Manuals / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications 2864I user manual System Security

Models: 2864I

1 156

Download 156 pages 28.71 Kb

Page 127

5.Re-type your new system password for confirmation purposes and press ENTER.

You will now need to enter in this password when you try to get into the SMT. In addition, this password will also be used when a network administrator attempts to telnet to the Prestige.

114 System Security

Image 127

ZyXEL Communications 2864I user manual System Security

Contents

Version ACCESSING THE INTERNET & INTRANETJiH5 Prestige User’s ManualZyXEL Limited Warranty Acknowledgments Copyright 1997 by ZyXELFCC Part 15 Information Information for Canadian Users Page ∙ E-mail Contacting ZyXELZyXEL Communications Corporation 1 Introduction Contents2 Before You Begin 3 Installation7 TCP/IP Configuration 4 Configuring for Internet Access5 Remote Node Configuration 6 Dial-In Configuration14 System Maintenance 9 Bridging Configuration10 Filter Configuration 13 Telnet Configuration and Capabilities16 ISDN Switch Types 15 Troubleshooting17 Index xiii Ease of Installation FeaturesIntroduction Standard Phone Jack ISDN Basic Rate Interface BRIBuilt-in V.34 Modem Multiple Networking Protocol SupportPPP Security RADIUS Remote Authentication Dial In User ServiceDHCP Support Dynamic Host Configuration Protocol Full Network ManagementData Compression Internet AccessApplications For Your Prestige Call ControlMobile Users with V.34 Modems What This Manual CoversMultiprotocol LAN-to-LAN Connection Telecommuting ServerOther Resources What This Manual Doesn’t CoverPacking List Additional Installation Requirements∙ No parity, 8 Data bits, 1 Stop bit ∙ VT100 terminal emulation ∙ 9600 Baud rate8 Introduction Road Map and Flow Before You BeginFigure 2-1 Installation Guide Completing the Worksheet10 Before You Begin Ordering Your ISDN Line Collecting General Setup InformationNo of Phone #s Collecting ISDN Phone Line InformationSwitch Type GeographyAmerica, select your ISDN switch type. For DSS1 and 1TR6, verify this field to make sure that you have the proper firmware loaded Number of Bits Collecting Ethernet Setup InformationIP Subnet Mask Number of Host IDsBefore You Begin IP Subnet MaskNumber of Host IDs Number of Bits16 Before You Begin General Setup InformationISDN Setup Information Prestige Setup and Installation Worksheet∙ Analog Call check one North America ISDNDSS1 ISDN ∙ 1st Telephone Number18 Before You Begin 1TR6 ISDNAUI UTP Ethernet Setup InformationEAZ Don’t Care Modem A/B Ignore20 Before You Begin Figure 3-1 Rear Panel Diagram InstallationInstallation A Warning On Connection Cables Connecting Your Computer and Your PrestigeConnecting the RS-232 Cable to your Prestige Connecting an ISDN Line to your PrestigeConnecting an Ethernet Cable to your Prestige Connecting a Telephone/Fax to your Prestige∙ UTP Prestige Front Panel Connecting a Power Adapter to your PrestigePowering On Your Prestige Figure 3-4 Login Screen Figure 3-3 Power on Messages26 Installation Navigating Through the System Management Terminal Interface System Management Terminal Interface Summary General Setup 30 Installation ISDN SetupFigure 3-7 Menu 2 - ISDN Setup for North America North American ISDNFigure 3-8 Menu 2 - ISDN Setup for DSS1 DSS1 & 1TR6 ISDN1. Switch Type - This field is fixed as DSS1 or 1TR6 34 Installation Figure 3-10 ISDN Loop-Back Test Screen General Ethernet Setup Ethernet SetupFigure 3-12 Menu 3.2 - TCP/IP Ethernet Setup TCP/IP Ethernet Setup and DHCP38 Installation Bridge Ethernet Setup Novell IPX Ethernet SetupConfiguring for Internet Access Figure 4-1 Internet Access IP Addresses and the Internet42 Configuring for Internet Access Internet Access Configuration5. My Login Name - Enter the login name given to you by your ISP ∙ Modem - The Prestige will place Modem data calls Single User Account In summary translation, refer to RFC 1631, The IP Network Address Translator NATConfiguring Backup ISP Accounts Configuration for Single User Account2. Enter Menu 11, then select the number of an unused remote node Configuring for Internet Access Figure 5-1 Menu 11 - Remote Node Setup Remote Node ConfigurationFigure 5-2 Menu 11.1 - Remote Node Profile Remote Node Configuration52 Remote Node Configuration ∙ PAP sends the user name and password in plain text 54 Remote Node Configuration 18. Telco Options Allocated Budget min - This field will set a budget outgoing call time for the Remote Node. The default for this field is 0 for no budget control 56 Remote Node Configuration Bandwidth on DemandEditing PPP Options ∙ 64 - Only one channel will be used ∙ 128 - Two channels will be used when a packet triggers a callto confirm your selections, or press ESC to cancel your selections 58 Remote Node ConfigurationDial-In Configuration Dial-In ConfigurationDial-In Server Application TelecommutingFigure 6-1 Example of Remote User Telecommuter Figure 6-2 Example of a Dial-In Server Application Default Dial-In Setup∙ None - No CLID is required 3. PPP Options Mutual Authen. - Some vendors, e.g. Cisco, implement a type of mutual authentication. That is, the node that initiates the call will request a user name and password from the far end that they are dialing to. If the Remote Node that is dialing in implements this type of authentication, set this field to Yes 11. IP Pool IP Start Addr - This field is active only if you Dial-In Users Setup 66 Dial-In Configuration Figure 6-4 Menu 14 - Dial-in User SetupFigure 6-5 Menu 14.1 - Edit Dial-in User 3. Password - Enter the password for the Remote Dial-in User More on CLID IP Subnet Mask TCP/IP Configuration70 TCP/IP Configuration LAN-to-LAN ApplicationRemote Node Setup 5. Rem IP Subnet Mask - Enter the subnet mask for the remote network Static Route Setup Figure 7-4 Static Routing Example 74 TCP/IP ConfigurationFigure 7-6 IP Static Route Setup Figure 7-5 Menu 12 - Static Route Setup - Main Menu76 TCP/IP Configuration Network Numbers Novell IPX ConfigurationIPX Network Environment Frame TypePrestige on LAN without Server Prestige on LAN with ServerFigure 8-1 Prestige Operating in IPX Environment IPX Spoofing IPX Ethernet Setup∙ ∙ ∙ Ethernet ∙ SNAP LAN-to-LAN Application Remote Node SetupFigure 8-3 LAN-to-LAN application configure the default dial-in parameters in menu 13 see Chapter Static Route Setup Figure 8-5 NetWare Servers on Both Sides of the Link 84 Novell IPX ConfigurationFigure 8-6 Menu 12.2 - Edit IPX Static Route 86 Novell IPX Configuration Bridging Configuration Bridging ConfigurationIPX Spoofing Bridge Ethernet Setup LAN-to-LAN Application Figure 9-1 Bridge Ethernet Setup1. Bridge - Make sure this field is set to Yes Remote Node SetupBridge Static Route Setup Default Dial-In Setup for BridgeFigure 9-3 Menu 12.4 - Bridge Static Route 92 Bridging Configuration About Filtering Filter ConfigurationPrestige’s Filter Structure Configuring a Filter Set94 Filter Configuration ∙ # - Refers to the filter rule number ∙ Pr - Protocol ∙ SA - Source Address ∙ SP - Source Port number TCP/IP Filter Rule Configuring a Filter Rule∙ Yes ∙ No ∙ None ∙ Less ∙ Greater ∙ Equal ∙ Not Equal 100 Filter Configuration Figure 10-5 Menu 21.1.1 - Generic Filter Rule Generic Filter Rule102 Filter Configuration Novell IPX Filter Rule∙ None ∙ RIP Request ∙ RIP Response ∙ SAP Request ∙ SAP Response 104 Filter Configuration∙ SAP Get Nearest Server Request ∙ SAP Get Nearest Server Response SNMP Configuring Your Prestige For SNMP SupportAbout SNMP 106 SNMP Figure 11-1 Menu 22 - SNMP Configuration6. Trap Community - In this field, enter the community name that is sent with each trap to the SNMP manager. This should be treated like a password and match what the SNMP manager is expecting. The default is public 108 SNMP Installing a RADIUS Server Using RADIUS AuthenticationSystem Security Configuring the Prestige for RADIUS Authentication This will bring you to Menu 23.2 - System Security - External Server Adding Users to the RADIUS Database Using RADIUS Authentication for CLIDConfiguring the SMT Password 114 System Security About Telnet Configuration Telnet Configuration and CapabilitiesSystem Timeout Single AdministratorTelnet Capabilities System Status System Maintenance2. From this menu, select option 1. System Status 9. RXPkt - the number of received packets on this channel Figure 14-3 LAN Packet Which Triggered Last Call Terminal Baud RateLog and Trace View Error LogSyslog And Accounting Diagnostic 124 System Maintenance Below is an example of a failed Trace Display for a Successful IPCP Connection via Manual Call Restore Configuration Backup Configuration126 System Maintenance Figure 14-9 Example of uploading RAS using PCPLUS Software UpdateCall Control Command Interpreter Mode128 System Maintenance Figure 14-10 Menu 24.9.1 Call Control Parameters Call Control ParametersFigure 14-12 Budget Management BlacklistBudget Management Figure 14-11 BlacklistModem/ISDN TA Emulation 132 System Maintenance Connecting the RS-232 cable, cannot access the SMT TroubleshootingProblems Starting Up the Prestige None of the LEDs are on when you power up the PrestigeThe ISDN initialization failed Problems With the ISDN LineThe ISDN loopback test failed Problems Connecting to a Remote Node or ISP Problems with the LAN InterfaceCan’t PING any station on the LAN 136 Troubleshooting Problems Connecting to a Remote UserProvisioning For U.S. Switches ISDN Switch TypesProvisioning For the AT&T 5ESS Switches Setting Provisioning FeatureSetting Provisioning FeatureProvisioning Feature Provisioning For the Northern Telecom SwitchProvisioning Feature SettingEKTS Provisioning FeatureSetting 140 ISDN Switch TypesIndex See POTS See IPXIP Subnet Mask, 15, 39 SPID, 11, 13, 14, 30