Chapter 3 Internet Access. ZyXEL Prestige 100L, 100L
Below you will find brief information for IDSL Router Prestige 100L. This guide helps you set up your new ZyXEL Prestige 100L IDSL router for internet access and networking. It covers hardware installation, initial setup, internet access configuration (including Single User Account), remote node setup, and advanced features like filtering and network management. Learn how to connect to your IDSL service, configure your LAN, and secure your network.
Advertisement
Advertisement
Prestige 100L IDSL Router
Chapter 3
Internet Access
This chapter shows you how to configure the LAN as well as the WAN of your Prestige for Internet access.
3.1 TCP/IP and DHCP for LAN
The Prestige has built-in DHCP server capability that assigns IP addresses and DNS servers to systems that support DHCP client capability.
3.1.1 Factory LAN Defaults
The LAN parameters of the Prestige are preset in the factory with the following values:
1. IP address of 192.168.1.1 with subnet mask of 255.255.255.0 (24 bits).
2. DHCP server enabled with 32 client IP addresses starting from 192.168.1.33.
These parameters should work for the majority of installations. If the parameters are satisfactory, you can skip to the later section of this chapter to enter the DNS server address(es) if your ISP gives you explicit
DNS server address(es). If you wish to change the factory defaults or to learn more about TCP/IP, please read on.
3.1.2 IP Address and Subnet Mask
Similar to the houses on a street that shares a common street name, the machines on a LAN share one common network number, also.
Where you obtain your network number depends on your particular situation. If the ISP or your network administrator assigns you a block of registered IP addresses, follow their instructions in selecting the IP addresses and the subnet mask.
If the ISP did not explicitly give you an IP network number, then most likely you have a single user account and the ISP assigns you a dynamic IP address when the connection is established. If this is the case, it is recommended that you select a network number from 192.168.0.0 to 192.168.255.0 and you must enable the
Network Address Translation feature of the Prestige. The Internet Assigned Number Authority (IANA) reserved this block of addresses specifically for private use; please do not use any other number unless you are told otherwise. Let’s say you select 192.168.1.0 as the network number; which covers 254 individual addresses, from 192.168.1.1 to 192.168.1.254 (zero and 255 are reserved). In other words, the first 3 numbers specify the network number while the last number identifies an individual workstation on that network.
Once you have decided on the network number, pick an IP address that is easy to remember, e.g.,
192.168.1.1 (default), for your Prestige. If you chose this then the other default settings are enabled.
Internet Access 3-1
Prestige 100L IDSL Router
The subnet mask specifies the network number portion of an IP address. Your Prestige computes the subnet mask automatically based on the IP address that you entered. You do not need to change the subnet mask computed by the Prestige unless you are instructed to do otherwise.
3.1.3 Private IP Addresses
Every machine on the Internet must have a unique address. If your networks are isolated from the Internet, e.g., only between your two branch offices, you can assign any IP addresses to the hosts without problems.
However, the Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of IP addresses specifically for private networks:
10.0.0.0 - 10.255.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255
You can obtain your IP address from the IANA, from an ISP, or assigned from a private network. If you belong to a small organization and your Internet access is through an ISP, the ISP can provide you with the
Internet addresses for your local networks. On the other hand, if you are part of a much larger organization, you should consult your network administrator for the appropriate IP addresses.
NOTE: Regardless of your particular situation, do not create an arbitrary IP address; always follow the guidelines above. For more information on address assignment, please refer to RFC 1597, Address Allocation for Private Internets and RFC 1466,
Guidelines for Management of IP Address Space.
3.1.4 RIP (Routing Information Protocol) Setup
RIP allows a router to exchange routing information with other routers. The RIP Direction field controls the sending and receiving of RIP packets. When set to Both or Out Only, the Prestige broadcasts its routing table periodically. When set to Both or In Only, it incorporates the RIP information that it receives; when set to None, it does not send any RIP packets and ignores any RIP packets received.
The Version field controls the format and the broadcasting method of the RIP packets that the Prestige sends (it recognizes both formats when receiving). RIP-1 is universally supported; but RIP-2 carries more information. RIP-1 is probably adequate for most networks, unless you have an unusual network topology.
Both RIP-2B and RIP-2M sends the routing data in RIP-2 format; the difference being that RIP-2B uses subnet broadcasting while RIP-2M uses multicasting. Multicasting can reduce the load on non-router machines since they generally do not listen to the RIP multicast address and so does not receive the RIP packets. However, if one router uses multicasting, then all routers on your network must use multicasting, also.
By default, RIP direction is set to Both and the Version set to RIP-1.
3-2 Internet Access
Prestige 100L IDSL Router
3.1.5 DHCP (Dynamic Host Configuration Protocol) Configuration
DHCP allows the individual clients (workstations) to obtain the TCP/IP configuration at start-up from a server. Unless you are instructed by your ISP, leave the DHCP at the Server default value. You can configure the Prestige as a DHCP server or disable it. When configured as a server, the Prestige provides the
TCP/IP configuration for the clients.
IP Pool Setup
The Prestige is pre-configured with a pool of 32 IP addresses starting from 192.168.1.33 to 192.168.1.64.
This configuration leaves 31 IP addresses (excluding the Prestige itself) in the lower range for other server machines, e.g., server for mail, FTP, telnet, web, etc., that you may have.
DNS (Domain Name System) Server Address
DNS is for mapping a domain name to its corresponding IP address and vice versa, e.g., the IP address of
www.zyxel.com is 204.217.0.2. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it.
There are two ways that an ISP disseminates the DNS server addresses. The first is for an ISP to tell a customer the DNS server addresses, usually in the form of an information sheet, when you sign up. If your
ISP does give you the DNS server addresses, enter them in the DNS Server fields in DHCP Setup. The second is to leave this field blank, i.e., 0.0.0.0, – in this case the Prestige acts as a DNS proxy.
IP Subnet Mask
A subnet mask is a 32-bit quantity that, when logically ANDed with an IP address, yields the network number. For instance, the subnet masks for Class A, B, and C without subnetting are 255.0.0.0, 255.255.0.0, and 255.255.255.0, respectively. To create more network numbers, you shift some bits from the host ID to the network ID. For instance, to partition a Class C network number 192.68.135.0 into two, you shift 1 bit from the host ID to the network ID. Thus the new subnet mask is 255.255.255.128; the first subnet have a network number of 192.68.135.0 with hosts 192.68.135.1 to 192.68.135.126 and the second subnet have a network number of 192.68.135.128 with hosts 192.68.135.129 to 192.68.135.254. It is recommended that you use the same subnet mask for all physical networks that share an IP network number. The following table lists the additional subnet mask bits in dot decimal notations. To use the following table, write down the original subnet mask and substitute the higher order “0”s with the dot decimal of the additional subnet bits.
For instance, to partition your Class C network 204.247.203.0 with subnet mask 255.255.255.0 into 16 subnets (4 bits), the new subnet mask becomes 255.255.255.240.
Internet Access 3-3
Prestige 100L IDSL Router
NUMBER OF BITS
1
2
3
4
7
8
5
6
DOT DECIMAL
128
192
224
240
248
252
254
255
Example of Network Properties For LAN Servers With Fixed IP#:
Choose an IP:
Netmask:
Gateway (or default route):
DNS server:
Domain:
192.168.1.2 – 192.168.1.32; 192.168.1.65 – 192.168.1.254
255.255.255.0
192.168.1.1 (Prestige LAN IP)
192.168.1.1
(optional)
3-4 Internet Access
3.2 TCP/IP and DHCP Ethernet Setup
From the Main Menu, enter 3 to open Menu 3 – Ethernet Setup.
Menu 3 – Ethernet Setup
1.
General Setup
2.
TCP/IP and DHCP Setup
Prestige 100L IDSL Router
Enter Menu Selection Number:
Figure 3-1 Menu 3 – Ethernet Setup Screen
To edit the TCP/IP and DHCP configuration, enter 2 to open Menu 3.2 – TCP/IP and DHCP Ethernet
Setup as shown in the following figure.
Menu 3.2 - TCP/IP and DHCP Ethernet Setup
DHCP= Server
Configuration:
Client IP Pool Starting Address= 192.168.1.33
Size of Client IP Pool= 32
Primary DNS Server= 0.0.0.0
Secondary DNS Server= 0.0.0.0
Relay Server Address= N/A
TCP/IP Setup:
IP Address= 192.168.1.1
IP Subnet Mask= 255.255.255.0
RIP Direction= Both
Version= RIP-1
Press ENTER to Confirm or ESC to CANCEL:
Press Space Bar to Toggle.
Figure 3-2 Menu 3.2 – TCP/IP and DHCP Ethernet Setup Screen
Internet Access 3-5
Prestige 100L IDSL Router
Follow the instructions in the following table on how to configure the DHCP fields.
FIELD
Table 3-1 LAN DHCP Setup Menu Fields
DESCRIPTION
DHCP This field enables/disables the DHCP server. If it is set to Server, your Prestige acts as a DHCP server. If set to None, DHCP service is disabled and you must have another DHCP sever on your LAN, or else the workstation must be manually configured.
When DHCP is set to Server, the following four items need to be set. If set to Relay, the Prestige acts as a surrogate DHCP server and relays requests and responses between the remote server and the clients.
Client IP Pool
Starting Address
This field specifies the first of the contiguous addresses in the IP address pool.
Size of Client IP Pool This field specifies the size, or count, of the IP address pool.
Primary DNS Server
Secondary DNS
Server
Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP clients along with the IP address and the subnet mask.
EXAMPLE
None / Relay /
Server (default)
192.168.1.33
32
Relay Server
Address
When the DHCP is set to Relay, the Prestige relays the DHCP requests/responses between the PCs and the real DHCP server.
3-6 Internet Access
Prestige 100L IDSL Router
Follow the instructions in the following table to configure TCP/IP parameters for the LAN port.
FIELD
Table 3-2 LAN TCP/IP Setup Menu Fields
DESCRIPTION EXAMPLE
IP Address Enter the IP address of your Prestige in dotted decimal notation.
192.168.1.1
(default)
255.255.255.0
IP Subnet Mask
RIP Direction
Your Prestige automatically calculates the subnet mask based on the IP address that you assign. Unless you are implementing subnetting, use the subnet mask computed by the Prestige.
Press [space bar] to select the RIP direction from Both/In
Only/Out Only/None.
Both
(default)
Version Press [space bar] to select the RIP version from RIP-1 / RIP-2B /
RIP-2M.
RIP-1
(default)
When you have completed this menu, press the [Enter] key at the prompt [Press ENTER to Confirm . . .] to save your configuration, or press the [Esc] key at any time to cancel.
3.3 Internet Access Setup
The following steps describe the set-up procedure to configure your Prestige for Internet access.
SUA
Menu 4 - Internet Access Setup
ISP's Name =
My Login =
My Password =
Single User Account = Yes
IP Address = 0.0.0.0
Press ENTER to Confirm or ESC to Cancel:
Figure 3-3 Menu 4 – Internet Access Setup
Internet Access 3-7
Prestige 100L IDSL Router
The following table describes this screen.
Table 3-3 Internet Access Setup Menu Fields
FIELD DESCRIPTION
ISP’s Name
My Login
My Password
Single User Account
IP Address
Enter the name of your Internet Service Provider, e.g., myISP. This information is for identification purposes only.
Enter the login name given to you by your ISP.
Enter the password associated with the login name above.
Please refer to the following section for a more detailed discussion on the
Single User Account feature. The default value is Yes.
Please refer to the following section for a more detailed discussion on setting the IP Address under a Single User Account.
3.4 Single User Account (SUA)
Typically, if there are multiple users on the LAN wanting to concurrently access the Internet, you have to lease a block of legal, or globally unique, IP addresses from the ISP.
The Single User Account (SUA) feature allows you to have the same benefits as having multiple legal addresses, but only pay for one IP address, thus saving significantly on the subscription fees. (Check with your ISP before you enable this feature). SUA supports popular Internet applications such as MS traceroute,
CuSeeMe, IRC, RealAudio, VDOLive, Quake and PPTP with no extra configuration needed.
The IP address for the SUA can be either fixed or dynamically assigned by the ISP. In addition, you can designate servers, e.g., a web server and a telnet server, on your local network and make them accessible to the outside world. If you do not define any server, SUA offers the additional benefit of firewall protection. If no server is defined, all incoming inquiries are filtered out by your Prestige, thus preventing intruders from probing your network. Your Prestige accomplishes this address sharing by translating the internal LAN IP addresses to a single address that is globally unique on the Internet. For more information on IP address translation, refer to RFC 1631, The IP Network Address Translator (NAT).
3.4.1 Advantages of SUA
l SUA is an ideal, cost-effective solution for small offices to access the Internet or other remote TCP/IP networks.
l SUA supports servers to be accessible to the outside world.
l SUA can provide firewall protection if you do not specify a server. All incoming inquiries are filtered out by your Prestige.
l UDP and TCP packets can be routed. In addition, partial ICMP, including echo and traceroute, is also supported.
3-8 Internet Access
Prestige 100L IDSL Router
3.4.2 Single User Account Configuration
The steps for configuring your Prestige for Single User Account are identical to the conventional Internet access with the exception that you need to fill in two extra fields in Menu 4 – Internet Access Setup (please refer to Figure 3-3). To enable the SUA feature in Menu 4, move the cursor to the Single User Account field and select Yes (or No to disable SUA). Then follow the instructions on how to configure the SUA fields.
Table 3-4 Single User Account Menu Fields
FIELD DESCRIPTION
Single User Account Select Yes to enable SUA.
IP Address If your ISP did not assign you a static IP address, enter [0.0.0.0] here; otherwise, enter that IP address here.
Press the [Enter] key at the message [Press ENTER to Confirm . . . ] to save your configuration, or press the [Esc] key at any time to cancel.
3.5 Multiple Servers Behind the SUA
If you wish, you can make inside servers for different services, e.g., web or FTP, visible to the outside users, even though SUA makes your whole internal network appear as a single machine to the outside world. A service is identified by the port number, e.g., web service is on port 80 and FTP on port 21.
As an example (see the following figure), if you have a web server at 192.168.1.36 and an FTP server at
192.168.1.33, then you need to specify for port 80 (web) the server at IP address 192.168.1.36 and for port 21
(FTP) another at IP address 192.168.1.33.
Please note that a server can support more than one service, e.g., a server can provide both FTP and DNS service, while another provides only web service. Also, since you need to specify the IP address of a server in the Prestige, a server must have a fixed IP address and not be a DHCP client whose IP address potentially changes each time it is powered on.
In addition to the servers for specific services, SUA supports a default server. A service request that does not have a server explicitly designated for it is forwarded to the default server. If the default server is not defined, the service request is simply discarded.
Internet Access 3-9
Prestige 100L IDSL Router
Figure 3-4 Example of a SUA Topology
To make a server visible to the outside world, specify the port number of the service and the inside IP address of the server in Menu 15 – SUA Server Setup.
3.5.1 Configuring a Server Behind the SUA
Do the following steps to configure a server behind SUA:
Step 1. Enter 15 in the main menu to go to Menu 15 - SUA Server Setup.
Step 2. Enter the service port number in the Port # field and the inside IP address of the server in the
IP Address field.
Step 3. Press the [Enter] key at the “Press ENTER to confirm …” prompt to save your configuration after you define all the servers or press the [Esc] key at any time to cancel.
3-10 Internet Access
Prestige 100L IDSL Router
Menu 15 - Multiple Server Configuration
Port # IP Address
------
1.Default
---------------
0.0.0.0
2.21
3.23
4.25
5.80
192.168.1.33
192.168.1.34
192.168.1.35
192.168.1.36
6. 0
7. 0
8. 0
0.0.0.0
0.0.0.0
0.0.0.0
Press ENTER to Confirm or ESC to Cancel:
Figure 3-5 Multiple Server Configuration
The most often used port numbers are shown in the next table. Please refer to RFC 1700 for further information about port numbers.
Table 3-5 Services as Compared to Port Number
SERVICES PORT NUMBER
FTP (File Transfer Protocol)
Telnet
SMTP (Simple Mail Transfer Protocol)
DNS (Domain Name System)
HTTP (Hyper Text Transfer Protocol or WWW, Web)
PPTP (Point-to-Point Tunneling Protocol)
21
23
25
53
80
1723
Internet Access 3-11
Part II:
ADVANCED APPLICATIONS
Advanced Applications (Chapters 4 and 5) describe the advanced applications of your Prestige, such as Remote Node Setup and IP Static routes.
II

Public link updated
The public link to your chat has been updated.
Advertisement
Key features
- IDSL support (up to 128 kbps)
- Integrated 4-port Ethernet hub
- PPP security (PAP, CHAP)
- DHCP for automatic IP address assignment
- Data compression (Stac)
- Single User Account (SUA) for multiple users
- SNMP network management support
- Telnet configuration and capabilities
- Firmware upgrade via LAN