Prestige 660H Series
ADSL 2/2+ Gateway
Compact Guide
Version 3.40 (QT)
April 2004
Prestige 660H Series Compact Guide
Table of Contents
1 Introducing the Prestige..............................................................................................3
2 Hardware .....................................................................................................................4
2.1 Rear Panel Connections.........................................................................................4
2.2 The Front Panel LEDs ...........................................................................................5
3 Setting Up Your Computer’s IP Address ..................................................................6
3.1 Windows 95/98/Me.................................................................................................6
3.2 Windows 2000/NT/XP ............................................................................................9
3.3 Checking/Updating Your Computer’s IP Address................................................ 10
3.4 Testing the Connection to the Prestige.................................................................10
4 Configuring Your Prestige........................................................................................11
4.1 Accessing Your Prestige Via Web Configurator ..................................................11
4.2 Common Screen Command Buttons.....................................................................13
4.3 Internet Access Using the Wizard ........................................................................13
4.4 Test Your Internet Connection ............................................................................. 19
5 Advanced Configuration...........................................................................................19
5.1 Network Address Translation Overview...............................................................19
5.2 Configuring SUA Server ......................................................................................20
5.3 Firewall Overview................................................................................................22
5.4 Enabling the Firewall ..........................................................................................23
5.5 Procedure for Configuring Firewall Rules ..........................................................23
5.6 Configuring Source and Destination Addresses...................................................27
6 Troubleshooting.........................................................................................................29
2
Prestige 660H Series Compact Guide
1 Introducing the Prestige
The Prestige 660H ADSL 2/2+ Gateway is the ideal all-in-one device for small networks
connecting to the Internet via ADSL. Key features of the Prestige include NAT, content
filter and firewall. See your User’s Guide for more details on all Prestige features.
You should have an Internet account already set up and have been given most of the
following information.
INTERNET ACCOUNT INFORMATION
Your device’s WAN IP Address (if given): __________________
DNS Server IP Address (if given): Primary __________________,
Secondary _________________
Virtual Path Identifier (VPI): ____________
Virtual Channel Identifier (VCI): ____________
Multiplexing (VC-based or LLC-based):
Encapsulation: (choose one below)
RFC 1483
ENET ENCAP
PPPoA
PPPoE
Ethernet Encapsulation Gateway IP Address:
__________________
User Name: ____________ Password: ____________
Service Name: ____________
User Name: ____________ Password: ____________
VC LLC
Certifications
1. Go to www.zyxel.com
2. Select your product from the drop-down list box on the ZyXEL home page to go to
that product's page.
3. Select the certification you wish to view from this page.
3
Prestige 660H Series Compact Guide
2 Hardware
2.1 Rear Panel Connections
Figure 1 Prestige Rear Panel Connections
Table 1 Prestige Rear Panel Description
LABEL DESCRIPTION
1. DSL Connect to a telephone jack using the included phone wire.
2. LAN
1..4
3. POWER Connect to a power source using the power adaptor for your region.
Connect to a computer/external hub using an Ethernet cable.
Use only the included power adaptor.
After you’ve made the connections, connect the power adaptor to a power supply and
push in the power button to turn on the Prestige.
The PWR/SYS LED blinks while performing system testing and then turns steady on if
the testing is successful. A LAN LED turns on if a LAN port is properly connected.
4
Prestige 660H Series Compact Guide
Table 1 Prestige Rear Panel Description
LABEL DESCRIPTION
RESET You only need to use this button if you’ve forgotten the Prestige’s
password. It returns the Prestige to the factory defaults (password is
1234, LAN IP address 192.168.1.1 etc.; see your User’s Guide for
details).
2.2 The Front Panel LEDs
Figure 2 Front Panel
Refer to the following table for more detailed LED descriptions.
Table 2 Front Panel LED Description
LED COLOR STATUS DESCRIPTION
PWR/SYS
LAN 1-4
Green
Red On Power to the Prestige is too low.
Off The system is not ready or has malfunctioned.
Green
Amber
On The Prestige is receiving power and functioning
properly.
Blinking The Prestige is rebooting.
On The Prestige has a successful 10Mb Ethernet
connection.
Blinking The Prestige is sending/receiving data.
On The Prestige has a successful 100Mb Ethernet
connection.
Blinking The Prestige is sending/receiving data.
5
Prestige 660H Series Compact Guide
Table 2 Front Panel LED Description
LED COLOR STATUS DESCRIPTION
Off The LAN is not connected.
DSL/ACT
Green
Off The DSL link is down.
Fast
Blinking
Slow
Blinking
On The system is ready, but is not sending/receiving
On The connection to the PPPoE server is up. Amber
Blinking The Prestige is sending/receiving PPP data.
The Prestige is sending/receiving non-PPP data.
The Prestige is initializing the DSL line.
non-PPP data.
3 Setting Up Your Computer’s IP
Address
Skip this section if your computer is already set up to accept a
dynamic IP address. This is the default for most new computers.
The Prestige is already set up to assign your computer an IP address. Use this section to
set up your computer to receive an IP address or assign it a static IP address in the
192.168.1.2 to 192.168.1.254 range with a subnet mask of 255.255.255.0. This is
necessary to ensure that your computer can communicate with your Prestige.
Your computer must have an Ethernet card and TCP/IP installed. TCP/IP should already
be installed on computers using Windows NT/2000/XP, Macintosh OS 7 and later
operating systems.
3.1 Windows 95/98/Me
Click Start, Settings, Control Panel and double-click the Network icon to
1.
open the Network window.
6
Prestige 660H Series Compact Guide
The Network window Configuration tab displays a list of installed
2.
components. You need a network adapter, the TCP/IP protocol and Client
for Microsoft Networks.
In the Network window
3.
Configuration tab, select your
network adapter's TCP/IP entry and
click Properties.
4. Click the IP Address tab.
-If your IP address is dynamic, select
Obtain an IP address automatically.
-If you have a static IP address, select
Specify an IP address and type your
information into the IP Address and
Subnet Mask fields.
7
Prestige 660H Series Compact Guide
5. Click the DNS Configuration tab.
-If you do not know your DNS
information, select Disable DNS.
-If you know your DNS information, select
Enable DNS and type the information in
the fields below (you may not need to fill
them all in).
6.
Click the Gateway tab.
-If you do not know your gateway’s IP
address, remove previously installed
gateways.
-If you have a gateway IP address, type it
in the New gateway field and click Add.
7. Click OK to save and close the TCP/IP Properties window.
8. Click OK to close the Network window. Insert the Windows CD if prompted.
9. Turn on your Prestige and restart your computer when prompted.
Verifying Your Computer’s IP Address
1. Click Start and then Run.
8
Prestige 660H Series Compact Guide
2. In the Run window, type "winipcfg" and then click OK to open the IP
Configuration window.
3. Select your network adapter. You should see your computer's IP address, subnet
mask and default gateway.
3.2 Windows 2000/NT/XP
1. In Windows XP, click start, Control Panel. In Windows 2000/NT, click Start,
Settings, Control Panel.
2. In Windows XP, click Network Connections.
In Windows 2000/NT, click Network and Dial-up Connections.
3. Right-click Local Area Connection and then click Properties.
4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click
Properties.
5. The Internet Protocol TCP/IP Properties
screen opens (the General tab in
Windows XP).
- To have your computer assigned a
dynamic IP address, click Obtain an IP
address automatically.
If you know your DNS sever IP
address(es), type them in the Preferred
DNS server and/or Alternate DNS
server fields.
-To configure a static IP address, click
Use the following IP Address and fill in
the IP address (choose one
from192.168.1.2 to 192.168.1.254),
Subnet mask (255.255.255.0), and
Default gateway (192.168.1.1) fields.
Then enter your DNS server IP address(es) in the Preferred DNS server and/or
Alternate DNS server fields.
If you have more than two DNS servers, click Advanced, the DNS tab and then
configure them using Add.
9
Prestige 660H Series Compact Guide
6. Click Advanced. Remove any previously
installed gateways in the IP Settings tab
and click OK to go back to the Internet
Protocol TCP/IP Properties screen.
7. Click OK to close the Internet Protocol
(TCP/IP) Properties window.
8. Click OK to close the Local Area
Connection Properties window.
3.3 Checking/Updating Your Computer’s IP Address
1. In the computer, click Start, (All) Programs, Accessories and then Command
Prompt.
2. In the Command Prompt window, type "ipconfig" and then press ENTER to verify
that your computer’s IP address is in the correct range (192.168.1.2 to
192.168.1.254) with subnet mask 255.255.255.0. This is necessary in order to
communicate with the Prestige.
Refer to your User’s Guide for detailed IP address configuration for other Windows and
Macintosh computer operating systems.
3.4 Testing the Connection to the Prestige
1. Click Start, (All) Programs, Accessories and then Command Prompt.
2. In the Command Prompt window, type "ping” followed by a space and the IP
address of the Prestige (192.168.1.1 is the default).
3. Press ENTER and the following screen displays.
10
Prestige 660H Series Compact Guide
C:\>ping 192.168.1.1
Pinging 192.168.1.1 with 32 bytes of data:
Reply from 192.168.1.1: bytes=32 time=10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Ping statistics for 192.168.1.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 10ms, Average = 2ms
Your computer can now communicate with the Prestige using the LAN port.
4 Configuring Your Prestige
This Compact Guide shows you how to use the web
configurator only. See your User’s Guide for background
information on all Prestige features and SMT (System
Management Terminal) configuration.
4.1 Accessing Your Prestige Via Web Configurator
Step 1. Launch your web browser. Enter “192.168.1.1” as the web site address.
Web site address.
Figure 3 Entering Prestige LAN IP Address in Internet Explorer
Step 2. An Enter Network Password window displays. Enter the user name
(“admin” is the default), password (“1234” is the default) and click OK.
11
Prestige 660H Series Compact Guide
Default user name.
Figure 4 Web Configurator: Password Screen
Step 3. You should now see the web configurator Site Map screen.
Click Wizard Setup to begin a series of screens to configure your Prestige for
the first time.
Click a link under Advanced Setup to configure advanced Prestige features.
Click a link under Maintenance to see Prestige performance statistics, upload
firmware and back up, restore or upload a configuration file.
Click Logout in the navigation panel when you have finished a Prestige
management session.
12
Prestige 660H Series Compact Guide
WIZARD
Navigation panel
LOGOUT
Figure 5 Web Configurator: Site Map Screen
The Prestige automatically times out after five minutes of
inactivity. Simply log back into the Prestige if this happens to
you.
4.2 Common Screen Command Buttons
The following table shows common command buttons found on many web configurator
screens.
Back Click Back to return to the previous screen.
Apply Click Apply to save your changes back to the Prestige.
Reset/Cancel Click Reset or Cancel to begin configuring this screen afresh.
4.3 Internet Access Using the Wizard
Use the Wizard Setup screens to configure your system for Internet access settings and
fill in the fields with the information in the Internet Account Information table. Your ISP
may have already configured some of the fields in the wizard screens for you.
Step 1. In the Site Map screen click Wizard Setup to display the first wizard
screen.
13
Prestige 660H Series Compact Guide
From the Mode drop-down list box, select
Routing (default) if your ISP allows
multiple computers to share an Internet
account. Otherwise select Bridge.
Select the encapsulation type your ISP
uses from the Encapsulation drop-down
list box. Choices vary depending on what
you select in the Mode field.
Select the multiplexing method used by
your ISP from the Multiplex drop-down
list box.
Enter the correct Virtual Path Identifier
(VPI) and Virtual Channel Identifier (VCI)
numbers supplied by your ISP in the VPI
and VCI fields. These fields may already
be configured.
Figure 6 Wizard Screen 1
Click Next.
Step 2. The second wizard screen varies depending on what mode and
encapsulation type you use. All screens shown are with routing mode.
Configure the fields and click Next to continue.
14
Prestige 660H Series Compact Guide
If your ISP provides the name of
your PPPoE service provider,
enter it in the Service Name
field.
Enter the user name and
password exactly as your ISP
assigned them.
Select Obtain an IP Address
Automatically if you have a
dynamic IP address; otherwise
select Static IP Address and
type your ISP assigned IP
address in the text box below.
Select Connect on Demand
when you don't want the
connection up all the time and
specify an idle time-out period (in
seconds) in the Max Idle
Figure 7 Internet Connection with PPPoE
Select Nailed-Up Connection when you want your connection up all the time. The
Prestige will try to bring up the connection automatically if it is disconnected
From the Network Address Translation drop-down list box, select SUA Only, Full
Feature or None. Refer to the Network Address Translation section for more information.
Timeout field.
Enter the IP address given by
your ISP in the IP Address field.
Figure 8 Internet Connection with RFC 1483
15
The IP Address
field is not
available for
bridge mode.
Refer to Figure 7 for description
of the Network Address
Translation field.
Prestige 660H Series Compact Guide
Figure 9 Internet Connection with ENET
ENCAP
In the ENET ENCAP Gateway
field, enter the gateway IP
address given by your ISP.
Refer to Figure 7 for other field
descriptions
.
Refer to Figure 7 for field
descriptions.
The IP Address
and Network
Address
Translation fields
are not available
for bridge mode.
Figure 10 Internet Connection with PPPoA
16
Prestige 660H Series Compact Guide
Step 3. Verify the settings in the screen shown next. To change the LAN
information on the Prestige, click Change LAN Configurations.
Otherwise click Save Settings to save the configuration and skip to step 5.
Figure 11 Wizard Screen 3
Step 4. If you want to change your Prestige LAN settings, click Change LAN
Configuration to display the screen as shown next.
17
Prestige 660H Series Compact Guide
Enter the IP address of your Prestige in
dotted decimal notation in the LAN IP
Address field. For example,
192.168.1.1 (factory default).
If you change the
Prestige’s LAN IP
address, you must use
the new IP address if
you want to access the
web configurator
again.
Enter a subnet mask in dotted decimal
notation in the LAN Subnet Mask field.
Figure 12 Wizard: LAN Configuration
From the DHCP Server drop-down list box, select ON to allow your Prestige to assign IP
addresses, an IP default gateway and DNS servers to computer systems that support the
DHCP client. Select OFF to disable DHCP server.
When DHCP server is used, set the following items:
Specify the first of the contiguous addresses in the IP address pool in the Client IP Pool
Starting Address field.
Specify the size or count of the IP address pool in the Size of Client IP Pool field.
Enter the IP address(es) of the DNS server(s) in the Primary DNS Server and/or
Secondary DNS Server fields.
Step 5. The Prestige automatically tests the connection to the computer(s)
connected to the LAN ports. To test the connection from the Prestige to the
ISP, click Start Diagnose. Otherwise click Return to Main Menu to go
back to the Site Map screen.
18
Prestige 660H Series Compact Guide
Figure 13 Wizard Screen 4
4.4 Test Your Internet Connection
Launch your web browser and navigate to www.zyxel.com. Internet access is just the
beginning. Refer to the User’s Guide for more detailed information on the complete
range of Prestige features. If you cannot access the Internet, open the web configurator
again to confirm that the Internet settings you configured in the Wizard Setup are
correct.
5 Advanced Configuration
This section shows how to configure some of the advanced features of the Prestige.
5.1 Network Address Translation Overview
NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP
address of a host in a packet. For example, the source address of an outgoing packet,
used within one network is changed to a different IP address known within another
network.
If you have a single public IP address then select SUA Only in the NAT-Mode screen
(see Figure 14). If you have multiple public IP addresses then you may use full feature
mapping types (see the User’s Guide for more details).
NAT supports five types of IP/port mapping. They are:
19
Prestige 660H Series Compact Guide
1. One-to-One: One-to-one mode maps one local IP address to one global IP
address. Note that port numbers do not change for One-to-one NAT mapping
type.
2. Many-to-One: Many-to-One mode maps multiple local IP addresses to one
global IP address.
3. Many-to-Many Overload: Many-to-Many Overload mode maps multiple
local IP addresses to shared global IP addresses.
4. Many-to-Many No Overload: Many-to-Many No Overload mode maps each
local IP address to unique global IP addresses.
5. Server: This type allows you to specify inside servers of different services
behind the NAT to be accessible to the outside world.
5.2 Configuring SUA Server
An SUA server set is a list of inside (behind NAT on the LAN) servers, for example,
web or FTP, that you can make visible to the outside world even though SUA makes
your whole inside network appear as a single computer to the outside world.
Step 1. From the main screen click Advanced Setup and then NAT to open the
NAT-Mode screen. Select SUA Only.
Step 2. Click Edit Details.
Figure 14 NAT: Mode
20
Prestige 660H Series Compact Guide
Figure 15 SUA/NAT Server
The following table describes the labels in this screen.
Table 3 SUA/NAT Server
LABEL DESCRIPTION
Start Port
No.
End Port
No.
IP
Address
Type a port number in this field. To forward only one port, type the port
number again in the End Port field. To forward a series of ports, type the
start port number here and the end port number in the End Port field.
Type a port number in this field. To forward only one port, type the port
number in the Start Port field above and then type it again in this field. To
forward a series of ports, type the last port number in a series that begins
with the port number in the Start Port field above.
Enter the inside IP address of the server here.
21
Prestige 660H Series Compact Guide
5.3 Firewall Overview
The Prestige firewall is a stateful inspection firewall and is designed to protect against
Denial of Service attacks when activated. The Prestige’s purpose is to allow a private
Local Area Network (LAN) to be securely connected to the Internet. The Prestige can be
used to prevent theft, destruction and modification of data, as well as log events, which
may be important to the security of your network. The Prestige also has packet-filtering
capabilities.
When activated, the firewall allows all traffic to the Internet that originates from the
LAN, and blocks all traffic to the LAN that originates from the Internet. In other words
the Prestige will:
Allow all sessions originating from the LAN to the WAN
Deny all sessions originating from the WAN to the LAN
LAN-to-WAN rules are local network to Internet firewall rules. The default is to
forward all traffic from your local network to the Internet.
The following figure illustrates a Prestige firewall application.
Denial of Service Attacks
Figure 16 Prestige Firewall Application
22
Prestige 660H Series Compact Guide
5.4 Enabling the Firewall
From the main screen, click Advanced Setup, Firewall and then Config to open the
screen as shown. Enable (or activate) the firewall by selecting the Enable Firewall
check box as seen in the following screen.
Figure 17 Enabling the Firewall
5.5 Procedure for Configuring Firewall Rules
From the main screen, click Advanced Setup, Firewall and then Rule Summary (for
either local network to Internet rules or Internet to local network rules) to open the
Summary screen.
23
Prestige 660H Series Compact Guide
Figure 18 Rule Summary
The following table describes the labels in this screen.
Table 4 Rule Summary
LABEL DESCRIPTION
The default
action for
packets not
matching
following rules
Default Permit
Log
Should packets that do not match the following rules be blocked or
forwarded? Make your choice from the drop down list box. Note that
“block” means the firewall silently discards the packet.
Click this check box to log all matched rules in the Access Control
List (ACL) default set.
24
Prestige 660H Series Compact Guide
Table 4 Rule Summary
LABEL DESCRIPTION
The following read-only fields summarize the rules you have created that apply to traffic
traveling in the selected packet direction. The firewall rules that you configure
(summarized below) take priority over the general firewall action settings above.
No. This is your firewall rule number. The ordering of your rules is
Source IP This drop-down list box displays the source addresses or ranges of
Destination IP This drop-down list box displays the destination addresses or
Service This drop-down list box displays the services to which this firewall
Action This is the specified action for that rule, either Block or Forward.
Log This field shows you if a log is created for packets that match the
Rules Reorder You may reorder your rules using this function. Select the rule you
To Rule
Number
Move Click Move to move the rule.
important as rules are applied in turn. The Move field below allows
you to reorder your rules.
addresses to which this firewall rule applies. Please note that a
blank source or destination address is equivalent to Any.
ranges of addresses to which this firewall rule applies. Please note
that a blank source or destination address is equivalent to Any.
rule applies. Please note that a blank service type is equivalent to
Any.
Note that Block means the firewall silently discards the packet.
rule (Match), don't match the rule (Not Match), both (Both) or no
log is created (None).
want to move. The ordering of your rules is important as rules are
applied in turn.
Select the number you want to move the rule to.
Follow these directions to create a new rule.
Step 1. In the Summary screen, click a rule’s index number. The Edit Rule screen
opens.
Step 2. In the Available Services text box, select the services you want. Customize
ports for services not predefined by the Prestige by clicking the Edit
25
Prestige 660H Series Compact Guide
Available Service buttons. For a comprehensive list of port numbers and
services, visit the IANA (Internet Assigned Number Authority) web site.
Step 3. Configure the Source Address and Destination Address for the rule.
Figure 19 Creating/Editing A Firewall Rule
The following table describes the labels in this screen.
26
Prestige 660H Series Compact Guide
Table 5 Creating/Editing A Firewall Rule
LABEL DESCRIPTION
Source Address Click SrcAdd to add a new address, SrcEdit to edit an existing one
Destination
Address
Services
Available/
Selected
Services
Edit Available
Service
Action for
Matched
Packets
Log This field determines if a log is created for packets that match the
Delete Click Delete to remove this rule.
or SrcDelete to delete one. Please see the next section for more
information on adding and editing source addresses.
Click DestAdd to add a new address, DestEdit to edit an existing
one or DestDelete to delete one. Please see the following section
on adding and editing destination addresses.
Highlight a service from the Available Services box on the left, then
click >> to add it to the Selected Services box on the right. To
remove a service, highlight it in the Selected Services box on the
right, then click <<.
Click this button to go to the list of available services.
Should packets that match this rule be blocked or forwarded? Make
your choice from the drop down list box. Note that Block means the
firewall silently discards the packet.
rule, don’t match the rule, both or no log is created.
Alert Check the Alert check box to determine that this rule generates an
alert when the rule is matched.
5.6 Configuring Source and Destination Addresses
To add a new source or destination address, click SrcAdd or DestAdd from the
previous screen. To edit an existing source or destination address, select it from the box
and click SrcEdit or DestEdit from the previous screen. Either action displays the
following screen.
27
Prestige 660H Series Compact Guide
Figure 20 Adding/Editing Source and Destination Addresses
The following table describes the labels in this screen.
Table 6 Adding/Editing Source and Destination Addresses
LABEL DESCRIPTION
Address Type Do you want your rule to apply to packets with a particular (single)
Start IP
Address
End IP
Address
Subnet Mask Enter the subnet mask here, if applicable.
IP address, a range of IP addresses (e.g., 192.168.1.10 to
192.169.1.50), a subnet or any IP address? Select an option from
the drop down list box
Enter the single IP address or the starting IP address in a range
here.
Enter the ending IP address in a range here.
28
Prestige 660H Series Compact Guide
6 Troubleshooting
Table 7 Troubleshooting
PROBLEM CORRECTIVE ACTION
None of the
LEDs turn on
when you turn
on the Prestige.
Cannot access
the Prestige
from the LAN.
Cannot ping any
computer on the
LAN.
Cannot get a
WAN IP
address from
the ISP.
Cannot access
the Internet.
Make sure that you have the correct power adaptor connected to
the Prestige and plugged in to an appropriate power source. Check
all cable connections.
If the LEDs still do not turn on, you may have a hardware problem.
In this case, you should contact your local vendor.
Check the cable connection between the Prestige and your
computer or hub. Refer to the Rear Panel Connections section for
details.
Ping the Prestige from a computer on the LAN. Make sure your
computer Ethernet adapter is installed and functioning properly.
If the LAN LEDs are all off, check the cable connections between
the Prestige and your computers on the LAN.
Verify that the IP address, subnet mask of the Prestige and the LAN
computers are in the same IP address range.
The WAN IP is provided after the ISP verifies the MAC address,
host name or user ID. Find out the verification method used by your
ISP and configure the corresponding fields.
If the ISP checks the user ID, check your service type, user name,
and password in the WAN Setup screen.
Verify the Internet connection settings in the WAN Setup screen.
Make sure you entered the correct user name and password.
29
Loading...