Prestige
Copyright
Disclaimer
Trademarks
Federal Communications Commission FCC Interference Statement
Information for Canadian Users
Declaration of Conformity
Version
P312 Broadband Security Gateway CE Doc
ZyXEL Limited Warranty
Customer Support
Information in Menu 24.2.1 -System Information
Table of Contents
LAN Port Filter Setup Chapter
Advanced Management
12-1
Firewall and Content Filters
13-1
17-1
21-1
Pptp
List of Figures
Menu 11.1 Remote Node Profile for Ethernet Encapsulation
List Of Figures Xvii
Xviii
List Of Figures Xix
Menu 21 Filter and Firewall Setup 14-1
List Of Figures Xxi
Page
List Of Tables
Xxiv
List of Tables Xxv
Page
Preface
About Your Router
Structure of this Manual
Related Documentation
Syntax Conventions
Part
Page
Features of The Prestige
Getting to Know Your Prestige
Prestige 312 Broadband Security Gateway
Dhcp Dynamic Host Configuration Protocol
Time and Date Setting
Dynamic DNS Support
IP Multicast
Broadband Internet Access via Cable or xDSL Modem
Upgrade Prestige Firmware via LAN
Applications for Prestige
Logging and Tracing
Secure Internet Access via DSL
Hardware Installation & Initial Setup
Front Panel LEDs and Back Panel Ports
Front Panel LEDs
LED functions
Prestige 312 Rear Panel and Connections
WAN
Additional Installation Requirements
Housing
Power Up Your Prestige
Entering Password
Initial Screen
Main Menu Commands
Navigating the SMT Interface
Operation Keystrokes Description
Enter
Main Menu
System Management Terminal Interface Summary
Prestige 312 Main Menu
Main Menu Summary
Changing the System Password
Resetting the Prestige
General Setup
Dynamic DNS
Dyndns Wildcard
Configuring Dynamic DNS
General Setup Menu Field
Configure Menu 1.1 Configure Dynamic DNS discussed next
Field Description Example
WAN Setup
Configure Dynamic DNS Menu Fields
Yes
Me.ddns.org
LAN Setup
WAN Setup Menu Fields
LAN Port Filter Setup
10 Menu 3 LAN Setup
Internet Access
Factory LAN Defaults
TCP/IP and Dhcp for LAN
IP Address and Subnet Mask
RIP Setup
Private IP Addresses
Dhcp Configuration
IP Pool Setup
IP Multicast
DNS Server Address
TCP/IP and Dhcp Ethernet Setup
IP Alias
Physical Network Partitioned Logical Networks
Menu 3 LAN Setup 10/100 Mbps Ethernet
LAN Dhcp Setup Menu Fields
LAN TCP/IP Setup Menu Fields
IP Alias Setup
Menu 3.2.1 IP Alias Setup
IP Alias Setup Menu Fields
Internet Access Setup
Ethernet Encapsulation
Only/Out Only
RIP-1
Internet Access Setup Menu Fields
Pptp Encapsulation
Configuring the Pptp Client
PPPoE Encapsulation
New Fields in Menu 4 Pptp screen
Prestige automatically disconnects from the Pptp server
Internet Access Setup PPPoE
Basic Setup Complete
New Fields in Menu 4 PPPoE screen
Advanced Applications
Remote Node Setup
Remote Node Profile
Fields in Menu
Nailed-Up Connection
Fields in Menu 11.1 PPPoE Encapsulation Specific
Fields in Menu 11.1 Pptp Encapsulation
Editing TCP/IP Options with Ethernet Encapsulation
Remote Node Network Layer Options Menu Fields
Editing TCP/IP Options with Pptp Encapsulation
Private
Version
2B/RIP-2M and None Multicast
Remote Node Network Layer Options
Remote Node Filter
Editing TCP/IP Options with PPPoE Encapsulation
Yes/No
None/In Only/Out Only and None
Remote Node Filter Ethernet Encapsulation
IP Static Route Setup
Example of Static Routing Topology
IP Static Route Setup
Menu 12 IP Static Route Setup
IP Static Route Menu Fields
Field Description
Page
Network Address Translation NAT
Introduction
NAT Definitions
What NAT Does
How NAT works
NAT Mapping Types
SUA Single User Account Versus NAT
NAT Mapping Types
Type IP Mapping SMT abbreviation
SMT Menus
NAT Application
Applying NAT in the SMT Menus
Applying NAT for Internet Access
Configuring NAT
Field Options Description Network Full Feature
Address Mapping Sets and NAT Server Sets
Applying NAT in Menus 4
Menu 15.1 Address Mapping Sets
Field Description Options/Example
Server
Ordering Your Rules
Menu
Menu 15.1.1.1 configuring an individual rule
Editing an Individual Rule in a Set
NAT Server Sets
Multiple Servers behind NAT
Configuring a Server behind NAT
10 Multiple Servers Behind NAT
Internet Access Only
Services Port Number
Examples
13 Internet Access & NAT Example
NAT Example
Example 2 Internet Access with an Inside Server
Example 3 General Case
16 NAT Example
17 Example 3 Menu
19 Example 3 Final Menu
Example 4 -NAT Unfriendly Application Programs
21 NAT Example
22 Example 4- Menu 15.1.1.1 Address Mapping Rule
Advanced Management
Page
Filter Configuration
About Filtering
Filter Structure of the Prestige
Filter Rule Process
Rule Forward Drop
Configuring a Filter Set
Menu 21 Filter and Firewall Setup
NetBIOSWAN Filter Rules Summary
Filter Rules Summary Menu
Abbreviations Used in the Filter Rules Summary Menu
Abbreviations Description Display
Action Not Matched will be N/A Refers to Action Matched
Configuring a Filter Rule
3 TCP/IP Filter Rule
Abbreviations Used If Filter Type Is IP
Abbreviations Used If Filter Type Is GEN
Menu 21.1.1.1 TCP/IP Filter Rule
TCP/IP Filter Rule Menu Fields
None/Less/Greater
Equal/Not Equal
Yes / No
Action Matched
Following diagram illustrates the logic flow of an IP filter
10 Executing an IP Filter
Generic Filter Rule
11 Menu 21.4.1.1 Generic Filter Rule
Generic Filter Rule Menu Fields
Example Filter
12 Telnet Filter Example
13 Example Filter Menu
Filter Types and NAT
14 Example Filter Rules Summary Menu
Applying a Filter and Factory Defaults
Firewall
LAN traffic
Remote Node Filters
16 Filtering LAN Traffic
Snmp Configuration
Configuring Snmp
About Snmp
Snmp Configuration Menu Fields
Field Description Default
Menu 24 System Maintenance
System Information & Diagnosis
Menu 24.1 System Maintenance Status
System Status
System Maintenance Status Menu Fields
PPPoE Encapsulation
LAN
Dhcp
System Information and Console Port Speed
System Information
Fields in System Maintenance
Log and Trace
Console Port Speed
Viewing Error Log
Unix Syslog
System Maintenance Menu Syslog Parameters
Parameter Description
CDR
CDR
PPP log
Diagnostic
Call-Triggering Packet
10 Menu 24.4 System Maintenance Diagnostic
WAN Dhcp
System Maintenance Menu Diagnostic
Internet Setup in Menu 4 Internet Access
Number Field Description
Transferring Files
Filename conventions
Backup Configuration
Command
Firmware Development
Filename Conventions
Restore Configuration
Upload Firmware
Uploading the Router Firmware
Uploading Router Configuration File
Menu 24.7.1 System Maintenance Upload Router Firmware
Tftp File Transfer
Example Tftp Command
Third Party Tftp Clients -General fields
FTP File Transfer
Telnet into Menu
Using the FTP command from the DOS Prompt
Telnet into Menu 24.7.2 System Maintenance
Third Party FTP Clients -General fields
Page
System Maintenance & Information
Command Interpreter Mode
Valid Commands
Call Control Support
Budget Management
Call Control
Call History
Call History
Time and Date Setting
How often does the Prestige update the time?
Call History Fields
System Maintenance & Information 11-5
Remote Management Setup
Menu 24.11 Remote Management Control
Boot Commands
Option to Enter Debug Mode
Boot Module Commands
Telnet Configuration and Capabilities
About Telnet Configuration
Single Administrator
Telnet Under NAT
System Timeout
Telnet Under the Firewall
Firewall and Content Filters
What is a Firewall
Types of Firewalls
Packet Filtering Firewalls
Application-level Firewalls
Introduction to ZyXEL’s Firewall
Stateful Inspection firewalls
Denial of Service
Basics
Types of DoS attacks
Common IP Ports
SYN Flood
Stateful Inspection
Smurf Attack
Stateful Inspection Process
Stateful Inspection
Stateful Inspection & the Prestige
TCP Security
Guidelines For Enhancing Security With Your Firewall
13.4.4 UDP/ICMP Security
Upper Layer Protocols
Security In General
What Is a Firewall? 13-11
Page
Introducing the Prestige Firewall
SMT Main Menu
View Firewall Log
Attack Types
Land
IP Spoofing
Icmp Commands That Trigger Alerts
Illegal Commands NetBIOS and Smtp
Legal NetBIOS Commands
Legal Smtp Commands
Traceroute
Teardrop
Big Picture Filtering, Firewall and NAT
Packet Filtering Vs Firewall
Packet Filtering
When To Use Filtering
When To Use The Firewall
Firewall
Page
Introducing the Prestige Web Configurator
Web Configurator Login and Welcome Screens
Prestige Web Configurator Welcome Screen
Enabling the Firewall
Mail
What are Alerts?
What are Logs?
Mail Screen
Mail
Smtp Error Messages
Smtp Error Messages
Example E-Mail Log
Attack Alert
Mail Log
Threshold Values
Half-Open Sessions
TCP Maximum Incomplete And Blocking Time
Attack Alert
Field Description Default Values
Existing half-open sessions
When TCP Maximum Incomplete is
Do not set Maximum Incomplete High to
Page
Rule Checklist
Creating Custom Rules
Rules Overview
Rule Logic Overview
Key Fields For Configuring Rules
Security Ramifications
Connection Direction
LAN to WAN Rules
WAN to LAN Rules
Services Supported
WAN to LAN Traffic
Services Supported
Service Description
Rule Summary
Firewall Rules Summary First Screen
Block
Match
Creating/Editing Firewall Rules
Field Description Option
Creating/Editing a Firewall Rule
Source & Destination Addresses
Adding/Editing Source & Destination Addresses
Single Address
Range Address
Subnet Address
Timeout
Factors Influencing Choices for Timeout Values
Timeout Screen
Timeout Menu
Field Description Default Value
Hour
Custom Ports
Custom Ports
Creating/Editing a Custom Port
Creating/Editing a Custom Port
Single
Range
Logs
Log Screen
Log Screen
Vulnerability, NetBIOS, smtp illegal
Command, traceroute, teardrop, or syn
Jan 1
Src IP, dest port, src port and protocol
Logs 18-3
Page
Example Firewall Rules
Activate The Firewall
Example 1 E-Mail Screen
Example 1 Configuring a Rule
Example Firewall Rules 19-5
Example 2 Small Office With Mail, FTP and Web Servers
Example 1 Rule Summary Screen
Send Alerts When Attacked
Configuring a POP Custom Port
Example 2 Local Network Rule 1 Configuration
Example 2 Local Network Rule Summary
10 Example 2 Internet to Local Network Rule Summary
11 Custom Port for Syslog
12 Syslog Rule Configuration
13 Example 3 Rule Summary
Content Filtering
Restrict Web Features
ActiveX
Java
Content Filtering Using the Web Configurator
Blocking URLs
Cookies
Web Proxy
Content Filtering Fields
Field Description Restrict Web Features
Block Web URLs
Troubleshooting, Appendices, Glossary and Index
Page
Troubleshooting
Problems Starting Up the Prestige
Troubleshooting the Start-Up of your Prestige
Problem Corrective Action
Problems with the LAN Interface
Problems with the WAN interface
Troubleshooting the LAN Interface
Troubleshooting the WAN interface
Problems with Internet Access
Problems with the Firewall
Troubleshooting Internet Access
Page
Diagram 1 Single-PC per Modem Hardware Configuration
Appendix a PPPoE
PPPoE in Action
Benefits of PPPoE
Diagram 2 Prestige as a PPPoE Client
How PPPoE Works
Prestige as a PPPoE Client
What is PPTP?
Appendix B
Pptp and the Prestige
Pptp Protocol Overview
Control & PPP connections
Appendix C Hardware Specifications
Mtbf
IRD + OTD +
Appendix D Important Safety Instructions
Appendix E Firewall CLI Commands
Function CLI Syntax
Sets
Function CLI Syntax Description
P312 Broadband Security Gateway
Delete
Appendix F Power Adapter Specs
AC Power Adapter Specifications
P312 Broadband Security Gateway
Glossary of Terms
ARP
CDR Chap
CSU/DSU DCE
Dram DSL
Dslam
DTE
EMI
FAQ
FCC
FTP
Hdlc
Ipcp PPP IPX
IRC ISP
MAC
NAT
Ndis
NIC
PAP
POP
Pots PPP
Pstn
PVC
RFC
RIP
SAP
Spam
STP
SUA TCP
Tftp
VPN
Page
Index
Ddns
Encapsulation
2-11, 2-12, 3-4
13-6
15-1 ZyNOS