Advertisement
Advertisement
Prestige 310 Broadband Internet Access Router
Prestige 310
User's Guide
Version 2.30
ZyXEL
T OTAL I NTERNET A CCESS S OLUTION
ii
Prestige 310 Broadband Internet Access Router
Prestige 310
Broadband Internet Access Router
Copyright
Copyright © 1999 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL
Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein.
Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice.
Trademarks
Trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners.
Prestige 310 Broadband Internet Access Router
Federal Communications Commission (FCC) Interference Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two conditions: l
This device may not cause harmful interference.
l
This device must accept any interference received, including interference that may cause undesired operations.
This equipment has been tested and found to comply with the limits for a CLASS B digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
1.
Reorient or relocate the receiving antenna.
2.
Increase the separation between the equipment and the receiver.
3.
Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
4.
Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment.
Notice 2
Shielded RS-232 cables are required to be used to ensure compliance with FCC Part 15, and it is the responsibility of the user to provide and use shielded RS-232 cables.
iii
Prestige 310 Broadband Internet Access Router
Information for Canadian Users
The Industry Canada label identifies certified equipment. This certification means that the equipment meets certain telecommunications network protective, operation, and safety requirements. The Industry Canada does not guarantee that the equipment will operate to a user's satisfaction.
Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local telecommunications company. The equipment must also be installed using an acceptable method of connection. In some cases, the company's inside wiring associated with a single line individual service may be extended by means of a certified connector assembly. The customer should be aware that the compliance with the above conditions may not prevent degradation of service in some situations.
Repairs to certified equipment should be made by an authorized Canadian maintenance facility designated by the supplier. Any repairs or alterations made by the user to this equipment, or equipment malfunctions, may give the telecommunications company cause to request the user to disconnect the equipment.
For their own protection, users should ensure that the electrical ground connections of the power utility, telephone lines, and internal metallic water pipe system, if present, are connected together. This precaution may be particularly important in rural areas.
Caution
Users should not attempt to make such connections themselves, but should contact the appropriate electrical inspection authority, or electrician, as appropriate.
Note
This digital apparatus does not exceed the class A limits for radio noise emissions from digital apparatus set out in the radio interference regulations of Industry Canada.
iv
Prestige 310 Broadband Internet Access Router v
Prestige 310 Broadband Internet Access Router
Declaration of Conformity
We, the Manufacturer/Importer
ZyXEL Communications Corp.
No. 6, Innovation Rd. II,
Science-Based Industrial Park,
Hsinchu, Taiwan, 300 R.O.C
declare that the product
Prestige 310
is in conformity with
(reference to the specification under which conformity is declared)
Standard
•
EN 55022
•
EN 61000-3-2
• EN 61000-3-3
•
EN 61000-4-2
•
EN 61000-4-3
•
EN 61000-4-4
•
EN 61000-4-5
•
EN 61000-4-6
Standard Item
Radio disturbance characteristics – Limits and method of measurement.
Disturbance in supply system caused by household appliances and similar electrical equipment “Harmonics”.
Disturbance in supply system caused by household appliances and similar electrical equipment “Voltage fluctuations”.
Electrostatic discharge immunity test – Basic EMC Publication
Radiated, radio-frequency, electromagnetic field immunity test
Electrical fast transient / burst immunity test - Basic EMC
Publication
Surge immunity test
Immunity to conducted disturbances, induced by radio-frequency fields
Version
1994
1995
1995
1995
1996
1995
1995
1996 vii
Prestige 310 Broadband Internet Access Router
•
EN 61000-4-8
•
EN61000-4-11 Voltage dips, short interruptions and voltage variations immunity tests
1993
1994
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects in materials or workmanship for a period of up to two years from the date of purchase. During the warranty period, and upon proof of purchase, should the product have indications of failure due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the defective products or components without charge for either parts or labor, and to whatever extent it shall deem necessary to restore the product or components to proper operating condition. Any replacement will consist of a new or re-manufactured functionally equivalent product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not apply if the product is modified, misused, tampered with, damaged by an act of God, or subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the purchaser. This warranty is in lieu of all other warranties, express or implied, including any implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in no event be held liable for indirect or consequential damages of any kind of character to the purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center; refer to the separate Warranty Card for your
Return Material Authorization number (RMA). Products must be returned Postage Prepaid. It is recommended that the unit be insured when shipped. Any returned products without proof of purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products will be shipped by ZyXEL to the corresponding return address, Postage Paid (USA and territories only). If the customer desires some other return destination beyond the U.S. borders, the customer shall bear the cost of the return shipment. This warranty gives you specific legal rights, and you may also have other rights that vary from state to state viii
Prestige 310 Broadband Internet Access Router
Customer Support
If you have questions about your ZyXEL product or desire assistance, contact ZyXEL
Communications Corporation offices worldwide, in one of the following ways:
Method
E-Mail-Tech
Support
E-Mail-
Sales
Web Site
Phone
International [email protected]
(Europe) [email protected]
www.zyxel.com
+886-3-5783942 Ext.266
Fax
FTP
- Software and ROM upgrades
Regular
+886-3-5782439 ftp.zyxel.dk
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, Taiwan 300,
R.O.C.
North America Scandinavia [email protected]
www.zyxel.com
+1-714-632-0882
800-255-4101
+1-714-632-0858 ftp.zyxel.com
ZyXEL
Communications
Inc.,
1650 Miraloma
Avenue, Placentia,
CA 92870,
U.S.A.
www.zyxel.dk
+45-3955-0700
+45-3955-0707 ftp.zyxel.dk
ZyXEL Communications A/S
Columbusvej 5,
2860 Soeborg,
Copenhagen, Denmark ix
Prestige 310 Broadband Internet Access Router
Table of Contents
Declaration of Conformity .......................................................................................................vii
Table of Contents......................................................................................................................xi
List of Figures ........................................................................................................................xvii
List of Tables............................................................................................................................xx
Preface ...................................................................................................................................xxii
Chapter 1.................................................................................................................................1-1
Getting to Know Your Router .................................................................................................1-1
1.1 Prestige 310 Broadband Router ....................................................................................1-1
1.2 Features of Prestige 310 ...............................................................................................1-1
1.3 Applications for Prestige 310 .........................................................................................1-3
1.3.1
Internet Access ..................................................................................................... 1-3
Chapter 2.................................................................................................................................2-1
Hardware Installation & Initial Setup .....................................................................................2-1
2.1 Front Panel LEDs and Back Panel Ports........................................................................2-1
2.1.1
Front Panel LEDs ................................................................................................. 2-1
2.2 Prestige 310 Rear Panel and Connections ....................................................................2-2
2.3 Additional Installation Requirements..............................................................................2-4
2.4 Stacking ZyXEL Routers ...............................................................................................2-5
2.5 Power On Your Prestige ................................................................................................2-5
2.6 Navigating the SMT Interface ........................................................................................2-8
2.6.1
Main Menu........................................................................................................... 2-9
Table of Contents xi
Prestige 310 Broadband Internet Access Router
2.6.2
System Management Terminal Interface Summary ................................................2-9
2.7 Changing the System Password..................................................................................2-10
2.8 General Setup............................................................................................................. 2-11
2.9 WAN Setup .................................................................................................................2-12
2.10
LAN Setup...............................................................................................................2-13
2.10.1
LAN Port Filter Setup......................................................................................2-13
2.11
Protocol Dependent LAN Setup ...............................................................................2-14
Chapter 3 Internet Access ......................................................................................................3-1
3.1 TCP/IP and DHCP for LAN............................................................................................3-1
3.1.1
Factory LAN Defaults ...........................................................................................3-1
3.1.2
IP Address and Subnet Mask .................................................................................3-1
3.1.3
RIP Setup ..............................................................................................................3-2
3.1.4
DHCP Configuration .............................................................................................3-3
3.2 TCP/IP and DHCP Ethernet Setup ................................................................................3-4
3.3 Internet Access Setup ...................................................................................................3-8
3.4
WAN Port Filter ............................................................................................................3-10
3.5 Single User Account.................................................................................................... 3-11
3.5.1
Advantages of SUA .............................................................................................3-12
3.5.2
Single User Account Configuration......................................................................3-13
Chapter 4.................................................................................................................................4-1
IP Static Route Setup..............................................................................................................4-1
4.1 IP Static Route Setup ....................................................................................................4-2
Chapter 5.................................................................................................................................5-1 xii Table of Contents
Prestige 310 Broadband Internet Access Router
Multiple SUA Servers..............................................................................................................5-1
5.1 Multiple Servers behind SUA.........................................................................................5-1
5.1.1
Configuring a Server behind SUA......................................................................... 5-1
Chapter 6.................................................................................................................................6-1
Filter Configuration ................................................................................................................6-1
6.1 About Filtering...............................................................................................................6-1
6.2 Configuring a Filter Set..................................................................................................6-2
6.2.1
Filter Rules Summary Menu ................................................................................. 6-5
6.2.2
Configuring a Filter Rule ...................................................................................... 6-6
6.3 Filter Types and SUA ....................................................................................................6-7
6.3.1
TCP/IP Filter Rule ................................................................................................ 6-7
6.3.2
Generic Filter Rule ..............................................................................................6-11
6.4 Applying a Filter and Factory Defaults .........................................................................6-13
6.4.1
Ethernet traffic.....................................................................................................6-13
6.4.2
WAN Port Filters.................................................................................................6-15
Chapter 7.................................................................................................................................7-1
System Maintenance ..............................................................................................................7-1
7.1 System Status...............................................................................................................7-2
7.2 System Information and Console Port Speed.................................................................7-4
7.2.1
System Information .............................................................................................. 7-4
7.2.2
Console Port Speed............................................................................................... 7-6
7.3 Log and Trace.................................................................................................................7-7
7.3.1 Viewing Error Log .................................................................................................. 7-7
Table of Contents xiii
Prestige 310 Broadband Internet Access Router
7.3.2 UNIX Syslog............................................................................................................7-8
7.4 Diagnostic .....................................................................................................................7-9
7.5 Backup Configuration ..................................................................................................7-10
7.6 Restore Configuration ................................................................................................. 7-11
7.7 Software Update ......................................................................................................... 7-11
7.7.1
Uploading the Router Firmware...........................................................................7-12
7.7.2
Uploading Router Configuration File ...................................................................7-12
7.7.3
TFTP Transfer.....................................................................................................7-13
7.8 Command Interpreter Mode.........................................................................................7-15
7.9 Boot commands ..........................................................................................................7-16
Chapter 8.................................................................................................................................8-1
Telnet Configuration and Capabilities ...................................................................................8-1
8.1 About Telnet Configuration ............................................................................................8-1
8.2 Telnet Under SUA .........................................................................................................8-2
8.3 Telnet Capabilities .........................................................................................................8-2
8.3.1
Single Administrator .............................................................................................8-2
8.3.2
System Timeout.....................................................................................................8-2
Chapter 9.................................................................................................................................9-1
Troubleshooting .....................................................................................................................9-1
9.1 Problems Starting Up the Prestige.................................................................................9-1
9.2 Problems with the LAN Interface ...................................................................................9-2
9.3 Problems with the WAN interface ..................................................................................9-2
Appendix A ............................................................................................................................... A xiv Table of Contents
Prestige 310 Broadband Internet Access Router
Acronyms and Abbreviations .................................................................................................. A
Appendix B ............................................................................................................................... C
Hardware Specifications.......................................................................................................... C
Index.......................................................................................................................................... E
Table of Contents xv
Prestige 310 Broadband Internet Access Router
List of Figures
Figure 1-1 Internet Access Application .................................................................................................. 1-3
Figure 2-1 Front Panel ........................................................................................................................... 2-1
Figure 2-2 Prestige 310 Rear Panel and Connections .............................................................................. 2-3
Figure 2-3 Initial Screen ........................................................................................................................ 2-6
Figure 2-4 Login Screen ........................................................................................................................ 2-7
Figure 2-5 Prestige 310 Main Menu ....................................................................................................... 2-9
Figure 2-6 Menu 23 - System Security .................................................................................................2-10
Figure 2-7 Menu 1 – General Setup ......................................................................................................2-11
Figure 2-8 Menu 2 – WAN Setup ..........................................................................................................2-12
Figure 2-9 Menu 3 - LAN Setup ...........................................................................................................2-13
Figure 2-10 Menu 3.1 – LAN Port Filter Setup......................................................................................2-13
Figure 3-1 Menu 3 - LAN Setup (10/100Mbps Ethernet) ........................................................................ 3-4
Figure 3-2 Menu 3.2 – TCP/IP and DHCP Ethernet Setup ...................................................................... 3-5
Figure 3-3Menu 4 – Internet Access Setup ............................................................................................. 3-8
Figure 3-4Menu 4.1 – WAN Port Filter .................................................................................................3-10
Figure 3-5 Single User Account Topology............................................................................................3-11
Figure 3-6Menu 4 – Internet Access Setup for Single User Account ......................................................3-13
Figure 4-1 Example of Static Routing Topology ..................................................................................... 4-1
Figure 4-2 Menu 12 - IP Static Route Setup ........................................................................................... 4-2
Figure 4-3 Menu 12. 1 - Edit IP Static Route.......................................................................................... 4-3
Figure 5-1 Multiple Server Configuration .............................................................................................. 5-2
List of Figures/Tables xvii
Prestige 310 Broadband Internet Access Router
Figure 6-1 Menu 21 - Filter Set Configuration ........................................................................................ 6-2
Figure 6-2 Menu 21.1 - Filter Rules Summary ........................................................................................ 6-3
Figure 6-3 Menu 21.2 - Filter Rules Summary ........................................................................................ 6-3
Figure 6-4 Menu 21.3 - Filter Rules Summary ........................................................................................ 6-4
Figure 6-5 Protocol and Device Filter Sets.............................................................................................. 6-7
Figure 6-6 Menu 21.1.1 - TCP/IP Filter Rule.......................................................................................... 6-8
Figure 6-7 Menu 21.4.1 - Generic Filter Rule ....................................................................................... 6-11
Figure 6-8 Filtering Ethernet traffic ...................................................................................................... 6-14
Figure 6-9 Filtering WAN Port traffic ................................................................................................... 6-15
Figure 7-1 Menu 24 - System Maintenance............................................................................................. 7-1
Figure 7-2 Menu 24.1 - System Maintenance – Status............................................................................ 7-2
Figure 7-3 Menu 24.2 – System Information and Console Port Speed ..................................................... 7-4
Figure 7-4 Menu 24.2.1 System Maintenance - Information.................................................................... 7-5
Figure 7-5 Menu 24.2.2 – System Maintenance – Change Console Port Speed...................................... 7-6
Figure 7-6 Examples of Error and Information Messages........................................................................ 7-7
Figure 7-7 Menu 24.3.2 - System Maintenance - Syslog and Accounting ................................................ 7-8
Figure 7-8Menu 24.4 - System Maintenance - Diagnostic ....................................................................... 7-9
Figure 7-9 Menu 24.5 - System Maintenance - Backup Configuration................................................. 7-10
Figure 7-10 Menu 24.6 - System Maintenance - Restore Configuration................................................. 7-11
Figure 7-11 Menu 24.7 - System Maintenance - Upload Firmware ....................................................... 7-12
Figure 7-12 Menu 24.7.1 - System Maintenance - Upload Router Firmware.......................................... 7-12
Figure 7-13 Menu 24.7.2 - System Maintenance - Upload Router Configuration File ........................... 7-13
Figure 7-14 Command mode ............................................................................................................... 7-15 xviii List of Figures/Tables
Prestige 310 Broadband Internet Access Router
Figure 7-15 Boot module commands....................................................................................................7-16
Figure 8-1 Telnet Configuration on a TCP/IP Network ........................................................................... 8-1
List of Figures/Tables xix
Prestige 310 Broadband Internet Access Router
List of Tables
ZyXEL Communications Corp................................................................................................................ vii
Science-Based Industrial Park, ................................................................................................................ vii
Table 2-1 LED functions ........................................................................................................................ 2-1
Table 2-2 Main Menu Commands .......................................................................................................... 2-8
Table 2-3 Main Menu Summary ............................................................................................................. 2-9
Table 2-4 General Setup Menu Field .................................................................................................... 2-11
Table 3-1 LAN DHCP Setup Menu Fields .............................................................................................. 3-6
Table 3-2 LAN TCP/IP Setup Menu Fields............................................................................................. 3-7
Table 3-3 Internet Access Setup Menu Fields ......................................................................................... 3-9
Table 3-4 Single User Account Menu Fields......................................................................................... 3-13
Table 4-1 IP Static Route Menu Fields.................................................................................................... 4-3
Table 5-1 Services vs. Port number......................................................................................................... 5-3
Table 6-1 Abbreviations Used in the Filter Rules Summary Menu........................................................... 6-5
Table 6-2 Abbreviations Used If Filter Type Is IP ................................................................................... 6-6
Table 6-3Abbreviations Used If Filter Type Is GEN................................................................................ 6-6
Table 6-4 TCP/IP Filter Rule Menu Fields.............................................................................................. 6-9
Table 6-5 Generic Filter Rule Menu Fields ........................................................................................... 6-12
Table 7-1 System Maintenance - Status Menu Fields .............................................................................. 7-3
Table 7-2 Fields in System Maintenance................................................................................................. 7-6
Table 7-3 System Maintenance Menu Syslog Parameters ........................................................................ 7-8
Table 7-4 System Maintenance Menu Diagnostic.................................................................................... 7-9 xx List of Figures/Tables
Prestige 310 Broadband Internet Access Router
Table 9-1 Troubleshooting the Start-Up of your Prestige ........................................................................ 9-1
Table 9-2 Troubleshooting the LAN Interface......................................................................................... 9-2
Table 9-3 Troubleshooting the WAN interface........................................................................................ 9-2
List of Figures/Tables xxi
Prestige 310 Broadband Internet Access Router
Preface
About Your Router
Congratulations on your purchase of the Prestige 310 Broadband Router.
The Prestige 310 router connects your 10/100Mbps LAN to the Internet through your television cable and a cable modem.
Your Prestige 310 is easy to install and to configure since you do not need to set any switches.
The Prestige Network Commander (PNC) is a GUI based utility that allows you to access the
Prestige’s management settings.
Moreover, all functions of the Prestige 310 are software configurable via the SMT (System Management Terminal) interface. The SMT is a menu-driven interface that you can access from a terminal emulator through the console port or over a telnet connection.
About This User's Manual
The nine chapters of this manual are designed to guide you through the configuration of your
Prestige 310 for its various applications.
Structure of this Manual
This manual is divided into five parts:
1.
Getting Started (Chapters 1-2) is structured as a step-by-step guide to help you connect, install and setup your Prestige to operate on your network.
2.
The Internet (Chapter 3) describes how to configure your Prestige for Internet access.
3.
Management & Maintenance (Chapters 4-7) provides information on management and maintenance facilities for network administrators.
4.
Telnet Configuration and Capabilities (Chapter 8) provides information about configuration using Telnet.
5.
Troubleshooting (Chapter 9), provides information about solving common problems.
xxii Preface
Prestige 310 Broadband Internet Access Router
Regardless of your particular application, it is important that you follow the steps outlined in
Chapters 1-2 to connect your Prestige to your LAN. You can then refer to the appropriate chapters of the manual, depending on your applications.
Preface xxiii
Prestige 310 Broadband Internet Access Router
Syntax Conventions
•
“Enter” means for you to type one or more characters and press the carriage return. “Select” or “Choose” means for you to select one from the predefined choices.
•
The SMT menu titles and labels are in Bold Times font. The choices of a menu item are in
Bold Arial font. A single keystroke is in Arial font and enclosed in square brackets, for instance, [ ENTER ] means the Enter, or carriage return, key; [ ESC ] means the Escape Key.
•
For brevity’s sake, we will use “e.g.” as a shorthand for “for instance” and “i.e.” for “that is” or “in other words” throughout this manual.
xxiv Preface
Prestige 310 Broadband Internet Access Router
Preface xxv
Prestige 310 Broadband Internet Access Router
Chapter 1
Getting to Know Your Router
This chapter describes the key features and applications of your Prestige.
1.1 Prestige 310 Broadband Router
The Prestige 310 is a high bandwidth Internet access router that connects your LAN to the
Internet using the existing television cable and a cable modem. It is ideal for cable users with more than one PC and is an excellent alternative to the more expensive leased lines.
1.2 Features of Prestige 310
The following are the key features of the Prestige 310.
Auto-negotiating 10/100Mbps Ethernet
The LAN interface automatically detects if it’s on a 10 or a 100 Mbps Ethernet.
Single User Account (SUA)
The SUA ™ (Single User Account) feature allows multiple users to share a single ISP account.
Packet Filter
The Packet Filter blocks unwanted traffic from entering/leaving your network.
DHCP Server
The Prestige's DHCP (Dynamic Host Configuration Protocol) server capability allows you to automatically assign TCP/IP settings to a workstation on your LAN.
Getting to know your Prestige 1-1
Prestige 310 Broadband Internet Access Router
DHCP Client
The Prestige's DHCP client capability allows it to get automatically its IP address from the ISP on the WAN.
Full Network Management
This feature allows you to access SMT (System Management Terminal) through the console port or telnet connection.
RoadRunner Support
In addition to standard cable modem services, the Prestige supports Time Warner’s RoadRunner
Service.
Logging and Tracing
The Prestige has the following features:
♦
Built-in message logging and packet tracing.
♦
Unix syslog facility support.
Upgrade P310 Firmware via LAN
The firmware of the Prestige 310 can be upgraded via the LAN.
1-2 Getting to know your Prestige
Prestige 310 Broadband Internet Access Router
1.3 Applications for Prestige 310
The following sections show you the possible applications for your Prestige.
1.3.1 Internet Access
The Prestige is the ideal high-speed Internet access solution. Your Prestige supports the TCP/IP protocol that the Internet uses exclusively. A typical Internet Access application is shown below.
Small / Home Office LAN
INTERNET
Cable
10/100M Ethernet
Cable Modem
10M Ethernet
Prestige 310
TV Set
Figure 1-1 Internet Access Application
Internet Single User Account
For a SOHO (Small Office/Home Office) environment, your Prestige offers a Single User
Account (SUA) feature that allows multiple users on the LAN (Local Area Network) to access the
Internet concurrently for the cost of a single user.
Getting to know your Prestige 1-3
Prestige 310 Broadband Internet Access Router
1-4 Getting to know your Prestige
Prestige 310 Broadband Internet Access Router
Chapter 2
Hardware Installation & Initial Setup
This chapter shows you how to connect the hardware and to perform the initial setup.
2.1 Front Panel LEDs and Back Panel Ports
2.1.1 Front Panel LEDs
The LEDs on the front panel indicate the operational status of the Prestige.
Figure 2-1 Front Panel
The following table describes the LED functions:
Table 2-1 LED functions
LEDs
PWR
SYS
Function Indicator Status Active
Power
System
Green On
Off
Description
The power adapter is connected to the Prestige.
The system is not ready or failed.
On The system is ready and running.
Flashing The system is rebooting.
10M LAN LAN Green Off
On
The 10M LAN is not connected.
The Prestige is connected to a 10M LAN.
Hardware Installation and Setup 2-1
Prestige 310 Broadband Internet Access Router
100M
LAN
WAN WAN
Orange
Green
Flashing The 10M LAN is sending/receiving packets.
Off The 100M LAN is not connected.
On The Prestige is connected to a 100Mbps LAN.
Flashing The 100M LAN is sending/receiving packets.
Off The WAN Link is not ready, or has failed.
On The WAN Link is ok.
Flashing The 100M LAN link is sending/receiving packets.
2.2 Prestige 310 Rear Panel and Connections
LAN
The figure below shows the rear panel of your Prestige 310 and the connection diagram.
Power
Outlet
Power
Adapter
WAN
Cable Modem
SMT Management
2-2 Hardware Installation and Setup
Prestige 310 Broadband Internet Access Router
Figure 2-2 Prestige 310 Rear Panel and Connections
Hardware Installation and Setup 2-3
Prestige 310 Broadband Internet Access Router
This section outlines how to connect your Prestige 310 to the LAN and the WAN.
Step 1. Connecting the Cable Modem
Connect the coaxial cable from your cable service to the threaded coaxial cable connector on the back of the cable modem.
Step 2. Connecting the Prestige to the Cable Modem
Connect the WAN port (silver) on the Prestige to the LAN port on the cable modem using a straight through Ethernet cable. The Ethernet port on the cable modem is sometimes labeled "PC" or "Workstation".
Step 3. Connecting the Prestige to the LAN
If you have more than one PC, you must use an external hub. Connect the 10/100M LAN port
(gold) on the Prestige to a port on the hub using a straight through Ethernet cable. If you only have one PC, you can connect the Prestige to the PC directly without a hub. For a single PC, connect the 10/100M LAN port on the Prestige to the Network Adapter on the PC using a crossover cable (red tag).
Step 4. Connecting the Power Adapter to your Prestige
Connect the power adapter to the port labeled POWER on the rear panel of your Prestige.
Step 5. Connecting the Console Port
For the initial configuration of your Prestige, you need to use terminal emulator software on a workstation and connect it to the Prestige through the console port. Connect the 9-pin (smaller) end of the console cable to the console port of the Prestige and the 25-pin (bigger) end to a serial port (COM1, COM2 or other COM port) of your workstation. You can use an extension RS-232 cable if the enclosed one is too short.
After the initial setup, you can modify the configuration remotely through telnet connections.
2.3 Additional Installation Requirements
In addition to the contents of your package, there are other hardware and software requirements you need before you can install and use your Prestige. These requirements include:
1.
A computer with an Ethernet NIC (Network Interface Card) installed.
2-4 Hardware Installation and Setup
Prestige 310 Broadband Internet Access Router
2.
A computer equipped with communications software configured to the following parameters:
♦
VT100 terminal emulation.
♦
9600 Baud.
♦
No parity, 8 Data bits, 1 Stop bit.
3.
A cable modem and an ISP account.
After the Prestige is properly set up, you can make future changes to the configuration through telnet connections.
2.4 Stacking ZyXEL Routers
Your Prestige has legs that fit together for sturdy stacking. You should not stack more than four routers for maximum stack stability.
2.5 Power On Your Prestige
At this point, you should have connected the console port, the LAN port, the WAN port and the power port to the appropriate devices or lines. Plug the power adapter into a wall outlet. The
Power LED should be on. The SYS LED will come on after the system tests are complete. The
WAN LED and one of the LAN LEDs come on immediately after the SYS LED comes on, if connections have been made to the LAN and WAN ports.
Step 1. Initial Screen
When you power on your Prestige, it performs several internal tests as well as line initialization.
After the tests, the Prestige asks you to press [ Enter ] to continue, as shown.
Bootbase Version: V1.08 | 4/9/1999 18:13:01
RAM: Size = 4096 Kbytes
DRAM POST: Testing: 4096K OK
FLASH: intel 8M
ZyNOS Version: V2.30b07 | 5/7/1999 11:32:19
Hardware Installation and Setup
Press any key to enter debug mode within 3 seconds.
2-5
Prestige 310 Broadband Internet Access Router
Figure 2-3 Initial Screen
2-6 Hardware Installation and Setup
Prestige 310 Broadband Internet Access Router
Step 2. Entering Password
The login screen appears after you press [ Enter ], prompting you to enter the password, as shown below.
For your first login, enter the default password 1234 . As you type the password, the screen displays an ( X ) for each character you type.
Please note that if there is no activity for longer than 5 minutes after you log in, your Prestige will automatically log you out and will display a blank screen. If you see a blank screen, press [Enter] to bring up the login screen again.
Enter Password : XXXX
Figure 2-4 Login Screen
Hardware Installation and Setup 2-7
Prestige 310 Broadband Internet Access Router
2.6 Navigating the SMT Interface
The SMT (System Management Terminal) is the interface that you use to configure your Prestige.
Several operations that you should be familiar with before you attempt to modify the configuration are listed in the table below.
Operation
Table 2-2 Main Menu Commands
Press/<read> Description
Move forward to another menu
[Enter]
Move backward to a previous menu
[Esc]
Move the cursor
[Enter] or
[Up]/[Down] arrow keys
To move forward to a sub-menu, type in the number of the desired sub-menu and press [Enter].
Press the [Esc] key to move back to the previous menu.
Within a menu, press [Enter] to move to the next field. You can also use the [Up]/[Down] arrow keys to move to the previous and the next field, respectively.
Enter information Fill in, or
Press the
[Space bar] to toggle
You need to fill in two types of fields. The first requires you to type in the appropriate information. The second allows you to cycle through the available choices by pressing the [Space] bar.
Required fields
< ?
>
All fields with the symbol <?> must be filled in order to save the new configuration.
N/A fields
Save your configuration
Exit the SMT
<N/A>
[Enter]
Type 99, then press [Enter].
Some of the fields in the SMT will show a <N/A>. This symbol refers to an option that is Not Applicable.
Save your configuration by pressing [Enter] at the message [Press
ENTER to confirm or ESC to cancel]. Saving the data on the screen will take you, in most cases to the previous menu.
Type 99 at the Main Menu prompt and press [Enter] to exit the SMT interface.
2-8 Hardware Installation and Setup
Prestige 310 Broadband Internet Access Router
2.6.1 Main Menu
After you enter the password, the SMT displays the Prestige 310 Main Menu, as shown below.
Copyright (c) 1994 - 1999 ZyXEL Communications Corp.
Prestige 310 Main Menu
Getting Started Advanced Management
1. General Setup 21. Filter Set Configuration
2. WAN Setup
3. LAN Setup 23. System Password
4. Internet Access Setup 24. System Maintenance
Advanced Applications
12. Static Routing Setup
15. SUA Server Setup
99. Exit
Enter Menu Selection Number:
Figure 2-5 Prestige 310 Main Menu
2.6.2 System Management Terminal Interface Summary
# Menu Title
1 General Setup
2 WAN Setup
3 LAN Setup
4 Internet Access Setup
12 Static Routing Setup
15 SUA Server Setup
21 Filter Set Configuration
23 System Password
24 System Maintenance
99 Exit
Table 2-3 Main Menu Summary
Description
Use this menu to setup general information.
Use this menu to setup the WAN.
Use this menu to setup the LAN.
A quick and easy way to setup Internet connection.
Use this menu to setup static route for different protocols.
Use this menu to specify inside servers when SUA is enabled .
Use this menu to setup filters to provide security.
Use this menu to setup a new password.
This menu provides system status, diagnostics, firmware upload, etc.
To exit from SMT and return to the blank screen.
Hardware Installation and Setup 2-9
Prestige 310 Broadband Internet Access Router
2.7 Changing the System Password
The first thing your should do before anything else is to change the default system password by following the steps below.
Step 1. Enter 23 in the Main Menu to open Menu 23 - System Password as shown below.
Menu 23 - System Password
Old Password= ?
New Password= ?
Retype to confirm= ?
Enter here to CONFIRM or ESC to CANCEL:
Figure 2-6 Menu 23 - System Security
Step 2. Enter your existing password and press [Enter] .
Step 3. Enter your new system password and press [Enter] .
Step 4. Re-type your new system password for confirmation and press [Enter] .
Note that as you type a password, the screen displays a (X) for each character you type.
2-10 Hardware Installation and Setup
Prestige 310 Broadband Internet Access Router
2.8 General Setup
Menu 1 - General Setup contains administrative and system-related information.
To enter Menu 1 and fill in the required information, follow these steps:
Step 1. Enter 1 in the Main Menu to open Menu 1 – General Setup.
Step 2. The Menu 1 - General Setup screen appears, as shown below. Fill in the required field marked [?].
System Name= ?
Menu 1 - General Setup
Press ENTER to Confirm or ESC to Cancel:
Figure 2-7 Menu 1 – General Setup
The field for General Setup is as shown below.
Field
System Name
Table 2-4 General Setup Menu Field
Description
Choose a descriptive name for identification purposes. This name can be up to 30 alphanumeric characters long. Spaces are not allowed, but dashes “-” and underscores "_" are accepted.
Example
P310
Hardware Installation and Setup 2-11
Prestige 310 Broadband Internet Access Router
2.9 WAN Setup
This section describes how to configure the WAN using Menu 2 – WAN (10Mbps Ethernet)
Setup. From the Main Menu, enter 2 to open Menu 2.
Menu 2 - WAN Setup
Link Mode= Half Duplex
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle
Figure 2-8 Menu 2 – WAN Setup
Use the space bar to toggle between half and full duplex. Half-duplex means the link is used to transmit or to receive exclusively at any given time, while full duplex means it can transmit and receive at the same time. Half duplex will always work. While full duplex is obviously faster, it requires a modem to support it in order to work. We don’t support auto-negotiation in WAN port.
You must make sure your modem supports full duplex and then set it. Otherwise there will be collision and this will reduce the performance.
2-12 Hardware Installation and Setup
Prestige 310 Broadband Internet Access Router
2.10 LAN Setup
This section describes how to configure the LAN using Menu 3 – LAN Setup (10/100Mbps
Ethernet). From the Main Menu, enter 3 to open Menu 3.
Menu 3 - LAN Setup
1. LAN Port Filter Setup
2. TCP/IP and DHCP Setup
Enter Menu Selection Number:
Figure 2-9 Menu 3 - LAN Setup
2.10.1 LAN Port Filter Setup
This menu allows you to specify the filter sets that you wish to apply to the LAN traffic. You seldom need to filter the LAN traffic, however, the filter sets may be useful to block certain packets, reducing traffic and preventing security breaches.
Menu 3.1 – LAN Port Filter Setup
Input Filter Sets:
protocol filters= 2
device filters=
Output Filter Sets:
protocol filters=
device filters=
Press ENTER to Confirm or ESC to Cancel:
Figure 2-10 Menu 3.1 – LAN Port Filter Setup
If you need to define filters, please read Chapter 6 – Filter Configuration then return to this menu to apply the filter sets.
Hardware Installation and Setup 2-13
Prestige 310 Broadband Internet Access Router
2.11 Protocol Dependent LAN Setup
For TCP/IP LAN Setup, refer to Chapter 3 - Internet Access.
2-14 Hardware Installation and Setup
Prestige 310 Broadband Internet Access Router
Chapter 3 Int ernet Access
This chapter shows you how to configure the LAN as well as the WAN of your Prestige for
Internet access.
3.1 TCP/IP and DHCP for LAN
The Prestige has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability.
3.1.1 Factory LAN Defaults
The LAN parameters of the Prestige are preset in the factory with the following values:
1.
IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits)
2.
DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
These parameters should work for the majority of installations. If the parameters are satisfactory, you can skip to section 3.2 TCP/IP LAN Setup and DHCP to enter the DNS server address(es) if your ISP gives you explicit DNS server address(es). If you wish to change the factory defaults or to learn more about TCP/IP, please read on.
3.1.2 IP Address and Subnet Mask
Similar to the houses on a street that share a common street name, the machines on a LAN share one common network number, also.
Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
Internet Access 3-1
Prestige 310 Broadband Internet Access Router
If the ISP did not explicitly give you an IP network number, then most likely you have a single user account and the ISP will assign you a dynamic IP address when the connection is established.
If this is the case, it is recommended that you select a network number from 192.168.0.0 to
192.168.255.0 (ignoring the trailing zero) and you must enable the Single User Account feature of the Prestige. The Internet Assigned Number Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other number unless you are told otherwise.
Let’s say you select 192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other words, the first 3 numbers specify the network number while the last number identifies an individual workstation on that network.
Once you have decided on the network number, pick an IP address that is easy to remember, e.g.,
192.168.1.1, for your Prestige.
The subnet mask specifies the network number portion of an IP address. Your Prestige will compute the subnet mask automatically based on the IP address that you entered. You don’t need to change the subnet mask computed by the Prestige unless you are instructed to do otherwise.
3.1.3 RIP Setup
RIP (Routing Information Protocol) allows a router to exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. When set to
Both or Out Only, the Prestige will broadcast its routing table periodically. When set to Both or In Only , it will incorporate the RIP information that it receives; when set to None , it will not send any RIP packets and will ignore any RIP packets received.
The Version field controls the format and the broadcasting method of the RIP packets that the
Prestige sends (it recognizes both formats when receiving). RIP-1 is universally supported; but
RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology.
Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-
2B uses subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so will
3-2 Internet Access
Prestige 310 Broadband Internet Access Router not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also.
By default, RIP direction is set to Both and the Version set to RIP-1 .
3.1.4 DHCP Configuration
DHCP (Dynamic Host Configuration Protocol) allows the individual clients (workstations) to obtain the TCP/IP configuration at start-up from a server .
Unless you are instructed by your ISP, leave the DHCP at the Server, the default. You can configure the Prestige as a DHCP server or disable it. When configured as a server, the Prestige provides the TCP/IP configuration for the clients.
IP Pool Setup
The Prestige is pre-configured with a pool of 32 IP addresses starting from 192.168.1.33 to
192.168.1.64. This configuration leaves 31 IP addresses (excluding the Prestige itself) in the lower range for other server machines, e.g., server for mail, FTP, telnet, web, etc., that you may have.
DNS Server Address
DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa, e.g., the IP address of www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it.
The DNS server addresses that you enter in the DHCP setup are passed to the client machines along with the assigned IP address and subnet mask.
There are two ways that an ISP disseminates the DNS server addresses. The first is for an ISP to tell a customer the DNS server addresses, usually in the form of an information sheet, when you sign up. If your ISP does give you the DNS server addresses, enter them in the DNS Server fields in DHCP Setup, otherwise leave this field blank.
Internet Access 3-3
Prestige 310 Broadband Internet Access Router
3.2 TCP/IP and DHCP Ethernet Setup
From the Main Menu, enter 3 to open Menu 3 - LAN Setup (10/100Mbps Ethernet) to configure
TCP/IP and DHCP Ethernet setup.
Menu 3 – LAN Setup
1.
LAN Port Filter Setup
2.
TCP/IP and DHCP Setup
Enter Menu Selection Number:
Figure 3-1 Menu 3 - LAN Setup (10/100Mbps Ethernet)
To edit the TCP/IP and DHCP configuration, enter 2 to open
Menu 3.2 - TCP/IP and DHCP
Ethernet Setup as shown below.
Menu 3.2 - TCP/IP and DHCP Ethernet Setup
DHCP= Server
Configuration:
Client IP Pool Starting Address= 192.168.1.33
Size of Client IP Pool= 32
Primary DNS Server= 0.0.0.0
Secondary DNS Server= 0.0.0.0
TCP/IP Setup:
IP Address= 192.168.1.10
IP Subnet Mask= 255.255.255.0
RIP Direction= Both
Version= RIP-1
Press ENTER to Confirm or ESC to CANCEL:
Press Space Bar to Toggle.
3-4 Internet Access
Prestige 310 Broadband Internet Access Router
Figure 3-2 Menu 3.2 – TCP/IP and DHCP Ethernet Setup
Internet Access 3-5
Prestige 310 Broadband Internet Access Router
Follow the instructions in the following table on how to configure the DHCP fields.
Field
Table 3-1 LAN DHCP Setup Menu Fields
Description Example
DHCP= This field enables/disables the DHCP server. If it is set to
Server, your Prestige will act as a DHCP server. If set to None,
DHCP service will be disabled and you must have another
DHCP sever on your LAN, or else the workstation must be manually configured.
None
Server (default)
When DHCP is set to Server, the following four items need to be set.
192.168.1.33
Client IP Pool
Starting Address
This field specifies the first of the contiguous addresses in the
IP address pool.
Size of Client IP Pool This field specifies the size, or count, of the IP address pool.
Primary DNS
Server
Secondary DNS
Server
Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask.
32
3-6 Internet Access
Prestige 310 Broadband Internet Access Router
Follow the instructions in the following table to configure TCP/IP parameters for the LAN port.
Field
Table 3-2 LAN TCP/IP Setup Menu Fields
Description Example
TCP/IP Setup
IP Address Enter the IP address of your Prestige in dotted decimal notation 192.168.1.1
(default)
255.255.255.0
IP Subnet Mask Your Prestige will automatically calculate the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the Prestige
RIP Direction Press the space bar to select the RIP direction from Both/In
Only/Out Only/None.
Both
(default)
Version Press the space bar to select the RIP version from RIP-1/RIP-
2B/RIP-2M.
RIP-1
(default)
When you have completed this menu, press [Enter] at the prompt [Press ENTER to Confirm …] to save your configuration, or press [Esc] at any time to cancel.
Internet Access 3-7
Prestige 310 Broadband Internet Access Router
3.3 Internet Access Setup
Menu 4 allows you to enter the Internet Access information in one screen.
From the Main Menu, enter 4 to go to Menu 4 - Internet Access Setup, as displayed below.
Menu 4 - Internet Access Setup
ISP's Name= ChangeMe
Service Type= RoadRunner
Server IP= 0.0.0.0
My Login=
My Password= ******
IP Address Assignment= Dynamic
IP Address= N/A
IP Subnet Mask= N/A
Gateway IP Address=N/A
RIP Direction= None
Version= RIP-1
Single User Account= Yes
Edit Filter Set= No
Press ENTER to Confirm or ESC to Cancel:
Figure 3-3Menu 4 – Internet Access Setup
3-8 Internet Access
Prestige 310 Broadband Internet Access Router
The following table contains instructions on how to configure your Prestige for Internet access.
Table 3-3 Internet Access Setup Menu Fields
Field
ISP’s Name
Service Type
Server IP
Description
Enter the name of your Internet Service Provider, e.g., myISP. This information is for identification purposes only.
Toggle between Standard and RoadRunner, the Time Warner’ s
RoadRunner service. Choose RoadRunner service if your ISP is Time
Warner’ s RoadRunner, otherwise choose Standard. For RoadRunner service, fill in the Server IP, login and password fields.
The Prestige will find the RoadRunner Server IP if this field is left blank. If it does not, then you must enter the authentication server IP address.
My Login Name
My Password
Enter the login name given to you by your ISP.
Enter the password associated with the login name above.
IP Address Assignment If your ISP did not assign you an explicit IP address, select Dynamic, otherwise select Static and enter the IP address & subnet mask in the following fields.
IP Address Enter the IP address assigned to you when Static Assignment is selected.
IP Subnet Mask
Gateway IP Address
RIP Direction
Version
Single User Account
Edit Filter Set
Enter the subnet mask you assign when Static Assignment is selected.
Enter the gateway IP address when Static Assignment is selected.
Select the RIP Direction.
Select the RIP Version.
Please see the following section for a more detailed discussion on the Single
User Account feature. The default is Yes.
Use the space bar to toggle this field to Yes and press [Enter] to open Menu
4.1 to edit the filter sets. See the WAN Port Filter section for more details.
The default is No.
Internet Access 3-9
Prestige 310 Broadband Internet Access Router
3.4 WAN Port Filter
Use Menu 4.1 – WAN Port Filter to specify the filter set(s) to apply to the incoming and outgoing traffic between the Internet and the Prestige. You can specify up to 4 filters separated by comma, e.g., 1, 5, 9, 12, in each filter field.
Note that spaces are accepted in this field. For more information on filters, see the chapter on
Filter Configuration.
Menu 4.1 - WAN Port Filter
Input Filter Sets:
protocol filters= 3
device filters=
Output Filter Sets:
protocol filters= 1
device filters=
Enter here to CONFIRM or ESC to CANCEL:
Figure 3-4Menu 4.1 – WAN Port Filter
3-10 Internet Access
Prestige 310 Broadband Internet Access Router
3.5 Single User Account
Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, you will have to lease a block of legal, or globally unique, IP addresses from the ISP.
The Single User Account (SUA) feature allows you to have the same benefits as having multiple legal addresses, but only pay for one IP address, thus saving significantly on the subscription fees.
Same Network
Number
192.168.1.33
192.168.1.34
192.168.1.1
192.168.1.35
Prestige 310 Cable Modem
192.168.1.36
The SUA network appears as a single host to the Internet.
(Check with your ISP before you enable this feature).
INTERNET
Figure 3-5 Single User Account Topology
The IP address for the SUA can be either fixed or dynamically assigned. In addition, you can designate servers, e.g., a web server and a telnet server, on your local network and make them accessible to the outside world.
Internet Access 3-11
Prestige 310 Broadband Internet Access Router
If you do not define any server, SUA offers the additional benefit of firewall protection. If no server is defined, incoming inquiries will be filtered out by your Prestige and thus preventing intruders from probing your network.
Your Prestige accomplishes this address sharing by translating the internal LAN IP addresses to a single address that is globally unique on the Internet. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT).
3.5.1 Advantages of SUA
In summary: l SUA is a cost-effective solution for small offices with less than 64 hosts to access the
Internet.
l SUA supports servers to be accessible to the outside world.
l SUA can provide firewall protection if you do not specify a server. All incoming inquiries will be filtered out by your Prestige.
l UDP and TCP packets can be routed. In addition, partial ICMP, including echo and trace route, is supported.
3-12 Internet Access
Prestige 310 Broadband Internet Access Router
3.5.2 Single User Account Configuration
The steps for configuring your Prestige for Single User Account are identical to the conventional
Internet access with the exception that you need to fill in one extra fields in Menu 4 - Internet
Access Setup, as shown below;
SUA
Menu 4 - Internet Access Setup
ISP's Name= ChangeMe
Service Type= RoadRunner
Server IP= 0.0.0.0
My Login=
My Password= *******
IP Address Assignment= Dynamic
IP Address= N/A
IP Subnet Mask= N/A
RIP Direction= None
Version= RIP-1
Single User Account= Yes
Edit Filter Set= No
Press Enter to CONFIRM or ESC to CANCEL:
Figure 3-6Menu 4 – Internet Access Setup for Single User Account
To enable the SUA feature in Menu 4, move the cursor to the Single User Account field and select Yes (or No to disable SUA). Then follow the instructions on how to configure the SUA fields.
Field
Single User Account
Table 3-4 Single User Account Menu Fields
Description
Select Yes to enable SUA.
Press [Enter] at the message [Press ENTER to Confirm ...] to save your configuration, or press [Esc] at any time to cancel.
Internet Access 3-13
Prestige 310 Broadband Internet Access Router
Chapter 4
IP Static Route Setup
This chapter shows you how to configure Static routes of your Prestige.
Static routes tell the Prestige routing information that it cannot learn automatically through other means. This can arise in cases where RIP is disabled on the LAN.
Each remote node specifies only the network to which the gateway is directly connected, and the
Prestige has no knowledge of the networks beyond. For instance, the Prestige knows about network N2 in the following diagram through remote node Router 1. However, the Prestige is unable to route a packet to network N3 because it doesn’t know that there is a route through the same remote node Router 1 (via gateway Router 2). The static routes are for you to tell the
Prestige about the networks beyond the remote nodes.
N1
N2
N3
Router 1
Hub
Prestige 310
Router 2
Figure 4-1 Example of Static Routing Topology
IP Static Route Setup 4-1
Prestige 310 Broadband Internet Access Router
4.1 IP Static Route Setup
You configure IP static routes in Menu 12. 1, by selecting one of the IP static routes as shown below.
Menu 12 - IP Static Route Setup
1. ________
2. ________
3. ________
4. ________
5. ________
6. ________
7. ________
8. ________
Enter selection number:
Figure 4-2 Menu 12 - IP Static Route Setup
Menu 12.1 - Edit IP Static Route
Route #: 1
Route Name= ?
Active= No
Destination IP Address= ?
IP Subnet Mask= ?
Gateway IP Address= ?
Metric= 2
Private= No
Press ENTER to CONFIRM or ESC to CANCEL:
4-2 IP Static Route Setup
Prestige 310 Broadband Internet Access Router
Figure 4-3 Menu 12. 1 - Edit IP Static Route
`The following table describes the IP Static Route Menu.
Field
Table 4-1 IP Static Route Menu Fields
Description
Route #
Route Name
The static route. (1~8)
Enter a descriptive name for this route . This is for identification purpose only.
Active
Destination IP
Address
This field allows you to activate/deactivate this static route.
This parameter specifies the IP network address of the final destination. Routing is always based on network number. If you need to specify a route to a single host, use a subnet mask of 255.255.255.255 in the subnet mask field to force the network number to be identical to the host ID.
IP Subnet Mask Enter the IP subnet mask for this destination.
Gateway IP
Address
Enter the IP address of the gateway. The gateway is an immediate neighbour of your
Prestige that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your Prestige; over the WAN, the gateway must be the IP address of one of the Remote Nodes.
Metric
Private
Metric represents the “cost” of transmission for routing purposes. IP routing uses hop count as the measurement of cost, with a minimum of 1 for directly connected networks. Enter a number that approximates the cost for this link. The number need not be precise, but it must be between 1 and 15. In practice, 2 or 3 is usually a good number.
This parameter determines if the Prestige will include the route to this remote node in its RIP broadcasts. If set to Yes, this route is kept private and not included in RIP broadcast. If No, the route to this remote node will be propagated to other hosts through RIP broadcasts.
Once you have completed filling in this menu, press [Enter] at the message [Press ENTER to Confirm …] to save your configuration, or press [Esc] to cancel.
IP Static Route Setup 4-3
Prestige 310 Broadband Internet Access Router
4-4 IP Static Route Setup
Prestige 310 Broadband Internet Access Router
Chapter 5
Multiple SUA Servers
The Chapter describes how to set-up multiple servers when SUA is enabled.
5.1 Multiple Servers behind SUA
If you wish, you can make inside servers for different services, e.g., web or FTP, visible to the outside users, even though SUA makes your whole inside network appear as a single machine to the outside world. A service is identified by the port number, e.g., web service is on port 80 and FTP on port 21.
As an example, if you have a web server at 192.168.1.2 and an FTP server 192.168.1.3, then you need to specify for port 80 (web) the server at IP address 192.168.1.2 and for port 21
(FTP) another at IP address 192.168.1.3.
Please note that a server can support more than one service, e.g., a server can provide both
FTP and DNS service, while another provides only web service. Also, since you need to specify the IP address of a server in the Prestige, a server must have a fixed IP address and not be a DHCP client whose IP address potentially changes each time it is powered-on.
In addition to the servers for specific services, SUA supports a default server. A service request that does not have a server explicitly designated for it is forwarded to the default server. If the default server is not defined, the service request is simply discarded.
To make a server visible to the outside world, specify the port number of the service and the inside IP address of the server in Menu 15 - SUA Server Setup.
5.1.1 Configuring a Server behind SUA
Follow the steps below to configure a server behind SUA:
Multiple SUA Servers 5-1
Prestige 310 Broadband Internet Access Router
1.
Enter 15 in the main menu to go to Menu 15 - Multiple Server Configuration.
2.
Enter the service port number in the Port # field and the inside IP address of the server in
Port #
----
1
.
Default
2. 0
3. 0
4. 0
5. 0
6. 0
7. 0
8. 0
Menu 15 - Multiple Server Setup
IP Address
---------------
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
0.0.0.0
Press ENTER to Confirm or ESC to Cancel: the IP Address field.
3.
Press [ENTER] at the “Press ENTER to confirm …” prompt to save your configuration after you define all the servers or press [ ESC] at any time to cancel.
Figure 5-1 Multiple Server Configuration
The most often used port numbers are:
5-2 Multiple SUA Servers
Prestige 310 Broadband Internet Access Router
Table 5-1 Services vs. Port number
Services
FTP (File Transfer Protocol)
Telnet
POP3 (Post Office Protocol, version 3)
SMTP (Simple Mail Transfer Protocol)
DNS (Domain Name System)
Port Number
21
23
110
25
53
HTTP (Hyper Text Transfer protocol or WWW, Web) 80
PPTP (Point-to-Point Tunneling Protocol) 1723
Multiple SUA Servers 5-3
Prestige 310 Broadband Internet Access Router
Chapter 6
Filter Configuration
6.1 About Filtering
Your Prestige uses filters to decide whether to allow passage of a data packet.
Data filters screen the data to determine if the packet should be allowed to pass. Data filters are further divided into incoming and outgoing filters, depending on the direction of the packet relative to a port.
The following sections describe how to configure filter sets.
The Filter Structure of the Prestige
A filter set consists of one or more filter rules. Usually, you would group related rules, e.g., all the rules for NetBIOS, into a single set and give it a descriptive name. The Prestige allows you to configure up to twelve filter sets with six rules in each set, for a total of 72 filter rules in the system.
You can apply up to four filter sets to a particular port to block multiple types of packets. With each filter set having up to six rules, you can have a maximum of 24 rules active for a single port.
Filter Configuration 6-1
Prestige 310 Broadband Internet Access Router
6.2 Configuring a Filter Set
To configure a filter sets, follow the procedure below:
Step 1. Select option 21. Filter Set Configuration from the Main Menu to open Menu 21.
4
5
6
Filter
Set #
------
1
2
3
Menu 21 - Filter Set Configuration
Comments
------------------
NetBIOS_WAN
NetBIOS_LAN
TELNET_WAN
______________
______________
______________
Filter
Set #
------
7
8
9
10
11
12
Comments
------------------
______________
______________
______________
______________
______________
______________
Enter Filter Set Number to Configure= 0
Edit Comments=
Press ENTER to CONFIRM or ESC to CANCEL:
Figure 6-1 Menu 21 - Filter Set Configuration
Step 2. Select the filter set you wish to configure (no. 1-12) and press [Enter] .
Step 3. Enter a descriptive name or comment in the Edit Comments field and press Enter.
Step 4. Press [Enter] at the message: [Press ENTER to confirm] to open Menu 21.1 - Filter
Rules Summary.
6-2 Filter Configuration
Prestige 310 Broadband Internet Access Router
Menu 21.1 - Filter Rules Summary
# A Type Filter Rules M m n
- - ---- -------------------------------------------- --------- - - -
1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=137 N D N
2 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=138 N D N
3 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=139 N D N
4 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=137 N D N
5 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=138 N D N
6 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=139 N D F
Enter Filter Rule Number (1-6) to Configure:
Figure 6-2 Menu 21.1 - Filter Rules Summary
Menu 21.2 - Filter Rules Summary
# A Type Filter Rules M m n
- - ---- -------------------------------------------- --------- - - -
1 Y IP Pr=17, SA=0.0.0.0, DA=0.0.0.0, DP=53 N D F
2 Y
3 Y
4 Y
5 Y
6 Y
Enter Filter Rule Number (1-6) to Configure:
Figure 6-3 Menu 21.2 - Filter Rules Summary
Menu 21.3 - Filter Rules Summary
# A Type Filter Rules M m n
- - ---- -----------------------------------------------------------------------------------
1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F
2 N
3 N
4 N
5 N
6 N
Enter Filter Rule Number (1-6) to Configure:
Filter Configuration 6-3
Prestige 310 Broadband Internet Access Router
Figure 6-4 Menu 21.3 - Filter Rules Summary
6-4 Filter Configuration
Prestige 310 Broadband Internet Access Router
6.2.1 Filter Rules Summary Menu
This screen shows the summary of the existing rules in the filter set. The following tables contain a brief description of the abbreviations used in Menu 21.1 and Menu 21.2.
Table 6-1 Abbreviations Used in the Filter Rules Summary Menu
Abbreviations Description
#
A
Refers to the filter rule number (1-6).
Refers to Active.
Display
Type
Filter Rules
M
Refers to the type of filter rule.
This shows GEN for generic, IP for
TCP/IP
The filter rule parameters will be displayed here (see below).
Refers to More.
[Y] means the filter rule is active.
[N] means the filter rule is inactive.
[GEN] for Generic
[IP] for TCP/IP m n
Refers to Action Matched.
Refers to Action Not Matched
[Y] means there are more rules to check.
[N] means there are no more rules to check.
[F] means to forward the packet.
[D] means to drop the packet.
[N] means check the next rule.
[F] means to forward the packet.
[D] means to drop the packet.
[N] means check the next rule.
Filter Configuration 6-5
Prestige 310 Broadband Internet Access Router
The protocol dependent filter rules abbreviation are listed as follows: l If the filter type is IP, the following abbreviations listed in the following table will be used.
SA
SP
DA
DP
Abbreviation
Table 6-2 Abbreviations Used If Filter Type Is IP
Description
Pr Protocol
Source Address
Source Port number
Destination Address
Destination Port number l If the filter type is GEN (generic), the following abbreviations listed in the following table will be used.
Abbreviation
Table 6-3Abbreviations Used If Filter Type Is GEN
Description
Off
Len
Offset
Length
Refer to the next section for information on configuring the filter rules.
6.2.2 Configuring a Filter Rule
To configure a filter rule, type its number in Menu 21.1 - Filter Rules Summary and press
[ ENTER] to open Menu 21.1.1 for the rule.
To speed up filtering, all rules in a filter set must be of the same class, i.e., protocol filters or generic filters. The class of a filter set is determined by the first rule that you create. When applying the filter sets to a port, separate menu fields are provided for protocol and device filter sets. If you include a protocol filter set in a device filter field or vice versa, the Prestige will warn you and will not allow you to save.
6-6 Filter Configuration
Prestige 310 Broadband Internet Access Router
6.3 Filter Types and SUA
There are two types of filter rules, Device Filter (Generic) rules and Protocol Filter (TCP/IP) rules.
Device Filter rules act on the raw data from/to LAN and WAN. Protocol Filter rules act on the IP and IPX packets. Generic and TCP/IP filter rules are discussed in more detail in the next section.
When NAT/SUA (Network Address Translation/Single User Account) is enabled, the inside IP address and port number are replaced on a connection-by-connection basis, which makes it impossible to know the exact address and port on the wire. Therefore, the Prestige applies the protocol filters to the “native” IP address and port number before NAT/SUA for outgoing packets and after NAT/SUA for incoming packets. On the other hand, the generic, or device filters are
S
Incoming
Device
Filters
U
Incoming
Protocol
Filters
Route
S
Outgoing Outgoing
Device
U
Protocol
Filters Filters applied to the raw packets that appear on the wire. They are applied at the point where the
Prestige is receiving and sending the packets; i.e. the interface. The interface can be Ethernet, or any other hardware port. The following diagram illustrates this.
Figure 6-5 Protocol and Device Filter Sets
6.3.1 TCP/IP Filter Rule
This section shows you how to configure a TCP/IP filter rule. TCP/IP rules allow you to base the rule on the fields in the IP and the upper layer protocol, e.g., UDP and TCP, headers.
Filter Configuration 6-7
Prestige 310 Broadband Internet Access Router
To configure a TCP/IP rules, select TCP/IP Filter Rule from the Filter Type field and press Enter to open Menu 21.1.1 - TCP/IP Filter Rule, as shown below.
Menu 21.1.1 - TCP/IP Filter Rule
Filter #: 1,1
Filter Type= TCP/IP Filter Rule
Active= Yes
IP Protocol= 6 IP Source Route= No
Destination: IP Addr= 0.0.0.0
IP Mask= 0.0.0.0
Port #= 137
Port # Comp= Equal
Source: IP Addr= 0.0.0.0
IP Mask= 0.0.0.0
Port #=
Port # Comp= None
TCP Estab= No
More= No Log= None
Action Matched= Drop
Action Not Matched= Check Next Rule
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle.
Figure 6-6 Menu 21.1.1 - TCP/IP Filter Rule
6-8 Filter Configuration
Prestige 310 Broadband Internet Access Router
The following table describes how to configure your TCP/IP filter rule.
Field
Active
IP Protocol
Table 6-4 TCP/IP Filter Rule Menu Fields
Description
This field activates/deactivates the filter rule.
IP Source Route
Protocol refers to the upper layer protocol, e.g., TCP is 6,
UDP is 17 and ICMP is 1. This value must be between 0 and 255
If Yes, the rule applies to packet with IP source route option; else the packet must not have source route option.
The majority of IP packets do not have source route.
Enter the destination IP Address of the packet you wish to filter. This field is a don’ t-care if it is 0.0.0.0.
Destination: IP
Address
Destination: IP
Mask
Enter the IP subnet mask to apply to the Destination: IP
Addr.
Destination: Port # Enter the destination port of the packets that you wish to filter. The range of this field is 0 to 65535. This field is a don’ t-care if it is 0.
Destination: Port #
Comp
Select the comparison to apply to the destination port in the packet against the value given in Destination: Port #.
Source: IP Address Enter the source IP Address of the packet you wish to filter. This field is a don’ t-care if it is 0.0.0.0.
Source: IP Mask Enter the IP subnet mask to apply to the Source: IP Addr.
Source: Port #
Source: Port #
Comp
TCP Estab
Enter the source port of the packets that you wish to filter.
The range of this field is 0 to 65535. This field is a don’ tcare if it is 0.
Select the comparison to apply to the source port in the packet against the value given in Source: Port #.
More
This field is applicable only when IP Protocol field is 6,
TCP. If yes, the rule matches only established TCP connections; else the rule matches all TCP packets.
If yes, a matching packet is passed to the next filter rule before an action is taken; else the packet is disposed of
Option
Yes/No
0-255
Yes/No
IP address
Subnet mask
0-65535
None/Less/Greater/
Equal/Not Equal]
IP Address
IP Mask
0-65535
None/Less/Greater/
Equal/Not Equal
Yes/No
Yes / N/A
Filter Configuration 6-9
Prestige 310 Broadband Internet Access Router
Field Description according to the action fields.
If More is Yes, then Action Matched and Action Not
Matched will be N/A.
Option
Log Select the logging option from the following: l None – No packets will be logged.
l Action Matched - Only packets that match the rule parameters will be logged.
l Action Not Matched - Only packets that do not match the rule parameters will be logged.
l Both – All packets will be logged.
Select the action for a matching packet.
None
Action Matched
Action Not Matched
Both
Action Matched Check Next Rule
Forward
Drop
Action Not Matched Select the action for a packet not matching the rule.
Check Next Rule
Forward
Drop
Once you have completed filling in Menu 21.1.1 - TCP/IP Filter Rule, press [Enter] at the message
[Press Enter to Confirm] to save your configuration, or press [Esc] to cancel. This data will now be displayed on Menu 21.1 - Filter Rules Summary.
6-10 Filter Configuration
Prestige 310 Broadband Internet Access Router
6.3.2 Generic Filter Rule
This section shows you how to configure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP, it is generally easier to use the IP rules directly.
For generic rules, the Prestige treats a packet as a byte stream as opposed to an IP or IPX packet.
You specify the portion of the packet to check with the Offset (from 0) and the Length fields, both in bytes. The Prestige applies the Mask (bit-wise ANDing) to the data portion before comparing the result against the Value to determine a match. The Mask and Value are specified in hexadecimal numbers. Note that it takes two hexadecimal digits to represent a byte, so if the length is 4, the value in either field will take 8 digits, e.g., FFFFFFFF .
To configure a generic rule, select Generic Filter Rule in the Filter Type field in the Menu 21.4.1 and press Enter to open Generic Filter Rule, as shown below.
Menu 21.4.1 - Generic Filter Rule
Filter #: 4,1
Filter Type= Generic Filter Rule
Active= No
Offset= 0
Length= 0
Mask= N/A
Value= N/A
More= No Log= None
Action Matched= Check Next Rule
Action Not Matched= Check Next Rule
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle.
Figure 6-7 Menu 21.4.1 - Generic Filter Rule
Filter Configuration 6-11
Prestige 310 Broadband Internet Access Router
The following table describes the fields in the Generic Filter Rule Menu.
Table 6-5 Generic Filter Rule Menu Fields
Field Description
Filter # This is the filter set, filter rule co-ordinates, i.e., 2,3 refers to the second filter set and the third rule of that set.
Filter Type Use the space bar to toggle between both types of rules. Parameters displayed below each type will be different.
Active
Offset
Length
Mask
Value
More
Log
Action
Matched
Option
Select Yes to turn on the filter rule.
Enter the starting byte of the data portion in the packet that you wish to compare. The range for this field is from 0 to 255.
Enter the byte count of the data portion in the packet that you wish to compare. The range for this field is 0 to 8.
Enter the mask (in Hexadecimal) to apply to the data portion before comparison.
Enter the value (in Hexadecimal) to compare with the data portion.
If yes, a matching packet is passed to the next filter rule before an action is taken; else the packet is disposed of according to the action fields.
If More is Yes, then Action Matched and Action Not Matched will be N/A.
Select the logging option from the following: l None – No packets will be logged.
l Action Matched - Only packets that match the rule parameters will be logged.
l Action Not Matched - Only packets that do not match the rule parameters will be logged.
l Both – All packets will be logged.
Select the action for a matching packet.
Generic Filter
Rule/ TCP/IP
Filter Rule
Yes/No
Default = 0
Default = 0
Yes / N/A
None
Action
Matched
Action Not
Matched
Both
Check Next
Rule
Forward
Drop
6-12 Filter Configuration
Prestige 310 Broadband Internet Access Router
Action Not
Matched
Select the action for a packet not matching the rule.
Check Next
Rule
Forward
Drop
Once you have completed filling in Menu 21.4.1 - Generic Filter Rule, press [Enter] at the message
[Press Enter to Confirm] to save your configuration, or press [Esc] to cancel. This data will now be displayed on Menu 21.1 - Filter Rules Summary.
6.4 Applying a Filter and Factory Defaults
This section shows you where to apply the filter(s) after you design it (them).
6.4.1 Ethernet traffic
You seldom need to filter Ethernet traffic; however, the filter sets may be useful to block certain packets, reduce traffic and prevent security breaches. Go to Menu 3.1 (shown below) and enter the number(s) of the filter set(s) that you want to apply as appropriate. You can choose up to four filter sets (from twelve) by entering their numbers separated by commas, e.g., 3, 4, 6, 11. Input filter sets filter incoming traffic to the Prestige and Output filter sets filter outgoing traffic from
Menu 3.1 – LAN Port Filter Setup
Input Filter Sets:
protocol filters= 2
device filters=
Output Filter Sets:
Protocol filters=
device filters=
Factory
Default
Filters
Press ENTER to Confirm or ESC to Cancel: the Prestige. The factory default set, NetBIOS_LAN, is inserted in protocol filters – field under
Input Filter Sets in Menu 3.1 to block NetBIOS traffic to the Prestige from the LAN (see Figure
6-1 and 6-3).
Filter Configuration 6-13
Prestige 310 Broadband Internet Access Router
Figure 6-8 Filtering Ethernet traffic
6-14 Filter Configuration
Prestige 310 Broadband Internet Access Router
6.4.2 WAN Port Filters
Go to Menu 4.1 (shown below) and enter the number(s) of the filter set(s) as appropriate. You can cascade up to four filter sets by entering their numbers separated by commas. The factory default filter set, NetBIOS_WAN, is inserted in protocol filters field under Output Filter Sets in
Menu 4.1 to block NetBIOS traffic from the WAN Port to the Prestige (see Figure 6-1 and 6-2).
Filter set three, Telnet_WAN, blocks telnet connections from the WAN Port (see Figure 6-1 and
6-4) and prevents security breaches. When you cannot connect using telnet service from the
WAN Port you can disable the telnet filter in Menu 4.1.
Menu 4.1 – WAN Port Filter
Input Filter Sets:
protocol filters= 3
device filters=
Output Filter Sets:
protocol filters= 1
device filters=
Factory
Default
Filters
Enter here to CONFIRM or ESC to CANCEL
Figure 6-9 Filtering WAN Port traffic
Filter Configuration 6-15
Prestige 310 Broadband Internet Access Router
Chapter 7
System Maintenance
This chapter covers the diagnostic tools that help you to maintain your Prestige. These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software. This chapter describes how to use these tools in detail.
Select menu 24 in the main menu to open Menu 24 - System Maintenance, as shown below.
Menu 24 - System Maintenance
1. System Status
2. System Information and Console Port Speed
3. Log and Trace
4. Diagnostic
5. Backup Configuration
6. Restore Configuration
7. Software Update
8. Command Interpreter Mode
Enter Menu Selection Number:
Figure 7-1 Menu 24 - System Maintenance
Telnet Configuration and Capabilities 7-1
Prestige 310 Broadband Internet Access Router
7.1 System Status
The first selection, System Status, gives you information on the version of your system firmware and the status and statistics of the ports, as shown in below. System Status is a tool that can be used to monitor your Prestige. Specifically, it gives you information on your system firmware version, number of packets sent and number of packets received.
To get to the System Status, Enter number 24 to go to Menu 24 - System Maintenance. In this menu, enter number 1 to open , System Maintenance - Status. There are two commands in Menu
24.1 - System Maintenance - Status. Entering 9 resets the counters, and ESC takes you back to the previous screen.
The table below describes the fields present in Menu 24.1 - System Maintenance - Status. It should be noted that these fields are READ-ONLY and are meant to be used for diagnostic purposes.
Port
WAN
LAN
Status
Down
Down
Menu 24.1 -- System Maintenance – Status
TxPkts
1
0
RxPkts
0
0
Cols
0
0
Tx B/s
0
0
Rx B/s
0
0
Up Time
0:00:00
0:00:00
Port:
WAN
LAN
Ethernet Address
00:a0:c5:21:8c:a3
00:a0:c5:21:8c:a2
IP Address
0.0.0.0
192.168.1.1
IP Mask
0.0.0.0
255.255.255.0
DHCP
Client
Server
System up Time: 67:08:22
Name:
Routing: IP
ZyNOS F/W Version: V2.30b07 | 5/7/1999
Press Command:
COMMANDS: 9-Reset Counters ESC-Exit
Figure 7-2 Menu 24.1 - System Maintenance – Status
7-2 System Maintenance
Prestige 310 Broadband Internet Access Router
The following table describes the fields present in Menu 24.1 - System Maintenance - Status.
Table 7-1 System Maintenance - Status Menu Fields
Field
Port
Status
TxPkts
RxPkts
Cols
Tx B/s
Description
The WAN or LAN port.
Shows the port's speed and duplex setting.
The number of transmitted packets on this port.
The number of received packets on this port.
The number of collisions on this port.
Shows the transmit Bytes per second on this port.
Shows the receive Bytes per second on this port.
Time the line has been up.
Rx B/s
Up Time
LAN
Ethernet Address The LAN port Ethernet address.
IP Address The LAN port IP address.
IP Mask The LAN port IP mask.
DHCP The LAN port DHCP role.
WAN
Ethernet Address The WAN port Ethernet address.
IP Address The WAN port IP address.
IP Mask
DHCP
System up Time
Name
ZyNOS F/W Version
The WAN port IP mask.
The WAN port DHCP role.
The total time the Prestige has been powered on.
The name that identifies the Prestige.
The ZyNOS Firmware version.
Telnet Configuration and Capabilities 7-3
Prestige 310 Broadband Internet Access Router
7.2 System Information and Console Port Speed
This section describes your system and allows you to choose different console port speeds. To get to the System Information and Console Port Speed, Enter 24 to go to Menu 24 – System
Maintenance. In this menu enter number 2 to open, Menu 24.2 System Information and
Console Port Speed. From this Menu you can enter your selection as shown in the figure below:
Menu 24.2 - System Information and Console Port Speed
1. System Information
2. Console Port Speed
Please enter selection:
Figure 7-3 Menu 24.2 – System Information and Console Port Speed
7.2.1 System Information
System Information gives you information about your system as shown below in the Figure 7-3
Menu 24.2.1. More specifically, it gives you information on your routing protocol, country code,
Ethernet address, IP address, etc.
7-4
Menu 24.2.1 - System Maintenance - Information
Name:
Routing: IP
ZyNOS S/W Version: V2.30b07 | 5/7/1999
LAN
Ethernet Address: 00:a0:c5:21:8c:a2
IP Address: 192.168.1.10
IP Mask: 255.255.255.0
DHCP: Server
System Maintenance
Press ESC or RETURN to Exit
Prestige 310 Broadband Internet Access Router
Figure 7-4 Menu 24.2.1 System Maintenance - Information
Telnet Configuration and Capabilities 7-5
Prestige 310 Broadband Internet Access Router
Field
Name
Routing
ZyNOS Version
Ethernet Address
IP Address
IP Mask
DHCP
Table 7-2 Fields in System Maintenance
Description
Displays the system name of your Prestige. This information can be modified in Menu 1 – General Setup.
Refers to the routing protocol used.
Refers to ZyXEL's network operating software.
Refers to the Ethernet MAC (Media Access Control) address of your
Prestige.
This is the IP address of the Prestige in dotted decimal notation.
This shows the subnet mask of the Prestige.
This field shows the DHCP setting of the Prestige.
7.2.2 Console Port Speed
You can change the speed of the console port through Menu 24.2.2 – Console Port Speed. Your
Prestige supports 9600 (default), 19200, 38400, 57600, and 115200 bps for the console port. Use the space bar to select the desired speed in Menu 24.2.2, as shown below.
Menu 24.2.2 – System Maintenance – Change Console Port Speed
Console Port Speed: 9600
Press ENTER to Confirm or ESC to Cancel:
Press Space Bar to Toggle.
Figure 7-5 Menu 24.2.2 – System Maintenance – Change Console Port Speed
7-6 System Maintenance
Prestige 310 Broadband Internet Access Router
7.3 Log and Trace
There are two logging facilities in the Prestige. The first is the error logs and trace records that are stored locally. The second is the UNIX syslog facility for message logging.
7.3.1 Viewing Error Log
The first place you should look for clues when something goes wrong is the error/trace log.
Follow the procedure below to view the local error/trace log:
Step 1. Select option 24 from the Main Menu to open Menu 24 - System Maintenance.
Step 2. From Menu 24, select option 3 to open Menu 24.3 - System Maintenance - Log and
Trace.
Step 3. Select the first option from Menu 24.3 - System Maintenance - Log and Trace to display the error log in the system.
After the Prestige finishes displaying, you will have the option to clear the error log.
Examples of typical error and information messages are presented in the figure below.
Menu 24.3 - System Maintenance - Log and Trace
1. View Error Log
2. UNIX Syslog
Please enter selection
Figure 7-6 Examples of Error and Information Messages
Telnet Configuration and Capabilities 7-7
Prestige 310 Broadband Internet Access Router
7.3.2 UNIX Syslog
The Prestige uses the UNIX syslog facility to log the messages to a syslog server. Syslog can be configured in Menu 24.3.2 - System Maintenance – UNIX Syslog, as shown below.
Menu 24.3.2 - System Maintenance - UNIX Syslog
Syslog:
Active= No
Syslog IP Address= ?
Log Facility= Local 1
Figure 7-7 Menu 24.3.2 - System Maintenance - Syslog and Accounting
You need to configure the following three parameters described in the table below to activate syslog.
Parameter
Table 7-3 System Maintenance Menu Syslog Parameters
Description
Active Use the space bar to turn on or off syslog.
Syslog IP Address Enter the IP Address of your syslog server.
Log Facility
Use the space bar to toggle between the 7 different Local options. The log facility allows you to log the message in different files in the server. Please refer to your UNIX manual for more detail.
7-8 System Maintenance
Prestige 310 Broadband Internet Access Router
Your Prestige sends two types of syslog messages: error information messages and session information messages.
7.4 Diagnostic
The diagnostic facility allows you to test the different aspects of your Prestige to determine if it is working properly. Menu 24.4 allows you to choose among various types of diagnostic tests to evaluate your system, as shown below.
Menu 24.4 - System Maintenance - Diagnostic
TCP/IP
1. Ping Host
System
11. Reboot System
Enter Menu Selection Number:
Host IP Address= N/A
Figure 7-8Menu 24.4 - System Maintenance - Diagnostic
Follow the procedure below to get to Diagnostic
Step 1. From the Main Menu, select option 24 to open Menu 24 - System Maintenance.
Step 2. From this menu, select option 4. Diagnostic. This will open Menu 24.4 - System
Maintenance - Diagnostic.
The following table describes the diagnostic tests available in Menu 24.4 for your Prestige and the connections.
Table 7-4 System Maintenance Menu Diagnostic
Telnet Configuration and Capabilities 7-9
Prestige 310 Broadband Internet Access Router
Field
Ping Host
Reboot System
Description
This diagnostic test pings the host, which determines the functionality of the
TCP/IP protocol on both systems and the links in between.
This option reboots the Prestige.
7.5 Backup Configuration
Option 5 from Menu 24 - System Maintenance allows you to backup the current Prestige configuration to your workstation. Backup is highly recommended once your Prestige is functioning properly.
You can only perform the backup and restore using menu 24 through the console port, not telnet.
Any serial communications program should work fine; however, you must use XMODEM protocol to perform the download/upload.
Please note that terms “download” and “upload” are relative to the workstation. Download means to transfer from another machine to the workstation, while upload means from your workstation to another machine.
Menu 24.5 -- System Maintenance - Backup Configuration
Ready to backup Configuration via Xmodem.
Do you want to continue (y/n):
Figure 7-9 Menu 24.5 - System Maintenance - Backup Configuration
7-10 System Maintenance
Prestige 310 Broadband Internet Access Router
7.6 Restore Configuration
Menu 24.6 -- System Maintenance - Restore Configuration allows you to restore the configuration via the console port. Note that this function erases the current configuration before restoring to the previous back up configuration; please do not attempt to restore unless you have the a backup configuration stored on disk.
Menu 24.6 -- System Maintenance - Restore Configuration
Ready to restore Configuration via Xmodem.
Do you want to continue (y/n):
Figure 7-10 Menu 24.6 - System Maintenance - Restore Configuration
7.7 Software Update
Menu 24.7 -- System Maintenance - Upload Firmware allows you to upgrade the firmware and the configuration file via the console port. Note that this function erases the old data before installing the new one; please do not attempt to update unless you have the new firmware at hand.
There are two components in the system: the router firmware and the configuration file, as shown
Menu 24.7 -- System Maintenance - Upload Firmware
1. Upload Router Firmware
2. Upload Router Configuration File
Enter Menu Selection Number: below.
Telnet Configuration and Capabilities 7-11
Prestige 310 Broadband Internet Access Router
Figure 7-11 Menu 24.7 - System Maintenance - Upload Firmware
7.7.1 Uploading the Router Firmware
Menu 24.7.1 shows you the instructions for uploading the router firmware. Follow the procedure below to upload the file:
Step 1. Enter “ y ” at the prompt to go into debug mode.
Step 2. Enter “ atur ” after “ Enter Debug Mode ” message.
Step 3. Wait for the “ Starting XMODEM upload ” message before activating Xmodem upload on your terminal.
Step 4. After successful firmware upload, enter “ atgo ” to restart the Prestige.
Menu 24.7.1 - System Maintenance - Upload Router Firmware
To upload router firmware:
1. Enter "y" at the prompt below to go into debug mode.
2. Enter "atur" after "Enter Debug Mode" message.
3. Wait for "Starting XMODEM upload" message before activating
Xmodem upload on your terminal.
4. After successful firmware upload, enter "atgo" to restart the
router.
Warning: Proceeding with the upload will erase the current router
firmware.
Do You Wish To Proceed:(Y/N)
Figure 7-12 Menu 24.7.1 - System Maintenance - Upload Router Firmware
7.7.2 Uploading Router Configuration File
The configuration data, system-related data, the error log and the trace log are all stored in the configuration file. Please be aware that uploading the configuration file replaces everything contained within.
Menu 24.7.2 shows you the instructions for uploading the Router Configuration file. Follow the procedure below to upload the configuration file:
Step 1. Enter “ y ” at the prompt to go into debug mode.
Step 2. Enter “ atur ” after the “ Enter Debug Mode ” message.
7-12 System Maintenance
Prestige 310 Broadband Internet Access Router
Step 3. Wait for the “ Starting XMODEM upload ” message before activating Xmodem upload on your terminal.
Step 4. After successful firmware upload, enter “ atgo ” to restart the Prestige.
If you replace the current configuration file with the default configuration file, i.e., p310.rom, you will lose all configurations that you had before and the speed of the console port will be reset to the default of 9600 bps with 8 data bit, no parity and 1 stop bit (8n1). You will need to change your serial communications software to the default before you can connect to the Prestige again.
The password will be reset to the default of 1234, also.
Menu 24.7.2 - System Maintenance - Upload Router Configuration File
To upload router configuration file:
1. Enter "y" at the prompt below to go into debug mode.
2. Enter "atur3" after "Enter Debug Mode" message.
3. Wait for "Starting XMODEM upload" message before activating
Xmodem upload on your terminal.
4. After successful firmware upload, enter "atgo" to restart the
router.
Warning:
1. Proceeding with the upload will erase the current
configuration file.
2. The router's console port speed (Menu 24.2.2) may change
when it is restarted; please adjust your terminal's speed
accordingly. The password may change (menu 23), also.
3. When uploading the DEFAULT configuration file, the console
port speed will be reset to 9600 bps and the password to
"1234".
Do You Which To Proceed:(Y/N)
Figure 7-13 Menu 24.7.2 - System Maintenance - Upload Router Configuration File
7.7.3 TFTP Transfer
In addition to the direct console port connection, the Prestige supports the up/downloading of the firmware and the configuration file using TFTP (Trivial File Transfer Protocol) over LAN.
Although TFTP should work over WAN as well, it is not recommended because of the potential data corruption problems.
Telnet Configuration and Capabilities 7-13
Prestige 310 Broadband Internet Access Router
To use TFTP, your workstation must have both telnet and TFTP clients. To transfer the firmware and the configuration file, follow the procedure below:
Step 1. Use telnet from your workstation to connect to the Prestige and log in. Because TFTP does not have any security check, the Prestige records the IP address of the telnet client and accepts TFTP requests only from this address.
Step 2. Put the SMT in command interpreter (CI) mode by entering 8 in Menu 24 – System
Maintenance.
Step 3. Enter command “ sys stdio 0 ” to disable SMT timeout, so the TFTP transfer will not be interrupted.
Step 4. Launch TFTP client on your workstation and connect to the Prestige. Set the transfer mode to binary before starting data transfer.
Step 5. Use the TFTP client to transfer files between the Prestige and the workstation. The file name for the firmware is “ ras ” and for the configuration file, “ rom-0 ” (rom-zero, not capital o).
If you upload the firmware to the Prestige, it will reboot automatically when the file transfer is completed.
Note that the telnet connection must be active and the SMT in CI mode before and during the
TFTP transfer. For details on TFTP commands, please consult the documentation of your TFTP client program. For UNIX, use “ get ” to transfer from the Prestige to the workstation, “ put ” the other way around, and “ binary ” to set binary transfer mode.
7-14 System Maintenance
Prestige 310 Broadband Internet Access Router
7.8 Command Interpreter Mode
This option allows you to enter the command interpreter mode. A list of valid commands can be found by typing [help] or [?] at the command prompt. For more detailed information, check the
Menu 24 - System Maintenance
1. System Status
2. Console Port Speed
3. Log and Trace
4. Diagnostic
5. Backup Configuration
6. Restore Configuration
7. Software Update
8. Command Interpreter Mode
Enter Menu Selection Number: 8
Copyright (c) 1994 - 1999 ZyXEL Communications Corp.
ras>
ZyXEL Web site or send e-mail to the ZyXEL Support Group.
Figure 7-14 Command mode
Telnet Configuration and Capabilities 7-15
Prestige 310 Broadband Internet Access Router
7.9 Boot commands
In Debug mode enter ATHE to view Prestige boot module commands as shown below and then enter ATGO to continue booting the system. For ATBAx, x denotes the number preceding the colon to give the baud rate following the colon in the list of numbers that follows; e.g., ATBA3 will give a baud of 9.6 Kbps. ATSE displays the seed that is used to generate a password to turn on the debug flag in the firmware. The ATSH command shows product related information such
======= Debug Command Listing =======
AT just answer OK
ATHE print help
ATBAx change baudrate.1:38.4k, 2:19.2k, 3:9.6k 4:57.6k 5:115.2k
ATENx,(y) set BootExtension Debug Flag (y=password)
ATSE show the seed of password generator
ATTI(h,m,s) change system time to hour:min:sec or show current time
ATDA(y,m,d) change system date to year/month/day or show current date
ATDS dump RAS stack
ATDT dump Boot Module Common Area
ATDUx,y dump memory contents from address x for length y
ATRBx display the 8-bit value of address x
ATRWx display the 16-bit value of address x
ATRLx display the 32-bit value of address x
ATGO(x) run program at addr x or boot router as boot module version, vendor name, product model, RAS code revision, etc.
Figure 7-15 Boot module commands
7-16 System Maintenance
Prestige 310 Broadband Internet Access Router
Chapter 8
Telnet Configuration and Capabilities
This chapter covers the Telnet Configuration and Capabilities of the Prestige.
8.1 About Telnet Configuration
Before the Prestige is properly setup for TCP/IP, the only option for configuring it is through the console port. Once your Prestige is configured, you can use telnet to configure it remotely as
LAN
Hub
I N T E R N E T
Prestige 310 Cable Modem
ISP
Modem shown below.
Figure 8-1 Telnet Configuration on a TCP/IP Network
When IP routing is disabled, the Prestige can still function as a host.
Telnet Configuration and Capa bilities 8-1
Prestige 310 Broadband Internet Access Router
8.2 Telnet Under SUA
When Single User Account (SUA) is enabled and an inside server is specified, telnet connections from the outside will be forwarded to the inside server. So to configure the Prestige via telnet from the outside, you must first telnet to the inside server, and then telnet from the server to the
Prestige using its inside LAN IP address. If no insider server is specified, telnet to the SUA’s IP address will connect to the Prestige directly.
8.3 Telnet Capabilities
8.3.1 Single Administrator
To prevent confusion and discrepancy on the configuration, your Prestige only allows one administrator to log in at any time. Your Prestige also gives priority to the console port over telnet.
If you have already connected to your Prestige via telnet, you will be logged out if another user logs in to the Prestige via the console port.
8.3.2 System Timeout
There is a system timeout of 5 minutes (300 seconds) for either the console port or telnet. Your
Prestige will automatically log you out if you do nothing in this timeout period, except when it is continuously updating the status in Menu 24.1.
8-2 Telnet Configuration and Capabilities
Prestige 310 Broadband Internet Access Router
Chapter 9
Troubleshooting
This chapter covers the potential problems you may run into and the possible remedies. After each problem description, some instructions are provided to help you to diagnose and to solve the problem.
9.1 Problems Starting Up the Prestige
Table 9-1 Troubleshooting the Start-Up of your Prestige
Problem
None of the LEDs are on when you power on the Prestige
Cannot access the Prestige via the console port.
Corrective Action
Check the connection between the AC adapter and the Prestige.
If the error persists, you may have a hardware problem. In this case, you should contact technical support.
1. Check to see if the Prestige is connected to your computer’ s serial port.
2. Check to see if the communications program is configured correctly. The communications software should be configured as follows:
VT100 terminal emulation
9600 bps
No parity, 8 Data bits, 1 Stop bit.
Troubleshooting 9-1
Prestige 310 Broadband Internet Access Router
9.2 Problems with the LAN Interface
Table 9-2 Troubleshooting the LAN Interface
Problem
Can’ t ping any workstation on the
LAN
Corrective Action
Check the 10M/100M LEDs on the front panel. One of these LEDs should be on. If they are both off, check the cables between your
Prestige and hub or the station.
Verify that the IP address and the subnet mask are consistent between the Prestige and the workstations.
9.3 Problems with the WAN interface
Table 9-3 Troubleshooting the WAN interface
Problem
Can’ t connect to a remote node or
ISP
Corrective Action
Check Menu 24.1 to verify the line status. If it indicates [down], then refer to the section on the line problems.
9-2 Troubleshooting
Prestige 310 Broadband Internet Access Router
IP
IPCP
IPX
ISDN
ISP
LAN
MAC
NAT
NIC
PNC
POP3
PPTP
RIP
DCE
DHCP
DNS
DTE
FTP
HTTP
IANA
ICMP
Acronyms and Abbreviations
Appendix A
Acronyms and Abbreviations
Data Communications Equipment
Dynamic Host Configuration Protocol
Domain Name System
Data Terminal Equipment
File Transfer Protocol
Hyper Text Transfer Protocol
Internet Assigned Number Authority
Internet Control Message Protocol
Internet Protocol
IP Control Protocol
Internetwork Packet eXchange
Integrated Services Digital Network
Internet Service Provider
Local Area Network
Media Access Control
Network Address Translation
Network Interface Card
Prestige Network Configurator
Post Office Protocol, version 3
Point-to-Point Tunneling Protocol
Routing Information Protocol
A
Prestige 310 Broadband Internet Access Router
SAP
SNAP
SNMP
SOHO
SMT
SMTP
SUA
TA
TFTP
TCP
UDP
UTP
WAN
ZyNOS
(IPX) Service Advertising Protocol
Sub-Network Access Protocol
Simple Network Management Protocol
Small Office / Home Office
System Management Terminal
Simple Mail Transfer Protocol
Single User Account
(ISDN) Terminal Adapter
Trivial File Transfer Protocol
Transmission Control Protocol
User Datagram Protocol
Unshielded Twisted Pair (cable)
Wide Area Network
ZyXEL Network Operating System
B Acronyms and Abbreviations
Prestige 310 Broadband Internet Access Router
Appendix B
Hardware Specifications
Power Specification
MTBF
Operation Temperature
Ethernet Specification for
WAN
Ethernet Specification for
LAN
Console Port RS – 232
I/P AC 120V / 60Hz ; O/P DC 12V 1200 mA
100000 hrs
0º C ~ 40º C
10Mbit Half / Full Manual Setting
10/100 Mbit Half / Full Auto-negotiation
Pin 1 = NON ; Pin 2 = DTE-RXD; Pin 3 = DTE-TXD; Pin 4 =
DTE-DTR; Pin 5 = GND; Pin 6 = DTE-DSR; Pin 7 = DTE-RTS;
Pin 8 = DTE-CTS; PIN 9 = NON. See Figure below
Pin1
Pin 6 Pin 9
Hardware Specifications C
Prestige 310 Broadband Internet Access Router
WAN/LAN Cable Pin Layout:
Straight-Through
(Switch)
1 IRD +
2 IRD -
3 OTD +
6 OTD -
(Adapter)
1 OTD +
2 OTD -
3 IRD +
6 IRD -
Crossover
(Switch)
1 IRD +
2 IRD -
3 OTD +
6 OTD -
(Switch)
1 IRD +
2 IRD -
3 OTD +
6 OTD -
D Hardware Specifications
Prestige 310 Broadband Internet Access Router backup, 7-9 console port, 2-3
D H C P, 3-2 diagnostic, 7-8
DNS, 3-3, 3-5 filter, 2-11, 6-1
General Setup, 2-9 generic filter rule, 6-10
IANA, 3-1
Internet access, 1-3, 3-1
IP address, 3-2, 3-6
IP network number, 3-1
IP Pool, 3-3
IP static route, 4-1 log, 7-6
Main Menu, 2-7 password, 2-5, 2-8
Ping , 7-8
Index power adapter, 2-3
RIP, 3-2, 3-6
ROM File, 7-11
Single User Account, 3-8
SMT, 2-6 software update, 7-10
SUA, 1-3, 3-10 subnet mask, 3-2
Subnet mask , 3-6 syslog, 7-7 system name , 2-9 system status, 7-2
TCP/IP, 7-8
TCP/IP filter rule, 6-6 telnet, 8-1 trace, 7-6 troubleshooting, 9-1
VT100, 2-3
Index
E
Advertisement