ZyXEL Communications 652H/HW User Manual

Prestige 652H/HW

ADSL Security/Wireless LAN Router

Compact Guide

Version 3.40

May 2003

Prestige 652H/HW

Table of Contents

1 Introducing the Prestige ................................................................................................................1

2 Hardware ........................................................................................................................................ 2

2.1 Rear Panel Connections............................................................................................................. 3

2.2 Inserting a PCMCIA Wireless LAN Card................................................................................. 4

2.3 The Front Panel LEDs............................................................................................................... 4

3 Setting Up Your Computer’s IP Address..................................................................................... 6

3.1 Windows 2000/NT/XP.............................................................................................................. 6

3.2 Checking/Updating Your Computer’s IP Address .................................................................... 7

3.3 Testing the Connection to the Prestige......................................................................................8

4 Configuring Your Prestige............................................................................................................. 8

4.1 Accessing Your Prestige Via Web Configurator....................................................................... 8

4.2 Common Screen Command Buttons ....................................................................................... 10

4.3 Wizard Internet Access Configuration .................................................................................... 10

4.4 Test Your Internet Connection ................................................................................................ 14

5 Advanced Configuration.............................................................................................................. 14

5.1 Wireless LAN Setup................................................................................................................ 14

5.2 Wireless LAN Security Setup .................................................................................................16

5.3 Network Address Translation Overview ................................................................................. 18

5.4 Configuring SUA Server......................................................................................................... 18

5.5 Firewall Overview................................................................................................................... 20

5.6 Enabling the Firewall .............................................................................................................. 21

5.7 Procedure for Configuring Firewall Rules .............................................................................. 22

5.8 Configuring Source and Destination Addresses ...................................................................... 25

5.9 VPN Overview ........................................................................................................................ 26

5.10 Summary Screen.................................................................................................................... 26

5.11 Configuring VPN Policies..................................................................................................... 28

5.12 Viewing SA Monitor............................................................................................................. 33

5.13 UPnP Overview..................................................................................................................... 33

5.14 Configuring UPnP ................................................................................................................. 33

6 Troubleshooting............................................................................................................................ 35

1 Introducing the Prestige

The Prestige 652H/HW ADSL router is the ideal all-in-one device for small networks connecting to the Internet via ADSL. Key features of the Prestige include firewall, VPN, wireless LAN, NAT, Remote Management and UPnP. See your User’s Guide for more details on all Prestige features.

Prestige 652H/HW

You should have an Internet account already set up and have been given most of the following information.

INTERNET ACCOUNT INFORMATION

Your device’s WAN IP Address (if given): __________________

DNS Server IP Address (if given): Primary __________________, Secondary _________________

Virtual Path Identifier (VPI): ____________

Virtual Channel Identifier (VCI): ____________

Multiplexing (VC-based or LLC-based):

Encapsulation:

 RFC 1483

 ENET ENCAP

 PPPoA

 PPPoE

Ethernet Encapsulation Gateway IP Address: ____________________

User Name: ____________ Password: ____________

Service Name: ____________

User Name: ____________ Password: ____________

 VC  LLC

2 Hardware

Prestige 652H/HW

2.1 Rear Panel Connections

Figure 1 Prestige Hardware Connections

Table 1 Prestige Rear Panel Description

LABEL DESCRIPTION

1. DSL Connect to a telephone jack using the included phone wire.

2. LAN 1/DMZ-4

3. POWER Connect to a power source using the power adaptor for your region (see your User’s Guide).

After you’ve made the connections, connect the power adaptor to a power supply and push in the power button to

The PWR LED turns on. The SYS LED blinks while performing system testing and then turns steady on if the

Connect to a computer/external hub using an Ethernet cable. Connect the DMZ port to servers that you want visible to the outside world.

turn on the Prestige.

testing is successful. A LAN LED turns on if a LAN port is properly connected.

Prestige 652H/HW

Table 1 Prestige Rear Panel Description

LABEL DESCRIPTION

CON/AUX switch CON/AUX port

RESET You only need to use this button if you’ve forgotten the Prestige’s password. It returns the

Only connect this port if you want to configure the Prestige using the SMT via console port or set up a backup WAN connection; see your User’s Guide for details.

Set this switch to the “CON” side to use the CON/AUX port as a console port for local device configuration and management. Connect the 9-pin male end of the console cable to the console port of the Prestige and the other end to a serial port (COM1, COM2 or other COM port) on your computer. Your computer should have a terminal emulation communications program (such as HyperTerminal) set to VT100 terminal emulation, no parity, 8 data bits, 1 stop bit, no flow control and 9600 bps port speed.

Set this switch to the “AUX” side to use the CON/AUX port as an auxiliary dial-up WAN connection. Use the included CON/AUX converter, with the console cable to connect the CON/AUX port to your modem or TA.

Prestige to the factory defaults (password is 1234, LAN IP address 192.168.1.1 etc.; see your User’s Guide for details).

2.2 Inserting a PCMCIA Wireless LAN Card

Use a ZyAIR series wireless LAN PCMCIA card to add optional wireless LAN capabilities.

Step 1. Turn off the Prestige.

Never insert or remove a wireless LAN card when the Prestige is turned on.

Step 2. Locate the slot labeled Wireless LAN on the Prestige.

Step 3. With its pin connector facing the slot and the LED side facing upwards, slide the ZyAIR

wireless LAN card into the slot.

Never force, bend or twist the wireless LAN card into the slot.

Step 4. Turn on the Prestige. The WLAN LED should turn on.

2.3 The Front Panel LEDs

Prestige 652H/HW

Figure 2 Prestige Front Panel

Refer to the following table for more detailed LED descriptions.

Table 2 Front Panel LED Description

LED COLOR STATUS DESCRIPTION

On The Prestige is receiving power. PWR Green

Off The Prestige is not receiving power.

SYS

LAN 1/DMZ-4

WLAN

Green

Red On Power to the Prestige is too low.

Green

Orange

Green

Red On There has been an error with the wireless LAN PCMCIA card.

On The Prestige is functioning properly.

Blinking The Prestige is restarting.

Off The system is not ready or has malfunctioned.

On The Prestige has a successful 10Mb Ethernet connection.

Blinking The Prestige is sending/receiving data.

Off The Prestige does not have 10Mb Ethernet connection.

On The Prestige has a successful 100Mb Ethernet connection.

Blinking The Prestige is sending/receiving data.

Off The Prestige does not have 100Mb Ethernet connection.

On Wireless link is ready.

Off Wireless link is not ready or has failed.

Blinking The Prestige is sending/receiving data through the WLAN.

Prestige 652H/HW

Table 2 Front Panel LED Description

LED COLOR STATUS DESCRIPTION

AUX

Green

DSL Green

ACT/PPP

Orange

Green Blinking The Prestige is sending/receiving non-PPP traffic.

On The CON/AUX port has a dial-up connection. Orange

Off The CON/AUX port does not have a dial-up connection.

On The CON/AUX port has a console connection.

Off The CON/AUX port does not have a console connection.

On The Prestige is linked successfully to a DSLAM.

Blinking The Prestige is initializing the DSL line.

Off The DSL link is down.

On The Prestige has a PPP (PPPoA or PPPoE) connection.

Blinking The Prestige is sending/receiving PPPoA or PPPoE traffic.

Off The system is ready, but is not sending/receiving data.

3 Setting Up Your Computer’s IP Address

Skip this section if your computer is already set up to accept a dynamic IP

address. This is the default for most new computers.

The Prestige is already set up to assign your computer an IP address. Use this section to set up your computer to receive an IP address or assign it a static IP address in the 192.168.1.2 to 192.168.1.254 range with a subnet mask of 255.255.255.0. This is necessary to ensure that your computer can communicate with your Prestige.

Your computer must have an Ethernet card and TCP/IP installed. TCP/IP should already be installed on computers using Windows NT/2000/XP, Macintosh OS 7 and later operating systems.

3.1 Windows 2000/NT/XP

1. In Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel.

2. In Windows XP, click Network Connections.

In Windows 2000/NT, click Network and Dial-up Connections.

3. Right-click Local Area Connection and then click Properties.

4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties.

Prestige 652H/HW

5. The Internet Protocol TCP/IP Properties screen opens (the General tab in Windows XP).

- To have your computer assigned a dynamic IP address, click Obtain an IP address automatically.

If you know your DNS sever IP address(es), type them in the Preferred DNS server and/or Alternate DNS server fields.

-To configure a static IP address, click Use the following IP Address and fill in the IP address (choose one from192.168.1.2 to 192.168.1.254), Subnet mask (255.255.255.0), and Default gateway (192.168.1.1) fields.

Then enter your DNS server IP address(es) in the Preferred DNS server and/or Alternate DNS server fields.

If you have more than two DNS servers, click Advanced, the DNS tab and then configure them using Add.

6. Click Advanced. Remove any previously installed gateways in the IP Settings tab and click OK to go back to the Internet Protocol TCP/IP Properties screen.

7. Click OK to close the Internet Protocol (TCP/IP) Properties window.

8. Click OK to close the Local Area Connection Properties window.

3.2 Checking/Updating Your Computer’s IP Address

1. In the computer, click Start, (All) Programs, Accessories and then Command Prompt.

2. In the Command Prompt window, type "ipconfig" and then press ENTER to verify that your computer’s IP address is in the correct range (192.168.1.2 to 192.168.1.254) with subnet mask 255.255.255.0. This is necessary in order to communicate with the Prestige.

Prestige 652H/HW

Refer to your User’s Guide for detailed IP address configuration for other Windows and Macintosh computer operating systems.

3.3 Testing the Connection to the Prestige

1. Click Start, (All) Programs, Accessories and then Command Prompt.

2. In the Command Prompt window, type "ping” followed by a space and the IP address of the Prestige (192.168.1.1 is the default).

3. Press ENTER and the following screen displays.

C:\>ping 192.168.1.1

Pinging 192.168.1.1 with 32 bytes of data:

Reply from 192.168.1.1: bytes=32 time=10ms TTL=254 Reply from 192.168.1.1: bytes=32 time<10ms TTL=254 Reply from 192.168.1.1: bytes=32 time<10ms TTL=254 Reply from 192.168.1.1: bytes=32 time<10ms TTL=254

Ping statistics for 192.168.1.1: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 10ms, Average = 2ms

Your computer can now communicate with the Prestige using the LAN port.

4 Configuring Your Prestige

This Compact Guide shows you how to use the web configurator only. See your User’s Guide for background information on all Prestige features and

SMT (System Management Terminal) configuration.

4.1 Accessing Your Prestige Via Web Configurator

Step 1. Launch your web browser. Enter “192.168.1.1” as the web site address.

Web site address.

Figure 3 Entering Prestige LAN IP Address in Internet Explorer

Step 2. An Enter Network Password window displays. Enter the user name (“admin” is the

default), password (“1234” is the default) and click OK.

Prestige 652H/HW

Default user name.

Figure 4 Web Configurator: Password Screen

Step 3. You should now see the web configurator SITE MAP screen.

 Click Wizard Setup to begin a series of screens to configure your Prestige for the first

time.

 Click a link under Advanced Setup to configure advanced Prestige features.

 Click a link under Maintenance to see Prestige performance statistics, upload firmware

and back up, restore or upload a configuration file.

 Click Logout in the navigation panel when you have finished a Prestige management

session.

WIZARD

Navigation panel

Logout

Figure 5 Web Configurator: SITE MAP Screen

Prestige 652H/HW

The Prestige automatically logs you out if it is left idle for five minutes;

press ENTER to log back in again.

4.2 Common Screen Command Buttons

The following table shows common command buttons found on many web configurator screens.

Back Click Back to return to the previous screen.

Apply Click Apply to save your changes back to the Prestige.

Reset/Cancel Click Reset or Cancel to begin configuring this screen afresh.

4.3 Wizard Internet Access Configuration

Use the Wizard Setup screens to configure your system for Internet access settings and fill in the fields with the information in the Internet Account Information table. Your ISP may have already configured some of the fields in the wizard screens for you.

Step 1. In the SITE MAP screen click Wizard Setup to display the first wizard screen.

From the Mode drop-down list box, select Routing (default) if your ISP allows multiple computers to share an Internet account. Otherwise select Bridge.

Select the encapsulation type your ISP uses from the Encapsulation drop-down list box. Choices vary depending on what you select in the Mode field.

Select the multiplexing method used by your ISP from the Multiplex drop-down list box.

Enter the correct Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI) numbers supplied by your ISP in the VPI and VCI fields. These fields may already be configured.

Click Next.

Figure 6 Wizard Screen 1

Step 2. The second wizard screen varies depending on what mode and encapsulation type you

use. All screens shown are with routing mode. Configure the fields and click Next to continue.

+ 25 hidden pages