用户手册 — ZyXEL ADSL Prestige 2602R-61

目录

• Prestige 2602R Series

  1
• Copyright

  3
• Federal Communications Commission (FCC) Interference Statement

  4
• Safety Warnings

  5
• ZyXEL Limited Warranty

  6
• Customer Support

  7
• Table of Contents

  9
• List of Figures

  25
• List of Tables

  33
• Preface

  37
• Introduction to DSL

  39
• 1. Getting To Know Your Prestige

  41
  • 1.1 Introducing the Prestige

    41
    • 1.1.1 Features of the Prestige

      42
  • 1.2 Applications for the Prestige

    45
    • 1.2.1 Internet Access

      46
      • 1.2.1.1 Internet Single User Account

        46
    • 1.2.2 Making Calls via Internet Telephony Service Provider

      46
    • 1.2.3 Make Peer-to-peer Calls

      47
    • 1.2.4 Firewall for Secure Broadband Internet Access

      47
    • 1.2.5 LAN to LAN Application

      48
    • 1.2.6 Front Panel LEDs

      48
• 2. Introducing the Web Configurator

  51
  • 2.1 Web Configurator Overview

    51
    • 2.1.1 Accessing the Prestige Web Configurator

      51
    • 2.1.2 Resetting the Prestige

      52
      • 2.1.2.1 Using The Reset Button

        52
    • 2.1.3 Navigating the Prestige Web Configurator

      53
• 3. Wizard Setup

  57
  • 3.1 Connection Setup

    57
    • 3.1.1 Internet Access Wizard Setup: First Screen

      57
    • 3.1.2 Internet Access Wizard Setup: Second Screen

      58
    • 3.1.3 Internet Access Wizard Setup: Voice Configuration

      62
    • 3.1.4 Internet Access Wizard Setup: Fourth Screen

      63
    • 3.1.5 Internet Access Wizard Setup: Connection Test

      65
      • 3.1.5.1 Test Your Internet Connection

        66
  • 3.2 Media Bandwidth Management

    66
    • 3.2.1 Predefined Media Bandwidth Management Services

      67
    • 3.2.2 Media Bandwidth Mgnt. Wizard Setup: First Screen

      67
    • 3.2.3 Media Bandwidth Mgnt. Wizard Setup: Second Screen

      68
    • 3.2.4 Media Bandwidth Mgnt. Wizard Setup: Finish

      69
  • 3.3 Password Setup

    70
    • 3.3.1 Configuring Password

      70
• 4. LAN Setup

  71
  • 4.1 LAN Overview

    71
    • 4.1.1 LANs, WANs and the Prestige

      71
    • 4.1.2 DHCP Setup

      71
      • 4.1.2.1 IP Pool Setup

        72
  • 4.2 DNS Server Address

    72
  • 4.3 DNS Server Address Assignment

    72
  • 4.4 LAN TCP/IP

    73
    • 4.4.1 Factory LAN Defaults

      73
  • 4.5 LAN TCP/IP

    73
    • 4.5.1 IP Address and Subnet Mask

      73
      • 4.5.1.1 Private IP Addresses

        74
    • 4.5.2 RIP Setup

      74
    • 4.5.3 Multicast

      75
  • 4.6 Any IP

    75
    • 4.6.1 How Any IP Works

      76
  • 4.7 Configuring LAN

    77
• 5. WAN Setup

  79
  • 5.1 WAN Overview

    79
    • 5.1.1 Encapsulation

      79
      • 5.1.1.1 ENET ENCAP

        79
      • 5.1.1.2 PPP over Ethernet

        79
      • 5.1.1.3 PPPoA

        79
      • 5.1.1.4 RFC 1483

        80
    • 5.1.2 Multiplexing

      80
      • 5.1.2.1 VC-based Multiplexing

        80
      • 5.1.2.2 LLC-based Multiplexing

        80
    • 5.1.3 VPI and VCI

      80
    • 5.1.4 IP Address Assignment

      80
      • 5.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation

        80
      • 5.1.4.2 IP Assignment with RFC 1483 Encapsulation

        81
      • 5.1.4.3 IP Assignment with ENET ENCAP Encapsulation

        81
    • 5.1.5 Nailed-Up Connection (PPP)

      81
  • 5.2 Metric

    81
  • 5.3 PPPoE Encapsulation

    82
  • 5.4 Traffic Shaping

    82
  • 5.5 Zero Configuration Internet Access

    83
  • 5.6 Configuring WAN Setup

    83
  • 5.7 Traffic Redirect

    86
  • 5.8 Configuring WAN Backup

    87
• 6. Network Address Translation (NAT) Screens

  91
  • 6.1 NAT Overview

    91
    • 6.1.1 NAT Definitions

      91
    • 6.1.2 What NAT Does

      92
    • 6.1.3 How NAT Works

      92
    • 6.1.4 NAT Application

      93
    • 6.1.5 NAT Mapping Types

      93
  • 6.2 SUA (Single User Account) Versus NAT

    94
  • 6.3 SUA Server

    95
    • 6.3.1 Default Server IP Address

      95
    • 6.3.2 Port Forwarding: Services and Port Numbers

      95
    • 6.3.3 Configuring Servers Behind SUA (Example)

      96
  • 6.4 Selecting the NAT Mode

    96
  • 6.5 Configuring SUA Server

    97
  • 6.6 Configuring Address Mapping

    99
  • 6.7 Editing an Address Mapping Rule

    100
• 7. Introduction to VoIP

  103
  • 7.1 Introduction to VoIP

    103
  • 7.2 SIP

    103
    • 7.2.1 SIP Identities

      103
      • 7.2.1.1 SIP Number

        103
      • 7.2.1.2 SIP Service Domain

        104
    • 7.2.2 SIP Call Progression

      104
    • 7.2.3 SIP Servers

      104
      • 7.2.3.1 SIP User Agent

        105
      • 7.2.3.2 SIP Proxy Server

        105
      • 7.2.3.3 SIP Redirect Server

        106
      • 7.2.3.4 SIP Register Server

        106
    • 7.2.4 RTP

      106
  • 7.3 SIP ALG

    107
  • 7.4 Pulse Code Modulation

    107
  • 7.5 Voice Coding

    107
    • 7.5.1 G.711

      107
    • 7.5.2 G.729

      107
  • 7.6 PSTN Call Setup Signaling

    107
  • 7.7 MWI (Message Waiting Indication)

    108
• 8. Voice Screens

  109
  • 8.1 Voice Screens Introduction

    109
  • 8.2 SIP Settings Configuration

    109
  • 8.3 Advanced Voice Settings Configuration

    110
  • 8.4 Quality of Service (QoS)

    113
    • 8.4.1 Type Of Service (ToS)

      113
    • 8.4.2 DiffServ

      113
      • 8.4.2.1 DSCP and Per-Hop Behavior

        113
    • 8.4.3 VLAN

      113
  • 8.5 QoS Configuration

    114
  • 8.6 Phone

    115
    • 8.6.1 Voice Activity Detection/Silence Suppression

      115
    • 8.6.2 Comfort Noise Generation

      115
    • 8.6.3 Echo Cancellation

      115
  • 8.7 Phone Configuration

    115
  • 8.8 Speed Dial

    117
    • 8.8.1 Peer-to-Peer Calls

      117
  • 8.9 Speed Dial Configuration

    117
  • 8.10 Supplementary Phone Services Overview

    119
    • 8.10.1 The Flash Key

      119
    • 8.10.2 Europe Type Supplementary Phone Services

      120
      • 8.10.2.1 European Call Hold

        120
      • 8.10.2.2 European Call Waiting

        120
      • 8.10.2.3 European Call Transfer

        121
      • 8.10.2.4 European Three-Way Conference

        121
    • 8.10.3 USA Type Supplementary Services

      121
      • 8.10.3.1 USA Call Hold

        122
      • 8.10.3.2 USA Call Waiting

        122
      • 8.10.3.3 USA Call Transfer

        122
      • 8.10.3.4 USA Three-Way Conference

        122
  • 8.11 Common Phone Port Configuration

    123
  • 8.12 Call Forward Configuration

    124
• 9. Phone Usage

  127
  • 9.1 Dialing a Telephone Number

    127
  • 9.2 Using Speed Dial to Dial a Telephone Number

    127
  • 9.3 Internal Calls

    127
  • 9.4 Checking the Prestige’s IP Address

    127
  • 9.5 Auto Firmware Upgrade

    128
• 10. Dynamic DNS Setup

  129
  • 10.1 Dynamic DNS

    129
    • 10.1.1 DYNDNS Wildcard

      129
  • 10.2 Configuring Dynamic DNS

    129
• 11. Time and Date

  131
  • 11.1 Pre-defined NTP Time Servers List

    131
  • 11.2 Configuring Time and Date

    131
• 12. Firewalls

  135
  • 12.1 Firewall Overview

    135
  • 12.2 Types of Firewalls

    135
    • 12.2.1 Packet Filtering Firewalls

      135
    • 12.2.2 Application-level Firewalls

      135
    • 12.2.3 Stateful Inspection Firewalls

      136
  • 12.3 Introduction to ZyXEL’s Firewall

    136
    • 12.3.1 Denial of Service Attacks

      137
  • 12.4 Denial of Service

    137
    • 12.4.1 Basics

      137
    • 12.4.2 Types of DoS Attacks

      138
      • 12.4.2.1 ICMP Vulnerability

        140
      • 12.4.2.2 Illegal Commands (NetBIOS and SMTP)

        140
      • 12.4.2.3 Traceroute

        141
  • 12.5 Stateful Inspection

    141
    • 12.5.1 Stateful Inspection Process

      142
    • 12.5.2 Stateful Inspection and the Prestige

      143
    • 12.5.3 TCP Security

      143
    • 12.5.4 UDP/ICMP Security

      144
    • 12.5.5 Upper Layer Protocols

      144
  • 12.6 Guidelines for Enhancing Security with Your Firewall

    144
    • 12.6.1 Security In General

      145
  • 12.7 Packet Filtering Vs Firewall

    146
    • 12.7.1 Packet Filtering:

      146
      • 12.7.1.1 When To Use Filtering

        146
    • 12.7.2 Firewall

      146
      • 12.7.2.1 When To Use The Firewall

        146
• 13. Firewall Configuration

  149
  • 13.1 Access Methods

    149
  • 13.2 Firewall Policies Overview

    149
  • 13.3 Rule Logic Overview

    150
    • 13.3.1 Rule Checklist

      150
    • 13.3.2 Security Ramifications

      150
    • 13.3.3 Key Fields For Configuring Rules

      151
      • 13.3.3.1 Action

        151
      • 13.3.3.2 Service

        151
      • 13.3.3.3 Source Address

        151
      • 13.3.3.4 Destination Address

        151
  • 13.4 Connection Direction Example

    151
    • 13.4.1 LAN to WAN Rules

      152
    • 13.4.2 WAN to LAN Rules

      152
    • 13.4.3 Alerts

      152
  • 13.5 Configuring Basic Firewall Settings

    153
  • 13.6 Rule Summary

    154
    • 13.6.1 Configuring Firewall Rules

      155
  • 13.7 Customized Services

    158
  • 13.8 Creating/Editing A Customized Service

    158
  • 13.9 Example Firewall Rule

    159
  • 13.10 Predefined Services

    163
  • 13.11 Anti-Probing

    165
  • 13.12 DoS Thresholds

    166
    • 13.12.1 Threshold Values

      167
    • 13.12.2 Half-Open Sessions

      167
      • 13.12.2.1 TCP Maximum Incomplete and Blocking Time

        167
• 14. Content Filtering

  171
  • 14.1 Content Filtering Overview

    171
  • 14.2 Configuring Keyword Blocking

    171
  • 14.3 Configuring the Schedule

    172
  • 14.4 Configuring Trusted Computers

    173
• 15. Remote Management Configuration

  175
  • 15.1 Remote Management Overview

    175
    • 15.1.1 Remote Management Limitations

      175
    • 15.1.2 Remote Management and NAT

      176
    • 15.1.3 System Timeout

      176
  • 15.2 Telnet

    176
  • 15.3 FTP

    176
  • 15.4 Web

    177
  • 15.5 Configuring Remote Management

    177
• 16. Universal Plug-and-Play (UPnP)

  179
  • 16.1 Introducing Universal Plug and Play

    179
    • 16.1.1 How do I know if I'm using UPnP?

      179
    • 16.1.2 NAT Traversal

      179
    • 16.1.3 Cautions with UPnP

      179
  • 16.2 UPnP and ZyXEL

    180
    • 16.2.1 Configuring UPnP

      180
  • 16.3 Installing UPnP in Windows Example

    181
  • 16.4 Using UPnP in Windows XP Example

    185
• 17. Logs Screens

  193
  • 17.1 Logs Overview

    193
    • 17.1.1 Alerts and Logs

      193
  • 17.2 Configuring Log Settings

    193
  • 17.3 Displaying the Logs

    195
  • 17.4 SMTP Error Messages

    196
    • 17.4.1 Example E-mail Log

      197
• 18. Media Bandwidth Management Advanced Setup

  199
  • 18.1 Bandwidth Management Advanced Setup Overview

    199
  • 18.2 Bandwidth Classes and Filters

    199
  • 18.3 Proportional Bandwidth Allocation

    200
  • 18.4 Bandwidth Management Usage Examples

    200
    • 18.4.1 Application-based Bandwidth Management Example

      200
    • 18.4.2 Subnet-based Bandwidth Management Example

      200
    • 18.4.3 Application and Subnet-based Bandwidth Management Example

      201
  • 18.5 Scheduler

    201
    • 18.5.1 Priority-based Scheduler

      202
    • 18.5.2 Fairness-based Scheduler

      202
  • 18.6 Maximize Bandwidth Usage

    202
    • 18.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic

      202
    • 18.6.2 Maximize Bandwidth Usage Example

      203
  • 18.7 Bandwidth Borrowing

    204
    • 18.7.1 Bandwidth Borrowing Example

      204
    • 18.7.2 Maximize Bandwidth Usage With Bandwidth Borrowing

      205
  • 18.8 Configuring Summary

    205
  • 18.9 Configuring Class Setup

    207
    • 18.9.1 Media Bandwidth Management Class Configuration

      208
    • 18.9.2 Media Bandwidth Management Statistics

      210
  • 18.10 Bandwidth Monitor

    211
• 19. Maintenance

  213
  • 19.1 Maintenance Overview

    213
  • 19.2 System Status Screen

    213
    • 19.2.1 System Statistics

      216
  • 19.3 DHCP Table Screen

    217
  • 19.4 Any IP Table Screen

    218
  • 19.5 Diagnostic Screens

    219
    • 19.5.1 Diagnostic General Screen

      219
    • 19.5.2 Diagnostic DSL Line Screen

      220
  • 19.6 Firmware Screen

    221
• 20. Introducing the SMT

  225
  • 20.1 Introduction to the SMT

    225
    • 20.1.1 Procedure for SMT Configuration via Telnet

      225
    • 20.1.2 Entering Password

      225
  • 20.2 Navigating the SMT Interface

    226
    • 20.2.1 System Management Terminal Interface Summary

      227
    • 20.2.2 SMT Menus Overview

      228
  • 20.3 Changing the System Password

    229
• 21. Menu 1 General Setup

  231
  • 21.1 General Setup

    231
  • 21.2 Procedure To Configure Menu 1

    231
    • 21.2.1 Procedure to Configure Dynamic DNS

      232
• 22. Menu 2 WAN Backup Setup

  235
  • 22.1 Introduction to WAN Backup Setup

    235
  • 22.2 Configuring WAN Backup in Menu 2

    235
    • 22.2.1 Traffic Redirect Setup

      236
• 23. Menu 3 LAN Setup

  239
  • 23.1 LAN Setup

    239
    • 23.1.1 General Ethernet Setup

      239
  • 23.2 Protocol Dependent Ethernet Setup

    240
  • 23.3 TCP/IP Ethernet Setup and DHCP

    240
• 24. Internet Access

  243
  • 24.1 Internet Access Overview

    243
  • 24.2 IP Policies

    243
  • 24.3 IP Alias

    243
  • 24.4 IP Alias Setup

    244
  • 24.5 Route IP Setup

    245
  • 24.6 Internet Access Configuration

    246
• 25. Remote Node Configuration

  249
  • 25.1 Remote Node Setup Overview

    249
  • 25.2 Remote Node Setup

    249
    • 25.2.1 Remote Node Profile

      249
    • 25.2.2 Encapsulation and Multiplexing Scenarios

      250
      • 25.2.2.1 Scenario 1: One VC, Multiple Protocols

        250
      • 25.2.2.2 Scenario 2: One VC, One Protocol (IP)

        250
      • 25.2.2.3 Scenario 3: Multiple VCs

        250
    • 25.2.3 Outgoing Authentication Protocol

      252
  • 25.3 Remote Node Network Layer Options

    253
    • 25.3.1 My WAN Addr Sample IP Addresses

      254
  • 25.4 Remote Node Filter

    255
  • 25.5 Editing ATM Layer Options

    256
    • 25.5.1 VC-based Multiplexing (non-PPP Encapsulation)

      256
    • 25.5.2 LLC-based Multiplexing or PPP Encapsulation

      257
    • 25.5.3 Advance Setup Options

      257
• 26. Static Route Setup

  259
  • 26.1 IP Static Route Overview

    259
  • 26.2 Configuration

    259
• 27. Bridging Setup

  263
  • 27.1 Bridging in General

    263
  • 27.2 Bridge Ethernet Setup

    263
    • 27.2.1 Remote Node Bridging Setup

      263
    • 27.2.2 Bridge Static Route Setup

      265
• 28. Network Address Translation (NAT)

  267
  • 28.1 Using NAT

    267
    • 28.1.1 SUA (Single User Account) Versus NAT

      267
  • 28.2 Applying NAT

    267
  • 28.3 NAT Setup

    269
    • 28.3.1 Address Mapping Sets

      269
      • 28.3.1.1 SUA Address Mapping Set

        270
      • 28.3.1.2 User-Defined Address Mapping Sets

        271
      • 28.3.1.3 Ordering Your Rules

        271
  • 28.4 Configuring a Server Behind NAT

    273
  • 28.5 General NAT Examples

    274
    • 28.5.1 Example 1: Internet Access Only

      275
    • 28.5.2 Example 2: Internet Access with an Inside Server

      275
    • 28.5.3 Example 3: Multiple Public IP Addresses With Inside Servers

      276
    • 28.5.4 Example 4: NAT Unfriendly Application Programs

      280
• 29. Enabling the Firewall

  283
  • 29.1 Remote Management and the Firewall

    283
  • 29.2 Access Methods

    283
  • 29.3 Enabling the Firewall

    283
• 30. Filter Configuration

  285
  • 30.1 About Filtering

    285
    • 30.1.1 The Filter Structure of the Prestige

      286
  • 30.2 Configuring a Filter Set for the Prestige

    287
  • 30.3 Filter Rules Summary Menus

    289
  • 30.4 Configuring a Filter Rule

    290
    • 30.4.1 TCP/IP Filter Rule

      290
    • 30.4.2 Generic Filter Rule

      293
  • 30.5 Filter Types and NAT

    294
  • 30.6 Example Filter

    295
  • 30.7 Applying Filters and Factory Defaults

    297
    • 30.7.1 Ethernet Traffic

      297
    • 30.7.2 Remote Node Filters

      298
• 31. SNMP Configuration

  299
  • 31.1 About SNMP

    299
  • 31.2 Supported MIBs

    300
  • 31.3 SNMP Configuration

    300
  • 31.4 SNMP Traps

    301
• 32. System Information and Diagnosis

  303
  • 32.1 Overview

    303
  • 32.2 System Status

    303
  • 32.3 System Information

    305
    • 32.3.1 System Information

      305
    • 32.3.2 Console Port Speed

      306
  • 32.4 Log and Trace

    307
    • 32.4.1 Viewing Error Log

      307
    • 32.4.2 Syslog and Accounting

      308
  • 32.5 Diagnostic

    310
• 33. Firmware and Configuration File Maintenance

  313
  • 33.1 Filename Conventions

    313
  • 33.2 Backup Configuration

    314
    • 33.2.1 Backup Configuration

      314
    • 33.2.2 Using the FTP Command from the Command Line

      315
    • 33.2.3 Example of FTP Commands from the Command Line

      315
    • 33.2.4 GUI-based FTP Clients

      316
    • 33.2.5 TFTP and FTP over WAN Management Limitations

      316
    • 33.2.6 Backup Configuration Using TFTP

      317
    • 33.2.7 TFTP Command Example

      317
    • 33.2.8 GUI-based TFTP Clients

      317
  • 33.3 Restore Configuration

    318
    • 33.3.1 Restore Using FTP

      318
    • 33.3.2 Restore Using FTP Session Example

      319
  • 33.4 Uploading Firmware and Configuration Files

    320
    • 33.4.1 Firmware File Upload

      320
    • 33.4.2 Configuration File Upload

      320
    • 33.4.3 FTP File Upload Command from the DOS Prompt Example

      321
    • 33.4.4 FTP Session Example of Firmware File Upload

      322
    • 33.4.5 TFTP File Upload

      322
    • 33.4.6 TFTP Upload Command Example

      323
• 34. System Maintenance

  325
  • 34.1 Command Interpreter Mode

    325
  • 34.2 Call Control Support

    326
    • 34.2.1 Budget Management

      326
  • 34.3 Time and Date Setting

    327
    • 34.3.1 Resetting the Time

      329
• 35. Remote Management

  331
  • 35.1 Remote Management Overview

    331
  • 35.2 Remote Management

    331
    • 35.2.1 Remote Management Setup

      331
    • 35.2.2 Remote Management Limitations

      332
  • 35.3 Remote Management and NAT

    333
  • 35.4 System Timeout

    333
• 36. IP Policy Routing

  335
  • 36.1 IP Policy Routing Overview

    335
  • 36.2 Benefits of IP Policy Routing

    335
  • 36.3 Routing Policy

    335
  • 36.4 IP Routing Policy Setup

    336
  • 36.5 Applying an IP Policy

    339
    • 36.5.1 Ethernet IP Policies

      339
  • 36.6 IP Policy Routing Example

    340
• 37. Call Scheduling

  343
  • 37.1 Introduction

    343
• 38. Troubleshooting

  347
  • 38.1 Problems Starting Up the Prestige

    347
  • 38.2 Problems with the LAN

    347
  • 38.3 Problems with the WAN

    348
  • 38.4 Problems Accessing the Prestige

    349
    • 38.4.1 Pop-up Windows, JavaScripts and Java Permissions

      349
      • 38.4.1.1 Internet Explorer Pop-up Blockers

        350
      • 38.4.1.2 JavaScripts

        353
      • 38.4.1.3 Java Permissions

        355
  • 38.5 Telephone Problems

    357
• A. Product Specifications

  359
• B. Setting up Your Computer’s IP Address

  363
• C. PPPoE

  379
• D. IP Subnetting

  381
• E. Triangle Route

  389
• F. SIP Passthrough

  393
• G. Internal SPTGEN

  395
• H. Command Interpreter

  421
• I. Firewall Commands

  423
• J. Boot Commands

  425
• K. Log Descriptions

  427
• Index

  439
  • Numerics

    439
  • A

    439
  • B

    439
  • C

    440
  • D

    440
  • E

    441
  • F

    441
  • G

    442
  • H

    442
  • I

    442
  • J

    443
  • K

    443
  • L

    443
  • M

    444
  • N

    444
  • O

    445
  • P

    445
  • Q

    446
  • R

    446
  • S

    447
  • T

    448
  • U

    449
  • V

    449
  • W

    450
  • Z

    450