The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a
retrieval system, translated into any language, or transmitted in any form or by any means, electronic,
mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written
permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or software
described herein. Neither does it convey any license under its patent rights nor the patent rights of others.
ZyXEL further reserves the right to make changes in any products described herein without notice. This
publication is subject to change without notice.
Trademarks
Trademarks mentioned in this publication are used for identification purposes only and may be properties of
their respective owners.
The declarations of CE marking:
The Prestige 100 and 100IH has been approved for connection to the Public Switched Telecommunication
Network using interfaces compatible with ITU-TSS recommendation I.420 (Basic Rate ISDN user access).
The Prestige 100 and 100IH comply with the following directives:
The Council Directive 89/336/EEC of 3 May 1992 on the approximation of the laws of the member states
relation to Electro Magnetic Compatibility. (EMC Directive).
Council Directive 91/263/EEC of 29 April 1991 on the approximation of the laws of the Member States
concerning telecommunication terminal equipment. (The Telecom Terminal Equipment Directive).
93/68/EEC of 22 July 1993 amending the Directives 89/336/EEC, 91/263 /EEC and 92/31/EEC. (Marking
Directive).
The Council Directive 92/31/EEC of 28 April 1992 amending directive on the approximation of the laws of
the member states relating to Electro Magnetic Compatibility.
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials
or workmanship for a period of up to two (2) years from the date of purchase. During the warranty period,
and upon proof of purchase, should the product have indications of failure due to faulty workmanship
and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components
without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the
product or components to proper operating condition. Any replacement will consist of a new or re-
Declarationsi
Page 4
P100IH ISDN Router
manufactured functionally equivalent product of equal value, and will be solely at the discretion of ZyXEL.
This warranty shall not apply if the product is modified, misused, tampered with, damaged by an act of
God, or subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This
warranty is in lieu of all other warranties, express or implied, including any implied warranty of
merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect
or consequential damages of any kind of character to the purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center; refer to the separate Warranty
Card for your Return Material Authorization number (RMA). Products must be returned Postage Prepaid. It
is recommended that the unit be insured when shipped. Any returned products without proof of purchase or
those with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer
will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the
corresponding return address, Postage Paid (USA and territories only). If the customer desires some other
return destination beyond the U.S. borders, the customer shall bear the cost of the return shipment. This
warranty gives you specific legal rights, and you may also have other rights that vary from state to state.
iiDeclarations
Page 5
P100IH ISDN Router
Customer Support
If you have questions about your ZyXEL product(s) or desire assistance, please contact ZyXEL
Communications Corporation offices worldwide, in any one of the following ways. Our ftp sites are also
available for software and ROM upgrades.
Customer Support.......................................................................................................................................... iii
Table of Contents.............................................................................................................................................v
List of Figures.............................................................................................................................................. viii
List of Tables.................................................................................................................................................xii
Chapter 3: Internet Access........................................................................................................................... 3-1
Acronyms and Abbreviations ......................................................................................................................... A
Index............................................................................................................................................................... C
Table Of Contentsvii
Page 10
P100IH ISDN Router
List of Figures
Figure 1-1 Internet Access Application........................................................................................................1-4
Figure 12-3 Schedule Set Setup................................................................................................................. 12-2
Figure 12-4Applying Schedule Set(s) to A Remote Node.................................................................... 12-4
List Of Figuresxi
Page 14
P100IH ISDN Router
List of Tables
Table 2-1 LED functions.............................................................................................................................. 2-1
Table 2-2 Main Menu Commands................................................................................................................2-5
Table 2-3 Main Menu Summary ..................................................................................................................2-6
Table 2-4 General Setup Menu Fields..........................................................................................................2-9
Table 2-5 Menu 2 – ISDN Setup................................................................................................................2-11
Table 3-1 DHCP Ethernet Setup Menu Fields .............................................................................................3-5
Table 3-2 TCP/IP Ethernet Setup Menu Fields............................................................................................3-6
Table 3-3 Internet Account Information.......................................................................................................3-7
Table 3-4 Internet Access Setup Menu Fields..............................................................................................3-8
Table 4-2 Applying NAT in Menus 4 & 11.3 ..............................................................................................4-6
Table 4-3 SUA Address Mapping Rules......................................................................................................4-9
Table 4-4 Menu 15.1.1 ...............................................................................................................................4-10
Table 4-5 Menu 15.1.1.1 – configuring an individual rule.........................................................................4-12
Table 4-6 Services & Port numbers...........................................................................................................4-15
Table 5-1 Remote Node Profile Menu Fields...............................................................................................5-3
Table 5-2 BTR v MTR for BOD..................................................................................................................5-6
Table 5-3 Remote Node PPP Options Menu Fields .....................................................................................5-8
Table 6-1 TCP/IP related fields in Remote Node Profile.............................................................................6-3
Table 9-1 Abbreviations Used in the Filter Rules Summary Menu............................................................. 9-5
Table 9-2 Abbreviations Used If Filter Type Is IP ...................................................................................... 9-6
Table 9-3 Abbreviations Used If Filter Type Is GEN................................................................................. 9-7
Table 9-4 TCP/IP Filter Rule Menu Fields.................................................................................................. 9-9
Table 9-5 Generic Filter Rule Menu Fields ............................................................................................... 9-14
Table 11-1 System Maintenance - Status Menu Fields.............................................................................. 11-2
Table 11-2 Fields in System Maintenance................................................................................................. 11-5
Table 11-3 System Maintenance Menu Syslog Parameters....................................................................... 11-8
Table 11-4 System Maintenance Menu Diagnostic ................................................................................. 11-10
Table 11-5 Call Control Parameters Fields.............................................................................................. 11-20
Table 11-6 Call History Fields................................................................................................................. 11-23
Table 11-7 Time and Date Setting Fields........................................................................................... 11-25
Table 12-1 Schedule Set Setup Fields ....................................................................................................... 12-3
Table 13-1 Troubleshooting the Start-Up of your Prestige........................................................................ 13-1
Table 13-2 Troubleshooting the ISDN Line .............................................................................................. 13-2
Table 13-3 Troubleshooting the LAN Interface ........................................................................................ 13-3
Table 13-4 Troubleshooting a Connection to a Remote Node or ISP........................................................ 13-3
Table 13-5 Troubleshooting for Remote Users to Dial-in......................................................................... 13-3
List Of Tablesxiii
Page 16
Page 17
P100IH ISDN Router
Preface
About Your Prestige
Congratulations on your purchase of the Prestige ISDN Router. Don’t forget to register your Prestige (fast,
easy online registration at www.zyxel.com) for free future product updates and information.
The Prestige 100IH is a high-performance routers that offer complete solutions for your WAN (Wide Area
Network) applications such as Internet access, LAN-to-LAN connections, telecommuting and remote
access over ISDN (Integrated Service Digital Network).
You do not need to set any switches to configure the Prestige. The user-friendly Prestige Web Configurator
(PWC) is a JAVA based utility that allows you to manage the Prestige via a Worldwide Web browser. You
can also manage the Prestige via the SMT (System Management Terminal), a menu-driven interface that
you can access from either a terminal emulator or telnet.
Setup Information
ISDN Line
1. Contact your local telephone company’s ISDN Ordering Center to find out what type of ISDN service
is available and the switch type.
2. When the telephone company installs your ISDN line, please be sure to obtain and write down the
following information for future use:
a. ISDN switch type
b. ISDN telephone number(s)
Supplemental services such as Call Forwarding are supported by the Prestige but must be subscribed to
separately from the telephone company.
Ethernet Setup Information
IP Address -
in dotted decimal notation (four 8-bit numbers, between 0 and 255, separated by periods), e.g., 192.168.1.1.
Please note that every machine on a network must have a unique IP address - do not assign an arbitrary
address to any machine. If you are not sure as to which IP address to assign to the Prestige, contact your
Internet Service Provider (ISP) or refer to Chapter 3 of this guide for more details.
IP Subnet Mask -
Mask is used to specify the network ID portion of the address, expressed in dotted decimal notation. The
Prestige automatically calculates this mask based on the IP address that you assign. Unless you have a
special need for subnetting, use the default mask as calculated by the Prestige.
Prefacexv
The IP Address is the unique 32-bit number assigned to your Prestige. This address is written
An IP address consists of two parts, the network ID and the host ID. The IP Subnet
Page 18
Structure of this Manual
pp
Getting Started (Chapters 1-2)
This helps you connect, install and setup your Prestige
to operate on your network
.
The Internet (Chapter 3)
This shows how to configure your Prestige for Internet
Advanced Applications (Chapters 4-8)
This shows how to use your Prestige for more
advanced a
lications.
Management & Maintenance (Chapters 9-12)
This provides information on management and
maintenance facilities.
P100IH ISDN Router
Troubleshooting (Chapter 13)
This provides information about solving common
problems.
xviStructure Of The Manual
Page 19
P100IH ISDN Router
Chapter 1:
Getting to Know Your ISDN Router
1.1 Features of the Prestige
Time and Date Setting
This all new feature allows the Prestige to connect to a time server to synchronize its system clock when it
is booting.
Call Scheduling
The call scheduling feature allows the Prestige to manage a remote node and dictate when a remote node
should be called and for how long
NAT(Network Address Translation)
ZyXEL’s SUA (Single User Account) has now been replaced by the all new NAT support. NAT (Network
Address Translation - NAT, RFC 1631) is the translation of an Internet Protocol address used within one
network to a different IP address known within another network. NAT supports five types of IP/port
mapping. They are:
1. One to One: In One-to-One mode, the Prestige maps one local IP address to one global IP address.
2. Many to One: In Many-to-One mode, the Prestige maps multiple local IP addresses to one global
IP address. This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL’s Single User
Account feature that previous ZyXEL routers supported (the SUA Only option in today’s routers).
3. Many to Many Overload: In Many-to-Many Overload mode, the Prestige maps the multiple local
IP addresses to shared global IP addresses.
4. Many to Many No Overload: In Many-to-Many No Overload mode, the Prestige maps the each
local IP addresses to unique global IP addresses.
5. Server: This type allows us to specify multiple inside servers of different types behind the NAT.
ZyXEL is also proud to announce that NetMeeting is supported for both incoming and outgoing calls. For
outgoing calls, there is no special configuration needed but for incoming calls, set the NetMeeting server to
ports 1503 and 1720.
ISDN Basic Rate Interface (BRI) Support
The Prestige supports a single BRI. A BRI offers two 64 Kbps channels, which can be used independently
for two destinations or be bundled to speed up data transfer.
Getting To Know Your Prestige1-1
Page 20
P100IH ISDN Router
Extensive Analog Phone Support
The Prestige is equipped with two standard phone jacks for you to connect analog devices such as
telephones and FAX machines. It also supports supplementary services such as call waiting and 3-way
calling.
Incoming Call Support
In addition to making outgoing calls, the Prestige allows you to configure it as a remote access server for
telecommuting employees.
Outgoing Data Call Bumping Support
Call bumping is a feature that allows the Prestige to manage an MP bundle dynamically, dropping or
reconnecting a channel in a bundle when necessary. Previously, the Prestige did this for voice calls only,
but now with this new feature, the Prestige can drop a channel in an MP bundle if there is a data packet to
another remote node. No SMT Menu changes are necessary for this new feature.
CLID Callback Support For Dial-In Users
CLID is an authentication method to identify a dial-in user. CLID callback is used as an ISDN toll saving
feature because the call can be disconnected immediately without picking up the phone.
TCP/IP and PPP Support
TCP/IP (Transmission Control Protocol/Internet Protocol) network layer protocol.
♦
PPP/MP (Point-to-Point Protocol/Multilink Protocol) link layer protocol.
♦
Integrated 4-Port Ethernet Hub
The Prestige 100IH is equipped with a built-in 4-port Ethernet 10Base-T hub. The built-in hub eliminates
the need to purchase a separate hub when building a one to four-port network. For a larger number of
workstations, additional hubs can be daisy-chained to the Prestige.
Dial-On-Demand
The Dial-On-Demand feature allows the Prestige to automatically place a call to a remote gateway based on
the triggering packet’s destination without user intervention.
PPP Multilink
The Prestige can bundle multiple links in a single connection using PPP Multilink Protocol (MP). The
number of links can be either statically configured or dynamically managed based on traffic demand.
Bandwidth-On-Demand
The Prestige dynamically allocates bandwidth by dialing and dropping connections according to traffic
demand.
1-2Getting To Know Your Prestige
Page 21
P100IH ISDN Router
Full Network Management
Accessing SMT (System Management Terminal) through telnet connection.
♦
Windows-based PNC (Prestige Network Commander).
♦
Logging and Tracing
CDR (Call Detail Record) to help to analyze and manage the telephone bill.
♦
Built-in message logging and packet tracing.
♦
Unix syslog facility support.
♦
PAP and CHAP Security
The Prestige supports PAP (Password Authentication Protocol) and CHAP (Challenge Handshake
Authentication Protocol). CHAP is more secure than PAP; however, PAP is readily available on more
platforms.
DHCP Support
DHCP (Dynamic Host Configuration Protocol) allows the individual clients (workstations) to obtain the
TCP/IP configuration at start-up from a centralized DHCP server. The Prestige has built-in DHCP server
capability, enabled by default, which means it can assign IP addresses, an IP default gateway and DNS
servers to Windows 9X, Windows NT and other systems that support the DHCP client. The Prestige can
now also act as a surrogate DHCP server (DHCP Relay) where it relays IP address assignment from the
actual real DHCP server to the clients.
Call Control
Your Prestige provides budget management for outgoing calls and maintains a blacklist for unreachable
phone numbers in order to save you the expense of unnecessary charges.
Data Compression
Your Prestige incorporates Stac data compression to speed up data transfer. Stac is the de facto standard of
data compression over PPP links.
Networking Compatibility
Your Prestige is compatible with remote access products from other manufacturers such as Ascend, Cisco,
and 3Com. Furthermore, it supports Microsoft Windows 95 and Windows NT remote access capability.
Prestige Network Commander (PNC)
The PNC is a Windows based utility designed to allow users to access the Prestige’s management settings
via a Worldwide Web browser.
Getting To Know Your Prestige1-3
Page 22
P100IH ISDN Router
Upgrade P100IH Firmware via LAN
The PCT allows upgrading of the Prestige 100IH firmware over the local LAN.
Supplementary Voice Features
The Prestige supports the following Supplementary Voice Features on both of its analog, or POTS (Plain
Old Telephone Service), phone ports:
Call Waiting
♦
Three Way Calling (conference)
♦
Call Transfer
♦
Call Forwarding
♦
1.2 Applications for Prestige 100IH
1.2.1 Internet Access
The Prestige is the ideal high-speed Internet access solution. Your Prestige supports the TCP/IP protocol,
which the Internet uses exclusively. It is also compatible with access servers manufactured by major
vendors such as Cisco and Ascend. A typical Internet Access application is shown below.
Figure 1-1 Internet Access Application
1-4Getting To Know Your Prestige
Page 23
P100IH ISDN Router
Internet Single User Account
For a SOHO (small office/Home Office) environment, your Prestige offers the NAT (Network Address
Translation) feature that allows multiple users on the LAN (Local Area Network) to access the Internet
concurrently for the cost of a single user. NAT address mapping can also be used for other LAN to LAN
connections.
1.2.2 LAN-to-LAN Connection
You can use the Prestige to connect two geographically dispersed networks over the ISDN line. A typical
LAN-to-LAN application for your Prestige is shown next.
Figure 1-2 LAN-to-LAN Connection Application
1.2.3 Remote Access Server
Your Prestige allows remote users to dial-in and gain access to your LAN. This feature enables users that
have workstations with remote access capabilities, e.g., Windows 95, to dial in to access the network
resources without physically being in the office. Either PAP (Password Authentication Protocol) or CHAP
(Challenge Handshake Authentication Protocol) authentication can be used to control the access from the
remote users. You can also use callback for security and/or accounting purposes.
Getting To Know Your Prestige1-5
Page 24
P100IH ISDN Router
Figure 1-3 Telecommuting/Remote Access Server Application
1-6Getting To Know Your Prestige
Page 25
P100IH ISDN Router
Chapter 2:
Hardware Installation & Initial Setup
2.1.1 Front Panel LEDs OF P100IH
The LED indicators on the front panel indicate the operational status of the Prestige 100IH. The following
table describes the LED functions:
ISDNLANPHONE
ISDN Hub Router
TST
PWR
LNKB1B212
Figure 2-1 Front Panel Of P100IH
Table 2-1 LED functions
3
412
PWR
The PWR (power) LED is on when power is applied to the Prestige.
TSTA blinking TST (test) LED indicates the Prestige is functioning properly. A steady
or an off TST indicates malfunction.
ISDN: LNKThe LNK (Link) LED is on when the Prestige is connected to an ISDN switch and
the line has been successfully initialized.
ISDN: B1/B2The B1/B2 LED is on when the corresponding B channel is in use.
LAN: 1 to 4A steady LED indicates an active station is connected to the corresponding port.
The LED blinks when the connected station is transmitting.
PHONE: 1/2The LED is on when the device on the corresponding phone port is in use.
Hardware Installation and Setup2-1
Page 26
P100IH ISDN Router
2.2 Prestige 100IH Rear Panel and Connections
The figure below shows the rear panel of your Prestige 100IH and the connection diagram.
Figure 2-2 Prestige 100IH Rear Panel and Connections
Step 1. Connecting a Telephone/Fax to the Prestige
You can connect regular telephones, fax machines or other analog devices to the Prestige. To connect an
analog device, plug the end of the telephone cord from the device to either port
the rear panel of the Prestige.
Step 2. Connecting the ISDN Line
Connect the Prestige to the ISDN network using the included ISDN (black) cable. Plug one end of the
cable into the port labeled
Step 2. Connecting the Console Port
For the initial configuration of your Prestige, you need to use terminal emulator software on a workstation
and connect it to the Prestige through the console port. Connect the 9-pin (smaller) end of the console cable
to the console port of the Prestige and the 25-pin (bigger) end to a serial port (COM1, COM2 or other COM
port) of your workstation. You can use an extension RS-232 cable if the enclosed one is too short.
After the initial setup, you can modify the configuration remotely through telnet connections. See the Telnet
Chapter for detailed instructions on using telnet to configure your Prestige.
2-2Hardware Installation and Setup
ISDN BRI
and the other to the ISDN wall jack.
PHONE1
or
PHONE2
on
Page 27
P100IH ISDN Router
Step 4. Connecting a Workstation to the Prestige
Ethernet 10Base-T networks use Unshielded Twisted Pair (UTP) cable with RJ-45 connectors that look like
a bigger telephone plug with 8 pins. Connect a workstation to the built-in hub on the Prestige 100IH to
create an Ethernet network. Connect one end of a straight through Ethernet cable (white tag) to the NIC on
the workstation and the other end to one of the built-in 4 Ethernet ports on the Prestige 100IH (Figure 2-2).
Step 5. Connecting the Power Adapter to your Prestige
Connect the power adapter to the port labeled
POWER
on the rear panel of your Prestige.
2.3 Additional Installation Requirements
In addition to the contents of your package, there are other hardware and software requirements you need
before you can install and use your Prestige. These requirements include:
1. A computer with Ethernet 10Base-T NIC (Network Interface Card).
2. A computer equipped with communications software configured to the following parameters:
VT100 terminal emulation.
♦
9600 bps (bits per second).
♦
No parity, 8 Data bits, 1 Stop bit.
♦
After the Prestige is properly set up, you can make future changes to the configuration through telnet
connections.
Hardware Installation and Setup2-3
Page 28
P100IH ISDN Router
2.4 Power On Your Prestige
At this point, you should have connected the console port, the ISDN BRI port, the Ethernet port and the
power port to the appropriate devices or lines. You can now apply power to the Prestige by flipping the
power switch to on (I is ON, O is OFF).
Step 1. Initial Screen
When you power on your Prestige, it performs several internal tests as well as line initialization. After the
initialization, the Prestige asks you to press
...............................Press ENTER to continue...
....................
Figure 2-3 Power-On Display
Step 2. Entering Password
The login screen appears after you press Enter, prompting you to enter the password, as shown below.
to continue, as shown.
Enter
For your first login, enter the default password
. As you type the password, the screen displays a (X)
1234
for each character you type.
Please note that if there is no activity for longer than 5 minutes after you log in, your Prestige will
automatically log you out and will display a blank screen. If you see a blank screen, press
[Enter]
to bring
up the login screen again.
Enter Password : XXXX
Figure 2-4 Login Screen
2-4Hardware Installation and Setup
Page 29
P100IH ISDN Router
2.5 Navigating the SMT Interface
The SMT (System Management Terminal) is the interface that you use to configure your Prestige.
Several operations that you should be familiar with before you attempt to modify the configuration are
listed in the table below.
Table 2-2 Main Menu Commands
OperationPress/<read>Description
Move forward to
another menu
Move backward to
a previous menu
Move to a “hidden”
menu
Move the cursor
Enter informationFill in, or
Required fields
N/A fields<N/A>Some of the fields in the SMT will show a <N/A>. This symbol refers
Save your
configuration
[Enter]To move forward to a sub-menu, type in the number of the desired
sub-menu and press [Enter].
[Esc]Press the [Esc] key to move back to the previous menu.
Press the
[SPACE BAR]
then [ENTER]
or
[Enter]
[Up]/[Down]
arrow keys
Press the
[Space bar] to
toggle
?
>
<
[Enter]Save your configuration by pressing [Enter] at the message [Press
Fields beginning with “Edit” lead to hidden menus and have a default
setting of No. Press the [SPACE BAR] to change No to
press [ENTER] to go to a “hidden” menu.
Within a menu, press [Enter] to move to the next field. You can also
use the [Up]/[Down] arrow keys to move to the previous and the next
field, respectively.
You need to fill in two types of fields. The first requires you to type in
the appropriate information. The second allows you to cycle through
the available choices by pressing the [Space] bar.
All fields with the symbol <?> must be filled in order be able to save
the new configuration.
to an option that is Not Applicable.
ENTER to confirm or ESC to cancel]. Saving the data on the screen
will take you, in most cases to the previous menu.
Yes
, then
Exit the SMT
Type 99, then
press [Enter].
Type 99 at the Main Menu prompt and press [Enter] to exit the SMT
interface.
Hardware Installation and Setup2-5
Page 30
After you enter the password, the SMT displays the Main Menu, as shown below.
2.5.1 System Management Terminal Interface Summary
Table 2-3 Main Menu Summary
#Menu TitleDescription
P100IH ISDN Router
1General SetupUse this menu to set up general information and to enable routing for
specific protocols and bridging.
2ISDN SetupUse this menu to set up the ISDN.
3Ethernet SetupUse this menu to set up Ethernet.
4Internet Access SetupA quick and easy way to set up Internet connection.
11Remote Node SetupUse this menu to set up the Remote Node for LAN-to-LAN connection,
including Internet connection.
12Static Routing SetupUse this menu to set up static route for different protocols.
13Default Dial-in SetupUse this menu to set up default dial-in parameters so that your
Prestige can be used as a dial-in server.
14Dial-in User SetupUse this menu to set up dial-in users.
15NAT Setup
Use this menu to configure NAT
.
21Filter Set ConfigurationUse this menu to setup filters to provide security, call control, etc.
2-6Hardware Installation and Setup
Page 31
P100IH ISDN Router
23System SecurityUse this menu to setup security related parameters.
24System MaintenanceThis menu provides system status, diagnostics, software upload, etc.
26Schedule SetupThis menu allows the Prestige 100IH to manage a remote node and
dictate when a remote node should be called and for how long
99ExitTo exit from SMT and return to the blank screen.
.
2.6 Changing the System Password
The first thing your should do before anything else is to change the default system password by following
the steps below.
Step 1.
Enter 23 in the Main Menu to open
Menu 23 - System Password
as shown below.
When the Submenu 23 System Password appears, type in your existing system password, i.e., 1234, and
press [Enter].
Menu 23.1 – System Password
Old Password= ****
New Password= ****
Retype to confirm= ****
Enter here to CONFIRM or ESC to CANCEL:
Figure 2-6 Menu 23.1 - System Password
Step 2.
Step 3.
Enter your new system password (up to 30 characters), and press
Re-type your new system password for confirmation and press
[Enter]
[Enter]
.
.
Note that as you type a password, the screen displays a (*) for each character you type.
2.7 Filename conventions
The configuration file (sometimes called the romfile or romfile-0) contains the settings in the menus such as
password, DHCP Setup defaults, TCP/IP Setup defaults etc. The external (i.e., not on the Prestige)
configuration filename is usually the router model name with a *.rom extension, e.g., P100IH.rom. The
Hardware Installation and Setup2-7
Page 32
P100IH ISDN Router
ZyNOS firmware file (sometimes referred to as the “ras” file) is the file that contains the ZyXEL Network
Operating System firmware and the external firmware file is usually called the router model name with a
*.bin extension, e.g., P100IH.bin. Rename the configuration filename to “rom-0” and the firmware filename
to “ras” when transferring files to the Prestige (i.e., the internal filenames on the Prestige). Renaming the
files is not necessary when you transfer files to the Prestige using the X-Modem protocol.
2.7.1 Resetting the Prestige
If you have forgotten your password or for some reason cannot access the SMT menu you will need to
reinstall the configuration file. Uploading the configuration file replaces the current configuration file with
the default configuration file, you will lose all configurations that you had before and the speed of the
console port will be reset to the default of 9600bps with 8 data bit, no parity and 1 stop bit (8n1). The
password will be reset to the default of 1234, also.
Turn off the Prestige and begin a Telnet session with the default console port settings. Turn on the Prestige
again. When you see the message "Press Any key to enter Debug Mode within 3 seconds", press any key to
enter debug mode. You should already have downloaded the correct file from your nearest ZyXEL FTP
site.
2.8 General Setup
Menu 1 - General Setup
contains administrative and system-related information.
To enter Menu 1 and fill in the required information, follow these steps:
Step 1.
Step 2.
Enter 1 in the Main Menu to open
Menu 1 – General Setup
The Menu 1 - General Setup screen appears, as shown below. Fill in the required fields marked
.
[?] as shown in the following table.
Menu 1 - General Setup
System Name= p100ih
Location= branch
Contact Person's Name= JohnDoe
Press ENTER to Confirm or ESC to Cancel:
Figure 2-7 Menu 1 – General Setup
2-8Hardware Installation and Setup
Page 33
P100IH ISDN Router
Table 2-4 General Setup Menu Fields
FieldDescriptionExample
System NameChoose a descriptive name for identification purposes. This name can be
up to 30 alphanumeric characters long. Spaces are not allowed, but
dashes “-” and underscores "_" are accepted.
Location (optional)
Contact Person's
Name (optional)
Enter the geographic location (up to 31 characters) of your Prestige.
Enter the name (up to 30 characters) of the person in charge of this
Prestige.
100IH
MyHouse
JohnDoe
2.9 ISDN Setup Menus
Menu 2 is for you to enter the information about your ISDN line. Different telephone companies deploy
different types of switches for ISDN service. Depending on the switch for your particular installation, you
will have a different number of telephone numbers You need to pass the ISDN setup before your system
can make an outgoing call or answer an incoming call.
2.9.1 Supplementary Voice Services
To take full advantage of the Supplementary Voice Services available though the Prestige’s phone ports,
you will need to subscribe to your phone company for them. The Supplementary Voice Services available
on the Prestige series include:
Call Waiting
♦
Three Way Calling (conference)
♦
Call Transfer
♦
Call Forwarding.
♦
The Advanced Phone Services chapter in this manual describes these services in more detail. There may be
an additional charge for each of these services, so just choose the services you need. The phone company
representative will ask you for the Feature Keys (buttons) for any Voice Features that you have chosen to
activate. The Default Feature Keys for the Prestige series are as follows:
2.9.2 Setup Menus
Switch Type
The only switch type supported in Europe is DSS-1.
Hardware Installation and Setup2-9
Page 34
P100IH ISDN Router
MSN and Subaddress
Depending on your location, you may have Multiple Subscriber Number (MSN) where the telephone
company gives you more than one number for your ISDN line. You can assign each number to a different
port, e.g., the first number to data calls, the second to A/B adapter 1 and so on. Or (DSS1) the telephone
company may give you only one number, but allow you to assign your own subaddresses to different ports,
e.g., subaddress 1 to data calls and 2 to A/B adapter 1.
Incoming Call Routing
The
Incoming Phone Number Matching
Multiple Subscriber Number (MSN)
analog) is routed to the port that matches the dialed number; if no match is found, the call is dropped.
If you select
routed to either A/B adapter 1 or 2, or simply ignored, depending on the
Global Calls
A global call is an incoming analog call where the switch did not send the dialed number. This happens
most often when the call originates from an analog telephone line.
If you specify explicit matching, i.e.,
Subaddress, then global calls are always ignored. If it is
A/B Adapter 1 or 2, then the Prestige uses
set
Global Analog Call
Routing
Analog Call Routing
PABX Outside Line Prefix
A PABX (Private Automatic Branch eXchange) generally requires you to dial a number (a single digit in
most cases) when you need an outside line. If your Prestige is connected to a PABX, enter this number in
PABX Outside Line Prefix
Please note that the PABX prefix is for calls initiated by the Prestige only. If you place a call from a device
on either A/B adapter, you must dial the prefix by hand.
Outgoing Calling Party Number
Don’t Care
setting; if you set
, then all data calls are routed to the Prestige itself. Analog calls, however, are
to
Accept
Global Analog Call
is
Ignore
to begin with, then all analog calls, including global calls, are ignored.
, otherwise, leave it blank.
setting governs how incoming calls are routed. If you select
or
Called Party Subaddress
Incoming Phone Number Matching
Don’t Care
Global Analog Call
, then global calls are routed to the port according to the
to
Ignore
to decide how to handle global calls. If you
, then the Prestige ignores all global calls. If
, a call (either ISDN data or
Analog Call Routing
is either MSN or Called Party
and
Analog Call Routing
field.
is either
Analog Call
If this field is not blank, the Prestige will use its value as the
Adapter 1" and "A/B Adapter 2" outgoing calls. Otherwise, the individual entries for "ISDNData", "A/B
Adapter 1" and "A/B Adapter 2" will be used as the calling party number. You only need to fill in this field
if your switch or PABX requires a specific calling party number for outgoing calls, otherwise, leave it
blank. If you need to override the individual calling party number, enter Command Interpreter mode and
issue the command:
2-10Hardware Installation and Setup
calling party number
for "ISDN Data", "A/B
Page 35
P100IH ISDN Router
isdn initstring set AT&ZOx=number
where x is 'I' for ISDN data calls, 'A' for A/B Adapter 1 and 'B' for A/B Adapter 2. For instance,
isdn initstring set AT&ZOI=100&ZOA=101&ZOB=102
sets the calling party number to 100 for ISDN data calls, 101 for A/B adapter 1 and 102 for A/B adapter 2.
Menu 2 - ISDN Setup
Switch Type: DSS-1(Taiwan)
B Channel Usage= Switch/Switch
PABX Outside Line Prefix =
Outgoing Calling party Number =
Incoming Phone Number Matching= Multiple Subscriber Number (MSN)
Analog Call Routing= N/A
Edit Advanced Setup = No
Global Analog Call= N/A
Press ENTER to Confirm or ESC to Cancel:
Figure 2-8 Menu 2 – ISDN Setup for DSS1
Table 2-5 Menu 2 – ISDN Setup
Switch Type
B Channel Usage
ISDN Data &
Subaddress
A/B Adapter 1 &
Subaddress
A/B Adapter 2 &
Subaddress
This field is fixed as DSS1or 1TR6.
In general, this is
(e.g., your Prestige is sharing the ISDN BRI line with another device
on the S/T bus), then select
Switch/Switch.
Switch/Switch
♦
Switch/Lease
♦
Leased/Switch
♦
Enter the telephone number and the subaddress assigned to ISDN
data calls for the Prestige. The maximum number of digits is 25 for the
telephone number and 5 for the subaddress.
Enter the telephone number and the subaddress assigned to A/B
Adapter 1 (PHONE1).
Same as above for A/B Adapter 2 (PHONE2).
Switch/Switch
. If you are only using one B channel
Switch/Unused
The options for this field are:
Leased/Unused
♦
Unused/Leased
♦
Leased/Leased
♦
Subaddress=
Subaddress=
Subaddress=
. The default is
Switch/Unused
♦
Hardware Installation and Setup2-11
Page 36
P100IH ISDN Router
PABX Outside Line
Prefix
Outgoing Calling
Party Number
Incoming Phone
Number Matching
Analog Call Routing
Global Analog Call
Edit Advanced
Setup
Enter the number for outside line access if the Prestige is connected to
a PABX; otherwise, leave it blank. The maximum number of digits is
4.
You only need to fill in this field if your switch requires a specific
Outgoing Calling Party Number
Determines how incoming calls are routed. The choices for this field
Multiple Subscriber Number (MSN), Called Party Subaddress
are
Don’t Care
and
Select the destination for analog calls. The choices are
1, A/B Adapter 2
Incoming Phone Number Matching
Select how to handle global analog calls. The choices are
Ignore
. This field is not applicable when the
Ignore
.
Yes
Select
(DSS1 only).
.
and
and press
Ignore
Enter
; otherwise, leave it blank.
A/B Adapter
. This field is only applicable when
Don’t Care
is
to go to the advanced setup submenu
.
Accept
Analog Call Routing
and
is
2.9.3 Advanced Setup
Select
ISDN Call Waiting
This allows you to place a call on hold while you answer another incoming call on the same telephone
(directory) number. By default call waiting is enabled on both telephone ports (except for France), but can
be disabled on either port from
Yes
in the
Edit Advanced Setup
Menu 2.1
field of
Menu 2 – ISDN Setup
to display menu 2.1 below.
How to use call waiting
The
Call Waiting
feature on your ISDN line works in exactly the same way as it does on a regular analog
line. After hearing a call waiting indicator tone, press and immediately release the flash button on your
telephone. This puts your current call on hold and answers the incoming call.
Calling Line Indication
The
Calling Line Indication
call. If set to
set to
Disable
Enable
, the caller ID is blocked.
, or Caller ID, governs whether the other party can see your number when you
, the Prestige sends the caller ID and the party you call can see your number; if it is
at the message: ‘Press ENTER to confirm’, the Prestige uses the
information that you entered to initialize the ISDN line. It should be noted that whenever the switch type is
changed, the ISDN initialization takes slightly longer.
At this point, the Prestige asks if you wish to test your ISDN. If you select
, the Prestige will perform a
Yes
loop-back test to check the ISDN line. If the loop-back test fails, please note the error message that you
receive and take the appropriate troubleshooting action.
Setup LoopBack Test...
Dialing to 40000// ...
Sending and Receiving Data ...
Disconnecting...
LoopBack Test OK
### Hit any key to continue. ###
Figure 2-10 Loopback test
2.10 Ethernet Setup
This section describes how to configure the Ethernet using Menu 3 – Ethernet Setup. From the Main Menu,
enter 3 to open Menu 3.
Menu 3 - Ethernet Setup
1. General Setup
2. TCP/IP and DHCP Setup
Enter Menu Selection Number:
Figure 2-11 Menu 3 - Ethernet Setup
Hardware Installation and Setup2-13
Page 38
2.10.1 General Ethernet Setup
P100IH ISDN Router
This menu allows you to select your
10BaseT
for the Prestige 100IH, so this field does not appear) and specify the filter sets that you wish to
Ethernet interface
, either
10BaseT
or
for the Prestige 100 (only
AUI
apply to the Ethernet traffic. You seldom need to filter Ethernet traffic, however, the filter sets may be
useful to block certain packets, reduce traffic and prevent security breaches.
If you need to define filters, please read the chapter of filters, then return to this menu to define the filter
sets.
2-14Hardware Installation and Setup
Page 39
P100IH ISDN Router
Chapter 3:
Internet Access
This chapter shows you how to configure the LAN as well as the WAN of your Prestige for Internet access.
3.1 Factory Ethernet Defaults
The Ethernet parameters of the Prestige are preset in the factory with the following values:
1. IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits).
2. DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
These parameters should work for the majority of installations. If the parameters are satisfactory, you can
skip to section 3.3
you explicit DNS server address(es). If you wish to change the factory defaults or to learn more about
TCP/IP, please read on.
TCP/IP Ethernet Setup and DHCP
3.2 TCP/IP Parameters
3.2.1 IP Address and Subnet Mask
to enter the DNS server address(es) if your ISP gives
Similar to the houses on a street that share a common street name, the machines on a LAN share one
common network number, also.
Where you obtain your network number depends on your particular situation. If the ISP or your network
administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP
addresses and the subnet mask.
If the ISP did not explicitly give you an IP network number, then most likely you have a single user account
and the ISP will assign you a dynamic IP address when the connection is established. If this is the case, it is
recommended that you select a network number from 192.168.0.0 to 192.168.255.0 (ignoring the trailing
zero) and you must enable the Single User Account feature of the Prestige. The Internet Assigned Number
Authority (IANA) reserved this block of addresses specifically for private use; please do
number unless you are told otherwise. Let’s say you select 192.168.1.0 as the network number; which covers
254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other words, the
first 3 numbers specify the network number while the last number identifies an individual workstation on that
network.
Once you have decided on the network number, pick an IP address that is easy to remember, e.g.,
192.168.1.1, for your Prestige.
Internet Access3-1
use any other
not
Page 40
P100IH ISDN Router
The subnet mask specifies the network number portion of an IP address. Your Prestige will compute the
subnet mask automatically based on the IP address that you entered. You don’t need to change the subnet
mask computed by the Prestige unless you are instructed to do otherwise.
3.2.2 Private IP Addresses
Every machine on the Internet must have a unique address. If your networks are isolated from the Internet,
e.g., only between your two branch offices, you can assign any IP addresses to the hosts without problems.
However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP
addresses specifically for private networks:
10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255
For this reason, it is recommended that you choose your network number from the above list.
You can obtain your IP address from the IANA, from an ISP, or assigned from a private network. If you
belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the
Internet addresses for your local networks. On the other hand, if you are part of a much larger organization,
you should consult your network administrator for the appropriate IP addresses.
Note:
guidelines above. For more information on address assignment, please refer to RFC 1597,
for Private Internets
Regardless of your particular situation, do not create an arbitrary IP address; always follow the
Address Allocation
and RFC 1466,
Guidelines for Management of IP Address Space.
3.2.3 RIP Setup
RIP (Routing Information Protocol) allows a router to exchange routing information with other routers. The
RIP Direction
broadcast its routing table periodically and incorporate the RIP information that it receives; when set to none,
it will not send any RIP packets and will ignore any RIP packets received.
The
Version
(it recognizes both formats when receiving).
information. RIP-1 is probably adequate for most networks, unless you have a unusual network topology.
Both
RIP-2B
subnet broadcasting while
machines since they generally do not listen to the RIP multicast address and so will not receive the RIP
packets. However, if one router uses multicasting, then all routers on your network must use multicasting,
also.
By default,
3-2
field controls the sending and receiving of RIP packets. When set to both, the Prestige will
field controls the format and the broadcasting method of the RIP packets that the Prestige sends
is universally supported; but RIP-2 carries more
RIP-1
and
RIP-2M
RIP direction
sends the routing data in RIP-2 format; the difference being that
RIP-2M
is set to
uses multicasting. Multicasting can reduce the load on non-router
Both
and the
Version
set to
RIP-1
.
RIP-2B
Internet Access
uses
Page 41
P100IH ISDN Router
3.2.4 DHCP Configuration
DHCP (Dynamic Host Configuration Protocol) allows the individual clients (workstations) to obtain the
TCP/IP configuration at start-up from a centralized DHCP server. The Prestige has built-in DHCP server
capability, enabled by default, which means it can assign IP addresses, an IP default gateway and DNS
servers to Windows 95, Windows NT and other systems that support the DHCP client. The Prestige 100IH
can now also act as a surrogate DHCP server (DHCP Relay) where it relays IP address assignment from the
actual real DHCP server to the clients. DHCP relay is a middle role between the server and the client.
Whenever a DHCP client requests an IP address, the “DHCP relay” relays requests and responses between
the DHCP server and DHCP client, so it looks to the client that the Prestige is the actual DHCP server.
IP Pool Setup
The Prestige is pre-configured with a pool of 32 IP addresses starting from 192.168.1.33 to 192.168.1.64 for
the client machines. This leaves 31 IP addresses, 192.168.1.2 to 192.168.1.32 (excluding the Prestige itself
which has a default IP of 192.168.1.1) for other server machines, e.g., server for mail, FTP, telnet, web, etc.,
that you may have.
DNS Server Address
DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa,
e.g., the IP address of
without it, you must know the IP address of a machine before you can access it. The DNS server addresses
that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and
subnet mask.
www.zyxel.com
is 204.217.0.2. The DNS server is extremely important because
There are two ways that an ISP disseminates the DNS server addresses. The first is for an ISP to tell a
customer the DNS server addresses, usually in the form of an information sheet, when you sign up. If your
ISP does give you the DNS server addresses, enter them in the
Some ISP’s choose to pass the DNS servers using the DNS server extensions of PPP IPCP (IP Control
Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS
servers are conveyed through IPCP negotiation. The Prestige supports the IPCP DNS server extensions
through the DNS proxy feature.
If the
Primary
Prestige tells the DHCP clients that it itself is the DNS server. When a workstation sends a DNS query to the
Prestige, the Prestige forwards the query to the real DNS server learned through IPCP and relays the response
back to the workstation.
Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions. It does not
mean you can leave the DNS servers out of the DHCP setup under all circumstances. If your ISP gives you
explicit DNS servers, make sure that you enter their IP addresses in the
Prestige can pass the DNS servers to the workstations and the workstations can query the DNS server directly
without the Prestige’s intervention.
Internet Access3-3
and
Secondary DNS Server
fields in
DHCP Setup
DNS Server
are not specified, i.e., left as 0.0.0.0, the
fields in
DHCP Setup
DHCP Setup
menu. This way, the
.
Page 42
3.3 TCP/IP Ethernet Setup and DHCP
You will now use Menu 3.2 to configure your Prestige for TCP/IP.
P100IH ISDN Router
To edit Menu 3.2, select the menu option
the submenu option
TCP/IP and DHCP Setup
Ethernet Setup
and press [Enter]
TCP/IP and DHCP Ethernet Setup, as shown next.
Menu 3.2 - TCP/IP and DHCP Ethernet Setup
DHCP Setup:
DHCP= Server
Client IP Pool Starting Address= 192.168.1.33
Size of Client IP Pool= 32
Primary DNS Server= 0.0.0.0
Secondary DNS Server= 0.0.0.0
Relay Server Address= N/A
TCP/IP Setup:
IP Address= 192.68.1.1
IP Subnet Mask= 255.255.255.0
RIP Direction= Both
Version= RIP-1
Press Space Bar to Toggle.
Enter here to CONFIRM or ESC to CANCEL:
Figure 3-1 Menu 3.2 – TCP/IP and DHCP Ethernet Setup
in the Main Menu. When Menu 3 appears, select
.
The screen now displays Menu 3.2 -
3-4
Internet Access
Page 43
P100IH ISDN Router
Follow the instructions in the following table on how to configure the DHCP fields.
Table 3-1 DHCP Ethernet Setup Menu Fields
FieldDescriptionExample
DHCP Setup
DHCP= This field enables/disabled the DHCP server. If it is set to
Server
, your Prestige will act as a DHCP server. If set to
DHCP server will be disabled. If the Prestige 100IH is set to
Relay
, it will act as a surrogate DHCP server where it relays IP
address assignment from the actual real DHCP server to the
clients.
When DHCP is used, the following four items need to be set:
Client IP Pool Starting
Address
Size of Client IP Pool This field specifies the size, or count, of the IP address pool.32
Primary DNS Server
Secondary DNS
Server
Relay Server
Address=
This field specifies the first of the contiguous addresses in the
IP address pool.
Enter the IP addresses of the DNS servers. The DNS servers
are passed to the DHCP clients along with the IP address and
the subnet mask.
If you chose
of the actual DHCP server from which the Prestige will relay
requests and responses here.
Relay
in the DHCP= field above, then enter the IP
None
,
None
Server
Relay
192.168.1.33
(default)
Internet Access3-5
Page 44
P100IH ISDN Router
Follow the instructions in the following table to configure TCP/IP parameters for the Ethernet port.
Table 3-2 TCP/IP Ethernet Setup Menu Fields
FieldDescriptionExample
TCP/IP Setup
IP
Enter the IP address of your Prestige in dotted decimal notation192.168.1.1
Address
(default)
IP Subnet Mask Your Prestige will automatically calculate the subnet mask based
on the IP address that you assign. Unless you are implementing
subnetting, use the subnet mask computed by the Prestige
Press the space bar to select the RIP direction from
RIP
Direction
Version
When you have completed this menu, press [Enter] at the prompt [Press ENTER to Confirm…] to
save your configuration, or press [Esc] at any time to cancel.
Only/Out Only.
Press the space bar to select the RIP version from
2B/RIP-2M.
Both/In
RIP-1/RIP-
255.255.255.0
Both
(default)
RIP-1
(default)
3-6
Internet Access
Page 45
P100IH ISDN Router
3.4 Internet Access Configuration
Menu 4 allows you to enter the Internet Access information in one screen. Menu 4 is actually a simplified
setup for one of the remote nodes that you can access in Menu 11. Before you configure your Prestige for
Internet access, you need to collect your Internet account information from your ISP.
Use the table below to record your Internet Account Information.
Table 3-3 Internet Account Information
Internet Account InformationWrite your account information here
IP Address of the ISP's Gateway (Optional)
Telephone Number(s) of your ISP
Login Name
Password for ISP authentication
DNS server address(es) for your workstation
−
−
−
−
−
Internet Access3-7
Page 46
P100IH ISDN Router
From the Main Menu, enter option
Internet Access Setup
to go to Menu 4 - Internet Access Setup, as
displayed below. The following table contains instructions on how to configure your Prestige for Internet
access.
Menu 4 - Internet Access Setup
ISP's Name= ?
Pri Phone #= ?
Sec Phone #=
My Login=
My Password= ********
My WAN IP Addr=
NAT= None
Address Mapping Set= N/A
Telco Options:
Transfer Type= 64K
Multilink= Off
Idle Timeout= 300
Enter here to CONFIRM or ESC to CANCEL:
Figure 3-2 Menu 4 – Internet Access Setup
Table 3-4 Internet Access Setup Menu Fields
FieldDescription
ISP’s Name
ISP IP Addr
Pri Phone and Sec
Phone Number
My Login NameEnter the login name given to you by your ISP.
My PasswordEnter the password associated with the login name above.
My WAN IP Addr=
NATChoose from None, Full Feature or SUA Only. See Chapter 4:
Address Mapping Set=
Enter the name of your Internet Service Provider, e.g., myISP.
This information is for identification purposes only.
Enter the IP Address of the remote gateway at the ISP’s site. If
you don’t have this data, just leave it blank.
Both the Primary and the Secondary Phone number refer to the
number that the Prestige dials to connect to the ISP.
for a full discussion of this new feature.
A NAT Server Set is a list of LAN side servers mapped to
external ports (similar to the old SUA menu 15.1 before). You
3-8
Internet Access
Page 47
P100IH ISDN Router
FieldDescription
may enter any server set number up to 10, but the first one is
used foe SUA only.
Telco
options:
MultilinkThe Prestige uses the PPP Multilink Protocol (PPP/MP) to
Idle Timeout
At this point, the SMT will ask if you wish to test the Internet connection. If you select
Transfer
Type
This field specifies the type of connection between the Prestige
and this remote node. Select
bundle multiple links in a single connection to boost the effective
throughput between two nodes. This option is only available if
the transfer type is
This value specifies the number of idle seconds that elapses
before the remote node is automatically disconnected. Idle
seconds is the period of time when no data is transmitted from
your Prestige. Administrative packets such as RIP are not
counted as data. This option only applies when the Prestige
initiates the call.
64K.
64K,
See menu 11.2 for more details.
Leased
or
.
, your Prestige
Yes
will call the ISP to test the Internet connection. If the test fails, note the error message that you receive on the
screen and take the appropriate troubleshooting steps.
Internet Access3-9
Page 48
Page 49
P100IH ISDN Router
Chapter 4:
NAT
4.1 Introduction
NAT (Network Address Translation - NAT, RFC 1631) is the translation of an Internet Protocol address used
within one network to a different IP address known within another network. One network is designated the
network and the other is the
inside
one or more global outside IP addresses and “unmaps” the global IP addresses on incoming packets back into
local IP addresses. The IP addresses for the NAT can be either fixed or dynamically assigned by the ISP. In
addition, you can designate servers, e.g., a web server and a telnet server, on your local network and make
them accessible to the outside world. If you do not define any servers (for Many-to-One and Many-to-Many
Overload mapping – see below), NAT offers the additional benefit of firewall protection. If no server is
defined in these cases, all incoming inquiries will be filtered out by your Prestige, thus preventing intruders
from probing your network. For more information on IP address translation, refer to RFC 1631,
Network Address Translator (NAT).
4.1.1 Advantages of NAT
NAT is a cost-effective solution to access the Internet or other remote TCP/IP networks as NAT
z
conserves on the number of global IP addresses that a company needs in its communication with the
outside world.
NAT supports popular Internet applications such as MS traceroute, CuSeeMe, IRC, RealAudio,
z
VDOLive, Quake and PPTP with no extra configuration needed.
NAT supports servers, including multiple servers of the same type, to be accessible to the outside
z
world.
. Typically, a company maps its local inside network addresses to
outside
The IP
NAT can provide firewall protection if you do not specify a server (for Many-to-One and Many-to-
z
Many Overload mapping) and all incoming inquiries will be filtered out by your Prestige.
UDP and TCP packets can be routed. In addition, partial ICMP, including echo and traceroute, is
z
supported.
4.1.2 How NAT works
Each packet consists of two addresses – a source address and a destination address. For outgoing packets, the
ILA is the source address on the LAN, and the IGA is the source address on the WAN. For incoming packets,
the ILA is the destination address on the LAN, and the IGA is the destination address on the WAN. The term
“Inside” refers to the set of networks that are subject to translation. Network Address Translation operates by
mapping private (local) IP addresses to globally unique ones required for communication with hosts on other
networks. It replaces the original IP source address (and TCP or UDP source port numbers for Many-to-One
NAT4-1
Page 50
P100IH ISDN Router
and Many-to-Many Overload NAT mapping) and then forwards each packet to the Internet ISP, thus making
them appear as if they had come from the NAT system itself (e.g., the Prestige). The Prestige keeps track of
the original addresses and port numbers so incoming reply packets can have their original values restored.
The following diagram illustrates this.
Figure 4-1 How NAT Works
4.1.3 NAT Mapping Types
NAT supports five types of IP/port mapping. They are:
1. One to One: In One-to-One mode, the Prestige maps one local IP address to one global IP address.
2. Many to One: In Many-to-One mode, the Prestige maps multiple local IP addresses to one global IP
address. This is equivalent to SUA (i.e., PAT, port address translation), ZyXEL’s Single User Account
feature that previous ZyXEL routers supported (the SUA Only option in today’s routers).
3. Many to Many Overload: In Many-to-Many Overload mode, the Prestige maps the multiple local IP
addresses to shared global IP addresses.
4. Many to Many No Overload: In Many-to-Many No Overload mode, the Prestige maps the each local IP
addresses to unique global IP addresses.
5. Server: This type allows us to specify multiple inside servers of different types behind the NAT.
Port numbers do not change for One-to-One and Many-to-Many-No Overload NAT
The following figure illustrates a possible NAT application, where three inside LANs behind the Prestige can
“talk” to three distinct Internet destinations. More examples follow at the end of this chapter.
NAT4-3
Page 52
P100IH ISDN Router
Figure 4-2 NAT Application
4.3 SUA (Single User Account) Versus NAT
SUA (Single User Account) in previous ZyNOS versions is a NAT set with 2 rules, Many-to-One and Server.
See
section 4.5.1
NAT support to map global IP addresses to local IP addresses of clients or servers using all mapping types as
outlined in
reusable, but only one set is allowed for each remote node. The last set (
convenient, pre-configured, read only Many-to-1 port mapping set, sufficient for most purposes (
for some examples) and helpful to people already familiar with SUA in previous ZyNOS versions.
4.6
Please upload the latest configuration file (romfile) for NAT and SUA to work properly.
4-4
for a detailed description of the NAT set for SUA. The Prestige now has
Table 4-1 NAT Mapping Types
. The Prestige supports NAT sets on a remote node basis. They are
SUA Only
Full Feature
option in Menu 15.1) is a
see section
NAT
Page 53
P100IH ISDN Router
4.4 SMT Menus
NAT Setup In The Main Menu
Enter 15 from the main menu to configure NAT (this was SUA in previous versions).
Prestige 100IH Main Menu
Getting Started Advanced Management
1. General Setup 21. Filter Set Configuration
2. ISDN Setup
3. Ethernet Setup 23. System Password
4. Internet Access Setup 24. System Maintenance
Advanced Applications 26. Schedule Setup
11. Remote Node Setup
12. Static Routing Setup
13. Default Dial-in Setup
14. Dial-in User Setup
15. NAT Setup 99. Exit
Enter Menu Selection Number:
Figure 4-3 NAT in the Main Menu
4.4.1 Applying NAT in the SMT Menus
You apply NAT via menus 4 and 11.3 as displayed next. The next figure how you apply NAT for Internet
access in Menu 4. Enter 4 from the Main Menu to go to
Menu 4 - Internet Access Setup
ISP's Name= ChangeMe
Pri Phone #= 4125678
Sec Phone #=
My Login= N/A
My Password= N/A
My WAN IP Addr= 0.0.0.0
IP Subnet Mask= N/A
Telco Options:
Transfer Type= 64K
Multilink= Off
Idle Timeout= 300
NAT= SUA Only
Address Mapping Set= 255
Menu 4 - Internet Access Setup
.
Press ENTER to Confirm or ESC to Cancel:
Figure 4-4 Applying NAT for Internet Access
This figure shows how you apply NAT to the remote node in Menu 11.1.
NAT4-5
Page 54
P100IH ISDN Router
Step 1.
Step 2.
Enter 11 from the Main Menu.
Move the cursor to the
Edit IP
then press [ENTER] to bring up
Menu 11.3 - Remote Node Network Layer Options
Rem IP Address= 172.16.1.20
IP Subnet Mask= 255.255.0.0
My WAN Addr = 192.168.1.10
NAT= Full Feature
Address Mapping Set= 4
Metric= N/A
Private= N/A
RIP Direction= Both
Version= RIP-2B
Enter here to CONFIRM or ESC to CANCEL:
Press Space Bar to Toggle.
field, press the [SPACEBAR] to toggle the default No to
Menu 11.3 - Remote Node Network Layer Options.
Figure 4-5 Applying NAT to the Remote Node
The following table describes the options for Network Address Translation.
Table 4-2 Applying NAT in Menus 4 & 11.3
Yes
,
4-6
FieldOptionsDescription
Network
Address
Translation
Full Feature
When you select this option the SMT will use
Address Mapping Set 1 (Menu 15.1 – see section
4.5.1 for further discussion). You can configure any
of the 5 mapping types described in
.
None
SUA Only
Mapping Types
NAT is disabled when you select this option.
When you select this option the SMT will use
Address Mapping Set 255 (Menu 15.1 – see section
4.5.1). It is a convenient, pre-configured, read only
Many-to-1 port mapping set, sufficient for most
purposes and helpful to people already familiar with
SUA in previous ZyNOS versions. Note that there is
Server
also a
type whose IGA is
Table 4-1 NAT
0.0.0.0
in this set.
NAT
Page 55
P100IH ISDN Router
Address
Mapping Set=
A NAT Server Set is a list of LAN side servers mapped to external ports
(similar to the old SUA menu 15.1 before). You may enter any server set
number up to 10, but the first one is used foe SUA only.
4.5 Configuring NAT
To configure NAT, enter 15 from the Main Menu to bring up the following screen.
Menu 15 – NAT Setup
1. Address Mapping Sets
2. NAT Server Sets
Enter Menu Selection Number:
Figure 4-6 Menu 15 NAT Setup
4.5.1 Address Mapping Sets and NAT Server Sets:
Use the Address Mapping Sets menus and submenus to create the mapping table used to assign global
addresses to machines on the LAN. Each remote node must specify which NAT Address Mapping Set to
use. You can see the NAT Address Mapping sets in Menu 15.1. Set 255 is used for SUA. When you select
Full Feature
Table 4-3
section 4.2
The NAT Server set is a list of LAN side servers mapped to external ports. To use this set (one set for the
P312), a server rule must be set up inside the NAT Address Mapping set. Please
information on these menus.
in menu 4 or 11.3, the SMT will use Set 1, which supports all mapping types as outlined in
. When you select
SUA Only
, the SMT will use the pre-configured Set 255 (read only) –
.
see section 4.5.2
see
for further
Enter 1 to bring up
Menu 15.1 – Address Mapping Sets
.
NAT4-7
Page 56
Menu 15.1 - Address Mapping Sets
1. Marc
2.
3.
4.
5.
6.
7.
8.
255. SUA (read only)
Enter Menu Selection Number:
Figure 4-7 Menu 15.1 - Address Mapping Sets
P100IH ISDN Router
Let’s look first at Option 255. Option 255 is equivalent to SUA in previous ZyXEL routers (
The fields in this menu cannot be changed. Entering 255 brings up this screen.
Menu 15.1.255 - Address Mapping Rules
Set Name= SUA
Idx Local Start IP Local End IP Global Start IP Global End IP Type
The following table explains the fields in this screen.
Please note that the fields in this menu are read-only. The Type, Local and Global
Start/End IPs are normally (not for this read-only menu) configured in Menu 15.1.1.1
(described later) and the values are displayed here.
see section 4.2)
.
4-8
NAT
Page 57
P100IH ISDN Router
FieldDescriptionOptions/Example
Set NameThis is the name of the set you selected in Menu
IdxThis is the index or rule number.
Local Start IPThis is the starting local IP address (ILA).
Local End IPThis is the ending local IP address (ILA). If the
Global Start IPThis is the starting global IP address (IGA). If you
Global End IPThis is the ending global IP address (IGA).
TypeThese are the mapping types discussed above
Server SetThis refers to the NAT Server Sets in menu 15.1
Table 4-3 SUA Address Mapping Rules
15.1 or enter the name of a new set you want to
create.
rule is for all local IPs, then the Start IP is 0.0.0.0
and the End IP is 255.255.255.255.
have a dynamic IP, enter 0.0.0.0 as the Global
Start IP.
(see Table 4-1). Type
multiple servers of different types behind NAT to
this machine. See section 4.6 for some examples.
Server
allows us to specify
SUA
1
0.0.0.0
255.255.255.255
0.0.0.0
N/A
Server
255
Note: For all Local and Global IPs, the End IP address must begin after the IP Start
address.
Now let’s look at Option 1 in Menu 15.1. Enter 1 to bring up this menu. We’ll just look at the differences
from the previous menu. Note that, this screen is not read only, so we have extra
fields. Note also that the [?] in the
Set Name
field means that this is a required field and you must enter a
Action
and
Select Rule
name for the set.
Please note that if the Set Name field is left blank, the entire set will be deleted.
NAT4-9
Page 58
P100IH ISDN Router
Menu 15.1.1 - Address Mapping Rules
Set Name= Marc
Idx Local Start IP Local End IP Global Start IP Global End IP Type
1. 0.0.0.0 255.255.255.255 0.0.0.0 M-1
2 Server Set= 1 0.0.0.0 Server
3.
4.
5.
6.
7.
8.
9.
10.
Action= Edit Select Rule=
Press ENTER to Confirm or ESC to Cancel:
Figure 4-9 First Set in Menu 15.1.1
The Type, Local and Global Start/End IPs are configured in Menu 15.1.1.1 (described
later) and the values are displayed here.
Ordering Your Rules
If there are any empty rules before your new configured rule, your configured rule will be pushed up by that
number of empty rules. For example, if you have already configured rules 1 to 6 in your current set and now
you configure rule number 9. In the set summary screen, the new rule will be rule 7, not 9.
Now if you delete rule 4, rules 5 to 7 will be pushed up by 1 rule, so as old rule 5 becomes rule 4, old rule 6
becomes rule 5 and old rule 7 becomes rule 6.
The description of the other fields is as described above. The Type, Local and Global Start/End IPs are
configured in Menu 15.1.1.1 (described later) and the values are displayed here.
Table 4-4 Menu 15.1.1
FieldDescriptionOption
Set Name
Action
Enter a name for this set of rules. This is a required
field. Please note that if this field is left blank, the
entire set will be deleted.
There are 4 actions. The default is
Edit. Edit
means
you want to edit a selected rule (see following field).
Insert Before
means to insert a rule before the rule
selected. The rules after the selected rule will then be
moved down by one rule.
Delete
means to delete the
selected rule and then all the rules after the selected
Marc
Edit
Insert Before
Delete
and
Save Set
4-10
NAT
Page 59
P100IH ISDN Router
FieldDescriptionOption
one will be advanced one rule.
save the whole set (note when you choose this action,
Select Rule
Select Rule
the
When you choose
item will be disabled).
Edit, Insert Before
previous field the cursor jumps to this field to allow you
to select the rule to apply the action in question.
N.B.: Save Set in the Action field means to save the whole set. You must do this if you
make any changes to the set – including deleting a rule. No changes to the set take
Be careful when ordering your rules as each rule is executed in turn beginning from
place until this action is taken.
Save Set
rule 1.
means to
Delete
or
in the
1
Selecting
Address Mapping Rule
Edit
in the
field and then selecting a rule brings up the following menu,
Action
in which you can edit an individual rule and configure the Type, Local and Global
Start/End IPs displayed in Menu 15.1.1.
Menu 15.1.1.1 - Marc - Rule 1
Type= Many-to-One
Local IP:
Start= 0.0.0.0
End = 255.255.255.255
Global IP:
Start= 0.0.0.0
End = N/A
Server Mapping Set= N/A
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle.
Figure 4-10 Editing The First Rule in a Set
Menu 15.1.1.1
-
NAT4-11
Page 60
Menu 15.1.1.1 - Marc - Rule 2
Type= Server
Local IP:
Start= N/A
End = N/A
Global IP:
Start= 0.0.0.0
End = N/A
Server Mapping Set= 1
Press ENTER to Confirm or ESC to Cancel:
Figure 4-11 Editing The Second Rule in a Set
The following table describes the fields in these screens.
Table 4-5 Menu 15.1.1.1 – configuring an individual rule
FieldDescriptionOption/Example
TypePress the [SPACEBAR] to toggle through a
total of 5 types. These are the mapping
types discussed above (see
Server
Local IP
Type
servers of different types behind NAT to this
machine. See section 4.6 for some
examples.
Local and Global IP fields are
Server Type.
StartThis is the starting local IP address (ILA).
EndThis is the ending local IP address (ILA). If
the rule is for all local IPs, then put the Start
IP as 0.0.0.0 and the End IP as
255.255.255.255. This field is
to-One
allows us to specify multiple
Server
and
types
Table 4-1
.
N/A
N/A
).
for the
One-
for
P100IH ISDN Router
One-to-One
Many-to-One
Many-to-Many
Overload
Many-to-Many No
Overload
and Server
0.0.0.0
255.255.255.255
4-12
Global IP
StartThis is the starting global IP address (IGA).
If you have a dynamic IP, enter 0.0.0.0 as
Global IP Start
the
Start
can be set to
Many-to-One
are
. Note that
0.0.0.0
Server
or
Global IP
only if the types
.
EndThis is the ending global IP address (IGA).
0.0.0.0
172.16.23.55
NAT
Page 61
P100IH ISDN Router
FieldDescriptionOption/Example
and
N/A
Server
This field is
One
Note: For all Local and Global IPs, the End IP address must begin after the IP Start
address, i.e., you cannot have an End IP address beginning before the Start IP address.
One-to-One, Many-to-
for
types.
4.5.2 NAT Server Sets
A NAT Server Set is a list of LAN side servers mapped to external ports (similar to the old SUA menu 15.1
before).
Multiple Servers Behind NAT
If you wish, you can make inside servers for different services, e.g., web or FTP, visible to the outside users,
even though NAT makes your whole inside network appear as a single machine to the outside world. A
service is identified by the port number, e.g., web service is on port 80 and FTP on port 21.
As an example (see the following figure), if you have a web server at 192.168.1.36 and an FTP server
192.168.1.33, then you need to specify for port 80 (web) the server at IP address 192.168.1.36 and for port 21
(FTP) another at IP address 192.168.1.33.
Please note that a server can support more than one service, e.g., a server can provide both FTP and DNS
service, while another provides only web service.
Figure 4-12 Multiple Servers Behind NAT
NAT4-13
Page 62
Configuring a Server behind NAT
Follow the steps below to configure a server behind NAT:
P100IH ISDN Router
Step 1.
Step 2.
Step 3.
Step 4.
Enter 15 in the main menu to go to
Enter 2 to go to
Menu 15.2 - NAT Server Setup
Menu 15.2 - NAT Server Sets
1. Server Set 1 (Used for SUA Only)
2. Server Set 2
3. Server Set 3
4. Server Set 4
5. Server Set 5
6. Server Set 6
7. Server Set 7
8. Server Set 8
9. Server Set 9
10. Server Set 10
Enter Set Number to Edit:
Menu 15 – NAT Setup.
.
Figure 4-13 Menu 15.2 – NAT Server Sets
Enter the index number of the set you want to configure. This brings up menu 15.2.X where X is
the index number.
Enter the service port number in the
field and the inside IP address of the server in the IP
Port #
Address field.
Menu 15.2.2 - Multiple Server Configuration
Port #
----
1
Default
.
2.21192.168.1.33
3.23192.168.1.34
4.25192.168.1.35
5.80192.168.1.36
6. 00.0.0.0
7. 00.0.0.0
8. 00.0.0.0
9. 00.0.0.0
10. 00.0.0.0
11. 00.0.0.0
12. 00.0.0.0
IP Address
---------------
0.0.0.0
4-14
Press ENTER to Confirm or ESC to Cancel:
Figure 4-14 Menu 15.2.1 –Multiple Server Configuration
NAT
Page 63
P100IH ISDN Router
Step 5.
Press [ENTER] at the “Press ENTER to confirm …” prompt to save your configuration after you
define all the servers or press
at any time to cancel.
ESC
The most often used port numbers are shown in the following table. Please refer to RFC 1700 for further
information about port numbers. Please also refer to our PNC Disk for more examples and details on NAT.
Table 4-6 Services & Port numbers
ServicesPort Number
FTP (File Transfer Protocol)21
Telnet23
SMTP (Simple Mail Transfer Protocol)25
DNS(Domain Name System)53
HTTP (Hyper Text Transfer protocol or WWW, Web) 80
PPTP (Point-to-Point Tunneling Protocol)1723
4.6 Examples
4.6.1 Example 1 - Internet Access Only
In our Internet access example, we only need one rule where all our ILAs (Inside Local addresses) map to
one dynamic IGA (Inside Global Address) assigned by our ISP.
Figure 4-15 NAT Example 1
NAT4-15
Page 64
Menu 4 - Internet Access Setup
ISP's Name= ChangeMe
Pri Phone #= 4125678
Sec Phone #=
My Login= N/A
My Password= N/A
My WAN IP Addr= 0.0.0.0
IP Subnet Mask= N/A
Telco Options:
Transfer Type= 64K
Multilink= Off
Idle Timeout= 300
Press ENTER to Confirm or ESC to Cancel:
NAT= SUA Only
Address Mapping Set= 255
Figure 4-16 Internet Access & NAT Example
P100IH ISDN Router
From Menu 4 shown above, simply choose the
SUA Only
field. This is the Many-to-One mapping discussed in
Network Address Translation
field in Menus 4 and 11.3 is specifically pre-configured to handle this case.
option from the
section 4.1.3.
The
SUA Only
Network Address Translation
4.6.2 Example 2 – Internet Access with an Inside Server
Figure 4-17 NAT Example 2
In this case, we do exactly as above (use the convenient pre-configured
15.2.1 to specify the Inside Server behind the NAT as shown in the next figure.
SUA Only
read only option from the
set) and also go to Menu
4-16
NAT
Page 65
P100IH ISDN Router
Menu 15.2.1 - Multiple Server Configuration
Port #
----
1
Default
.
2.00.0.0.0
3.00.0.0.0
4.00.0.0.0
5.00.0.0.0
6. 00.0.0.0
7. 00.0.0.0
8. 00.0.0.0
9. 00.0.0.0
10. 00.0.0.0
11. 00.0.0.0
12. 1025RR Reserved
Press ENTER to Confirm or ESC to Cancel:
IP Address
---------------
192.168.1.10
Figure 4-18 Specifying an Inside Sever
4.6.3 Example 3 – General Case
In this example, we have 3 IGAs from our ISP. We have many departments but two have their own FTP
server. All departments share the same router. We want to reserve 1 IGA for each department with an FTP
server and the other IGA is used by all. We want to map the FTP servers to the first two of our IGAs and the
other LAN traffic to the remaining IGA. We also want to map out third IGA to an inside web server and mail
server. We need to configure 4 rules, 2 bi-directional and 2 one directional as follows.
Rule 1.
We map our first IGA to our first inside FTP server for FTP traffic in both directions (
1: 1
mapping, giving both local and global IP addresses).
Rule 2.
We map our second IGA to our second inside FTP server for FTP traffic in both directions (
1: 1
mapping, giving both local and global IP addresses).
Rule 3.
Rule 4.
We map our other outgoing LAN traffic to IGA3 (
Many : 1
We also map our third IGA to our web server and mail server on the LAN. Type
mapping).
Server
allows
us to specify multiple servers, of different types, to other machines behind NAT on the LAN.
Our situation looks somewhat like this:
NAT4-17
Page 66
Figure 4-19 NAT - Example 3
P100IH ISDN Router
In this case we need to configure Address Mapping Set 1 from
Therefore we must choose the
or Menu 11.3 and select an available NAT Server Set, say Server Set 2, that we configure later.
Step 1.
Step 2.
Step 3.
Step 4.
Step 5.
Step 6.
The following figure shows how to configure the first rule.
4-18
Enter 15 from the Main Menu.
Enter 1 to configure the Address Mapping Sets.
Choose 1 to begin configuring this new set. Enter a
select 1 from
Select
Type=
Start IP
first IGA). (
Repeat the previous step for rules 2 to 4 as outlined above.
When finished, Menu 15.1.1 should look like as shown in
as 192.168.1.10 (the IP address of FTP Server 1), the global
Full Feature
Select Rule
as
One-to-One
See Figure 4-20)
field. Press [ENTER] to confirm.
option from the
(direct mapping for packets going both ways), and enter the local
Menu 15.1 - Address Mapping Sets.
Network Address Translation
Set Name
Figure 4-21.
, choose the
Start IP
Action
Edit
as 10.132.50.1 (our
field in Menu 4
and then
NAT
Page 67
P100IH ISDN Router
Menu 15.1.1.1 –Example3-Rule 1
Type= One-to-One
Local IP:
Start= 192.168.1.10
End = N/A
Global IP:
Start= 10.132.50.1
End = N/A
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle.
Figure 4-20 Example 3 – Menu 15.1.1.1
When we have configured all four rules, Menu 15.1.1 should look as follows.
Menu 15.1.1 - Address Mapping Rules
Set Name= Example3
Idx Local Start IP Local End IP Global Start IP Global End IP Type
1. 192.168.1.10 192.168.1.12 10.132.50.1 10.132.50.3 M-M No Ov
2.
3.
4.
5.
6.
7.
8.
9.
10.
Action= Edit Select Rule=
Press ENTER to Confirm or ESC to Cancel:
Figure 4-25 Example 4 - Menu 15.1.1 - Address Mapping Rules
NAT4-21
Page 70
Page 71
P100IH ISDN Router
Chapter 5:
A remote node is required for placing calls to a remote gateway. A remote node represents both the remote
gateway and the network behind it across a WAN connection. Note that when you use Menu 4 to set up
Internet access, you are actually configuring one of the remote nodes. Once a remote node is configured
correctly, traffic to the remote network will trigger your Prestige to make a call automatically, i.e., Dial On
Demand.
In this chapter, we will discuss the parameters that are protocol independent. The protocol-dependent
configuration (TCP/IP) will be covered in
Remote Node Configuration
Chapter 5
.
5.1 Remote Node Setup
This section describes the protocol-independent parameters for a remote node.
5.1.1 Minimum Toll Period
Phone calls are normally charged per basic time unit with the time being rounded up to the nearest unit
when bills are calculated. For example, the Prestige may make a call but drop the call after 10 seconds
(maybe there was no reply) but the call would still be charged at a minimum time unit, let’s say 3 minutes.
With minimum toll period, the Prestige will try to use all the toll period. In the above case, the Prestige
tries to extend the idle timeout to the nearest 3 minutes (basic charging unit of time). If there is traffic
during the extended 2 minutes and 50 seconds, the idle timeout will be cleared and a second call is
eliminated. Since the session time calculation by the Prestige is not always perfectly synchronized with
your telephone company, the Prestige drops the channel 5 seconds before the toll period you set, to
compensate for any lag. As such, you must not set the minimum toll period to less than 5 seconds.
5.1.2 Remote Node Profile
To configure a remote node, follow these steps:
Step 1.
Step 2.
Remote Node Configuration5-1
From the Main Menu, select menu option
When Menu 11 appears, as shown below, enter the number of the remote node that you wish to
configure.
1. Remote Node Setup
Page 72
P100IH ISDN Router
Menu 11 - Remote Node Setup
Menu 11 - Remote Node Setup
1. nodename
2. ________
3. ________
4. ________
5. ________
6. ________
7. ________
8. ________
Enter Node # to Edit:
Figure 5-1 Menu 11 – Remote Node Setup
When Submenu 11.1 - Remote Node Profile appears, fill in the fields as described in the table below to
define this remote profile. The Remote Node Profile Menu Fields table shows how to configure the Remote
Node Menu.
Menu 11.1 - Remote Node Profile
Rem Node Name= nodename
Active= Yes
Call Direction= Outgoing
Incoming:
Rem Login= N/A
Rem Password= N/A
Rem CLID= N/A
Call Back= N/A
Outgoing:
My Login= ChangeMe
My Password= ********
Authen= CHAP/PAP
Pri Phone #= 1234
Sec Phone #=
Enter here to CONFIRM or ESC to CANCEL:
Edit PPP Options= No
Rem IP Addr= 0.0.0.0
Edit IP= No
Telco Option:
Transfer Type= 64K
Allocated Budget(min)= 0
Period(hr)= 0
Schedules=
Nailed-Up Connection= No
Toll Period(sec)= 0
Session Options:
Edit Filter Sets= No
Idle Timeout(sec)= 300
Figure 5-2 Menu 11.1 Remote Node Profile
5-2Remote Node Configuration
Page 73
P100IH ISDN Router
Table 5-1 Remote Node Profile Menu Fields
FieldDescriptionOptions
Rem Node NameThis is a required field [?]. Enter a descriptive name for
the remote node, for example, Corp.
This field can be up to eight characters. This name must
be unique from any other remote node name or remote
dial-in user name.
Active
Call Direction
Press the space bar to toggle between
Inactive nodes are displayed with a minus sign (-) at the
beginning of the name in Menu 11.
zIf this parameter is set to
both place and receive calls to/from this remote
node.
zIf set to
to this remote node.
Incoming
Both
, your Prestige will not place a call
Yes
and No.
, your Prestige can
space bar
Incoming
Press
to toggle
Yes/No
Both
Incoming:Rem Node
Login Name
Incoming:Rem Node
Password
Incoming:Rem CLID
zIf set to
incoming calls from this remote node.
Several other fields in this menu depend on this
parameter. For example, in order to enable
Call Direction
Enter the login name that this remote node will use when
it calls your Prestige.
The login name in this field combined with the Rem Node
Password will be used to authenticate this node.
Enter the password used when this remote node calls
your Prestige.
This field is applicable only if
Incoming
or
This is the Calling Line ID (the telephone number of the
calling party) of this remote node.
If you enable the CLID Authen field in Menu 13 – Default
Dial In, your Prestige will check the CLID in the incoming
call against the CLIDs in the database. If no match is
found and CLID Authen is Required, the call will be
dropped.
Outgoing
must be
. Otherwise, a
, your Prestige will drop any
Both
.
Call Direction
N/A
appears in the field.
Callback
is either
, the
Both
Outgoing
Remote Node Configuration5-3
Page 74
P100IH ISDN Router
Incoming:Callback
Outgoing:My Login
Name
Outgoing:My
Password
Outgoing:Authen
Outgoing:Pri(mary)
Sec(ondary)
Phone
Numbers
Edit PPP OptionsTo edit the PPP options for this remote node, move the
Rem IP Addr
This field is applicable only if
Otherwise, a
This field determines whether or not your Prestige will call
back after receiving a call from this remote node.
If this option is enabled, your Prestige will disconnect the
initial call from this node and call it back at the Outgoing
Primary Phone Number (see below).
This is a required field [?] if
Outgoing
or
it calls this remote node.
This is a required field [?] if
Outgoing
or
it calls this remote node.
This field sets the authentication protocol used for
outgoing calls.
Options for this field are:
CHAP/PAP
z
or PAP when requested by this remote node.
CHAP
z
PAP
z
Your Prestige always calls this remote node using the
Primary Phone number first for a dial-up line.
If the Primary Phone number is busy or does not answer,
your Prestige will dial the Secondary Phone number if
available.
Some areas require dialing the pound sign # before the
phone number for local calls. A # symbol may be included
at the beginning of the phone numbers as required.
cursor to this field, use the space bar to select
press [Enter]. This will bring you to Menu 11.2 - Remote
Node PPP Options. For more information on configuring
PPP options, see the section Editing PPP Options.
This is a required field [?] if
IP address of the remote gateway.
N/A
appears in the field.
. Enter the login name for your Prestige when
. Enter the password for your Prestige when
- Your Prestige will accept either CHAP
- accept CHAP only.
- accept PAP only.
Call Direction
Call Direction
Call Direction
Route
is set to IP. Enter the
Both
is
is either
is either
Yes
.
Both
Both
and
Enable
Disable
CHAP/PAP
CHAP
PAP
Press
space bar
to toggle
Yes
then
press
[Enter]
5-4Remote Node Configuration
Page 75
P100IH ISDN Router
Telco Options:
Allocated Budget
Transfer TypeThis field specifies the type of connection between the
Period (hr)This field sets the time interval to reset the above
Nailed-up ConnectionThis field specifies if you want to make the connection to
Toll PeriodThis is the basic unit of time for charging purposes, e.g.,
Session Option:
Edit Filter Sets
Session Option:
Idle Timeout (sec)
This field sets a ceiling for outgoing call time for this
(min)
SchedulesApply up to 4 schedules sets, separated by commas to
remote node. The default for this field is 0 for no budget
control.
Yes
and press
Leased
, the
Default=300 secs for
an unconfigured
remote node. 0 secs
means the remote
node will never be
automatically
disconnected.
Prestige and this remote node. When set to
Allocated Budget
outgoing call budget control.
your remote node here. Please see later for a full
discussion on schedules.
this remote node a nailed-up connection. See below for
more details.
25 cents every 3 minutes – then 3 minutes is the toll
period. The minimum toll period is 5 seconds.
Use the space bar to toggle this field to
[Enter] to open Menu 11.5 to edit the filter sets. See the
Remote Node Filter section for more details.
This value specifies the number of idle seconds
that elapses before the remote node is
automatically disconnected. Idle seconds is the
period of time when no data is transmitted from
your Prestige. Administrative packets such as
RIP are not counted as data. The default is 300
seconds (5 minutes). This option only applies
when the Prestige initiates the call
and
Period
do not apply.
.
Default = 0
64k/
Leased
Yes/No
Default=
No
Once you have completed filling in Menu 11.1.1 – Remote Node Profile, press [Enter] at the message
[Press ENTER to Confirm…] to save your configuration, or press [Esc] at any time to cancel.
5.1.3 Outgoing Authentication Protocol
Generally speaking, you should employ the strongest authentication protocol possible, for obvious reasons.
However, some vendor’s implementation includes specific authentication protocol in the user profile. It
will disconnect if the negotiated protocol is different from that in the user profile, even when the negotiated
protocol is stronger than specified. If you encounter the case where the peer disconnects right after a
Remote Node Configuration5-5
Page 76
P100IH ISDN Router
successful authentication, please make sure that you specify the correct authentication protocol when
connecting to such an implementation.
5.1.4 PPP Multilink
The Prestige uses the PPP Multilink Protocol (PPP/MP) to bundle multiple links in a single connection to
boost the effective throughput between two nodes.
Due to the fragmentation/reconstruction overhead associated with MP, you may not get a linear increase in
throughput when a link is added.
The number of links in an MP bundle can be statically configured, or dynamically determined at runtime, as
explained in the following section.
5.1.5 Bandwidth on Demand
The Bandwidth on Demand (BOD) feature adds or subtracts links dynamically according to traffic demand.
After the initial call, the Prestige uses BAP (Bandwidth Allocation Protocol) to ask the peer for additional
telephone number if BACP (Bandwidth Allocation Control Protocol) is negotiated. Otherwise, the Prestige
uses the statically configured (primary and secondary) telephone numbers of the remote node.
The configuration of bandwidth on demand focuses on the Base Transmission Rate (BTR) and the
Maximum Transmission Rate (MTR). The relationship between BTR and MTR are shown below:
Table 5-2 BTR v MTR for BOD
BTR & MTR SettingNo. of
channel(s)
used
BTR = 64, MTR = 6411Off
BTR = 64, MTR = 12812On
BTR = 128, MTR = 12822Off
Max No. of
channel(s)
used
Bandwidth
on demand
When bandwidth on demand is enabled, a second channel will be brought up if traffic on the initial channel
is higher than the high
Target Utility
the second channel will be dropped if the traffic level falls below the low
than the
The
Target Utility
Subtract Persist
value.
specifies the line utilization range at which you want the Prestige to add or subtract
number for longer than the specified
Add Persist
Target Utility
value. Similarly,
number for longer
bandwidth. The range is 30 to 64 Kbps (kilobits per second). The parameters are separated by a ‘-’. For
example, ‘30-60’ means the add threshold is 30 Kbps and subtract threshold is 60 Kbps. The Prestige
performs bandwidth on demand only if it initiates the call. Addition and subtraction are based on the value
set in the
BOD Calculation
direction will be included to determine if a link should be added or dropped.
field. If this field is set to
Transmit or Receive
, then traffic in either
Transmit
will only use
5-6Remote Node Configuration
Page 77
P100IH ISDN Router
outgoing traffic to make this determination and
Receive
will only use incoming traffic to make this
determination.
If, after making the call to bring up a second channel, the second channel does not succeed in joining the
Multilink Protocol bundle (because the remote device does not recognize the second call as coming from
the same device), the Prestige will hang up the second call and continue with the first channel alone.
The BOD configuration is through Menu 11.2 - Remote Node PPP Options.
5.1.6 Editing PPP Options
To edit the remote node PPP Options, move the cursor to the
Remote Node Profile, and use the space bar to select
Yes
. Press
below.
Menu 11.2 - Remote Node PPP Options
Encapsulation= Standard PPP
Compression= No
Multiple Link Options:
Base Trans Rate(Kbps)= 64
Max Trans Rate(Kbps)= 64
The following table describes the Remote Node PPP Options Menu, and contains instructions on how to
configure the PPP options fields.
Remote Node Configuration5-7
Page 78
P100IH ISDN Router
Table 5-3 Remote Node PPP Options Menu Fields
FieldDescriptionOption
EncapsulationSelect the CISCO PPP only when this remote node
is a Cisco machine; otherwise, select the Standard
PPP.
CompressionTurn on/off Stac Compression. The default for this
Off
field is
Multiple Link Options:
BOD CalculationSelect the direction of the traffic you wish to use in
determining when to add or subtract a link. The
default for this field is
Base Trans RateSelect the base data transfer rate for this remote
node in Kbps. There are two choices for this field-
64
two channels are used as soon as a packet triggers
a call
Max Trans RateEnter the maximum data transfer rate allowed for
this remote node. This parameter is in kilobits per
second. There are two choices for this field- same
as above.
Target Utility (Kbps)Enter the two thresholds separated by a [-] for
subtracting and adding the second port.
Add PersistThis parameter specifies the number of seconds
where traffic is above the adding threshold before
the Prestige will bring up the second link.
Subtract PersistThis parameter specifies the number of seconds
where traffic is below the subtraction threshold
before your Prestige drops the second link.
Once you have completed filling in Menu 11.2 – Remote Node PPP Options, press [Enter] at the
message [Press ENTER to Confirm…] to save your configuration, or press [Esc] at any time to
cancel.
.
Transmit or Receive
where only one channel is used or
128
.
where
Standard
PPP
CISCO
PPP
On/Off
(Default =
Off
Default =
Transmit or
Receive
64/128
64/128
Default=10-
20
Default = 5
sec
Default = 5
sec
)
5-8Remote Node Configuration
Page 79
P100IH ISDN Router
5.1.7 Remote Node Filter
Use Menu 11.5 – Remote Node Filter
to specify the filter set(s) to apply to the incoming and outgoing
traffic between this remote node and the Prestige and to prevent certain packets from triggering calls. You
can specify up to 4 filter sets separated by comma, e.g., 1, 5, 9, 12, in each
Note that spaces are accepted in this field. For more information on defining the filters,
filter
field.
see Chapter 9:
.
The Prestige comes with a prepackaged filter set, NetBIOS_WAN, that blocks NetBIOS packets (call
protocol filter = 1). You can include this in the call filter sets if you wish to prevent NetBIOS packets from
triggering calls to a remote node.
This chapter shows you how to configure the TCP/IP parameters of a remote node. A typical LAN-to-LAN
application is to use your Prestige to connect a branch office to the headquarters, as depicted in the
following diagram.
6.1 LAN-to-LAN Application
Figure 6-1 TCP/IP LAN-to-LAN Application
For the branch office, you need to configure a remote node in order to dial out to the headquarters.
Additionally, you may also need to define static routes if some services reside beyond the immediate
remote LAN.
Remote Node TCP/IP Configuration6-1
Page 82
P100IH ISDN Router
6.1.1 Remote Node Setup
Follow the procedure below to configure the TCP/IP parameters in Menu 11 - Remote Node Profile.
Follow the steps below to edit Menu 11.3 - Remote Node Network Layer Options shown below.
Move the cursor to the
[Enter]
to open Menu 11.3 - Network Layer Options.
IP Options:
Rem IP Addr: 0.0.0.0
Rem Subnet Mask= 0.0.0.0
My WAN Addr= 0.0.0.0
NAT= None
Address Mapping Set= N/A
Metric= 2
Private= No
RIP Direction= Both
Version= RIP-2B
field, then press the space bar to toggle and set the value to
Edit IP
Menu 11.3 - Remote Node Network Layer Options
Enter here to CONFIRM or ESC to CANCEL:
Yes
Figure 6-2 Menu 11.3- Remote Node TCP/IP Options
The following diagram explains the Sample IP Addresses to help you to understand the field of
in Menu 11.3.
Addr
. Press
My Wan
6-2Remote Node TCP/IP Configuration
Page 83
P100IH ISDN Router
Figure 6-3 Sample IP Addresses for a TCPI/IP LAN-to-LAN Connection
To configure the TCP/IP parameters of a remote node, first configure the two fields in
Node Profile,
as shown in the table below.
Menu 11 – Remote
Table 6-1 TCP/IP related fields in Remote Node Profile
FieldDescriptionOption
Rem IP Address
Edit IP
Enter the IP address of the remote gateway in
Remote Node Profile
Prestige WAN IP address or the remote Prestige LAN IP
address. This depends on the remote router’s WAN IP i.e., for
the (remote) Prestige, the
For example (see
172.16.0.2 (the remote router’s WAN IP), then you should
enter 172.16.0.2 in the
WAN IP is 0.0.0.0, then enter 192.168.1.1(the remote router’s
LAN IP) in the
Press the space bar to select
Menu 11.3 - Remote Node Network Layer Options
. You must fill in either the remote
My WAN Addr
Figure 6-3
Rem IP Address
), if the remote WAN IP is set to
Rem IP Address
The following table shows the TCP/IP related fields in
Options
.
field).
Yes
and press
Menu 11.3 - Remote Node Network Layer
Menu 11.1 -
settings in
field. If the remote
Enter
Menu 4
to go to
menu.
.
Yes
Yes/No
(
)
Remote Node TCP/IP Configuration6-3
Page 84
P100IH ISDN Router
Table 6-2 TCP/IP Remote Node Configuration
Rem IP AddressThis will show the IP address you entered for this remote node
in the previous menu.
Rem IP Subnet
Mask
My WAN Addr
NATChoose from None, Full Feature or SUA Only. See Chapter 4:
Address Mapping
MetricThe metric represents the “cost” of transmission for routing
PrivateThis parameter determines if the Prestige will include the route
Enter the subnet mask for the remote network.
Some implementations, especially the UNIX derivatives, require the
WAN link to have a separate IP network number from the LAN and
each end must have a unique address within the WAN network
number. If this is the case, enter the IP address assigned to the WAN
port of your Prestige.
Note that this is the address assigned to your local Prestige
WAN, not the remote router. If the remote router is a Prestige,
then this entry determines the local Prestige
in menu 11.1 (see
for a full discussion of this new feature.
Set=
A NAT Server Set is a list of LAN side servers mapped to
external ports (similar to the old SUA menu 15.1 before). You
may enter any server set number up to 10, but the first one is
used foe SUA only.
purposes. IP routing uses hop count as the measurement of
cost, with a minimum of 1 for directly connected networks.
Enter a number that approximates the cost for this link. The
number need not be precise, but it must be between 1 and 15.
In practice, 2 or 3 is usually a good number.
to this remote node in its RIP broadcasts. If set to
route is kept private and not included in RIP broadcast. If No,
the route to this remote node will be propagated to other hosts
through RIP broadcasts.
Table 6-1
).
Rem IP Address
Yes
, this
1
15
to
Yes/No
RIP
Version=
Press the space bar to select the
Only/Out Only
Press the space bar to select the RIP version from
2B/RIP-2M.
.
RIP direction
from
RIP-1/RIP-
Both/In
(Default=
RIP-1
(default)
Both
6-4Remote Node TCP/IP Configuration
)
Page 85
P100IH ISDN Router
Once you have completed filling in the Network Layer Options Menu, press [Enter] to return to Menu
11. Press [Enter] at the message [Press ENTER to Confirm...] to save your configuration, or press
[Esc] at any time to cancel.
6.1.2 Static Route Setup
Static routes tell the Prestige routing information that it cannot learn automatically through other means.
This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is
directly connected to a remote node.
Each remote node specifies only the network to which the gateway is directly connected, and the Prestige
has no knowledge of the networks beyond. For instance, the Prestige knows about network N2 in the
following diagram through remote node Router 1. However, the Prestige is unable to route a packet to
network N3 because it doesn’t know that there is a route through remote node Router 2. The static routes
are for you to tell the Prestige about the networks beyond the remote nodes.
Figure 6-4 Example of Static Routing Topology
To configure an IP static route, use Menu 12, Static Route Setup, as displayed below.
From Menu 12, select one of the available IP static routes to open Menu 12.1 - IP Static Route Setup, as
shown below.
Remote Node TCP/IP Configuration6-5
Page 86
Menu 12 - IP Static Route Setup
1. ________
2. ________
3. ________
4. ________
5. ________
6. ________
7. ________
8. ________
Enter selection number:
Figure 6-5 Menu 12.1 - IP Static Route Setup
Choosing a static route to edit produces the following screen.
Menu 12.1 - Edit IP Static Route
Route #: 1
Route Name= ?
Active= No
Destination IP Address= ?
IP Subnet Mask= ?
Gateway IP Address= ?
Metric= 2
Private= No
Press ENTER to Confirm or ESC to Cancel:
P100IH ISDN Router
Figure 6-6Edit IP Static Route
6-6Remote Node TCP/IP Configuration
Page 87
P100IH ISDN Router
The following table describes the fields for
Menu 12.1.1 – Edit IP Static Route Setup
.
Table 6-3 Edit IP Static Route Menu Fields
FieldDescription
Route NameEnter a descriptive name for this route. This is for identification purpose only.
ActiveThis field allows you to activate/deactivate this static route.
Destination IP AddressThis parameter specifies the IP network address of the final destination.
Routing is always based on network number. If you need to specify a route to a
single host, use a subnet mask of 255.255.255.255 in the subnet mask field to
force the network number to be identical to the host ID.
IP Subnet Mask
Gateway IP Address
MetricSame meaning as those in the Remote Node Setup.
PrivateSame meaning as those in the Remote Node Setup.
Enter the subnet mask for this destination. Follow the discussion on IP subnet
mask in this chapter.
Enter the IP address of the gateway. The gateway is an immediate neighbor of
your Prestige that will forward the packet to the destination. On the LAN, the
gateway must be a router on the same segment as your Prestige; over WAN,
the gateway must be the IP address of one of the remote nodes.
Remote Node TCP/IP Configuration6-7
Page 88
Page 89
P100IH ISDN Router
Chapter 7:
Dial-in Server Configuration
You can configure your Prestige to receive calls from remote dial-in users, e.g., telecommuters, as well as
remote nodes. There are several differences between dial-in users and remote nodes, as summarized in the
table below.
Your Prestige will only answer calls from remote
dial-in users; it will not make calls to them.
All remote dial-in users share one common set of
parameters, as defined in the Default Dial In Setup
(Menu 13).
This chapter discusses how to setup default dial-in parameters for both remote node and remote dial-in
users. The following sections give two examples of how your Prestige can be configured as a dial-in server.
Your Prestige can make calls to and receive calls
from the remote node.
Each remote node can have its own set of
parameters such as Bandwidth On Demand.
Dial-In Server Configuration7-1
Page 90
P100IH ISDN Router
7.1 Remote Access Server
Telecommuting enables people to work at remote sites and yet still have access to the resources in the
business office. Typically, a telecommuter will use a client workstation with TCP/IP and dial-out
capabilities, e.g., a Windows PC or a Macintosh. For telecommuters to call in to your Prestige, you need to
configure a dial-in user profile for each telecommuter. Additionally, you need to configure the Default DialIn Setup to set the operational parameters for all dial-in users.
An example of remote access server for telecommuters is shown in
Figure 7-1 Example of Telecommuting LAN-to-LAN Server Application
Your Prestige can also be used as a dial-in server for LAN-to-LAN application to provide access for the
workstations on a remote network. For your Prestige to be set up as a LAN-to-LAN server, you need to
configure the Default Dial-In Setup to set the operational parameters for incoming calls. Additionally, you
must create a remote node for the router on the remote network (
An example of your Prestige being used as a LAN-to-LAN server is shown next.
7-2Dial-In Server Configuration
see Chapter 5:
).
Page 91
P100IH ISDN Router
Figure 7-2 Example of a LAN-to-LAN Server Application
7.2 Default Dial-In Setup
This section covers the default dial-in parameters. The parameters in Menu 13 affect incoming calls from
both remote dial-in users, and remote nodes until authentication is completed. Once authentication is
completed and if it matches a remote node, your Prestige will use parameters from that particular remote
node.
7.2.1 CLID Callback Support For Dial-In Users
CLID is an authentication method to identify a dial-in user. CLID callback is used as an ISDN toll saving
feature because the call can be disconnected immediately without picking up the phone. In previous ZyNOS
versions, only the remote node was capable of CLID callback because there was no outgoing information
for dial-in users. Some vendors, e.g., Cisco, require mutual authentication, i.e., the node that initiates the
call will request a user name and password from the far end that it is dialing to. If the remote node requires
mutual authentication, please fill in the
fields when a dial-in user to whom we are calling back requests authentication. In this ZyNOS version, the
CLID outgoing information will be set in Menu 13, and dial-in users can avail of callback.
Dial-In Server Configuration7-3
O/G Login
and
O/G Password
fields. You must also fill in these
Page 92
Menu 13 - Default Dial-in Setup
Telco Options:
CLID Authen= None
PPP Options:
Recv Authen= CHAP/PAP
Compression= Yes
Mutual Authen= No
O/G Login= p100ih
O/G Password= ********
Multiple Link Options:
Max Trans Rate= 128
Callback Budget Management:
Allocated Budget(min)=
Period(hr)=
IP Address Supplied By:
Dial-in User= Yes
IP Pool= No
IP Start Addr= N/A
IP Count(1,2)= N/A
Session Options:
Edit Filter Sets= No
P100IH ISDN Router
Press Space Bar to Toggle.
Press ENTER to CONFIRM or ESC to CANCEL:
Figure 7-3 Menu 13 – Default Dial-in Setup
From the Main Menu, enter 13 to go to Menu 13 – Default Dial-in Setup. This section describes how to
configure the protocol-independent fields in this menu. For the protocol-dependent fields, refer to the
appropriate chapters.
The table below describes and contains information on how to configure each parameter in Menu 13 –
Default Dial-in Setup.
Table 7-2 Default Dial-in Setup Fields
FieldDescriptionOptions
Telco Options: CLID
Authen
PPP Options:
This field sets the CLID authentication parameter for all
incoming calls. There are three options for this field:
None
z
z
- No CLID is required.
Required
– CLID must be available, or the Prestige
will not answer the call.
Preferred
z
- If the CLID is available then CLID will
be used; otherwise, authentication is performed in
PPP negotiation.
None
Required
Preferred
7-4Dial-In Server Configuration
Page 93
P100IH ISDN Router
Recv. AuthenThis field sets the authentication protocol for incoming
CompressionTurn on/off Stac Compression. The default for this field
O/G LoginEnter in the login name to be used to respond to the
O/G PasswordEnter in the outgoing password to be used to respond to
calls. For security reason, setting authentication to none
is strongly discouraged. Options for this field are:
CHAP/PAP
z
PAP will be used if CHAP is not available.
CHAP
z
PAP
z
None
z
first, but no authentication is required if CHAP/PAP
is not available.
Off
is
.
authentication, i.e., the node that initiates the call will
request a user name and password from the far end that
it is dialing to. If the remote node requires mutual
authentication, set this field to
peer’s authentication request.
the peer’s authentication request.
- Your Prestige will try CHAP first, but
– Use CHAP only.
– Use PAP only.
– Your Prestige tries to acquire CHAP/PAP
Yes
.
CHAP/PAP
CHAP
PAP
None
On
Off
Yes/No
Multiple Link Options:
Max Trans Rate Enter the maximum data transfer rate between your
Prestige and the remote dial-in user. 64 - At most, one B
128
- A maximum of two channels can
Callback Budget
Management:
Allocated Budget (min
Period (hr)This field sets the time interval to reset the above
channel is used.
be used. When the Prestige calls back to the remote
dial-in user, the maximum data transfer rate is always
64.
This field sets the budget callback time for all the remote
)
dial-in users. The default for this field is 0 for no budget
control.
callback budget control.
64/128
Default =
0
Dial-In Server Configuration7-5
Page 94
IP Address Supplied By:
P100IH ISDN Router
Dial-in User
IP PoolThis field tells your Prestige to provide the remote host
IP Pool: IP Start Addr
IP Count (1,2)
Session Options:
Edit Filter Sets
If set to
specify its own IP address.
If set to No, the remote host must use the IP address
assigned by your Prestige from the IP pool, configured
below. This is to prevent the remote host from using an
invalid IP address and potentially disrupting the whole
network.
with an IP address from the pool. This field is required if
Dial-In IP Address Supplied By: Dial-in User
No
to
address if the remote peer specifies one; otherwise, an
IP address is assigned from the pool.
This field is applicable only if you selected
Dial-In IP Address Supplied By: IP Pool field.
The IP pool contains contiguous IP addresses and this
field specifies the first one in the pool.
In this field, enter the number (1 or 2,) of addresses in
the IP Pool. For example, if the starting address is
192.168.135.5 and the count is 2, then the pool will have
192.68.135.5 and 192.68.135.6
Press
mind that the filter set(s) will only apply to remote dial-in
users but not the remote nodes.
Note that spaces and [-] symbol, are accepted in this
field. For more information on customizing your filter
sets, see Chapter 8 - Filter Configuration. The default is
blank, i.e., no filters.
Yes
, the Prestige will allow a remote host to
is set to
. You can configure this field even if Dial-in User is set
Yes
, in which case your Prestige will accept the IP
Yes
in the
Yes,
then [Enter] to edit the filter sets. Keep in
(Default =
(Default = No)
Default =
Yes
Yes/No
Yes/No
1, 2
No
)
Once you have completed filling in Menu 13 - Default Dial-in Setup, press [Enter] at the message [Press
ENTER to Confirm…] to save your configuration, or press [Esc] at any time to cancel.
7.2.2 Default Dial-in Filter
Use Menu 13.1 – Default Dial-in Filter
traffic between all dial-in users and your Prestige. Note that the filter set(s) only applies to the dial-in users
7-6Dial-In Server Configuration
to specify the filter set(s) to apply to the incoming and outgoing
Page 95
P100IH ISDN Router
but not the remote nodes. You can specify up to 4 filter sets separated by comma, e.g., 1, 5, 9, 12, in each
field. The default is no filters.
filter
Spaces are accepted in this field. For more information on defining the filters,
The following steps describe the setup procedure for setting up a remote dial-in user.
Step 1.
From the Main Menu, enter option 14 to go to Menu 14 - Dial-in User Setup, as shown in the
next figure.
Dial-In Server Configuration7-7
Page 96
Menu 14 - Dial-in User Setup
1. johndoe
2. ________
3. ________
4. ________
5. ________
6. ________
7. ________
8. ________
Enter Menu Selection Number:
Figure 7-5 Menu 14 - Dial-in User Setup
P100IH ISDN Router
Step 2.
Select one of the users by number, this will bring you to
shown below.
Menu 14.1 - Edit Dial-in User
User Name= ?
Active= Yes
Password= ?
Callback= No
Phone # Supplied by Caller= N/A
Callback Phone #= N/A
Rem CLID=
Idle Timeout= 300
Press ENTER to Confirm or ESC to Cancel:
Figure 7-6 Edit Dial-in User
Menu 14.1 - Edit Dial-in User
, as
7-8Dial-In Server Configuration
Page 97
P100IH ISDN Router
The following table provides instructions on how to fill in the Edit Dial-In User fields.
Table 7-3 Edit Dial-in User Menu Fields
FieldDescriptionOption
User
Name
Active
PasswordEnter the password for the remote dial-in user.
CallbackThis field determines if your Prestige will allow call back to this user upon
Phone #
Supplied
by Caller
This is a required field. This will be used as the login name for authentication.
Choose a descriptive word for login, for example, [johndoe].
You can disallow dial-in access to this user by setting this field to
Inactive users are displayed with a [-] (minus sign) at the beginning of the
name in Menu 14.
dial-in. If this option is enabled, your Prestige will call back to the user if
requested. In such a case, your Prestige will disconnect the initial call from
this user and dial back to the specified callback number (see below).
No
z
z
z
This option allows the user to specify the call back telephone number on a
call-by-call basis. This is useful when your Prestige returns a call back to a
mobile user at different numbers, e.g., a sales rep., in a hotel.
z If the setting is
z The default is No, i.e., your Prestige always calls back to the fixed
- The default is no callback.
Optional
Mandatory
callback number of his/her choice.
callback number.
- The user can choose to disable callback.
- The user can not disable callback.
Yes
, the user can specify and send to the Prestige the
Inactive
.
Active
Inactive
Default=
Mandatory
Default=
No
No
Optional
No
Yes
No
Callback
Phone #
If
N/A
a
will appear in the field. Enter the telephone number to which your
Prestige will call back.
is No, then this is a required field. Otherwise,
Phone # Supplied by Caller
Dial-In Server Configuration7-9
Page 98
P100IH ISDN Router
Table 7-4 Edit Dial-in User Menu Fields (continued)
FieldDescriptionOption
Rem CLIDIf you enable CLID Authen field in Menu 13, then you need to specify the
telephone number from which this user calls. Your Prestige will check the
CLID in the incoming call against the CLIDs in the database. If they do not
match and CLID Authen is Required, your Prestige will not answer the call.
Idle Timeout
Once you have completed filling in Menu 14.1 - Edit Dial-in User, press [Enter] at the message [Press
ENTER to Confirm…] to save your configuration, or press [Esc] at any time to cancel.
Enter the idle time (in seconds). This time-out determines how long the dial-in
user can be idle before your Prestige disconnects the call when the Prestige
is calling back.
Idle time is defined as the period of time where there is no data traffic
between the dial-in user and your Prestige. The default is 300 seconds (5
minutes).
Default=300
seconds
7.3.1 CLID Authentication
CLID (Calling Line IDentification) authentication affords you the security of limiting a user to only initiate
connections from a fixed location. The Prestige uses the caller ID sent by the switch to match against the
CLIDs in the database. Please note that for CLID authentication to work on the Prestige, your telephone
company must support caller ID.
7.3.2 Callback
Callback serves two purposes. One is security. When set to callback to a fixed number, an intruder will not
gain access to your network even if he/she stole the password from your user, because the Prestige always
calls back to the pre-configured number.
The other is ease of accounting. For instance, your company pays for the connection charges for
telecommuting employees and you use your Prestige as the dial in server. When you turn on the callback
option for the dial-in users, all usage is charged to the company instead of the employees, and your
accounting department can avoid the hassles of accountability and reimbursement.
7-10Dial-In Server Configuration
Page 99
P100IH ISDN Router
Chapter 8:
Advanced Phone Services
The Prestige 100 and 100IH support a comprehensive set of advanced calling features known as
Supplemental Services. European and North American ISDN Supplemental Services may vary and have
different naming conventions that can be generalized as follows. Please check with your telephone
company for the services it offers.
Table 8-1 Supplemental Services by region
EuropeNorth America
Call Waiting
Call Hold
Call Retrieve
Three Party ConferenceFlexible Calling (FC)Conference
Call
Forwarding
Call Forwarding Unconditional (CFU)
Call Forwarding Busy (CFB)
Call Forwarding No Reply (CFNR)
Additional Call Offering
(ACO)
Call Forwarding
Reminder Ring
Call Waiting
Call Hold
Call Retrieve
Drop
Transfer
Advanced Phone Services8-1
Page 100
Table 8-2 Supplemental Services by switch type.
Feature:US
P100IH ISDN Router
g
DSS-11TR6
Call Waiting/Call Hold/Call
Retrieve
Three Way Calling
(Conference/Transfer/Drop)
Call Forwarding
Reminder Ring
>>
>>
>>
>
××
×
×
×
8.1 Getting Started
8.1.1 Things you need to know before you start using Supplemental
Services.
In North America, Additional Call Offering (ACO) is required on your ISDN line in order to use the
♦
Call Waiting feature. Flexible Calling is required on your ISDN line in order to use the Three-WayCalling or Call Transfer features. You need to check with your telephone company to confirm if these
services are available to you and if so, are there any additional charges for them.
In some cases, your telephone company may only enable these features on your first directory (phone)
♦
number. In this case, you may want to request that the features be enabled on your second directory
number as well.
8.2 Setting Up Supplemental Phone Service
All Supplemental Phone Services are enabled by default except for Call Waiting, which is disabled by
default but can be enabled in
Menu 2.1- ISDN Advanced Setup.
ID, also in this menu decides whether the other party can see your number when you call. If set to
default), the Prestige sends the caller ID and the party you call can see your number, otherwise if set to
(
Disable
, the caller ID is blocked.
The
Calling Line Indication
, or Caller
Enable
8.3 The Flash Key
Flashing means to press the hook for a short period of time (a few hundred milliseconds) before releasing it.
On newer telephones, there should be a “flash” key (button) that generates the signal electronically. If the
flash key is not available, you can tap (press and immediately release) the hook by hand to achieve the same
g
“US” refers to a broad range of switch types supported in the USA.
8-2Advanced Phone Services
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.