User ManualTable of ContentsCopyright2Disclaimer2Trademarks2Federal Communications Commission (FCC) Interference Statement3Information for Canadian Users4ZyXEL Limited Warranty7Customer Support8Table of Contents9List of Figures21List Of Tables25Preface27About Your Router27About This User's Manual27Structure of this Manual27Related Documentation28Syntax Conventions28Getting Started29Getting to Know Your Prestige31The Prestige 312 Broadband Security Gateway31Features of The Prestige 31231Applications for Prestige 31233Broadband Internet Access via Cable or xDSL Modem33Hardware Installation & Initial Setup35Front Panel LEDs and Back Panel Ports35Front Panel LEDs35Prestige 312 Rear Panel and Connections36Additional Installation Requirements37Housing38Power Up Your Prestige38Navigating the SMT Interface39Main Menu40System Management Terminal Interface Summary40Changing the System Password41Resetting the Prestige41General Setup42Dynamic DNS42Configuring Dynamic DNS43WAN Setup44LAN Setup45LAN Port Filter Setup46Internet Access47TCP/IP and DHCP for LAN47Factory LAN Defaults47IP Address and Subnet Mask47Private IP Addresses48RIP Setup48DHCP Configuration49IP Multicast49IP Alias50TCP/IP and DHCP Ethernet Setup50IP Alias Setup53Internet Access Setup54Ethernet Encapsulation54PPTP Encapsulation55Configuring the PPTP Client56PPPoE Encapsulation56Basic Setup Complete58Advanced Applications59Remote Node Setup60Remote Node Profile60Ethernet Encapsulation60PPPoE Encapsulation62PPTP Encapsulation63Editing TCP/IP Options (with Ethernet Encapsulation)65Editing TCP/IP Options (with PPTP Encapsulation)66Editing TCP/IP Options (with PPPoE Encapsulation)68Remote Node Filter68IP Static Route Setup70IP Static Route Setup71Network Address Translation (NAT)74Introduction74NAT Definitions74What NAT Does74How NAT works75NAT Mapping Types75SUA (Single User Account) Versus NAT76NAT Application77SMT Menus77Applying NAT in the SMT Menus77Configuring NAT79Address Mapping Sets and NAT Server Sets:79NAT Server Sets83Multiple Servers behind NAT83Configuring a Server behind NAT85Examples86Internet Access Only86Example 2 – Internet Access with an Inside Server88Example 3 – General Case88Example 4 –NAT Unfriendly Application Programs92Advanced Management94Filter Configuration96About Filtering96The Filter Structure of the Prestige97Configuring a Filter Set99Filter Rules Summary Menu101Configuring a Filter Rule102TCP/IP Filter Rule102Generic Filter Rule107Example Filter108Filter Types and NAT111Firewall112Applying a Filter and Factory Defaults112LAN traffic112Remote Node Filters113SNMP Configuration114About SNMP114Configuring SNMP114System Information & Diagnosis116System Status117System Information and Console Port Speed119System Information119Console Port Speed120Log and Trace120Viewing Error Log121UNIX Syslog121Call-Triggering Packet125Diagnostic125WAN DHCP126Transferring Files128Filename conventions128Firmware Development129Backup Configuration129Restore Configuration130Upload Firmware130Uploading the Router Firmware130Uploading Router Configuration File131TFTP File Transfer132Example TFTP Command133FTP File Transfer134Using the FTP command from the DOS Prompt135System Maintenance & Information138Command Interpreter Mode138Call Control Support139Budget Management139Call History140Time and Date Setting141How often does the Prestige update the time?141Remote Management Setup142Boot Commands144Telnet Configuration and Capabilities146About Telnet Configuration146Telnet Under NAT146Telnet Capabilities146Single Administrator146System Timeout147Telnet Under the Firewall147Firewall and Content Filters148What is a Firewall149Types of Firewalls149Packet Filtering Firewalls149Application-level Firewalls149Stateful Inspection firewalls150Introduction to ZyXEL’s Firewall150Denial of Service151Basics151Types of DoS attacks152Stateful Inspection154Stateful Inspection Process155Stateful Inspection & the Prestige156TCP Security156UDP/ICMP Security157Upper Layer Protocols157Guidelines For Enhancing Security With Your Firewall157Security In General158Introducing the Prestige Firewall161SMT Menus161View Firewall Log162Attack Types162The Big Picture – Filtering, Firewall and NAT165Packet Filtering Vs Firewall166Packet Filtering:166Firewall:167Introducing the Prestige Web Configurator169Web Configurator Login and Welcome Screens169Enabling the Firewall170E-Mail171What are Alerts?171What are Logs?172SMTP Error Messages174Example E-Mail Log174Attack Alert175Threshold Values:176Half-Open Sessions176Creating Custom Rules181Rules Overview181Rule Logic Overview181Rule Checklist181Security Ramifications182Key Fields For Configuring Rules182Connection Direction183LAN to WAN Rules183WAN to LAN Rules183Services Supported184Rule Summary186Creating/Editing Firewall Rules188Source & Destination Addresses190Timeout192Factors Influencing Choices for Timeout Values:192Custom Ports195Introduction195Creating/Editing A Custom Port196Logs199Log Screen199Example Firewall Rules203Examples203Example 1 - Firewall Rule To Allow Web Service From The Internet203Example 2 – Small Office With Mail, FTP and Web Servers208Example 3: DHCP Negotiation and Syslog Connection from the Internet213Content Filtering217Restrict Web Features217ActiveX217Java217Cookies218Web Proxy218Blocking URLs218Content Filtering Using the Web Configurator218Troubleshooting, Appendices, Glossary and Index220Troubleshooting222Problems Starting Up the Prestige222Problems with the LAN Interface223Problems with the WAN interface223Problems with Internet Access224Problems with the Firewall224Appendix A PPPoE226Appendix B PPTP228What is PPTP?228How can we transport PPP frames from a PC to a broadband modem over Ethernet?228PPTP and the Prestige228PPTP Protocol Overview228Control & PPP connections229Appendix C Hardware Specifications230Appendix D Important Safety Instructions231Appendix E Firewall CLI Commands232Appendix F Power Adapter Specs237Index250Size: 1.84 MBPages: 254Language: EnglishOpen manual
