Manuals / ZyXEL Communications / Computer Equipment / Network Router

ZyXEL Communications Prestige 128 Filter Configuration, Snmp, System Security, System Maintenance

Models: Prestige 128

1 157

Download 157 pages 54.29 Kb

Page 11

Bridge Ethernet Setup 89

LAN-to-LAN Application 90

Remote Node Setup 91

Default Dial-In Setup for Bridge 92

Bridge Static Route Setup 92

10 Filter Configuration 94

About Filtering 94

Prestige’s Filter Structure 95

Configuring a Filter Set 95

Configuring a Filter Rule 98

TCP/IP Filter Rule 98

Generic Filter Rule 102

Novell IPX Filter Rule 103

11 SNMP 106

About SNMP 106

Configuring Your Prestige For SNMP Support 106

12 System Security 110

Using RADIUS Authentication 110

Installing a RADIUS Server 110

Configuring the Prestige for RADIUS Authentication 111 Adding Users to the RADIUS Database 113

Using RADIUS Authentication for CLID 113

Configuring the SMT Password 114

13 Telnet Configuration and Capabilities 116

About Telnet Configuration 116

Telnet Capabilities 117

Single Administrator 117

System Timeout 117

14 System Maintenance 118

System Status 118

Terminal Baud Rate 121

xi

Image 11

ZyXEL Communications Prestige 128 Filter Configuration, Snmp, System Security, Telnet Configuration and Capabilities

Contents

Version ACCESSING INTERNET & INTRANETJiH5 Prestige User’s ManualZyXEL Limited Warranty FCC Part 15 Information Copyright 1997 by ZyXELAcknowledgments Information for Canadian Users Page ∙ E-mail Contacting ZyXELZyXEL Communications Corporation 1 Introduction Contents2 Before You Begin 3 Installation4 Configuring for Internet Access 8 Novell IPX Configuration 5 Remote Node Configuration6 Dial-In Configuration 7 TCP/IP Configuration11 SNMP 10 Filter Configuration13 Telnet Configuration and Capabilities 14 System Maintenance17 Index 15 Troubleshooting16 ISDN Switch Types xiii Introduction FeaturesEase of Installation Dial On Demand ISDN Basic Rate Interface BRIMultiple Networking Protocol Support Standard Phone JackPPP Security RADIUS Remote Authentication Dial In User ServiceDHCP Support Dynamic Host Configuration Protocol Full Network ManagementNetworking Compatibility Internet AccessApplications For Your Prestige Data CompressionTelecommuting Server What This Manual CoversPacking List What This Manual Doesn’t CoverOther Resources Additional Installation Requirements 8 Introduction Road Map and Flow Before You Begin10 Before You Begin Completing the WorksheetFigure 2-1 Installation Guide Ordering Your ISDN Line Collecting General Setup InformationNo of Phone #s Collecting ISDN Phone Line InformationSwitch Type GeographyAmerica, select your ISDN switch type. For DSS1 and 1TR6, verify this field to make sure that you have the proper firmware loaded 14 Before You Begin Collecting Ethernet Setup InformationBefore You Begin IP Subnet MaskNumber of Host IDs Number of Bits16 Before You Begin General Setup InformationISDN Setup Information Prestige Setup and Installation Worksheet∙ Analog Call check one North America ISDNDSS1 ISDN ∙ 1st Telephone Number∙ PBX Number S/T Bus Number 1TR6 ISDN∙ A/B Adapter 2 Number & Subaddress ∙ Outside Line Prefix Number∙ PBX Number S/T Bus Number Ethernet Setup Information∙ A/B Adapter 2 Number ∙ Outside Line Prefix Number20 Before You Begin A Warning On Connection Cables InstallationConnecting Your Computer and Your Prestige 22 Installation Connecting the RS-232 Cable to your PrestigeConnecting an ISDN Line to your Prestige Connecting a Telephone/Fax to your Prestige∙ AUI Connecting an Ethernet Cable to your Prestige∙ UTP Prestige Front Panel Connecting a Power Adapter to your PrestigeFigure 3-3 Power on Messages Powering On Your PrestigeFigure 3-4 Login Screen Navigating Through the System Management Terminal InterfaceMain Menu, where typing 99 is the only method to exit the SMT Menu Title System Management Terminal Interface Summary28 Installation Figure 3-5 SMT Main MenuGeneral Setup North American ISDN ISDN Setup1. Switch Type - Verify the switch type information with your telephone company. For North America, select the type of switch used by your telephone company. If your switch type is not currently shown, press the space bar to change to the next switch repeat until you see the correct switch type. The Prestige will not be able to place or to receive calls if the wrong switch type is specified. If you are not sure, contact your telephone company to confirm the exact switch type DSS1 & 1TR6 ISDN 6. Dial Prefix to Access Outside Line - Enter the prefix number if the Prestige is connected to an ISDN PBX. This number will be added to all outgoing calls and should be no longer than 3 digits. Otherwise, leave this field blank 34 Installation General Ethernet Setup Ethernet SetupFigure 3-11 Menu 3.1 - General Ethernet Setup TCP/IP Ethernet Setup and DHCPFigure 3-12 Menu 3.2 - TCP/IP Ethernet Setup 38 Installation Refer to the chapter on Bridging configuration Novell IPX Ethernet SetupBridge Ethernet Setup Refer to the chapter on Novell IPX configurationConfiguring for Internet Access Configuring for Internet Access IP Addresses and the InternetFigure 4-2 Menu 4 - Internet Access Setup Internet Access Configuration5. My Login Name - Enter the login name given to you by your ISP 44 Configuring for Internet Access Single User AccountIn summary Configuration for Single User Account Configuring Backup ISP Accounts 48 Configuring for Internet Access Configuring for Internet Access 50 Remote Node Configuration Remote Node ConfigurationFigure 5-2 Menu 11.1 - Remote Node Profile Figure 5-1 Menu 11 - Remote Node SetupRemote Node Configuration 52 Remote Node Configuration ∙ PAP sends the user name and password in plain text 54 Remote Node Configuration 18. Telco Options Allocated Budget min - This field will set a budget outgoing call time for the Remote Node. The default for this field is 0 for no budget control 56 Remote Node Configuration Bandwidth on DemandEditing PPP Options ∙ 64 - Only one channel will be used ∙ 128 - Two channels will be used when a packet triggers a call58 Remote Node Configuration ∙ CISCO PPP - Cisco PPP options will be usedRemote Node Configuration to confirm your selections, or press ESC to cancel your selections60 Dial-In Configuration Dial-In ConfigurationFigure 6-1 Example of Remote User Telecommuter TelecommutingDial-In Server Application Figure 6-2 Example of a Dial-In Server Application Default Dial-In Setup∙ None - No CLID is required 64 Dial-In Configuration 11. IP Pool IP Start Addr - This field is active only if you 66 Dial-In Configuration Dial-In Users SetupFigure 6-5 Menu 14.1 - Edit Dial-in User Figure 6-4 Menu 14 - Dial-in User Setupare displayed with a - minus sign at the beginning of the name in Menu More on CLID IP Subnet Mask TCP/IP ConfigurationTCP/IP Configuration LAN-to-LAN ApplicationRemote Node Setup See page for more information on the Single User Account feature 74 TCP/IP Configuration Static Route SetupFigure 7-4 Static Routing Example Figure 7-5 Menu 12 - Static Route Setup - Main Menu76 TCP/IP Configuration Figure 7-6 IP Static Route Setup6. The Metric and the Private parameters have the same meaning as those in the Remote Node Setup Network Numbers Novell IPX ConfigurationIPX Network Environment Frame TypeFigure 8-1 Prestige Operating in IPX Environment Prestige on LAN with ServerPrestige on LAN without Server IPX Spoofing IPX Ethernet Setup∙ ∙ ∙ Ethernet ∙ SNAP Figure 8-3 LAN-to-LAN application Remote Node Setup82 Novell IPX Configuration LAN-to-LAN Application1. Route - Make sure IPX is among the protocols in the Route field 84 Novell IPX Configuration Static Route SetupFigure 8-6 Menu 12.2 - Edit IPX Static Route Figure 8-5 NetWare Servers on Both Sides of the Link86 Novell IPX Configuration Novell IPX Configuration IPX Spoofing Bridging Configuration88 Bridging Configuration Bridge Ethernet Setup LAN-to-LAN Application Figure 9-1 Bridge Ethernet Setup90 Bridging Configuration need to configure a Remote Node in order to dial out to another office Remote Node Setup92 Bridging Configuration Default Dial-In Setup for BridgeBridge Static Route Setup Figure 9-3 Menu 12.4 - Bridge Static Route About Filtering Filter ConfigurationFilter Configuration Configuring a Filter SetPrestige’s Filter Structure ∙ # - Refers to the filter rule number ∙ Pr - Protocol ∙ SA - Source Address ∙ SP - Source Port number TCP/IP Filter Rule Configuring a Filter Rule∙ Yes ∙ No 100 Filter Configuration ∙ Yes - filter match only established TCP connections Figure 10-5 Menu 21.1.1 - Generic Filter Rule Generic Filter RuleNovell IPX Filter Rule ∙ None ∙ RIP Request ∙ RIP Response ∙ SAP Request ∙ SAP Response About SNMP Configuring Your Prestige For SNMP SupportSNMP SNMP Figure 11-1 Menu 22 - SNMP Configuration108 SNMP SNMP System Security Using RADIUS AuthenticationInstalling a RADIUS Server Configuring the Prestige for RADIUS Authentication This will bring you to Menu 23.2 - System Security - External Server Adding Users to the RADIUS Database Using RADIUS Authentication for CLIDConfiguring the SMT Password 5. Re-type your new system password for confirmation purposes and press ENTER About Telnet Configuration Telnet Configuration and CapabilitiesTelnet Capabilities Single AdministratorSystem Timeout System Status System Maintenance2. From this menu, select option 1. System Status 8. TXPkt - the number of transmitted packets on this channel Figure 14-3 LAN Packet Which Triggered Last Call Terminal Baud RateLog and Trace Syslog And Accounting View Error LogDiagnostic Figure 14-6 Menu 24.4 - System Maintenance - Diagnostic 126 System Maintenance Backup Configuration Software Update Restore ConfigurationFigure 14-9 Example of uploading RAS using PCPLUS Command Interpreter ModeCall Control Figure 14-10 Menu 24.9.1 Call Control Parameters Call Control ParametersFigure 14-11 Blacklist BlacklistFigure 14-12 Budget Management Budget ManagementSystem Maintenance Connecting the RS-232 cable, cannot access the SMT TroubleshootingProblems Starting Up the Prestige None of the LEDs are on when you power up the PrestigeThe ISDN loopback test failed Problems With the ISDN LineThe ISDN initialization failed Can’t PING any station on the LAN Problems with the LAN InterfaceProblems Connecting to a Remote Node or ISP Problems Connecting to a Remote User Provisioning For the AT&T 5ESS Switches ISDN Switch TypesProvisioning For U.S. Switches Setting Provisioning FeatureSetting Provisioning FeatureProvisioning Feature Provisioning For the Northern Telecom SwitchProvisioning Feature SettingEKTS Provisioning FeatureSetting ISDN Switch TypesIndex See IPX PABX IOC, 11. See ISDN Ordering Code IP Address, 14144 Index