system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic,
optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications
Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Neither does it convey any license under its patent rights nor the patents rights of others. ZyXEL further reserves the
right to make changes in any products described herein without notice. This publication is subject to change without
notice.
Trademarks
Trademarks mentioned in this publication are used for identification purposes only and may be properties of their
respective owners.
ii
Prestige 153/153X WAN Bridge/Routers
Federal Communications Commission (FCC) Interference Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions:
1. This device may not cause harmful interference.
2. This device must accept any interference received, including interference that may cause undesired operations.
This equipment has been tested and found to comply with the limits for a CLASS B digital device pursuant to Part 15 of
the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial
environment. This equipment generates, uses, and can radiate radio frequency energy, and if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be determined by turning the
equipment off and on, the user is encouraged to try to correct the interference by one or more of the following
measures:
1. Reorient or relocate the receiving antenna.
2. Increase the separation between the equipment and the receiver.
3. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
4. Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance could void the user's
authority to operate the equipment.
Notice 2
Shielded RS-232 cables are required to be used to ensure compliance with FCC Part 15, and it is the responsibility of
the user to provide and use shielded RS-232 cables.
FCC Interference Statementiii
Prestige 153/153X WAN Bridge/Routers
Information for Canadian Users
The Industry Canada label identifies certified equipment. This certification means that the equipment meets certain
telecommunications network protective, operation, and safety requirements. The Industry Canada does not guarantee
that the equipment will operate to a user's satisfaction.
Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local
telecommunications company. The equipment must also be installed using an acceptable method of connection. In some
cases, the company's inside wiring associated with a single line individual service may be extended by means of a
certified connector assembly. The customer should be aware that the compliance with the above conditions may not
prevent degradation of service in some situations.
Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated by the
supplier. Any repairs or alterations made by the user to this equipment, or equipment malfunctions, may give the
telecommunications company cause to request the user to disconnect the equipment.
For their own protection, users should ensure that the electrical ground connections of the power utility, telephone lines,
and internal metallic water pipe system, if present, are connected together. This precaution may be particularly
important in rural areas.
Caution
Users should not attempt to make such connections themselves, but should contact the appropriate electrical inspection
authority, or electrician, as appropriate.
Note
This digital apparatus does not exceed the class A limits for radio noise emissions from digital apparatus set out in the
radio interference regulations of Industry Canada.
ivInformation for Canadian Users
Prestige 153/153X WAN Bridge/Routers
The declarations of CE marking
The Prestige 153 and Prestige 153X have been approved for connection to the Public Switched Telecommunication
Network using interfaces compatible with ITU-TSS recommendation I.420 (Basic Rate ISDN user access). The
Prestige 153 and Prestige 153X comply with the following directives:
1. The Council Directive 72/23/EEC of 19 February 1973 on the harmonization of the laws of the Member States
relating to electrical equipment designed for use within certain voltage limits. (The Low Voltage Directive)
2. The Council Directive 89/336/EEC of 3 May 1992 on the approximation of the laws of the Member States
relating to Electro Magnetic Compatibility. (EMC Directive)
3. Council Directive 91/263/EEC of 29 April 1991 on the approximation of the laws of the Member States
concerning telecommunication terminal equipment. (The Telecom Terminal Equipment Directive)
4. 93/68/EEC of 22 July 1993 amending the Directives 89/336/EEC, 91/263 /EEC and 92/31/EEC. (Marking
Directive)
5. The Council Directive 92/31/EEC of 28 April 1992 amending directive on the approximation of the laws of the
Member States relating to Electro-Magnetic Compatibility.
Declarations of CE Markingv
Prestige 153/153X WAN Bridge/Routers
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or
workmanship for a period of up to two (2) years from the date of purchase. During the warranty period, and upon proof
of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at
its discretion, repair or replace the defective products or components without charge for either parts or labor, and to
whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any
replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be solely
at the discretion of ZyXEL. This warranty shall not apply if the product is modified, misused, tampered with, damaged
by an act of God, or subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in
lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a
particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind of
character to the purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center; refer to the separate Warranty Card for your
Return Material Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended that the
unit be insured when shipped. Any returned products without proof of purchase or those with an out-dated warranty will
be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts and labor. All repaired or
replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid (USA and territories
only). If the customer desires some other return destination beyond the U.S. borders, the customer shall bear the cost of
the return shipment. This warranty gives you specific legal rights, and you may also have other rights which vary from
state to state.
viZyXEL Limited Warranty
Prestige 153/153X WAN Bridge/Routers
Customer Support
If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation
offices worldwide, in one of the following ways:
North America
ZyXEL Communications Inc.
4920 E. La Palma Avenue
Anaheim, CA 92807
USA
Telephone: (714) 693-0808 (call between 8:00 AM and 5:00 PM PST)
Facsimile: (714) 693-8811
E-mail: - Sales Inquiries: sales@zyxel.com
- Technical Support: support@zyxel.com
Worldwide Support
ZyXEL Communications Corporation
6, Innovation Road II, Science-Based Industrial Park
Hsinchu, Taiwan 300, R.O.C.
Telephone: 886-3-578-3942Ext.: 266 (call between 8:00 AM and 5:00 PM [Taiwan time GMT+8:00])
Facsimile: 886-3-578-2439
E-mail: - Sales Inquiries: sales@zyxel.com.tw
- Technical Support: support@zyxel.com.tw
Product Information
For product information, visit our site on the World Wide Web : http://www.zyxel.com.
FTP Information
Information such as ZyXEL software and ROM updates is available for download at these FTP addresses:
North America: ftp.zyxel.com
Europe: ftp.zyxel.co.at
Customer Supportvii
Prestige 153/153X WAN Bridge/Routers
Table of Contents
Table of Contents.................................................................................................................ix
List of Figures....................................................................................................................xiii
List of Tables .................................................................................................................... xvii
Table 8-3. Edit Dial-in User Menu Fields .............................................................................8-9
Table 9-1. Abbreviations Used in the Filter Rules Summary Menu ........................................9-4
Table 9-2. Abbreviations Used If Filter Type Is IP .................................................................9-5
List of Tablesxvii
Prestige 153/153X WAN Bridge/Routers
Table 9-3. Abbreviations Used If Filter Type Is IPX.............................................................. 9-6
Table 9-4. Abbreviations Used If Filter Type Is GEN............................................................ 9-6
Table 9-5. TCP/IP Filter Rule Menu Fields ..........................................................................9-8
Table 9-6. Generic Filter Rule Menu Fields .......................................................................9-11
Table 9-7. IPX Filter Rule Menu Fields ..............................................................................9-13
Table 10-1.SNMP Configuration Menu Fields.................................................................. 10-2
Table 11 -1.System Security - External Server Menu Fields ..............................................11-5
Table 13-1.System Maintenance - Status Menu Fields .....................................................13-3
Table 13-2.System Maintenance Menu Syslog Parameters.............................................. 13-7
Table 13-3.System Maintenance Menu Diagnostic Test Options.....................................13-10
Table 14-1.Troubleshooting the Start-Up of your Prestige ................................................ 14-1
Table 14-2.Troubleshooting a WAN Port Connection .......................................................14-2
Table 14-3.Troubleshooting the LAN Interface................................................................. 14-2
Table 14-4.Troubleshooting a Connection to a Remote Node or ISP ................................. 14-3
Table 14-5.Troubleshooting for Remote User to Dial-in.................................................... 14-4
xviiiList of Tables
Prestige 153/153X WAN Bridge/Routers
Preface
About Your Bridge/Router
The Prestige 153/153X is a high-performance bridge/router that offers a complete solution for
your WAN applications such as Internet access, multi-protocol LAN-to-LAN connections,
telecommuting and remote access.
The Prestige 153/153X is a universal router that can connect over PSTN (Public Switch
Telephone Network) and ISDN (Integrated Service Digital Network) lines. The Prestige153/153X supports multi-protocol routing and transparent bridging.
About This User's Manual
This user's manual covers the operations of your Prestige 153 and Prestige 153X. All functions of
the Prestige are software configurable via either the SMT (System Management Terminal)
Interface or the Java-based Prestige Web Configurator (PWC). This manual concentrates on
configuration via the SMT; for details information on PWC, please refer to the Prestige Web
Configuration User’s Manual
This manual consists of fourteen chapters to guide you through a correct configuration of your
Prestige 153/153X depending on your particular application.
For brevity’s sake, we will use “e.g.” as a shorthand for “for example” and “i.e.” for “that is” or
“in other words” throughout this manual.
Prefacexix
Prestige 153/153X WAN Bridge/Routers
Structure of this Manual
This manual is divided into five parts:
Step 1. Getting Started (Chapters 1-2), is structured as a step-by-step guide to help you
connect, install and setup your Prestige 153/153X to operate on your network.
Step 2. The Internet (Chapter 3), describes how to configure your Prestige 153/153X to
connect to the Internet.
Step 3. Setting Up Advanced Applications (Chapters 4-8), describes how to use your
Prestige for more advanced applications such as Telecommuting and LAN-to-LAN in TCP/IP,
Novell IPX, and Bridging environments.
Step 4. Management & Maintenance (Chapters 9-13), provides information on access
control and logging features for network administrators.
Step 5. Troubleshooting (Chapter 14), provides information about solving common
problems.
Regardless of your particular application, it is important that you follow the steps outlined in
Chapters 1-2 to correctly connect your Prestige 153/153X to your LAN. You can then refer the
appropriate chapters of the manual depending on which applications you wish to use.
xxPreface
Prestige 153/153X WAN Bridge/Routers
Chapter 1
Getting to Know Your Bridge/Router
This chapter describes the key features and applications of your Prestige 153/153X WAN
Bridge/Router.
1.1 Prestige 153/153X WAN Bridge Routers
Congratulations on the purchase of your ZyXEL Prestige 153/153X Remote Access Router. Your
Prestige integrates the routing and bridging functions in a single package, and is ideal for
everything from Internet browsing to receiving calls from telecommuters to making LAN-to-LAN
connections to remote networks.
Both Prestige 153 and 153X are equipped with three WAN (Wide Area Network) ports that can be
connected to the PSTN (Public Switched Telephone Network) via modems or to the ISDN
(Integrated Service Digital Network) via TAs (Terminal Adapters).
In addition, the Prestige 153X supports synchronous mode on two of the WAN ports, allowing it
to connect to FT1/FE1 (Fractional T1/E1) leased lines via CSU/DSUs (Channel Service Unit/Data
Service Units).
1.2 Features of Prestige 153/153X
The following are the key features of the P153/P153X.
• Multiple WAN Ports
Your Prestige 153 features three WAN ports (WAN-1, 2 and 3). Each WAN port can be connected
to a dial-up/leased line modem or to an ISDN TA (Terminal Adapter). The WAN ports can be
used independently, or they can be bundled to support PPP Multilink Protocol (PPP/MP) to boost
bandwidth.
Two of the WAN ports on P153X also support synchronous mode operation for leased lines.
• Leased Lines Backup
For leased lines, the Prestige provides backup support in the event of leased line failure with dialup lines.
Getting to Know Your Bridge/Router1-1
Prestige 153/153X WAN Bridge/Routers
• Multiple Protocol Support
♦ TCP/IP (Transmission Control Protocol/Internet Protocol) network layer protocol.
♦ Novel IPX (Internetwork Packet eXchange) protocol.
♦ Transparently bridging for network layers that the Prestige does not route.
♦ PPP (Point-to-Point Protocol) link layer protocol.
♦ SUA™ (Single User Account) for NAT (Network Address Translation).
• Dial-On-Demand
The Dial-On-Demand feature allows the Prestige to automatically place a call to a remote
gateway based on the triggering packet’s destination without user intervention.
• PPP Multilink Support
The Prestige can bundle multiple links in a single connection using PPP/MP (Point-to-Point
Protocol/Multilink Protocol). The number of links can be statically configured or dynamically
managed based on traffic demand.
• Bandwidth-On-Demand
The Prestige 153/153X dynamically allocates bandwidth by dialing and dropping connections
according to traffic demand.
• Full Network Management
Your Prestige 153/153X supports SNMP (Simple Network Management Protocol) and allows
menu-driven network management via the console port or a telnet connection. Your Prestige is
also equipped with a Call Detail Record to help to analyze and manage your telephone bill.
• RADIUS Support
RADIUS (Remote Authentication Dial-In User Service) is the most popular protocol for user
authentication on dial-up lines. RADIUS support allows you to use an external server for
unlimited number of users and the ease of centralized management.
• PAP and CHAP Security
The Prestige supports PAP (Password Authentication Protocol) and CHAP (Challenge Handshake
Authentication Protocol). CHAP is more secure than PAP, however, PAP is readily available on
more platforms.
1-2Getting to Know Your Bridge/Router
Prestige 153/153X WAN Bridge/Routers
• DHCP Support
DHCP (Dynamic Host Configuration Protocol) allows you to dynamically and automatically
assign IP address settings to hosts on your network.
• Call Control
Your Prestige provides budget management for outgoing calls and maintains a blacklist for
unreachable phone numbers in order to save you the expense of unnecessary charges.
• Data Compression
Your Prestige incorporates Stac data compression to speed up data transfer. Stac is the de facto
standard of data compression over PPP links.
• Networking Compatibility
Your Prestige is compatible with remote access products from other manufacturers such as
Ascend, Cisco, and 3Com. Furthermore, it supports Microsoft Windows 95 and Windows NT
remote access capability.
1.3 The WAN Ports
The WAN ports are high-speed, asynchronous RS-232 serial ports that allow you to connect a
modem or an ISDN Terminal Adapter (TA) to the Prestige. Two of the ports on P153X can be
configured to support synchronous operation, also. The WAN ports support up to 230.4kbps
(kilobits per second) throughput. For brevity’s sake, we will refer to the modem and the TA
categorically as “external WAN device”, or simply “WAN device” from now on.
1.3.1 WAN Terminology
• DCE & DTE
On the two ends of an RS-232 connection, the equipment closest to the telephone line is called the
DCE (Data Communications Equipment) and the other the DTE (Data Terminal Equipment). In
our case, the modem or the ISDN TA is the DCE, and the Prestige is the DTE.
• PSTN & POTS
Collectively, the interconnected network of the voice grade networks of the individual telephone
companies is called PSTN (Public Switched Telephone Network), and a regular telephone line is
often referred to as a POTS (Plain Old Telephone Service) line.
Getting to Know Your Bridge/Router1-3
Prestige 153/153X WAN Bridge/Routers
1.4 Front Panel LEDs and Back Panel Ports
1.4.1 Prestige153/153X Front Panel
ℵℑℜ℘⊗⊕
Prestige 153/153X
WAN Bridge/Router
ETHERNET
PWR TST LNK/RX
TX COL
WAN-1WAN-2WAN-3
ℵ : PWR = Power Indicator
ℑ : RUN = Running Indicator (Blinking)
ℜ : ETHERNET (LNK/RX, TX, COL) = Receive, Transmit, Collisions on LAN
℘ : WAN-1 (RDY, TX/RX) = WAN port 1 Ready, Transmit/Receive
⊗ : WAN-2 (RDY, TX/RX) = WAN port 2 Ready, Transmit/Receive
⊕ : WAN-3 (RDY, TX/RX) = WAN port 3 Ready, Transmit/Receive
Figure 1-1.Prestige 153/153X Front Panel
RDY TX/RXRDYRDYTX/RXTX/RX
1-4Getting to Know Your Bridge/Router
Prestige 153/153X WAN Bridge/Routers
1.4.2 Front Panel LEDS
The LED indicator lights on the front panel of your Prestige indicate the bridge/router functional
status. The following Table 1-1 describes the LED functions:
Table 1-1.LED Functions
LEDsFunctionIndicator
Status
PWRPower IndicatorGreenOnThe power is on/off.
RUNRunning LEDGreenBlinkingThe Prestige is functioning properly.
ETHER
NET
TXLAN TransmitGreenBlinkingTraffic is being transmitted on the LAN.
COLCollisionsGreenOnTransmission collisions have occurred on the LAN.
RDYReadyGreenOnThe WAN device connected to WAN port 1 is ready.WAN-1
TX/RXTransmit/Receive GreenBlinkingTraffic is being transmitted or received on WAN port 1.
RDYReadyGreenOnThe WAN device connected to WAN port 2 is in use.WAN-2
TX/RXTransmit/Receive GreenBlinkingTraffic is being transmitted or received on WAN port 2.
RDYReadyGreenOnThe WAN device connected to WAN port 3 is in use.WAN-3
TX/RXTransmit/Receive GreenBlinkingTraffic is being transmitted or received on WAN port 3.
ActiveDescription
OnThe Prestige is connected to a working Ethernet network.LNK/RX LAN ReceiveGreen
BlinkingTraffic is being received on the LAN.
Getting to Know Your Bridge/Router1-5
Prestige 153/153X WAN Bridge/Routers
1.4.3 Prestige 153 Back Panel
Figure 1-2 shows the rear panel of your Prestige 153 . Refer to this diagram when attempting to
make connections.
ℵℑℜ⊗
POWERLAN
ℵ : POWER = power connector to the AC adapter.
ℑ : LAN = RJ-45 Ethernet 10Base-T port (metallic).
ℜ : CONSOLE = RJ-45 Console port (off-white).
℘ : WAN-1 = RJ-45 WAN port 1 (black).
⊗ : WAN-2 = RJ-45 WAN port 2 (black).
⊕ : WAN-3 = RJ-45 WAN port 3 (black).
Figure 1-2.Prestige 153 Back Panel Ports
⊕℘
WAN-1WAN-2WAN-3CONSOLE
1-6Getting to Know Your Bridge/Router
Prestige 153/153X WAN Bridge/Routers
1.4.4 Prestige153X Back Panel
Figure 1-3 shows the rear panel of your Prestige 153X. Refer to this diagram when making
connections.
ℵℑ⊕
POWERLAN
ℜ℘⊗
WAN-1WAN-2WAN-3CONSOLE
ℵ : POWER = power connector to the AC adapter.
ℑ : LAN = RJ-45 Ethernet 10Base-T port (metallic).
ℜ : CONSOLE = RJ-45 Console port (off-white).
℘ : WAN-1 = 68-pin WAN port 1.
⊗ : WAN-2 = 68-pin WAN port 2.
⊕ : WAN-3 = RJ-45 WAN port 3 (black).
Figure 1-3.Prestige 153X Back Panel Ports
Getting to Know Your Bridge/Router1-7
Prestige 153/153X WAN Bridge/Routers
ISP
1.5 Applications for Prestige 153/153X
The following sections show you the possible applications that you can use your Prestige for.
1.5.1 Internet Access
The Prestige 153/153X is the ideal high-speed Internet access solution. Your Prestige 153/153X
supports the TCP/IP protocol that the Internet uses exclusively. A typical Internet access
application is shown in Figure 1-4.
Coporate LAN
Ethernet LAN
Prestige 153/153X
INTERNET
PSTN/ISDN Network
Modem / ISDN TA
Modem / ISDN TA
Modem / ISDN TA
Modem
ISDN TA
Figure 1-4.Internet Access Application
1.5.1.1 Internet Single User Account
For a SOHO (Small Office/Home Office) environment, your Prestige offers the Single User
Account (SUA) feature that allows multiple users on the LAN (Local Area Network) to access the
Internet concurrently for the cost of a single user. The SUA address mapping can also be used for
other LAN to LAN connections.
You can use the Prestige to connect two geographically dispersed networks over the WAN
connection. The Prestige supports TCP/IP and Novell IPX routing, as well as transparent
bridging for other network layer protocols. Your Prestige can also bundle multiple links in a
single connection for greater bandwidth. A typical LAN-to-LAN application for your Prestige is
shown in Figure 1-5.
Branch Office LAN
Ethernet LAN
Prestige 153/153X
Coporate LAN
WIN 95/NT
TCP/IP
Modem / ISDN TA
Modem / ISDN TA
Modem / ISDN TA
Modem
ISDN TA
PSTN/ISDN Network
Modem / ISDN TA
Modem / ISDN TA
Modem / ISDN TA
Modem
ISDN TA
Figure 1-5.LAN-to-LAN Connection Application
NOVELL
IPX
Ethernet LAN
Prestige 153/153X
BRIDGING
Getting to Know Your Bridge/Router1-9
Prestige 153/153X WAN Bridge/Routers
Telecommuter
1.5.3 Remote Access Server
Your Prestige allows remote users to dial-in and gain access to your LAN. This feature enables
users that have workstations with remote access capabilities, e.g., Windows 95, to dial in to access
the network resources without physically being in the office. Either PAP (Password
Authentication Protocol) or CHAP (Challenge Handshake Authentication Protocol) authentication
can be used to control the access from the remote users. You can also use callback for security
and/or accounting purposes. Figure 1-6 shows how a remote user can connect to the corporate
office.