Manuals / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications 28641 Bridging Configuration, Filter Configuration, Snmp, System Security

Models: 28641

1 159

Download 159 pages 50.55 Kb

Page 11

Prestige on LAN without Server 80

IPX Spoofing 81

IPX Ethernet Setup 81

LAN-to-LAN Application 83

Remote Node Setup 83

Static Route Setup 85

9 Bridging Configuration 89

IPX Spoofing 89

Bridge Ethernet Setup 89

LAN-to-LAN Application 91

Remote Node Setup 91

Default Dial-In Setup for Bridge 92

Bridge Static Route Setup 93

10 Filter Configuration 95

About Filtering 95

Prestige’s Filter Structure 96

Configuring a Filter Set 96

Configuring a Filter Rule 99

TCP/IP Filter Rule 99

Generic Filter Rule 103

Novell IPX Filter Rule 104

11 SNMP 107

About SNMP 107

Configuring Your Prestige For SNMP Support 107

12 System Security 111

Using RADIUS Authentication 111

Installing a RADIUS Server 111

Configuring the Prestige for RADIUS Authentication 112 Adding Users to the RADIUS Database 114

xi

Image 11

ZyXEL Communications 28641 user manual Bridging Configuration, Filter Configuration, Snmp, System Security

Contents

Version ACCESSING THE INTERNET & INTRANETZyXEL Prestige User’s ManualZyXEL Limited Warranty FCC Part 15 Information Copyright 1997 by ZyXELAcknowledgments Information for Canadian Users Page ∙ E-mail Contacting ZyXEL∙ FTP Information , such as ZyXEL software and ROM updates for 1 Introduction Contents2 Before You Begin 3 Installation7 TCP/IP Configuration 4 Configuring for Internet Access5 Remote Node Configuration 6 Dial-In Configuration12 System Security 9 Bridging Configuration10 Filter Configuration 11 SNMP15 Troubleshooting 13 Telnet Configuration and Capabilities14 System Maintenance Provisioning For U.S. Switches 16 ISDN Switch Types17 Index Problems with the LAN InterfacePage 1 Introduction FeaturesEase of Installation Standard Phone Jack ISDN Basic Rate Interface BRIBuilt-in V.34 Modem Multiple Networking Protocol SupportFull Network Management RADIUS Remote Authentication Dial In User ServiceDHCP Support Dynamic Host Configuration Protocol Bandwidth On DemandData Compression Internet AccessApplications For Your Prestige Call ControlMobile Users with V.34 Modems What This Manual CoversMultiprotocol LAN-to-LAN Connection Telecommuting ServerOther Resources What This Manual Doesn’t CoverPacking List Additional Installation Requirements8 Introduction ∙ VT100 terminal emulation ∙ 9600 Baud rate∙ No parity, 8 Data bits, 1 Stop bit Road Map and Flow 2 Before You BeginOrdering Your ISDN Line Completing the WorksheetCollecting General Setup Information No of Phone #s Collecting ISDN Phone Line InformationSwitch Type Geography∙ B Channel Usage - Determine which connection is appropriate for your B channel and check the corresponding option on the worksheet 14 Before You Begin Collecting Ethernet Setup InformationBefore You Begin IP Subnet MaskNumber of Host IDs Number of Bits16 Before You Begin General Setup InformationISDN Setup Information Prestige Setup and Installation Worksheet∙ Analog Call check one North America ISDNDSS1 ISDN ∙ 1st Telephone Number∙ PBX Number S/T Bus Number 1TR6 ISDN∙ A/B Adapter Number & Subaddress ∙ Outside Line Prefix NumberAUI UTP Ethernet Setup InformationEAZ Don’t Care Modem A/B Ignore20 Before You Begin Installation 3 InstallationFigure 3-1 Rear Panel Diagram A Warning On Connection Cables Connecting Your Computer and Your PrestigeConnecting the RS-232 Cable to your Prestige Connecting an ISDN Line to your Prestige∙ UTP Connecting a Telephone/Fax to your PrestigeConnecting an Ethernet Cable to your Prestige Prestige Front Panel Connecting a Power Adapter to your PrestigeAA - This LED auto answer indicates when auto answer is turned on Figure 3-4 Login Screen Powering On Your PrestigeFigure 3-3 Power on Messages Navigating Through the System Management Terminal Interface System Management Terminal Interface Summary Description General SetupInstallation Menu Title30 Installation Figure 3-6 Menu 1 - General SetupNorth American ISDN ISDN Setup32 Installation DSS1 & 1TR6 ISDN 34 Installation Page General Ethernet Setup Ethernet SetupFigure 3-11 Menu 3.1 - General Ethernet Setup TCP/IP Ethernet Setup and DHCP38 Installation Figure 3-12 Menu 3.2 - TCP/IP Ethernet SetupPage Refer to the chapter on Bridging configuration Novell IPX Ethernet SetupBridge Ethernet Setup Refer to the chapter on Novell IPX configuration4 Configuring for Internet Access Figure 4-1 Internet Access IP Addresses and the InternetInternet Access Configuration 5. My Login Name - Enter the login name given to you by your ISP ∙ Modem - The Prestige will place Modem data calls 46 Configuring for Internet Access Single User AccountIn summary Configuring Backup ISP Accounts Configuration for Single User Account2. Enter Menu 11, then select the number of an unused remote node 50 Configuring for Internet Access 5 Remote Node Configuration Figure 5-2 Menu 11.1 - Remote Node Profile Figure 5-1 Menu 11 - Remote Node Setup52 Remote Node Configuration Page ∙ PAP sends the user name and password in plain text if available. Once connected, the Prestige will use the BACP Bandwidth Allocation Control Protocol to establish the second B- channel if Multilink PPP is enabled, and the Remote Node supports MP and BACP 56 Remote Node Configuration Bandwidth on Demand 58 Remote Node Configuration Editing PPP Options ∙ 128 - A maximum of two channels can be used 60 Remote Node Configuration∙ 64 - At most one channel can be used Dial-In Configuration 6 Dial-In ConfigurationFigure 6-1 Example of Remote User Telecommuter TelecommutingDial-In Server Application Figure 6-2 Example of a Dial-In Server Application Default Dial-In Setup∙ None - No CLID is required 3. PPP Options Mutual Authen. - Some vendors, e.g. Cisco, implement a type of mutual authentication. That is, the node that initiates the call will request a user name and password from the far end that they are dialing to. If the Remote Node that is dialing in implements this type of authentication, set this field to Yes 11. IP Pool IP Start Addr - This field is active only if you selected Dial-In Users Setup Figure 6-5 Menu 14.1 - Edit Dial-in User Figure 6-4 Menu 14 - Dial-in User Setup68 Dial-In Configuration 3. Password - Enter the password for the Remote Dial-in User More on CLID IP Subnet Mask 7 TCP/IP Configuration72 TCP/IP Configuration LAN-to-LAN ApplicationRemote Node Setup 5. Rem IP Subnet Mask - Enter the subnet mask for the remote network Static Route Setup Figure 7-4 Static Routing Example 76 TCP/IP ConfigurationFigure 7-6 IP Static Route Setup Figure 7-5 Menu 12 - Static Route Setup - Main Menu78 TCP/IP Configuration Network Numbers 8 Novell IPX ConfigurationIPX Network Environment Frame TypeFigure 8-1 Prestige Operating in IPX Environment Prestige on LAN with ServerPrestige on LAN without Server IPX Spoofing IPX Ethernet Setup∙ ∙ ∙ Ethernet ∙ SNAP Figure 8-3 LAN-to-LAN application Remote Node SetupLAN-to-LAN Application 1. Route - Make sure IPX is among the protocols in the Route field Static Route Setup Figure 8-5 NetWare Servers on Both Sides of the Link 86 Novell IPX ConfigurationFigure 8-6 Menu 12.2 - Edit IPX Static Route 88 Novell IPX Configuration IPX Spoofing 9 Bridging ConfigurationBridge Ethernet Setup Bridging Configuration∙ If it is set to None, nothing is done to IPX traffic IPX. Set it to Client if there are only client workstations on the Remote Node SetupLAN-to-LAN Application Figure 9-2 Remote Node Bridging Configuration Default Dial-In Setup for BridgeFigure 9-3 Menu 12.4 - Bridge Static Route Bridge Static Route Setup94 Bridging Configuration About Filtering 10 Filter Configuration96 Filter Configuration Configuring a Filter SetPrestige’s Filter Structure ∙ # - Refers to the filter rule number ∙ Pr - Protocol ∙ SA - Source Address ∙ SP - Source Port number TCP/IP Filter Rule Configuring a Filter Rule∙ Yes ∙ No ∙ None ∙ Less ∙ Greater ∙ Equal ∙ Not Equal 102 Filter Configuration Figure 10-5 Menu 21.1.1 - Generic Filter Rule Generic Filter Rule104 Filter Configuration Novell IPX Filter Rule∙ None ∙ RIP Request ∙ RIP Response ∙ SAP Request ∙ SAP Response About SNMP Configuring Your Prestige For SNMP Support11 SNMP 108 SNMP Figure 11-1 Menu 22 - SNMP Configurationleave the field blank default, then the Prestige will respond to all SNMP messages it receives, regardless of origin 110 SNMP 12 System Security Using RADIUS AuthenticationInstalling a RADIUS Server Configuring the Prestige for RADIUS Authentication # Client Name Adding Users to the RADIUS Database Using RADIUS Authentication for CLIDConfiguring the SMT Password 116 System Security About Telnet Configuration 13 Telnet Configuration and CapabilitiesTelnet Capabilities Single AdministratorSystem Timeout System Status 14 System Maintenance2. From this menu, select option 1. System Status 10. Error - the number of error packets on this channel Figure 14-3 LAN Packet Which Triggered Last Call Terminal Baud RateLog and Trace View Error LogSyslog And Accounting Diagnostic 126 System Maintenance Figure 14-6 Menu 24.4 - System Maintenance - Diagnosticworking properly, the test will succeed. Otherwise, note the error message that you receive and consult your network administrator 128 System Maintenance Backup ConfigurationSoftware Update Restore ConfigurationFigure 14-9 Example of uploading RAS using PCPLUS Command Interpreter ModeCall Control Parameters Call ControlFigure 14-11 Blacklist BlacklistFigure 14-12 Budget Management Budget ManagementModem/ISDN TA Emulation 134 System Maintenance Connecting the RS-232 cable, cannot access the SMT 15 TroubleshootingProblems Starting Up the Prestige None of the LEDs are on when you power up the PrestigeThe ISDN loopback test failed Problems With the ISDN LineThe ISDN initialization failed Can’t PING any station on the LAN Problems with the LAN InterfaceProblems Connecting to a Remote Node or ISP 138 Troubleshooting Problems Connecting to a Remote UserProvisioning For U.S. Switches 16 ISDN Switch TypesProvisioning Feature Provisioning For the AT&T 5ESS SwitchesProvisioning Feature SettingProvisioning Feature Provisioning For the Northern Telecom SwitchProvisioning Feature Setting142 ISDN Switch Types Provisioning FeatureSetting 17 Index See IPX IP Address, 14 IP Subnet Mask, 15, 39, 71, 74Simple Network Management Protocol. See SNMP