Document Outline

• P-660R/H-D Series User's Guide
• Copyright
• Federal Communications Commission (FCC) Interference Statement
• Safety Warnings
• ZyXEL Limited Warranty
• Customer Support
• Table of Contents
• List of Figures
• List of Tables
• Preface
• 1. Getting To Know Your Prestige
  • 1.1 Introducing the Prestige
  • 1.2 Features
  • 1.3 Applications for the Prestige
    • 1.3.1 Protected Internet Access
    • 1.3.2 LAN to LAN Application
  • 1.4 Front Panel LEDs
  • 1.5 Hardware Connection
• 2. Introducing the Web Configurator
  • 2.1 Web Configurator Overview
    • 2.1.1 Accessing the Web Configurator
    • 2.1.2 Resetting the Prestige
      • 2.1.2.1 Using the Reset Button
    • 2.1.3 Navigating the Web Configurator
• 3. Wizard Setup for Internet Access
  • 3.1 Introduction
    • 3.1.1 Internet Access Wizard Setup
• 4. Wizard Setup for Media Bandwidth Management
  • 4.1 Introduction
    • 4.1.1 Predefined Media Bandwidth Management Services
  • 4.2 Media Bandwidth Management Setup
• 5. LAN Setup
  • 5.1.1 LANs, WANs and the Prestige
  • 5.1.2 DHCP Setup
    • 5.1.2.1 IP Pool Setup
  • 5.1.3 DNS Server Address
  • 5.1.4 DNS Server Address Assignment
  • 5.2 LAN TCP/IP
    • 5.2.1 IP Address and Subnet Mask
      • 5.2.1.1 Private IP Addresses
    • 5.2.2 RIP Setup
    • 5.2.3 Multicast
    • 5.2.4 Any IP
      • 5.2.4.1 How Any IP Works
• 6. WAN Setup
  • 6.1.1 Encapsulation
    • 6.1.1.1 ENET ENCAP
    • 6.1.1.2 PPP over Ethernet
    • 6.1.1.3 PPPoA
    • 6.1.1.4 RFC 1483
  • 6.1.2 Multiplexing
    • 6.1.2.1 VC-based Multiplexing
    • 6.1.2.2 LLC-based Multiplexing
  • 6.1.3 VPI and VCI
  • 6.1.4 IP Address Assignment
    • 6.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation
    • 6.1.4.2 IP Assignment with RFC 1483 Encapsulation
    • 6.1.4.3 IP Assignment with ENET ENCAP Encapsulation
  • 6.1.5 Nailed-Up Connection (PPP)
  • 6.1.6 NAT
  • 6.2 Metric
  • 6.3 PPPoE Encapsulation
  • 6.4 Traffic Shaping
  • 6.5 Zero Configuration Internet Access
• 7. Network Address Translation (NAT) Screens
  • 7.1.1 NAT Definitions
  • 7.1.2 What NAT Does
  • 7.1.3 How NAT Works
  • 7.1.4 NAT Application
  • 7.1.5 NAT Mapping Types
  • 7.2 SUA (Single User Account) Versus NAT
  • 7.3 SUA Server
    • 7.3.1 Default Server IP Address
    • 7.3.2 Port Forwarding: Services and Port Numbers
    • 7.3.3 Configuring Servers Behind SUA (Example)
• 8. Dynamic DNS Setup
  • 8.1.1 DYNDNS Wildcard
• 9. Time and Date
• 10. Firewalls
  • 10.2 Types of Firewalls
    • 10.2.1 Packet Filtering Firewalls
    • 10.2.2 Application-level Firewalls
    • 10.2.3 Stateful Inspection Firewalls
  • 10.3 Introduction to ZyXEL’s Firewall
    • 10.3.1 Denial of Service Attacks
  • 10.4 Denial of Service
    • 10.4.1 Basics
    • 10.4.2 Types of DoS Attacks
      • 10.4.2.1 ICMP Vulnerability
      • 10.4.2.2 Illegal Commands (NetBIOS and SMTP)
      • 10.4.2.3 Traceroute
  • 10.5 Stateful Inspection
    • 10.5.1 Stateful Inspection Process
    • 10.5.2 Stateful Inspection and the Prestige
    • 10.5.3 TCP Security
    • 10.5.4 UDP/ICMP Security
    • 10.5.5 Upper Layer Protocols
  • 10.6 Guidelines for Enhancing Security with Your Firewall
    • 10.6.1 Security In General
  • 10.7 Packet Filtering Vs Firewall
    • 10.7.1 Packet Filtering:
      • 10.7.1.1 When To Use Filtering
    • 10.7.2 Firewall
      • 10.7.2.1 When To Use The Firewall
• 11. Firewall Configuration
  • 11.1 Access Methods
  • 11.2 Firewall Policies Overview
  • 11.3 Rule Logic Overview
    • 11.3.1 Rule Checklist
    • 11.3.2 Security Ramifications
    • 11.3.3 Key Fields For Configuring Rules
      • 11.3.3.1 Action
      • 11.3.3.2 Service
      • 11.3.3.3 Source Address
      • 11.3.3.4 Destination Address
  • 11.4 Connection Direction
    • 11.4.1 LAN to WAN Rules
    • 11.4.2 Alerts
  • 11.9 Example Firewall Rule
  • 11.10 Predefined Services
    • 11.12.1 Threshold Values
    • 11.12.2 Half-Open Sessions
      • 11.12.2.1 TCP Maximum Incomplete and Blocking Time
    • 11.12.3 Configuring Firewall Thresholds
• 12. Content Filtering
  • 12.2 The Main Content Filter Screen
• 13. Remote Management Configuration
  • 13.1.1 Remote Management Limitations
  • 13.1.2 Remote Management and NAT
  • 13.1.3 System Timeout
  • 13.2 Telnet
  • 13.3 FTP
  • 13.4 Web
  • 13.5 Configuring Remote Management
• 14. Universal Plug-and-Play (UPnP)
  • 14.1.1 How do I know if I'm using UPnP?
  • 14.1.2 NAT Traversal
  • 14.1.3 Cautions with UPnP
  • 14.2 UPnP and ZyXEL
  • 14.3 Installing UPnP in Windows Example
  • 14.4 Using UPnP in Windows XP Example
• 15. Logs Screens
  • 15.1.1 Alerts and Logs
  • 15.2 Configuring Log Settings
  • 15.4 SMTP Error Messages
    • 15.4.1 Example E-mail Log
• 16. Media Bandwidth Management Advanced Setup
  • 16.2 Bandwidth Classes and Filters
  • 16.3 Proportional Bandwidth Allocation
  • 16.4 Application-based Bandwidth Management
  • 16.5 Subnet-based Bandwidth Management
  • 16.6 Application and Subnet-based Bandwidth Management
  • 16.7 Scheduler
    • 16.7.1 Priority-based Scheduler
    • 16.7.2 Fairness-based Scheduler
    • 16.7.3 Maximize Bandwidth Usage
    • 16.7.4 Reserving Bandwidth for Non-Bandwidth Class Traffic
    • 16.7.5 Maximize Bandwidth Usage Example
      • 16.7.5.1 Priority-based Allotment of Unused and Unbudgeted Bandwidth
      • 16.7.5.2 Fairness-based Allotment of Unused and Unbudgeted Bandwidth
  • 16.8 Bandwidth Borrowing
    • 16.8.1 Bandwidth Borrowing Example
  • 16.9 Maximize Bandwidth Usage With Bandwidth Borrowing
    • 16.12.1 DiffServ
      • 16.12.1.1 DSCP and Per-Hop Behavior
• 17. Maintenance
  • 17.1 Maintenance Overview
    • 17.2.1 System Statistics
• 18. Introducing the SMT
  • 18.1 SMT Introduction
    • 18.1.1 Procedure for SMT Configuration via Telnet
    • 18.1.2 Entering Password
    • 18.1.3 Prestige SMT Menus Overview
  • 18.2 Navigating the SMT Interface
    • 18.2.1 System Management Terminal Interface Summary
  • 18.3 Changing the System Password
• 19. Menu 1 General Setup
  • 19.1 General Setup
  • 19.2 Procedure to Configure Menu 1
    • 19.2.1 Procedure to Configure Dynamic DNS
• 20. Menu 2 WAN Backup Setup
  • 20.1 Introduction to WAN Backup Setup
  • 20.2 Configuring Dial Backup in Menu 2
    • 20.2.1 Traffic Redirect Setup
• 21. Menu 3 LAN Setup
  • 21.1 LAN Setup
    • 21.1.1 General Ethernet Setup
  • 21.2 Protocol Dependent Ethernet Setup
  • 21.3 TCP/IP Ethernet Setup and DHCP
• 22. Internet Access
  • 22.1 Internet Access Overview
  • 22.2 IP Policies
  • 22.3 IP Alias
  • 22.4 IP Alias Setup
  • 22.5 Route IP Setup
  • 22.6 Internet Access Configuration
• 23. Remote Node Configuration
  • 23.1 Remote Node Setup Overview
  • 23.2 Remote Node Setup
    • 23.2.1 Remote Node Profile
    • 23.2.2 Encapsulation and Multiplexing Scenarios
      • 23.2.2.1 Scenario 1: One VC, Multiple Protocols
      • 23.2.2.2 Scenario 2: One VC, One Protocol (IP)
      • 23.2.2.3 Scenario 3: Multiple VCs
    • 23.2.3 Outgoing Authentication Protocol
  • 23.3 Remote Node Network Layer Options
    • 23.3.1 My WAN Addr Sample IP Addresses
  • 23.4 Remote Node Filter
    • 23.4.1 Web Configurator Internet Security Filter Rules
    • 23.4.2 Web Configurator Filter Sets
  • 23.5 Editing ATM Layer Options
    • 23.5.1 VC-based Multiplexing (non-PPP Encapsulation)
    • 23.5.2 LLC-based Multiplexing or PPP Encapsulation
    • 23.5.3 Advance Setup Options
• 24. Static Route Setup
  • 24.1 IP Static Route Overview
  • 24.2 Configuration
• 25. Bridging Setup
  • 25.1 Bridging in General
  • 25.2 Bridge Ethernet Setup
    • 25.2.1 Remote Node Bridging Setup
    • 25.2.2 Bridge Static Route Setup
• 26. Network Address Translation (NAT)
  • 26.1 Using NAT
    • 26.1.1 SUA (Single User Account) Versus NAT
  • 26.2 Applying NAT
  • 26.3 NAT Setup
    • 26.3.1 Address Mapping Sets
      • 26.3.1.1 SUA Address Mapping Set
      • 26.3.1.2 User-Defined Address Mapping Sets
      • 26.3.1.3 Ordering Your Rules
  • 26.4 Configuring a Server behind NAT
  • 26.5 General NAT Examples
    • 26.5.1 Example 1: Internet Access Only
    • 26.5.2 Example 2: Internet Access with an Inside Server
    • 26.5.3 Example 3: Multiple Public IP Addresses With Inside Servers
    • 26.5.4 Example 4: NAT Unfriendly Application Programs
• 27. Enabling the Firewall
  • 27.1 Remote Management and the Firewall
  • 27.2 Access Methods
  • 27.3 Enabling the Firewall
• 28. Filter Configuration
  • 28.1 About Filtering
    • 28.1.1 The Filter Structure of the Prestige
  • 28.2 Configuring a Filter Set for the Prestige
  • 28.3 Filter Rules Summary Menus
  • 28.4 Configuring a Filter Rule
    • 28.4.1 TCP/IP Filter Rule
    • 28.4.2 Generic Filter Rule
  • 28.5 Filter Types and NAT
  • 28.6 Example Filter
  • 28.7 Applying Filters and Factory Defaults
    • 28.7.1 Ethernet Traffic
    • 28.7.2 Remote Node Filters
• 29. SNMP Configuration
  • 29.1 About SNMP
  • 29.2 Supported MIBs
  • 29.3 SNMP Configuration
  • 29.4 SNMP Traps
• 30. System Information and Diagnosis
  • 30.1 Overview
  • 30.2 System Status
  • 30.3 System Information
    • 30.3.1 System Information
    • 30.3.2 Console Port Speed
  • 30.4 Log and Trace
    • 30.4.1 Viewing Error Log
    • 30.4.2 Syslog and Accounting
  • 30.5 Diagnostic
• 31. Firmware and Configuration File Maintenance
  • 31.1 Filename Conventions
  • 31.2 Backup Configuration
    • 31.2.1 Backup Configuration
    • 31.2.2 Using the FTP Command from the Command Line
    • 31.2.3 Example of FTP Commands from the Command Line
    • 31.2.4 GUI-based FTP Clients
    • 31.2.5 TFTP and FTP over WAN Management Limitations
    • 31.2.6 Backup Configuration Using TFTP
    • 31.2.7 TFTP Command Example
    • 31.2.8 GUI-based TFTP Clients
  • 31.3 Restore Configuration
    • 31.3.1 Restore Using FTP
    • 31.3.2 Restore Using FTP Session Example
  • 31.4 Uploading Firmware and Configuration Files
    • 31.4.1 Firmware File Upload
    • 31.4.2 Configuration File Upload
    • 31.4.3 FTP File Upload Command from the DOS Prompt Example
    • 31.4.4 FTP Session Example of Firmware File Upload
    • 31.4.5 TFTP File Upload
    • 31.4.6 TFTP Upload Command Example
• 32. System Maintenance
  • 32.1 Command Interpreter Mode
  • 32.2 Call Control Support
    • 32.2.1 Budget Management
  • 32.3 Time and Date Setting
    • 32.3.1 Resetting the Time
• 33. Remote Management
  • 33.1 Remote Management Overview
  • 33.2 Remote Management
    • 33.2.1 Remote Management Setup
    • 33.2.2 Remote Management Limitations
  • 33.3 Remote Management and NAT
  • 33.4 System Timeout
• 34. IP Policy Routing
  • 34.1 IP Policy Routing Overview
  • 34.2 Benefits of IP Policy Routing
  • 34.3 Routing Policy
  • 34.4 IP Routing Policy Setup
  • 34.5 Applying an IP Policy
    • 34.5.1 Ethernet IP Policies
  • 34.6 IP Policy Routing Example
• 35. Call Scheduling
  • 35.1 Introduction
• 36. Troubleshooting
  • 36.1 Problems Starting Up the Prestige
  • 36.2 Problems with the LAN
  • 36.3 Problems with the WAN
  • 36.4 Problems Accessing the Prestige
    • 36.4.1 Pop-up Windows, JavaScripts and Java Permissions
      • 36.4.1.1 Internet Explorer Pop-up Blockers
      • 36.4.1.2 JavaScripts
      • 36.4.1.3 Java Permissions
    • 36.4.2 ActiveX Controls in Internet Explorer
• A. Product Specifications
• B. About ADSL
• C. Virtual Circuit Topology
• D. Wall-mounting Instructions
• E. Setting up Your Computer’s IP Address
  • Verifying Settings
• F. IP Subnetting
• G. Boot Commands
• H. Command Interpreter
• I. Firewall Commands
• J. Splitters and Microfilters
• K. PPPoE
• L. Internal SPTGEN
• M. Log Descriptions
• Index
  • Numerics
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • X
  • Z