Document Outline

• User’s Guide
• Copyright
• Federal Communications Commission (FCC) Interference Statement
• ZyXEL Limited Warranty
• Customer Support
• Table of Contents
• List of Figures
• List of Tables
• Preface
• Getting to Know Your Prestige
  • 1.1 Prestige Internet Security Gateway Overview
  • 1.2 Prestige Features
    • 1.2.1 Physical Features
      • 1.2.1.1 USB Port
      • 1.2.1.2 OTIST Button (P-335WT only)
      • 1.2.1.3 10/100M Auto-negotiating Ethernet/Fast Ethernet Interface(s)
      • 1.2.1.4 Auto-crossover 10/100 Mbps Ethernet Interface(s)
      • 1.2.1.5 4-Port Switch
      • 1.2.1.6 Time and Date
      • 1.2.1.7 Reset Button
    • 1.2.2 Non-Physical Features
      • 1.2.2.1 Print Server
      • 1.2.2.2 OTIST (P-335WT only)
      • 1.2.2.3 Media Bandwidth Management
      • 1.2.2.4 Trend Micro Security Services
      • 1.2.2.5 IPSec VPN Capability
      • 1.2.2.6 Firewall
      • 1.2.2.7 IEEE 802.1x Network Security (P-335WT only)
      • 1.2.2.8 Content Filtering
      • 1.2.2.9 Brute-Force Password Guessing Protection
      • 1.2.2.10 802.11b Wireless LAN Standard (P-335WT only)
      • 1.2.2.11 802.11g Wireless LAN Standard (P-335WT only)
      • 1.2.2.12 Packet Filtering
      • 1.2.2.13 Universal Plug and Play (UPnP)
      • 1.2.2.14 Call Scheduling
      • 1.2.2.15 PPPoE
      • 1.2.2.16 PPTP Encapsulation
      • 1.2.2.17 Dynamic DNS Support
      • 1.2.2.18 IP Multicast
      • 1.2.2.19 IP Alias
      • 1.2.2.20 SNMP
      • 1.2.2.21 Network Address Translation (NAT)
      • 1.2.2.22 Traffic Redirect
      • 1.2.2.23 Port Forwarding
      • 1.2.2.24 DHCP (Dynamic Host Configuration Protocol)
      • 1.2.2.25 Any IP
      • 1.2.2.26 Full Network Management
      • 1.2.2.27 RoadRunner Support
      • 1.2.2.28 Logging and Tracing
      • 1.2.2.29 Upgrade Prestige Firmware via LAN
      • 1.2.2.30 Embedded FTP and TFTP Servers
      • 1.2.2.31 Wireless Association List (P-335WT only)
      • 1.2.2.32 Wireless LAN Channel Usage (P-335WT only)
  • 1.3 Applications for the Prestige
    • 1.3.1 Print Server Application
    • 1.3.2 Secure Broadband Internet Access via Cable or DSL Modem
    • 1.3.3 VPN Application
    • 1.3.4 Wireless LAN Application (P-335WT only)
• Introducing the Web Configurator
  • 2.1 Web Configurator Overview
  • 2.2 Accessing the Prestige Web Configurator
  • 2.3 Resetting the Prestige
    • 2.3.1 Procedure To Use The Reset Button
    • 2.3.2 Navigating the Prestige Web Configurator
    • 2.3.3 Navigation Panel
• Wizard Setup
  • 3.1 Wizard Setup Overview
  • 3.2 Wizard Setup: General Setup and System Name
    • 3.2.1 Domain Name
  • 3.3 Wizard Setup: Wireless LAN (P-335WT only)
    • 3.3.1 Wizard Setup : Wireless LAN : Basic Security
    • 3.3.2 Wizard Setup : Wireless LAN : Extended Security
  • 3.4 Wizard Setup : Wireless LAN : OTIST (P-335WT only)
  • 3.5 Wizard Setup : Internet Access
    • 3.5.1 Ethernet
    • 3.5.2 PPPoE Encapsulation
    • 3.5.3 PPTP Encapsulation
  • 3.6 Wizard Setup : WAN
    • 3.6.1 WAN IP Address Assignment
    • 3.6.2 IP Address and Subnet Mask
    • 3.6.3 DNS Server Address Assignment
    • 3.6.4 WAN MAC Address
  • 3.7 Wizard Setup : Complete
• Media Bandwidth Management Setup
  • 4.1 Media Bandwidth Management Setup Overview
  • 4.2 Media Bandwidth Management Setup
  • 4.3 Media Bandwidth Management Setup : Services
  • 4.4 Media Bandwidth Management Setup : Service Priority
  • 4.5 Media Bandwidth Management Setup Complete
• System Screens
  • 5.1 System Overview
  • 5.2 Configuring General Setup
  • 5.3 Dynamic DNS
    • 5.3.1 DynDNS Wildcard
  • 5.4 Configuring Dynamic DNS
  • 5.5 Configuring Password
  • 5.6 Configuring Time Setting
• LAN Screens
  • 6.1 LAN Overview
  • 6.2 DHCP Setup
    • 6.2.1 IP Pool Setup
    • 6.2.2 System DNS Servers
  • 6.3 LAN TCP/IP
    • 6.3.1 Factory LAN Defaults
    • 6.3.2 IP Address and Subnet Mask
    • 6.3.3 RIP Setup
    • 6.3.4 Multicast
  • 6.4 Any IP
    • 6.4.1 How Any IP Works
  • 6.5 Configuring IP
  • 6.6 Configuring Static DHCP
  • 6.7 Configuring IP Alias
• Wireless LAN (P-335WT)
  • 7.1 Introduction
  • 7.2 Wireless Security Overview
    • 7.2.1 Encryption
    • 7.2.2 Authentication
    • 7.2.3 Restricted Access
    • 7.2.4 Hide Prestige Identity
    • 7.2.5 G-plus
    • 7.2.6 Using OTIST
  • 7.3 Configuring Wireless LAN on the Prestige
  • 7.4 Configuring the Wireless Screen
    • 7.4.1 No Security
    • 7.4.2 WEP Encryption
    • 7.4.3 Configuring WEP Encryption
    • 7.4.4 Introduction to WPA
    • 7.4.5 WPA-PSK Application Example
    • 7.4.6 Configuring WPA-PSK Authentication
    • 7.4.7 Wireless Client WPA Supplicants
    • 7.4.8 WPA with RADIUS Application Example
    • 7.4.9 Configuring WPA Authentication
    • 7.4.10 802.1x Overview
    • 7.4.11 Configuring 802.1x and Dynamic WEP Key Exchange
    • 7.4.12 Configuring 802.1x and Static WEP Key Exchange
    • 7.4.13 Configuring 802.1x
  • 7.5 MAC Filter
  • 7.6 Roaming
  • 7.7 OTIST
    • 7.7.1 Activating OTIST
    • 7.7.2 OTIST button
• WAN Screens
  • 8.1 WAN Overview
  • 8.2 TCP/IP Priority (Metric)
  • 8.3 Configuring Route
  • 8.4 Configuring WAN ISP
    • 8.4.1 Ethernet Encapsulation
    • 8.4.2 PPPoE Encapsulation
    • 8.4.3 PPTP Encapsulation
  • 8.5 Configuring WAN IP
  • 8.6 Configuring WAN MAC
  • 8.7 Traffic Redirect
  • 8.8 Configuring Traffic Redirect
• Network Address Translation (NAT) Screens
  • 9.1 NAT Overview
    • 9.1.1 NAT Definitions
    • 9.1.2 What NAT Does
    • 9.1.3 How NAT Works
    • 9.1.4 NAT Application
    • 9.1.5 NAT Mapping Types
  • 9.2 Using NAT
    • 9.2.1 SUA (Single User Account) Versus NAT
  • 9.3 SUA Server
    • 9.3.1 Default Server IP Address
    • 9.3.2 Port Forwarding: Services and Port Numbers
    • 9.3.3 Configuring Servers Behind SUA (Example)
  • 9.4 Configuring SUA Server
  • 9.5 Configuring Address Mapping
    • 9.5.1 Configuring Address Mapping
  • 9.6 Trigger Port Forwarding
    • 9.6.1 Trigger Port Forwarding Example
    • 9.6.2 Two Points To Remember About Trigger Ports
  • 9.7 Configuring Trigger Port Forwarding
• Static Route Screens
  • 10.1 Static Route Overview
  • 10.2 Configuring IP Static Route
    • 10.2.1 Configuring Route Entry
• UPnP
  • 11.1 Universal Plug and Play Overview
    • 11.1.1 How Do I Know If I'm Using UPnP?
    • 11.1.2 NAT Traversal
    • 11.1.3 Cautions with UPnP
  • 11.2 UPnP and ZyXEL
  • 11.3 Configuring UPnP
  • 11.4 Installing UPnP in Windows Example
    • 11.4.1 Installing UPnP in Windows Me
    • 11.4.2 Installing UPnP in Windows XP
  • 11.5 Using UPnP in Windows XP Example
    • 11.5.1 Auto-discover Your UPnP-enabled Network Device
    • 11.5.2 Web Configurator Easy Access
    • 11.5.3 Web Configurator Easy Access
• Trend Micro Security Services
  • 12.1 Trend Micro Security Services Overview
    • 12.1.1 TMSS Web Page
  • 12.2 Configuring TMSS on the Prestige
    • 12.2.1 TMSS Service Settings
  • 12.3 Configuring Virus Protection
  • 12.4 Parental Controls Configuration
    • 12.4.1 Parental Controls Statistics
• Firewall
  • 13.1 Introduction
    • 13.1.1 What is a Firewall?
    • 13.1.2 Stateful Inspection Firewall.
    • 13.1.3 About the Prestige Firewall
    • 13.1.4 Guidelines For Enhancing Security With Your Firewall
  • 13.2 Firewall Settings Screen
  • 13.3 The Firewall, NAT and Remote Management
    • 13.3.1 LAN-to-WAN rules
    • 13.3.2 WAN-to-LAN rules
  • 13.4 Services
• Content Filtering
  • 14.1 Introduction to Content Filtering
  • 14.2 Restrict Web Features
  • 14.3 Days and Times
  • 14.4 Configure Content Filtering
  • 14.5 Customizing Keyword Blocking URL Checking
    • 14.5.1 Domain Name or IP Address URL Checking
    • 14.5.2 Full Path URL Checking
    • 14.5.3 File Name URL Checking
• Remote Management Screens
  • 15.1 Remote Management Overview
    • 15.1.1 Remote Management Limitations
    • 15.1.2 Remote Management and NAT
    • 15.1.3 System Timeout
  • 15.2 Configuring WWW
  • 15.3 Configuring Telnet
  • 15.4 Configuring TELNET
  • 15.5 Configuring FTP
  • 15.6 SNMP
    • 15.6.1 Supported MIBs
    • 15.6.2 SNMP Traps
    • 15.6.3 Configuring SNMP
  • 15.7 Configuring DNS
  • 15.8 Configuring Security
• Introduction to IPSec
  • 16.1 VPN Overview
    • 16.1.1 IPSec
    • 16.1.2 Security Association
    • 16.1.3 Other Terminology
      • 16.1.3.1 Encryption
      • 16.1.3.2 Data Confidentiality
      • 16.1.3.3 Data Integrity
      • 16.1.3.4 Data Origin Authentication
    • 16.1.4 VPN Applications
  • 16.2 IPSec Architecture
    • 16.2.1 IPSec Algorithms
    • 16.2.2 Key Management
  • 16.3 Encapsulation
    • 16.3.1 Transport Mode
    • 16.3.2 Tunnel Mode
  • 16.4 IPSec and NAT
• VPN Screens
  • 17.1 VPN/IPSec Overview
  • 17.2 IPSec Algorithms
    • 17.2.1 AH (Authentication Header) Protocol
    • 17.2.2 ESP (Encapsulating Security Payload) Protocol
  • 17.3 My IP Address
  • 17.4 Secure Gateway Address
    • 17.4.1 Dynamic Secure Gateway Address
  • 17.5 Summary Screen
  • 17.6 Keep Alive
  • 17.7 NAT Traversal
    • 17.7.1 NAT Traversal Configuration
    • 17.7.2 Remote DNS Server
  • 17.8 ID Type and Content
    • 17.8.1 ID Type and Content Examples
  • 17.9 Pre-Shared Key
  • 17.10 Editing VPN Rules
  • 17.11 IKE Phases
    • 17.11.1 Negotiation Mode
    • 17.11.2 Diffie-Hellman (DH) Key Groups
    • 17.11.3 Perfect Forward Secrecy (PFS)
  • 17.12 Configuring Advanced IKE Settings
  • 17.13 Manual Key Setup
    • 17.13.1 Security Parameter Index (SPI)
  • 17.14 Configuring Manual Key
  • 17.15 Viewing SA Monitor
  • 17.16 Configuring Global Setting
  • 17.17 Telecommuter VPN/IPSec Examples
    • 17.17.1 Telecommuters Sharing One VPN Rule Example
    • 17.17.2 Telecommuters Using Unique VPN Rules Example
  • 17.18 VPN and Remote Management
• Centralized Logs
  • 18.1 View Log
  • 18.2 Log Settings
• Print Server
  • 19.1 Print Server Overview
  • 19.2 Prestige Print Server
    • 19.2.1 Installation Requirements
  • 19.3 Prestige Print Server Configuration
• Media Bandwidth Management
  • 20.1 Media Bandwidth Management Overview
    • 20.1.1 Application-based Bandwidth Management Example
    • 20.1.2 Subnet-based Bandwidth Management Example
    • 20.1.3 Application and Subnet-based Bandwidth Management Example
    • 20.1.4 Bandwidth Usage Example
    • 20.1.5 Bandwidth Management Priorities
    • 20.1.6 Bandwidth Management Services
      • 20.1.6.1 Xbox Live
      • 20.1.6.2 VoIP (SIP)
      • 20.1.6.3 FTP
      • 20.1.6.4 E-Mail
      • 20.1.6.5 eMule/eDonkey
      • 20.1.6.6 WWW
    • 20.1.7 Services
  • 20.2 Media Bandwidth Management Configuration Screen
  • 20.3 Editing Bandwidth Management Rules
    • 20.3.1 Bandwidth Borrowing
  • 20.4 Configuring Bandwidth Management Rules and Services
  • 20.5 Monitor Screen
• Maintenance
  • 21.1 Maintenance Overview
  • 21.2 Status Screen
    • 21.2.1 System Statistics
  • 21.3 DHCP Table Screen
  • 21.4 Any IP Table
  • 21.5 Association List
  • 21.6 F/W Upload Screen
  • 21.7 Configuration Screen
    • 21.7.1 Backup Configuration
    • 21.7.2 Restore Configuration
    • 21.7.3 Back to Factory Defaults
  • 21.8 Restart Screen
• Introducing the SMT
  • 22.1 SMT Introduction
    • 22.1.1 Procedure for SMT Configuration via Telnet
    • 22.1.2 Entering Password
    • 22.1.3 Prestige SMT Menu Overview
  • 22.2 Navigating the SMT Interface
    • 22.2.1 System Management Terminal Interface Summary
  • 22.3 Changing the System Password
• Menu 1 General Setup
  • 23.1 General Setup
  • 23.2 Procedure To Configure Menu 1
    • 23.2.1 Procedure to Configure Dynamic DNS
• Menu 2 WAN Setup
  • 24.1 Introduction to WAN
  • 24.2 WAN Setup
• Menu 3 LAN Setup
  • 25.1 LAN Setup
    • 25.1.1 General Ethernet Setup
  • 25.2 Protocol Dependent Ethernet Setup
  • 25.3 TCP/IP Ethernet Setup and DHCP
    • 25.3.1 IP Alias Setup
  • 25.4 Wireless LAN Setup (P-335WT only)
    • 25.4.1 Configuring MAC Address Filter
    • 25.4.2 Configuring Roaming on the Prestige
• Internet Access
  • 26.1 Introduction to Internet Access Setup
  • 26.2 Ethernet Encapsulation
  • 26.3 Configuring the PPTP Client
  • 26.4 Configuring the PPPoE Client
  • 26.5 Basic Setup Complete
• Remote Node Configuration
  • 27.1 Introduction to Remote Node Setup
  • 27.2 Remote Node Profile Setup
    • 27.2.1 Ethernet Encapsulation
    • 27.2.2 PPPoE Encapsulation
      • 27.2.2.1 Outgoing Authentication Protocol
      • 27.2.2.2 Nailed-Up Connection
    • 27.2.3 PPTP Encapsulation
  • 27.3 Edit IP
  • 27.4 Remote Node Filter
    • 27.4.1 Traffic Redirect Setup
• Static Route Setup
  • 28.1 IP Static Route Setup
• Network Address Translation (NAT)
  • 29.1 Using NAT
    • 29.1.1 SUA (Single User Account) Versus NAT
  • 29.2 Applying NAT
  • 29.3 NAT Setup
    • 29.3.1 Address Mapping Sets
      • 29.3.1.1 User-Defined Address Mapping Sets
      • 29.3.1.2 Ordering Your Rules
  • 29.4 Configuring a Server behind NAT
  • 29.5 General NAT Examples
    • 29.5.1 Example 1: Internet Access Only
    • 29.5.2 Example 2: Internet Access with an Inside Server
    • 29.5.3 Example 3: Multiple Public IP Addresses With Inside Servers
    • 29.5.4 Example 4: NAT Unfriendly Application Programs
  • 29.6 Configuring Trigger Port Forwarding
• Enabling the Firewall
  • 30.1 Remote Management and the Firewall
  • 30.2 Access Methods
  • 30.3 Enabling the Firewall
• Filter Configuration
  • 31.1 Introduction to Filters
    • 31.1.1 The Filter Structure of the Prestige
  • 31.2 Configuring a Filter Set
    • 31.2.1 Configuring a Filter Rule
    • 31.2.2 Configuring a TCP/IP Filter Rule
    • 31.2.3 Configuring a Generic Filter Rule
  • 31.3 Example Filter
  • 31.4 Filter Types and NAT
  • 31.5 Firewall Versus Filters
  • 31.6 Applying a Filter
    • 31.6.1 Applying LAN Filters
    • 31.6.2 Applying Remote Node Filters
• SNMP Configuration
  • 32.1 About SNMP
  • 32.2 Supported MIBs
  • 32.3 SNMP Configuration
  • 32.4 SNMP Traps
• System Security
  • 33.1 System Security
    • 33.1.1 System Password
    • 33.1.2 Configuring External RADIUS Server
    • 33.1.3 802.1x
• System Information and Diagnosis
  • 34.1 System Status
  • 34.2 System Information
    • 34.2.1 System Information
    • 34.2.2 Console Port Speed
  • 34.3 Log and Trace
    • 34.3.1 Syslog Logging
      • 34.3.1.1 CDR
      • 34.3.1.2 Packet triggered
      • 34.3.1.3 Filter log
      • 34.3.1.4 PPP log
      • 34.3.1.5 Firewall log
    • 34.3.2 Call-Triggering Packet
  • 34.4 Diagnostic
    • 34.4.1 WAN DHCP
• Firmware and Configuration File Maintenance
  • 35.1 Filename Conventions
  • 35.2 Backup Configuration
    • 35.2.1 Backup Configuration
    • 35.2.2 Using the FTP Command from the Command Line
    • 35.2.3 Example of FTP Commands from the Command Line
    • 35.2.4 GUI-based FTP Clients
    • 35.2.5 TFTP and FTP over WAN Management Limitations
    • 35.2.6 Backup Configuration Using TFTP
    • 35.2.7 TFTP Command Example
    • 35.2.8 GUI-based TFTP Clients
  • 35.3 Restore Configuration
    • 35.3.1 Restore Using FTP
    • 35.3.2 Restore Using FTP Session Example
  • 35.4 Uploading Firmware and Configuration Files
    • 35.4.1 Firmware File Upload
    • 35.4.2 Configuration File Upload
    • 35.4.3 FTP File Upload Command from the DOS Prompt Example
    • 35.4.4 FTP Session Example of Firmware File Upload
    • 35.4.5 TFTP File Upload
    • 35.4.6 TFTP Upload Command Example
• System Maintenance
  • 36.1 Command Interpreter Mode
    • 36.1.1 Command Syntax
    • 36.1.2 Command Usage
  • 36.2 Call Control Support
    • 36.2.1 Budget Management
    • 36.2.2 Call History
  • 36.3 Time and Date Setting
    • 36.3.1 Resetting the Time
• Remote Management
  • 37.1 Remote Management
    • 37.1.1 Remote Management Limitations
• Call Scheduling
  • 38.1 Introduction to Call Scheduling
• VPN/IPSec Setup
  • 39.1 VPN/IPSec Overview
  • 39.2 IPSec Summary Screen
  • 39.3 IKE Setup
  • 39.4 Manual Setup
    • 39.4.1 Active Protocol
    • 39.4.2 Security Parameter Index (SPI)
• SA Monitor
  • 40.1 SA Monitor Overview
  • 40.2 Using SA Monitor
• Troubleshooting
  • 41.1 Problems Starting Up the Prestige
  • 41.2 Problems with the LAN
  • 41.3 Problems with the WAN
  • 41.4 Problems Accessing the Prestige
  • 41.5 Problems with Restricted Web Pages and Keyword Blocking
    • 41.5.1 Pop-up Windows, JavaScripts and Java Permissions
      • 41.5.1.1 Internet Explorer Pop-up Blockers
      • 41.5.1.2 JavaScripts
      • 41.5.1.3 Java Permissions
    • 41.5.2 ActiveX Controls in Internet Explorer
• Appendix A
  • Product Specifications
• Appendix B
  • PPPoE
    • PPPoE in Action
    • Benefits of PPPoE
    • Traditional Dial-up Scenario
    • How PPPoE Works
    • Prestige as a PPPoE Client
• Appendix C
  • PPTP
    • What is PPTP?
      • How can we transport PPP frames from a computer to a broadband modem over Ethernet?
    • PPTP and the Prestige
    • PPTP Protocol Overview
    • Control & PPP Connections
      • Call Connection
      • PPP Data Connection
• Appendix D
  • Print Server
    • Installation Requirements
    • Windows NT/2000/XP : Print Server Setup Wizard
    • Windows 95/98/ME/NT/2000/XP : Print Server Setup Wizard
    • Windows 2000/NT/XP : Computer Wizard
    • Macintosh OS X
• Appendix E
  • Print Server Specifications
    • Prestige Print Server Compatible USB Printers
• Appendix F
  • Introduction
  • Display NetBIOS Filter Settings
  • NetBIOS Filter Configuration
• Appendix G
  • Log Descriptions
• Appendix H
  • Setting up Your Computer’s IP Address
    • Windows 95/98/Me
      • Installing Components
      • Configuring
      • Verifying Settings
    • Windows 2000/NT/XP
      • Verifying Settings
    • Macintosh OS 8/9
      • Verifying Settings
    • Macintosh OS X
      • Verifying Settings
• Appendix I
  • Wireless LANs
    • Wireless LAN Topologies
      • Ad-hoc Wireless LAN Configuration
      • BSS
      • ESS
    • Channel
    • RTS/CTS
    • Fragmentation Threshold
    • Preamble Type
    • IEEE 802.1x
    • RADIUS
      • Types of RADIUS Messages
    • EAP Authentication
    • Types of Authentication
      • EAP-MD5 (Message-Digest Algorithm 5)
      • EAP-TLS (Transport Layer Security)
      • EAP-TTLS (Tunneled Transport Layer Service)
      • PEAP (Protected EAP)
      • LEAP
    • WEP Authentication Steps
      • Dynamic WEP Key Exchange
    • WPA
      • User Authentication
      • Encryption
    • Security Parameters Summary
    • Roaming
      • Requirements for Roaming
• Appendix J
  • Antenna Selection and Positioning Recommendation
    • Antenna Characteristics
      • Frequency
      • Radiation Pattern
      • Antenna Gain
    • Types of Antennas For WLAN
      • Positioning Antennas
• Appendix K
  • Brute-Force Password Guessing Protection
    • Example
• Appendix L
  • Triangle Route
    • The Ideal Setup
    • The “Triangle Route” Problem
    • The “Triangle Route” Solutions
    • IP Aliasing
    • Gateways on the WAN Side
    • How To Configure Triangle Route
• Appendix M
  • myZyXEL.com
    • Introduction
      • A Note on myZyXEL.com Numbers
    • myZyXEL.com Account Login
    • Registering Your ZyXEL Device
    • Activating a Service
• Index
  • Numerics
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • J
  • L
  • M
  • N
  • O
  • P
  • R
  • S
  • T
  • U
  • V
  • W
  • Z