ZyXEL Prestige 660HW-61 External User Manuals

Table of Contents

• P660H/HW

  1
• Copyright

  3
• Federal Communications Commission (FCC) Interference Statement

  4
• ZyXEL Limited Warranty

  5
• Customer Support

  6
• Table of Contents

  7
• List of Figures

  23
• List of Tables

  31
• Preface

  37
• Introduction to DSL

  39
• 1. Getting To Know Your Prestige

  41
  • 1.1 Introducing the Prestige

    41
    • 1.1.1 Features of the Prestige

      42
    • 1.1.2 Applications for the Prestige

      47
      • 1.1.2.1 Internet Access

        47
    • 1.1.3 Firewall for Secure Broadband Internet Access

      48
      • 1.1.3.1 LAN to LAN Application

        48
    • 1.1.4 Prestige Hardware Installation and Connection

      48
• 2. Introducing the Web Configurator

  49
  • 2.1 Web Configurator Overview

    49
    • 2.1.1 Accessing the Prestige Web Configurator

      49
    • 2.1.2 Resetting the Prestige

      50
      • 2.1.2.1 Using the Reset Button

        50
    • 2.1.3 Navigating the Prestige Web Configurator

      51
• 3. Wizard Setup for Internet Access

  55
  • 3.1 Introduction

    55
    • 3.1.1 Encapsulation

      55
      • 3.1.1.1 ENET ENCAP

        55
      • 3.1.1.2 PPP over Ethernet

        55
      • 3.1.1.3 PPPoA

        55
      • 3.1.1.4 RFC 1483

        56
    • 3.1.2 Multiplexing

      56
      • 3.1.2.1 VC-based Multiplexing

        56
      • 3.1.2.2 LLC-based Multiplexing

        56
    • 3.1.3 VPI and VCI

      56
    • 3.1.4 Internet Access Wizard Setup: First Screen

      56
  • 3.2 IP Address and Subnet Mask

    57
    • 3.2.1 IP Address Assignment

      58
      • 3.2.1.1 IP Assignment with PPPoA or PPPoE Encapsulation

        58
      • 3.2.1.2 IP Assignment with RFC 1483 Encapsulation

        58
      • 3.2.1.3 IP Assignment with ENET ENCAP Encapsulation

        58
      • 3.2.1.4 Private IP Addresses

        59
    • 3.2.2 Nailed-Up Connection (PPP)

      59
    • 3.2.3 NAT

      59
    • 3.2.4 Internet Access Wizard Setup: Second Screen

      59
    • 3.2.5 DHCP Setup

      63
      • 3.2.5.1 IP Pool Setup

        63
    • 3.2.6 Internet Access Wizard Setup: Third Screen

      63
    • 3.2.7 Internet Access Wizard Setup: Connection Test

      65
      • 3.2.7.1 Test Your Internet Connection

        66
• 4. Wizard Setup for Media Bandwidth Management

  67
  • 4.1 Introduction

    67
    • 4.1.1 Predefined Media Bandwidth Management Services

      67
  • 4.2 Media Bandwidth Management Setup: First Screen

    68
  • 4.3 Media Bandwidth Mgnt. Wizard Setup: Second Screen

    69
  • 4.4 Media Bandwidth Mgnt. Wizard Setup: Finish

    70
• 5. Password Setup

  71
  • 5.1 Password Overview

    71
    • 5.1.1 Configuring Password

      71
• 6. LAN Setup

  73
  • 6.1 LAN Overview

    73
    • 6.1.1 LANs, WANs and the Prestige

      73
  • 6.2 DNS Server Address

    74
  • 6.3 DNS Server Address Assignment

    74
  • 6.4 LAN TCP/IP

    75
    • 6.4.1 Factory LAN Defaults

      75
    • 6.4.2 IP Address and Subnet Mask

      75
    • 6.4.3 RIP Setup

      75
    • 6.4.4 Multicast

      76
  • 6.5 Any IP

    76
    • 6.5.1 How Any IP Works

      77
  • 6.6 Configuring LAN

    78
  • 6.7 Configuring Static DHCP

    79
• 7. Wireless LAN Setup

  81
  • 7.1 Introduction

    81
    • 7.1.1 Additional Installation Requirements for Using 802.1x

      81
    • 7.1.2 Channel

      81
    • 7.1.3 ESS ID

      81
    • 7.1.4 RTS/CTS

      82
    • 7.1.5 Fragmentation Threshold

      83
  • 7.2 Levels of Security

    83
  • 7.3 Data Encryption with WEP

    84
  • 7.4 Configuring Wireless LAN

    84
  • 7.5 Configuring MAC Filter

    86
  • 7.6 Network Authentication

    88
    • 7.6.1 EAP

      88
      • 7.6.1.1 RADIUS

        88
      • 7.6.1.2 Types of RADIUS Messages

        89
    • 7.6.2 EAP Authentication Overview

      89
  • 7.7 Introduction to WPA

    90
    • 7.7.1 User Authentication

      90
    • 7.7.2 Encryption

      90
  • 7.8 WPA-PSK Application Example

    91
  • 7.9 WPA with RADIUS Application Example

    92
  • 7.10 Security Parameters Summary

    93
  • 7.11 Wireless Client WPA Supplicants

    94
  • 7.12 Configuring 802.1x and WPA

    94
    • 7.12.1 Authentication Required: 802.1x

      95
    • 7.12.2 Authentication Required: WPA

      96
    • 7.12.3 Authentication Required: WPA-PSK

      98
  • 7.13 Configuring Local User Authentication

    99
  • 7.14 Configuring RADIUS

    100
  • 7.15 OTIST

    101
    • 7.15.1 Activating OTIST

      102
• 8. WAN Setup

  105
  • 8.1 WAN Overview

    105
  • 8.2 Metric

    105
  • 8.3 PPPoE Encapsulation

    106
  • 8.4 Traffic Shaping

    106
  • 8.5 Zero Configuration Internet Access

    107
  • 8.6 Configuring WAN Setup

    107
  • 8.7 Traffic Redirect

    110
  • 8.8 Configuring WAN Backup

    111
• 9. Network Address Translation (NAT) Screens

  115
  • 9.1 NAT Overview

    115
    • 9.1.1 NAT Definitions

      115
    • 9.1.2 What NAT Does

      116
    • 9.1.3 How NAT Works

      116
    • 9.1.4 NAT Application

      117
    • 9.1.5 NAT Mapping Types

      118
  • 9.2 SUA (Single User Account) Versus NAT

    119
  • 9.3 SUA Server

    119
    • 9.3.1 Default Server IP Address

      119
    • 9.3.2 Port Forwarding: Services and Port Numbers

      119
    • 9.3.3 Configuring Servers Behind SUA (Example)

      120
  • 9.4 Selecting the NAT Mode

    120
  • 9.5 Configuring SUA Server

    121
  • 9.6 Configuring Address Mapping

    123
  • 9.7 Editing an Address Mapping Rule

    124
• 10. Dynamic DNS Setup

  127
  • 10.1 Dynamic DNS

    127
    • 10.1.1 DYNDNS Wildcard

      127
  • 10.2 Configuring Dynamic DNS

    127
• 11. Time and Date

  129
  • 11.1 Configuring Time and Date

    129
• 12. Firewalls

  131
  • 12.1 Firewall Overview

    131
  • 12.2 Types of Firewalls

    131
    • 12.2.1 Packet Filtering Firewalls

      131
    • 12.2.2 Application-level Firewalls

      131
    • 12.2.3 Stateful Inspection Firewalls

      132
  • 12.3 Introduction to ZyXEL’s Firewall

    132
    • 12.3.1 Denial of Service Attacks

      133
  • 12.4 Denial of Service

    133
    • 12.4.1 Basics

      133
    • 12.4.2 Types of DoS Attacks

      134
      • 12.4.2.1 ICMP Vulnerability

        136
      • 12.4.2.2 Illegal Commands (NetBIOS and SMTP)

        136
      • 12.4.2.3 Traceroute

        137
  • 12.5 Stateful Inspection

    137
    • 12.5.1 Stateful Inspection Process

      138
    • 12.5.2 Stateful Inspection and the Prestige

      139
    • 12.5.3 TCP Security

      139
    • 12.5.4 UDP/ICMP Security

      140
    • 12.5.5 Upper Layer Protocols

      140
  • 12.6 Guidelines for Enhancing Security with Your Firewall

    140
    • 12.6.1 Security In General

      141
  • 12.7 Packet Filtering Vs Firewall

    142
    • 12.7.1 Packet Filtering:

      142
      • 12.7.1.1 When To Use Filtering

        142
    • 12.7.2 Firewall

      142
      • 12.7.2.1 When To Use The Firewall

        142
• 13. Firewall Configuration

  145
  • 13.1 Access Methods

    145
  • 13.2 Firewall Policies Overview

    145
  • 13.3 Rule Logic Overview

    146
    • 13.3.1 Rule Checklist

      146
    • 13.3.2 Security Ramifications

      146
    • 13.3.3 Key Fields For Configuring Rules

      147
      • 13.3.3.1 Action

        147
      • 13.3.3.2 Service

        147
      • 13.3.3.3 Source Address

        147
      • 13.3.3.4 Destination Address

        147
  • 13.4 Connection Direction Example

    147
    • 13.4.1 LAN to WAN Rules

      148
    • 13.4.2 WAN to LAN Rules

      148
    • 13.4.3 Alerts

      149
  • 13.5 Configuring Basic Firewall Settings

    149
  • 13.6 Rule Summary

    150
    • 13.6.1 Configuring Firewall Rules

      152
  • 13.7 Customized Services

    155
  • 13.8 Creating/Editing A Customized Service

    155
  • 13.9 Example Firewall Rule

    156
  • 13.10 Predefined Services

    160
  • 13.11 Anti-Probing

    162
  • 13.12 Configuring Attack Alert

    163
    • 13.12.1 Threshold Values

      164
    • 13.12.2 Half-Open Sessions

      164
      • 13.12.2.1 TCP Maximum Incomplete and Blocking Time

        164
• 14. Content Filtering

  167
  • 14.1 Content Filtering Overview

    167
  • 14.2 Configuring Keyword Blocking

    167
  • 14.3 Configuring the Schedule

    168
  • 14.4 Configuring Trusted Computers

    169
• 15. Remote Management Configuration

  171
  • 15.1 Remote Management Overview

    171
    • 15.1.1 Remote Management Limitations

      171
    • 15.1.2 Remote Management and NAT

      172
    • 15.1.3 System Timeout

      172
  • 15.2 Telnet

    172
  • 15.3 FTP

    172
  • 15.4 Web

    173
  • 15.5 Configuring Remote Management

    173
• 16. Universal Plug-and-Play (UPnP)

  175
  • 16.1 Introducing Universal Plug and Play

    175
    • 16.1.1 How do I know if I'm using UPnP?

      175
    • 16.1.2 NAT Traversal

      175
    • 16.1.3 Cautions with UPnP

      175
  • 16.2 UPnP and ZyXEL

    176
    • 16.2.1 Configuring UPnP

      176
  • 16.3 Installing UPnP in Windows Example

    177
  • 16.4 Using UPnP in Windows XP Example

    181
• 17. Logs Screens

  189
  • 17.1 Logs Overview

    189
    • 17.1.1 Alerts and Logs

      189
  • 17.2 Configuring Log Settings

    189
  • 17.3 Displaying the Logs

    191
  • 17.4 SMTP Error Messages

    192
    • 17.4.1 Example E-mail Log

      193
• 18. Media Bandwidth Management Advanced Setup

  195
  • 18.1 Bandwidth Management Advanced Setup Overview

    195
  • 18.2 Bandwidth Classes and Filters

    195
  • 18.3 Proportional Bandwidth Allocation

    196
  • 18.4 Bandwidth Management Usage Examples

    196
    • 18.4.1 Application-based Bandwidth Management Example

      196
    • 18.4.2 Subnet-based Bandwidth Management Example

      196
    • 18.4.3 Application and Subnet-based Bandwidth Management Example

      197
  • 18.5 Scheduler

    198
    • 18.5.1 Priority-based Scheduler

      198
    • 18.5.2 Fairness-based Scheduler

      198
  • 18.6 Maximize Bandwidth Usage

    198
    • 18.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic

      198
    • 18.6.2 Maximize Bandwidth Usage Example

      199
  • 18.7 Bandwidth Borrowing

    200
    • 18.7.1 Bandwidth Borrowing Example

      200
    • 18.7.2 Maximize Bandwidth Usage With Bandwidth Borrowing

      201
  • 18.8 Configuring Summary

    201
  • 18.9 Configuring Class Setup

    203
    • 18.9.1 Media Bandwidth Management Class Configuration

      204
    • 18.9.2 Media Bandwidth Management Statistics

      206
  • 18.10 Bandwidth Monitor

    207
• 19. Maintenance

  209
  • 19.1 Maintenance Overview

    209
  • 19.2 System Status Screen

    209
    • 19.2.1 System Statistics

      211
  • 19.3 DHCP Table Screen

    213
  • 19.4 Any IP Table Screen

    214
  • 19.5 Wireless Screen

    214
    • 19.5.1 Association List

      214
  • 19.6 Diagnostic Screens

    215
    • 19.6.1 Diagnostic General Screen

      215
    • 19.6.2 Diagnostic DSL Line Screen

      216
  • 19.7 Firmware Screen

    218
• 20. Introducing the SMT

  221
  • 20.1 SMT Introduction

    221
    • 20.1.1 Procedure for SMT Configuration via Telnet

      221
    • 20.1.2 Entering Password

      221
    • 20.1.3 Prestige SMT Menu Overview

      222
  • 20.2 Navigating the SMT Interface

    222
    • 20.2.1 System Management Terminal Interface Summary

      224
  • 20.3 Changing the System Password

    224
• 21. Menu 1 General Setup

  227
  • 21.1 General Setup

    227
  • 21.2 Procedure To Configure Menu 1

    227
    • 21.2.1 Procedure to Configure Dynamic DNS

      228
• 22. Menu 2 WAN Backup Setup

  231
  • 22.1 Introduction to WAN Backup Setup

    231
  • 22.2 Configuring Dial Backup in Menu 2

    231
    • 22.2.1 Traffic Redirect Setup

      232
• 23. Menu 3 LAN Setup

  235
  • 23.1 LAN Setup

    235
    • 23.1.1 General Ethernet Setup

      235
  • 23.2 Protocol Dependent Ethernet Setup

    236
  • 23.3 CP/IP Ethernet Setup and DHCP

    236
• 24. Wireless LAN Setup

  239
  • 24.1 Wireless LAN Overview

    239
  • 24.2 Wireless LAN Setup

    239
    • 24.2.1 Wireless LAN MAC Address Filter

      240
• 25. Internet Access

  243
  • 25.1 Internet Access Overview

    243
  • 25.2 IP Policies

    243
  • 25.3 IP Alias

    243
  • 25.4 IP Alias Setup

    244
  • 25.5 Route IP Setup

    245
  • 25.6 Internet Access Configuration

    246
• 26. Remote Node Configuration

  249
  • 26.1 Remote Node Setup Overview

    249
  • 26.2 Remote Node Setup

    249
    • 26.2.1 Remote Node Profile

      249
    • 26.2.2 Encapsulation and Multiplexing Scenarios

      250
      • 26.2.2.1 Scenario 1: One VC, Multiple Protocols

        250
      • 26.2.2.2 Scenario 2: One VC, One Protocol (IP)

        250
      • 26.2.2.3 Scenario 3: Multiple VCs

        250
    • 26.2.3 Outgoing Authentication Protocol

      252
  • 26.3 Remote Node Network Layer Options

    253
    • 26.3.1 My WAN Addr Sample IP Addresses

      254
  • 26.4 Remote Node Filter

    255
  • 26.5 Editing ATM Layer Options

    256
    • 26.5.1 VC-based Multiplexing (non-PPP Encapsulation)

      256
    • 26.5.2 LLC-based Multiplexing or PPP Encapsulation

      256
    • 26.5.3 Advance Setup Options

      257
• 27. Static Route Setup

  259
  • 27.1 IP Static Route Overview

    259
  • 27.2 Configuration

    259
• 28. Bridging Setup

  263
  • 28.1 Bridging in General

    263
  • 28.2 Bridge Ethernet Setup

    263
    • 28.2.1 Remote Node Bridging Setup

      263
    • 28.2.2 Bridge Static Route Setup

      265
• 29. Network Address Translation (NAT)

  267
  • 29.1 Using NAT

    267
    • 29.1.1 SUA (Single User Account) Versus NAT

      267
  • 29.2 Applying NAT

    267
  • 29.3 NAT Setup

    269
    • 29.3.1 Address Mapping Sets

      269
      • 29.3.1.1 SUA Address Mapping Set

        270
      • 29.3.1.2 User-Defined Address Mapping Sets

        271
      • 29.3.1.3 Ordering Your Rules

        272
  • 29.4 Configuring a Server behind NAT

    273
  • 29.5 General NAT Examples

    274
    • 29.5.1 Example 1: Internet Access Only

      275
    • 29.5.2 Example 2: Internet Access with an Inside Server

      275
    • 29.5.3 Example 3: Multiple Public IP Addresses With Inside Servers

      276
    • 29.5.4 Example 4: NAT Unfriendly Application Programs

      280
• 30. Enabling the Firewall

  283
  • 30.1 Remote Management and the Firewall

    283
  • 30.2 Access Methods

    283
  • 30.3 Enabling the Firewall

    283
• 31. Filter Configuration

  285
  • 31.1 About Filtering

    285
    • 31.1.1 The Filter Structure of the Prestige

      286
  • 31.2 Configuring a Filter Set for the Prestige

    287
  • 31.3 Filter Rules Summary Menus

    288
  • 31.4 Configuring a Filter Rule

    289
    • 31.4.1 TCP/IP Filter Rule

      290
    • 31.4.2 Generic Filter Rule

      292
  • 31.5 Filter Types and NAT

    294
  • 31.6 Example Filter

    294
  • 31.7 Applying Filters and Factory Defaults

    296
    • 31.7.1 Ethernet Traffic

      297
    • 31.7.2 Remote Node Filters

      297
• 32. SNMP Configuration

  299
  • 32.1 About SNMP

    299
  • 32.2 Supported MIBs

    300
  • 32.3 SNMP Configuration

    300
  • 32.4 SNMP Traps

    301
• 33. System Security

  303
  • 33.1 System Security

    303
    • 33.1.1 System Password

      303
    • 33.1.2 Configuring External RADIUS Server

      303
    • 33.1.3 IEEE802.1x

      305
  • 33.2 Creating User Accounts on the Prestige

    307
• 34. System Information and Diagnosis

  309
  • 34.1 Overview

    309
  • 34.2 System Status

    309
  • 34.3 System Information

    311
    • 34.3.1 System Information

      311
    • 34.3.2 Console Port Speed

      312
  • 34.4 Log and Trace

    313
    • 34.4.1 Viewing Error Log

      313
    • 34.4.2 Syslog and Accounting

      314
  • 34.5 Diagnostic

    316
• 35. Firmware and Configuration File Maintenance

  319
  • 35.1 Filename Conventions

    319
  • 35.2 Backup Configuration

    320
    • 35.2.1 Backup Configuration

      320
    • 35.2.2 Using the FTP Command from the Command Line

      321
    • 35.2.3 Example of FTP Commands from the Command Line

      321
    • 35.2.4 GUI-based FTP Clients

      322
    • 35.2.5 TFTP and FTP over WAN Management Limitations

      322
    • 35.2.6 Backup Configuration Using TFTP

      323
    • 35.2.7 TFTP Command Example

      323
    • 35.2.8 GUI-based TFTP Clients

      323
  • 35.3 Restore Configuration

    324
    • 35.3.1 Restore Using FTP

      324
    • 35.3.2 Restore Using FTP Session Example

      325
  • 35.4 Uploading Firmware and Configuration Files

    326
    • 35.4.1 Firmware File Upload

      326
    • 35.4.2 Configuration File Upload

      326
    • 35.4.3 FTP File Upload Command from the DOS Prompt Example

      327
    • 35.4.4 FTP Session Example of Firmware File Upload

      328
    • 35.4.5 TFTP File Upload

      328
    • 35.4.6 TFTP Upload Command Example

      329
• 36. System Maintenance

  331
  • 36.1 Command Interpreter Mode

    331
  • 36.2 Call Control Support

    332
    • 36.2.1 Budget Management

      332
  • 36.3 Time and Date Setting

    333
    • 36.3.1 Resetting the Time

      334
• 37. Remote Management

  337
  • 37.1 Remote Management Overview

    337
  • 37.2 Remote Management

    337
    • 37.2.1 Remote Management Setup

      337
    • 37.2.2 Remote Management Limitations

      338
  • 37.3 Remote Management and NAT

    339
  • 37.4 System Timeout

    339
• 38. IP Policy Routing

  341
  • 38.1 IP Policy Routing Overview

    341
  • 38.2 Benefits of IP Policy Routing

    341
  • 38.3 Routing Policy

    341
  • 38.4 IP Routing Policy Setup

    342
  • 38.5 Applying an IP Policy

    345
    • 38.5.1 Ethernet IP Policies

      345
  • 38.6 IP Policy Routing Example

    346
• 39. Call Scheduling

  351
  • 39.1 Introduction

    351
• 40. Internal SPTGEN

  355
  • 40.1 Internal SPTGEN Overview

    355
  • 40.2 The Configuration Text File Format

    355
    • 40.2.1 Internal SPTGEN File Modification - Important Points to Remember

      356
  • 40.3 Internal SPTGEN FTP Download Example

    356
  • 40.4 Internal SPTGEN FTP Upload Example

    357
• 41. Troubleshooting

  359
  • 41.1 Problems Starting Up the Prestige

    359
  • 41.2 Problems with the LAN LED

    359
  • 41.3 Problems with the DSL LED

    360
  • 41.4 Problems with the LAN Interface

    360
  • 41.5 Problems with the WAN Interface

    360
  • 41.6 Problems with Internet Access

    361
  • 41.7 Problems with the Password

    361
  • 41.8 Problems with the Web Configurator

    362
  • 41.9 Problems with Remote Management

    362
• A. Splitters and Microfilters

  363
• B. Setting up Your Computer’s IP Address

  367
• C. IP Subnetting

  379
• D. PPPoE

  387
• E. Virtual Circuit Topology

  389
• F. Wireless LAN and IEEE 802.11

  391
• G. Wireless LAN With IEEE 802.1x

  395
• H. Types of EAP Authentication

  397
• I. Antenna Selection and Positioning Recommendation

  399
• J. Example Internal SPTGEN Screens

  401
• K. Command Interpreter

  423
• L. Firewall Commands

  425
  • 41.10 Sys Firewall Commands

    425
• M. Brute-Force Password Guessing Protection

  427
• N. Boot Commands

  429
• O. Log Descriptions

  431
• Index

  443
  • A

    443
  • B

    443
  • C

    443
  • D

    444
  • E

    444
  • F

    445
  • G

    445
  • H

    445
  • I

    446
  • K

    446
  • L

    446
  • M

    447
  • N

    447
  • O

    447
  • P

    447
  • Q

    448
  • R

    448
  • S

    448
  • T

    449
  • U

    450
  • V

    450
  • W

    450
  • X

    450
  • Z

    450