ZyXEL Communications 650 Figure 8-18Filtering Remote Node Traffic

Prestige 650 ADSL Router

Menu 11.5 - Remote Node Filter

Input Filter Sets: protocol filters= 3

device filters= Output Filter Sets:

protocol filters= 1

Apply filter 3 to block Telnet, FTP and Web traffic from the WAN.

Apply filter 1 to block NETBIOS traffic to the WAN.

Figure 8-18 Filtering Remote Node Traffic

Note that call filter sets are visible when you select PPPoA or PPPoE encapsulation.

Filter Configuration

8-21

Contents

Page Copyright Federal Communications Commission (FCC) Interference Statement ZyXEL Limited Warranty Customer Support Table of Contents Chapter 3 Internet Access Chapter 4 Remote Node Configuration Chapter 5 Remote Node TCP/IP Configuration Chapter 6 Bridging Setup Chapter 7 Network Address Translation (NAT) Chapter 8 Filter Configuration Chapter 9 SNMP Configuration Chapter 13 IP Policy Routing ADDITIONAL INFORMATION Chapter 16 Troubleshooting Appendix B Virtual Circuit Topology Appendix C Boot Module Commands Page List of Figures Page Page Page List of Tables Page Preface Syntax Conventions Bold Times New Roman Bold Arial The following section offers some background information on DSL. Skip to Chapter 1 if you wish to begin working with your router right away What is DSL Part I: GETTING STARTED Page Getting To Know Your Prestige 1.1Prestige 650 ADSL Internet Access Router 1.2Features of the Prestige NAT for Single-IP-addressInternet Access 10/100M Auto-negotiationEthernet/Fast Ethernet Interface Dynamic DNS Support Multiple PVC (Permanent Virtual Circuits) Support ADSL Transmission Rate Standards •Protocol Support Networking Compatibility Multiplexing Encapsulation Network Management Remote Management Other PPPoE Features Diagnostics Capabilities Filters Ease of Installation 1.3Applications for the Prestige 1.3.1 Internet Access 1.3.2 LAN to LAN Application Figure 1-2 LAN-to-LANApplication Page Hardware Installation and Initial Setup 2.1Front Panel LEDs of the P650 2.2Rear Panel Connections of the Prestige Figure 2-2Prestige 650 Rear Panel and Connections 2.2.1 DSL Port 2.2.2 Console Port 2.2.3 LAN 10/100M Port 2.2.4 Power Port 2.3Additional Installation Requirements 2.4P650 with POTS 2.4.1 Connecting a POTS Splitter 2.4.2 Telephone Microfilters 2.5P650 With ISDN 2.6Turning On Your Prestige 2.7Configuring Your Prestige For Internet Access 2.7.1 Initial Screen 2.7.2 Entering Password 2.8Resetting the Prestige 2.8.1 Methods of Restoring Factory-Defaults 2.8.2 Procedure To Use The Reset Button 2.8.3 Prestige 650 SMT Menu Overview 2.9Navigating the SMT Interface 2.9.1 System Management Terminal Interface Summary 2.10 Changing the System Password 2.11 General Setup 2.11.1 Dynamic DNS 2.11.2 Procedure To Configure Menu 2.11.3 Procedure to Configure Dynamic DNS 2.12 LAN Setup 2.12.1 LAN Port Filter Setup 2.13 Protocol Dependent Ethernet Setup Page Internet Access 3.1Factory Ethernet Defaults 3.2LANs and WANs 3.2.1 LANs, WANs and the Prestige 3.3TCP/IP Parameters 3.3.1 IP Address and Subnet Mask 3.3.2 Private IP Addresses 3.3.3 RIP Setup 3.3.4 DHCP Configuration 3.4IP Multicast 3.5IP Policies 3.6IP Alias 3.6.1 IP Alias Setup Menu 3.2.1 — IP Alias Setup Figure 3-5Menu 3.2.1 — IP Alias Setup Table 3-1IP Alias Setup Menu Fields 3.7Route IP Setup 3.8TCP/IP Ethernet Setup and DHCP Figure 3-7Menu 3.2 — TCP/IP and DHCP Ethernet Setup Table 3-2DHCP Ethernet Setup Menu Fields Table 3-3TCP/IP Ethernet Setup Menu Fields 3.9VPI and VCI 3.10 Multiplexing 3.10.1 VC-basedMultiplexing 3.10.2 LLC-basedMultiplexing 3.11 Encapsulation 3.12 IP Address Assignment 3.12.1 Using PPPoA or PPPoE Encapsulation 3.12.2 Using RFC 1483 Encapsulation 3.12.3 Using ENET ENCAP Encapsulation 3.13 Internet Access Configuration 3.13.1 Traffic Shaping Figure 3-9Internet Access Setup Table 3-5Internet Access Setup Menu Fields Page Part II: ADVANCED APPLICATIONS Page Remote Node Configuration 4.1Remote Node Setup 4.1.1 Remote Node Profile 4.1.2 Encapsulation and Multiplexing Scenarios Nailed-UpConnection (PPPoA/PPPoE) Figure 4-2Menu 11.1 — Remote Node Profile Remote Node Profile Table 4-1Remote Node Profile Menu Fields Page 4.1.3 Outgoing Authentication Protocol 4.2Remote Node Setup Page 4.3Remote Node Filter Remote Node TCP/IP Configuration 5.1TCP/IP Configuration 5.1.1 Editing TCP/IP Options Figure 5-1Menu 11.6 for VC-basedMultiplexing LLC-basedMultiplexing or PPPoA Encapsulation LLC-based Figure 5-2Menu 11.6 for LLC-basedMultiplexing or PPPoA Encapsulation My Wan Addr Figure 5-3Sample IP Addresses for a TCP/IP LAN-to-LANConnection Menu 11.1 – Remote Node Profile Table 5-1 TCP/IP-RelatedFields in Menu 11.1 — Remote Node Profile Figure 5-4Remote Node Network Layer Options Remote Node Network Layer Options Table 5-2TCP/IP Remote Node Configuration 5.1.2 IP Static Route Setup Figure 5-5Sample Static Routing Topology Configuration Static Route Setup Figure 5-6Menu 12 — Static Route Setup IP Static Route Setup Figure 5-7Menu 12.1 — IP Static Route Setup Figure 5-8Edit IP Static Route Menu 12.1.1 – Edit IP Static Route Setup Table 5-3Edit IP Static Route Menu Fields Page Bridging Setup 6.1Bridging in General 6.2Bridge Ethernet Setup 6.2.1 Remote Node Bridging Setup 6.2.2 Bridge Static Route Setup Figure 6-2Menu 12.3.1 — Edit Bridge Static Route Edit Bridge Static Route Table 6-2Edit Bridge Static Route Menu Fields Page Network Address Translation (NAT) 7.1Introduction 7.1.1 NAT Definitions 7.1.2 What NAT Does 7.1.3 How NAT Works 7.1.4 NAT Application 7.1.5 NAT Mapping Types Many-to-Many No Overload Server Port numbers do change for 7.2Using NAT 7.2.1 SUA (Single User Account) Versus NAT 7.2.2 Applying NAT Edit IP [ENTER] to bring up Menu 11.3 - Remote Node Network Layer Options 7.3NAT Setup 7.3.1 Address Mapping Sets Figure 7-7Menu 15.1.255 — SUA Address Mapping Rules Menu 15.1.255 is read-only Table 7-4SUA Address Mapping Rules User-DefinedAddress Mapping Sets Select Rule Set Name Figure 7-8Menu 15.1.1 — First Set If the Set Name field is left blank, the entire set will be deleted Table 7-5Fields in Menu No changes to the set take place until this action is taken Edit Menu 15.1.1.1 - Address Mapping Rule Local Page 7.4NAT Server Sets — Port Forwarding 7.4.1 Configuring a Server behind NAT Figure 7-10Menu 15.2 — NAT Server Setup Step 3. Enter 1 to go to Menu 15.2.1 NAT Server Setup as follows Figure 7-11Menu 15.2.1 — NAT Server Setup Start Port No End Port No Figure 7-12Multiple Servers Behind NAT Example 7.5General NAT Examples 7.5.1 Example 1: Internet Access Only 7.5.2 Example 2: Internet Access with an Inside Server 7.5.3 Example 3: Multiple Public IP Addresses With Inside Servers Figure 7-17NAT Example Menu 15.1 - Address Mapping Sets Edit Action One-to-One Start IP Figure 7-18Example 3: Menu Figure 7-19Example 3: Menu Figure 7-20Example 3: Final Menu Step 9. Enter 2 in Menu 15 - NAT Setup Menu 15.2 - NAT Server Sets 7.5.4 Example 4: NAT Unfriendly Application Programs Figure 7-22Example 4: Menu 15.1.1.1 — Address Mapping Rule Figure 7-23Example 4: Menu 15.1.1 — Address Mapping Rules Part III: ADVANCED MANAGEMENT Page Filter Configuration 8.1About Filtering Figure 8-1Outgoing Packet Filtering Process Execute Filter Rule 8.2Configuring a Filter Set Menu 21.1 – Filter Rules Summary Figure 8-4NetBIOS_WAN Filter Rules Summary Figure 8-5NetBIOS_LAN Filter Rules Summary Figure 8-6Telnet_WAN Filter Rules Summary Figure 8-7PPPoE Filter Rules Summary 8.2.1 Filter Rules Summary Menus Table 8-1Abbreviations Used in the Filter Rules Summary Menu Table 8-2Rule Abbreviations Used 8.3Configuring a Filter Rule 8.3.1 TCP/IP Filter Rule Figure 8-10Menu 21.1.1 — TCP/IP Filter Rule Table 8-3TCP/IP Filter Rule Menu Fields Page Page Figure 8-11Executing an IP Filter 8.3.2 Generic Filter Rule Table 8-4Generic Filter Rule Menu Fields 8.4Filter Types and NAT 8.5Example Filter Figure 8-14Sample Telnet Filter Filter Set Configuration 21.3.1 — TCP/IP Filter Rule Figure 8-15Sample Filter — Menu 8.6Applying Filters and Factory Defaults 8.6.1 Ethernet Traffic 8.6.2 Remote Node Filters Figure 8-18Filtering Remote Node Traffic Page SNMP Configuration 9.1About SNMP 9.2Supported MIBs 9.3SNMP Configuration Figure 9-2Menu 22 — SNMP Configuration Table 9-1SNMP Configuration Menu Fields 9.4SNMP Traps System Information and Diagnosis 10.1 System Status Figure 10-2Menu 24.1 — System Maintenance — Status Table 10-1System Maintenance — Status Menu Fields 10.2 System Information and Console Port Speed 10.2.1 System Information Figure 10-4Menu 24.2.1 — System Maintenance — Information Table 10-2Fields in System Maintenance 10.2.2 Console Port Speed 10.3 Log and Trace 10.3.1 Viewing Error Log 10.3.2 Syslog and Accounting Page 10.4 Diagnostic Page Page Firmware and Configuration File Maintenance 11.1 Filename Conventions 11.2 Backup Configuration 11.2.1 Backup Configuration 11.2.2 Using the FTP Command from the Command Line 11.2.3 Example of FTP Commands from the Command Line 11.2.4 GUI-basedFTP Clients 11.2.5 TFTP and FTP over WAN Will Not Work When 11.2.6 Backup Configuration Using TFTP 11.2.7 TFTP Command Example 11.2.8 GUI-basedTFTP Clients 11.2.9 Backup Via Console Port 11.3 Restore Configuration 11.3.1 Restore Using FTP 11.3.2 Restore Using FTP Session Example 11.3.3 Restore Via Console Port 11.4 Uploading Firmware and Configuration Files 11.4.1 Firmware File Upload 11.4.2 Configuration File Upload 11.4.3 FTP File Upload Command from the DOS Prompt Example 11.4.4 FTP Session Example of Firmware File Upload 11.4.5 TFTP File Upload 11.4.6 TFTP Upload Command Example 11.4.7 Uploading Via Console Port 11.4.8 Uploading Firmware File Via Console Port 11.4.9 Example Xmodem Firmware Upload Using HyperTerminal 11.4.10Uploading Configuration File Via Console Port 11.4.11Example Xmodem Configuration Upload Using HyperTerminal Figure 11-19Example Xmodem Upload System Maintenance and Information 12.1 Command Interpreter Mode 12.2 Call Control Support 12.2.1 Budget Management Figure 12-4Budget Management Table 12-1Budget Management 12.3 Time and Date Setting 12.3.1 Resetting the Time Page IP Policy Routing 13.1 Introduction 13.2 Benefits 13.3 Routing Policy 13.4 IP Routing Policy Setup Figure 13-2Menu 25.1 — Sample IP Routing Policy Setup Table 13-1IP Routing Policy Setup Menu 25.1.1 – IP Routing Policy Figure 13-3IP Routing Policy Table 13-2IP Routing Policy 13.5 Applying an IP Policy 13.5.1 Ethernet IP Policies 13.6 IP Policy Routing Example Figure 13-6Example of IP Policy Routing Menu 25.1.1 — IP Routing Policy Figure 13-7IP Routing Policy Example Menu 25.1 — IP Routing Policy Setup Figure 13-8IP Routing Policy Figure 13-9Applying IP Policies Page Call Scheduling 14.1 Introduction To delete a schedule set, enter the set number and press [SPACE BAR] and then [ENTER] (or delete) in the Edit Name field Menu 26.1 — Schedule Set Setup Figure 14-2Schedule Set Setup Duration Main Menu PPPoE Figure 14-3Applying Schedule Set(s) to a Remote Node (PPPoE) Remote Management 15.1 Telnet 15.2 FTP 15.3 Web 15.4 Remote Management 15.4.1 Remote Management Setup 15.4.2 Remote Management Limitations 15.5 Remote Management and NAT 15.6 System Timeout Part: ADDITIONAL INFORMATION Page Troubleshooting 16.1 Problems Starting Up the Prestige 16.2Problems with the LAN Interface 16.3 Problems with the WAN Interface 16.4 Problems with Internet Access 16.5 Problems with the Password 16.6 Problems with Telnet Page Appendix A PPPoE How PPPoE Works Prestige as a PPPoE Client Diagram 2 Prestige as a PPPoE Client Appendix B Virtual Circuit Topology Page Appendix C Boot Module Commands Diagram 5 Boot Module Commands Appendix D Power Adapter Specifications Page Appendix E TCP/IP Client Client for Microsoft Networks Configuring TCP/IP Obtain an IP address automatically Specify an IP address Setting up Your Windows NT/2000 Computer Internet Protocol (TCP/IP) 3.The Internet Protocol TCP/IP Properties window opens Subnet mask Default gateway 4.The Internet Protocol TCP/IP Properties window opens Use the following IP Address -Inthe IP Settings tab, in IP addresses, click Add TCP/IP Address Default gateways Setting up Your Macintosh Computer Configuring TCP/IP Properties Ethernet Connect via Using DHCP Server Page Index