ZyXEL does not assume any liability arising out of the application or use of any products, or software
described herein. Neither does it convey any license under its patent’s rights nor the patents' rights of
others. ZyXEL further reserves the right to make changes in any products described herein without notice.
This publication is subject to change without notice.
Trademarks
Trademarks mentioned in this publication are used for identification purposes only and may be properties of
their respective owners. ZyNOS is a registered trademark of ZyXEL Communications Corporation
.
2Copyright
Prestige 642R Series ADSL Router
CE
iii
Prestige 642R Series ADSL Router
ivCE
Prestige 642R Series ADSL Router
FCCv
Prestige 642R Series ADSL Router
Federal Communications Commission (FCC) Interference Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions:
♦ This device may not cause harmful interference.
♦ This device must accept any interference received, including interference that may cause undesired
operations.
This equipment has been tested and found to comply with the limits for a CLASS B digital device pursuant
to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency
energy, and if not installed and used in accordance with the instructions, may cause harmful interference to
radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be determined by
turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of
the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and the receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance could void the
user's authority to operate the equipment.
Notice 2
Use of shielded RS-232 cables is required to ensure compliance with FCC Part 15, and it is the
responsibility of the user to provide and use shielded RS-232 cables.
viFCC
Prestige 642R Series ADSL Router
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials
or workmanship for a period of up to two (2) years from the date of purchase. During the warranty period,
and upon proof of purchase, should the product have indications of failure due to faulty workmanship
and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components
without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the
product or components to proper operating condition. Any replacement will consist of a new or remanufactured functionally equivalent product of equal value, and will be solely at the discretion of ZyXEL.
This warranty shall not apply if the product is modified, misused, tampered with, damaged by an act of
God, or subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This
warranty is in lieu of all other warranties, express or implied, including any implied warranty of
merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect
or consequential damages of any kind of character to the purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center; refer to the separate Warranty
Card for your Return Material Authorization number (RMA). Products must be returned Postage Prepaid. It
is recommended that the unit be insured when shipped. Any returned products without proof of purchase or
those with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer
will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the
corresponding return address, Postage Paid (USA and territories only). If the customer desires some other
return destination beyond the U.S. borders, the customer shall bear the cost of the return shipment. This
warranty gives you specific legal rights, and you may also have other rights that vary from state to state.
Please register your Prestige (fast, easy online registration at www.zyxel.com) for free
product updates and information
ZyXEL Limited Warrantyvii
Prestige 642R Series ADSL Router
Customer Support
If you have questions about your ZyXEL product(s) or desire assistance, please contact ZyXEL
Communications Corporation offices worldwide, in any one of the following ways. Our ftp sites are also
available for software and ROM upgrades.
Table 12-1Troubleshooting the Start-Up of your Prestige...................................................................12-1
Table 12-2Troubleshooting the ADSL connection ..............................................................................12-2
Table 12-3Troubleshooting the LAN Interface.................................................................................... 12-2
Table 12-4Troubleshooting a Connection to a Remote Node or ISP...................................................12-2
List of Tablesxix
Prestige 642R Series ADSL Router
Preface
About Your ADSL Internet Access Router
Congratulations on your purchase of the Prestige 642R Series ADSL Internet Access Router.
Don’t forget to register your Prestige (fast, easy online registration at www.zyxel.com) for
free future product updates and information.
The Prestige 642R is an ADSL router used for Internet/LAN access via an ADSL line. We will refer to the
Prestige 642R Series as the Prestige 642R, P642 or simply the Prestige from now on.
The P642 can run maximum upstream transmission rates of 640Kbps and maximum downstream
transmission rates of 8Mbps. The actual rate depends on the copper category of your telephone wire,
distance from the central office and the type of ADSL service subscribed to. See the sections below for
more background information on DSL and ADSL.
The P642's 10/100M auto-negotiating LAN interface enables fast data transfer of either 10Mbps or
100Mbps in either half-duplex or full-duplex mode depending on your Ethernet network.
Your Prestige is easy to install and to configure. All functions of the Prestige are software configurable via
the SMT (System Management Terminal) Interface or the Prestige Network Commander (PNC).
About This User's Guide
This user's guide covers all aspects of the Prestige 642R operations and shows you how to get the best out
of the multiple advanced features of your ADSL Internet Access Router using the SMT. It is designed to
guide you through the correct configuration of your Prestige 642R for various applications.
Related Documentation
¾ Supporting CD
The contents of this disk are:
1. PNC Software
2. Support Notes include:
a. Configuring your P642 for Internet Accessb. General FAQ
c. Advanced FAQd. Applications Notes
e. Troubleshootingf. Reference CI Command
3. On-line Manual
4. Utility
5. Firmware/ROM File – this refers to the ZyNOS firmware and the router configuration file.
This information may also be viewed at our website (http://www.zyxel.com/). The website FAQs and Notes
are periodically updated as new information becomes available.
¾Read Me First
Our Read Me First is designed to help you get your Prestige up and running right away. It contains a
detailed easy-to-follow connection diagram, Prestige default settings, handy checklists, information on
setting up your PC, and information on installing and using the Prestige Network Commander, our
Windows-based Internet Access configuration wizard.
Prefacexxi
Prestige 642R Series ADSL Router
¾Packing List Card
Finally you should have a Packing List Card which lists all items that should have come with your Prestige.
Syntax Conventions
•“Enter” means for you to type one or more characters and press the carriage return. “Select” or
“Choose” means for you to select one from the predefined choices.
•The SMT menu titles and labels are in Bold Times font. The choices of a menu item are in Bold
Arial font. A single keystroke is in Arial font and enclosed in square brackets, for instance, [ENTER]
means the Enter, or carriage return, key; [ESC] means the Escape key.
•For brevity’s sake, we will use “e.g.” as a shorthand for “for instance”, and “i.e.” as a shorthand for
“that is” or “in other words” throughout this manual.
Structure of this Manual
This manual is structured as follows:
Part 0: This part contains a Copyright Statement, a Declaration of Conformity, an FCC Interference
Statement, a Warranty Description, Customer Support Contact Information, a Table of Contents, a List of
Figures, a List of Tables, a Preface and notes on (A)DSL.
Part I: Getting Started (Chapters 1-3) is structured as a step-by-step guide to help you connect, install and
set up your Prestige to operate on your network and access the Internet.
Part II: Advanced Applications (Chapters 4-7) describe the advanced applications of your Prestige, such as
Remote Node Configuration, IPX Configuration and Bridging.
Part III: Advanced Management (Chapter 8 - 12) provides information on Prestige Filtering, SNMP, System
Maintenance and Troubleshooting as well as some Appendices and a Glossary.
The following section offers some background information on ADSL. Skip to Chapter 1 if you wish to begin
working with your router right away.
xxiiPreface
Prestige 642R Series ADSL Router
What is DSL?
DSL (Digital Subscriber Line) enhances the data capacity of the existing twisted-pair wire that runs
between the local telephone company switching offices and most homes and offices. While the wire itself
can handle higher frequencies, the telephone switching equipment is designed to cut off signals above 4,000
Hz to filter noise off the voice line, but now everybody is searching for ways to get more bandwidth to
improve access to the Web - hence DSL technologies.
There are actually seven types of DSL service, ranging in speeds from 16 Kbits/sec to 52 Mbits/sec. The
services are either symmetrical (traffic flows at the same speed in both directions), or asymmetrical (the
downstream capacity is higher than the upstream capacity). Asymmetrical services (ADSL) are suitable for
Internet users because more information is usually downloaded than uploaded. For example, a simple
button click in a web browser can start an extended download that includes graphics and text.
As data rates increase, the carrying distance decreases. That means that users who are beyond a certain
distance from the telephone company’s central office may not be able to obtain the higher speeds.
A DSL connection is a point-to-point dedicated circuit, meaning that the link is always up and there is no
dialing required.
What is ADSL?
It is an asymmetrical technology, meaning that the downstream data rate is much higher than the upstream
data rate. As mentioned, this works well for a typical Internet session in which more information is
downloaded, e.g., from Web servers, than is uploaded. ADSL operates in a frequency range that is above
the frequency range of voice services, so the two systems can operate over the same cable. What are the
advantages of ADSL from the point of view of the Network Service Provider (NSP) and the end user?
Advantages to the Network Service Provider (NSP)
1. ADSL enables telephone companies (telcos) to use the world's nearly 750 million existing copper wires
to deliver affordable high-speed remote access to the Internet, corporate networks and on-line services
over ordinary phone lines.
2. ADSL enables new applications that require real-time, interactive multimedia and broadcast-quality
video. Such applications include collaborative computing, video conferencing, distance learning and
video-on-demand.
3. The industry is rapidly converging on standards that will enable interoperability and ultimately make a
mass market possible.
4. ADSL empowers service providers to provide either a guaranteed sustained or adaptive rate, or best
effort service similar to analog modems.
¾ Nearly 300 times faster than 24.4 Kbps modems
¾ Over 100 times faster than 56 Kbps modems
¾ 70 times faster than 128 Kbps ISDN
5. Both residential and business properties around the world are already running out of spare lines on
existing installed telephone cables. ADSL provides service providers with the capability to use one line
to provide new data services while maintaining the telephone service on the same line, thus leveraging
the existing infrastructure.
What is DSL?xxiii
Prestige 642R Series ADSL Router
6. ADSL provides telcos with the ability to offer a private, secure channel of communications between
the consumer and the service provider.
7. Data travels along the customers own line, unlike cable telephone and modem services where the line is
shared with others
8. Because it is one customer's dedicated line, transmission speeds are not affected by other users going
on-line. With cable modems, transmission speeds drop significantly as more users go on-line
9. ADSL is "always on" and connected, just like a standard telephone. There is no time wasted dialing up
the service several times a day and waiting to be connected; ADSL is on standby, waiting ready for use
whenever your customer is ready.
10. Every major service provider has conducted trials and proven that the technology works. Today,
service providers are rolling out ADSL services worldwide, with widespread deployment expected. In
support of this market, a large number of major equipment vendors are shipping second and thirdgeneration products offering higher performance and lower costs.
11. ADSL-based networks are well suited for carrying ATM traffic, thus guaranteeing ADSL technology
for decades to come.
12. ADSL provides the communication bridge into the next century without adding new infrastructure,
costly outside plant additions and reinvestment.
Advantages to the End User
1. ADSL transforms plain old telephone lines into a high speed conduit for data, information,
entertainment and more. And while it is doing that, you can use your telephone for normal
conversations at the same time. This provides enormous advantages whether at home or at work.
2. ADSL provides affordable high-speed remote access to the Internet, corporate networks and on-line
services over ordinary phone lines.
¾ Nearly 300 times faster than 24.4 Kbps modems
¾ Over 100 times faster than 56 Kbps modems
¾ 70 times faster than 128 Kbps ISDN
For example, if there were no constraints of the Internet backbone or if fast servers were located in every
telephone central office, an ADSL modem could download the entire Encyclopedia Britannica to a user's
laptop in 16.6 minutes, compared to 6.4 days using a typical modem speed of 14,400 bps.
3. ADSL enables the use of real-time, interactive multimedia and broadcast-quality video for such new
services as collaborative computing, video conferencing, distance learning and video-on-demand.
4. ADSL gives you the ability to have both voice and data services in use simultaneously and all over one
phone line. Both residential and business properties around the world are already running out of spare
lines on existing installed telephone cables so effectively doubling your capacity in this way is a real
benefit.
5. ADSL provides a private, secure channel of communications between you and the service provider.
6. Your data travels along you own line, unlike cable telephone and modem services where the line is
shared with others.
7. Because it is your own dedicated line, transmission speeds are not affected by other users going online. With cable modems, transmission speeds drop significantly as more users go on-line.
xxivWhat is DSL?
Prestige 642R Series ADSL Router
8. ADSL is "always on" and connected, just like your telephone. This means that there is no time wasted
dialing up the service several times a day and waiting to be connected; ADSL is on standby, ready for
use whenever you are.
What is DSL?xxv
Getting Started
Part I:
Getting Started
Chapters 1-3 are structured as a step-by-step guide to help you connect, install and set up your
Prestige to operate on your network and to access the Internet. Described are Key Features and
Applications, Hardware Installation, Initial Setup and Internet Access.
I
Prestige 642R Series ADSL Router
Chapter 1
Getting to Know Your ADSL Internet Access
Router
This chapter describes the key features and applications of the Prestige 642
1.1 Prestige 642R Series ADSL Internet Access Router
Your Prestige integrates a high-speed 10/100Mbps auto-negotiating LAN interface and one high-speed
ADSL port into a single package. The Prestige is ideal for high-speed Internet browsing and making LANto-LAN connections to remote networks.
1.2 Features of the Prestige 642R
Your Prestige is packed with a number of features that give it the flexibility to provide a complete
networking solution for almost any user.
z High Speed Internet Access
The P642 ADSL router can support downstream transmission rates of up to 8Mbps and upstream
transmission rates of 640Kbps. The P642 also supports rate management; rate management allows ADSL
subscribers to select an Internet access speed that best suits their needs and budgets.
z PPPoE Support (RFC2516)
PPPoE (Point-to-Point Protocol over Ethernet) emulates a Dial-Up connection. It allows your ISP to use
their existing network configuration with newer broadband technologies such as ADSL. The PPPoE driver
on the Prestige is transparent to the PCs on the LAN, which see only Ethernet and are not aware of PPPoE
thus saving you from having to manage PPPoE clients on individual PCs.
z Transmission Rate Standards
1
♦ Supports Multi-Mode standard (ANSI T1.413, Issue 2; G.dmt(G.992.1); G.lite(G992.2))
♦ Full-Rate (ANSI T1.413, Issue 2; G.dmt(G.992.1)) with line rate support of up to 8Mbps
downstream and 1024kbps upstream.
♦ G.lite (G.992.2) with line rate support of up to 1.5Mbps downstream and 512Kbps upstream.
z IP Alias
IP Alias allows you to partition a physical network into logical networks over the same Ethernet interface.
The Prestige supports three logical LAN interfaces via its single physical Ethernet interface with the
Prestige itself as the gateway for each LAN network.
.
.
1
Depends on firmware release version.
Getting to know your Prestige1-1
Prestige 642R Series ADSL Router
z IP Multicast
Traditionally, IP packets are transmitted in two ways: unicast or broadcast. Multicast is a third way to
deliver IP packets to a group of hosts. IGMP (Internet Group Management Protocol) is the protocol used to
support multicast groups. The latest version is version 2 (see RFC2236). Both versions 1 and 2 are
supported by the Prestige
z IP Policy Routing (IPPR)
Traditionally, routing is based on the destination address only and the router takes the shortest path to
forward a packet. IP Policy Routing (IPPR) provides a mechanism to override the default routing behavior
and alter the packet forwarding based on the policy defined by the network administrator.
z 10/100M Fast Ethernet LAN Interface
The P642's 10/100M auto-negotiating LAN interface enables fast data transfer of either 10Mbps or
100Mbps in either half-duplex or full-duplex mode depending on your Ethernet network.
z Protocols Supported
TCP/IP (Transmission Control Protocol/Internet Protocol) network layer protocol.
PPP (Point-to-Point Protocol) link layer protocol.
SUA™ (Single User Account) and NAT (Network Address Translation).
DHCP (Dynamic Host Configuration Protocol) allows the individual clients (computers) to obtain the
TCP/IP configuration at start-up from a centralized DHCP server. The Prestige has the built-in DHCP
Server enabled by default. DHCP Relay allows the Prestige to act as a surrogate DHCP server where it
relays IP address assignment from the actual DHCP server to its clients.
z Multiple PVC (Permanent Virtual Circuits) Support
Your Prestige supports up to 8 PVC’s.
z Networking Compatibility
Your Prestige is compatible with the major ADSL DSLAM (Digital Subscriber Line Access Multiplexer)
providers, making configuration as simple as possible for you.
z Multiplexing
The Prestige 642R Series supports VC-based and LLC-based multiplexing.
z Encapsulation
The Prestige 642R Series supports PPP (RFC 2364 - PPP over ATM Adaptation Layer 5), RFC 1483
encapsulation over ATM, MAC encapsulated routing as well as PPP over Ethernet (RFC 2516).
1-2Getting to know your Prestige
Prestige 642R Series ADSL Router
z NAT/SUA for Single-IP-address Internet Access
The Prestige's SUA (Single User Account) feature allows multiple-user Internet access for the cost of a
single IP account. SUA supports popular Internet applications such as MS traceroute, CuSeeMe, IRC,
RealAudio, VDOLive, Quake, and PPTP. No configuration is needed to support these applications.
The Prestige supports PAP (Password Authentication Protocol) and CHAP (Challenge Handshake
Authentication Protocol). CHAP is more secure since the password is scrambled prior to transmission.
However, PAP is readily available on more platforms.
z Filters
The Prestige's packet filtering functions allows added network security and management.
z Ease of Installation
Your Prestige is designed for quick, intuitive and easy installation.
z Housing
Your Prestige's all new compact, ventilated housing minimizes space requirements making it easy to
position anywhere in your busy office.
1.3 Applications for the Prestige 642R
1.3.1 Internet Access
The Prestige is the ideal high-speed Internet access solution. Your Prestige supports the TCP/IP protocol,
which the Internet uses exclusively. It is compatible with all major ADSL DSLAM (Digital Subscriber
Line Access Multiplexer) providers. A DSLAM is a rack of ADSL line cards with data multiplexed into a
backbone network interface/connection (e.g., T1, OC3, DS3, ATM or Frame Relay). Think of it as the
equivalent of a modem rack for ADSL. A typical Internet Access application is shown below.
Getting to know your Prestige1-3
Prestige 642R Series ADSL Router
Figure 1-1Internet Access Application
Internet Single User Account
For a SOHO (Small Office/Home Office) environment, your Prestige offers the Single User Account (SUA)
feature that allows multiple users on the LAN (Local Area Network) to access the Internet concurrently for
the cost of a single user.
1.3.2 LAN to LAN Application
You can use the Prestige to connect two geogr
LAN-to-LAN application for your Prestige is shown as follows.
aphical
ly dispersed networks over the ADSL line. A typical
Figure 1-2LAN-to-LAN Application
1-4Getting to know your Prestige
Prestige 642R Series ADSL Router
Chapter 2
Hardware Installation & Initial Setup
This chapter describes the physical features of the Prestige and how to make the cable
connections
2.1 Front Panel LEDs of the P642R
The LED indicators on the front panel indicate the operational status of the Prestige 642. The table below
the diagram describes the LED functions:
Figure 2-1Prestige 642R Series Front Panel.
Table 2-1Front Panel LED Description
.
PWR
SYS
LAN 10M
LAN 100M
ADSL
The PWR (power) LED is on when power is applied to the Prestige.
A steady ‘on’ SYS (system) LED indicates the Prestige is on and functioning
properly while an ‘off’ SYS LED indicates the system is not ready or has a
malfunction. The system is rebooting when the SYS LED is blinking.
A steady light indicates a 10Mb Ethernet connection. The LED will blink when data
is being sent/received.
A steady light indicates a 100Mb Ethernet connection. The LED will blink when data
is being sent/received.
The ADSL LED is on when the Prestige is connected successfully to a DSLAM. The
LED blinks when data is being sent/received. The LED is off when the link is down.
2.2 Rear Panel and Connections of the Prestige 642R
The following figure shows the rear panel connectors of your Prestige:
Hardware Installation & Setup 2-1
Prestige 642R Series ADSL Router
Figure 2-2Prestige 642R Series Rear Panel
Step 1: Connecting the ADSL Line
Connect the Prestige directly to the wall jack using the included ADSL cable. Connect a microfilter(s) (see
Figure 2-4Connecting a Microfilter) between the wall jack and your telephone(s). The micro filters
act as low-pass filters (voice transmission takes place in the 0 to 4KHz bandwidth).
Step 2: Connecting a Workstation to the Prestige 10/100M LAN port
Ethernet 10Base-T/100Base-T networks use Shielded Twisted Pair (STP) cable with RJ-45 connectors that
look like a bigger telephone plug with 8 pins. Use the crossover cable (red tag) to connect your Prestige 642
to a computer directly. Use a straight-through-Ethernet cable (white tag) to connect to an external hub, then
connect one end of the straight-through-Ethernet cable (white tag) from the hub to the NIC on the
workstation.
Step 3.
Connect the power adapter to the port labeled POWER on the rear panel of your Prestige.
Connecting the Power Adapter to your Prestige
Please note that the Power Switch is not available in all P642 models.
Step 4. Connecting the Console Port
For the initial configuration of your Prestige, you need to use terminal emulator software on a workstation
and connect it to the Prestige through the console port. Connect the 9-pin end of the console cable (9-pin to
25-pin console cable supplied) to the console port of the Prestige and the 25-pin end to a serial port (COM1,
COM2 or other COM port) of your workstation. You can use an extension RS-232 cable if the enclosed
one is too short.
2.3 Additional Installation Requirements
In addition to the contents of your package, there are other hardware and software requirements you need to
meet before you can install and use your Prestige. These requirements include:
z A computer with an Ethernet 10Base-T/100Base-T NIC (Network Interface Card).
z A computer equipped with communications software (for example, Hyper Terminal in Win95)
configured to the following parameters:
¾ VT100 terminal emulation.
¾ 9600 Baud rate.
¾ Parity set to None, 8 Data bits, 1 Stop bit.
2-2Hardware Installation & Setup
Prestige 642R Series ADSL Router
ode
e
e
¾ Flow Control set to None
After the Prestige has been successfully connected to your network, you can make future changes to the
configuration via Telnet.
2.4 Connecting a POTS Splitter
This is for the P642’s following the Full Rate (G.dmt) standard only. One major difference between ADSL
and dial-up modems is the need for a telephone splitter. This device keeps the telephone and ADSL signals
separated, giving them the capability to provide simultaneous Internet access and telephone service on the
same line. Splitters also eliminate the destructive interference conditions caused by telephone sets. The
purchase of a POTS splitter is optional.
Noise generated from a telephone in the same frequency range as the ADSL signal can be disruptive to the
ADSL signal. In addition the impedance of a telephone when off-hook may be so low that it shunts the
strength of the ADSL signal. When a POTS splitter is installed at the entry point, where the line comes into
the home, it will filter the telephone signals before combining the ADSL and telephone signals transmitted
and received. The issues of noise and impedance are eliminated with a single POTS splitter installation.
A telephone splitter is easy to install as shown in the following figure.
Prestige
M
Wall
Jack
m
POTS Splitter
Lin
Phon
Figure 2-3Connecting a POTS Splitter
Step 1. Connect the side labeled “Phone” to your telephone.
Step 2. Connect the side labeled “Modem” to your Prestige.
Step 3. Connect the side labeled “Line” to the telephone wall jack.
2.5 Telephone Microfilters
Telephone voice transmissions take place in the lower frequency range, 0 - 4KHz, while ADSL
transmissions take place in the higher bandwidth range, above 4KHz. A microfilter acts as a low-pass filter,
for your telephone, to ensure that ADSL transmissions do not interfere with your telephone voice
transmissions. . The purchase of a telephone microfilter is optional.
Step 1. Connect a phone cable from the wall jack to the single jack end of the Y- Connector.
Hardware Installation & Setup 2-3
Prestige 642R Series ADSL Router
Step 2. Connect a cable from the double jack end of the Y-Connector to the “wall side” of the
microfilter.
Step 3. Connect another cable from the double jack end of the Y-Connector to the Prestige.
Step 4. Connect the “phone side” of the microfilter to your telephone as shown in the following figure.
Prestige
Wall
Jack
Y -CONNECTOR
Microfilter
Wall
Side
Phone
Side
Figure 2-4Connecting a Microfilter
2.6 Special Note for P642 ISDN Users
Please note that section 2.4 “Connecting a POTS Splitter” and sections 2.5 “Telephone Microfilters” of
the P642 User’s Guide do not apply for P642 ISDN users.
2-4Hardware Installation & Setup
Prestige 642R Series ADSL Router
The following is an example installation for the P642 with ISDN.
Figure 2-5P642 with ISDN
2.7 Power Up Your Prestige
At this point, you should have connected the console port, the ADSL line, the Ethernet port and the power
port to the appropriate devices or lines. You can now apply power to the Prestige.
Step 1. Initial Screen
When you power up your Prestige, it performs several internal tests as well as line initialization. After the
initialization, the Prestige asks you to press [ENTER] to continue, as shown.
The login screen appears after you press [ENTER], prompting you to enter the password, as shown below.
Hardware Installation & Setup 2-5
Prestige 642R Series ADSL Router
For your first login, enter the default password: 1234. As you type the password, the screen displays an
‘X’ for each character you type.
Please note that if there is no activity for longer than 5 minutes after you log in, your Prestige will
automatically log you out and will display a blank screen. If you see a blank screen, press [ENTER] to
bring up the login screen again.
Enter Password : XXXX
Figure 2-7Login Screen
2-6Hardware Installation & Setup
Prestige 642R Series ADSL Router
2.8 Navigating the SMT Interface
The SMT (System Management Terminal) is the interface that you use to configure your Prestige.
Several operations that you should be familiar with before you attempt to modify the configuration are
listed in the table below.
Table 2-2Main Menu Commands
OperationPress/<read>Description
Move down to
another menu
Move up to a
previous menu
Move to a
“hidden” menu
Move the cursor
Enter
information
Required fields
N/A fields<N/A>Some of the fields in the SMT will show a <N/A>. This symbol
Save your
configuration
Exit the SMT
[ENTER]To move forward to a sub-menu, type in the number of the
desired sub-menu and press [ENTER].
[ESC]Press the [ESC] key to move back to the previous menu.
Press [SPACE
BAR] to change
No to Yes then
press [ENTER].
[ENTER]
[Up]/[Down] arrow
keys
Fill in, or
Press the [Space
bar] to toggle
?
<
[ENTER]Save your configuration by pressing [ENTER] at the message
Type 99, then
press [ENTER].
or
>
Fields beginning with “Edit” lead to hidden menus and have a
default setting of No. Press [SPACE BAR] to change No to Yes,
then press [ENTER] to go to a “hidden” menu.
Within a menu, press [ENTER] to move to the next field. You can
also use the [Up]/[Down] arrow keys to move to the previous and
the next field, respectively.
You need to fill in two types of fields. The first requires you to
type in the appropriate information. The second allows you to
cycle through the available choices by pressing the [Space] bar.
All fields with the symbol <?> must be filled in order be able to
save the new configuration.
refers to an option that is Not Applicable.
[Press ENTER to Confirm or ESC to Cancel]. Saving the data on
the screen will take you, in most cases, to the previous menu.
Type 99 at the Main Menu prompt and press [ENTER] to exit the
SMT interface.
Hardware Installation & Setup 2-7
Prestige 642R Series ADSL Router
After you enter the password, the SMT displays the Main Menu, as shown below.
The SMT Menu continually improves and changes with new firmware upgrades. Check the release notes at
www.zyxel.com to find the most recent upgrades and information.
2.8.1 System Management Terminal Interface Summary
Table 2-3Main Menu Summary
#Menu TitleDescription
1General SetupUse this menu to set up your general information.
3Ethernet SetupUse this menu to set up your LAN connection.
4Internet Access SetupA quick and easy way to set up an Internet connection.
11Remote Node SetupUse this menu to set up the Remote Node for LAN-to-LAN
connection, including Internet connection.
12Static Routing SetupUse this menu to set up static routes.
15SUA Server SetupUse this menu to specify inside servers when SUA is enabled.
21Filter Set ConfigurationUse this menu to set up filters to provide security, etc.
22SNMP ConfigurationUse this menu to set up SNMP related parameters.
23System PasswordUse this menu to change your password.
2-8Hardware Installation & Setup
Prestige 642R Series ADSL Router
#Menu TitleDescription
24System MaintenanceThis menu provides system status, diagnostics, software upload, etc.
25IP Routing Policy Setup Use this menu to configure your IP routing policy.
99ExitUse this to exit from SMT and return to a blank screen.
2.9 Changing the System Password
The first thing your should do before anything else is to change the default system password by following
the steps below.
Step 1. Enter 23 in the Main Menu to open Menu 23 - System Password as shown below.
When this appears, type in your existing system password, i.e., 1234, and press [ENTER].
Menu 23 – System Password
Old Password= ****
Retype to confirm= ?
Step 2. Enter your new system password (up to 30 characters), and press [ENTER].
Step 3. Re-type your new system password for confirmation and press [ENTER].
Note that as you type a password, the screen displays a (*) for each character you type.
New Password= ?
A
Figure 2-9Menu 23.1 - System Password
2.10 General Setup
Menu 1 - General Setup contains administrative and system-related information.
To enter Menu 1 and fill in the required information, follow these steps:
Step 1. Enter 1 in the Main Menu to open Menu 1 – General Setup.
Step 2. The Menu 1 - General Setup screen appears, as shown below. Fill in the required fields marked
[?] and turn on the individual protocols for your applications, as explained in the following table.
Hardware Installation & Setup 2-9
Prestige 642R Series ADSL Router
Menu 1 - General Setup
System Name= ?
Location=
Contact Person's Name=
Route IP= Yes
Route IPX= No
Bridge= No
Press ENTER to Confirm or ESC to Cancel:
Figure 2-10Menu 1 - General Setup
Table 2-4General Setup Menu Fields
FieldDescriptionExample
System NameChoose a descriptive name for identification purposes. This name can
P642
be up to 30 alphanumeric characters long. Spaces are not allowed, but
dashes “-” and underscores "_" are accepted.
Location
Enter the geographic location (up to 31 characters) of your Prestige.
MyHouse
(optional)
Contact Person's
Name (optional)
Enter the name (up to 30 characters) of the person in charge of this
Prestige.
JohnDoe
Protocols:Press [SPACE BAR] to toggle routing on or off for the individual
protocols.
Route IP
Set this field to Yes to enable IP routing. You must enable IP routing
Yes/No
for Internet access.
Route IPX
Bridge Turn on/off bridging for protocols not supported (e.g., SNA) or not
Set this field Yes to enable IPX routing.Yes/No
Yes/No
turned on in the previous Route fields.
2.11 Ethernet Setup
This section describes how to configure the Ethernet using Menu 3 – Ethernet Setup. From the Main
Menu, enter 3 to open Menu 3.
2-10Hardware Installation & Setup
Prestige 642R Series ADSL Router
Menu 3 - Ethernet Setup
1. General Setup
2. TCP/IP and DHCP Setup
3. Novell IPX Setup
4. Bridge Setup
Enter Menu Selection Number:
Figure 2-11Menu 3 - Ethernet Setup
2.11.1 General Ethernet Setup
This menu allows you to specify filter set(s) that you wish to apply to the Ethernet traffic. You seldom
need to filter Ethernet traffic; however, the filter sets may be useful to block certain packets, reduce traffic
and prevent security breaches.
If you need to define filters, please read the Filter Set Configuration chapter first, then return to this menu
to define the filter sets.
2.12 Protocol Dependent Ethernet Setup
Depending on the protocols for your applications, you need to configure the respective Ethernet Setup, as
outlined below.
z For TCP/IP Ethernet setup refer to Chapter 3 - Internet Access Application.
z For Novell IPX Ethernet setup refer to Chapter 6 - IPX Configuration.
z For bridging Ethernet setup refer to Chapter 7 - Bridging Setup.
Hardware Installation & Setup 2-11
Prestige 642R Series ADSL Router
Chapter 3
Internet Access
This chapter shows you how to configure the LAN as well as the WAN of your Prestige for Internet
access
3.1 Factory Ethernet Defaults
The Ethernet parameters of the Prestige are preset in the factory with the following values:
1. IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits).
2. DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
These parameters should work for the majority of installations. If the parameters are satisfactory, you can
skip to section 3.4 TCP/IP Ethernet Setup and DHCP to enter the DNS server address(es) if your ISP gives
you explicit DNS server address(es). If you wish to change the factory defaults or to learn more about
TCP/IP, please read on.
3.2 LANs & WANs
A LAN (Local Area Network) is a computer network limited to the immediate area, usually the same
building or floor of a building. A WAN (Wide Area Network), on the other hand, is an outside connection to
another network or the Internet.
.
3.2.1 LANs, WANs and the Prestige
The actual physical connection determines whether the Prestige ports are LAN or WAN ports. There are two
separate IP networks, one inside, the LAN network; the other outside: the WAN network as shown next:
Figure 3-1LAN & WAN IPs
Internet Access3-1
Prestige 642R Series ADSL Router
3.3 TCP/IP Parameters
3.3.1 IP Address and Subnet Mask
Like houses on a street that share a common street name, the machines on a LAN share one common network
number.
Where you obtain your network number depends on your particular situation. If the ISP or your network
administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP
addresses and the subnet mask.
If the ISP did not explicitly give you an IP network number, then most likely you have a single user account
and the ISP will assign you a dynamic IP address when the connection is established. If this is the case, it is
recommended that you select a network number from 192.168.0.0 to 192.168.255.0 (ignoring the trailing
zero) and you must enable the Single User Account feature of the Prestige. The Internet Assigned Number
Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other
number unless you are told otherwise. Let’s say you select 192.168.1.0 as the network number; which covers
254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other words, the
first three numbers specify the network number while the last number identifies an individual workstation on
that network.
The subnet mask specifies the network number portion of an IP address. Your Prestige will compute the
subnet mask automatically based on the IP address that you entered. You don’t need to change the subnet
mask computed by the Prestige unless you are instructed to do otherwise.
3.3.2 Private IP Addresses
Every machine on the Internet must have a unique address. If your networks are isolated from the Internet,
e.g., only between your two branch offices, you can assign any IP addresses to the hosts without problems.
However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP
addresses specifically for private networks:
10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255
You can obtain your IP address from the IANA, from an ISP, or it can be assigned from a private network. If
you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with
the Internet addresses for your local networks. On the other hand, if you are part of a much larger
organization, you should consult your network administrator for the appropriate IP addresses.
Note: Regardless of your particular situation, do not create an arbitrary IP address;
always follow the guidelines above. For more information on address assignment,
please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466,
3-2Internet Access
Guidelines for Management of IP Address Space.
Prestige 642R Series ADSL Router
3.3.3 RIP Setup
RIP (Routing Information Protocol) allows a router to exchange routing information with other routers. The
RIP Direction field controls the sending and receiving of RIP packets. When set to Both, the Prestige will
broadcast its routing table periodically and incorporate the RIP information that it receives; when set to
None, it will not send any RIP packets and will ignore any RIP packets received.
The Version field controls the format and the broadcasting method of the RIP packets that the Prestige sends
(it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more
information. RIP-1 is probably adequate for most networks, unless you have a unusual network topology.
Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses
subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on non-router
machines since they generally do not listen to the RIP multicast address and so will not receive the RIP
packets. However, if one router uses multicasting, then all routers on your network must use multicasting as
well.
By default, RIP direction is set to Both and the Version set to RIP-1.
3.3.4 DHCP Configuration
DHCP (Dynamic Host Configuration Protocol) allows the individual clients (workstations) to obtain the
TCP/IP configuration at start-up from a centralized DHCP server. The Prestige has built-in DHCP server
capability, enabled by default, which means it can assign IP addresses, an IP default gateway and DNS
servers to Windows 95, Windows NT and other systems that support the DHCP client. The Prestige can also
act as a surrogate DHCP server where it relays IP address assignment from the actual DHCP server to the
clients.
IP Pool Setup
The Prestige is pre-configured with a pool of 32 IP addresses starting from 192.168.1.33 to 192.168.1.64 for
the client machines. This leaves 31 IP addresses, 192.168.1.2 to 192.168.1.32 (excluding the Prestige itself
which has a default IP of 192.168.1.1) for other server machines, e.g., server for mail, FTP, telnet, web, etc.,
that you may have.
DNS Server Address
DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa,
e.g., the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because
without it, you must know the IP address of a machine before you can access it. The DNS server addresses
that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and
subnet mask.
There are two ways that an ISP disseminates the DNS server addresses. The first is for an ISP to tell a
customer the DNS server addresses, usually in the form of an information sheet, when s/he signs up. If your
ISP does give you the DNS server addresses, enter them in the DNS Server fields in DHCP Setup,
otherwise, leave them blank.
Some ISP’s choose to pass the DNS servers using the DNS server extensions of PPP IPCP (IP Control
Protocol) after the connection is up. If your ISP did not give you explicit DNS servers, chances are the DNS
Internet Access3-3
Prestige 642R Series ADSL Router
servers are conveyed through IPCP negotiation. The Prestige supports the IPCP DNS server extensions
through the DNS proxy feature.
If the Primary and Secondary DNS Server fields in DHCP Setup are not specified, i.e., left as 0.0.0.0, the
Prestige tells the DHCP clients that it itself is the DNS server. When a workstation sends a DNS query to the
Prestige, the Prestige forwards the query to the real DNS server learned through IPCP and relays the response
back to the workstation.
Please note that DNS proxy works only when the ISP uses the IPCP DNS server extensions. It does not
mean you can leave the DNS servers out of the DHCP setup under all circumstances. If your ISP gives you
explicit DNS servers, make sure that you enter their IP addresses in the DHCP Setup menu. This way, the
Prestige can pass the DNS servers to the workstations and the workstations can query the DNS server directly
without the Prestige’s intervention.
3.4 IP Multicast
Traditionally, IP packets are transmitted in one of either two ways - Unicast (1 sender – 1 recipient) or
Broadcast (1 sender – everybody on the network). Multicast is a third way to deliver IP packets to a group of
hosts on the network - not everybody.
IGMP (Internet Group Multicast Protocol) is a session-layer protocol used to establish membership in a
multicast group - it is not used to carry user data. IGMP version 2 (RFC 2236) is an improvement over
version 1 (RFC 1112) but IGMP version 1 is still in wide use. If you would like to read more detailed
information about interoperability between IGMP version 2 and version 1, please see sections 4 and 5 of
RFC 2236. The class D IP address is used to identify host groups and can be in the range 224.0.0.0 to
239.255.255.255. The address 224.0.0.0 is not assigned to any group and is used by IP multicast computers.
The address 224.0.0.1 is used for query messages and is assigned to the permanent group of all IP hosts
(including gateways). All hosts must join the 224.0.0.1 group in order to participate in IGMP. The address
224.0.0.2 is assigned to the multicast routers group.
The Prestige supports both IGMP version 1 (IGMP-v1) and version 2 (IGMP-v2). At start up, the Prestige
queries all directly connected networks to gather group membership. After that, the Prestige periodically
updates this information. IP Multicasting can be enabled/disabled on the Prestige LAN and/or WAN
interfaces using menus 3.2 (LAN) and 11.3 (WAN). Select None to disable IP Multicasting on these
interfaces.
3.5 IP Policies
Traditionally, routing is based on the destination address only and the router takes the shortest path to
forward a packet. IP Policy Routing (IPPR) provides a mechanism to override the default routing behavior
and alter the packet forwarding based on the policy defined by the network administrator. Policy-based
routing is applied to incoming packets on a per interface basis, prior to the normal routing. Create policies
using SMT Menu 25 (see the IP Policy Routing chapter in Part 3) and apply them on the Prestige LAN
and/or WAN interfaces using menus 3.2 (LAN) and 11.3 (WAN).
3-4Internet Access
Prestige 642R Series ADSL Router
3.6 IP Alias
IP Alias allows you to partition a physical network into different logical networks over the same Ethernet
interface. The Prestige supports three logical LAN interfaces via its single physical Ethernet interface with
the Prestige itself as the gateway for each LAN network.
Use menu 3.2.1 to configure IP Alias on your Prestige.
3.6.1 IP Alias Setup
You must use Menu 3.2 to configure the first network and move the cursor to Edit IP Alias field and toggle
the [SPACEBAR] to choose Yes and press [ENTER] to configure the second and third network.
Menu 3.2 - TCP/IP and DHCP Ethernet Setup
DHCP Setup:
DHCP= None
Client IP Pool Starting Addres= 192.168.1.33
Size of Client IP Pool= 32
Primary DNS Server= 0.0.0.0
Secondary DNS Server= 0.0.0.0
Remote DHCP Server= N/A
TCP/IP Setup:
IP Address= 192.168.1.1
IP Subnet Mask= 255.255.255.0
RIP Direction= Both
Version= RIP-1
Multicast= None
IP Policies=
Edit IP Alias= Yes
Press ENTER to confirm or ESC to Cancel:
Press Space Bar to Toggle.
Press the [SPACEBAR]
to obtain a Yes in this
field.
Figure 3-4Menu 3.2 - TCP/IP and DHCP Ethernet Setup
Pressing [ENTER] opens Menu 3.2.1 - IP Alias Setup, as shown next.
Internet Access3-5
Prestige 642R Series ADSL Router
p
Menu 3.2.1 - IP Alias Setup
IP Alias 1= No
IP Address= N/A
IP Subnet Mask= N/A
RIP Direction= N/A
Version= N/A
Incoming protocol filters= N/A
Outgoing protocol filters= N/A
IP Alias 2= No
IP Address= N/A
IP Subnet Mask= N/A
RIP Direction= N/A
Version= N/A
Incoming protocol filters= N/A
Outgoing protocol filters= N/A
Enter here to CONFIRM or ESC to CANCEL:
Press S
ace Bar to Toggle.
Figure 3-5Menu 3.2.1 - IP Alias Setup
Follow the instructions in the following table to configure IP Alias parameters.
Table 3-1IP Alias Setup Menu Fields
FieldDescriptionExample
IP Alias
IP AddressEnter the IP address of your Prestige in dotted decimal notation
IP Subnet Mask Your Prestige will automatically calculate the subnet mask based
When you have completed this menu, press [ENTER] at the prompt [Press ENTER to Confirm…] to
save your configuration, or press [ESC] at any time to cancel.
Choose Yes to configure the LAN network for the Prestige.Yes
192.168.2.1
255.255.255.0
on the IP address that you assign. Unless you are implementing
subnetting, use the subnet mask computed by the Prestige
Press the space bar to select the RIP direction from None, Both/In
None
Only/Out Only.
Press the space bar to select the RIP version from RIP-1/RIP-
RIP-1
2B/RIP-2M.
Enter the filter set(s) you wish to apply to the incoming traffic
between this node and the Prestige.
Enter the filter set(s) you wish to apply to the outgoing traffic
between this node and the Prestige.
3.7 Route IP Setup
The first step is to enable the IP routing in Menu 1 - General Setup.
To edit Menu 1, enter 1 in the Main Menu to select General Setup and press [ENTER]. Set the Route IP
field to Yes by pressing the space bar.
3-6Internet Access
Prestige 642R Series ADSL Router
Menu 1 - General Setup
System Name= P642
Location= location
Contact Person's Name= name
Route IP= Yes
Route IPX= No
Bridge= No
Press ENTER to Confirm or ESC to Cancel:
Figure 3-6Menu 1 - General Setup
3.8 TCP/IP Ethernet Setup and DHCP
You will now use Menu 3.2 to configure your Prestige for TCP/IP.
To edit Menu 3.2, enter 3 from the Main Menu to open the Menu 3 - Ethernet Setup. When Menu 3
.
appears, select the submenu option TCP/IP and DHCP Setup and press [ENTER]
Menu 3.2 - TCP/IP and DHCP Ethernet Setup, as shown next
:
The screen now displays
Menu 3.2 - TCP/IP and DHCP Ethernet Setup
DHCP Setup:
DHCP= Server
Client IP Pool Starting Address= 192.168.1.33
Size of Client IP Pool= 32
Primary DNS Server= 0.0.0.0
Secondary DNS Server= 0.0.0.0
Remote DHCP Server= N/A
TCP/IP Setup:
IP Address= 192.68.1.1
IP Subnet Mask= 255.255.255.0
RIP Direction= Both
Multicast= None
IP Policies=
Edit IP Alias= No
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle.
Version= RIP-1
First address
in the IP Pool
Size of the IP
Pool
IP addresses
of the DNS
servers
This is the IP
address of the
Prestige.
Figure 3-7Menu 3.2 - TCP/IP and DHCP Ethernet Setup
Internet Access3-7
Prestige 642R Series ADSL Router
Follow the instructions in the following table on how to configure the DHCP fields.
Table 3-2DHCP Ethernet Setup Menu Fields
FieldDescriptionExample
DHCP Setup
DHCP=
Client IP Pool Starting
Address
Size of Client IP Pool This field specifies the size, or count, of the IP address pool.32
Primary DNS Server
Secondary DNS
Server
Remote DHCP
Server
If it is set to Server, your Prestige can assign IP addresses, an
IP default gateway and DNS servers to Windows 95, Windows
NT and other systems that support the DHCP client. If set to
None, the DHCP server will be disabled. If set to Relay, the
Prestige acts as a surrogate DHCP server and relays DHCP
requests and responses between the remote server and the
clients. Enter the IP address of the actual, remote DHCP server
in the Remote DHCP Server in this case.
When DHCP is used, the following items need to be set:
This field specifies the first of the contiguous addresses in the
IP address pool.
Enter the IP addresses of the DNS servers. The DNS servers
are passed to the DHCP clients along with the IP address and
the subnet mask.
If Relay is selected in the DHCP= field above, then enter the IP
address of the actual, remote DHCP server here.
None
Server (default)
Relay
192.168.1.33
Follow the instructions in the following table to configure TCP/IP parameters for the Ethernet port.
Table 3-3TCP/IP Ethernet Setup Menu Fields
FieldDescriptionExample
TCP/IP Setup
IP Address Enter the (LAN) IP address of your Prestige in dotted decimal
notation
IP Subnet Mask Your Prestige will automatically calculate the subnet mask based on
the IP address that you assign. Unless you are implementing
subnetting, use the subnet mask computed by the Prestige.
RIP Direction
Version
Multicast IGMP (Internet Group Multicast Protocol) is a session-layer protocol
Press the space bar to select the RIP direction from Both/InOnly/Out Only or None.
Press the space bar to select the RIP version from RIP-1/RIP-2B/RIP-2M.
used to establish membership in a Multicast group. The Prestige
supports both IGMP version 1 (IGMP-v1) and IGMP-v2. Press the
192.168.1.1
(default)
255.255.255.0
Both (default)
RIP-1 (default)
IGMP-v1
IGMP-v2
None
3-8Internet Access
Prestige 642R Series ADSL Router
space bar to enable IP Multicasting or select None to disable it.
IP Policies
Edit IP Alias The Prestige supports three logical LAN interfaces via its single
When you have completed this menu, press [ENTER] at the prompt [Press ENTER to Confirm…] to save
your configuration, or press [ESC] at any time to cancel.
The following terminology may seem a little overwhelming at first to new users of
broadband technology. Relax! This information should be either pre-configured on your
Prestige or supplied by your ISP or telephone company. Think of them as the equivalent of
“telephone numbers” on traditional dial-up PSTN and ISDN modems and routers.
Create policies using SMT Menu 25 (see the IP Policy Routing
chapter in Part 3) and apply them on the Prestige LAN interface
here. You can apply up to four IP Policy sets (from twelve) by
entering their numbers here separated by commas, e.g., 2, 4, 7, 9.
physical Ethernet interface with the Prestige itself as the gateway for
each LAN network. Press the [SPACEBAR] to toggle No to Yes,
then press [ENTER] to bring you to menu 3.2.1
Yes
No (default)
3.9 VPI & VCI
Be sure to use the correct Virtual Path Identifier (VPI) and Virtual Channel Identifier (VCI) numbers
supplied by the telephone company. The valid range for the VPI is 1 to 255 and for the VCI is 32 to 65535 (1
to 31 is reserved for local management of ATM traffic). Please see the Appendices for more information.
3.10 Multiplexing
There are two conventions to identify what protocols the virtual circuit (VC) is carrying. Be sure to use the
multiplexing method required by your ISP.
3.10.1 VC-based multiplexing
In this case, by prior mutual agreement, each protocol is assigned to a specific virtual circuit, e.g., VC1
carries IP, VC2 carries IPX, etc. VC-based multiplexing may be dominant in environments where dynamic
creation of large numbers of ATM VCs is fast and economical.
3.10.2 LLC-based multiplexing
In this case one VC carries multiple protocols with protocol identifying information being contained in each
packet header. Despite the extra bandwidth and processing overhead, this method may be advantageous if it
is not practical to have a separate VC for each carried protocol, e.g., if charging heavily depends on the
number of simultaneous VCs.
3.11 Encapsulation
Be sure to use the encapsulation method required by your ISP. The Prestige supports the following methods.
Internet Access3-9
Prestige 642R Series ADSL Router
3.11.1 ENET ENCAP
The MAC Encapsulated Routing Link Protocol (ENET ENCAP) is only implemented with the IP network
protocol. IP packets are routed between the Ethernet interface and the WAN interface and then formatted so
that they can be understood in a bridged environment i.e., it encapsulates routed Ethernet frames into bridged
ATM cells. ENET ENCAP requires that you specify a gateway IP address in the Ethernet EncapsulationGateway field in Menu 4 and in the Rem IP Addr field in Menu 11.1. You can get this information from
your ISP.
3.11.2 PPP over Ethernet
PPPoE provides access control and billing functionality in a manner similar to dial-up services using PPP.
The Prestige bridges a PPP session over Ethernet (PPP over Ethernet, RFC 2516) from your PC to an ATM
PVC (Permanent Virtual Circuit) which connects to a xDSL Access Concentrator where the PPP session
terminates. One PVC can support any number of PPP sessions from your LAN. For more information on
PPPoE, see the Appendices.
3.11.3 PPP
Please refer to RFC 2364 for more information on PPP over ATM Adaptation Layer 5 (AAL5). Refer to RFC
1661 for more information on PPP.
3.11.4 RFC 1483
RFC 1483 describes two methods for Multiprotocol Encapsulation over ATM Adaptation Layer 5 (AAL5).
The first method allows multiplexing of multiple protocols over a single ATM virtual circuit (LLC-based
multiplexing) and the second method assumes that each protocol is carried over a separate ATM virtual
circuit (VC-based multiplexing). Please refer to the RFC for more detailed information.
3.12 IP Address Assignment
A static IP is a fixed IP that your ISP gives you. A dynamic IP is not fixed; the ISP assigns you a different
one each time. The Single User Account feature can be enabled or disabled if you have either a dynamic or
static IP. However the encapsulation method assigned influences your choices for IP Address and ENET
ENCAP Gateway.
3.12.1 Using PPP or PPPoE Encapsulation
If you have a dynamic IP, then the IP Address and ENET ENCAP Gateway fields are not applicable (N/A). If
you have a static IP, then you only need to fill in the IP Address field and not the ENET ENCAP Gateway
field.
3.12.2 Using RFC 1483 Encapsulation
In this case the IP Address Assignment must be static with the same requirements for the IP Address and
ENET ENCAP Gateway fields as stated above.
3-10Internet Access
Prestige 642R Series ADSL Router
3.12.3 Using ENET ENCAP Encapsulation
In this case you can have either a static or dynamic IP. For a static IP you must fill in all the IP Address and
ENET ENCAP Gateway fields as supplied by your ISP. However for a dynamic IP, the Prestige acts as a
DHCP client on the WAN port and so the IP Address and ENET ENCAP Gateway fields are not applicable
(N/A) as they are assigned to the Prestige by the DHCP server.
3.13 Internet Access Configuration
Menu 4 allows you to enter the Internet Access information in one screen. Menu 4 is actually a simplified
setup for one of the remote nodes that you can access in Menu 11. Before you configure your Prestige for
Internet access, you need to collect your Internet account information from your ISP and telephone company.
Use the following table to record your Internet Account Information. Note that if you are using PPP or
PPPoE encapsulation, then the only ISP information you need is a login name and password. You only need
to know the Ethernet Encapsulation Gateway IP address if you are using ENET ENCAP encapsulation.
Internet Access3-11
Prestige 642R Series ADSL Router
Table 3-4Internet Account Information
Internet Account InformationWrite your account information here
Telephone Company Information
VPI (Virtual Path Identifier)
VCI (Virtual Channel Identifier)
ISP Information
IP Address of the ISP's Gateway (Optional)
Login Name
Password for ISP authentication
Type of Multiplexing
Type of Encapsulation
Ethernet Encapsulation Gateway
−
−
−
−
−
−
−
−
From the Main Menu, enter 4 to go to Menu 4 - Internet Access Setup, as displayed below. The following
table contains instructions on how to configure your Prestige for Internet access.
Menu 4 - Internet Access Setup
ISP's Name= ChangeMe
Encapsulation= PPPoE
Multiplexing= LLC-based
VPI #= 0
VCI #= 35
Service Name= N/A
Login= N/A
My Password= ********
Single User Account= Yes
IP Address Assignment= Dynamic
IP Address= N/A
ENET ENCAP Gateway= N/A
Get this information from
the telephone company. Get
the other information from
your ISP.
Press ENTER to confirm or ESC to cancel:
Figure 3-8Internet Access Setup
3-12Internet Access
Prestige 642R Series ADSL Router
Table 3-5Internet Access Setup Menu Fields
FieldDescriptionOptions/E.G.
ISP’s NameEnter the name of your Internet Service Provider, e.g., myISP.
This information is for identification purposes only.
EncapsulationPress [SPACE BAR] to select the method of encapsulation
used by your ISP.
MultiplexingPress [SPACE BAR] to select the method of multiplexing used
by your ISP - either VC-based or LLC-based.
Service Name
VPI #Enter the Virtual Path Identifier (VPI) that the telephone
VCI #Enter the Virtual Channel Identifier (VCI) that the telephone
My LoginEnter the login name that your ISP gives you. If you are using
My PasswordEnter the password associated with the login name above.
Single User AccountPress [SPACE BAR] to enable or disable SUA. Please see
IP Address
Assignment
IP AddressEnter the IP address supplied by your ISP if applicable.
ENET ENCAP
Gateway
When you have completed this menu, press [ENTER] at the prompt [Press ENTER to Confirm…] to save
your configuration, or press [ESC] at any time to cancel.
This is valid only when you have chosen PPPoE
encapsulation. If you are using PPPoE encapsulation, then
type the name of your PPPoE service here.
company gives you.
company gives you.
PPPoE encapsulation, then this field must be of the form
user@domain
the following section for a more detailed discussion on the
Single User Account feature.
Press [SPACE BAR] to select Static or Dynamic address
assignment.
Enter the gateway IP address supplied by your ISP if
applicable.
where domain identifies your ISP.
e.g., MyISP
PPPoE, PPP,
RFC 1483 or
ENET ENCAP.
VC-based LLCbased
poellc
e.g., 0
e.g., 35
e.g., tarbuck
***
Yes/No
Static /
Dynamic
e.g.,
192.168.1.1
e.g.,
192.168.1.100
At this point, if all your settings are correct your Prestige should connect automatically to the Internet. If the
connection fails, note the error message that you receive on the screen and take the appropriate
troubleshooting steps.
Internet Access3-13
Prestige 642R Series ADSL Router
3.14 Single User Account
Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, you will have
to lease a block of legal, or globally unique, IP addresses from the ISP.
The Single User Account (SUA) feature allows you to have the same benefits as having multiple legal
addresses, but only pay for one IP address, thus saving significantly on the subscription fees. (Check with
your ISP before you enable this feature).
The IP address for the SUA can be either fixed or dynamically assigned by the ISP. In addition, you can
designate servers, e.g., a web server and a Telnet server, on your local network and make them accessible to
the outside world. If you do not define any server, SUA offers the additional benefit of firewall protection. If
no server is defined, all incoming inquiries will be filtered out by your Prestige, thus preventing intruders
from probing your network. Your Prestige accomplishes this address sharing by translating the internal LAN
IP addresses to a single address that is globally unique on the Internet. For more information on IP address
translation, refer to RFC 1631, The IP Network Address Translator (NAT).
3.14.1 Advantages of SUA
In summary:
z SUA is a cost-effective solution for small offices to access the Internet or other remote TCP/IP networks.
z SUA supports servers to be accessible to the outside world.
z SUA can provide firewall protection if you do not specify a server. All incoming inquiries will be
filtered out by your Prestige.
z UDP and TCP packets can be routed. In addition, partial ICMP, including echo and traceroute, is
supported.
3.14.2 Single User Account Configuration
The steps for configuring your Prestige for Single User Account are identical to the conventional Internet
access with the exception that you need to fill in two extra fields in Menu 4 - Internet Access Setup, as
shown below.
3-14Internet Access
Prestige 642R Series ADSL Router
Menu 4 – Internet Access Setup
ISP's Name= ChangeMe
Encapsulation= ENET ENCAP
Multiplexing= LLC-based
VPI #= 0
VCI #= 35
Service Name= N/A
Login= N/A
My Password= N/A
Single User Account= Yes
IP Address Assignment= Static
IP Address= 192.168.1.1
ENET ENCAP Gateway= 192.168.1.100
Press ENTER to confirm or ESC to cancel:
Configure
SUA here.
.
Figure 3-9Menu 4 - Internet Access Setup and Single User Account
To enable the SUA feature in Menu 4, move the cursor to the Single User Account field and select Yes (or
No to disable SUA). Then follow the instructions on how to configure the SUA fields.
Table 3-6Single User Account Menu Fields
FieldDescription
Single User Account
IP Address
Assignment
IP Address Enter your IP Address here in dotted decimal notation if you
Press [ENTER] at the message [Press ENTER to confirm...] to save your configuration,
or press [ESC] at any time to cancel.
Select Yes to enable SUA.
Press [SPACE BAR] to toggle between Dynamic and Static. If
you have a static IP Address, enter it in dotted decimal notation
into the IP Address field. If you have a dynamic IP Address,
the IP Address field will be N/A.
have a static IP. If you have a dynamic IP address then the
field becomes N/A.
3.15 Multiple Servers behind SUA
If you wish, you can make inside servers for different services, e.g., web or FTP, visible to the outside users,
even though SUA makes your whole inside network appear as a single machine to the outside world. A
service is identified by the port number, e.g., web service is on port 80 and FTP on port 21.
As an example, if you have a web server at 192.168.1.2 and an FTP server 192.168.1.3, then you need to
specify for port 80 (web) the server at IP address 192.168.1.2 and for port 21 (FTP) another at IP address
192.168.1.3.
Internet Access3-15
Prestige 642R Series ADSL Router
Please note that a server can support more than one service, e.g., a server can provide both FTP and DNS
service, while another provides only web service. Also, since you need to specify the IP address of a server
in the Prestige, a server must have a fixed IP address and not be a DHCP client whose IP address potentially
changes each time it is powered on.
In addition to the servers for specific services, SUA supports a default server. A service request that does not
have a server explicitly designated for it is forwarded to the default server. If the default server is not
defined, the service request is simply discarded.
To make a server visible to the outside world, specify the port number of the service and the inside IP address
of the server in Menu 15 –SUA Server Setup.
Figure 3-10Single User Account Topology
3.15.1 Configuring a Server behind SUA
Follow the steps below to configure a server behind SUA:
1. Enter 15 in the main menu to go to Menu 15 - SUA Server Setup.
2. Enter an index number in menu 15 to go to Menu 15.1 - SUA Server Configuration.
3. Enter the service port number in the Port # field and the inside IP address of the server in the IP Address
field.
3-16Internet Access
Prestige 642R Series ADSL Router
4. Press [ENTER] at the [Press ENTER to confirm…] prompt to save your configuration after you define
all the servers or press [ESC] at any time to cancel.
Figure 3-11Multiple Server Configuration
The most often used port numbers are:
Menu 15 – SUA Server Setup
Port #
------
1.Default192.168.1.33
2.21192.168.1.34
3.23192.168.1.35
4.25192.168.1.36
5.80192.168.1.37
6.00.0.0.0
7.00.0.0.0
8.00.0.0.0
Press ENTER to Confirm or ESC to Cancel:
IP Address
---------------
Table 3-7Services vs. Port Number
ServicesPort Number
FTP (File Transfer Protocol)21
Telnet23
SMTP (Simple Mail Transfer Protocol)25
DNS(Domain Name System)53
HTTP (Hyper Text Transfer protocol or WWW, Web) 80
PPTP (Point-to-Point Tunneling Protocol)1723
Internet Access3-17
Part II:
ADVANCED APPLICATIONS
Advanced Applications (Chapters 4 to 7) describes the advanced applications of your Prestige.
Described are Remote Node Setup, Remote Node TCP/IP Configuration, IPX Configuration and
Bridging Setup.
II
Prestige 642R Series ADSL Router
Chapter 4
Remote Node Configuration
In this chapter, we discuss the parameters that are protocol independent.
The protocol-dependent configurations are covered in subsequent chapters.
A remote node is required for placing calls to a remote gateway. A remote node represents both the remote
gateway and the network behind it across a WAN connection. Note that when you use Menu 4 to set up
Internet access, you are actually configuring one of the remote nodes.
4.1 Remote Node Setup
This section describes the protocol-independent parameters for a remote node.
4.1.1 Remote Node Profile
To configure a remote node, follow these steps:
Step 1. From the Main Menu, select menu option 11 - Remote Node Setup.
Step 2. When Menu 11 appears, as shown in the following figure, enter the number of the remote node
that you wish to configure.
Menu 11 - Remote Node Setup
1. ChangeMe (ISP,SUA)
2. ________
3. ________
4. ________
5. ________
6. ________
7. ________
8. ________
Enter Node # to Edit:
Figure 4-1Menu 11 - Remote Node Setup
Remote Node Configuration4-1
Prestige 642R Series ADSL Router
4.1.2 Encapsulation and Multiplexing Scenarios
For Internet access you should use the encapsulation and multiplexing methods used by your ISP. For
LAN-to-LAN applications, e.g., branch office and corporate headquarters, prior mutual agreement on
methods used is necessary because there is no mechanism to automatically determine encapsulation or
multiplexing. Selection of which encapsulation and multiplexing methods to use depends on how many
VCs you have and how many different network protocols you need. The extra overhead that PPP over
Ethernet (PPPoE) and ENET ENCAP encapsulation entail makes them a poor choice in a LAN-to-LAN
application. Here are some examples of more suitable combinations in such an application.
Scenario 1.One VC, Multiple Protocols
PPP (RFC-2364) encapsulation with VC-based multiplexing is the best combination because the extra
protocol identifying headers that LLC-based multiplexing uses is not needed. The PPP protocol already
contains this information.
Scenario 2.One VC, One Protocol (IP)
Select RFC-1483 encapsulation with VC-based multiplexing requires the least amount of overhead (0
octets). However, if there is a potential need for multiple protocol support in the future, it may be safer to
select PPP encapsulation instead of RFC-1483, so you do not need to reconfigure either machine when the
time comes.
Scenario 3.Multiple VCs
If you have an equal number (or more) of VCs than the number of protocols, then select RFC-1483
encapsulation and VC-based multiplexing.
When Menu 11.1 – Remote Node Profile appears fill in the fields as described in the following table to
define this remote profile. The Remote Node Profile Menu Fields table shows you how to configure the
Remote Node Menu.
4-2Remote Node Configuration
Prestige 642R Series ADSL Router
Menu 11.1 - Remote Node Profile
Rem Node Name= ChangeMe
Active= Yes
Encapsulation= PPP
Multiplexing= LLC-based
Incoming:
Rem Login=
Rem Password= ********
Outgoing:
My Login=
My Password= ********
Authen= CHAP/PAP
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle.
Route= IP
Bridge= No
Edit PPP Options= No
Rem IP Addr= 0.0.0.0
Edit IP/IPX/Bridge= No
Session Options:
Edit Filter Sets= No
PPPoE Idle Timeout(sec)= N/A
PPPoE Service Name=
Figure 4-2Menu 11.1 - Remote Node Profile
Table 4-1Remote Node Profile Menu Fields
FIELDDESCRIPTIONOPTIONS
Rem Node NameThis is a required field. Enter a descriptive name for the
remote node, for example, Corp. This field can be up to
eight characters. This name must be unique from any
other remote node name or remote dial-in user name.
Enter a
unique name
of 8 or less
characters for
the RemoteNode Name.
Enter the IPAddress of
the Remote
Gateway
here.
Active
Press [space bar] to toggle between Yes and No.
Inactive nodes are displayed with a minus sign (
–
) at the
Yes or No
beginning of the name in Menu 11.
Encapsulation
PPP refers to RFC-2364 (PPP Encapsulation over ATM
Adaptation Layer 5). If RFC-1483 (Multiprotocol
Encapsulation over ATM Adaptation Layer 5) of ENET
ENCAP are selected, then the Rem Login, Rem
Password, My Login, My Password, Edit PPP
PPP
RFC-1483
ENET
ENCAP
Options and Authen fields is not applicable (N/A).
Moreover, ENET ENCAP encapsulaton does not apply
for IPX routing.
Remote Node Configuration4-3
Prestige 642R Series ADSL Router
MultiplexingPress [space bar] to select the multiplexing method.
Incoming:
Rem Login
Rem Password
Enter the login name that this remote node will use
when it calls your Prestige. The login name in this field
combined with the Rem Password will be used to
authenticate this node.
Enter the password used when this remote node calls
your Prestige.
Outgoing:
My Login
My Password
Authen
RouteThis field determines the protocol that your Prestige will
BridgeBridging is used for protocols that the Prestige does not
Edit PPP OptionsTo edit the PPP options for this remote node, move the
Enter the login name assigned by your ISP when the
Prestige calls this remote node.
Enter the password assigned by your ISP when the
Prestige calls this remote node.
This field sets the authentication protocol used for
outgoing calls. Options for this field are:
zCHAP/PAP – Your Prestige will accept either
CHAP or PAP when requested by this remote
node.
zCHAP – accept CHAP (Challenge Handshake
Authentication Protocol) only.
z
PAP – accept PAP (Password Authentication
Protocol) only.
route.
route, e.g., SNA, or not turned on in the previous Route
field. When bridging is enabled, your Prestige will
forward any packet that it does not route to this remote
node; otherwise, the packets are discarded. Press the
[space bar] to toggle between the options.
cursor to this field. Use [space bar] to select Yes and
press [Enter]. This will bring you to Menu 11.2
Remote Node PPP Options. For more information on
configuring PPP options, see the section
–
Editing PPP
VC-based
LLC-based
CHAP/PAP
CHAP
PAP
IP / IPX /
IP+IPX /
None
Yes or No
Press [space
bar] to toggle
Yes then
press [Enter]
4-4Remote Node Configuration
Prestige 642R Series ADSL Router
Options
Rem IP AddrEnter the IP address of the remote gateway.
Edit IP/IPX/Bridge
Session Options:
Edit Filter Sets
PPPoE Idle Timeout (sec)This value specifies the number of idle seconds that
PPPoE Service NameThis is valid only when you have chosen PPPoE
Once you have completed filling in Menu 11.1 – Remote Node Profile, press [Enter] at the message
[Press ENTER to Confirm … ] to save your configuration, or press [Esc] at any time to cancel.
Press [space bar] to select Yes and press [Enter] to go
to Menu 11.3 – Remote Node Network LayerOptions.
Press [space bar] to select Yes and press [Enter] to
open Menu 11.5 to edit the filter sets. See the Remote
Node Filter section for more details.
elapse before the Prestige automatically disconnects
the PPPoE session.
encapsulation. If you are using PPPoE encapsulation,
then type the name of your PPPoE service here.
.
Yes or No
Yes or No
100
(default)
4.1.3 Outgoing Authentication Protocol
Generally speaking, you should employ the strongest authentication protocol possible, for obvious reasons.
However, some vendor’s implementation includes specific authentication protocol in the user profile. It will
disconnect if the negotiated protocol is different from that in the user profile, even when the negotiated
protocol is stronger than specified. If you encounter the case where the peer disconnects right after a
successful authentication, please make sure that you specify the correct authentication protocol when
connecting to such an implementation.
4.1.4 Editing PPP Options
To edit the remote node PPP options, move the cursor to the Edit PPP Options field in Menu 11.1 –
Remote Node Profile, and use [space bar] to select Yes. Press [Enter] to open Menu 11.2, as shown
next.
Remote Node Configuration4-5
Prestige 642R Series ADSL Router
p
Menu 11.2 - Remote Node PPP Options
Encapsulation= Standard PPP
Compression= No
ENTER here to Confirm or ESC to Cancel:
Press S
ace Bar to Toggle.
Figure 4-3Menu 11.2 - Remote Node PPP Options
The following table describes the Remote Node PPP Options menu and contains instructions on how to
configure the PPP options fields.
Table 4-2Remote Node PPP Options Menu Fields
FIELDDESCRIPTIONOPTION
Encapsulation
CompressionTurn on/off Stac Compression. The default for this
Once you have completed filling in Menu 11.2 – Remote Node PPP Options, press [Enter] at the
message [Press ENTER to Confirm…] to save your configuration, or press [Esc] at any time to cancel.
Select CISCO PPP only when this remote node is a
Cisco machine; otherwise, select Standard PPP.
field is Off.
Standard
PPP
CISCO PPP
On or Off
(Default=Off)
4.1.5 Remote Node Filter
In Menu 11.1 – Remote Node Profile make sure the Edit Filter Sets field displays Yes by toggling the
[spacebar]. Press [ENTER] to access Menu 11.5 – Remote Node Filter.
Use Menu 11.5 – Remote Node Filter to specify the filter set(s) to apply to the incoming and outgoing
traffic between this remote node and the Prestige. You can specify up to 4 filter sets separated by commas,
eg. 1, 5, 9, 12 in each filter field. For more information on defining the filters, see the Filter Configuration
chapter. Note that there are two versions of this menu depending on whether you use PPPoE encapsulation
or not. When using PPPoE encapsulation, you can also specify remote nodes called filter sets.
This chapter shows you how to configure the TCP/IP parameters of a remote node.
5.1 LAN-to-LAN Application
A typical LAN-to-LAN application is to use your Prestige to connect a branch office to the headquarters, as
depicted in the following diagram.
Figure 5-1TCP/IP LAN-to-LAN Application
For the branch office, you need to configure a remote node in order to dial out to headquarters.
Additionally, you may also need to define static routes if some services reside beyond the immediate
remote LAN.
Remote Node TCP/IP Configuration5-1
Prestige 642R Series ADSL Router
5.1.1 Editing TCP/IP Options
Follow the steps below to edit Menu 11.3 – Remote Node Network Layer Options.
In Menu 11.1, move the cursor to the Edit IP/IPX/Bridge, then press [space bar] to toggle and set the
value to Yes. Press [Enter] to open Menu 11.3 – Network Layer Options.
There are two versions of Menu 11.3 for the Prestige, depending on whether you chose VC-based or LLC-based multiplexing in Menu 11.1.
VC-based Multiplexing
Remember that for VC-based multiplexing, by prior mutual agreement, a protocol is assigned a specific
virtual circuit, e.g., VC1 will carry IP, VC2 will carry IPX, etc. However, note that for PPP or PPPoE
encapsulation, we just need 1 VC no matter what protocol (IP/IPX/Bridge) is being carried.
Menu 11.3 - Remote Node Network Layer Options
IPX Options:
Rem LAN Net #= N/A
My WAN Net #= N/A
IP Options: Hop Count= N/A
Rem IP Addr: 0.0.0.0 Tick Count= N/A
Rem Subnet Mask= 0.0.0.0 W/D Spoofing(min)= N/A
My WAN Addr= 0.0.0.0 SAP/RIP Timeout(min)= N/A
Single User Account= Yes Dial-On-Query= N/A
Metric= 2 VPI #= N/A
Private= No VCI #= N/A
RIP Direction= None
Version= RIP-1 Bridge Options:
Multicast= None Dial-On-Broadcast= N/A
IP Policies= Ethernet Addr Timeout(min)= N/A
VPI #= 0 VPI #= N/A
VCI #= 35 VCI #= N/A
Enter here to CONFIRM or ESC to CANCEL:
Separate
VPI and VCI
numbers
must be
specified for
each
protocol
when using
VC-based
multiplexing
as there
must be a
distinct PVC
for each
Figure 5-2Menu 11.3 for VC-based Multiplexing
In this case, separate VPI and VCI numbers must be specified for each protocol.
LLC-based Multiplexing
For LLC-based multiplexing, one VC may carry multiple protocols with protocol identifying information
being contained in each packet header.
5-2Remote Node TCP/IP Configuration
Prestige 642R Series ADSL Router
Menu 11.3 - Remote Node Network Layer Options
Only one set of
VPI/VCI (LLC-mux or PPP/PPPoE Encap):
VPI #= 0
VCI #= 35
IP Options :
Rem IP Addr: 0.0.0.0
Rem Subnet Mask= 0.0.0.0
My WAN Addr= 0.0.0.0
Single User Account= Yes
Metric= 2
Private= No
RIP Direction= None
Version= RIP-1
Multicast= None
IP Policies=
Enter here to CONFIRM or ESC to CANCEL:
IPX Options:
Rem LAN Net #= N/A
My WAN Net #= N/A
Hop Count= N/A
VPI and VCI
numbers need
be specified as
for LLC-based
multiplexing or
when using
PPP or PPPoE
encapsulation.
One VC may
carry different
protocols.
Figure 5-3Menu 11.3 for LLC-based Multiplexing
In this case, only one set of VPI and VCI numbers need be specified for all protocols. The valid range for
the VPI is 0 to 255 and for the VCI is 32 to 65535 (1 to 31 is reserved for local management of ATM
traffic).
The following diagram explains the sample IP addresses to help you understand the field of My WanAddr
in Menu 11.3. Refer to the following figure for a brief review of what a WAN IP is. My WAN Addr
indicates the local Prestige WAN IP while Rem IP Addr indicates the peer WAN IP.
Remote Node TCP/IP Configuration5-3
Prestige 642R Series ADSL Router
.
Figure 5-4Sample IP Addresses for a TCPI/IP LAN-to-LAN Connection
To configure the TCP/IP parameters of a remote node, first configure the three fields in Menu 11.1 –
Remote Node Profile, as shown in the table below.
Table 5-1TCP/IP-Related Fields in Remote Node Profile
FIELDDESCRIPTIONOPTION
S
Route
Rem IP
Address
Edit IP
Make sure IP is among the protocols in the Route field in Menu 11.1 –Remote Node Profile.
Enter the IP address of the remote gateway in Menu 11.1 – Remote NodeProfile. You must fill in either the remote Prestige WAN IP address or the
remote Prestige LAN IP address. This depends on the remote router’s WAN
IP i.e., for the (remote) Prestige, the My WAN Addr settings in Menu 11.3.
For example (see previous Figure), if the remote WAN IP is set to
172.16.0.2 (the remote router’s WAN IP), then you should enter 172.16.0.2
in the Rem IP Addr field. If the remote WAN IP is 0.0.0.0, then enter
192.168.1.1(the remote router’s LAN IP) in the Rem IP Addr field.
Press [space bar] to toggle this field to Yes and then press [Enter] to go to
Menu 11.3
–
Remote Node Network Layer Options menu.
IP
Yes or
No
The following table shows the TCP/IP-related fields in Menu 11.3 – Remote Node Network Layer
Options.
5-4Remote Node TCP/IP Configuration
Prestige 642R Series ADSL Router
Table 5-2TCP/IP Remote Node Configuration
FIELDDESCRIPTIONOPTIONS
VPI
VCI
Rem IP AdressThis will show the IP address you entered for this remote node
Rem IP Subnet
Mask
My Wan
Address
Single User
Account
MetricMetric represents the “cost” of transmission for routing purposes.
PrivateThis parameter determines if the Prestige will include the route
RIP Direction
Enter the Virtual Path Identifier (VPI) number that your
telephone company supplies.
Enter the Virtual Channel Identifier (VCI) number that your
telephone company supplies.
in the previous menu.
Enter the subnet mask for the remote network.
Some implementations, especially the UNIX derivatives, require
the WAN link to have a separate IP network number from the
LAN and each end must have a unique address within the WAN
network number. If this is the case, enter the IP address
assigned to the WAN port of your Prestige.
NOTE: This is the address assigned to your local Prestige WAN,
not the remote router. If the remote router is a Prestige, then
this entry determines the local Prestige Rem IP Addr in Menu
11.1.
Set this field to Yes to enable the Single User Account feature
for your Prestige. Use the [space bar] to toggle between Yes
and No. See Chapter 3 – Internet Access Application for
more information on the Single User Account feature.
IP routing uses hop count as the measurement of cost, with a
minimum of 1 for directly connected networks. Enter a number
that approximates the cost for this link. The number need not be
precise, but it must be between 1 and 15. In practice, 2 or 3 is
usually a good number.
to this remote node in its RIP broadcasts. If set to Yes, this route
is kept private and not included in RIP broadcast. If No, the
route to this remote node will be propagated to other hosts
through RIP broadcasts.
Press [space bar] to select from Both, In Only, Out Only or
None.
Yes or No
1 to 15
Yes or No
Both, In Only,
Out Only or
None
Remote Node TCP/IP Configuration5-5
Prestige 642R Series ADSL Router
FIELDDESCRIPTIONOPTIONS
Version
Press [space bar] to select the RIP version from RIP-1/
RIP-2B/RIP-2M.
RIP-1,
RIP-2B or
RIP-2M
MulticastSets IGMP to version 1, version 2, or disables IGMP. IGMP
(Internet Group Multicast Protocol) is a session-layer protocol
used to establish membership in a Multicast group. The
Prestige supports both IGMP version 1 (IGMP-v1) and version
2 (IGMP-v2). Press [space bar] to enable IP Multicasting or
select None to disable it.
IP Policies
Once you have completed filling in the Remote Node Network Layer Options Menu, press [Enter] to
return to Menu 11. Press [Enter] at the message [Press ENTER to Confirm…] to save your
configuration or press [Esc] at any time to cancel.
Create policies using SMT Menu 25 (see the IP Routing PolicyChapter in Part 3) and apply them on the Prestige LAN
interface here. You can apply up to four IP Policy sets (from
twelve) by entering their numbers separated by commas.
IGMP-v1/
IGMP-v2/
None (default)
e.g., 3, 4, 5, 6
5.1.2 Static Route Setup
Static routes tell the Prestige routing information that it cannot learn automatically through other means.
This can arise in cases where RIP is disabled on the LAN or a remote network is beyond the one that is
directly connected to a remote node.
Each remote node specifies only the network to which the gateway is directly connected and the Prestige
has no knowledge of the networks beyond it. For instance, the Prestige knows about network N2 in the
following diagram through remote node Router 1. However, the Prestige is unable to route a packet to
network N3 because it does not know that there is a route through remote node Router 1 (via Router 2). The
static routes are for you to tell the Prestige about the networks beyond the remote nodes.
5-6Remote Node TCP/IP Configuration
Prestige 642R Series ADSL Router
Figure 5-5Sample Static Routing Topology
To configure an IP static route, use Menu 12.1 - Static Route Setup. Follow the procedure below.
Step 1. Enter 12 from the Main Menu to bring up the following screen.
Menu 12 - Static Route Setup
1. IP Static Route
2. IPX Static Route
3. Bridge Static Route
Please enter selection:
Figure 5-6Menu 12 - Static Route Setup
Step 2. From Menu 12, enter 1 to bring up the next screen.
Menu 12 - IP Static Route Setup
1. routename
2. ________
3. ________
4. ________
5. ________
6. ________
7. ________
8. ________
Enter selection number:
Figure 5-7Menu 12.1 - IP Static Route Setup
Remote Node TCP/IP Configuration5-7
Prestige 642R Series ADSL Router
Step 3. From Menu 12.1, enter the index number of one of the static routes that you want to configure.
Menu 12.1 - Edit IP Static Route
Route #: 1
Route Name= ?
Active= No
Destination IP Address= ?
IP Subnet Mask= ?
Gateway IP Address= ?
Metric= 2
Private= No
Press ENTER to Confirm or ESC to Cancel:
Figure 5-8Edit IP Static Route
The following table describes the fields for Menu 12.1 - Edit IP Static Route Setup.
Table 5-3Edit IP Static Route Menu Fields
FIELDDESCRIPTION
Route #This is the index number of the static route that you chose in Menu 12.1.
Route NameEnter a descriptive name for this route. This is for identification purpose only.
ActiveThis field allows you to activate/deactivate this static route.
Destination IP AddressThis parameter specifies the IP network address of the final destination.
Routing is always based on network number. If you need to specify a route
to a single host, use a subnet mask of 255.255.255.255 in the subnet mask
field to force the network number to be identical to the host ID.
IP Subnet MaskEnter the subnet mask for this destination. Follow the discussion on IP
subnet mask in Chapter 3.
Gateway IP AddressEnter the IP address of the gateway. The gateway is an immediate neighbor
of your Prestige that will forward the packet to the destination. On the LAN,
the gateway must be a router on the same segment as your Prestige; over
WAN, the gateway must be the IP address of one of the remote nodes.
MetricMetric represents the “cost” of transmission for routing purposes. IP routing
uses hop count as the measurement of cost, with a minimum of 1 for directly
connected networks. Enter a number that approximates the cost for this link.
The number need not be precise, but it must be between 1 and 15. In
practice, 2 or 3 is usually a good number.
5-8Remote Node TCP/IP Configuration
Prestige 642R Series ADSL Router
FIELDDESCRIPTION
PrivateThis parameter determines if the Prestige will include the route to this remote
node in its RIP broadcasts. If set to Yes, this route is kept private and is not
included in RIP broadcast. If No, the route to this remote node will be
propagated to other hosts through RIP broadcasts.
Once you have completed filling in this menu, press [Enter] at the message [Press ENTER to Confirm...]
to save your configuration, or press [Esc] to cancel.
Remote Node TCP/IP Configuration5-9
Prestige 642R Series ADSL Router
Chapter 6
IPX Configuration
This chapter shows you how to configure the IPX parameters of the Prestige.
6.1 IPX Network Environment
Novell bundles the protocol stack, the server software and routing functionality in their NetWare server
products, so a NetWare server is not only a file or print server, it is also a router.
6.1.1 Network and Node Number
Every IPX machine has a network number and a node number, together they form the complete address of
the machine. The IPX network number is a 32-bit quantity and is usually expressed in 8 hexadecimal digits,
e.g., 0893A8CF. The host number is a 48-bit quantity and usually is taken from the MAC (Media Access
Control) address of the Ethernet hardware, so you do not have to explicitly configure the node number.
An IPX client obtains its network number from a server that has the network numbers statically configured.
If there are multiple servers on a network, only one server need to have the network numbers configured
and all other stations (clients and servers) can obtain the network numbers from it. The server with
configured network numbers is called a seed router.
If you have a NetWare server on the same LAN as the Prestige, we recommend that you set up a NetWare
server as a seed router. Even though the Prestige is capable as a seed router, a NetWare server offers a much
more extensive facility for network management.
6.1.2 Frame Types
IPX can run on top of four different frame types on the Ethernet. These frame types are 802.2, 802.3,
Ethernet II (DIX), and SNAP (Sub-Network Access Protocol). Each frame type is a separate logical
network, even though they exist on one physical network (see the following diagram).
Even though there are four frame types available on the Ethernet, you should configure as few frame types
as possible on your NetWare server and use automatic frame detection on the clients to simplify
management and to reduce network overhead.
IPX Configuration6-1
Prestige 642R Series ADSL Router
Figure 6-1NetWare Network Numbers
6.1.3 External Network Number
Each of the four logical networks (based on frame type) has its own external network number.
6.1.4 Internal Network Number
In addition to the external network numbers, each NetWare server has its own internal network number that
is a virtual network to which the server is attached. It is important to remember that every network number
must be unique for that entire internetwork, either internal or external.
6-2IPX Configuration
Prestige 642R Series ADSL Router
6.2 Prestige 642R in an IPX Environment
There are two scenarios in which your Prestige is deployed, depending on whether there is a NetWare
server on the LAN, as depicted in the following diagram.
Figure 6-2Prestige in an IPX Environment
6.2.1 Prestige 642R on LAN With Server
If your Prestige is on a LAN with a seed router, you do not need to configure the LAN network numbers.
Your Prestige will learn the network number from the seed router and add the routes to its routing table.
6.2.2 Prestige 642R on LAN Without Server
Each IPX network must have a seed router. If you only have NetWare clients on your network, then you
must configure the Prestige as a seed router and set up unique network numbers for each frame type enabled
using Ethernet Setup menu.
IPX Configuration6-3
Prestige 642R Series ADSL Router
6.3 IPX Ethernet Setup
From Menu 3 – Ethernet Setup, select option 3 to got to Menu 3.3 - Novell IPX Ethernet Setup as
shown in Figure 6-3.
Menu 3.3 - Novell IPX Ethernet Setup
Seed Router= No
Frame Type 802.2= Yes
IPX Network #= N/A
Frame Type 802.3= No
IPX Network #= N/A
Frame Type Ethernet II= No
IPX Network #= N/A
Frame Type SNAP= No
IPX Network #= N/A
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle.
Figure 6-3Menu 3.3 - Novell IPX Ethernet Setup
The following describes the Novell IPX Ethernet Setup menu.
Table 6-1Novell IPX Ethernet Setup Fields
FIELDDESCRIPTIONOPTIONS
Seed RouterDetermines if your Prestige is to act as a seed router.
Frame TypeEnable/Disable the individual frame type.
Remember to enable only the ones that are actually used on your
network.
Yes or No
802.2
802.3
Ethernet II
SNAP
IPX Network#If your Prestige is a seed router, enter a unique network number for each
frame type enabled.
Press [ENTER] at the message [Press ENTER to Confirm . . . ] to save your configuration, or press
[ESC] at any time to cancel.
6-4IPX Configuration
Prestige 642R Series ADSL Router
6.4 LAN-to-LAN Application With Novell IPX
A typical LAN-to-LAN application is to use your Prestige to call from a branch office to the corporate
headquarters to enable the stations in the branch office to access the NetWare servers at the headquarters, as
depicted in the next figure.
Figure 6-4LAN-to-LAN Application With Novell IPX
IPX Configuration6-5
Prestige 642R Series ADSL Router
6.4.1 IPX Remote Node Setup
Follow the procedure in Chapter 5 to configure the protocol-independent parameters in Menu 11.1 –
Remote Node Profile. For the IPX-related parameters in Menu 11.3 – Remote Node Network Layer
Options, follow the instructions below.
To edit Menu 11.3 – Remote Node Network Layer Options shown in Figure 6-5, follow these steps:
Step 1. In Menu 11.1, make sure IPX is among the protocols in the Route field. (The Route field should
display Route= IPX, or IP + IPX.)
Step 2. Move the cursor to the Edit IP/IPX/Bridge field, then press the [space bar] to set the value to
Yes, and press [Enter]
Menu 11.3 - Remote Node Network Layer Options
to open Menu 11.3 – Remote Node Network Layer Options.
VPI/VCI (LLC-mux or PPP/PPPoE) Encap:
VPI #= 0
VCI #= 35
IP Options:
Rem IP Addr: N/A
Rem Subnet Mask= N/A
My WAN Addr= N/A
Single User Account= N/A
Metric= N/A
Private= N/A
RIP Direction= N/A
Version= N/A
Multicast= N/A
IP Policies= N/A
Enter here to CONFIRM or ESC to CANCEL:
IPX Options:
Rem LAN Net #= 00000000
My WAN Net #= 00000000
Hop Count= 1
Table 6-2 describes the IPX protocol-dependent parameters of the Remote Node Setup.
Table 6-2Remote Node Novell IPX Options
FIELDDESCRIPTIONOPTIONS
Rem LAN Net#In this field, enter the internal network number of the NetWare server on
the remote LAN.
My WAN Net #In this field, enter the network number of the WAN link. If you leave this
field as 00000000, your Prestige will determine automatically the network
number through negotiation with the PPP peer.
Hop CountThis field indicates the number of intermediate networks that must be
passed through to reach the remote node.
Tick CountThis field indicates the time-ticks required to reach the remote node.
Please note that the following 3 fields are only valid for PPPoE encapsulation.
00000000
(default)
1 (default)
2 (default)
W/D Spoofing
(min)
SAP/RIP
Timeout (min)
Dial-On-Query
Once you have completed filling in the Remote Node Network Layer Options menu, press [Enter] to
return to Menu 11.1. Then press [Enter] at the message [Press ENTER to Confirm...] to save your
configuration, press [Esc] to cancel.
This field is for the Prestige on the server side. Your Prestige can spoof
a response to a server’s WatchDog request after the connection is
dropped. In this field, type in the time (number of minutes) that you want
your Prestige to spoof the WatchDog response.
This field indicates the amount of time that you want your Prestige to
maintain the SAP and RIP entries learned from this remote node in its
internal tables after the connection has been dropped. If the information
is retained, then your Prestige will not have to get the SAP information
when the line is brought back up. Enter the time (number of minutes) in
this field.
This field is necessary for your Prestige on the client side. When set to
Yes, any Get Service SAP or RIP broadcasts will trigger your Prestige to
make a call to that remote node.
6.4.2 IPX Static Route Setup
Similar to IP, IPX static routes tell the Prestige how to reach servers beyond a remote node before a
connection to that remote node is established.
Yes or
No
IPX Configuration6-7
Prestige 642R Series ADSL Router
Step 1. Enter 12, from the Main Menu, to bring up the following screen.
Menu 12 – Static Route Setup
1. IP Static Route
2. IPX Static Route
3. Bridge Static Route
Please enter selection:
Figure 6-6Menu 12 - Static Route Setup
Step 2. Enter 2, from Menu 12, to bring up the following screen.
Menu 12.2 – IPX Static Route Setup
1. routename
2. _________
3. _________
4. _________
Enter selection number:
Figure 6-7Menu12.2 - IPX Static Route Setup
Step 3. Select one of the IPX Static Routes to open Menu 12.2.1 – Edit IPX Static Route, as shown
next.
Menu 12.2.1 - Edit IPX Static Route
Route #= 1
Server Name= ?
Active= Yes
Network #= ?
Node #= 000000000001
Socket #= 0451
Type #= 0004
Hop Count= 2
Tick Count= 3
Gateway Node= 1
Press ENTER to Confirm or ESC to Cancel:
Figure 6-8Menu 12.2.1 - Edit IPX Static Route
6-8IPX Configuration
Prestige 642R Series ADSL Router
The following table contains the instructions on how to configure the Edit IPX Static Route menu.
Table 6-3Edit IPX Static Route Menu Fields
FIELDDESCRIPTION
Route #
Server Name
ActiveThis field allows you to activate/deactivate this static route.
Network #This field contains the internal network number of the remote server that you wish to
Node #This field contains the address of the node on which the server resides. If you are
Socket #This field contains the socket number on which the server will receive service
Type #This field identifies the type of service the server provides. The default for this field is
Hop CountThis field indicates the number of intermediate networks that must be passed through
Tick CountThis field indicates the time-ticks required to reach the remote node.
Gateway NodeIn this field, enter the number of the remote node that is the gateway for this static
Once you have completed filling in the menu, press [Enter] at the message [Press ENTER to Confirm…]
to save your configuration, or press [Esc] to cancel.
This is the index number of the route as listed in Menu 12.2 – IPX Static RouteSetup.
In this field, enter the name of the server. This must be the exact name configured in
the NetWare server.
access. [00000000] and [FFFFFFFF] are reserved.
using a Novell IPX implementation, this value is [000000000001].
requests. The default for this field is hex [0451].
hex [0004].
to reach the remote node.
route.
IPX Configuration6-9
Prestige 642R Series ADSL Router
Chapter 7
Bridging Setup
This chapter shows you how to configure the bridging parameters of your Prestige.
7.1 Bridging in General
Bridging bases the forwarding decision on the MAC (Media Access Control), or hardware address, while
routing does it on the network layer (IP or IPX) address. Bridging allows the Prestige to transport packets
of network layer protocols that it does not route, e.g., SNA, from one network to another. The caveat is that,
compared to routing, bridging generates more traffic for the same network layer protocol, and it also
demands more CPU cycles and memory.
For efficiency reasons, do not turn on bridging unless you need to support protocols other than IP and IPX
on your network. For IP and IPX, enable the respective routing if you need it; do not bridge what the
Prestige can route.
7.2 Bridge Ethernet Setup
Basically, all non-local packets are bridged to the WAN, however, your Prestige 642 applies special
handling for certain IPX packets to reduce the number of calls, depending on the setting of the Handle IPX
field.
Enter 4, from Menu 3 – Ethernet Setup, to bring up Menu3.4 – Bridge Ethernet Setup as shown next.
Menu 3.4 - Bridge Ethernet Setup
Handle IPX= None
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle.
Figure 7-1Menu 3.4 - Bridge Ethernet Setup
The following table describes how to configure the Handle IPX field in Menu 3.4.
Bridging Setup7-1
Prestige 642R Series ADSL Router
Table 7-1Bridge Ethernet Setup Menu - Handle IPX Field Configuration
FIELDDESCRIPTIONOPTIONS
Handle
IPX
Press the [space bar] to toggle between the options for this field.
When there is no IPX traffic on the LAN or when you do not want to apply
any special handling for IPX.
None
When there are only client workstations on the LAN. RIP and SAP (Service
Advertising Protocol) response packets will not trigger calls.
When there are only IPX servers on the LAN. No RIP or SAP packets will
trigger calls. In addition, during the time when the line is down, your
Prestige will reply to WatchDog messages from the servers on behalf of
remote clients. The period of time that your Prestige will do this is linked to
the Ethernet Address Timeout parameter in each remote node (see Remote
Node Configuration). When a remote Ethernet address is timed out, there is
no need to maintain its connection to the IPX server.
If there are both clients and servers on the LAN, and the local clients will
access the remote servers, set this field to Server but turn on the Dial-On-Broadcast (if using PPPoE encapsulation) parameter in Menu 11.3 to allow
the client queries to trigger calls.
Client
Server
7.2.1 Remote Node Bridging Setup
Follow the procedure in Chapter 5 to configure the protocol-independent parameters in Menu 11.1 –
Remote Node Profile. For bridging-related parameters, you need to configure Menu 11.3 – Remote Node
Network Layer Options.
To set up Menu 11.3 – Remote Node Network Layer Options follow these steps:
Step 1. In Menu 11.1, make sure the Bridge field is set to Yes.
Step 2. Move the cursor to the Edit IP/IPX/Bridge field, toggle the [space bar] to select Yes and then
press [Enter]
to open Menu 11.3 – Remote Node Network Layer Options.
7-2Bridging Setup
Menu 11.3 - Remote Node Network Layer Options
Prestige 642R Series ADSL Router
VPI/VCI (LLC-mux or PPP/PPPoE Encap):
VPI #= 0
VCI #= 35
IP Options:
Rem IP Addr: 0.0.0.0
Rem Subnet Mask= 0.0.0.0
My WAN Addr= 0.0.0.0
Single User Account= Yes
Metric= 2
Private= No
RIP Direction= None
Version= RIP-1
Multicast= None
IP Policies=
Enter here to CONFIRM or ESC to CANCEL:
IPX Options:
Rem LAN Net #= N/AS
My WAN Net #= N/A
Hop Count= N/A
The following table describes the bridging-dependent parameters in the Remote Node Profile and Network
Layers menus.
Table 7-2Remote Node Network Layer Options
FIELDDESCRIPTION
Bridge (Menu 11.1)
Edit IP/IPX/Bridge
(Menu 11.1)
Dial-On-Broadcast
(Menu 11.3)
Ethernet Addr Timeout
(min) (Menu 11.3)
Make sure this field is set to Yes.
Press [space bar] to change it to Yes and press [Enter] to go to the Remote
Node Network Layer Options menu.
This field is necessary for your Prestige on the caller side LAN. When set to
Yes, any broadcasts coming from the LAN will trigger your Prestige to make
a call to this remote node. If it is set to No, your Prestige will not make the
outgoing call.
In this field, enter the time (number of minutes) that you wish your Prestige to
retain the Ethernet Address information in its internal tables while the line is
down. If this information is retained, your Prestige will not have to recompile
the tables when the line is brought back up.
Once you have completed filling in the Remote Node Network Layer Options menu, press [Enter] to
return to Menu 11.1. Then press [Enter] at the message [Press ENTER to Confirm…] to save your
configuration, or press [Esc] to cancel.
Bridging Setup7-3
Prestige 642R Series ADSL Router
7.2.2 Bridge Static Route Setup
Similar to network layer static routes, a bridging static route tells the Prestige the route to a node before a
connection is established. You configure bridge static routes in Menu 12.3.1 by pressing 3 in Menu 12 as
shown next.
The following table describes the Edit Bridge Static Route Menu.
Table 7-3Edit Bridge Static Route Menu Fields
FIELDDESCRIPTION
Route #
Route NameEnter a name for the bridge static route for identification purposes.
ActiveIndicates whether the static route is active or not.
Ether AddressEnter the MAC address of the destination machine that you wish to bridge the
IP AddressIf available, enter the IP address of the destination machine that you wish to bridge
Gateway NodeEnter the number of the remote node that is the gateway of this static route.
Once you have completed filling in this menu, press [Enter] at the message [Press ENTER to Confirm…]
to save your configuration, or press [Esc] to cancel.
This is the index number of the route as listed in Menu 12.3-Bridge Static RouteSetup.
packets to.
the packets to.
Bridging Setup7-5
Advanced Management
Part III:
Advanced Management
Advanced Management (Chapters 8-12) provides information on Filter Configuration, SNMP
Configuration, System Maintenance, IP Policy Routing and Troubleshooting. Also included are
some Appendices, a Glossary and the Index.
III
Prestige 642R Series ADSL Router
Chapter 8
Filter Configuration
This chapter shows you how to create and apply filter(s).
8.1 About Filtering
Your Prestige uses filters to decide whether to allow passage of a data packet and/or to make a call. There
are two types of filter applications: data filtering and call filtering. Filters are subdivided into device and
protocol filters, which are discussed later.
Data filtering screens the data to determine if the packet should be allowed to pass. Data filters are divided
into incoming and outgoing filters, depending on the direction of the packet relative to a port. Data filtering
can be applied on either the WAN side or the Ethernet side. Call filtering is used to determine if a packet
should be allowed to trigger a call. Remote node call filtering is only applicable when using PPPoE
encapsulation. Outgoing packets must undergo data filtering before they encounter call filtering as shown in
the following figure.
Call Filtering
Outgoing
Packet
Data
Filtering
MatchMatchMatch
Drop
packet
No
match
Call Filters
Drop packet
if line not up
Built-in
default
No
match
OrOr
Send packet
but do not reset
Idle Timer
User-defined
Call Filters
(if applicable)
Drop packet
if line not up
Send packet
but do not reset
Idle Timer
No
match
Active Data
Initiate call
if line not up
Send packet
and reset
Idle Timer
Figure 8-1Outgoing Packet Filtering Process
For incoming packets, your Prestige applies data filters only. Packets are processed depending upon
whether a match is found. The following sections describe how to configure filter sets.
Filter Configuration8-1
Prestige 642R Series ADSL Router
8.1.1 The Filter Structure of the Prestige
A filter set consists of one or more filter rules. Usually, you would group related rules, e.g., all the rules for
NetBIOS, into a single set and give it a descriptive name. The Prestige allows you to configure up to twelve
filter sets with six rules in each set, for a total of 72 filter rules in the system. You cannot mix device filter
rules and protocol filter rules within the same set. You can apply up to four filter sets to a particular port to
block multiple types of packets. With each filter set having up to six rules, you can have a maximum of 24
rules active for a single port.
Three sets of factory default filter rules have been configured in Menu 21 to prevent NetBIOS traffic from
triggering calls and to prevent incoming telnetting. A summary of their filter rules is shown in the figures
that follow.
The following diagram illustrates the logic flow when executing a filter rule:
8-2Filter Configuration
Filter Set
Prestige 642R Series ADSL Router
Start
Packet into
filter
Fetch First
Filter Set
Fetch Next
Filter Set
Yes
Next Filter Set
Available?
No
Fetch Next
Filter Rule
Yes
Next filter
Rule
Available?
No
Fetch First
Filter Rule
Active?
Yes
Execute
No
Check
Next
Rule
Figure 8-2Filter Rule Process
You can apply up to four filter sets to a particular port to block multiple types of packets. With each filter
set having up to six rules, you can have a maximum of 24 rules active for a single port.
Filter Rule
Forward
Drop
Accept PacketDrop Packet
Filter Configuration8-3
Prestige 642R Series ADSL Router
8.2 Configuring a Filter Set
To configure a filter set, follow the procedure below.
Step 1. Enter 21 from the Main Menu to open Menu 21 – Filter Set Configuration.
Step 2. Enter the index number of the filter set (no. 1-12) you wish to configure and press [ENTER].
Step 3. Enter a descriptive name or comment in the Edit Comments field and press [ENTER].
Step 4. Press [ENTER] at the message: [Press ENTER to Confirm…] to open Menu 21.1.1 - Filter
Rules Summary.
8-4Filter Configuration
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.