Prestige 2302 Support Notes | ZyXEL Communications P-2302HW specification

Configure an Internal Server Behind the Prestige

Prestige 2302 Support Notes

Configure an Internal Server Behind the Prestige

•Introduction

SUA makes your LAN appear as a single machine to the outside world. However, you can make a server (such as a web server, FTP server or mail server) behind the ZyXEL device assessable/visible to the outside world. A server behind the ZyXEL device cannot be set to be a DHCP client. That is, the server must use a fixed IP address so outside users can access the server using the static IP address.

A service is identified by its standard port number. You can allow public access to servers for specified services based on the port number. In addition, you can also set a default server behind SUA. Thus service requests that do not match any of the servers are forwarded to the default server. If you do not set a default SUA server, then the unknown service requests are simply discarded.

•Configuration

To make an inside server visible to the outside world, specify the service port number and the IP address of the server in SMT menu 15.2.1 - NAT Server Setup or the Port Forwarding screen in the web configurator. Users use the WAN IP address of the Prestige to access the inside SUA servers. You can obtain the WAN IP address of the Prestige in SMT menu 24.1.

12

All contents copyright (c) 2005 ZyXEL Communications Corporation.

Image 12

ZyXEL Communications P-2302HW Configure an Internal Server Behind the Prestige, Prestige 2302 Support Notes, Introduction

Contents

With Lifeline/ DECT/ USB P-2302HW SERIESSupport Notes VoIP Station Gateway Prestige 2302 Support Notes INDEX What is the difference between NAT and SUA? CLI Command List What is Voice over IP?How does Voice over IP work? Unable to Get WAN IP from ISP Application Notes Prestige 2302 Support NotesGeneral Application Notes Internet Connection 2. TCP/IP Installation 3. TCP/IP ConfigurationSetting up the Prestige router 1. Accessing the Prestige Web Management Interface All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes Prestige 2302 Support Notes WAN IP Address field Setup the Prestige as a DHCP Relay What is DHCP Relay? Setup the Prestige as a DHCP Client IP Subnet Mask= Configure an Internal Server Behind the Prestige ConfigurationIntroduction Service Port NumberThe following table lists some common service port numbers Telnet Configure a PPTP server Behind SUA Window98 PPTP Client / Internet / NT RAS Server Protocol Stack The PPTP is already supported in Windows NT and Windows 98. For Windows 95, a software upgrade with Dial-Up Networking 1.2 is required ƒ Set the Prestige that connects to the ISP as the Internet gateway How does the ZyXEL filter feature work? About Filters & Filter Examples Filter Structure Filter Types and SUA Menu 21.1.1 - Generic Filter Rule Filter # 1,1 Filter Type= Generic Filter Rule Active= Yes Offset= Length=Mask= N/A Value= N/A More= No Log= None Action Matched= Check Next Rule Action Not Matched= Check Next Rule Protocol and device rule cannot be active together protocol filters= device filters=Log= None Route= Edit PPP Options= NoRem IP Edit IP/IPX/Bridge= No Filter to block web services Generally, the outbound packets for a web service could be as follows1. The outbound packet type the protocol and port number 2. The source IP address 2. Configure rule one for a. HTTP packets using TCP06 and port number ENTER to Confirm or 3. Configure rule 2 for b. DNS requests using TCP06 and port number 4. Rule 3 for c. DNS packets using UDP17 and port number A filter to block a specific client 2.Create one rule to block all packets from this client Key Settings A filter to block a specific MAC addressBefore you Begin The following shows detailed information with Ethernet Version Configurations Select Generic Filter Rule in the Filter Type field Active Select Yes in the Active field Offset in bytes A filter to block NetBIOS packets Configure field Action Not Matched= Check Next Rule Rule 2-Destination port number 137 with protocol number 17 UDP Rule 3-Destination port number 138 with protocol number 6 TCP Rule 4-Destination port number 138 with protocol number 17 UDP Rule 5-Destination port number 139 with protocol number 6 TCP Rule 6-Destination port number 139 with protocol number 17 UDP Prestige 2302 Support Notes Rule 2-Source port number 137, Destination port number 53 with protocol number 17 UDP Using Dynamic DNS DDNS 1. What is DDNS? web site from the WAN when you have set up the DDNS settings. With DDNS, users can always access a web site regardless of the WAN IP address on the Prestige Service Provider PasswordEnable Wildcard Network Management Using SNMP 6. Reads 7. Writes8. Traversal operations 9. Traps 2. SNMPv1 Operations GetNextTrap 3. ZyXEL SNMP Implementation If the machine warmstarts, the trap will be sent after booting 4. Configure the Prestige for SNMP Get Community Set Community Trusted Host Trap Community Trap DestinationNMS managers entered, the Prestige will not send traps to any NMS manager Using syslog 4. Prestige SetupUNIX Setup Packet triggered log Filter logline = the WAN ID in a board channel = channel ID within the WAN PPP Log Using IP Alias What is IP Alias ? IP Alias Setup 2004 ZyXEL Communications Corpras ip ro st Interface DHCP Setup TCP/IP Setup Edit IP Alias IP Alias IP AliasMenu 3.2.1 - IP Alias Setup IP Alias 1= Yes IP Address= Enter here to CONFIRM or ESC to CANCEL System Date and Time Settings on the Prestige Using IP Multicast Multicast Select IGMP-v1 for IGMP version 1 or IGMP-v2 for IGMP version Using Prestige traffic redirect Traffic Redirect on the WANWhat is Traffic Redirect ? How to set up the backup gateway? Traffic Redirect on the LAN Traffic Redirect Setup Backup TimeoutActive Gateway Using Universal Plug n Play UPnP 1. What is UPnP UPnP Operations 2. Using UPnP in ZyXEL devices Device Prestige Service NAT function provided on the PrestigeControl Point PC1 Select Enable UPnP service to activate UpnP on the device All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes All contents copyright c 2005 ZyXEL Communications Corporation Trunk Setup in P-2302HWL/HWUDL-P1 Follow the 3 steps below to set up trunks on P-2302HWL/HWUDL-P1 o Step 2 Access the web configurator and click VoIP Advance Setting So how do you make a phone call over the PSTN and SIP networks? Two examples are described next Example SIP Account Setup VoIP Application Notes Prestige 2302 Support Notes The following table describes the screen labels Service LabelDescription SIP Account Authentication PasswordSettings Reset Use this field to select the phone port that you want to configure Step 3. In the navigation panel, click VoIP Phone Analog PhoneThe table below describes the related fields Phone Volume Speed dial Phone book setupSpeaking Listening Each fields detail description of the page is listed below Entry Speed DialName Type ZyNOS FAQ What is ZyNOS?How to access the embedded web configurator? Clear How do I upload the firmware via the web configurator? Why cant I telnet into Prestige from the WAN? What should I do if I forget the system password? What is SUA? When should I use SUA? What is the difference between NAT and SUA?How many network users does SUA/NAT support? Product FAQ Why cant I configure device or protocol filters?What is the Prestige Internet Access Sharing Router? What are Device and Protocol filters? What is PPPoE? How do I know I am using PPPoE?Why does my provider use PPPoE? How can I configure the Prestige? What network interface does the Prestige support? What can I do with the Prestige?Does the Prestige support dynamic IP addressing? How does e-mail work through the Prestige? What is the difference between the Standard and RoadRunner service? What DHCP capability does the Prestige support? What network interface does the new Prestige series support? Does the Prestige support TFTP?Does the Prestige support TFTP over WAN? How fast is the DSL connection? 1. If your ISP checks the MAC address 2. If your ISP checks the host name 3. If your ISP checks the User IDa. Assigned By Select IP address attached on LAN c. My Login Name Enter the login user name given to you by your ISP What is BOOTP/DHCP? What is DDNS?When do I need the DDNS service? What DDNS servers does the Prestige support? VoIP FAQ What is DDNS wildcard?Can VPN tunnels still work on a Prestige using SUA? How do I set up my Prestige to route IPsec packets over SUA? Why use VoIP? What is the relationship between codec and VoIP?What is the difference between H.323 and SIP? How does Voice over IP work? What is voice quality? What is codec?Can H.323 and SIP interoperate with each other? How are voice quality normally rated? Which codec should I choose? What do I need in order to use SIP?I am unable to register to a SIP server I can register to the SIP server but cannot establish a call What should I do if there may be a hardware problem with my Prestige? Trouble Shooting Unable to Get WAN IP from ISP1. If your ISP checks the MAC address 2. If your ISP checks the Host Name Field settingsAssigned By= IP Address= 3. If your ISP checks the User ID Field SettingSystem Name Enter the same name as the compute name on the computer Using Embedded Packet Trace Embedded Packet Trace 1.1 Disable WAN packet trace sys trcp channel enet1 none 1.2 Enable LAN packet trace sys trcp channel enet0 bothway1. Online Trace--display the trace real time on screen 2. Offline Trace--capture the trace first and display later 103 All contents copyright c 2005 ZyXEL Communications Corporation Prestige sys trcd parseDestination MAC Addr = 0x330B 104 All contents copyright c 2005 ZyXEL Communications Corporation 105 All contents copyright c 2005 ZyXEL Communications Corporation 1.1 Disable LAN packet trace sys trcp channel enet0 none 1.2 Enable WAN packet trace sys trcp channel enet1 bothway106 All contents copyright c 2005 ZyXEL Communications Corporation TCP Data Length=6 107 All contents copyright c 2005 ZyXEL Communications Corporation 108 All contents copyright c 2005 ZyXEL Communications Corporation +Y.x 109 All contents copyright c 2005 ZyXEL Communications Corporation Offline Trace 110 All contents copyright c 2005 ZyXEL Communications Corporation 1.7 Display specific trace packets sys trcp parse fromindex toindex 112 All contents copyright c 2005 ZyXEL Communications Corporation LAN Frame ENET0-XMIT 1.1 Disable LAN packet trace sys trcp channel enet0 none 114 All contents copyright c 2005 ZyXEL Communications Corporation LAN Frame ENET1-RECV a.P&Mq= Debugging PPPoE Connection Debugging PPPoE Connection Example- Trace Example on a crashed system 118 All contents copyright c 2005 ZyXEL Communications Corporation 119 All contents copyright c 2005 ZyXEL Communications Corporation LAN/WAN Packet Trace 1. Online Trace--display real-time trace results on the screen 121 All contents copyright c 2005 ZyXEL Communications Corporation 122 All contents copyright c 2005 ZyXEL Communications Corporation 123 All contents copyright c 2005 ZyXEL Communications Corporation 124 All contents copyright c 2005 ZyXEL Communications Corporation 1.2 Enable WAN packet trace sys trcp channel mpoa00 bothway 125 All contents copyright c 2005 ZyXEL Communications Corporation 126 All contents copyright c 2005 ZyXEL Communications Corporation 1.1 Disable WAN packet trace sys trcp channel mpoa00 none CLI Command List 128 All contents copyright c 2005 ZyXEL Communications Corporation