Manuals / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications 2864I Bridging Configuration, Filter Configuration, Snmp, System Security

Models: 2864I

1 156

Download 156 pages 28.71 Kb

Page 11

9Bridging Configuration 87

IPX Spoofing 87

Bridge Ethernet Setup 88

LAN-to-LAN Application 89

Remote Node Setup 90

Default Dial-In Setup for Bridge 91

Bridge Static Route Setup 91

10Filter Configuration 93

About Filtering 93

Prestige’s Filter Structure 94

Configuring a Filter Set 94

Configuring a Filter Rule 97

TCP/IP Filter Rule 97

Generic Filter Rule 101

Novell IPX Filter Rule 102

11SNMP 105

About SNMP 105

Configuring Your Prestige For SNMP Support 105

12System Security 109

Using RADIUS Authentication 109

Installing a RADIUS Server 109

Configuring the Prestige for RADIUS Authentication 110 Adding Users to the RADIUS Database 112

Using RADIUS Authentication for CLID 112

Configuring the SMT Password 113

13Telnet Configuration and Capabilities 115

About Telnet Configuration 115

Telnet Capabilities 116

Single Administrator 116

System Timeout 116

14System Maintenance 117

xi

Image 11

ZyXEL Communications 2864I Bridging Configuration, Filter Configuration, Snmp, System Security, System Maintenance

Contents

Version ACCESSING THE INTERNET & INTRANETJiH5 Prestige User’s ManualZyXEL Limited Warranty FCC Part 15 Information Copyright 1997 by ZyXELAcknowledgments Information for Canadian Users Page ∙ E-mail Contacting ZyXELZyXEL Communications Corporation 1 Introduction Contents2 Before You Begin 3 Installation7 TCP/IP Configuration 4 Configuring for Internet Access5 Remote Node Configuration 6 Dial-In Configuration14 System Maintenance 9 Bridging Configuration10 Filter Configuration 13 Telnet Configuration and Capabilities17 Index 15 Troubleshooting16 ISDN Switch Types xiii Introduction FeaturesEase of Installation Standard Phone Jack ISDN Basic Rate Interface BRIBuilt-in V.34 Modem Multiple Networking Protocol SupportPPP Security RADIUS Remote Authentication Dial In User ServiceDHCP Support Dynamic Host Configuration Protocol Full Network ManagementData Compression Internet AccessApplications For Your Prestige Call ControlMobile Users with V.34 Modems What This Manual CoversMultiprotocol LAN-to-LAN Connection Telecommuting ServerOther Resources What This Manual Doesn’t CoverPacking List Additional Installation Requirements8 Introduction ∙ VT100 terminal emulation ∙ 9600 Baud rate∙ No parity, 8 Data bits, 1 Stop bit Road Map and Flow Before You Begin10 Before You Begin Completing the WorksheetFigure 2-1 Installation Guide Ordering Your ISDN Line Collecting General Setup InformationNo of Phone #s Collecting ISDN Phone Line InformationSwitch Type GeographyAmerica, select your ISDN switch type. For DSS1 and 1TR6, verify this field to make sure that you have the proper firmware loaded Number of Bits Collecting Ethernet Setup InformationIP Subnet Mask Number of Host IDsBefore You Begin IP Subnet MaskNumber of Host IDs Number of Bits16 Before You Begin General Setup InformationISDN Setup Information Prestige Setup and Installation Worksheet∙ Analog Call check one North America ISDNDSS1 ISDN ∙ 1st Telephone Number18 Before You Begin 1TR6 ISDNAUI UTP Ethernet Setup InformationEAZ Don’t Care Modem A/B Ignore20 Before You Begin Installation InstallationFigure 3-1 Rear Panel Diagram A Warning On Connection Cables Connecting Your Computer and Your PrestigeConnecting the RS-232 Cable to your Prestige Connecting an ISDN Line to your Prestige∙ UTP Connecting a Telephone/Fax to your PrestigeConnecting an Ethernet Cable to your Prestige Prestige Front Panel Connecting a Power Adapter to your PrestigePowering On Your Prestige 26 Installation Figure 3-3 Power on MessagesFigure 3-4 Login Screen Navigating Through the System Management Terminal Interface System Management Terminal Interface Summary General Setup 30 Installation ISDN SetupFigure 3-7 Menu 2 - ISDN Setup for North America North American ISDNFigure 3-8 Menu 2 - ISDN Setup for DSS1 DSS1 & 1TR6 ISDN1. Switch Type - This field is fixed as DSS1 or 1TR6 34 Installation Figure 3-10 ISDN Loop-Back Test Screen General Ethernet Setup Ethernet SetupFigure 3-12 Menu 3.2 - TCP/IP Ethernet Setup TCP/IP Ethernet Setup and DHCP38 Installation Bridge Ethernet Setup Novell IPX Ethernet SetupConfiguring for Internet Access Figure 4-1 Internet Access IP Addresses and the Internet42 Configuring for Internet Access Internet Access Configuration5. My Login Name - Enter the login name given to you by your ISP ∙ Modem - The Prestige will place Modem data calls Single User Account In summary translation, refer to RFC 1631, The IP Network Address Translator NATConfiguring Backup ISP Accounts Configuration for Single User Account2. Enter Menu 11, then select the number of an unused remote node Configuring for Internet Access Figure 5-1 Menu 11 - Remote Node Setup Remote Node ConfigurationFigure 5-2 Menu 11.1 - Remote Node Profile Remote Node Configuration52 Remote Node Configuration ∙ PAP sends the user name and password in plain text 54 Remote Node Configuration 18. Telco Options Allocated Budget min - This field will set a budget outgoing call time for the Remote Node. The default for this field is 0 for no budget control 56 Remote Node Configuration Bandwidth on DemandEditing PPP Options ∙ 64 - Only one channel will be used ∙ 128 - Two channels will be used when a packet triggers a callto confirm your selections, or press ESC to cancel your selections 58 Remote Node ConfigurationDial-In Configuration Dial-In ConfigurationFigure 6-1 Example of Remote User Telecommuter TelecommutingDial-In Server Application Figure 6-2 Example of a Dial-In Server Application Default Dial-In Setup∙ None - No CLID is required 3. PPP Options Mutual Authen. - Some vendors, e.g. Cisco, implement a type of mutual authentication. That is, the node that initiates the call will request a user name and password from the far end that they are dialing to. If the Remote Node that is dialing in implements this type of authentication, set this field to Yes 11. IP Pool IP Start Addr - This field is active only if you Dial-In Users Setup Figure 6-5 Menu 14.1 - Edit Dial-in User Figure 6-4 Menu 14 - Dial-in User Setup66 Dial-In Configuration 3. Password - Enter the password for the Remote Dial-in User More on CLID IP Subnet Mask TCP/IP Configuration70 TCP/IP Configuration LAN-to-LAN ApplicationRemote Node Setup 5. Rem IP Subnet Mask - Enter the subnet mask for the remote network Static Route Setup Figure 7-4 Static Routing Example 74 TCP/IP ConfigurationFigure 7-6 IP Static Route Setup Figure 7-5 Menu 12 - Static Route Setup - Main Menu76 TCP/IP Configuration Network Numbers Novell IPX ConfigurationIPX Network Environment Frame TypeFigure 8-1 Prestige Operating in IPX Environment Prestige on LAN with ServerPrestige on LAN without Server IPX Spoofing IPX Ethernet Setup∙ ∙ ∙ Ethernet ∙ SNAP Figure 8-3 LAN-to-LAN application Remote Node SetupLAN-to-LAN Application configure the default dial-in parameters in menu 13 see Chapter Static Route Setup Figure 8-5 NetWare Servers on Both Sides of the Link 84 Novell IPX ConfigurationFigure 8-6 Menu 12.2 - Edit IPX Static Route 86 Novell IPX Configuration IPX Spoofing Bridging ConfigurationBridging Configuration Bridge Ethernet Setup LAN-to-LAN Application Figure 9-1 Bridge Ethernet Setup1. Bridge - Make sure this field is set to Yes Remote Node SetupFigure 9-3 Menu 12.4 - Bridge Static Route Default Dial-In Setup for BridgeBridge Static Route Setup 92 Bridging Configuration About Filtering Filter Configuration94 Filter Configuration Configuring a Filter SetPrestige’s Filter Structure ∙ # - Refers to the filter rule number ∙ Pr - Protocol ∙ SA - Source Address ∙ SP - Source Port number TCP/IP Filter Rule Configuring a Filter Rule∙ Yes ∙ No ∙ None ∙ Less ∙ Greater ∙ Equal ∙ Not Equal 100 Filter Configuration Figure 10-5 Menu 21.1.1 - Generic Filter Rule Generic Filter Rule102 Filter Configuration Novell IPX Filter Rule∙ None ∙ RIP Request ∙ SAP Get Nearest Server Request ∙ SAP Get Nearest Server Response 104 Filter Configuration∙ RIP Response ∙ SAP Request ∙ SAP Response About SNMP Configuring Your Prestige For SNMP SupportSNMP 106 SNMP Figure 11-1 Menu 22 - SNMP Configuration6. Trap Community - In this field, enter the community name that is sent with each trap to the SNMP manager. This should be treated like a password and match what the SNMP manager is expecting. The default is public 108 SNMP System Security Using RADIUS AuthenticationInstalling a RADIUS Server Configuring the Prestige for RADIUS Authentication This will bring you to Menu 23.2 - System Security - External Server Adding Users to the RADIUS Database Using RADIUS Authentication for CLIDConfiguring the SMT Password 114 System Security About Telnet Configuration Telnet Configuration and CapabilitiesTelnet Capabilities Single AdministratorSystem Timeout System Status System Maintenance2. From this menu, select option 1. System Status 9. RXPkt - the number of received packets on this channel Figure 14-3 LAN Packet Which Triggered Last Call Terminal Baud RateLog and Trace View Error LogSyslog And Accounting Diagnostic 124 System Maintenance Below is an example of a failed Trace Display for a Successful IPCP Connection via Manual Call 126 System Maintenance Backup ConfigurationRestore Configuration Figure 14-9 Example of uploading RAS using PCPLUS Software Update128 System Maintenance Command Interpreter ModeCall Control Figure 14-10 Menu 24.9.1 Call Control Parameters Call Control ParametersFigure 14-12 Budget Management BlacklistBudget Management Figure 14-11 BlacklistModem/ISDN TA Emulation 132 System Maintenance Connecting the RS-232 cable, cannot access the SMT TroubleshootingProblems Starting Up the Prestige None of the LEDs are on when you power up the PrestigeThe ISDN loopback test failed Problems With the ISDN LineThe ISDN initialization failed Can’t PING any station on the LAN Problems with the LAN InterfaceProblems Connecting to a Remote Node or ISP 136 Troubleshooting Problems Connecting to a Remote UserProvisioning For the AT&T 5ESS Switches ISDN Switch TypesProvisioning For U.S. Switches Setting Provisioning FeatureSetting Provisioning FeatureProvisioning Feature Provisioning For the Northern Telecom SwitchProvisioning Feature SettingEKTS Provisioning FeatureSetting 140 ISDN Switch TypesIndex IP Subnet Mask, 15, 39 See IPXSee POTS SPID, 11, 13, 14, 30