ZyXEL Communications P-324 User Manual

Prestige 324

Intelligent Broadband Sharing Gateway

User’s Guide

Version 3.60

January 2003

Prestige 324 Intelligent Broadband Sharing Gateway

Copyright

Copyright © 2003 by ZyXEL Communications Corporation.

The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a

retrieval system, translated into any language, or transmitted in any form or by any means, electronic,

mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written

permission of ZyXEL Communications Corporation.

Published by ZyXEL Communications Corporation. All rights reserved.

Disclaimer

ZyXEL does not assume any liability arising out of the application or use of any products, or software

described herein. Neither does it convey any license under its patent rights nor the patent rights of others.

ZyXEL further reserves the right to make changes in any products described herein without notice. This

publication is subject to change without notice.

Trademarks

ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc.

Other trademarks mentioned in this publication are used for identification purposes only and may be

properties of their respective owners.

ii Copyright

Prestige 324 Intelligent Broadband Sharing Gateway

Federal Communications Commission

(FCC) Interference Statement

This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions:

• This device may not cause harmful interference.

• This device must accept any interference received, including interference that may cause undesired

operations.

This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to

Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful

interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency

energy, and if not installed and used in accordance with the instructions, may cause harmful interference to

radio communications.

If this equipment does cause harmful interference to radio/television reception, which can be determined by

turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of

the following measures:

1. Reorient or relocate the receiving antenna.

2. Increase the separation between the equipment and the receiver.

3. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

4. Consult the dealer or an experienced radio/TV technician for help.

Notice

Changes or modifications not expressly approved by the party responsible for compliance could void the

user's authority to operate the equipment.

FCC Statement iii

Prestige 324 Intelligent Broadband Sharing Gateway

Information for Canadian Users

The Industry Canada label identifies certified equipment. This certification means that the equipment meets

certain telecommunications network protective operation and safety requirements. The Industry Canada

label does not guarantee that the equipment will operate to a user's satisfaction.

Before installing this equipment, users should ensure that it is permissible to be connected to the facilities

of the local telecommunications company. The equipment must also be installed using an acceptable

method of connection. In some cases, the company's inside wiring associated with a single line individual

service may be extended by means of a certified connector assembly. The customer should be aware that

compliance with the above conditions may not prevent degradation of service in some situations.

Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated

by the supplier. Any repairs or alterations made by the user to this equipment, or equipment malfunctions,

may give the telecommunications company cause to request the user to disconnect the equipment.

For their own protection, users should ensure that the electrical ground connections of the power utility,

telephone lines, and internal metallic water pipe system, if present, are connected together. This precaution

may be particularly important in rural areas.

Caution

Users should not attempt to make such connections themselves, but should contact the appropriate

electrical inspection authority, or electrician, as appropriate.

Note

This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus

set out in the radio interference regulations of Industry Canada.

iv Information For Canadian Users

Prestige 324 Intelligent Broadband Sharing Gateway

Declaration of Conformity

We, the Manufacturer/Importer,

ZyXEL Communications Corp.

No. 6, Innovation Rd. II,

Science-Based Industrial Park,

Hsinchu, Taiwan, 300 R.O.C

declare that the product

Prestige 324

is in conformity with:

STANDARD STANDARD ITEM VERSION

EN 55022 Radio disturbance characteristics – Limits and method of

measurement.

EN 61000-3-2 Disturbance in supply system caused by household appliances

and similar electrical equipment “Harmonics”.

EN 61000-3-3 Disturbance in supply system caused by household appliances

and similar electrical equipment “Voltage fluctuations”.

EN 61000-4-2 Electrostatic discharge immunity test – Basic EMC Publication 1995

EN 61000-4-3 Radiated, radio-frequency, electromagnetic field immunity test 1996

EN 61000-4-4 Electrical fast transient / burst immunity test - Basic EMC

Publication

EN 61000-4-5 Surge immunity test 1995

EN 61000-4-6 Immunity to conducted disturbances, induced by radio-frequency

fields

EN 61000-4-8 1993

EN61000-4-11 Voltage dips, short interruptions and voltage variations immunity

tests

1998

1995

1995

1995

1996

1994

Declaration of Conformity v

Prestige 324 Intelligent Broadband Sharing Gateway

ZyXEL Limited Warranty

ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials

or workmanship for a period of up to two years from the date of purchase. During the warranty period, and

upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or

materials, ZyXEL will, at its discretion, repair or replace the defective products or components without

charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or

components to proper operating condition. Any replacement will consist of a new or re-manufactured

functionally equivalent product of equal value, and will be solely at the discretion of ZyXEL. This warranty

shall not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected

to abnormal working conditions.

Note

Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This

warranty is in lieu of all other warranties, express or implied, including any implied warranty of

merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for

indirect or consequential damages of any kind of character to the purchaser.

To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material

Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended that the unit

be insured when shipped. Any returned products without proof of purchase or those with an out-dated

warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts

and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address,

Postage Paid. This warranty gives you specific legal rights, and you may also have other rights that vary

from country to country.

Online Registration

Don’t forget to register your ZyXEL product (fast, easy online registration at www.zyxel.com

future product updates and information.

vi Warranty

) for free

Prestige 324 Intelligent Broadband Sharing Gateway

Customer Support

Please have the following information ready when you contact customer support.

• Product model and serial number.

• Information in Menu 24.2.1 –System Information.

• Warranty Information.

• Date that you received your device.

• Brief description of the problem and the steps you took to solve it.

METHOD

LOCATION

WORLDWIDE

AMERICA

GERMANY

[e-mail]

[e-mail]

[e-mail]

[e-mail] [phone]

[e-mail]

[e-mail] [phone] www.zyxel.dk SCANDINAVIA

[e-mail]

[e-mail] [phone] www.zyxel.de

[e-mail] [phone]

[e-mail]

E-MAIL

SUPPORT/SALES

[phone] ftp.europe.zyxel.com

[phone] ftp.zyxel.com

[phone] ftp.zyxel.dk

[phone]

TELEPHONE/FAX WEB SITE/ FTP SITE REGULAR MAIL

[phone] www.zyxel.com

www.europe.zyxel.com

www.zyxel.com NORTH

800-255-4101

ZyXEL Communications Corp.,
6 Innovation Road II, Science­Based Industrial Park, Hsinchu,
300, Taiwan

ZyXEL Communications Inc.,
1650 Miraloma Avenue,
Placentia, CA 92870, U.S.A.

ZyXEL Communications A/S,
Columbusvej 5, 2860 Soeborg,
Denmark

ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen, Germany

Customer Support vii

Prestige 324 Intelligent Broadband Sharing Gateway

Table of Contents

Copyright.................................................................................................................................................... ii

Federal Communications Commission (FCC) Interference Statement...................................................... iii

Information for Canadian Users ................................................................................................................ iv

ZyXEL Limited Warranty.......................................................................................................................... vi

Customer Support..................................................................................................................................... vii

List of Figures..........................................................................................................................................xiii

List of Diagrams.................................................................................................................................... xviii

List of Charts .........................................................................................................................................xviii

List of Tables ........................................................................................................................................... xix

Preface ...............................................................................................................................................xxiii

Getting Started...............................................................................................................................................I

Chapter 1 Getting to Know Your Prestige ............................................................................................... 1-1

1.1 Intelligent Broadband Sharing Gateway ...................................................................................1-1

1.2 Features of the Prestige 324 ......................................................................................................1-1

1.3 Broadband Internet Access via Cable or DSL Modem .............................................................1-4

1.4 Internet Access Configuration Checklist ..................................................................................1-5

Chapter 2 Hardware Installation & Initial Setup .....................................................................................2-1

2.1 Front Panel................................................................................................................................2-1

2.2 Prestige Rear Panel and Connections........................................................................................2-1

2.3 Turning on Your Prestige..........................................................................................................2-3

2.4 Front Panel LEDs......................................................................................................................2-4

Chapter 3 Introducing the Web Configurator ..........................................................................................3-1

3.1 Accessing the Prestige Web Configurator ................................................................................3-1

Chapter 4 Wizard Setup........................................................................................................................... 4-1

4.1 Introduction to Wizard Screens ................................................................................................4-1

viii Table of Contents

Prestige 324 Intelligent Broadband Sharing Gateway

4.2 Wizard Setup: Screen 2............................................................................................................ 4-2

4.3 Wizard Setup: Screen 3............................................................................................................ 4-7

4.4 Basic Setup Complete ............................................................................................................4-12

Chapter 5 Introducing the SMT and General Setup.................................................................................5-1

5.1 Accessing the Prestige via the Console Port ............................................................................ 5-1

5.2 Navigating the SMT Interface.................................................................................................. 5-2

5.3 Changing the System Password ............................................................................................... 5-5

5.4 General Setup ........................................................................................................................... 5-7

Chapter 6 WAN Setup and Dial Backup ..................................................................................................6-1

6.1 Cloning The MAC Address ..................................................................................................... 6-1

6.2 Dial Backup.............................................................................................................................. 6-2

Chapter 7 LAN Setup...............................................................................................................................7-1

7.1 Introduction .............................................................................................................................. 7-1

7.2 TCP/IP and DHCP for LAN..................................................................................................... 7-2

7.3 TCP/IP and DHCP Ethernet Setup........................................................................................... 7-6

Chapter 8 Internet Access ........................................................................................................................8-1

8.1 Internet Access Setup............................................................................................................... 8-1

8.2 Internet Test Setup ................................................................................................................... 8-6

Advanced Applications ................................................................................................................................II

Chapter 9 Remote Node Setup.................................................................................................................9-1

9.1 Introduction .............................................................................................................................. 9-1

9.2 Remote Node Profile................................................................................................................ 9-1

9.3 Edit IP Remote Node Network Layer Options......................................................................... 9-7

9.4 Remote Node Filter.................................................................................................................. 9-9

9.5 Traffic Redirect ...................................................................................................................... 9-10

Table of Contents ix

Prestige 324 Intelligent Broadband Sharing Gateway

Chapter 10 IP Static Route Setup........................................................................................................... 10-1

10.1 IP Static Route Setup .........................................................................................................10-2

Chapter 11 Network Address Translation (NAT)................................................................................... 11-1

11.1 Introduction........................................................................................................................ 11-1

11.2 SUA (Single User Account) Versus NAT..........................................................................11-6

11.3 NAT Setup .........................................................................................................................11-8

11.4 General NAT Examples ...................................................................................................11-20

Advanced Management..............................................................................................................................III

Chapter 12 Firewall ...............................................................................................................................12-1

12.1 Introduction........................................................................................................................ 12-1

12.2 SMT Firewall Menu........................................................................................................... 12-3

12.3 Web Configurator Firewall Settings Screen......................................................................12-4

12.4 The Firewall, NAT and Remote Management ................................................................... 12-6

12.5 Filter...................................................................................................................................12-8

12.6 Services............................................................................................................................12-10

Chapter 13 Filter Configuration.............................................................................................................13-1

13.1 About Filtering...................................................................................................................13-1

13.2 Configuring a Filter Set......................................................................................................13-4

13.3 Example Filter..................................................................................................................13-13

13.4 Filter Types and NAT ......................................................................................................13-16

13.5 Applying a Filter and Factory Defaults............................................................................ 13-17

Chapter 14 UPnP ...................................................................................................................................14-1

14.1 Introducing Universal Plug and Play .................................................................................14-1

14.2 UPnP and ZyXEL ..............................................................................................................14-2

x Table of Contents

Prestige 324 Intelligent Broadband Sharing Gateway

14.3 Installing UPnP in Windows Example .............................................................................. 14-4

14.4 Using UPnP in Windows XP Example.............................................................................. 14-6

Chapter 15 SNMP Configuration...........................................................................................................15-1

15.1 About SNMP..................................................................................................................... 15-1

15.2 Supported MIBs ................................................................................................................ 15-2

15.3 SNMP Configuration......................................................................................................... 15-2

15.4 SNMP Traps......................................................................................................................15-3

Chapter 16 System Information & Diagnosis........................................................................................16-1

16.1 System Status .................................................................................................................... 16-1

16.2 System Information and Console Port Speed.................................................................... 16-3

16.3 Log and Trace.................................................................................................................... 16-6

16.4 Diagnostic.......................................................................................................................... 16-9

Chapter 17 Firmware and Configuration File Maintenance...................................................................17-1

17.1 Filename Conventions....................................................................................................... 17-1

17.2 Backup Configuration ....................................................................................................... 17-2

17.3 Restore Configuration ....................................................................................................... 17-8

17.4 Uploading Firmware and Configuration Files................................................................. 17-11

Chapter 18 System Maintenance & Information....................................................................................18-1

18.1 Command Interpreter Mode .............................................................................................. 18-1

18.2 Call Control Support ......................................................................................................... 18-2

18.3 Time and Date Setting....................................................................................................... 18-5

Chapter 19 Remote Management...........................................................................................................19-1

19.1 Introduction ....................................................................................................................... 19-1

19.2 Remote Management Setup............................................................................................... 19-2

Table of Contents xi

Prestige 324 Intelligent Broadband Sharing Gateway

19.3 Remote Management and the Firewall...............................................................................19-4

19.4 Remote Management and NAT .........................................................................................19-4

19.5 System Timeout .................................................................................................................19-5

Chapter 20 Call Scheduling................................................................................................................... 20-1

20.1 Introduction........................................................................................................................ 20-1

20.2 Schedule Setup...................................................................................................................20-1

20.3 Schedule Set Setup.............................................................................................................20-2

20.4 Applying Schedule Sets to Remote Nodes.........................................................................20-4

Chapter 21 Troubleshooting ..................................................................................................................21-1

21.1 Problems Starting Up the Prestige .....................................................................................21-1

21.2 Problems with the LAN Interface ......................................................................................21-1

21.3 Problems with the WAN Interface.....................................................................................21-2

Appendices and Index.................................................................................................................................IV

Appendix A PPPoE ..................................................................................................................................... 1

Appendix B PPTP....................................................................................................................................... 4

Appendix C Boot Commands..................................................................................................................... 7

Appendix D NetBIOS Filter Commands.................................................................................................... 9

Appendix E Log Descriptions .................................................................................................................. 12

Appendix F Power Adapter Specifications ............................................................................................... 16

Appendix G Hardware Specifications ...................................................................................................... 17

Appendix H Setting up Your Computer’s IP Address ............................................................................... 18

Appendix I Brute-Force Password Guessing Protection........................................................................... 31

Appendix J Triangle Route ....................................................................................................................... 32

Index .................................................................................................................................................. 37

xii Table of Contents

Prestige 324 Intelligent Broadband Sharing Gateway

List of Figures

Figure 1-1 Internet Access Application....................................................................................................... 1-5

Figure 2-1 Prestige Rear Panel Connections............................................................................................... 2-1

Figure 2-2 Front Panel ................................................................................................................................ 2-4

Figure 3-1 Web Site Address ...................................................................................................................... 3-1

Figure 3-2 Default Password....................................................................................................................... 3-1

Figure 3-3 Change Password....................................................................................................................... 3-2

Figure 3-4 The MAIN MENU Screen of the Web Configurator................................................................. 3-3

Figure 4-1 Wizard 1 .................................................................................................................................... 4-2

Figure 4-2 Wizard 2: PPTP Encapsulation.................................................................................................. 4-4

Figure 4-3 Wizard2: PPPoE Encapsulation................................................................................................. 4-6

Figure 4-4 Wizard 3 .................................................................................................................................. 4-10

Figure 5-1 Initial Screen.............................................................................................................................. 5-2

Figure 5-2 Password Screen........................................................................................................................ 5-2

Figure 5-3 Prestige Main Menu .................................................................................................................. 5-4

Figure 5-4 Menu 23 — System Security..................................................................................................... 5-5

Figure 5-5 Example Xmodem Upload ........................................................................................................ 5-6

Figure 5-6 Menu 1 — General Setup.......................................................................................................... 5-8

Figure 5-7 Configure Dynamic DNS ........................................................................................................ 5-10

Figure 6-1 MAC Address Cloning in WAN Setup Menu ........................................................................... 6-1

Figure 6-2 Configuring Dial Backup in Menu 2 ......................................................................................... 6-3

Figure 6-3 Menu 2.1 Advanced WAN Setup.............................................................................................. 6-5

Figure 6-4 Menu 11.1 Remote Node Profile (Backup ISP) ........................................................................ 6-7

Figure 6-5 Menu 11.2 - Remote Node PPP Options ................................................................................. 6-10

Figure 6-6 Remote Node Setup Script ...................................................................................................... 6-12

Figure 7-1 Menu 3 — LAN Setup............................................................................................................... 7-1

Figure 7-2 Menu 3.1 — LAN Port Filter Setup .......................................................................................... 7-2

Figure 7-3 Physical Network....................................................................................................................... 7-6

Figure 7-4 Partitioned Logical Networks.................................................................................................... 7-6

Figure 7-5 Menu 3 — LAN Setup (10/100 Mbps Ethernet) ....................................................................... 7-7

List of Figures xiii

Prestige 324 Intelligent Broadband Sharing Gateway

Figure 7-6 Menu 3.2 — TCP/IP and DHCP Ethernet Setup........................................................................7-7

Figure 7-7 Menu 3.2.1 — IP Alias Setup.....................................................................................................7-9

Figure 8-1 Internet Access Setup (Ethernet)................................................................................................8-2

Figure 8-2 Internet Access Setup (PPTP) ....................................................................................................8-4

Figure 8-3 Internet Access (PPPoE) ............................................................................................................8-5

Figure 8-4 Internet Setup Test Example ......................................................................................................8-6

Figure 9-1 Menu 11.1 Remote Node Profile for Ethernet Encapsulation ....................................................9-2

Figure 9-2 Remote Node Profile for PPTP Encapsulation...........................................................................9-4

Figure 9-3 Menu 11.1 Remote Node Profile for PPPoE Encapsulation.......................................................9-6

Figure 9-4 Remote Node Network Layer Options .......................................................................................9-7

Figure 9-5 Remote Node Filter (Ethernet Encapsulation)..........................................................................9-10

Figure 9-6 Remote Node Filter (PPTP/PPPoE Encapsulation...................................................................9-10

Figure 9-7 Traffic Redirect WAN Setup....................................................................................................9-11

Figure 9-8 Traffic Redirect LAN Setup.....................................................................................................9-11

Figure 9-9 Menu 11.1 — Remote Node Profile.........................................................................................9-12

Figure 9-10 Menu 11.6 — Traffic Redirect Setup.....................................................................................9-13

Figure 10-1 Example of Static Routing Topology..................................................................................... 10-1

Figure 10-2 Menu 12 — IP Static Route Setup .........................................................................................10-2

Figure 10-3 Menu 12. 1 — Edit IP Static Route........................................................................................10-2

Figure 11-1 How NAT Works ...................................................................................................................11-3

Figure 11-2 NAT Application With IP Alias.............................................................................................11-4

Figure 11-3 Menu 4 — Applying NAT for Internet Access......................................................................11-7

Figure 11-4 Menu 11.3 — Applying NAT to the Remote Node................................................................11-8

Figure 11-5 Menu 15 — NAT Setup .........................................................................................................11-9

Figure 11-6 Menu 15.1 — Address Mapping Sets.....................................................................................11-9

Figure 11-7 Menu 15.1.255 — SUA Address Mapping Rules ................................................................11-10

Figure 11-8 Menu 15.1.1 — First Set ......................................................................................................11-12

Figure 11-9 Menu 15.1.1.1 — Editing/Configuring an Individual Rule in a Set.....................................11-14

Figure 11-10 Menu 15.2 — NAT Server Setup.......................................................................................11-17

Figure 11-11 Multiple Servers Behind NAT Example ............................................................................11-17

Figure 11-12 Trigger Port Forwarding Process: Example .......................................................................11-18

Figure 11-13 Menu 15.3: Trigger Port Setup...........................................................................................11-19

xiv List of Figures

Prestige 324 Intelligent Broadband Sharing Gateway

Figure 11-14 NAT Example 1................................................................................................................. 11-21

Figure 11-15 Menu 4 — Internet Access & NAT Example.................................................................... 11-21

Figure 11-16 NAT Example 2................................................................................................................. 11-22

Figure 11-17 NAT Example 3................................................................................................................. 11-23

Figure 11-18 Example 3: Menu 11.3....................................................................................................... 11-24

Figure 11-19 Example 3: Menu 15.1.1.1................................................................................................. 11-25

Figure 11-20 Example 3: Final Menu 15.1.1 .......................................................................................... 11-25

Figure 11-21 Example 3: Menu 15.2....................................................................................................... 11-26

Figure 11-22 NAT Example 4................................................................................................................. 11-27

Figure 11-23 Example 4: Menu 15.1.1.1 — Address Mapping Rule...................................................... 11-27

Figure 11-24 Example 4: Menu 15.1.1 — Address Mapping Rules ....................................................... 11-28

Figure 12-1 Menu 21 - Filter and Firewall Setup...................................................................................... 12-3

Figure 12-2 Menu 21.2 - Firewall Setup ................................................................................................... 12-4

Figure 12-3 Firewall Settings.................................................................................................................... 12-5

Figure 12-4 Firewall Rule Directions........................................................................................................ 12-7

Figure 12-5 Firewall Filter ........................................................................................................................ 12-8

Figure 12-6 Firewall Service................................................................................................................... 12-10

Figure 13-1 Outgoing Packet Filtering Process......................................................................................... 13-2

Figure 13-2 Filter Rule Process................................................................................................................. 13-3

Figure 13-3 Menu 21 - Filter and Firewall Setup...................................................................................... 13-4

Figure 13-4 Menu 21.1 - Filter Set Configuration .................................................................................... 13-4

Figure 13-5 Menu 21.1.1 – Filter Rules Summary.................................................................................... 13-5

Figure 13-6 Menu 21.1.1 — TCP/IP Filter Rule....................................................................................... 13-7

Figure 13-7 Executing an IP Filter .......................................................................................................... 13-10

Figure 13-8 Menu 21.4.1 — Generic Filter Rule .................................................................................... 13-11

Figure 13-9 Filter Example ..................................................................................................................... 13-13

Figure 13-10 Example Filter — Menu 21.3.1 ......................................................................................... 13-14

Figure 13-11 Example Filter Rules Summary — Menu 21.3.................................................................. 13-15

Figure 13-12 Example Filter Rules Summary......................................................................................... 13-16

Figure 13-13 Protocol and Device Filter Sets ......................................................................................... 13-17

Figure 13-14 Filtering LAN Traffic ........................................................................................................ 13-17

Figure 13-15 Filtering Remote Node Traffic .......................................................................................... 13-18

List of Figures xv

Prestige 324 Intelligent Broadband Sharing Gateway

Figure 14-1 Configuring UPnP..................................................................................................................14-3

Figure 15-1 Menu 22 — SNMP Configuration .........................................................................................15-2

Figure 16-1 Menu 24 — System Maintenance ..........................................................................................16-1

Figure 16-2 Menu 24.1 — System Maintenance — Status........................................................................16-2

Figure 16-3 Menu 24.2 — System Information and Console Port Speed..................................................16-4

Figure 16-4 Menu 24.2.1 System Maintenance — Information ................................................................16-4

Figure 16-5 Menu 24.2.2 — System Maintenance — Change Console Port Speed .................................16-5

Figure 16-6 Menu 23.3 System Maintenance — Log and Trace ...............................................................16-6

Figure 16-7 Examples of Error and Information Messages .......................................................................16-7

Figure 16-8 Menu 24.3.2 — System Maintenance — UNIX Syslog.........................................................16-7

Figure 16-9 Call-Triggering Packet Example............................................................................................16-9

Figure 16-10 Menu 24.4 — System Maintenance — Diagnostic ............................................................ 16-10

Figure 16-11 WAN & LAN DHCP .........................................................................................................16-11

Figure 17-1 Telnet in Menu 24.5 ...............................................................................................................17-3

Figure 17-2 FTP Session Example.............................................................................................................17-4

Figure 17-3 System Maintenance — Backup Configuration .....................................................................17-7

Figure 17-4 System Maintenance — Starting Xmodem Download Screen...............................................17-7

Figure 17-5 Backup Configuration Example.............................................................................................17-7

Figure 17-6 Successful Backup Confirmation Screen ...............................................................................17-8

Figure 17-7 Telnet into Menu 24.6 ............................................................................................................ 17-9

Figure 17-8 Restore Using FTP or TFTP Session Example ....................................................................17-10

Figure 17-9 System Maintenance — Restore Configuration...................................................................17-10

Figure 17-10 System Maintenance — Starting Xmodem Download Screen........................................... 17-10

Figure 17-11 Restore Configuration Example ......................................................................................... 17-11

Figure 17-12 Successful Restoration Confirmation Screen ..................................................................... 17-11

Figure 17-13 Telnet Into Menu 24.7.1 — Upload System Firmware ...................................................... 17-12

Figure 17-14 Telnet Into Menu 24.7.2 — System Maintenance..............................................................17-13

Figure 17-15 FTP Session Example of Firmware File Upload ................................................................ 17-14

Figure 17-16 Menu 24.7.1 as seen using the Console Port ...................................................................... 17-16

Figure 17-17 Example Xmodem Upload.................................................................................................17-16

Figure 17-18 Menu 24.7.2 as seen using the Console Port ...................................................................... 17-17

Figure 17-19 Example Xmodem Upload.................................................................................................17-18

xvi List of Figures

Prestige 324 Intelligent Broadband Sharing Gateway

Figure 18-1 Command Mode in Menu 24................................................................................................. 18-1

Figure 18-2 Valid Commands................................................................................................................... 18-2

Figure 18-3 Call Control ........................................................................................................................... 18-2

Figure 18-4 Budget Management.............................................................................................................. 18-3

Figure 18-5 Call History ........................................................................................................................... 18-4

Figure 18-6 Menu 24 — System Maintenance.......................................................................................... 18-5

Figure 18-7 Menu 24.10 System Maintenance — Time and Date Setting................................................ 18-6

Figure 19-1 Telnet Configuration on a TCP/IP Network.......................................................................... 19-1

Figure 19-2 Menu 24.11 – Remote Management Control......................................................................... 19-3

Figure 20-1 Schedule Setup ...................................................................................................................... 20-1

Figure 20-2 Schedule Set Setup ................................................................................................................ 20-2

Figure 20-3 Applying Schedule Sets to a Remote Node Example (PPPoE Encapsulation)...................... 20-4

Figure 20-4 Applying Schedule Sets to a Remote Node Example (PPTP Encapsulation)........................ 20-5

List of Figures xvii

Prestige 324 Intelligent Broadband Sharing Gateway

List of Diagrams

Diagram 1 Single-PC per Modem Hardware Configuration........................................................................... 2

Diagram 2 Prestige as a PPPoE Client............................................................................................................ 3

Diagram 3 Transport PPP frames over Ethernet ............................................................................................. 4

Diagram 4 PPTP Protocol Overview .............................................................................................................. 5

Diagram 5 Example Message Exchange between PC and an ANT ................................................................ 6

Diagram 6 Option to Enter Debug Mode........................................................................................................ 7

Diagram 7 Boot Module Commands ..............................................................................................................8

Diagram 8 NetBIOS Display Filter Settings Command .................................................................................9

Diagram 9 Console Port Pin Layouts ........................................................................................................... 17

Diagram 10 Ideal Setup ................................................................................................................................32

Diagram 11 “Triangle Route” Problem.........................................................................................................33

Diagram 12 IP Alias .....................................................................................................................................34

Diagram 13 Gateways on the WAN Side ..................................................................................................... 34

List of Charts

Chart 1 System Error Logs ...........................................................................................................................12

Chart 2 System Maintenance Logs ............................................................................................................... 12

Chart 3 UPnP Logs ....................................................................................................................................... 13

Chart 4 Content Filtering Logs ..................................................................................................................... 13

Chart 5 ICMP Type and Code Explanations................................................................................................. 14

Chart 6 CONSOLE Port RS-232 (Female) DB-9F Pin Assignments ........................................................... 17

Chart 7 Brute-Force Password Guessing Protection Commands.................................................................. 31

xviii List of Diagrams and Charts

Prestige 324 Intelligent Broadband Sharing Gateway

List of Tables

Table 1-1 Internet Access Configuration Checklist .................................................................................... 1-5

Table 2-1Prestige Rear Panel Connections ................................................................................................. 2-2

Table 2-2 LED Descriptions ....................................................................................................................... 2-4

Table 4-1 Wizard 2: Ethernet Encapsulation............................................................................................... 4-3

Table 4-2 Ethernet Encapsulation ............................................................................................................... 4-3

Table 4-3 PPTP Encapsulation.................................................................................................................... 4-4

Table 4-4 PPPoE Encapsulation.................................................................................................................. 4-7

Table 4-5 Private IP Address Ranges.......................................................................................................... 4-8

Table 4-6 Example of Network Properties for LAN Servers with Fixed IP Addresses ............................ 4-10

Table 4-7 WAN Setup............................................................................................................................... 4-10

Table 5-1 Main Menu Commands............................................................................................................... 5-3

Table 5-2 Main Menu Summary ................................................................................................................. 5-4

Table 5-3 General Setup Menu Field .......................................................................................................... 5-9

Table 5-4 Configure Dynamic DNS Menu Fields.....................................................................................5-10

Table 6-1 MAC Address Cloning in WAN Setup Menu............................................................................. 6-2

Table 6-2 Configuring Dial Backup in Menu 2........................................................................................... 6-3

Table 6-3 Advanced WAN Port Setup: AT Commands Fields................................................................... 6-5

Table 6-4 Advanced WAN Port Setup: Call Control Parameters................................................................ 6-6

Table 6-5 Menu 11.1 Remote Node Profile (Backup ISP).......................................................................... 6-7

Table 6-6 Menu 11.2 - Remote Node PPP Options...................................................................................6-10

Table 7-1 Example of Network Properties for LAN Servers with Fixed IP Addresses .............................. 7-3

Table 7-2 Private IP Address Ranges.......................................................................................................... 7-4

Table 7-3 LAN DHCP Setup Menu Fields.................................................................................................. 7-8

Table 7-4 LAN TCP/IP Setup Menu Fields................................................................................................ 7-8

Table 7-5 IP Alias Setup Menu Fields ........................................................................................................ 7-9

Table 8-1 Internet Access Setup Menu Fields............................................................................................. 8-2

Table 8-2 New Fields in Menu 4 (PPTP) screen......................................................................................... 8-4

Table 8-3 New Fields in Menu 4 (PPPoE) screen....................................................................................... 8-6

Table 9-1 Fields in Menu 11.1 (Ethernet Encapsulation)............................................................................ 9-2

List of Tables xix

Prestige 324 Intelligent Broadband Sharing Gateway

Table 9-2 Fields in Menu 11.1 (PPTP Encapsulation).................................................................................9-4

Table 9-3 Fields in Menu 11.1 (PPPoE Encapsulation Specific Only)........................................................9-6

Table 9-4 Remote Node Network Layer Options Menu Fields ...................................................................9-8

Table 9-5 Menu 11.1 — Remote Node Profile (Traffic Redirect Field)....................................................9-12

Table 9-6 Traffic Redirect Setup ...............................................................................................................9-13

Table 10-1 IP Static Route Menu Fields....................................................................................................10-3

Table 11-1 NAT Definitions......................................................................................................................11-1

Table 11-2 NAT Mapping Types...............................................................................................................11-5

Table 11-3 Applying NAT in Menus 4 & 11.3..........................................................................................11-8

Table 11-4 SUA Address Mapping Rules................................................................................................11-10

Table 11-5 Fields in Menu 15.1.1............................................................................................................11-12

Table 11-6 Menu 15.1.1.1 — Editing/Configuring an Individual Rule in a Set ......................................11-14

Table 11-7 Services & Port Numbers ......................................................................................................11-16

Table 11-8 Menu 15.3—Trigger Port Setup Description.........................................................................11-20

Table 12-1 Firewall Settings......................................................................................................................12-5

Table 12-2 Firewall Filter ..........................................................................................................................12-9

Table 12-3 Firewall Service.....................................................................................................................12-11

Table 13-1 Abbreviations Used in the Filter Rules Summary Menu ......................................................... 13-5

Table 13-2 Rule Abbreviations Used.........................................................................................................13-6

Table 13-3 TCP/IP Filter Rule Menu Fields..............................................................................................13-7

Table 13-4 Generic Filter Rule Menu Fields ...........................................................................................13-11

Table 14-1 Configuring UPnP ...................................................................................................................14-3

Table 15-1 SNMP Commands...................................................................................................................15-2

Table 15-2 SNMP Configuration Menu Fields..........................................................................................15-3

Table 15-3 SNMP Traps ............................................................................................................................15-3

Table 16-1 System Maintenance — Status Menu Fields...........................................................................16-2

Table 16-2 Fields in System Maintenance.................................................................................................16-5

Table 16-3 System Maintenance Menu Syslog Parameters.......................................................................16-7

Table 16-4 System Maintenance Menu Diagnostic .................................................................................16-11

Table 17-1 Filename Conventions.............................................................................................................17-2

Table 17-2 General Commands for GUI Clients .......................................................................................17-4

Table 17-3 General Commands for TFTP GUI Clients.............................................................................17-6

xx List of Tables

Prestige 324 Intelligent Broadband Sharing Gateway

Table 18-1 Budget Management............................................................................................................... 18-3

Table 18-2 Call History Fields .................................................................................................................. 18-4

Table 18-3 Time and Date Setting Fields.................................................................................................. 18-6

Table 19-1 Menu 24.11 – Remote Management Control.......................................................................... 19-3

Table 20-1 Schedule Set Setup Fields....................................................................................................... 20-3

Table 21-1 Troubleshooting the Start-Up of your Prestige ....................................................................... 21-1

Table 21-2 Troubleshooting the LAN Interface........................................................................................ 21-1

Table 21-3 Troubleshooting the WAN interface....................................................................................... 21-2

List of Tables xxi

Prestige 324 Intelligent Broadband Sharing Gateway

Preface

Congratulations on your purchase of the Prestige 324 Broadband Sharing Gateway with four-port switch.

Don’t forget to register your Prestige (fast, easy online registration at

www.zyxel.com) for free future product updates and information.

Your Prestige is easy to install and to configure. The embedded web configurator is a convenient platform­independent GUI (Graphical User Interface) that allows you to access the Prestige’s management settings.

All functions of the Prestige are also software configurable via the SMT (System Management Terminal)
interface. The SMT is a menu-driven interface that you can access from a terminal emulator through the
console port or through an Ethernet port using a telnet connection.

About This User's Manual

This manual is designed to guide you through the SMT configuration of your Prestige for its various
applications.

Related Documentation

 Online HTML help

The online HTML help shows you how to configure each screen in the embedded web
configurator. Refer to this User’s Guide for more background information on each feature.

 Supporting Disk

More detailed information and examples can be found in the included disk (as well as on the
zyxel.com web site).

 Quick Start Guide

Our Quick Start Guide is designed to help you get up and running right away. It contains a
detailed easy-to-follow connection diagram, default settings, handy checklists and information on
setting up your network and configuring for Internet access.

 Packing List Card

The Packing List Card lists all items that should have come in the package.

 ZyXEL Glossary and Web Site

Please refer to www.zyxel.com
documentation.

Preface xxiii

for an online glossary of networking terms and additional support

Prestige 324 Intelligent Broadband Sharing Gateway

Syntax Conventions

• Mouse action sequences are denoted using a comma. For example, click Start, Settings, Control
Panel, Network means first you click Start, move the mouse pointer over Settings, then move the
mouse pointer over Control Panel and finally click Network

• “Enter” means for you to type one or more characters and press the carriage return. “Select” or
“Choose” means for you to select one from the predefined choices.

• The SMT menu titles and labels are in Bold Times New Roman font. The choices of a menu item are
in Bold Arial font. A single keystroke is in Arial font and enclosed in square brackets, for instance,
[ENTER] means the Enter, or carriage return, key; [ESC] means the escape key and [SPACE BAR]
means the space bar. [UP] and [DOWN] are the up and down arrow keys.

• For brevity’s sake, we will use “e.g.” as shorthand for “for instance” and “i.e.” for “that is” or “in other
words” throughout this manual.

• The Prestige 324 may be referred to as the Prestige or the P324 in this manual. Occasionally, SMT
screens may refer to the Prestige as a router.

xxiv Preface

Getting Started

PPaarrtt II::

Getting Started

This section helps you connect, install and setup your Prestige to operate on your network and

access the Internet.

I

Prestige 324 Intelligent Broadband Sharing Gateway

Chapter 1

Getting to Know Your Prestige

This chapter introduces the main applications of the Prestige as well as a list of key features.

1.1 Intelligent Broadband Sharing Gateway

The Prestige is a dual Ethernet Broadband Sharing Gateway with an integrated 4-port switch and robust
network management features for Internet access via external Cable/xDSL modem. A combination of
switch and router makes your Prestige a cost-effective and viable network solution. A 4-port bandwidth­sensitive 10/100Mbps switch provides greater network efficiency than traditional hubs because the
bandwidth is dedicated and not shared. An unlimited number of computers may be connected to your
Prestige by adding other hubs if your LAN consists of more than 4 computers.

The Prestige web configurator is a breeze to operate and independent of the operating system you use.

1.2 Features of the Prestige 324

The following are the main hardware and firmware features of the Prestige.

1.2.1 Hardware Features

10/100MB Auto-negotiating Ethernet WAN

This auto-negotiation feature allows the Prestige to detect the speed of incoming transmissions and adjust
appropriately without manual intervention. It allows data transfer of either 10 Mbps or 100 Mbps in either
half-duplex or full-duplex mode depending on your Ethernet network.

Integrated 4-Port 10/100MB Auto-sensing Ethernet Switch

The 10/100M LAN interface enables fast data transfers of 10Mbps or 100Mbps in either half-duplex or
full-duplex mode depending on your Ethernet network. Auto-sensing allows you to use either a crossover
Ethernet cable or a straight-through Ethernet cable to connect your device to either a computer or external
hub. In other words these ports automatically adjust according to the type of cable so that either straight­through Ethernet cable or crossover Ethernet cable may be used.

All-in-one Console and Auxiliary Port

Set the CON/AUX switch to the “CON” side when using the CON/AUX port as a regular console port for
local device configuration and management. Set this switch to the “AUX” side when using the CON/AUX
port as an auxiliary dial-up WAN connection.

Getting to Know Your Prestige 1-1

1.2.2 Firmware Features

Full Network Management

Your Prestige offers you a variety of options for network management. It supports password protected local
and remote network management via the console port or a telnet connection using SMT (System
Management Interface). Your Prestige includes an intuitive web configurator that makes setup and
configuration easy. Included with the web configurator is embedded help designed to assist you during
setup/configuration. It also supports FTP (File Transfer Protocol) server for remote management, TFTP
(Trivial FTP), SNMP (Simple Network Management Protocol) and CI (Command Interpreter) mode.

Firewall

The Prestige is a stateful inspection firewall with DoS (Denial of Service) protection. By default, when the
firewall is activated, all incoming traffic from the WAN to the LAN is blocked unless it is initiated from
the LAN. The Prestige firewall supports TCP/UDP inspection, DoS detection and prevention, real time
alerts, NETBIOS packet filtering, reports and logs.

Content Filtering

The Prestige can block web features such as ActiveX controls, Java applets and cookies, as well as disable
web proxies. The Prestige can also block specific URLs by using the keyword feature.

Packet Filtering

Packet filtering blocks unwanted traffic from entering/leaving your network.

Universal Plug and Play (UPnP)

Using the standard TCP/IP protocol, the Prestige and other UPnP enabled devices can dynamically join a
network, obtain an IP address and convey its capabilities to other devices on the network.

Traffic Redirect

Traffic Redirect is used to sustain the Internet connection. The Prestige detects if the connectivity has been
lost and will forward the outgoing traffic to another specified gateway.

NAT (Network Address Translation)

NAT (Network Address Translation - NAT, RFC 1631) allows the translation of an Internet Protocol
address used within one network to a different IP address known within another network. The Prestige can
now map multiple global IP addresses to local IP addresses of clients or servers.

Port Forwarding

Use this feature to forward incoming service requests to a server on your local network. You may enter a
single port number or a range of port numbers to be forwarded, and the local IP address of the desired
server.

1-2 Getting to Know Your Prestige

Prestige 324 Intelligent Broadband Sharing Gateway

DHCP Support

DHCP (Dynamic Host Configuration Protocol) allows the individual clients (workstations) to obtain the
TCP/IP configuration at start-up from a centralized DHCP server. The Prestige has built-in DHCP server
capability, enabled by default, which means it can assign IP addresses, an IP default gateway and DNS
servers to Windows 9x, Windows NT, Windows 2000 and other systems that support the DHCP client.

Dynamic DNS Support

With Dynamic DNS support, you can have a static hostname alias for a dynamic IP address, allowing the
host to be more easily accessible from various locations on the Internet. You must register for this service
with a Dynamic DNS service provider.

IP Multicast

Traditionally, IP packets are transmitted in two ways - unicast or broadcast. Multicast is a third way to
deliver IP packets to a group of hosts. IGMP (Internet Group Management Protocol) is the protocol used to
support multicast groups. The latest version is version 2 (see RFC 2236). The Prestige supports versions 1
and 2.

IP Alias

IP alias allows you to partition a physical network into logical networks over the same Ethernet interface.

Call Scheduling

Configure call time periods to restrict and allow access for users on remote nodes.

Call Control

The Prestige provides budget management for outgoing calls and chronicles incoming and outgoing calls.

RoadRunner Support

In addition to standard cable modem services, the Prestige supports Time Warner’s RoadRunner Service.

PPPoE Support

PPPoE facilitates the interaction of a host with a broadband modem to achieve access to high-speed data
networks via a familiar "dial-up networking" user interface.

PPTP Support

Point-to-Point Tunneling Protocol (PPTP) is a network protocol that enables secure transfer of data from a
remote client to a private server, creating a Virtual Private Network (VPN) using a TCP/IP-based network.

PPTP supports on-demand, multi-protocol and virtual private networking over public networks, such as the
Internet.

Getting to Know Your Prestige 1-3