shown next. Menu 24.2.2 – System Maintenance – Change Console Port Speed Console Port Speed: 115200 Press ENTER to Confirm or ESC to Cancel: Press Space Bar to Toggle. Figure 13-6 Menu 24.2.
Prestige 480 Dual BRI ISDN Router After the Prestige finishes displaying, you will have the option to clear the error log.
Prestige 480 Dual BRI ISDN Router Examples of typical error and information messages are presented in the following figure.
Prestige 480 Dual BRI ISDN Router Figure 13-8 Menu 24.3.
Prestige 480 Dual BRI ISDN Router You need to configure the parameters described in the table below to activate syslog. Table 13-3 System Maintenance Menu - UNIX Syslog Parameters Parameter Description Active Use the space bar to turn on or off syslog. Syslog IP Address Enter the IP Address of your syslog server. Log Facility Use the space bar to toggle between the 7 different Local options. The log facility allows you to log the message in different files in the server.
Prestige 480 Dual BRI ISDN Router 2. Packet triggered Jul 19 11:28:39 192.168.102.2 ZyXEL Communications Corp.: Packet Trigger: Protocol=1, Data=4500003c100100001f010004c0a86614ca849a7b08004a5c020001006162636465666768696a6b6c6d6e6f 7071727374 Jul 19 11:28:56 192.168.102.2 ZyXEL Communications Corp.: Packet Trigger: Protocol=1, Data=4500002c1b0140001f06b50ec0a86614ca849a7b0427001700195b3e00000000600220008cd40000020405 b4 Jul 19 11:29:06 192.168.102.2 ZyXEL Communications Corp.
Prestige 480 Dual BRI ISDN Router 13.3 Diagnostic The diagnostic facility allows you to test the different aspects of your Prestige to determine if it is working properly. Menu 24.4 allows you to choose among various types of diagnostic tests to evaluate your system, Menu 24.4 - System Maintenance - Diagnostic WAN 1. 2. 3. 4. 5. Hang Up B1 Call Hang Up B2 Call Reset ISDN ISDN Connection Test Manual Call System 21. Reboot System 22. Command Mode TCP/IP 11. Internet Setup Test 12.
Prestige 480 Dual BRI ISDN Router The following table describes the diagnostic tests available in Menu 24.4 for your Prestige and the connections. Table 13-4 System Maintenance Menu Diagnostic Field Description Hang Up B1 Call This tool hangs up the B1 channel. This is only applicable if the B1 channel is currently in use. Hang Up B2 Call This tool hangs up the B2 channel. This is only applicable if the B2 channel is currently in use.
Prestige 480 Dual BRI ISDN Router The following figure shows an example of a successful connection after selecting option Manual Call in Menu 24.4. Start dialing for node <1> ### Hit any key to continue. ### Dialing chan<2> phone:12345 Call CONNECT speed<64000> chan<2> prot<1> LCP opened CHAP send response CHAP login to remote OK IPCP negotiation started IPCP opened Figure 13-10 Trace Display for a Successful Manual Call This figure shows a trace example where authentication failed.
Prestige 480 Dual BRI ISDN Router 13.4 Boot Module Command Prestige boot module commands are shown next. For ATBAx, x denotes the number preceding the colon to give the baud rate following the colon in the list of numbers that follows; e.g. ATBA3 will give a baud of 9.6 Kbps. ATSE displays the seed that is used to generate a password to turn on the debug flag in the firmware.
Prestige 480 Dual BRI ISDN Router 13.5 Command Interpreter Mode This option allows you to enter the command interpreter mode(CI). A list of valid commands can be found by typing [help] at the command prompt. For more detailed information, check your PNC installation disc or Enter Menu Selection Number: 8 Copyright (c) 1994 - 1999 ZyXEL Communications Corp. ras> ? Valid commands are: sys exit ether isdn ip visit the ZyXEL Web site or send e-mail to the ZyXEL Support Group. Figure 13-13 Command Mode 13.
Prestige 480 Dual BRI ISDN Router phone number is put in the blacklist. You will have to enable the number manually before the Prestige will dial that number again. Call history chronicles preceding incoming and outgoing calls. To enter the call control menu, select option 9. Call Control in Menu 24 to go to Menu 24.9 - System Maintenance - Call Control, as shown in the following table. Menu 24.9 - System Maintenance - Call Control 1. 2. 3. 4.
Prestige 480 Dual BRI ISDN Router Table 13-5 Call Control Parameters Fields Field Description Dialer Timeout: Digital Call (sec) Retry Counter The Prestige will timeout if it cannot set up an outgoing digital call within the timeout value. How many times a busy or ‘no answer’ telephone number is retried before it is put on the blacklist. The default is 0 and the blacklist control is not enabled. Elapsed time after a call fails before another call may be retried.
Prestige 480 Dual BRI ISDN Router 13.6.3 Budget Management Menu 24.9.3 Budget Management shows the budget management statistics for outgoing calls. Menu 24.9.3 - Budget Management Remote Node 1. ChangeMe 2. -------3. -------4. -------5. -------6. -------7. -------8. -------9. -------10. -------11. -------12. -------13.
Prestige 480 Dual BRI ISDN Router 13.6.4 Call History This is the fourth option in Call Control and relays information about past incoming and outgoing calls. Menu 24.9.4 - Call History Phone Number 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. Dir Rate #call Max Min Total Enter Entry to Delete(0 to exit): Figure 13-18 Call History Table 13-6 Call History Fields Field Description Phone Number This is the telephone number of past incoming and outgoing calls.
Prestige 480 Dual BRI ISDN Router 13.7 Time and Date Setting Menu 24.10 allows you to update the time and date settings of your Prestige 480. Menu 24.
Prestige 480 Dual BRI ISDN Router System Maintenance 13-23
Prestige 480 Dual BRI ISDN Router Chapter 14 Backup, Restore and Upload You can perform the backup, restore and upload through the console port, TFTP or FTP. Any serial communications program should work fine; however, you must use XMODEM protocol to perform the download/upload. Please note that terms “download” and “upload” are relative to the workstation. Download means to transfer from another machine to the workstation, while upload means from your workstation to another machine. 14.
Prestige 480 Dual BRI ISDN Router Step 2. Press “Y” to indicate that you want to continue. The following procedure is for the HyperTerminal program. The procedure for other serial communications programs should be similar. Step 3. Click “Transfer” in the HyperTerminal toolbar, then “Receive File” in the popup menu to display the following screen. Enter where you want to place the rom configuration file on your computer. Choose the X-Modem Protocol. Figure 14-2 Receive File Step 4.
Prestige 480 Dual BRI ISDN Router Step 3. Locate the “rom-spt” file. Step 4. Type get rom-spt to backup the current Prestige configuration to your workstation. For details on FTP commands, please consult the documentation of your FTP client program. 14.1.3 Back up using TFTP Even though TFTP should work over WAN as well, it is not recommended. To use TFTP, your workstation must have both telnet and TFTP clients. To transfer the configuration file, follow the procedure below: Step 1.
Prestige 480 Dual BRI ISDN Router Example Using Walusoft TFTP Client Enter the IP address of the Prestige. Press “Send” to upload /restore the file to the Prestige and “Fetch” to back up the file on your computer. Transfer the file in Enter the path and name of the firmware file (*.bin extension) or configuration file (*.rom extension) on your computer. This is the filename on the Figure 14-4 TFTP Example Prestige. The filename for the firmware is “ras-m” and for the configuration file is “rom-spt”. 14.
Prestige 480 Dual BRI ISDN Router Please note that the system reboots automatically after the file transfer process is complete. Menu 24.6 - Restore Configuration FTP or TFTP are the preferred methods for restoring your current workstation configuration to your Prestige since FTP or TFTP is faster. Please note that the system reboots automatically after the file transfer process is complete. Figure 14-5 Menu 24.6 –Restore Configuration using the Console Port Step 1. Go to Menu 24.6 . Step 2.
Prestige 480 Dual BRI ISDN Router Figure 14-7 Successful Restoration 14.2.2 Restore using FTP Even though FTP should work over WAN as well, it is not recommended. To transfer your current workstation configuration to your Prestige, follow the procedure below: Step 1. Launch the FTP client on your workstation. Step 2. Type open and the IP address of your Prestige. Then type root and password as requested. Step 3.
Prestige 480 Dual BRI ISDN Router Step 5. Go to SMT menu 24.6. Note that you must remain in this menu until file transfer is complete. Step 6. Use the TFTP client to transfer files between the Prestige and the workstation. The remote file name on the Prestige is “rom-spt”. Step 7. The system reboots automatically after the file transfer process is complete. Note that the telnet connection must be active and the SMT in CI mode before and during the TFTP transfer.
Prestige 480 Dual BRI ISDN Router 14.3.1 Upload through the Console Port Upload Firmware File The firmware is the program that controls the functions of the Prestige. Menu 24.7.1 shows you the instructions for uploading the firmware. If you answer yes to the prompt, the Prestige will go into debug mode. Follow the procedure below to upload the firmware: Step 1. Enter “atur” after the “Enter Debug Mode” message. Step 2. Wait for the "Starting XMODEM upload" message.
Prestige 480 Dual BRI ISDN Router Menu 24.7.1 - System Maintenance - Upload Router Firmware To 1. 2. 3. upload router firmware: Enter "y" at the prompt below to go into debug mode. Enter "atur" after "Enter Debug Mode" message. Wait for "Starting XMODEM upload" message before activating Xmodem upload on your terminal. 4. After successful firmware upload, enter "atgo" to restart the router. Warning: Proceeding with the upload will erase the current router firmware.
Prestige 480 Dual BRI ISDN Router If you replace the current configuration file with the default configuration file, i.e., p480.rom, you will lose all configurations that you had before and the speed of the console port will be reset to the default of 9600 bps with 8 data bit, no parity and 1 stop bit (8n1) . You will need to change your serial communications software to the default before you can connect to the Prestige again. The password will be reset to the default of 1234, also. Menu 24.7.
Prestige 480 Dual BRI ISDN Router Step 3. Enter the administrator password. The default is 1234 Step 4. Enter the command “bin” to set binary transfer type Step 5. Use the command “put” to transfer files between the Prestige and the workstation. The file name for the firmware is “ras” and for the configuration file “rom-0” (rom-zero, not capital o). Connected to 480.x.x.x 220 P480 FTP version 1.0 ready at Thu Jan 8 18:00:02 1970 User (480.x.x.
Prestige 480 Dual BRI ISDN Router Figure 14-12 Edit Host Step 4. Press 'OK' to ignore the 'Username' prompt. Figure 14-13 Username Prompt Step 5. 14-12 To upload the firmware file, transfer the local 'ras' file to overwrite the remote 'ras' file. To upload the configuration file, transfer the local 'rom-0' to overwrite the remote 'rom-0' file.
Prestige 480 Dual BRI ISDN Router Figure 14-14 Files Transfer The system reboots after a successful upload. 14.3.3 Upload using TFTP In addition to the direct console port connection, the Prestige supports the up/downloading of the firmware and the configuration file using TFTP (Trivial File Transfer Protocol) over LAN. Even though TFTP should work over WAN as well, it is not recommended because of the potential data corruption problem.
Prestige 480 Dual BRI ISDN Router Step 4. Launch TFTP client on your workstation and connect to the Prestige. Set the transfer mode to binary before starting data transfer. Step 5. Use the TFTP client to transfer files between the Prestige and the workstation. The file name for the firmware is “ras” and for the configuration file, “rom-0” (rom-zero, not capital o). If you upload the firmware to the Prestige, it will reboot automatically when the file transfer is completed.
Prestige 480 Dual BRI ISDN Router Chapter 15 IP Policy Routing 15.1 Introduction Traditionally, routing is based on the destination address only and the router takes the shortest path to forward a packet. IP Policy Routing (IPPR) provides a mechanism to override the default routing behavior and alter the packet forwarding based on the policy defined by the network administrator. Policy-based routing is applied to incoming packets on a per interface basis, prior to the normal routing. 15.1.
Prestige 480 Dual BRI ISDN Router The actions that can be taken include routing the packet to a different gateway (and hence the outgoing interface) and the TOS and precedence fields in the IP header. IPPR follows the existing packet filtering facility of ZyNOS in style and in implementation. The policies are divided into sets, where related policies are grouped together. A user defines the policies before applying them to an interface or a remote node, in the same fashion as the filters.
Prestige 480 Dual BRI ISDN Router Menu 25.1 shows the summary of a policy set, including the criteria and the action of a single policy, and whether a policy is active or not. Each policy contains two lines. The former part is the criteria of the incoming packet, and the latter is the action. Between these two parts, separator ‘|’ means the action is taken on criteria matched and separator ‘=’ means the action is taken on criteria not matched. Menu 25.
Prestige 480 Dual BRI ISDN Router IP Routing Policy Summary Abbreviation Criteria SA SP DA DP P T PR Action GW T P Type Of Service NM mD MT MR MC Meaning Source IP address Source port Destination IP address Destination port IP layer 4 protocol number(TCP=6,UDP=17…) Type Of Service of Incoming packet Precedence of incoming packet Gateway IP address Outgoing Type of Service Outgoing Precedence Normal Minimum Delay Maximum Throughput Maximum Reliability Minimum Cost Enter a number from 1 to 6 to display Men
Prestige 480 Dual BRI ISDN Router Menu 25.1.1 - IP Routing Policy Policy Set Name= test Active= Yes Criteria: IP Protocol = 6 Type of Service= Normal Precedence = 0 Source: addr start= 1.1.1.1 port start= 20 Destination: addr start= 2.2.2.2 port start= 20 Action= Matched Gateway Type = Gateway node Type of Service= No Change Precedence = No Change Packet length= 40 Len Comp= end= 1.1.1.1 end= 20 end= 2.2.2.2 end= 20 Gateway addr = 1.2.3.
Prestige 480 Dual BRI ISDN Router port start= / end= Source port number range from start to end; applicable only for TCP/UDP. Destination: addr start= / end= Destination IP address range from start to end. port start= / end= Destination port number range from start to end; applicable only for TCP/UDP. Action= Gateway type Specifies whether action should be taken on criteria Matched or Not Matched. Allows you to choose the outgoing gateway type.
Prestige 480 Dual BRI ISDN Router 15.2 Applying an IP Policy This section shows you where to apply the IP Policies after you design them. 15.2.1 Ethernet IP Policies From Menu 3 - Ethernet Setup, enter 2 to go to Menu 3.2 –TCP/IP Ethernet Setup. You can choose up to four IP Policy sets (from twelve) by entering their numbers separated by commas, e.g., 2, 4, 7, 9. Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP Setup DHCP= Server Client IP Pool Startin g Address= 192.168.1.
Prestige 480 Dual BRI ISDN Router Chapter 16 Troubleshooting This chapter covers the potential problems you may run into and the possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem. If you still have problems, check all the connections and settings, refer to your user’s guide and if the problem persists e-mail or call your dealer for assistance. 16.
Prestige 480 Dual BRI ISDN Router The Prestige drops the call even though the authentication phase was successful. Check the IP address of the remote node. The Prestige uses the IP address as another form of authentication. Hence, if the address supplied by the remote node does not match the address the Prestige is expecting, the call will be dropped. You can rectify this problem by using the Internet Access Setup Menu 4 to configure your remote node. You can enter the ISP’s IP address field as 0.0.0.0.
Prestige 480 Dual BRI ISDN Router 16.2 Problems With the ISDN Lines Table 16-2 Troubleshooting the ISDN Lines Problem Corrective Action The ISDN initialization failed. This problem occurs when you attempt to save the parameters entered in Menu 2, but receive the message, ‘Save successful, but Failed to initialize ISDN; Press ESC to exit’. Check the error log (in Menu 24.3.1), you should see a log entry for the ISDN initialization failure in the format, ‘ISDN init failed. code...’.
Prestige 480 Dual BRI ISDN Router 16.3 Problems with the Ethernet Connection Table 16-3 Troubleshooting the Ethernet Connection Problem Corrective Action Can’t ping any station on the external LAN Check the Ethernet LED’s on the front panel. The LNK LED should be on when the Prestige has made a successful Ethernet connection. If it is off, check the cables between your Prestige and the station. Verify that the IP address and the subnet mask are consistent between the Prestige and the workstations. 16.
Prestige 480 Dual BRI ISDN Router 16.5 Problems for Remote User to Dial-in Table 16-5 Troubleshooting for Remote Users to Dial-in Problem Corrective Action A remote user cannot dial-in First verify that you have configured the authentication parameters in Menu 13. These would be CLID Authen and Recv. Authen. In Menu 14, verify the user name and password for the remote dial-in user. If the remote dial-in user is negotiating IP, verify that the IP address is supplied correctly in Menu 13.
Prestige 480 Dual BRI ISDN Router Information Worksheet This information worksheet has been provided to help you collect the following information for future use.
Prestige 480 Dual BRI ISDN Router General Information The Prestige requires certain system information. You can obtain all the pertinent information from your network administrator. System Name - This is the name given by you in Menu 1 to the Prestige for identification purpose. Protocol Routing – This refers to the protocols used for moving information across different networks. P480 supports TCP/IP protocol.
Prestige 480 Dual BRI ISDN Router The table below lists some examples of IP subnet masks and the number of hosts that are allowed. Consult your network administrator if you are unsure of this value. Table 16-6 IP Subnet Masks and the Number of Hosts Worksheet IP Subnet Mask Number of Host ID’s Number of Bits 255.255.255.0 254 24 255.255.255.128 126 25 255.255.255.192 62 26 255.255.255.224 30 27 255.255.255.
Prestige 480 Dual BRI ISDN Router Enhanced Syslog The following are the message formats that Syslog sends to the server. CDR SdcmdSyslogSend( SYSLOG_CDR, SYSLOG_INFO, String ); String = board xx line xx channel xx, call xx, str board = the hardware board ID line = the WAN ID in a board Channel = channel ID within the WAN call = the call reference number which starts from 1 and increments by 1 for each new call str = C01 Outgoing Call dev xx ch xx (dev:device No. ch:channel No.
Prestige 480 Dual BRI ISDN Router Acronyms and Abbreviations BAP/BACP Bandwidth Allocation Protocol/Bandwidth Allocation Control protocol BOD Bandwidth on Demand CDR Call Detail Record CHAP Challenge Handshake Authentication Protocol CLID Calling Line IDentification CSU/DSU Channel Service Unit/Data Service Unit DCE Data Communications Equipment DHCP Dynamic Host Configuration Protocol DNS Domain Name System DTE Data Terminal Equipment IANA Internet Assigned Number Authority IP Inter
Prestige 480 Dual BRI ISDN Router SAP Service Advertising Protocol SNAP Sub-Network Access Protocol SNMP Simple Network Management Protocol STP Shielded Twisted Pair (cable) SUA Single User Account TA (ISDN) Terminal Adapter TFTP Trivial File Transfer Protocol TCP Transmission Control Protocol UDP User Datagram Protocol WAN Wide Area Network H Acronyms and Abbreviations
Prestige 480 Dual BRI ISDN Router Index CDR, 1-3, 13-9 8 CHAP, 1-4, 4-4 802.2, 6-1 CI, 13-15 802.3, 6-1 CLID, 1-4, 8-4, 8-9, 8-12 Command Interpreter. See CI A acronyms and abbreviations, G authentication protocol, 4-5 community, 10-1 console port, 2-3, 13-7 customer support, v, xxi auto-negotiation, 1-2 D B backup configuration, 14-1 default dial-in setup, 8-4 DHCP, 1-2, 3-3, 3-5 diagnostic, 13-11 BACP, 4-6 Bandwidth on Demand.
Prestige 480 Dual BRI ISDN Router Filter Ethernet IP Policies, 15-7 IPX Gateway, 15-6 Packet Types, 9-14 Load Sharing, 15-1 filter log, 13-9 Setup, 15-2 frame type, 6-1 IP pool, 3-3 front panel, 2-1 IP Routing Policy, 15-5 IP Routing Policy Setup, 15-4 G IP static route, 5-6 gateway, 7-5 IP subnet mask, B gateway IP address, 5-8 IP Subnet Mask, C general setup, 2-10 IPX, 6-1 generic filter rule, 9-11 IPX Ethernet Setup, 6-4 IPX LAN-to-LAN, 6-6 H IPX network number, 6-1, 6-2 IPX node
Prestige 480 Dual BRI ISDN Router Q Configuration, 3-16 MP, 4-6 Quality of Service, 15-1 Multilink. See M P Multiple ISPs Support. See Mega Bundle R multiple servers, 8-16 RADIUS, 1-4 N Accounting, 11-6 Authentication, 11-3 nailed-up connection, 4-5 For CLID authentication, 11-6 NetCAPI, 2-14 Server Configuration, 11-4 CAPI, 2-14 RAS code, 14-7 ISDN-DCP, 2-14 remote access, 8-11.
Prestige 480 Dual BRI ISDN Router FTP, 14-2 trace, 13-7 TFTP, 14-2 troubleshooting, 16-1 Type of Service, 15-1, 15-4, 15-5, 15-6 Restore, 14-4 Console Port, 14-4 U FTP, 14-6 TFTP, 14-6 UNIX syslog, 1-3, 13-8 system management, 13-1 V System Management Terminal.
