Gebruiksaanwijzing /service van het product 202H van de fabrikant ZyXEL Communications
Ga naar pagina of 309
Pr estige 202H ISDN Router User’s Guide Version 3.40 August 2003.
Prestige 202H User’s Guide ii Copyright Copyright Copyright © 2003 by Zy XEL Communications Corporation. The contents of this publi cation may not be reproduced i n any part or as a whole, transcri.
Prestige 202H User’s Guide FCC iii Federal Communications Commission (FCC) Interference S t atement This device complies with Part 15 of FCC rules. Operation is subject to the following two cond itions: This device m ay not cause harm ful interference.
Prestige 202H User’s Guide iv Information for Canadian Users Information for Canadian Users The Industry Canada label identifies certified equipmen t. This certification means that the equipment meets certain telecommunications network pr otective, op eration, and safety requ irements.
Prestige 202H User’s Guide Warranty v ZyXEL Limited W arranty ZyXEL warrants to the original end us er (purchaser) that this product is free from any defects in materials or workmanshi p for a peri od of up to two years from the dat e of purchase .
Prestige 202H User’s Guide vi Customer Support Customer Support When you contact your cu stomer support r epresenta tive please have t he followi ng inform ation ready: Please have th e following i nformation re ady when you cont act customer support.
Prestige 202H User’s Guide Table of Contents vii T able of Content s Copyright...................................................................................................................... ................................ii Federal Communications Commission (FCC) Interfer en ce S tatemen t.
Prestige 202H User’s Guide viii Table of Contents Chapter 4 SMT Menu 1 General Setup ............................................................................................. ..... 4-1 4.1 General Set u p Overview ...............................
Prestige 202H User’s Guide Table of Contents ix 8.8 Configuring Network Layer Options ....................................................................................... 8-11 8.9 Configurin g Fi lte r.............................................
Prestige 202H User’s Guide x Table of Contents Chapter 13 Introducin g the Prestige Fire wall................................................................................... ... 13-1 13.1 Access Me thods ..........................................
Prestige 202H User’s Guide Table of Contents xi 18.5 Example Filter ................................................................................................................. ... 18-16 18.6 Applying Filters and F actory Defau lts ............
Prestige 202H User’s Guide xii Table of Contents 23.3 Applying Sche dule Sets ........................................................................................................ 2 3-3 Chapter 24 Remote Man agement ..............................
Prestige 202H User’s Guide Table of Contents xiii 27.1 SA Monitor Overview .......................................................................................................... 27 -1 Chapter 28 IPSec Log ........................................
Prestige 202H User’s Guide xiv List of Figures List of Figures Figure 1-1 Internet Access App lication......................................................................................... .................. 1-5 Figure 1-2 LAN-to-L AN Connection Ap plication.
Prestige 202H User’s Guide List of Figures xv Figure 6-6 Menu 3.2. 1 IP Alia s Setup ........................................................................................... ................. 6-7 Figure 7-1 Menu 4 In ternet Acce ss Setup ........
Prestige 202H User’s Guide xvi List of Figures Figure 1 1-1 Ho w NA T W orks ...................................................................................................... ................. 1 1-3 Figure 1 1-2 NA T Appli cation W ith IP Alias .
Prestige 202H User’s Guide List of Figures xvii Figure 12-5 Stat eful I nspection ................................................................................................ .................... 12-8 Figure 13-1 Menu 21 F ilter and Fire wall Setup .
Prestige 202H User’s Guide xviii List of Figures Figure 18-5 NetBIOS_W A N Filter Rule s Summa ry ................................................................................... .. 18-6 Figure 18-6 NetBIOS _L AN Filter Ru les Su mmary ..........
Prestige 202H User’s Guide List of Figures xix Figure 21-1 Menu 24.5 System Main tenance – Backup Co nfiguration ....................................................... 21-3 Figure 21-2 FTP Session Example .........................................
Prestige 202H User’s Guide xx List of Figures Figure 22-8 Menu 24: Syste m Maintenance ........................................................................................ ......... 22-6 Figure 22-9 Menu 24.10 System Main tenance: T ime and Date Settin g .
Prestige 202H User’s Guide List of T ables xxi List of T ables T able 2-1 LE D Functions ........................................................................................................ ....................... 2-1 T able 3-1 Main Menu Comma nds .
Prestige 202H User’s Guide xxii List of Tables T able 1 1-3 Applying NA T to the Remote Node ..................................................................................... ....... 11-7 T able 1 1-4 Menu 15.1.2 55 SU A Address Mapping Rules ..
Prestige 202H User’s Guide List of T ables xxiii T able 19-1 Menu 22 SNM P Configuration .......................................................................................... ........ 19-3 T able 19-2 SN MP Tra ps ..............................
Prestige 202H User’s Guide xxiv List of Tables T able 26-1 1 T elecommuter and Headquar ters Configuratio n Example ...................................................... 26-23 T able 27-1 Menu 27 .2 SA Monitor ......................................
Prestige 202H User’s Guide Preface xxv Preface Congratulations on your purchase of the Prestige 202H ISDN ro uter. About This User's Manual This manual is designed to gu ide you through the conf ig uration of your Prestige for its various applications.
Prestige 202H User’s Guide xxvi Preface • A single keystroke is in Arial font a nd enclosed i n squa re brackets, for i nstance, [ENTER] means the Enter, or carriage retur n, key; [ESC] m eans the escape key and [SPACE BAR] means the s pace bar. [UP] and [DOWN] are the up and down a rrow keys.
Getting Started I Part I: Getting Started This part is structured as a step-by-step guide to help you connect, install a nd setup your router to operate on your network an d access the Internet.
.
Prestige 202H User’s Gui de Getting to Know Your Prestige 1-1 Chapter 1 Getting to Know Your Prestige This chapter covers the key features and ma in applications of your router. 1.1 Introducing the Prestige 202H The Prestige 202H is a hi gh-performance router that offe rs a complete Internet Access solution.
Prestige 202H User’s Gui de 1-2 Getting to Know Your Prestige Auto-negotiating 10/100 Mbp s Ethernet LAN The LAN interfaces autom atically detect if they are on a 10 or a 100 Mbps Ethernet. Auto-crossover 10/100 Mbps Ethernet LAN The LAN interfaces autom atically ad just to either a crossover or strai ght-through Ethernet cable.
Prestige 202H User’s Gui de Getting to Know Your Prestige 1-3 Outgoing Dat a Call Bumping Support Call bumping is a feature that allows the router to manage an MP (Multilink Proto col) bundle dynamically, dropping or reconnecting a c hannel in a bundle when n ecessary.
Prestige 202H User’s Gui de 1-4 Getting to Know Your Prestige P AP and CHAP Security The router sup ports PAP ( Password Aut henticati on Protocol) an d CHAP ( Challenge Ha ndshake Authentication Protocol). CHAP is more secure than PAP; however, P AP is r eadily available on m ore platforms.
Prestige 202H User’s Gui de Getting to Know Your Prestige 1-5 Figure 1-1 Internet Access Application Internet Single User Account For a SOHO (Small Office/Home Office) enviro nment, your router offe.
Prestige 202H User’s Gui de 1-6 Getting to Know Your Prestige 1.3.3 Remote Access Server Your router allows remote users to dial-i n and gain access to your LAN. This featur e enables individuals that have computers with rem ote access capabilities to dial in to access the network resources without physically being in the office.
Prestige 202H User’s Gui de Getting to Know Your Prestige 1-7 Figure 1-4 Secure Internet Access and VPN Application.
.
Prestige 202H User’s Gui de Hardware Installation 2-1 Chapter 2 Hardware Installation This chapter shows you how to make t h e cable connections to your r outer. 2.1 Front Panel The LED indicators on the fron t panel indicate the op erational status of the router.
Prestige 202H User’s Gui de 2-2 Hardware Installation 2.2 Rear Panel and Connections The next figure shows the r ear panel conn ectors of your router. Figure 2-2 Rear Panel This section outlines how to conn ect your router to the LAN and to the ISDN network.
Prestige 202H User’s Gui de Hardware Installation 2-3 2.3 T urn On Y our Router At this point, you should have conn ected the console port, the ISDN port, the Ethe rnet port(s) and t he power port to the a ppropriate de vices or l ines. You c an now tur n on the ro uter by pus hing the p ower butto n in to t he on position (in is ON, out is OFF).
.
Prestige 202H User’s Gui de Introducing the SMT 3-1 Chapter 3 Introducing the SMT This chapter explains how to access the System Management Terminal and gives an overview of its menus.
Prestige 202H User’s Gui de 3-2 Introducing the SMT Please note that if there is no activity for longer th an 5 minutes after you log in , the router automatically logs you out and displ ays a blank screen. If y ou see a blank sc reen, press [ENTER] to bring up the login screen again.
Prestige 202H User’s Gui de Introducing the SMT 3-3 Table 3-1 Main Menu Commands OPERATION KEYSTROKES DESCRIPTION N/A fields <N/A> Some of the fields in the SMT will show a <N/A>.
Prestige 202H User’s Gui de 3-4 Introducing the SMT Table 3-2 Main Menu Summary NO. Menu Title FUNCTION 3 Ethernet Setup Use this menu to apply LA N filters, configure LAN DHCP and TCP/IP settings and configure the wireless LAN port (not availabl e on all models).
Prestige 202H User’s Gui de Introducing the SMT 3-5 Menu 3 Ethernet Setup Menu 4 Internet Access Set up Menu 1 1 Remote Node Setup Menu 12 Static Routing Setu p Menu 12.1 Edit IP Static Route Menu 1 1.1 Remote Node Profile Menu 3.1 LAN Port Filter Setup Menu 1 1.
Prestige 202H User’s Gui de 3-6 Introducing the SMT Figure 3-3 Menu 23.1 System Pass word Step 2. Enter 1 in M enu 23 t o open Menu 23.1 - System Security - Chan ge Password. When Menu 23.1- Syst em Se curity-Change Password appears, as shown in the figure below, type in your existing system password, i.
Prestige 202H User’s Gui de Introducing the SMT 3-7 speed of the console port will be reset to the default of 9600bps w ith 8 data b it, no parity, one stop bit and flow control set to none. The passwo rd will be reset to “123 4”, also. 3.7.1 Uploading a Configurat ion File Via Console Port Step 1.
Prestige 202H User’s Gui de 3-8 Introducing the SMT Step 5. Click Transfer , then Send File to display the following screen. Figure 3-6 Example Xmodem Upload Step 6. After successful firmware upload, en ter "atgo" to restart the router. Type the configuration file’s location, or click Browse to search for it.
Prestige 202H User’s Gui de SMT Menu 1 General Setup 4-1 Chapter 4 SMT Menu 1 General Setup Menu 1 - General Setup contains administrative and system-related information. 4.1 General Setup Overview Menu 1 - General Setup contains administrative and system-related information.
Prestige 202H User’s Gui de 4-2 SMT Menu 1 General Setup 4.3 Dynamic DNS Dynamic DNS allows you to update your curr ent dynamic IP address with one or many dynamic DNS services so that anyone can c ontact you (in NetMee ting, CU-SeeMe, etc.
Prestige 202H User’s Gui de SMT Menu 1 General Setup 4-3 4.4 Configuring Dynamic DNS To configure Dynamic DNS , go to Menu 1: Ge neral Setup and press [SPACE BAR] to select Yes in the Edit Dynamic DNS field. Press [ENTER] to display Menu 1.1— Configure Dynamic DNS (shown next).
.
Prestige 202H User’s Gui de ISDN Setup 5-1 Chapter 5 ISDN Setup This chapter tells you how to configure the ISDN Setup menus for your Internet connection. 5.1 ISDN Setup Overview Menu 2 - IS DN Setup allows you to enter the information about your ISDN line.
Prestige 202H User’s Gui de 5-2 ISDN Setup Table 5-1 Menu 2 ISDN Setup FIELD DESCRIPTION ♦ Switch/Unused ♦ Sw it ch /Sw i tc h ♦ Switch/Leased ♦ Leased/Switch ♦ Leased/Unused ♦ Unused/Leased ♦ Leased/Leased Telephone Number(s) IDSN Data Enter the telephone number(s ) assigned to your ISDN line by your te lephone company.
Prestige 202H User’s Gui de ISDN Setup 5-3 P ABX Num ber (with S/T Bus Number) for Loopback Enter the S/T bus num ber if the router is connected to an IS DN PABX.
Prestige 202H User’s Gui de 5-4 ISDN Setup 5.2.1 Configuring Advanced Setup Figure 5-3 Menu 2 ISDN Setup for DSS1 When you are fi nish ed, pre ss [ ENTER ] at the message: ‘Press ENTER to confirm ’, the router uses the information that you en tered to initialize the ISDN line.
Prestige 202H User’s Gui de ISDN Setup 5-5 5.3 NetCAPI 5.3.1 Overview Your Prestige supports NetCAPI. NetCAPI is ZyXEL's im plementati on of CAPI (C omm on ISDN Application Program Interface) capabilities over a networ k. It runs over DCP (Device Control Protocol) developed by RVS-COM.
Prestige 202H User’s Gui de 5-6 ISDN Setup The following figure illustrates th e configuration used in this example. Figure 5-5 Configuration Example Before entering any configurations , you must insta ll the CAPI driver (R VS-CE) and c omm unication program such as RVS-C OM Lite on your com puter.
Prestige 202H User’s Gui de ISDN Setup 5-7 If you did not inst all RVS-Lite and want to use other programs such as A VM Fritz to access the ISDN router , you must first inst all the CAPI driv er - RVS-CE using the English version inst allation wizard (i n DISKsCEPEDISK1) an d st art the SETUP .
Prestige 202H User’s Gui de 5-8 ISDN Setup Table 5-2 Configuring NetCAPI FIELD DESCRIPTION Max Number of Registered Users When you want to use NetCAPI to place out goi ng calls or to listen to incoming calls, you must start RVSCOM on your computer, and RVSCOM will register itself to the Prestige.
Prestige 202H User’s Gui de Ethernet Setup 6-1 Chapter 6 Ethernet Setup This chapter shows you how to configur e the LAN settings for your Prestige. 6.1 Ethernet Setup This section describes how to configure the Ethern et using Menu 3 – Ethernet Setup .
Prestige 202H User’s Gui de 6-2 Ethernet Setup 6.2 Ethernet TCP/IP and DHCP Server The Prestige has built-in DHCP server capability that assig ns IP addresses and DNS servers to systems that support DHCP client capability. For remote node TCP/IP configur ation, refer to the chapter on Remote Node Configuration.
Prestige 202H User’s Gui de Ethernet Setup 6-3 6.2.3 Private IP Addresses Every comput er on the Inte rnet must have a uniq ue IP addre ss. If your net works are i solated from the Internet, for instance, only between y our two bra nch offices, y ou ca n assign any IP addresses to the hosts without problems.
Prestige 202H User’s Gui de 6-4 Ethernet Setup 6.2.5 DHCP Configuration DHCP (Dynamic Host Config uration Protocol) allows the indivi dual clie nts (com puters) to obt ain the TCP/IP configuration at start-up fro m a centralized DHCP server.
Prestige 202H User’s Gui de Ethernet Setup 6-5 6.3 Configuring TCP/IP Ethernet and DHCP You will now use Menu 3.2-TCP/IP and DHCP Ethernet Setup to configure your rou ter for TCP/IP. To edit menu 3.2, select the menu option Ethernet Setup in the Main Menu.
Prestige 202H User’s Gui de 6-6 Ethernet Setup Table 6-2 Menu 3.2 TCP/IP and DHCP Ethernet Setup FIELD DESCRIPTION EXAMPLE Primary DNS Server Secondary DNS Server Enter the IP addresses of the DNS servers. The DNS servers are passed to the DHCP clients along with t he IP address and the subn et mask.
Prestige 202H User’s Gui de Ethernet Setup 6-7 Figure 6-4 Physical Network Î Figure 6-5 Partitioned Logical Net works Use menu 3. 2.1 to con figure IP Ali as on your router. 6.5 IP Alias Setup You must use menu 3. 2 to confi gure the firs t network.
Prestige 202H User’s Gui de 6-8 Ethernet Setup Table 6-4 IP Menu 3.2.1 – IP Alias Setup FIELD DESCRIPTION EXAMPLE IP Alias 1 or 2 Choose Yes to configure the LAN net work for the router. Yes IP Address Enter the IP address of your router in dotted decimal notatio n.
Prestige 202H User’s Gui de Internet Access Setup 7-1 Chapter 7 Internet Access Setup This chapter shows you how to configure your router for Internet access 7.1 Internet Access Overview Menu 4 allows you to enter the In ternet Access information in one screen.
Prestige 202H User’s Gui de 7-2 Internet Access Setup 7.2 Internet Access Setup The table following this menu c ontains instructions on how to configur e your router for Internet access.
Prestige 202H User’s Gui de Internet Access Setup 7-3 Table 7-2 Menu 4 Internet Access Setup FIELD DESCRIPTION NAT Choose from None , Full Feature or SUA Only . When you select Full Feature you must configure at least one address mapping set. See the chapter o n NAT for a full discussion of this new feature.
Advanced Applications II Part II: Advanced Applications This part describ es the advanced appli cations of your Prestige, such as Remote Node Configuration, Dial-in Confi guration and NA T .
Prestige 202H User’s Guide Remote Node Configuration 8-1 Chapter 8 Remote Node Configuration This chapter covers the configuration of remote nodes. 8.1 Remote Node Overview A remote node is required for placing calls to a remote gateway. A remote node represents both the remote gateway and th e network be hind it across a WAN co nnection.
Prestige 202H User’s Guide 8-2 Remote Node Configuration Step 2. When Men u 11 appears a s show n in the fol lowing fi gure, enter t he number of the rem ote node that you wish to co nfigure.
Prestige 202H User’s Guide Remote Node Configuration 8-3 Table 8-1 Menu 11.1 Remote Node Profile FIELD DESCRIPTION EXAMPLE Rem Node Name This is a required field [?]. Enter a descriptive name for the remote node, for example, Corp. This field can be up to eight characters.
Prestige 202H User’s Guide 8-4 Remote Node Configuration Table 8-1 Menu 11.1 Remote Node Profile FIELD DESCRIPTION EXAMPLE Call Back This field is applicable onl y if Call Direction is set to Both .
Prestige 202H User’s Guide Remote Node Configuration 8-5 Table 8-1 Menu 11.1 Remote Node Profile FIELD DESCRIPTION EXAMPLE Telc o Options: Transfer Type This field specifies the type of conn ection bet ween the Prestige and this remote node. When set to Leased , the Allocated Budge t and Period do not apply.
Prestige 202H User’s Guide 8-6 Remote Node Configuration 8.3 Outgoing Authentication Protocol Generally spea king, you s hould em ploy the stro ngest authent ication prot ocol possi ble, for obvi ous reasons. However, some vendor’s implementation includes specific authenticatio n protocol in the user prof ile.
Prestige 202H User’s Guide Remote Node Configuration 8-7 Table 8-2 BTR vs MTR for BOD BTR AND MTR SETTING No. of Channe l(s) Used Max No. of Channel(s) Used BANDWIDTH ON DEMAND BTR = 64, MTR = 64 1 .
Prestige 202H User’s Guide 8-8 Remote Node Configuration Menu 11.2 - Remote Node PPP Options Encapsulation= Standard PPP Compression= No BACP= Enable Multiple Link Options: BOD Calculation= Transmit.
Prestige 202H User’s Guide Remote Node Configuration 8-9 Table 8-3 Menu 11.2 Remote Node PPP Options Target Utility (Kbps) Enter the two threshol ds separated by a [–] for subtracting and adding the second port.
Prestige 202H User’s Guide 8-10 Remote Node Configuration LAN 1 Setup Figure 8-5 LAN 1 Setup LAN 2 Setup Figure 8-6 LAN 2 Setup Menu 11.1 - Remote Node Profile Rem Node Name= LAN_2 Active= Yes Call .
Prestige 202H User’s Guide Remote Node Configuration 8-11 Additionally , you m ay also need to de fine sta tic routes if s ome services res ide beyond t he immediat e remote LAN. 8.8 Configuring Network Layer Options Follow the steps below to edit Menu 11.
Prestige 202H User’s Guide 8-12 Remote Node Configuration Menu 11.3 - Remote Node Network Layer Options Rem IP Addr: Rem Subnet Mask= 0.0.0.0 My WAN Addr= 0.
Prestige 202H User’s Guide Remote Node Configuration 8-13 Table 8-6 Remote Node Net work Layer Options FIELD DESCRIPTION EXAMPLE Metric Metric represents the “cost” of transmission for routing purposes. IP routing uses hop count as the measur ement of cost, with a minimum of 1 for directly connected networks.
Prestige 202H User’s Guide 8-14 Remote Node Configuration Figure 8-7 Sample IP Addresses for LAN-to-LAN Connection 8.9 Configuring Filter Use Menu 11.5 – Remote Node Filter to specify the filter set(s) to apply to the in coming and outgoing traffic between this remote node and the Prestige and also to preve.
Prestige 202H User’s Guide Remote Node Configuration 8-15 Figure 8-8 Menu 11.5 Remote Node Filter Menu 11.5 - Remote Node Filter Input Filter Sets: protocol filters= device filters= Output Filter Se.
.
Prestige 202H User’s Guide Remote Node TCP/IP Configuration 9-1 Chapter 9 Static Route Setup This chapter shows how to set up static routes. 9.1 S t atic Route Overview Static routes tell the Prestige routing information that it cannot learn au tomatically through other means.
Prestige 202H User’s Guide 9-2 Remote Nod e TCP/IP Configuration To configure an IP static route, use Menu 12 – IP Static Route Setup , as displa yed next. Figure 9-2 Menu 12 IP Static Route Setup From Menu 12, select one of t he av ailable IP static routes to open Menu 12.
Prestige 202H User’s Guide Remote Node TCP/IP Configuration 9-3 Table 9-1 Menu 12.1 Edit IP Static Route FIELD DESCRIPTION IP Subnet Mask Enter the subnet mask for this desti nation. Follow the discussion on IP subnet mask in this chapter. Gateway IP Address Enter the IP address of the gateway.
.
Prestige 202H User’s Guide Dial-in Setup 10-1 Chapter 10 Dial-in Setup This chapter shows you how to c onfigure your Prestige to receive ca lls from remote dial-in users including telecommuters and remote nodes. This is done in SMT menus 13 and 14. 10.
Prestige 202H User’s Guide 10-2 Dial-in Setup 10.3 Setting Up Default Dial-in From the Main Menu, enter 13 to go to Menu 13 – Default Dial-in Se tup . This section describes how to configure t he protocol-i ndepende nt fields i n this m enu. For t he protocol -dependent fields, refe r to the appropriate chapters.
Prestige 202H User’s Guide Dial-in Setup 10-3 Table 10-2 Menu 13 Default Dial-in Setup FIELD DESCRIPTION EXAMPLE Recv Authen This field sets the authentication protoc ol for incoming calls. For security reason, setting authenticatio n to None is strongly discouraged.
Prestige 202H User’s Guide 10-4 Dial-in Setup Table 10-2 Menu 13 Default Dial-in Setup FIELD DESCRIPTION EXAMPLE Dial-in User If set to Yes , the Prestige will allow a remote host to specify its own IP address. If set to No , the remote host must use the IP address assigned by your Prestige from the IP pool, configured belo w.
Prestige 202H User’s Guide Dial-in Setup 10-5 but not th e remote nodes. You can specify up to 4 filter sets separated b y comma, e.g., 1, 5, 9, 12, in each filter field. The default is no filters. Spaces are accepted in this fi eld. For more inform ation on defining th e filters, see the filters chapter.
Prestige 202H User’s Guide 10-6 Dial-in Setup Figure 10-3 Menu 14 Dial-in User Setup Step 2. Select one of the users by number, this will bring you to Menu 14.1 – Edi t Dial-in User , as shown next. Figure 10-4 Menu 14.1 Edit Dial-in Us er Table 10-3 Edit Dial-in User FIELD DESCRIPTION EXAMPLE User Name This is a required field.
Prestige 202H User’s Guide Dial-in Setup 10-7 Table 10-3 Edit Dial-in User FIELD DESCRIPTION EXAMPLE Callback This field determines if your Prestige will allow call back to this user upon dial-in. If this option is enabled, your Prestige will call back to the user if requested.
Prestige 202H User’s Guide 10-8 Dial-in Setup dial-in user profile for each telecommuter. Additionally , you need to configure the Default Dial-in User Setup to set the operational parameters for all dial-in users. An example of remote access server for telecomm uters is shown next.
Prestige 202H User’s Guide Dial-in Setup 10-9 Configuring Menu 13: Figure 10-6 Configuring Menu 13 for Remote Ac cess Configuring Menu 14.1 Figure 10-7 Edit Dial-in-User The caller always controls Idle T imeout, so this field does not apply when there is callback.
Prestige 202H User’s Guide 10-10 Dial-in Setup 10.7 LAN-to-LAN Server Application Example Your Prestige can also be use d as a dial-in server for LAN-to-LAN applicati on to provi de access for the workstations on a remote network.
Prestige 202H User’s Guide Dial-in Setup 10-11 LAN 1 Figure 10-9 LAN 1 LAN-to-L AN Application LAN 2 Figure 10-10 LAN 2 LAN-to-LAN Appli cation Go to menu 24.4.5 of the Pres tige on LA N 1 and ente r the num bers that corres pond t o the menu i n LAN 1 above to test callback with your connection.
Prestige 202H User’s Guide 10-12 Dial-in Setup Figure 10-11 Testing Callback With Your Connec tion 10.7.2 Configuring With CLID in LAN-to-LAN Application The only difference between callback with CLID (Callin g Line Iden tification) and callback described abo ve is that you d o not pay for the first call, i.
Prestige 202H User’s Guide Dial-in Setup 10-13 Prestige on LAN 2 Figure 10-12 Callback With CLI D Configuration Menu 13 Figure 10-13 Configuring CLID With Callback Menu 13 - Default Dial-in Setup Te.
Prestige 202H User’s Guide 10-14 Dial-in Setup Go to Menu 24.8 (Prestige on LAN 2) and type "sys tr cl call" to test your connection with callback on CLID.
Prestige 202H User’s Guide Dial-in Setup 11-1 Chapter 11 Network Address Translation (NAT) This chapter discusses how to configure NAT on the Prestige.
Prestige 202H User’s Guide 11-2 Dial-in Setup 11.1.2 What NA T Does In the simplest form, NAT changes the source IP address in a packet recei ved from a subscriber (the insi de local address) t o another (the inside gl obal address ) before f orwarding the packet to the WAN side.
Prestige 202H User’s Guide Dial-in Setup 11-3 Figure 11-1 How NAT Works 11.1.4 NA T Application The following figure illu strates a possible NAT applicatio n, where three inside LANs (logical LANs using IP Alias) behind the Prestige can comm unicate with three distinct WAN networks.
Prestige 202H User’s Guide 11-4 Dial-in Setup Figure 11-2 NAT Application With IP Alias 11.1.5 NA T Mapping T ypes NAT supports five types o f IP/port m apping. They are: 1. One to One : I n One-to-One mode, the Pres tige maps one local IP address to one gl obal IP address.
Prestige 202H User’s Guide Dial-in Setup 11-5 5. Server : This type allows you to specify inside server s of different services b ehind the NAT to be accessible to the outside world. Port numbers do not change for One-to-One and Many-to-Many No Overload NA T mapping types.
Prestige 202H User’s Guide 11-6 Dial-in Setup 1. Choose SUA Only if you have just one public W AN IP address for y our Prestige. 2. Choose Full Feature if you have multiple public W AN IP addresses for y our Prestige. 11.2 Applying NA T You apply NAT via m enus 4 or 11.
Prestige 202H User’s Guide Dial-in Setup 11-7 Figure 11-4 Apply ing NAT to the Remote Node Table 11-3 Applying NAT to the Remote Node FIELD DESCRIPTION EX AMPLE Press [SPACE BAR] and then [ENTER] to select Full Feature if you have multiple public WAN IP address es for your Prestige.
Prestige 202H User’s Guide 11-8 Dial-in Setup Figure 11-5 Menu 15 NAT Setup 11.3.1 Address Mapping Set s Enter 1 to brin g up Menu 15.1 — Address Mapping Sets . Figure 11-6 Menu 15.1 Address Map ping Sets SUA Address Mapping Set Enter 255 to display the next screen (see also section 11.
Prestige 202H User’s Guide Dial-in Setup 11-9 Figure 11-7 Menu 15.1.255 SUA Addr ess Mapping Rules Table 11-4 Menu 15.1.255 SUA Ad dress Mapping Rules FIELD DESCRIPTION EXAMPLE Set Name This is the name of the set you selected in menu 15.1 or enter the name of a new set you want to create.
Prestige 202H User’s Guide 11-10 Dial-in Setup screen. Note also that the [?] in the Se t Name field means t hat this is a required field and you must enter a name for the se t. If the Set Name field is left blank, the entire set will be deleted. Figure 11-8 Menu 15.
Prestige 202H User’s Guide Dial-in Setup 11-11 Table 11-5 Fields in Menu 15.1.1 FIELD DESRIPTION EXAMPLE Action The default is Edit . Edit means you want to edit a selected rule (see following field). Insert Before means to inser t a rule before the rule selected.
Prestige 202H User’s Guide 11-12 Dial-in Setup Table 11-6 Menu 15.1.1.1 Address Ma pping Rule FIELD DESCRIPTION EX AMPLE Type Press [SPACE BAR] and then [ENTER] to select from a total of five types. These are the mapping typ es discussed in Tabl e 11-2.
Prestige 202H User’s Guide Dial-in Setup 11-13 In addition to the servers for specified services, NAT supports a default server. A service request that does not have a server explicitly design ated for it is forwarded to the default server. If the default is not defined, the service request is simply discarded.
Prestige 202H User’s Guide 11-14 Dial-in Setup Step 2. Enter 2 to displ ay Menu 15.2 - NAT Server Sets a s shown next. Figure 11-10 Menu 15.2 NAT Server Sets Step 3. Enter 1 to go to Menu 15. 2 NAT Server Se tup as follows. Figure 11-11 Menu 15.2 NAT Server Setup Step 4.
Prestige 202H User’s Guide Dial-in Setup 11-15 Step 6. Press [ENTER] at the “Press ENTER to confirm …” prompt to save your configuratio n after you define all the s ervers or press [ESC] at any time to cancel. Figure 11-12 Multiple Servers Behind NAT Ex ample 11.
Prestige 202H User’s Guide 11-16 Dial-in Setup Figure 11-13 NAT Example 1 Figure 11-14 Menu 4 Internet Access & NAT Example From m enu 4, choose the SUA Onl y option from the NAT field. This i s the Many -to-One mappi ng discussed in se ction 11.
Prestige 202H User’s Guide Dial-in Setup 11-17 11.5.2 Example 2: Internet A ccess w ith an Inside Server Figure 11-15 NAT Example 2 In this case, you do exactly as above (use the conve nient pre-configured S UA Only set) and also go to menu 15.2 to specify the Inside Se rver behin d the NAT as s hown in the next fig ure.
Prestige 202H User’s Guide 11-18 Dial-in Setup Figure 11-16 Menu 15.2 Specifying an Inside Server 11.5.3 Example 3: Multip le Public IP Addresses With Inside Servers In this exam ple, there are 3 IGAs from our ISP. T here are ma ny department s but two ha ve their ow n FTP server.
Prestige 202H User’s Guide Dial-in Setup 11-19 Figure 11-17 NAT Example 3 Step 1. In this case yo u need to confi gure Address Mapping Set 1 from Menu 15.1 - Address Mapping Sets. Therefore you must choose the Full Feature option from the Network Address Translation field (in m enu 4 or menu 11.
Prestige 202H User’s Guide 11-20 Dial-in Setup Figure 11-18 Example 3: Menu 11.3 The following figure shows ho w to conf igure the firs t rule Figure 11-19 Example 3: Menu 15.1.1.1 Repeat the previous step for rules 2 to 4 as outlined abov e. Menu 15.
Prestige 202H User’s Guide Dial-in Setup 11-21 Figure 11-20 Example 3: Final Menu 15.1.1 Step 7. Menu 15.1.1 sh ould look as above. Now conf igure th e IGA3 to map to our web ser ver and ma il serv er on the LA N. Step 8. Enter 15 from the main menu.
Prestige 202H User’s Guide 11-22 Dial-in Setup 11.5.4 Example 4: NA T Unfr iendly Application Programs Some applications do not support NAT Mapping using TCP or UDP port address translation.
Prestige 202H User’s Guide Dial-in Setup 11-23 Figure 11-22 Example 4: Menu 15.1.1.1 Address M apping Rule After you’ve configured your rule, you should b e able to check the settings in menu 15.1.1 as shown next. Figure 11-23 Example 4: Menu 15.1.
Firewall III Part III: Firewall This part introduces fire walls in general and the Prestige firewall. It also explains cu stomized services and logs and gives example firewall rule s.
Prestige 202H User’s Guide Firewalls 12-1 Chapter 12 Firewalls This chapter gives som e background inform ation on firewalls and explai ns how to get started with the Prestige firewall. 12.1 Firewall Overview Originally, the term firewall referred to a construction techn ique designed to preven t the spread of fire from one room to another.
Prestige 202H User’s Guide 12-2 Fire walls i. Information hidin g prevents t he names of int ernal system s from bein g made know n via DNS to outside system s, since the app lication gate way is the onl y host whose name must be made known t o outside systems.
Prestige 202H User’s Guide Firewalls 12-3 Figure 12-1 Prestige Firewall Application 12.4 Denial of Service Denials of Service (DoS) attacks are aim ed at devices an d networks wi th a connection to the Internet. T heir goal is not to steal information, but to disable a devi ce or network so users no longer have access to network resources.
Prestige 202H User’s Guide 12-4 Fire walls Table 12-1 Common IP Ports 21 FTP 53 DNS 23 Telnet 80 HTTP 25 SMTP 110 POP3 12.4.2 T ypes of DoS Att acks There are four types of DoS a ttacks: 1. Those that exploi t bugs in a TCP/IP im plem entation. 2. Those that exploit weaknesse s in t he TCP/IP specification.
Prestige 202H User’s Guide Firewalls 12-5 Figure 12-2 Three-Way Handshake Under normal circumstances, the application that initiate s a session sends a SYN (synchronize) packet to the receiving server. The receiver sends back an ACK (ack nowledgment) packet and its own SYN, and then the initiator responds with an ACK (acknowledgment).
Prestige 202H User’s Guide 12-6 Fire walls 2-b In a LAND Atta ck , hackers flood S YN packets i nto th e network with a spoofed source IP address of the targeted system. Th is makes it appear as if the host computer sent t he packets to itself, making the system unavailable while the target system tries to respond to itself.
Prestige 202H User’s Guide Firewalls 12-7 Table 12-3 Legal NetBIOS Command s MESSAGE: REQUEST: POSITIVE: NEGATIVE: RETARGET: KEEPALIVE: All SMTP commands are illegal excep t for th ose displayed in the following tables.
Prestige 202H User’s Guide 12-8 Fire walls Denies all sessions originatin g from the WAN to the LAN. Figure 12-5 Stateful Inspection The previous figure shows the Prestig e’s default firewall rules in action as well as demonstrates how stateful inspection works.
Prestige 202H User’s Guide Firewalls 12-9 access list entry is designed to permit inbound pa c kets of the same conn ection as the outbound packet just inspected. 5. The outbound packet is forwarded out through th e interface. 6. Later, an inbound pack et reaches the interface.
Prestige 202H User’s Guide 12-10 Fire walls 12.5.3 TCP Secur ity The Prestige uses state information embedded in TCP pack ets. The first packet of any new connection has its SYN flag set and its ACK flag cleared; these are "initiation" packets.
Prestige 202H User’s Guide Firewalls 12-1 1 work properly, this co nnection must be allowed to pass through even thou gh a connection fro m the Internet would normally be rej ected. In order to achieve this , the Pres tige inspects the application-level FTP data.
Prestige 202H User’s Guide 12-12 Fire walls 3. Never give out a password or any sensitive information to an unsolicited telephone call or e-mail. 4. Never e-mail sensitive information su ch as passwor ds, credit card information, etc., without encrypting the information first.
Prestige 202H User’s Guide Firewalls 12-1 3 3. To bloc k/allow bot h inbound ( WAN to LA N) and out bound (LAN t o WAN) tra ffic between t he specific inside host/network "A" and outside host/network "B". If the filter blocks the traffic from A to B, it also blocks the traffic from B to A.
.
Prestige 202H User’s Guide Introducing the Prestige Firewall 13-1 Chapter 13 Introducing the Prestige Firewall This chapter shows you how to get st arted with the Prestige firewall. 13.1 Access Methods The web configurator is, by far, t he most comprehens ive fi rewall configuration tool your Prestige has to offer.
Prestige 202H User’s Guide 13-2 Introducing the Prestige Firewall Figure 13-2 Menu 21.2 Fire wall Setup Configure the fire wall rules using the w eb configurator or Command Interpreter . 13.2.2 Vie wing the Firewall Log In menu 21, enter 3 to view the firewall log.
Prestige 202H User’s Guide Introducing the Prestige Firewall 13-3 Table 13-1 View Firewall Log FIELD DESCRIPTION EXAMPLES # This is the index number of the fire wall log. 128 entries are available number ed from 0 to 127. Once they are all used, the log wraps aroun d and the old logs are lost.
.
Prestige 202H User’s Guide Configuring Firewall with the Web Configurator 14-1 Chapter 14 Configuring Firewall with the Web Configurator This chapter shows you how to configure y our firewall with the web configurator. 14.1 Web Configurator Login and Main Menu Screens Use the Prestige we b configur ator, to confi gure your fire wall.
Prestige 202H User’s Guide 14-2 Configuring F irewall with the Web Configurator Figure 14-2 Fire wall Functions The following table describes the fields in this screen. Table 14-1 Predefined Services LINK DESCRIPTION Config Click this link to enable the firewall.
Prestige 202H User’s Guide Configuring Firewall with the Web Configurator 14-3 Table 14-1 Predefined Services Rule Summary Click this link to set up firewall rules for WAN to LAN traffic. Timeout Click this link to set up protocol timeout values for WAN to LAN traffic.
Prestige 202H User’s Guide 14-4 Configuring F irewall with the Web Configurator 14.3.1 Alert s Alerts are reports on ev ents, such as attacks, that you may wa nt to know about right aw ay.
Prestige 202H User’s Guide Configuring Firewall with the Web Configurator 14-5 The following table describes the fields in this screen. Table 14-2 E-mail FIELD DESCRIPTION EXAMPLE Address Info Mail Server Enter the IP address of your mail server in d otted decimal notation.
Prestige 202H User’s Guide 14-6 Configuring F irewall with the Web Configurator 14.3.2 SMTP Error Messages If there are difficulties in sending e-mail the fo llowing error messages appear. Please see the Support Notes on the include d disk for i nformation o n other ty pes of error m essages.
Prestige 202H User’s Guide Configuring Firewall with the Web Configurator 14-7 Figure 14-5 E-mail Log 14.4 Att ack Alert Attack alerts are real-time re ports of DoS attacks. In the Attack Al ert screen, shown l ater, you m ay choose to generate an alert whene ver an attack is detected.
Prestige 202H User’s Guide 14-8 Configuring F irewall with the Web Configurator 2. The m inimum capacity of server backlog i n your LAN network. 3. The CPU power of servers in your LAN network. 4. Network bandwidth . 5. Type of t raffic for certain se rvers.
Prestige 202H User’s Guide Configuring Firewall with the Web Configurator 14-9 2. If the Blocking Time timeout is greater than 0, then th e Prestige blocks all new connection requests to the host giving the server time to handle the present conn ections.
Prestige 202H User’s Guide 14-10 Configuring F irewall with the Web Configurator Table 14-4 Attack Alert Denial of Service Thresholds One Minute Low T his is the rate of new half-open sessions that causes the firewall to stop deleting half-open sessions.
Prestige 202H User’s Guide Configuring Firewall with the Web Configurator 14-11 Table 14-4 Attack Alert TCP Maximum Incomplete This is the number of existing half-open TCP sessions with the same destination host IP address that causes the firewall to start dropping half-open sessi ons to that same destination host IP address.
.
Prestige 202H User’s Guide Creating Custom Rules 15-1 Chapter 15 Creating Custom Rules This chapter contains instructions for defin ing both L ocal Network and Internet rules. 15.1 Rules Overview Firewall rules are subdivided into “Local Network” and “I nternet”.
Prestige 202H User’s Guide 15-2 Creating Custom Rules 2. Is the intent of the rule to forward or block traffic? 3. What is the directi on connection: from the L AN to the Internet, or from the Internet to t he LAN? 4. What IP services will be affected? 5.
Prestige 202H User’s Guide Creating Custom Rules 15-3 Source Address What is the connection’s source addres s; is it on the LAN or WAN? Is it a single IP, a range of IPs or a subnet? Destination Address What is the connection’s destination add ress; is it on the LAN or WAN? Is it a single IP, a range of IPs or a subnet? 15.
Prestige 202H User’s Guide 15-4 Creating Custom Rules 15.3.2 W AN to LAN Rules The default rule for WAN to LAN traffic blocks all in coming conn ections (WAN to LAN) . If you wish to allow certain WAN users to have access to your LAN, you will need to create custom rules to allow it.
Prestige 202H User’s Guide Creating Custom Rules 15-5 Figure 15-3 Fire wall Rules Summary: First Screen Table 15-1 Firewall Rules Summary: First Scre en FIELD DESCRIPTION EXAMPLE The default action .
Prestige 202H User’s Guide 15-6 Creating Custom Rules Table 15-1 Firewall Rules Summary: First Scre en FIELD DESCRIPTION EXAMPLE The following fields summariz e the rules you have cr eated. Note that these fields are re ad only. Click the tab at the top of t he box to order the rules accordi ng to that tab.
Prestige 202H User’s Guide Creating Custom Rules 15-7 Table 15-2 Predefined Services SERVICE DESCRIPTION AIM(TCP:5190) AOL’s Internet Messenger se rvice, used as a listening port by ICQ. BGP(TCP:179) Border Gateway Protocol. BOOTP_CLIENT(UDP:68) DHCP Client.
Prestige 202H User’s Guide 15-8 Creating Custom Rules Table 15-2 Predefined Services NNTP(TCP:119) Network News Transport Protoc ol is the deliver y mechanism for the USENET newsgroup service. PING(ICMP:0) Packet INterne t Groper is a pr otocol that sends out ICMP echo requests to test whether or not a remote host is reachable.
Prestige 202H User’s Guide Creating Custom Rules 15-9 Table 15-2 Predefined Services TACACS(UDP:49) Login Host Protocol used for (Terminal Acce ss Controller Access Control System). TELNET(T CP:23) Telnet is the login and terminal emu lation protocol common on the Internet and in UNIX environm ents.
Prestige 202H User’s Guide 15-10 Creating Custom Rules Figure 15-4 Creating/Editing A Fire wall Rule The following table describes the fields in this screen.
Prestige 202H User’s Guide Creating Custom Rules 15-11 Table 15-3 Creating/Editing A Fire wall Rule FIELD DESCRIPTION EX AMPLE Source Address: Click Src Add to add a new address, SrcEdit to edit an existing one or SrcDelete to delete one. Pleas e see the next section for more information on adding and editing source addr esses.
Prestige 202H User’s Guide 15-12 Creating Custom Rules Figure 15-5 Adding/Editing Source a nd Destination Addresses The following table describes the fields in this screen.
Prestige 202H User’s Guide Creating Custom Rules 15-13 15.6.1 Configuring Timeout V alues The factors infl uencing choic es for tim eout values ar e t he same as the factors influencing choices for threshold value s – see section 14.4.1. Click Timeout for either Local N etwork to Inte rnet S et or Internet to Local Netw ork Set .
Prestige 202H User’s Guide 15-14 Creating Custom Rules Idle Timeout This is the length of time of inactivity a TCP connectio n remains open before the Prestige cons iders the connection closed.
Prestige 202H User’s Guide Customized Services 16-1 Chapter 16 Customized Services This chapter covers creating, viewing and editing custom services. 16.1 Customized Services Overview Configure cust omized servic es and port numbers n ot predefi ned by the Pre stige (see Figure 15-4) .
Prestige 202H User’s Guide 16-2 Customized Services The following table describes the fields in this screen. Table 16-1 Customized Services FIELD DESCRIPTION No. This is the number of your customized po rt. Click a rule’s number to edit the rule. Name This is the name of your customized port.
Prestige 202H User’s Guide Customized Services 16-3 The next tabl e describes the fi elds in this sc reen. Table 16-2 Creating/Editing A Custo m Port FIELD DESCRIPTION EXAMPLE Service Name Enter a unique name for your custom port.
Prestige 202H User’s Guide 16-4 Customized Services Figure 16-3 Configure Source IP Step 5. Click Edit Available Serv ice in the ed it rule screen and then click a rule number to bring up the Firewall Customized Services Config scre en. Configure as follows.
Prestige 202H User’s Guide Customized Services 16-5 Step 5. Follow the procedures outlined earlier in this ch apter to configure all your rules. Con figure the rule configuration screen lik e the one below and apply it. Figure 16-5 MyService Rule Config uration This is your “ MyService” custom port.
Prestige 202H User’s Guide 16-6 Customized Services Step 6. On completing the configuration pro cedure for these Internet firewall rules, the Rule Summary screen should look lik e the following. Don ’t forget to click Apply whe n you ha ve finis hed configuring your rule(s) to sav e your settings back to the Prestige.
Prestige 202H User’s Guide Firewall Logs 17-1 Chapter 17 Firewall Logs This chapter contains informati on about using the log screen to view the results of the rules you have configured. 17.1 Log Screen When you co nfigure a ne w rule y ou also ha ve the optio n to log events that match, don’t match (or both) this rule (see Figure 15-4 ).
Prestige 202H User’s Guide 17-2 Firewall Logs The following table describes the fields in this screen. Table 17-1 Log Screen FIELD DESCRIPTION EXAMPLE No. This is the inde x number of the firewall log. 128 entries are available numbere d from 0 to 127.
Advanced Management IV Part IV: Advanced Management This part discusse s Filtering, SNMP , Syst em Information and Diagnosi s, Firmware and Configuration File Maintenance, System Maint enance and Information, Call Sche duling, Remote Management and V irtual Private Networking (VPN/IPSec).
.
Prestige 202H User’s Guide Filter Configuration 18-1 Chapter 18 Filter Configuration This chapter shows you how to create and apply filters. 18.1 Filtering Overview Your Prestige uses filters to decide whether or not to allow passage of a data packet and/or to make a call.
Prestige 202H User’s Guide 18-2 Filter Configuration Figure 18-1 Outgoing Packet Filtering Process Two sets of factory filter rules have been configured in menu 21 to prevent NetBIOS traffic from triggering calls. A summary of their filter rules is shown in the figures that follow.
Prestige 202H User’s Guide Filter Configuration 18-3 Start Fetch First Filter Set Fetch First Filter Rule Active? Execute Filter Rule Fetch Next Filter Rule Next filter Rule Available? Fetch Next Fi.
Prestige 202H User’s Guide 18-4 Filter Configuration For incoming packets, your Prestige ap plies data filters only. Packets are p rocessed depending on whether a match is found. The following section s describe how to configure filter sets. The Filter Structur e of the Prestige A filter set consists of one or more filter rules.
Prestige 202H User’s Guide Filter Configuration 18-5 Figure 18-4 Menu 21.1 Filter Set Configuration Step 3. Select the filter set you wish to configure (1 -12) and press [ENTER] . Step 4. Enter a descriptive name or comment in th e Edit Comments field and press [ENTER] .
Prestige 202H User’s Guide 18-6 Filter Configuration Figure 18-5 NetBIOS_WAN Filte r Rules Summary Figure 18-6 NetBIOS _LAN Filter Rul es Summary Menu 21.1.1 - Filter Rules Summary # A Type Filter Rules M m n - - ---- -------------------------------------------- --------- - - - 1 Y IP Pr=6, SA=0.
Prestige 202H User’s Guide Filter Configuration 18-7 Figure 18-7 Telnet WAN Filter Rules Summary Figure 18-8 FTP_WAN Filter Rules Summary 18.2.1 Filter Rules Summary Menus The following tables briefly describe the abbreviations used in th e previous menus.
Prestige 202H User’s Guide 18-8 Filter Configuration TABLE 18-1 FILTER RULES SUMMARY MENU ABBREVIATIONS FIELD DESCRIPTION # The filter rule number: 1 to 6. A Active: “Y” means the rule is acti ve. “N” means the rule is inactive. Type The type of filter rule: “GEN” for Generic, “IP” for TCP/IP.
Prestige 202H User’s Guide Filter Configuration 18-9 18.3 Configuring a Filter Rule To configure a filter rule, type its number in Menu 21.1.x – F ilter Rules Summary and press [ENTER] to open me nu 21.1.x. x for the rule. There are two types of filter rules: TCP/IP and Generic .
Prestige 202H User’s Guide 18-10 Filter Configuration Figure 18-9 Menu 21.1.7.1 TCP/IP Filter Rule Table 18-3 Menu 21.1.7.1 TCP/IP Filter Rule FIELD DESCRIPTION EXAMPLE Filter # T his is the filter set, filter rule coordinates, for instance, 2, 3 refers to the second filter set and the th ird filter rule of that set.
Prestige 202H User’s Guide Filter Configuration 18-11 Table 18-3 Menu 21.1.7.1 TCP/IP Filter Rule FIELD DESCRIPTION EXAMPLE Port # Type the destination port of the pac kets you want to filter.
Prestige 202H User’s Guide 18-12 Filter Configuration Table 18-3 Menu 21.1.7.1 TCP/IP Filter Rule FIELD DESCRIPTION EXAMPLE Action Not Matched Select the action for a packet not matching the rule.
Prestige 202H User’s Guide Filter Configuration 18-13 Packet into IP Filter Matched Matched Yes Action Matched Action Not Matched More? No Filter Active? Check IP Protocol Drop Drop Packet Accept Pa.
Prestige 202H User’s Guide 18-14 Filter Configuration 18.3.2 Generic Filter Rule This section shows you how to co nfigure a generic filte r rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP, it is generally easier to use the IP rules directly.
Prestige 202H User’s Guide Filter Configuration 18-15 Table 18-4 Menu 21.1.5.1 Generic Filter Rule FIELD DESCRIPTION EXAMPLE Filter Type Press [SPACE BAR] and then [ENTER] to select a t ype of rule. Parameters displayed belo w each type will be different.
Prestige 202H User’s Guide 18-16 Filter Configuration 18.4 Filter T ypes and NA T There are two classe s of filter rules, Generic Filter Device rules and Protocol Filter ( TCP/IP ) rules. Generic Filter rules act on the raw data from/to LAN and WAN.
Prestige 202H User’s Guide Filter Configuration 18-17 Figure 18-13 Sample Telnet Filter Step 1. Enter 21 from the m ain me nu to open Menu 21 - Filter and Firewall Setup . Step 2. Enter 1 to ope n Menu 21.1 - Filter Set Configuration . Step 3. Enter the index of the filter set you wish to configure (such as 4) and press [ENTER] .
Prestige 202H User’s Guide 18-18 Filter Configuration Step 6. Enter 1 to configure the first filter rule (the only filter rule of this set). Make the entries in this menu as sho wn in the f ollowing fi gure. Figure 18-14 Sample Filter Menu 21.1.9.1 Step 7.
Prestige 202H User’s Guide Filter Configuration 18-19 When you press [ENTER] to confirm, the following screen appears. Note that there is only on e filter rule in this set. Figure 18-15 Sample Filter Rules Summary Menu 21.1.9 After you have created the filter set, you must apply it.
Prestige 202H User’s Guide 18-20 Filter Configuration Table 18-5 Filter Sets Table FILTER SETS DESCRIPTION Input Filter Sets: Appl y filters for incoming traffic. You may apply protocol or device filter rules. Output Filter Sets: Apply filters for traffic leav ing the Prestige.
Prestige 202H User’s Guide Filter Configuration 18-21 Figure 18-17 Filtering Remote Node T raffic Menu 11.5 - Remote Node Filter Input Filter Sets: protocol filters= 3,4,5 device filters= Output Fil.
.
Prestige 202H User’s Guide SNMP Configuration 19-1 Chapter 19 SNMP Configuration This chapter explains SNMP Configuration menu 22. 19.1 SNMP Overview Simple Netw ork Managem ent Protoc ol is a p rotocol use d for excha nging ma nagement info rmation bet ween network de vices.
Prestige 202H User’s Guide 19-2 SNMP Configuration An agent is a managem ent software m odule that resides i n a managed device (the P restige). An a gent translates the local management information from the managed device into a form compatible with SNMP.
Prestige 202H User’s Guide SNMP Configuration 19-3 Figure 19-2 Menu 22 SNMP Configuration The following table d escribes the SNMP configuration parameters.
Prestige 202H User’s Guide 19-4 SNMP Configuration Table 19-2 SNMP Traps TRAP # TRAP NA ME DESCRIPTION 1 coldStart ( defined in RFC-121 5 ) A trap is sent after booting (power on). 2 warmStart ( defined in RFC-1215 ) A trap is sent after booting (s oftware reboot).
Prestige 202H User’s Guide System Information and Diagnosis 20-1 Chapter 20 System Information and Diagnosis This chapter covers the information and diag nostic tools in SMT menus 24.1 to 24.4. 20.1 System S t atus Overview These tools include updates on system status, port status, log and trace capabilities and upgrades for the system software.
Prestige 202H User’s Guide 20-2 System Information and Diagnosis Figure 20-2 Menu 24.1 Sy stem Maintenance Status Table 20-1 Menu 24.1 Sy stem Maintenance Status FIELD DESCRIPTION Chan This shows statistics for B1 and B2 channels respectively. This is the information displayed for ea ch channel.
Prestige 202H User’s Guide System Information and Diagnosis 20-3 Table 20-1 Menu 24.1 Sy stem Maintenance Status FIELD DESCRIPTION Own CLID Sho ws your Caller ID. Peer IP Address This refers to the IP address of the peer. Peer CLID T his shows the Caller ID of the peer.
Prestige 202H User’s Guide 20-4 System Information and Diagnosis Figure 20-3 Menu 24.2 Sy stem Information and Console Port Speed 20.3.1 System Information Enter 1 in menu 24.2 to di splay the scree n shown next. Figure 20-4 Menu 24.2.1 Sy stem Maintenance Information Table 20-2 Menu 24.
Prestige 202H User’s Guide System Information and Diagnosis 20-5 Table 20-2 Menu 24.2.1 Sy stem Maintenance Information FIELD DESCRIPTION IP Address This is the IP address of the Prestige in dotted decim al notation. IP Mask This shows the subnet mask of the Prestige.
Prestige 202H User’s Guide 20-6 System Information and Diagnosis Figure 20-6 Menu 24.3 Sy stem Maintenance Log and Trace Step 3. Enter 1 from Menu 2 4.3 – System Main tenance – Log and Trace to display the error log in the system. After the Prestige finishes displaying the error log, you will have the option to clear it.
Prestige 202H User’s Guide System Information and Diagnosis 20-7 Figure 20-8 Menu 24.3.2 Sy stem Maintenance Unix Syslog You need to co nfigure the U NIX syslog p arameters desc ribed in the following table to activate syslog then choose what you want to log.
Prestige 202H User’s Guide 20-8 System Information and Diagnosis Table 20-3 Menu 24.3.2 Sy stem Maintenance Unix Sy slog FIELD DESCRIPTION Firewall log Firewall events are logged when this field is set to Yes. When finished configurin g this screen, press [E NTER] to confirm or [ESC] to cancel.
Prestige 202H User’s Guide System Information and Diagnosis 20-9 3. Filter log Filter log Message Format SdcmdSyslogSend(SYSLOG_FILLOG, SYSLOG_NOTICE, String ); String = IP[Src=xx.xx.xx.xx Dst=xx.xx.xx.xx prot spo=xxxx dpo=xxxx] S04>R01mD IP[…] is the packet header and S04>R01mD means filter set 4 (S) and rule 1 (R), match (m) drop (D).
Prestige 202H User’s Guide 20-10 System Information and Diagnosis Figure 20-9 Menu 24.3.3 Sy stem Maintenance Accounting Server FIELD DESCRIPTION EXAMPLE Accounting Server Active Press the [SPACE BAR] to select Yes and press [ENTER] to enable wireless client auth entication through an e xternal accounting server.
Prestige 202H User’s Guide System Information and Diagnosis 20-11 Figure 20-10 Menu 24.3.4 Call Triggering Packet. 20.7 Diagnostic The diagnostic facility allows you to test the different aspects of your Prestige to determine if it is working properly.
Prestige 202H User’s Guide 20-12 System Information and Diagnosis Menu 24.4 - System Maintenance – Diagnostic ISDN System 1. Hang Up B1 Call 21. Reboot System 2. Hang Up B2 Call 22. Command Mode 3. Reset ISDN 4. ISDN Connection Test 5. Manual Call TCP/IP 11.
Prestige 202H User’s Guide System Information and Diagnosis 20-13 Table 20-4 System Maintenance Men u Diagnostic FIELD DESCRIPTION Internet Setup Test This test checks to see if y our Internet access c onfiguration has been done correctly. When this option is chosen, the Prestige places a manual call to the ISP remote node.
.
Prestige 202H User’s Guide Firmware and Configuration File Maintenance 21-1 Chapter 21 Firmware and Configuration File Maintenance This chapter tells you how to back up and restore your configurati on file as well as upload new firmware and a new configuration file.
Prestige 202H User’s Guide 21-2 Firmware and Configuration File Maintenance Table 21-1 Filename Conventions FILE TYPE INTERNAL NAME EXTERNAL NAME DESCRIPTION Configuration File Rom-0 This is the configurat ion filename on the Pres tige.
Prestige 202H User’s Guide Firmware and Configuration File Maintenance 21-3 21.2.1 Backup Configuration Follow the instructions as shown in the next screen. Figure 21-1 Menu 24.5 Sy stem Maintenance – Backup Configuration 21.2.2 Using the FTP Command from the Command Line Step 1.
Prestige 202H User’s Guide 21-4 Firmware and Configuration File Maintenance Figure 21-2 FTP Session Example 21.2.4 GUI-based FTP Client s The followin g table describes some of t he commands t hat you m ay see in GUI-base d FTP client s.
Prestige 202H User’s Guide Firmware and Configuration File Maintenance 21-5 3. There i s already anot her remote management session of the same type (web, FTP or Telnet) running. Y ou may onl y have one rem ote m anagement session of the sam e type running at one time.
Prestige 202H User’s Guide 21-6 Firmware and Configuration File Maintenance 21.2.8 GUI-based TFTP Client s The followin g table describes some of t he fields that you may see in GU I-based TF TP clients. Table 21-3 General Commands for GUI-based TFTP Clients COMMAND DESCRIPTION Host Enter the IP address of the Prestige.
Prestige 202H User’s Guide Firmware and Configuration File Maintenance 21-7 Step 2. The followin g screen indicates that the Xmodem download has started. Figure 21-4 System Maintena nce: Starting Xmodem Do wnload Screen Step 3. Run the Hype rTerm inal program by clic king Transfer , then Receive File as shown in the following screen.
Prestige 202H User’s Guide 21-8 Firmware and Configuration File Maintenance WA R N I N G ! DO NOT INTERRUPT THE FILE TR ANSFER PROCESS AS THIS MA Y PERMANENTL Y DAMAGE YOUR PRESTIGE, WHEN THE UPLOAD CONFIGURA TION/FIRMW ARE PROCESS IS COMPLETE, THE PRESTIGE WILL AUTOMA TICALL Y RESET .
Prestige 202H User’s Guide Firmware and Configuration File Maintenance 21-9 Step 8. Enter “quit” to exit the ftp pr ompt. The Prestige will autom atica lly restart after a successful restore process. 21.3.2 Restore Using FTP Session Example Figure 21-8 Restore Usi ng FTP Session Example Refer to section 21 .
Prestige 202H User’s Guide 21-10 Firmware and Configuration File Maintenance Figure 21-11 Restore Configuration Example Step 4. After a successful restoration you will see the fo llowing screen. Press any key to restart the Prestige and return to the SMT menu.
Prestige 202H User’s Guide Firmware and Configuration File Maintenance 21-11 Figure 21-13 - System Maintenan ce Upload Firmware Enter 1 in menu 24.7 to display the following screen an upload firmware using FTP. Figure 21-14 Menu 24.7.1 Upload Sy stem Firmware 21.
Prestige 202H User’s Guide 21-12 Firmware and Configuration File Maintenance You can see th e following screen when y ou enter 2 i n menu 24 .7. Figure 21-15 Menu 24.7.2 - Sy stem Mainte nance – Upload Configuration File To upload the firmware and the conf iguration file, follow these examples 21.
Prestige 202H User’s Guide Firmware and Configuration File Maintenance 21-13 21.4.4 FTP Session Example of Firmware File Upload Figure 21-16 FTP Session Example of Firmware File Upload More comm ands (found in G UI-based FTP clie nts) are listed earlier in this chapter.
Prestige 202H User’s Guide 21-14 Firmware and Configuration File Maintenance 21.4.6 TFTP Upload Command Example The following is an exam ple TFTP command: tftp [-i] host put firmware.
Prestige 202H User’s Guide Firmware and Configuration File Maintenance 21-15 21.4.9 Example Xmodem Firmware Upload Using HyperT er minal Click Transfer , then Send File to display the following screen. Figure 21-18 Example Xmodem Upload After the co nfiguration upload process has c ompleted, rest art the Presti ge by ente ring “atgo” .
Prestige 202H User’s Guide 21-16 Firmware and Configuration File Maintenance Figure 21-19 Menu 24.7.2 as Seen Using the Cons ole Port Step 2. After the "St arting Xm odem upl oad" message ap pears, activate t he Xmodem protoc ol on your computer.
Prestige 202H User’s Guide Firmware and Configuration File Maintenance 21-17 Figure 21-20 Example Xmodem Upload After the co nfiguration upload process has c ompleted, rest art the Presti ge by ente ring “atgo” . Type the configuration file’s location, or click Browse to search for it.
.
Prestige 202H User’s Guide SMT Menus 24.8 to 24.10 22-1 Chapter 22 SMT Menus 24.8 to 24.10 This chapter leads you through System Maintenance SM T menus 24.8 to 24.10. 22.1 Command Interpreter Mode The Comm and Interpreter (CI) is a part o f the main system firmware.
Prestige 202H User’s Guide 22-2 SMT Menus 24.8 to 24.10 Menu 24.9 - System Maintenance - Call Control 1. Call Control Parameters 2. Black List 3. Budget Management 4.
Prestige 202H User’s Guide SMT Menus 24.8 to 24.10 22-3 Menu 24.9.1 - Call Control Parameters Dialer Timeout: Digital Call(sec)= 60 Retry Counter= 0 Retry Interval(sec)= N/A Press ENTER to confirm or ESC to Cancel: Please enter a number from 5 to 300 22.
Prestige 202H User’s Guide 22-4 SMT Menus 24.8 to 24.10 Menu 24.9.2 - Blacklist Phone Number 1. 2. 3. 4. 5. 6. 7. 8. 9. 10. 11. 12. 13. 14. Remove Selection (1-14): Figure 22-5 Menu 24.9.2 Blacklist 22.2.3 Budget Management Menu 24.9. 1 shows the b udget managem ent stati stics for outg oing calls.
Prestige 202H User’s Guide SMT Menus 24.8 to 24.10 22-5 hours, meaning no budget control. You can reset the accumulated connection time in this menu b y entering the index of a remote node. Enter 0 t o update t he scr een. The budget and the reset period can be configured in menu 11.
Prestige 202H User’s Guide 22-6 SMT Menus 24.8 to 24.10 Table 22-3 Menu 24.9.4 Call History FIELD DESCRIPTION Phone Number T his is the telephone number of past incomi ng and outgoing calls. Dir This shows whether the call was incoming or outgoing. Rate This is the transfer rate of the call.
Prestige 202H User’s Guide SMT Menus 24.8 to 24.10 22-7 Enter 10 to go to Menu 24.10 - Sys tem Maintenance - Ti me and Date Setting t o update the time and date settings of your Prestige as sho wn in the follow ing screen. Figure 22-9 Menu 24.10 Sy stem Maintenance: Time and Date Setting The following table describes the fields in this screen.
Prestige 202H User’s Guide 22-8 SMT Menus 24.8 to 24.10 Table 22-4 Time and Date Setting Fields FIELD DESCRIPTION Time Server Address Enter the IP address or domain nam e of your timeserver. Check with your ISP/network administrator if you are unsure of this information.
Prestige 202H User’s Guide Call Scheduling 23-1 Chapter 23 Call Scheduling Call scheduling allows you to dictate when a remote node should be called and for how long. 23.1 Call Scheduling Overview The call scheduling feature allows the Prestige to mana ge a remote no de and dictate whe n a remote no de should be called and fo r how long.
Prestige 202H User’s Guide 23-2 Call Scheduling T o delete a schedule set, enter the set number and press [SP ACE BAR] and then [ENTER] or [DEL] in the Edit Name field. To set up a schedule set, select the schedule set you wan t to setup from menu 26 (1-12) and press [ENTER] to see Menu 26.
Prestige 202H User’s Guide Call Scheduling 23-3 Table 23-1 Menu 26.1 Schedule Set Setup FIELD DESCRIPTION OPTIONS Weekday: Day If you selected Weekly in the How Often field above, then select the day( s) when the set should activate (and recur) by going to that d ay(s) and pressing [SPACE BAR] to select Yes , then press [ENTER].
Prestige 202H User’s Guide 23-4 Call Scheduling Figure 23-3 Apply ing Schedule Set(s) Menu 11.1 - Remote Node Profile Rem Node Name= ? Edit PPP Options= No Active= Yes Rem IP Addr= ? Call Direction=.
Prestige 202H User’s Guide Remote Management 24-1 Chapter 24 Remote Management This chapter provides information on confi guring remote management (SMT menu 24. 11). 24.1 Remote Management Overview Remote management allows you to determine which services/protocols ca n acces s which Prestige interface (if any) fr om whic h comput ers.
Prestige 202H User’s Guide 24-2 Remote Management Use the Prestige’s LAN IP address when configuring from the LAN. 24.1.3 System T imeout There is a syst em tim eout of five m inutes (three hundred seconds) for eith er the console port or telnet/web/FTP connections.
Prestige 202H User’s Guide Remote Management 24-3 Figure 24-2 Remote Management The following table describes the labels in this screen. Table 24-1 Remote Management FIELD DESCRIPTION Telnet Server FTP Server Web Server Each of these read-only l abels denotes a ser vic e that you may use to remotel y manage the Prestige.
.
Prestige 202H User’s Guide Introduction to VPN/IPSec 25-1 Chapter 25 Introduction to VPN/IPSec This chapter introduces the basics of IPSec VPNs. 25.1 VPN Overview A VPN (Virt ual Private Net work) pr ovides secure com municati ons between sit es without the expense of leased site-to-site lines.
Prestige 202H User’s Guide 25-2 Introduction to VPN/IPSec Figure 25-1 Encryption and Dec ryption Data Confidentiality The IPSec sender can enc rypt packets befo re transm itting them across a network.
Prestige 202H User’s Guide Introduction to VPN/IPSec 25-3 Figure 25-2 VPN Application 25.2 IPSec Architecture The overall IPSec architect ure is shown as follows.
Prestige 202H User’s Guide 25-4 Introduction to VPN/IPSec Figure 25-3 IPSec Architecture 25.2.1 IPSec Algorithms The ESP (Encapsulat ing Securit y Payload) Protocol (R FC 2406) and AH (A uthenticat ion Header) prot ocol (RFC 2402) describe the packet formats and the default stand ards for packet structure (includ ing implementation algorithms).
Prestige 202H User’s Guide Introduction to VPN/IPSec 25-5 25.3 Encap sulation The two modes of ope ration for IPSec VPNs are Tr ansport m ode and Tunnel m ode. Figure 25-4 Transport and Tunnel Mo de IPSec Encapsulation 25.3.1 T ransport Mode Transport m ode is use d to protect u pper lay er protocol s and only affects the data in the I P packet.
Prestige 202H User’s Guide 25-6 Introduction to VPN/IPSec 25.4 IPSec and NA T Read this section if you ar e running IPSec on a host co mputer behind the Prestige.
Prestige 202H User’s Guide VPN/IPSec Setup 26-1 Chapter 26 VPN/IPSec Setup This chapter shows you how to set up VNP/IPSec on your Prestige. 26.1 VPN/IPSec Overview Use the screens docum ented in th is chapter to config ure rules f or VPN co nnections and manage VPN connections.
Prestige 202H User’s Guide 26-2 VPN/IPSec Setup From the m ain menu, e nter 27 to display the first VPN/ IPSec m enu (shown next). Figure 26-2 Menu 27 VPN/IPSec Setup 26.2 IPSec Algorithms The ESP and AH protocols are necessary t o create a Security Associat ion (SA), the foundatio n of an IPSec VPN.
Prestige 202H User’s Guide VPN/IPSec Setup 26-3 Table 26-1 AH and ESP ESP AH Select DES for minimal security and 3DES for maximum. Select NULL to set up a tunnel without encryption.
Prestige 202H User’s Guide 26-4 VPN/IPSec Setup 26.4.1 Dynamic Secure Gateway Address If the remote secure gateway has a dy namic WAN IP ad dress and does not use DDNS, e nter 0.0.0.0 as the secure gateway’s address. In this case only the remote secure gateway can initiate SAs.
Prestige 202H User’s Guide VPN/IPSec Setup 26-5 Menu 27.1 – IPSec Summary # Name A Local Addr Start - Local Addr End Encap IPSec Algorithm Key Mgt Remote Addr Start - Remote Addr End Secure Gw Addr - ------ - ----------------- --------------- ------ ------------------ 001 Taiwan Y 192.
Prestige 202H User’s Guide 26-6 VPN/IPSec Setup Table 26-2 Menu 27.1 IPSec Summary FIELD DESCRIPTION EXA MPLE Local Addr End When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to Single , this is the same (static) IP address as in the Local A ddr Start field.
Prestige 202H User’s Guide VPN/IPSec Setup 26-7 Table 26-2 Menu 27.1 IPSec Summary FIELD DESCRIPTION EXA MPLE Remote Addr Start When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to Single , this is a (static) IP address on the network behind the remote IPSec router.
Prestige 202H User’s Guide 26-8 VPN/IPSec Setup Table 26-2 Menu 27.1 IPSec Summary FIELD DESCRIPTION EXA MPLE Select Rule Type the VPN rule index number you wish to edit or delete and the n press [ENTER].
Prestige 202H User’s Guide VPN/IPSec Setup 26-9 Table 26-3 Local ID Type and Content Fields LOCAL ID TYPE= CONTENT= IP Type the IP address of your computer or leave the field blank to have the Prestige automatically use its own IP address. DNS Type a domain name (up to 31 characters) by which to identify this Prestige.
Prestige 202H User’s Guide 26-10 VPN/IPSec Setup Peer ID type: IP Peer ID type: E-mail Peer ID content: 1.1.1.2 Peer ID content: tom@yourcompany.com The two Prestiges in this e xample cannot com p lete their negotiation because Presti ge B’s Local ID type is IP , but Prestige A’s Peer ID type is set to E-ma il .
Prestige 202H User’s Guide VPN/IPSec Setup 26-11 Figure 26-5 Menu 27.1.1 IPSec Setup Table 26-7 Menu 27.1.1 IPSec Setup FIELD DESCRIPTION EX AMPLE Index This is the VPN rule index number you selected in the pr evious menu. 1 Name Enter a unique identification name for this VPN rule.
Prestige 202H User’s Guide 26-12 VPN/IPSec Setup Table 26-7 Menu 27.1.1 IPSec Setup FIELD DESCRIPTION EX AMPLE Content When you select IP in the Local ID Type field, type the IP address of your computer or leave the field blank to have the Prestige a utomatically use it s own IP address.
Prestige 202H User’s Guide VPN/IPSec Setup 26-13 Table 26-7 Menu 27.1.1 IPSec Setup FIELD DESCRIPTION EX AMPLE Secure Gateway Addr Type the WAN IP address or the domain nam e (up to 31 characters) of the IPSec router with which you’re making the VPN connection.
Prestige 202H User’s Guide 26-14 VPN/IPSec Setup Table 26-7 Menu 27.1.1 IPSec Setup FIELD DESCRIPTION EX AMPLE End Enter a port number in this field to define a port range. T his port number must be greater than that specified in the previous field.
Prestige 202H User’s Guide VPN/IPSec Setup 26-15 Table 26-7 Menu 27.1.1 IPSec Setup FIELD DESCRIPTION EX AMPLE End Enter a port number in this field to define a port range. T his port number must be greater than that specified in the previous field.
Prestige 202H User’s Guide 26-16 VPN/IPSec Setup Figure 26-6 T wo Phases to Set Up the IPSec SA In phase 1 you m ust: Choose a negot iation m ode. Authenticate the connection by en tering a pre-sh ared key. Choo se an en cryption algori thm.
Prestige 202H User’s Guide VPN/IPSec Setup 26-17 especially when used with "m ain mode" IKE and a group pr e-shared key as describe d above. XAUTH also carries known plaintext (name an d passw ord prom pts) as encry pted payloa d— hints an attacker might use t o try to "crack" the enc ryption key .
Prestige 202H User’s Guide 26-18 VPN/IPSec Setup 26.11 Configuring IKE Settings This may be u nnecessary for data that d oes not require such sec urity, so P FS is disable d ( None ) by def ault in the Prestige.
Prestige 202H User’s Guide VPN/IPSec Setup 26-19 Table 26-8 Menu 27.1.1.1 IKE Setup FIELD DESCRIPTION EX AMPLE Encryption Algorithm When DES is used for data communications, both sender and receiver mus t know the same secret key, which can be used to encrypt and decrypt the message or to generate and verif y a message authentication code.
Prestige 202H User’s Guide 26-20 VPN/IPSec Setup Table 26-8 Menu 27.1.1.1 IKE Setup FIELD DESCRIPTION EX AMPLE Perfect Forward Secrecy (PFS) Perfect Forward Secrecy (PFS) is disabled ( None ) by default in phase 2 IPSec SA setup. This allows faster IPSe c setup, but is not so secure.
Prestige 202H User’s Guide VPN/IPSec Setup 26-21 Figure 26-8 Menu 27.1.1.2 Manual Setup Table 26-10 Menu 27.1.1.2 Manual Setup FIELD DESCRIPTION EXA MPLE Active Protocol Press [SPACE BAR] to choos e from ESP Tunnel , ESP Transport , AH Tunnel or AH Transport and then press [ENTER].
Prestige 202H User’s Guide 26-22 VPN/IPSec Setup Table 26-10 Menu 27.1.1.2 Manual Setup FIELD DESCRIPTION EXA MPLE Key Enter the authentication key to be used by IPSec if applica ble. The key must be unique. Enter 16 characters for MD5 authentication and 2 0 characters for SHA-1 authentication.
Prestige 202H User’s Guide VPN/IPSec Setup 26-23 Table 26-11 Telecommuter and Head quarters Configura tion Example TELECOMMUTER HEADQUARTERS My IP Address : 0.0.0.0 (dynamic IP address assigned by the ISP) Public static IP address Secure Gateway IP A ddress : Public static IP address or domain name.
Prestige 202H User’s Guide 26-24 VPN/IPSec Setup 26.13.2 T elecommuters Using Unique VPN Rules Example With aggressiv e negotiatio n mode (see sect ion 26.10.1Negotia tion Mod e ) the Prestige can use t he ID types and contents t o distinguis h between VPN r ules.
Prestige 202H User’s Guide SA Monitor 27-1 Chapter 27 SA Monitor This chapter teaches you how to manage your SA s by using the SA Monitor in SMT menu 27.2. 27.1 SA Monitor Overview A Security Association (SA) is the group of security settings related to a specific VPN tunnel.
Prestige 202H User’s Guide 27-2 SA Monitor Table 27-1 Menu 27.2 SA Monitor FIELD DESCRIPTION EXAMPLE # This is the security association index numbe r. 1 Name This field displays th e identification name for this VPN policy. This name i s unique for each connection where the secure gateway IP address is a public static IP address.
Prestige 202H User’s Guide IPSec Log 28-1 Chapter 28 IPSec Log This chapter interprets common IPSec log messages. 28.1 IPSec Logs To view the IPSec and IKE connection log, type 3 in menu 27 and pr ess [ENT ER] to display the IPSec lo g as shown next.
Prestige 202H User’s Guide 28-2 IPSec Log Figure 28-2 Example VPN Responde r IPSec Log This menu is useful f or troubleshoot ing. A lo g index num ber, the dat e and tim e the log was creat ed and a log message a re displaye d. Double exclamation marks (!!) d enote an error or warning message.
Prestige 202H User’s Guide IPSec Log 28-3 Table 28-1 Sample IKE Key Exchange Logs LOG MESSAGE DESCRIPTION Start Phase 2: Quick Mode Phase 2 negoti ation is beg inning using Quick Mode. !! IKE Negotiation is in process The Prestige has begun nego tiation with the peer for the connection already, but the IKE key exchange has not finished yet.
Prestige 202H User’s Guide 28-4 IPSec Log The following table shows sample log me ssages during packet transmission. Table 28-2 Sample IPSec Logs During Packet Transmission LOG MESSAGE DESCRIPTION !! WAN IP changed to <IP> If the Prestige’s WAN IP changes, all configu red “My IP Addr” are changed to b “0.
Prestige 202H User’s Guide IPSec Log 28-5 Table 28-3 RFC-2408 ISAKMP Payload Ty pes LOG DISPLAY P AYLOA D TYPE NONCE Nonce NOTFY Notification DEL Delete VID Vendor ID.
Appendices and Index V Part V: Appendices and Index This part prov ides appendices and a n index of key terms..
.
Prestige 202H User’s Guide Troubleshooting A Appendix A T roubleshooting This Appendix covers potential problems and the corresponding remedies. Problems S t arting Up the Prestige Chart 1 T roubles.
Prestige 202H User’s Guide B Troubleshooting Problems With the ISDN Line Chart 2 Troubleshooting the ISDN Line PROBLEM CORRECTIVE ACTION The ISDN initialization failed. This problem occurs when yo u attempt to save the parameters entered in Menu 2, but receive the message, ‘Save successful, but Failed to initialize ISDN; Press [Esc] to exit’.
Prestige 202H User’s Guide Troubleshooting C Problems Connecting to a Remote Node or ISP Chart 4 Troubleshooting a Connectio n to a Remote Node or ISP PROBLEM CORRECTIVE ACTION Check Menu 24.1 to verify the line st atus. If it indica tes [down], then refer to the section on the line problems.
Prestige 202H User’s Guide D Troubleshooting Problems With Remote Management Chart 7 Troubleshooting Telnet PROBLEM CORRECTIVE ACTION When NAT is enabled: Use the Presti ge’s WAN IP address wh en configurin g from the WAN. Use the Presti ge’s LAN IP address when configuring from the LAN.
Prestige 202H User’s Guide Power Adaptor Specifications E Appendix B Power Adapter S pecifications NORTH AMERICAN PLUG STANDARDS AC Power Adapter Model DV-121AACS Input Power AC120Volts/60Hz/23W max Output Power AC12Volts/1.0A Power Consumption 8 W Safety Standards UL, CUL (UL 1310, CSA C2 2.
Prestige 202H User’s Guide F Power Adapter Specifications EUROPEAN PLUG STANDARDS AC Power Adapter Model DV-121AACCP-5716 Input Power AC230Volts/50Hz/100mA Output Power AC12Volts/1.
Prestige 202H User’s Guide Index G Index Number 4-Port Switch .................................................... 1-1 A Action for Matched Packets .......................... 15-11 Alert Sched ule ................................................ 14-5 Allocated Bu dget .
Prestige 202H User’s Guide H Index Customer S upport ............................................... vi D data compre ssion .............................................. 1-4 Data Filter ing ................................................... 18-1 Data Link Co nnection .
Prestige 202H User’s Guide Index I Activatin g........................................................... 13-1 Address Type ................................................. 15-1 2 Alerts..............................................................
Prestige 202H User’s Guide J Index Logging .............................................................1-3 Logging Option ...................................18-11, 18-15 Login ................................................................. 8-3 login scree n .
Prestige 202H User’s Guide Index K Remote N ode ........................ 8-1, 8-8, 20-2, 20-12 Remote Node Pr ofile............................................ 8-2 Remote Node Se tup ...................................... 8-1, 8-2 Repairs ..........
Prestige 202H User’s Guide L Index T Target Ut ility ...................................................... 8-7 TCP Maximum Incomplete ......... 14-8, 14-9, 14-11 TCP Securi ty ................................................. 12-10 TCP/IP..........
Een belangrijk punt na aankoop van elk apparaat ZyXEL Communications 202H (of zelfs voordat je het koopt) is om de handleiding te lezen. Dit moeten wij doen vanwege een paar simpele redenen:
Als u nog geen ZyXEL Communications 202H heb gekocht dan nu is een goed moment om kennis te maken met de basisgegevens van het product. Eerst kijk dan naar de eerste pagina\'s van de handleiding, die je hierboven vindt. Je moet daar de belangrijkste technische gegevens ZyXEL Communications 202H vinden. Op dit manier kan je controleren of het apparaat aan jouw behoeften voldoet. Op de volgende pagina's van de handleiding ZyXEL Communications 202H leer je over alle kenmerken van het product en krijg je informatie over de werking. De informatie die je over ZyXEL Communications 202H krijgt, zal je zeker helpen om een besluit over de aankoop te nemen.
In een situatie waarin je al een beziter van ZyXEL Communications 202H bent, maar toch heb je de instructies niet gelezen, moet je het doen voor de hierboven beschreven redenen. Je zult dan weten of je goed de alle beschikbare functies heb gebruikt, en of je fouten heb gemaakt die het leven van de ZyXEL Communications 202H kunnen verkorten.
Maar de belangrijkste taak van de handleiding is om de gebruiker bij het oplossen van problemen te helpen met ZyXEL Communications 202H . Bijna altijd, zal je daar het vinden Troubleshooting met de meest voorkomende storingen en defecten #MANUAl# samen met de instructies over hun opplosinge. Zelfs als je zelf niet kan om het probleem op te lossen, zal de instructie je de weg wijzen naar verdere andere procedure, bijv. door contact met de klantenservice of het dichtstbijzijnde servicecentrum.
