ZyXEL Communications 791R 11.1.4 NAT Application, Figure 11-1How NAT Works

Prestige 791R G.SHDSL Router

Figure 11-1 How NAT Works

11.1.4 NAT Application

The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct WAN networks. More examples follow at the end of this chapter.

NAT

11-3

Contents

Page Copyright Federal Communications Commission (FCC) Interference Statement Information for Canadian Users ZyXEL Limited Warranty Customer Support Table of Contents Chapter 5 Dial Backup Chapter 7 Internet Access Page Chapter 13 SNMP Configuration Chapter 15 Firmware and Configuration File Maintenance Chapter 16 System Maintenance and Information Chapter 18 Call Scheduling ADDITIONAL INFORMATION Appendix A PPPoE Appendix B Virtual Circuit Topology List of Figures Page Page Page List of Tables Page Preface Syntax Conventions Bold Times New Roman Bold Arial The following section offers some background information on DSL. Skip to Chapter 1 if you wish to begin working with your router right away What is DSL Page Part I: GETTING STARTED Page Getting to Know Your G.SHDSL Router 1.1Features of the Prestige SNMP is only available if TCP/IP is configured on your Prestige IP Multicast IP Alias IP Policy Routing 10/100MB Auto-negotiationEthernet/Fast Ethernet Interface Encapsulation SUA for Single-IPAddress Internet Access Universal Plug and Play (UPnP) Full Network Management Upgrade Firmware via LAN 1.2Application Scenarios for the Prestige 1.2.1 Internet Access 1.2.2 LAN-to-LANApplication Figure 1-2 LAN-to-LANApplication Hardware Installation 2.1Installation Requirements 2.2Front Panel Table 2-1Front Panel LED Description 2.3Rear Panel 2.3.1 DSL Port 2.3.2 LAN 10/100M 2.3.3 CON/AUX Port 2.3.4 Reset Button 2.4Turning On Your Prestige Initial Setup 3.1Configuring Your Prestige For Internet Access 3.1.1 Procedure For SMT Configuration via Console Port 3.1.2 Procedure For SMT Configuration via Telnet 3.1.3 Connect to your Prestige Using the Web Configurator 3.2Resetting the Prestige 3.2.1 Methods of Restoring Factory-Defaults 3.2.2 Prestige SMT Menu Overview 3.3Navigating the SMT Interface Table 3-1Main Menu Commands 3.3.1 System Management Terminal Interface Summary 3.4Changing the System Password 3.5General Setup 3.5.1 Dynamic DNS 3.5.2 Procedure To Configure Menu 3.5.3 Procedure to Configure Dynamic DNS Table 3-4Configure Dynamic DNS Page WAN 4.1LAN and WAN Overview 4.1.1 LANs and WANs 4.1.2 LANs, WANs and the Prestige 4.2WAN Setup 4.2.1 Service Type 4.2.2 Rate Adaption 4.2.3 Transfer Rates 4.2.4 Standard Mode 4.3WAN Setup Screen Table 4-1WAN Setup Dial Backup 5.1Dial Backup Overview 5.1.1 Configuring Dial Backup in Menu 5.1.2 Advanced WAN Setup Figure 5-2Advanced WAN Setup Table 5-2Advanced WAN Port Setup: AT Commands Fields 5.2Remote Node Profile (Backup ISP) Figure 5-3Remote Node Profile (Backup ISP) Table 5-4Remote Node Profile (Backup ISP) Page 5.2.1 Editing PPP Options 5.2.2 Editing TCP/IP Options 5.2.3 Remote Node Script Overview 5.2.4 Editing Remote Node Script 5.2.5 Editing Filter Sets Figure 5-8Menu 11.5: Remote Node Filter (Ethernet) LAN 6.1LAN Overview 6.1.1 IP Address and Subnet Mask 6.1.2 Private IP Addresses 6.1.3 Factory Ethernet Defaults 6.1.4 RIP Setup 6.1.5 DHCP Configuration 6.1.6 IP Multicast 6.1.7 IP Policies 6.1.8 IP Alias 6.2Ethernet Setup 6.2.1 LAN Port Filter Setup 6.2.2 IP Alias Setup TCP/IP and DHCP Ethernet Setup Edit IP Alias Figure 6-5TCP/IP and DHCP Setup Menu 3.2.1 — IP Alias Setup Figure 6-6IP Alias Setup 6.2.3 Route IP Setup 6.2.4 TCP/IP Ethernet Setup and DHCP Page Page Page Internet Access 7.1Internet Access Overview 7.2Encapsulation 7.2.1 ENET ENCAP 7.2.2 PPP over Ethernet 7.3IP Address Assignment 7.3.1 Using PPPoA or PPPoE Encapsulation 7.3.2 Using RFC 1483 Encapsulation 7.3.3 Using ENET ENCAP Encapsulation 7.4VPI and VCI 7.5Multiplexing 7.5.1 VC-basedMultiplexing 7.5.2 LLC-basedMultiplexing 7.6Traffic Shaping If the PCR, SCR or MBS is set to the default of “0”, the system will assign a maximum value that correlates to your upstream line rate Figure 7-1Example of Traffic Shaping 7.7Internet Access Configuration 7.8Internet Access Setup Page Page Part II: ADVANCED APPLICATIONS Page Remote Node Configuration 8.1Remote Node Overview 8.2Remote Node Setup 8.2.1 Encapsulation and Multiplexing Scenarios Figure 8-2Remote Node Profile Table 8-1Remote Node Profile Page 8.2.2 Outgoing Authentication Protocol 8.3Remote Node Network Layer Options Edit IP/Bridge Yes [ENTER] to display Menu 11.3 – Remote Node Network Layer Options Figure 8-3Remote Node Network Layer Options Table 8-2Remote Node Network Layer Options Page 8.3.1 My WAN Addr Sample IP Addresses 8.4Remote Node Filter 8.4.1 Web Configurator Internet Security Filter Rules 8.4.2 Web Configurator Filter Sets Figure 8-8Menu 21- Filer Set Configuration Figure 8-9Menu 21.11- WebSet Figure 8-10Menu 21.12- WebSet 8.5Editing ATM Layer Options 8.5.1 VC-basedMultiplexing (non-PPPEncapsulation) 8.5.2 LLC-basedMultiplexing or PPP Encapsulation Page Static Route Setup 9.1Static Route Overview Menu 12 – Static Route Setup Figure 9-2Static Route Setup IP Static Route Setup Figure 9-3IP Static Route Setup Figure 9-4Edit IP Static Route Table 9-1Edit IP Static Route Page Bridging Setup 10.1 Bridging Overview 10.2 Bridge Ethernet Setup 10.2.1 Remote Node Bridging Setup 10.2.2 Bridge Static Route Setup Figure 10-2Bridge Static Route Setup Figure 10-3Edit Bridge Static Route Table 10-2Edit Bridge Static Route Page Network Address Translation (NAT) 11.1 NAT Overview 11.1.1 NAT Definitions 11.1.2 What NAT Does 11.1.3 How NAT Works 11.1.4 NAT Application 11.1.5 NAT Mapping Types Many-to-Many No Overload Server Port numbers do change for 11.2 Applying NAT 11.3 NAT Setup 11.3.1 Address Mapping Sets Figure 11-6Address Mapping Sets Figure 11-7Address Mapping Rules - SUA Table 11-4Address Mapping Rules - SUA User-DefinedAddress Mapping Sets Select Rule Set Name Figure 11-8Address Mapping Rules If the Set Name field is left blank, the entire set will be deleted The Type, Local and Global Start/End IPs are configured in menu (described later) and the values are displayed here Ordering Your Rules Edit Menu 15.1.1.1 - Address Mapping Rule Local Global Start/End IPs An End IP address must be numerically greater than its corresponding IP Start Page 11.4 NAT Server Sets – Port Forwarding 11.4.1 Configuring a Server behind NAT Figure 11-11NAT Server Setup Start Port No End Port No 11.5 General NAT Examples 11.5.1 Example 1: Internet Access Only Figure 11-13NAT Example Figure 11-14Internet Access & NAT Example 11.5.2 Example 2: Internet Access with an Inside Server 11.5.3 Example 3: Multiple Public IP Addresses With Inside Servers Figure 11-17NAT Example Menu 15.1 - Address Mapping Sets Figure 11-18Example 3 - Menu Edit Action One-to-One Start IP Figure 11-19Example 3 - Menu Figure 11-20Example 3 - Final Menu Step 9. Enter 2 in Menu 15 - NAT Setup 11.5.4 Example 4: NAT Unfriendly Application Programs Figure 11-23Example 4 - Menu Figure 11-24Example 4 - Menu Part III: ADVANCED MANAGEMENT Page Filter Configuration 12.1 Filtering Overview Figure 12-1Outgoing Packet Filtering Process Execute Filter Rule 12.2 Filter Set Configuration Filter rule set 11 and 12 are used by the web configurator. Your custom configurator may be lost if you use rule 11 or Edit Comments Menu 21.1 – Filter Rules Summary Figure 12-4NetBios WAN Filter Rules Summary Figure 12-6Telnet_WAN Filter Rules Summary Figure 12-7PPPoE Filter Rules Summary Figure 12-8FTP_WAN Filter Rules Summary Figure 12-9Web Set1 Filter Rules Summary 12.2.1 Filter Rules Summary Menus 12.3 Filter Rule Configuration 12.3.1 TCP/IP Filter Rule Page Page Figure 12-12Executing an IP Filter 12.3.2 Generic Filter Rule Table 12-4Generic Filter Rule Menu Fields 12.4 Filter Types and NAT 12.5 Example Filter Figure 12-15Sample Telnet Filter Filter Set Configuration Filter Rules Summary Figure 12-16Sample Filter Rules Summary — Menu Figure 12-17Sample Filter Rules Summary — Menu 12.6 Applying Filters and Factory Defaults 12.6.1 Ethernet Traffic 12.6.2 Remote Node Filters Page SNMP Configuration 13.1 SNMP Overview 13.2 Supported MIBs 13.3 SNMP Configuration 13.4 SNMP Traps Page System Maintenance 14.1 System Maintenance Overview 14.2 System Status Figure 14-2System Maintenance — Status Table 14-1System Maintenance — Status 14.3 System Information 14.3.1 System Information Figure 14-4System Maintenance — Information Table 14-2System Maintenance — Information 14.3.2 Console Port Speed 14.4 Log and Trace 14.4.1 Viewing Error Log 14.4.2 Syslog Table 14-3System Maintenance Menu — Syslog Parameters 14.5 Diagnostic Table 14-4System Maintenance Menu — Diagnostic Page Firmware and Configuration File Maintenance 15.1 Filename Conventions 15.2 Backup Configuration 15.2.1 Backup Configuration 15.2.2 Using the FTP Command from the Command Line 15.2.3 Example of FTP Commands from the Command Line 15.2.4 GUI-basedFTP Clients 15.2.5 TFTP and FTP over WAN Will Not Work When 15.2.6 Backup Configuration Using TFTP 15.2.7 TFTP Command Example 15.2.8 GUI-basedTFTP Clients 15.2.9 Backup Via Console Port 15.3 Restore Configuration 15.3.1 Restore Using FTP 15.3.2 Restore Using FTP Session Example 15.3.3 Restore Via Console Port 15.4 Uploading Firmware and Configuration Files 15.4.1 Firmware File Upload 15.4.2 Configuration File Upload 15.4.3 FTP File Upload Command from the DOS Prompt Example 15.4.4 FTP Session Example of Firmware File Upload 15.4.5 TFTP File Upload 15.4.6 TFTP Upload Command Example 15.4.7 Uploading Via Console Port 15.4.8 Uploading Firmware File Via Console Port 15.4.9 Example Xmodem Firmware Upload Using HyperTerminal 15.4.10Uploading Configuration File Via Console Port 15.4.11Example Xmodem Configuration Upload Using HyperTerminal Figure 15-19Example Xmodem Upload System Maintenance and Information 16.1 Command Interpreter Mode 16.2 Call Control Support 16.2.1 Budget Management Figure 16-4Budget Management Table 16-1Budget Management 16.3 Time and Date Setting 16.3.1 Resetting the Time Page IP Policy Routing 17.1 IP Policy Routing Overview 17.1.1 IP Policy Routing Benefits 17.1.2 Routing Policy 17.2 IP Routing Policy Setup Figure 17-2Sample IP Routing Policy Setup Table 17-1IP Routing Policy Setup Abbreviations Menu 25.1.1 – IP Routing Policy Figure 17-3IP Routing Policy Table 17-2IP Routing Policy 17.3 Applying an IP Policy 17.3.1 Ethernet IP Policies Figure 17-4TCP/IP and DHCP Ethernet Setup Figure 17-5Remote Node Network Layer Options 17.4 IP Policy Routing Example Figure 17-7IP Routing Policy Example Menu 25.1 — IP Routing Policy Setup Figure 17-8IP Routing Policy Figure 17-9Applying IP Policies Page Call Scheduling 18.1 Call Scheduling Overview 18.2 Schedule Setup To delete a schedule set, enter the set number and press [SPACE BAR] and then [ENTER] (or delete) in the Edit Name field Menu 26.1 — Schedule Set Setup Figure 18-2Schedule Set Setup Duration Main Menu PPPoA Figure 18-3Applying Schedule Set(s) to a Remote Node (PPPoE) Remote Management 19.1 Remote Management Overview 19.1.1 Remote Management and Telnet Services 19.1.2 Remote Management and FTP Services 19.1.3 Remote Management and Web Services 19.2 Remote Management Setup 19.2.1 Remote Management Limitations 19.3 Remote Management and NAT 19.4 System Timeout Page Part: ADDITIONAL INFORMATION Page Universal Plug-and-Play(UPnP) 20.1 Universal Plug and Play Overview 20.1.1 How do I know if I'm using UPnP 20.1.2 NAT Transversal 20.1.3 Cautions with UPnP 20.2Accessing the Prestige Web Configurator to Configure UPnP 20.2.1 Configuring UPnP 20.3 Installing UPnP in Windows Example Step 1. Click Start and Control Panel. Double-click Add/Remove Programs Windows Setup Communication Components Details Installing UPnP in Windows XP Step 2. Double-click Network Connections Network Connections Advanced Optional Networking Components … 20.4 Using UPnP in Windows XP Example Step 3. In the Internet Connection Properties Add When the UPnP-enableddevice is disconnected from your computer, all port mappings will be deleted automatically Web Configurator Easy Access Step 1. Click start and then Control Panel Network Connections Step 3. Select My Network Places under Local Network Invoke Page Troubleshooting 21.1 Problems Starting Up the Prestige 21.2 Problems with the LAN Interface 21.3 Problems with the WAN Interface 21.4 Problems with Internet Access 21.5 Problems with the Password 21.6 Problems with Telnet Page Appendix A PPPoE How PPPoE Works Prestige as a PPPoE Client Diagram 2 Prestige as a PPPoE Client Appendix B Virtual Circuit Topology Appendix C Power Adapter Specifications Page Page Index