Manuals / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications 28641 user manual System Security

Models: 28641

1 159

Download 159 pages 50.55 Kb

Page 130

You will now need to enter in this password when you try to get into the SMT. In addition, this password will also be used when a network administrator attempts to telnet to the Prestige.

116 System Security

Image 130

ZyXEL Communications 28641 user manual System Security

Contents

Prestige User’s Manual ACCESSING THE INTERNET & INTRANETZyXEL VersionZyXEL Limited Warranty Acknowledgments Copyright 1997 by ZyXELFCC Part 15 Information Information for Canadian Users Page Contacting ZyXEL ∙ E-mail∙ FTP Information , such as ZyXEL software and ROM updates for Contents 1 Introduction3 Installation 2 Before You Begin6 Dial-In Configuration 4 Configuring for Internet Access5 Remote Node Configuration 7 TCP/IP Configuration11 SNMP 9 Bridging Configuration10 Filter Configuration 12 System Security14 System Maintenance 13 Telnet Configuration and Capabilities15 Troubleshooting Problems with the LAN Interface 16 ISDN Switch Types17 Index Provisioning For U.S. SwitchesPage Ease of Installation Features1 Introduction Multiple Networking Protocol Support ISDN Basic Rate Interface BRIBuilt-in V.34 Modem Standard Phone JackBandwidth On Demand RADIUS Remote Authentication Dial In User ServiceDHCP Support Dynamic Host Configuration Protocol Full Network ManagementCall Control Internet AccessApplications For Your Prestige Data CompressionTelecommuting Server What This Manual CoversMultiprotocol LAN-to-LAN Connection Mobile Users with V.34 ModemsWhat This Manual Doesn’t Cover Other ResourcesAdditional Installation Requirements Packing List∙ No parity, 8 Data bits, 1 Stop bit ∙ VT100 terminal emulation ∙ 9600 Baud rate8 Introduction 2 Before You Begin Road Map and FlowCompleting the Worksheet Ordering Your ISDN LineCollecting General Setup Information Geography Collecting ISDN Phone Line InformationSwitch Type No of Phone #s∙ B Channel Usage - Determine which connection is appropriate for your B channel and check the corresponding option on the worksheet Collecting Ethernet Setup Information 14 Before You BeginNumber of Bits IP Subnet MaskNumber of Host IDs Before You BeginPrestige Setup and Installation Worksheet General Setup InformationISDN Setup Information 16 Before You Begin∙ 1st Telephone Number North America ISDNDSS1 ISDN ∙ Analog Call check one∙ Outside Line Prefix Number 1TR6 ISDN∙ A/B Adapter Number & Subaddress ∙ PBX Number S/T Bus NumberModem A/B Ignore Ethernet Setup InformationEAZ Don’t Care AUI UTP20 Before You Begin Figure 3-1 Rear Panel Diagram 3 InstallationInstallation Connecting an ISDN Line to your Prestige Connecting Your Computer and Your PrestigeConnecting the RS-232 Cable to your Prestige A Warning On Connection CablesConnecting an Ethernet Cable to your Prestige Connecting a Telephone/Fax to your Prestige∙ UTP Connecting a Power Adapter to your Prestige Prestige Front PanelAA - This LED auto answer indicates when auto answer is turned on Figure 3-3 Power on Messages Powering On Your PrestigeFigure 3-4 Login Screen Navigating Through the System Management Terminal Interface System Management Terminal Interface Summary Menu Title General SetupInstallation DescriptionFigure 3-6 Menu 1 - General Setup 30 InstallationISDN Setup North American ISDN32 Installation DSS1 & 1TR6 ISDN 34 Installation Page Ethernet Setup General Ethernet SetupTCP/IP Ethernet Setup and DHCP Figure 3-11 Menu 3.1 - General Ethernet SetupFigure 3-12 Menu 3.2 - TCP/IP Ethernet Setup 38 InstallationPage Refer to the chapter on Novell IPX configuration Novell IPX Ethernet SetupBridge Ethernet Setup Refer to the chapter on Bridging configuration4 Configuring for Internet Access IP Addresses and the Internet Figure 4-1 Internet AccessInternet Access Configuration 5. My Login Name - Enter the login name given to you by your ISP ∙ Modem - The Prestige will place Modem data calls Single User Account 46 Configuring for Internet AccessIn summary Configuration for Single User Account Configuring Backup ISP Accounts2. Enter Menu 11, then select the number of an unused remote node 50 Configuring for Internet Access 5 Remote Node Configuration 52 Remote Node Configuration Figure 5-1 Menu 11 - Remote Node SetupFigure 5-2 Menu 11.1 - Remote Node Profile Page ∙ PAP sends the user name and password in plain text if available. Once connected, the Prestige will use the BACP Bandwidth Allocation Control Protocol to establish the second B- channel if Multilink PPP is enabled, and the Remote Node supports MP and BACP 56 Remote Node Configuration Bandwidth on Demand 58 Remote Node Configuration Editing PPP Options ∙ 64 - At most one channel can be used 60 Remote Node Configuration∙ 128 - A maximum of two channels can be used 6 Dial-In Configuration Dial-In ConfigurationDial-In Server Application TelecommutingFigure 6-1 Example of Remote User Telecommuter Default Dial-In Setup Figure 6-2 Example of a Dial-In Server Application∙ None - No CLID is required 3. PPP Options Mutual Authen. - Some vendors, e.g. Cisco, implement a type of mutual authentication. That is, the node that initiates the call will request a user name and password from the far end that they are dialing to. If the Remote Node that is dialing in implements this type of authentication, set this field to Yes 11. IP Pool IP Start Addr - This field is active only if you selected Dial-In Users Setup 68 Dial-In Configuration Figure 6-4 Menu 14 - Dial-in User SetupFigure 6-5 Menu 14.1 - Edit Dial-in User 3. Password - Enter the password for the Remote Dial-in User More on CLID 7 TCP/IP Configuration IP Subnet MaskLAN-to-LAN Application 72 TCP/IP ConfigurationRemote Node Setup 5. Rem IP Subnet Mask - Enter the subnet mask for the remote network Static Route Setup 76 TCP/IP Configuration Figure 7-4 Static Routing ExampleFigure 7-5 Menu 12 - Static Route Setup - Main Menu Figure 7-6 IP Static Route Setup78 TCP/IP Configuration Frame Type 8 Novell IPX ConfigurationIPX Network Environment Network NumbersPrestige on LAN without Server Prestige on LAN with ServerFigure 8-1 Prestige Operating in IPX Environment IPX Ethernet Setup IPX Spoofing∙ ∙ ∙ Ethernet ∙ SNAP LAN-to-LAN Application Remote Node SetupFigure 8-3 LAN-to-LAN application 1. Route - Make sure IPX is among the protocols in the Route field Static Route Setup 86 Novell IPX Configuration Figure 8-5 NetWare Servers on Both Sides of the LinkFigure 8-6 Menu 12.2 - Edit IPX Static Route 88 Novell IPX Configuration Bridging Configuration 9 Bridging ConfigurationBridge Ethernet Setup IPX Spoofing∙ If it is set to None, nothing is done to IPX traffic LAN-to-LAN Application Remote Node SetupIPX. Set it to Client if there are only client workstations on the Default Dial-In Setup for Bridge Figure 9-2 Remote Node Bridging ConfigurationBridge Static Route Setup Figure 9-3 Menu 12.4 - Bridge Static Route94 Bridging Configuration 10 Filter Configuration About FilteringPrestige’s Filter Structure Configuring a Filter Set96 Filter Configuration ∙ # - Refers to the filter rule number ∙ Pr - Protocol ∙ SA - Source Address ∙ SP - Source Port number Configuring a Filter Rule TCP/IP Filter Rule∙ Yes ∙ No ∙ None ∙ Less ∙ Greater ∙ Equal ∙ Not Equal 102 Filter Configuration Generic Filter Rule Figure 10-5 Menu 21.1.1 - Generic Filter RuleNovell IPX Filter Rule 104 Filter Configuration∙ None ∙ RIP Request ∙ RIP Response ∙ SAP Request ∙ SAP Response 11 SNMP Configuring Your Prestige For SNMP SupportAbout SNMP Figure 11-1 Menu 22 - SNMP Configuration 108 SNMPleave the field blank default, then the Prestige will respond to all SNMP messages it receives, regardless of origin 110 SNMP Installing a RADIUS Server Using RADIUS Authentication12 System Security Configuring the Prestige for RADIUS Authentication # Client Name Using RADIUS Authentication for CLID Adding Users to the RADIUS DatabaseConfiguring the SMT Password 116 System Security 13 Telnet Configuration and Capabilities About Telnet ConfigurationSystem Timeout Single AdministratorTelnet Capabilities 14 System Maintenance System Status2. From this menu, select option 1. System Status 10. Error - the number of error packets on this channel Terminal Baud Rate Figure 14-3 LAN Packet Which Triggered Last CallView Error Log Log and TraceSyslog And Accounting Diagnostic Figure 14-6 Menu 24.4 - System Maintenance - Diagnostic 126 System Maintenanceworking properly, the test will succeed. Otherwise, note the error message that you receive and consult your network administrator Backup Configuration 128 System MaintenanceRestore Configuration Software UpdateCommand Interpreter Mode Figure 14-9 Example of uploading RAS using PCPLUSCall Control Call Control ParametersBlacklist Figure 14-11 BlacklistModem/ISDN TA Emulation Budget ManagementFigure 14-12 Budget Management 134 System Maintenance None of the LEDs are on when you power up the Prestige 15 TroubleshootingProblems Starting Up the Prestige Connecting the RS-232 cable, cannot access the SMTThe ISDN initialization failed Problems With the ISDN LineThe ISDN loopback test failed Problems Connecting to a Remote Node or ISP Problems with the LAN InterfaceCan’t PING any station on the LAN Problems Connecting to a Remote User 138 Troubleshooting16 ISDN Switch Types Provisioning For U.S. SwitchesSetting Provisioning For the AT&T 5ESS SwitchesProvisioning Feature Provisioning FeatureSetting Provisioning For the Northern Telecom SwitchProvisioning Feature Provisioning FeatureSetting Provisioning Feature142 ISDN Switch Types 17 Index IP Address, 14 IP Subnet Mask, 15, 39, 71, 74 See IPXSimple Network Management Protocol. See SNMP