Configure a PPTP server Behind SUA | ZyXEL Communications P-2302HW

Configure a PPTP server Behind SUA

Prestige 2302 Support Notes

Configure a PPTP server Behind SUA

•Introduction

PPTP is a tunneling protocol defined by the PPTP forum that allows PPP packets to be encapsulated within Internet Protocol (IP) packets and forwarded over any IP network, including the Internet itself.

In order to run the Windows 9x PPTP client, you must be able to establish an IP connection with a tunnel server such as the Windows NT Server 4.0 Remote Access Server.

Windows Dial-Up Networking uses the Internet standard Point-to-Point (PPP) to provide a secure, optimized multiple-protocol network connection over dial-up telephone lines. All data sent over this connection can be encrypted and compressed, and multiple network level protocols (TCP/IP, NetBEUI and IPX) can be run correctly. Windows NT Domain Login level security is preserved even across the Internet.

Window98 PPTP Client / Internet / NT RAS Server Protocol Stack

PPTP appears as new modem type (Virtual Private Networking Adapter) that can be selected when setting up a connection in the Dial-Up Networking folder. The VPN Adapter type does not appear elsewhere in the system. Since PPTP encapsulates its data stream in the PPP protocol, VPN requires a second dial-up adapter. This second dial-up adapter for VPN is added during the installation phase of the Upgrade in addition to the first dial-up adapter that provides PPP support for the analog or ISDN modem.

14

All contents copyright (c) 2005 ZyXEL Communications Corporation.

Image 14

ZyXEL Communications P-2302HW manual Configure a PPTP server Behind SUA, Prestige 2302 Support Notes

Contents

Support Notes With Lifeline/ DECT/ USBP-2302HW SERIES VoIP Station Gateway Prestige 2302 Support Notes INDEX What is the difference between NAT and SUA? How does Voice over IP work? CLI Command ListWhat is Voice over IP? Unable to Get WAN IP from ISP General Application Notes Application NotesPrestige 2302 Support Notes Internet Connection Setting up the Prestige router 2. TCP/IP Installation3. TCP/IP Configuration 1. Accessing the Prestige Web Management Interface All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes Prestige 2302 Support Notes WAN IP Address field Setup the Prestige as a DHCP Relay What is DHCP Relay? Setup the Prestige as a DHCP Client IP Subnet Mask= Introduction Configure an Internal Server Behind the PrestigeConfiguration The following table lists some common service port numbers ServicePort Number Telnet Configure a PPTP server Behind SUA Window98 PPTP Client / Internet / NT RAS Server Protocol Stack The PPTP is already supported in Windows NT and Windows 98. For Windows 95, a software upgrade with Dial-Up Networking 1.2 is required ƒ Set the Prestige that connects to the ISP as the Internet gateway How does the ZyXEL filter feature work? About Filters & Filter Examples Filter Structure Filter Types and SUA Mask= N/A Value= N/A More= No Log= None Menu 21.1.1 - Generic Filter Rule Filter # 1,1Filter Type= Generic Filter Rule Active= Yes Offset= Length= Action Matched= Check Next Rule Action Not Matched= Check Next Rule Log= None Protocol and device rule cannot be active togetherprotocol filters= device filters= Rem IP Route=Edit PPP Options= No Edit IP/IPX/Bridge= No 1. The outbound packet type the protocol and port number Filter to block web servicesGenerally, the outbound packets for a web service could be as follows 2. The source IP address 2. Configure rule one for a. HTTP packets using TCP06 and port number ENTER to Confirm or 3. Configure rule 2 for b. DNS requests using TCP06 and port number 4. Rule 3 for c. DNS packets using UDP17 and port number A filter to block a specific client 2.Create one rule to block all packets from this client Before you Begin Key SettingsA filter to block a specific MAC address The following shows detailed information with Ethernet Version Configurations Select Generic Filter Rule in the Filter Type field Active Select Yes in the Active field Offset in bytes A filter to block NetBIOS packets Configure field Action Not Matched= Check Next Rule Rule 2-Destination port number 137 with protocol number 17 UDP Rule 3-Destination port number 138 with protocol number 6 TCP Rule 4-Destination port number 138 with protocol number 17 UDP Rule 5-Destination port number 139 with protocol number 6 TCP Rule 6-Destination port number 139 with protocol number 17 UDP Prestige 2302 Support Notes Rule 2-Source port number 137, Destination port number 53 with protocol number 17 UDP Using Dynamic DNS DDNS 1. What is DDNS? web site from the WAN when you have set up the DDNS settings. With DDNS, users can always access a web site regardless of the WAN IP address on the Prestige Enable Wildcard Service ProviderPassword Network Management Using SNMP 8. Traversal operations 6. Reads7. Writes 9. Traps Trap 2. SNMPv1 OperationsGetNext 3. ZyXEL SNMP Implementation If the machine warmstarts, the trap will be sent after booting 4. Configure the Prestige for SNMP NMS managers Get Community Set Community Trusted Host Trap CommunityTrap Destination entered, the Prestige will not send traps to any NMS manager UNIX Setup Using syslog4. Prestige Setup line = the WAN ID in a board channel = channel ID within the WAN Packet triggered logFilter log PPP Log Using IP Alias What is IP Alias ? ras ip ro st IP Alias Setup2004 ZyXEL Communications Corp Interface Menu 3.2.1 - IP Alias Setup IP Alias 1= Yes IP Address= DHCP Setup TCP/IP Setup Edit IP AliasIP Alias IP Alias Enter here to CONFIRM or ESC to CANCEL System Date and Time Settings on the Prestige Using IP Multicast Multicast Select IGMP-v1 for IGMP version 1 or IGMP-v2 for IGMP version What is Traffic Redirect ? Using Prestige traffic redirectTraffic Redirect on the WAN How to set up the backup gateway? Traffic Redirect on the LAN Traffic Redirect Setup Active BackupTimeout Gateway Using Universal Plug n Play UPnP 1. What is UPnP UPnP Operations Control Point PC1 2. Using UPnP in ZyXEL devicesDevice Prestige Service NAT function provided on the Prestige Select Enable UPnP service to activate UpnP on the device All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes All contents copyright c 2005 ZyXEL Communications Corporation Prestige 2302 Support Notes All contents copyright c 2005 ZyXEL Communications Corporation Trunk Setup in P-2302HWL/HWUDL-P1 Follow the 3 steps below to set up trunks on P-2302HWL/HWUDL-P1 o Step 2 Access the web configurator and click VoIP Advance Setting So how do you make a phone call over the PSTN and SIP networks? Two examples are described next Example SIP Account Setup VoIP Application Notes Prestige 2302 Support Notes The following table describes the screen labels Description ServiceLabel SIP Account Settings AuthenticationPassword Reset The table below describes the related fields Use this field to select the phone port that you want to configureStep 3. In the navigation panel, click VoIP Phone Analog Phone Phone Speaking VolumeSpeed dial Phone book setup Listening Each fields detail description of the page is listed below Name EntrySpeed Dial Type How to access the embedded web configurator? ZyNOS FAQWhat is ZyNOS? Clear How do I upload the firmware via the web configurator? Why cant I telnet into Prestige from the WAN? What should I do if I forget the system password? How many network users does SUA/NAT support? What is SUA? When should I use SUA?What is the difference between NAT and SUA? What is the Prestige Internet Access Sharing Router? Product FAQWhy cant I configure device or protocol filters? What are Device and Protocol filters? Why does my provider use PPPoE? What is PPPoE?How do I know I am using PPPoE? How can I configure the Prestige? Does the Prestige support dynamic IP addressing? What network interface does the Prestige support?What can I do with the Prestige? How does e-mail work through the Prestige? What is the difference between the Standard and RoadRunner service? What DHCP capability does the Prestige support? Does the Prestige support TFTP over WAN? What network interface does the new Prestige series support?Does the Prestige support TFTP? How fast is the DSL connection? 1. If your ISP checks the MAC address a. Assigned By Select IP address attached on LAN 2. If your ISP checks the host name3. If your ISP checks the User ID c. My Login Name Enter the login user name given to you by your ISP When do I need the DDNS service? What is BOOTP/DHCP?What is DDNS? What DDNS servers does the Prestige support? Can VPN tunnels still work on a Prestige using SUA? VoIP FAQWhat is DDNS wildcard? How do I set up my Prestige to route IPsec packets over SUA? What is the difference between H.323 and SIP? Why use VoIP?What is the relationship between codec and VoIP? How does Voice over IP work? Can H.323 and SIP interoperate with each other? What is voice quality?What is codec? How are voice quality normally rated? I am unable to register to a SIP server Which codec should I choose?What do I need in order to use SIP? I can register to the SIP server but cannot establish a call What should I do if there may be a hardware problem with my Prestige? 1. If your ISP checks the MAC address Trouble ShootingUnable to Get WAN IP from ISP Assigned By= 2. If your ISP checks the Host NameField settings IP Address= System Name Enter the same name as the compute name on the computer 3. If your ISP checks the User IDField Setting Using Embedded Packet Trace Embedded Packet Trace 1. Online Trace--display the trace real time on screen 1.1 Disable WAN packet trace sys trcp channel enet1 none1.2 Enable LAN packet trace sys trcp channel enet0 bothway 2. Offline Trace--capture the trace first and display later Destination MAC Addr 103 All contents copyright c 2005 ZyXEL Communications CorporationPrestige sys trcd parse = 0x330B 104 All contents copyright c 2005 ZyXEL Communications Corporation 105 All contents copyright c 2005 ZyXEL Communications Corporation 106 All contents copyright c 2005 ZyXEL Communications Corporation 1.1 Disable LAN packet trace sys trcp channel enet0 none1.2 Enable WAN packet trace sys trcp channel enet1 bothway TCP Data Length=6 107 All contents copyright c 2005 ZyXEL Communications Corporation 108 All contents copyright c 2005 ZyXEL Communications Corporation +Y.x 109 All contents copyright c 2005 ZyXEL Communications Corporation Offline Trace 110 All contents copyright c 2005 ZyXEL Communications Corporation 1.7 Display specific trace packets sys trcp parse fromindex toindex 112 All contents copyright c 2005 ZyXEL Communications Corporation LAN Frame ENET0-XMIT Prestige 2302 Support Notes 114 All contents copyright c 2005 ZyXEL Communications Corporation LAN Frame ENET1-RECV a.P&Mq= Debugging PPPoE Connection Debugging PPPoE Connection Example- Trace Example on a crashed system 118 All contents copyright c 2005 ZyXEL Communications Corporation 119 All contents copyright c 2005 ZyXEL Communications Corporation LAN/WAN Packet Trace 1. Online Trace--display real-time trace results on the screen 121 All contents copyright c 2005 ZyXEL Communications Corporation 122 All contents copyright c 2005 ZyXEL Communications Corporation 123 All contents copyright c 2005 ZyXEL Communications Corporation 124 All contents copyright c 2005 ZyXEL Communications Corporation 1.2 Enable WAN packet trace sys trcp channel mpoa00 bothway 125 All contents copyright c 2005 ZyXEL Communications Corporation 126 All contents copyright c 2005 ZyXEL Communications Corporation 1.1 Disable WAN packet trace sys trcp channel mpoa00 none CLI Command List 128 All contents copyright c 2005 ZyXEL Communications Corporation