ZyXEL Communications 28641 User Manual

Prestige 2864I
User’s Manual
Version 2.0
ZyXEL
ACCESSING THE INTERNET & INTRANET
ZyXEL Limited Warranty
Note: Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind or character to the purchaser.
To obtain the services of this warranty, contact ZyXEL’s Service Center, refer to the separate Warranty Card for your Return Material Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended that the unit be insured when shipped. Any returned products without proof of purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid (USA and territories only). If the customer desires some other return destination beyond the U.S. borders, the customer shall bear the cost of the return shipment. This warranty gives
ii
you specific legal rights, and you may also have other rights which vary from state to state.
Copyright © 1997 by ZyXEL
The contents of this book may not be reproduced (in any part or as a whole) or transmitted in any form or by any means without the written permission of the publisher.
Published by ZyXEL Communications Corporation. All rights reserved. Note: ZyXEL does not assume any liability arising out of the
application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patents rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This document is subject to change without notice.
Acknowledgments
Trademarks mentioned in this manual are used for informational purposes only.
Trademarks are properties of their respective owners.
FCC Part 15 Information
This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions:
1. This device may not cause harmful interference.
2. This device must accept any interference received, including interference that may cause undesired operations.
This equipment has been tested and found to comply with the limits for a CLASS B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
iii
interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and the receiver.
Connect the equipment into an outlet on a circuit different from that
to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
Changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment. Shielded RS-232 cables are required to be used to ensure compliance with FCC Part 15, and it is the responsibility of the user to provide and use shielded RS-232 cables.
Information for Canadian Users
The Industry Canada label identifies certified equipment. This certification means that the equipment meets certain telecommunications network protective, operation, and safety requirements. The Industry Canada does not guarantee that the equipment will operate to a user’s satisfaction.
Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local telecommunications company. The equipment must also be installed using an acceptable
iv
method of connection. In some cases, the company’s inside wiring associated with a single line individual service may be extended by means of a certified connector assembly. The customer should be aware that the compliance with the above conditions may not prevent degradation of service in some situations.
Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated by the supplier. Any repairs or alterations made by the user to this equipment, or equipment malfunctions, may give the telecommunications company cause to request the user to disconnect the equipment.
For their own protection, users should ensure that the electrical ground connections of the power utility, telephone lines, and internal metallic water pipe system, if present, are connected together. This precaution may be particularly important in rural areas.
Caution: Users should not attempt to make such connections themselves, but should contact the appropriate electrical inspection authority, or electrician, as appropriate.
This digital apparatus does not exceed the class A limits for radio noise emissions from digital apparatus set out in the radio interference regulations of Industry Canada. The declarations of CE marking:
The Prestige has been approved for connection to the Public Switched Telecommunication Network using interfaces compatible with ITU-TSS recommendation I.420 (Basic Rate ISDN user access). The Prestige complies with the following directives:
v
The Council Directive 89/336/EEC of 3 May 1992 on the approximation of the laws of the member states relation to Electro Magnetic Compatibility. (EMC Directive)
Council Directive 91/263/EEC of 29 April 1991 on the approximation of the laws of the Member States concerning telecommunication terminal equipment. (The Telecom Terminal Equipment Directive)
93/68/EEC of 22 July 1993 amending the Directives 89/336/EEC, 91/263 /EEC and 92/31/EEC.(Marking Directive)
The Council Directive 92/31/EEC of 28 April 1992 amending directive on the approximation of the laws of the member states relating to EletoMagnetic Compatibility.
Contacting ZyXEL
If you have questions about your ZyXEL product or desire assistance, contact ZyXEL Communications Corporation in one of the following ways:
Phone: In North America call between 8:00 AM and 5:00 PM PST at (714) 693-0808
Outside North America, you can dial +886-3-5783942 EXT 252
between 8:00AM and 5:00PM Taiwan time (GMT +8:00).
Fax: ZyXEL in North America: (714) 693-8811 or Taiwan: +886- 3-5782439
E-mail:
Sales inquiries: sales@zyxel.com in North America.
sales@zyxel.hinet.net outside North America.
vi
Technical support: support@zyxel.com in North America.
support@zyxel.hinet.net outside North America.
Product information: Visit our site on the World Wide Web: http://www.zyxel.com.
FTP: Information , such as ZyXEL software and ROM updates for North America can be found at this FTP address: ftp.zyxel.com
For European and Asian versions and related files, use the address:
ftp.zyxel.co.at
Postal Service: You can send written communications at the following address:
ZyXEL Communications Corporation 6, Innovation Road II, Science-Based Industrial Park Hsinchu, Taiwan 300, R.O.C. or ZyXEL Communications Inc. 4920 E. La Palma Avenue Anaheim, CA92807, U.S.A.
vii
Contents
ZyXEL Limited Warranty ii Copyright © 1997 by ZyXEL iii Acknowledgments iii FCC Part 15 Information iii Information for Canadian Users iv Contacting ZyXEL vi
1 Introduction 1
Features 1
Ease of Installation 1 ISDN Basic Rate Interface (BRI) 2 Built-in V.34 Modem 2 Multiple Networking Protocol Support 2 Standard Phone Jack 2 Dial On Demand 2 Bandwidth On Demand 3 Full Network Management 3 RADIUS (Remote Authentication Dial In User Service) 3 PPP Security 3 DHCP Support (Dynamic Host Configuration Protocol) 3 Call Control 4 Data Compression 4 Networking Compatibility 4
Applications For Your Prestige 4
Internet Access 4 Internet Single User Account (SUA) 4 Multiprotocol LAN-to-LAN Connection 5 Telecommuting Server 5
viii
Mobile Users with V.34 Modems 5
What This Manual Covers 5 What This Manual Doesn’t Cover 6 Other Resources 6 Packing List 7 Additional Installation Requirements 7
2 Before You Begin 9
Road Map and Flow 9 Completing the Worksheet 10
Ordering Your ISDN Line 10 Collecting General Setup Information 11 Collecting ISDN Phone Line Information 12 Collecting Ethernet Setup Information 14
3 Installation 21
A Warning On Connection Cables 22 Connecting Your Computer and Your Prestige 22
Connecting the RS-232 Cable to your Prestige 22 Connecting an ISDN Line to your Prestige 22 Connecting a Telephone/Fax to your Prestige 23 Connecting an Ethernet Cable to your Prestige 23 Connecting a Power Adapter to your Prestige 24
Prestige Front Panel 24 Powering On Your Prestige 26 Navigating Through the System Management Terminal Interface 27 System Management Terminal Interface Summary 28 General Setup 29 ISDN Setup 31
North American ISDN 31 DSS1 & 1TR6 ISDN 33
Ethernet Setup 36
ix
General Ethernet Setup 36 TCP/IP Ethernet Setup and DHCP 37 Novell IPX Ethernet Setup 40 Bridge Ethernet Setup 40
4 Configuring for Internet Access 41
IP Addresses and the Internet 42 Internet Access Configuration 43 Single User Account 46 Configuration for Single User Account 48 Configuring Backup ISP Accounts 48
5 Remote Node Configuration 51
Bandwidth on Demand 57 Editing PPP Options 59
6 Dial-In Configuration 61
Telecommuting 62 Dial-In Server Application 62 Default Dial-In Setup 63 Dial-In Users Setup 67
More on CLID 70
7 TCP/IP Configuration 71
IP Subnet Mask 71 LAN-to-LAN Application 72
Remote Node Setup 73 Static Route Setup 75
8 Novell IPX Configuration 79
IPX Network Environment 79
Frame Type 79 Network Numbers 79
Prestige on LAN with Server 80
x
Prestige on LAN without Server 80 IPX Spoofing 81 IPX Ethernet Setup 81 LAN-to-LAN Application 83
Remote Node Setup 83
Static Route Setup 85
9 Bridging Configuration 89
IPX Spoofing 89 Bridge Ethernet Setup 89 LAN-to-LAN Application 91
Remote Node Setup 91 Default Dial-In Setup for Bridge 92 Bridge Static Route Setup 93
10 Filter Configuration 95
About Filtering 95 Prestige’s Filter Structure 96 Configuring a Filter Set 96 Configuring a Filter Rule 99
TCP/IP Filter Rule 99 Generic Filter Rule 103 Novell IPX Filter Rule 104
11 SNMP 107
About SNMP 107 Configuring Your Prestige For SNMP Support 107
12 System Security 111
Using RADIUS Authentication 111
Installing a RADIUS Server 111 Configuring the Prestige for RADIUS Authentication 112 Adding Users to the RADIUS Database 114
xi
Using RADIUS Authentication for CLID 114
Configuring the SMT Password 115
13 Telnet Configuration and Capabilities 117
About Telnet Configuration 117 Telnet Capabilities 118
Single Administrator 118 System Timeout 118
14 System Maintenance 119
System Status 119 Terminal Baud Rate 122 Log and Trace 123
View Error Log 123 Syslog And Accounting 124
Diagnostic 125 Backup Configuration 128 Restore Configuration 129 Software Update 129 Command Interpreter Mode 130 Call Control 131
Call Control Parameters 131 Blacklist 132 Budget Management 133 Modem/ISDN TA Emulation 133
15 Troubleshooting 135
Problems Starting Up the Prestige 135
None of the LEDs are on when you power up the Prestige 135 Connecting the RS-232 cable, cannot access the SMT 135
Problems With the ISDN Line 136
The ISDN initialization failed 136 The ISDN loopback test failed 136
xii
Problems with the LAN Interface 137
Can’t PING any station on the LAN 137
Problems Connecting to a Remote Node or ISP 137 Problems Connecting to a Remote User 138
16 ISDN Switch Types 139
Provisioning For U.S. Switches 139
Provisioning For the AT&T 5ESS Switches 140 Provisioning For the Northern Telecom Switch 141
17 Index 143
xiii
xiv
1 Introduction
Congratulations on your purchase of the ZyXEL Prestige 2864I Remote Access Router. The Prestige is the first device to integrate a Router and Bridge into a single package. In a modem-sized box, the Prestige offers inexpensive yet complete telecommunications and internetworking solutions for your home or branch office. The Prestige is ideal for everything from Internet browsing to receiving calls from Remote Dial-in Users to making LAN-to-LAN connections to Remote Nodes.
Distinguishing features of the Prestige include support for a full range of networking protocols such as TCP/IP (Transmission Control Protocol/Internet Protocol), Novell IPX (Internet Packet Exchange), and Transparent Bridging. The complete solution also includes Remote Dial -in User support, an Internet Single User Account (Network Address Translation), POTS line support (Plain Old Telephone Service; also called A/B Adapter in Europe), extensive Network Management, and solid security features.
Features
The Prestige is packed with a number of features that give it the flexibility to provide a complete networking solution for almost any user.
Ease of Installation
The Prestige is a self-contained unit that is quick and easy to install. Physically, it resembles an external modem except for the fact that it is a router and uses an Ethernet cable to connect to the host network.
Introduction 1
ISDN Basic Rate Interface (BRI)
Using either a standard S/T or U Interface the Prestige supports a full range of switch types. The switch type depends on the CO (Central Office) switch your ISDN line is connected to. See Chapter 16 for more information on North American, European, and Asian ISDN firmware and switch types supported by the Prestige.
The two B-channels can be used independently for two destinations. Or they can be bundled for one connection to support bandwidth-on­demand.
Built-in V.34 Modem
The Prestige has a built-in V.34 modem. This enables it to communicate to remote routers or users at speeds up to 28.8Kbps through the ISDN connection.
Multiple Networking Protocol Support
The Prestige is a multi-protocol router. It supports TCP/IP, Novell IPX, and Transparent Bridging.
2 Introduction
Standard Phone Jack
The Prestige is equipped with a standard phone jack for connection to a telephone, FAX machine, or modem.
Dial On Demand
The Dial On Demand feature allows the Prestige to automatically place a call to a Remote Node whenever there is traffic coming from any workstation on the LAN to that remote site.
Bandwidth On Demand
The Prestige supports bandwidth up to 128Kbps over a single ISDN BRI line. It incorporates PPP/MP (Point-to-Point Protocol/Multilink Protocol ) to bundle two B channels over a BRI line. In addition, the Prestige dynamically allocates bandwidth between the two B channels, increasing or decreasing speeds as needed to allow for greater efficiency in data transfer. It supports BAP (Bandwidth Allocation Protocol ) and BACP (Bandwidth Allocation Control Protocol) to manage the number of links in multilink bundle.
Full Network Management
The Prestige incorporates SNMP (Simple Network Management Protocol ) support and menu-driven network management via an RS­232 or Telnet connection. The Prestige is also equipped with a Call Detail Record (CDR) to help analyze and manage your telephone bill.
RADIUS (Remote Authentication Dial In User Service)
The RADIUS feature allows you to use an external, central, Unix based server to support thousands of users.
PPP Security
The Prestige supports PAP (Password Authentication Protocol) and CHAP (Challenge Handshake Authentication Protocol).
DHCP Support (Dynamic Host Configuration Protocol)
DHCP (Dynamic Host Configuration Protocol) allows you to dynamically and automatically assign IP address settings to hosts on your network.
Introduction 3
Call Control
The Prestige provides budget management for outgoing calls and maintains a blacklist for unreachable phone numbers in order to save you the expense of unnecessary charges.
Data Compression
The Prestige incorporates Stac data compression and CCP (Compression Control Protocol).
Networking Compatibility
The Prestige is compatible with remote access products from other companies such as Ascend, Cisco, and 3Com. Furthermore, it supports Microsoft Windows 95 and Windows NT remote access capability.
Applications For Your Prestige
Some applications for the Prestige include:
Internet Access
4 Introduction
The Prestige supports the TCP/IP protocol, which is the language used for the Internet. It is also compatible with access servers manufactured by major vendors such as Cisco and Ascend.
Internet Single User Account (SUA)
For a small office environment, the Prestige offers a Single User Internet Account from an ISP (Internet Service Provider). This allows multiple users on the LAN (Local Area Network) to access the Internet concurrently for the cost of a single user.
Single User Account address mapping can also be used for LAN to LAN connection.
Multiprotocol LAN-to-LAN Connection
The Prestige can dial to or answer calls from another remote access router connected to a different network. The Prestige supports TCP/IP, Novell IPX, and has the capability to bridge any Ethernet protocol.
Telecommuting Server
The Prestige allows Remote Dial-in Users to dial-in and gain access to your LAN. This feature enables users that have workstations with remote access capabilities, e.g., Windows 95, to dial in using an ISDN terminal adapter (TA) to access the network resources without physically being in the office.
Mobile Users with V.34 Modems
The Prestige has a built-in V.34 modem. This allows mobile users that have workstations with remote access capabilities to dial-in to the Prestige using a standard V.34 modem to access network resources.
What This Manual Covers
This manual is divided into five parts.
1. Part One - Getting Started (Chapters 1-3) - is structured as a step-by-step guide to help you connect, install, and setup your Prestige to operate on your LAN.
2. Part Two - The Internet (Chapter 4) - describes how to configure the Prestige to connect to the Internet.
3. Part Three - Setting Up Advanced Applications (Chapters 5-10)
- describes how to use the Prestige for more advanced applications, such as TCP/IP routing and Bridging.
Introduction 5
4. Part Four - Advanced Management (Chapters 11-14) - provides information on advanced management features for network managers.
5. Part Five - System Maintenance (Chapters 15-16) - describes maintenance features for checking system status and logging errors.
Regardless of the application, it is important that you follow the steps outlined in Part One (Chapters 1-3) to correctly connect your Prestige to your LAN. You can then refer to other chapters of the manual depending on which applications you wish to use.
What This Manual Doesn’t Cover
This manual assumes that you know how to use your computer and are familiar with your communications software. If you have questions about using either one, refer to the manual for the product.
Other Resources
For more information about the Prestige check the following sources:
6 Introduction
Quick Start Guide.
Prestige Support disk.
Release notes for firmware upgrades and other information can be
accessed through a ZyXEL FTP server site.
For ZyXEL contact information see page vi.
Packing List
Before you proceed further, check all items you received with your Prestige against this list to make sure nothing is missing. The complete package should include:
One Prestige 2864I.
One power adapter.
One RJ-45 phone cable.
One RJ-11 phone cable.
One 25 pin female - 9 pin male adapter.
One LAN crossover cable (red tag).
One LAN straight cable (white tag).
One Prestige Support Disk.
One Prestige 2864I Quick Start Guide.
This Prestige 2864I User’s Manual.
Additional Installation Requirements
In addition to the contents of your package, there are other hardware and software requirements you need before you can install and use your Prestige. These requirements include:
An ISDN telephone line.
An Ethernet connection to your computer.
Introduction 7
A computer equipped with communications software configured to the following parameters:
VT100 terminal emulation.
9600 Baud rate.
No parity, 8 Data bits, 1 Stop bit.
After the Prestige has been successfully connected to your network, you can make future changes to the configuration by using a Telnet application.
8 Introduction
2 Before You Begin
To ensure successful installation of your Prestige, we strongly recommend that you carefully follow the steps outlined in Chapters 2 and 3. These chapters are designed as a guide for you to collect the necessary information about your ISDN phone line, and the LAN which you will be connected to. Once this information has been collected, it will be used to configure your Prestige.
After you have successfully configured your Prestige, see the appropriate chapters to setup your application. For Internet Access, see Chapter 4.
Road Map and Flow
The chart below is provided as a step by step guide to successfully installing your Prestige.
Before You Begin 9
Figure 2-1 Installation Guide
Completing the Worksheet
Before you continue locate the worksheet at the end of this chapter. This information worksheet has been provided to help you get through setup and installation of your Prestige as easily as possible.
Ordering Your ISDN Line
If you do not have the ISDN line installed already, we suggest that you order it from your telephone company as soon as possible to avoid the
10 Before You Begin
long waits common when ordering a new line. Use the information in this section to place the order (see Chapter 16 for information on provisioning your ISDN line). If you have already installed your ISDN line, you can check the following section to make sure that you can use all the features of your Prestige.
1. Contact your local telephone company’s ISDN Ordering Center.
2. Find out what type of ISDN service is available. Refer to Chapter 16 to find out the provisioning information for the appropriate switch type and ISDN service. For the U.S., the Prestige (both U and S/T Interface) have been approved by Bellcore and have IOC (ISDN Ordering Code) “S” Capability, EZ-ISDN 1.
3. Provide your telephone company with the proper provisioning information.
4. When the telephone company installs your ISDN line, be sure to obtain the following information:
ISDN switch type.
ISDN telephone number(s).
ISDN Service Profile Identifiers (SPID) number(s) (only for
North America).
Collecting General Setup Information
The Prestige requires the following system information. You can obtain all the pertinent information from your network administrator. Record this information into the worksheet as it becomes available. This worksheet will later be referred to as you configure your Prestige.
System Name - This is the name given to the Prestige for identification purposes. This name should be no more than 8 alphanumeric characters. Spaces are not allowed, but “-” and “_” are accepted. This name can be obtained remotely via the SNMP
Before You Begin 11
management protocol and will be displayed as the prompt when the user enters the Command Mode.
Route IP Field - For Internet access, you will need to enable the Route IP Field. See Chapter 4 for more details on configuring your Prestige for Internet access. To support Novell IPX, or Bridging, enable the appropriate protocol and reference the related chapters for detailed information.
You have now collected all of the general setup information you need. Make sure that you have entered all the values onto the worksheet before proceeding to the next section.
Collecting ISDN Phone Line Information
After you have successfully installed the ISDN phone line or if you already have one installed, you need to use the ISDN line information to complete the worksheet and configure your Prestige. Your telephone company can give you the following information to configure the Prestige:
Switch Type Geography No of Phone #s No of SPIDs
AT&T 5ESS NI-1 North America 2 2 AT&T 5ESS Point to Point North America 1 0 AT&T 5ESS Multipoint North America 2 2 Northern Telecom NI-1 North America 2 2 Northern Telecom Custom North America 2 2 DSS1 Europe, Asia 2 N/A 1TR6 Germany 2 N/A
Switch Type - This is the type of switch used by your telephone
12 Before You Begin
company. Check with your telephone company and choose the appropriate option on the worksheet. For North America, select your ISDN switch type. For DSS1 and 1TR6, verify this field to make sure that you have the proper firmware loaded.
B Channel Usage - Determine which connection is appropriate for your B channel and check the corresponding option on the worksheet.
If your Prestige is the only device using the ISDN line, then
configure B Channel Usage to Switch/Switch so that your device will use both B channels to communicate. If your Prestige is sharing the ISDN line with other devices, then configure B Channel Usage to Switch/Unused.
Telephone Number(s) - Record on the worksheet the telephone number(s) given to you by your ISDN provider. Some switch types only have one telephone number. These phone numbers should be in a standard digit format (for example, 5551212). Note that these fields will only accept digits, so - and spaces will not be accepted.
Analog Call - Check the appropriate Analog Call option on the worksheet for each telephone number. This information is later used to configure the Prestige in routing an incoming analog call. Set to modem, A/B adapter, or select Ignore if you don’t want to utilize this option.
SPID Number(s) - (For North America only) The SPID (Service Profile Identifier) is a number used by a central office switch for identification purposes. With the switch information, see the previous table for the number of SPIDs you must enter.
You have now collected all of the necessary information about your ISDN phone line. Make sure that these values are entered into your worksheet before you continue to the next section. For DSS1 and 1TR6 ISDN, refer to Chapter 3.
Before You Begin 13
Collecting Ethernet Setup Information
This section assumes that you are setting up your Prestige for a TCP/IP connection. If you want to configure the Prestige for other protocols (e.g., IPX), refer to the appropriate chapters.
Ethernet Interface - The first step is to determine the type of Ethernet interface you will be using on the Prestige. There are two options: AUI or UTP. Record the interface type onto the worksheet. If you have a 10Base2 (BNC), you should choose AUI.
IP Address - An IP Address is required for TCP/IP protocol. The IP Address is the unique 32-bit number assigned to your Prestige. This address is written in dotted decimal notation (four 8-bit numbers, between 0 and 255, separated by periods), e.g.,
192.68.203.5.
Record the IP Address into the worksheet as assigned by your
network administrator. Note that every machine on an internet must have a unique IP address - do not assign an arbitrary address to any machine.
IP Sub-net Mask - This field is required for TCP/IP protocol. An
The table below lists some examples of IP subnet masks and the number of hosts that are allowed. Consult your network administrator if you are unsure of this value.
14 Before You Begin
IP address consists of two parts, the network ID and the host ID. The IP Subnet Mask is used to specify the network ID portion of the address, expressed in dotted decimal notation. The Prestige will automatically calculate this mask based on the IP address that you assign. Unless you have special need for subnetting, use the default mask as calculated by the Prestige.
IP Subnet Mask Number of Host IDs Number of Bits
255.255.255.0 254 24
255.255.255.128 126 25
255.255.255.192 62 26
255.255.255.224 30 27
255.255.255.255 1 32
Before You Begin 15
Prestige Setup and Installation Worksheet
General Setup Information
System Name (for identification purposes): _______________________________________
Protocol Routing:
___TCP/IP ___IPX ___Bridging
ISDN Setup Information
Switch Type (check one):
___AT&T 5ESS NI-1 ___AT&T Point to Point ___AT&T 5ESS Multipoint ___Northern Telecom NI-1 ___Northern Telecom Custom ___DSS1 ___1TR6
B-Channel Usage (check one):
___Switch/Switch
16 Before You Begin
Loading...
+ 129 hidden pages