Document Outline

• Prestige 2602H Series
• Prestige 2602HW Series
• Copyright
• Federal Communications Commission (FCC) Interference Statement
• Safety Warnings
• ZyXEL Limited Warranty
• Customer Support
• Table of Contents
• List of Figures
• List of Tables
• Preface
• Introduction to DSL
• Getting To Know Your Prestige
  • 1.1 Introducing the Prestige
    • 1.1.1 Features of the Prestige
      • 1.1.1.1 P2602HW Wireless Features
  • 1.2 Applications for the Prestige
    • 1.2.1 Internet Access
      • 1.2.1.1 Internet Single User Account
    • 1.2.2 Making Calls via Internet Telephony Service Provider
    • 1.2.3 Make Peer-to-peer Calls
    • 1.2.4 Firewall for Secure Broadband Internet Access
    • 1.2.5 LAN to LAN Application
    • 1.2.6 Front Panel LEDs
• Introducing the Web Configurator
  • 2.1 Web Configurator Overview
    • 2.1.1 Accessing the Prestige Web Configurator
    • 2.1.2 Resetting the Prestige
      • 2.1.2.1 Using The Reset Button
    • 2.1.3 Navigating the Prestige Web Configurator
• Wizard Setup
  • 3.1 Wizard Setup Introduction
    • 3.1.1 Wizard Setup: First Screen
    • 3.1.2 Wizard Setup: Second Screen
    • 3.1.3 Wizard Setup: Third Screen
    • 3.1.4 Internet Access Wizard Setup: Fourth Screen
    • 3.1.5 Wizard Setup: Connection Test
      • 3.1.5.1 Test Your Internet Connection
  • 3.2 Media Bandwidth Management Wizard
    • 3.2.1 Predefined Media Bandwidth Management Services
    • 3.2.2 Media Bandwidth Management Setup: First Screen
    • 3.2.3 Media Bandwidth Mgnt. Wizard Setup: Second Screen
    • 3.2.4 Media Bandwidth Mgnt. Wizard Setup: Finish
  • 3.3 Password Setup
    • 3.3.1 Configuring Password
• LAN Setup
  • 4.1 LAN Overview
    • 4.1.1 LANs, WANs and the Prestige
    • 4.1.2 DHCP Setup
      • 4.1.2.1 IP Pool Setup
  • 4.2 DNS Server Address
  • 4.3 DNS Server Address Assignment
  • 4.4 LAN TCP/IP
    • 4.4.1 Factory LAN Defaults
  • 4.5 LAN TCP/IP
    • 4.5.1 IP Address and Subnet Mask
      • 4.5.1.1 Private IP Addresses
    • 4.5.2 RIP Setup
    • 4.5.3 Multicast
  • 4.6 Any IP
    • 4.6.1 How Any IP Works
  • 4.7 Configuring LAN
  • 4.8 Configuring Static DHCP
• Wireless LAN (P2602HW Models)
  • 5.1 Introduction
  • 5.2 Wireless Security Overview
    • 5.2.1 Encryption
    • 5.2.2 Authentication
    • 5.2.3 Restricted Access
    • 5.2.4 Hide Prestige Identity
    • 5.2.5 Configuring Wireless LAN on the Prestige
  • 5.3 Configuring the Wireless Screen
    • 5.3.1 WEP Encryption
  • 5.4 Configuring MAC Filters
  • 5.5 Introduction to WPA
    • 5.5.1 WPA-PSK Application Example
    • 5.5.2 WPA with RADIUS Application Example
    • 5.5.3 Wireless Client WPA Supplicants
  • 5.6 Configuring IEEE 802.1x and WPA
    • 5.6.1 Authentication Required: 802.1x
    • 5.6.2 Authentication Required: WPA
    • 5.6.3 Authentication Required: WPA-PSK
  • 5.7 Configuring Local User Authentication
  • 5.8 Configuring RADIUS
• WAN Setup
  • 6.1 WAN Overview
    • 6.1.1 Encapsulation
      • 6.1.1.1 ENET ENCAP
      • 6.1.1.2 PPP over Ethernet
      • 6.1.1.3 PPPoA
      • 6.1.1.4 RFC 1483
    • 6.1.2 Multiplexing
      • 6.1.2.1 VC-based Multiplexing
      • 6.1.2.2 LLC-based Multiplexing
    • 6.1.3 VPI and VCI
    • 6.1.4 IP Address Assignment
      • 6.1.4.1 IP Assignment with PPPoA or PPPoE Encapsulation
      • 6.1.4.2 IP Assignment with RFC 1483 Encapsulation
      • 6.1.4.3 IP Assignment with ENET ENCAP Encapsulation
    • 6.1.5 Nailed-Up Connection (PPP)
  • 6.2 Metric
  • 6.3 PPPoE Encapsulation
  • 6.4 Traffic Shaping
  • 6.5 Zero Configuration Internet Access
  • 6.6 Configuring WAN Setup
  • 6.7 Traffic Redirect
  • 6.8 Configuring WAN Backup
• Network Address Translation (NAT) Screens
  • 7.1 NAT Overview
    • 7.1.1 NAT Definitions
    • 7.1.2 What NAT Does
    • 7.1.3 How NAT Works
    • 7.1.4 NAT Application
    • 7.1.5 NAT Mapping Types
  • 7.2 SUA (Single User Account) Versus NAT
  • 7.3 SUA Server
    • 7.3.1 Default Server IP Address
    • 7.3.2 Port Forwarding: Services and Port Numbers
    • 7.3.3 Configuring Servers Behind SUA (Example)
  • 7.4 Selecting the NAT Mode
  • 7.5 Configuring SUA Server
  • 7.6 Configuring Address Mapping
  • 7.7 Editing an Address Mapping Rule
• Introduction to VoIP
  • 8.1 Introduction to VoIP
  • 8.2 SIP
    • 8.2.1 SIP Identities
      • 8.2.1.1 SIP Number
      • 8.2.1.2 SIP Service Domain
    • 8.2.2 SIP Call Progression
    • 8.2.3 SIP Servers
      • 8.2.3.1 SIP User Agent
      • 8.2.3.2 SIP Proxy Server
      • 8.2.3.3 SIP Redirect Server
      • 8.2.3.4 SIP Register Server
    • 8.2.4 RTP
  • 8.3 SIP ALG
  • 8.4 Pulse Code Modulation
  • 8.5 Voice Coding
    • 8.5.1 G.711
    • 8.5.2 G.729
  • 8.6 PSTN Call Setup Signaling
  • 8.7 MWI (Message Waiting Indication)
• Voice Screens
  • 9.1 Voice Screens Introduction
  • 9.2 SIP Settings Configuration
  • 9.3 Advanced Voice Settings Configuration
  • 9.4 Quality of Service (QoS)
    • 9.4.1 Type Of Service (ToS)
    • 9.4.2 DiffServ
      • 9.4.2.1 DSCP and Per-Hop Behavior
    • 9.4.3 VLAN
  • 9.5 QoS Configuration
  • 9.6 Phone
    • 9.6.1 Voice Activity Detection/Silence Suppression
    • 9.6.2 Comfort Noise Generation
    • 9.6.3 Echo Cancellation
  • 9.7 Phone Configuration
  • 9.8 Speed Dial
    • 9.8.1 Peer-to-Peer Calls
  • 9.9 Speed Dial Configuration
  • 9.10 Lifeline (Prestige 2602HL/HWL)
  • 9.11 Lifeline Configuration (Prestige 2602HL/HWL)
  • 9.12 Supplementary Phone Services Overview
    • 9.12.1 The Flash Key
    • 9.12.2 Europe Type Supplementary Phone Services
      • 9.12.2.1 European Call Hold
      • 9.12.2.2 European Call Waiting
      • 9.12.2.3 European Call Transfer
      • 9.12.2.4 European Three-Way Conference
    • 9.12.3 USA Type Supplementary Services
      • 9.12.3.1 USA Call Hold
      • 9.12.3.2 USA Call Waiting
      • 9.12.3.3 USA Call Transfer
      • 9.12.3.4 USA Three-Way Conference
  • 9.13 Common Phone Port Configuration
  • 9.14 Call Forward Configuration
• Phone Usage
  • 10.1 Dialing a Telephone Number
  • 10.2 Using Speed Dial to Dial a Telephone Number
  • 10.3 Internal Calls
  • 10.4 Checking the Prestige’s IP Address
  • 10.5 Auto Firmware Upgrade
• Dynamic DNS Setup
  • 11.1 Dynamic DNS
    • 11.1.1 DYNDNS Wildcard
  • 11.2 Configuring Dynamic DNS
• Time and Date
  • 12.1 Pre-defined NTP Time Servers List
  • 12.2 Configuring Time and Date
• Firewalls
  • 13.1 Firewall Overview
  • 13.2 Types of Firewalls
    • 13.2.1 Packet Filtering Firewalls
    • 13.2.2 Application-level Firewalls
    • 13.2.3 Stateful Inspection Firewalls
  • 13.3 Introduction to ZyXEL’s Firewall
    • 13.3.1 Denial of Service Attacks
  • 13.4 Denial of Service
    • 13.4.1 Basics
    • 13.4.2 Types of DoS Attacks
      • 13.4.2.1 ICMP Vulnerability
      • 13.4.2.2 Illegal Commands (NetBIOS and SMTP)
      • 13.4.2.3 Traceroute
  • 13.5 Stateful Inspection
    • 13.5.1 Stateful Inspection Process
    • 13.5.2 Stateful Inspection and the Prestige
    • 13.5.3 TCP Security
    • 13.5.4 UDP/ICMP Security
    • 13.5.5 Upper Layer Protocols
  • 13.6 Guidelines for Enhancing Security with Your Firewall
    • 13.6.1 Security In General
  • 13.7 Packet Filtering Vs Firewall
    • 13.7.1 Packet Filtering:
      • 13.7.1.1 When To Use Filtering
    • 13.7.2 Firewall
      • 13.7.2.1 When To Use The Firewall
• Firewall Configuration
  • 14.1 Access Methods
  • 14.2 Firewall Policies Overview
  • 14.3 Rule Logic Overview
    • 14.3.1 Rule Checklist
    • 14.3.2 Security Ramifications
    • 14.3.3 Key Fields For Configuring Rules
      • 14.3.3.1 Action
      • 14.3.3.2 Service
      • 14.3.3.3 Source Address
      • 14.3.3.4 Destination Address
  • 14.4 Connection Direction Example
    • 14.4.1 LAN to WAN Rules
    • 14.4.2 WAN to LAN Rules
    • 14.4.3 Alerts
  • 14.5 Configuring Basic Firewall Settings
  • 14.6 Rule Summary
    • 14.6.1 Configuring Firewall Rules
  • 14.7 Customized Services
  • 14.8 Creating/Editing A Customized Service
  • 14.9 Example Firewall Rule
  • 14.10 Predefined Services
  • 14.11 Anti-Probing
  • 14.12 DoS Thresholds
    • 14.12.1 Threshold Values
    • 14.12.2 Half-Open Sessions
      • 14.12.2.1 TCP Maximum Incomplete and Blocking Time
• Content Filtering
  • 15.1 Content Filtering Overview
  • 15.2 Configuring Keyword Blocking
  • 15.3 Configuring the Schedule
  • 15.4 Configuring Trusted Computers
• Introduction to IPSec
  • 16.1 VPN Overview
    • 16.1.1 IPSec
    • 16.1.2 Security Association
    • 16.1.3 Other Terminology
      • 16.1.3.1 Encryption
      • 16.1.3.2 Data Confidentiality
      • 16.1.3.3 Data Integrity
      • 16.1.3.4 Data Origin Authentication
    • 16.1.4 VPN Applications
  • 16.2 IPSec Architecture
    • 16.2.1 IPSec Algorithms
    • 16.2.2 Key Management
  • 16.3 Encapsulation
    • 16.3.1 Transport Mode
    • 16.3.2 Tunnel Mode
  • 16.4 IPSec and NAT
• VPN Screens
  • 17.1 VPN/IPSec Overview
  • 17.2 IPSec Algorithms
    • 17.2.1 AH (Authentication Header) Protocol
    • 17.2.2 ESP (Encapsulating Security Payload) Protocol
  • 17.3 My IP Address
  • 17.4 Secure Gateway Address
    • 17.4.1 Dynamic Secure Gateway Address
  • 17.5 VPN Summary Screen
  • 17.6 Keep Alive
  • 17.7 Remote DNS Server
  • 17.8 NAT Traversal
    • 17.8.1 NAT Traversal Configuration
  • 17.9 ID Type and Content
    • 17.9.1 ID Type and Content Examples
  • 17.10 Pre-Shared Key
  • 17.11 Editing VPN Policies
  • 17.12 IKE Phases
    • 17.12.1 Negotiation Mode
    • 17.12.2 Diffie-Hellman (DH) Key Groups
    • 17.12.3 Perfect Forward Secrecy (PFS)
  • 17.13 Configuring Advanced IKE Settings
  • 17.14 Manual Key Setup
    • 17.14.1 Security Parameter Index (SPI)
  • 17.15 Configuring Manual Key
  • 17.16 Viewing SA Monitor
  • 17.17 Configuring Global Setting
  • 17.18 Telecommuter VPN/IPSec Examples
    • 17.18.1 Telecommuters Sharing One VPN Rule Example
    • 17.18.2 Telecommuters Using Unique VPN Rules Example
  • 17.19 VPN and Remote Management
• Remote Management Configuration
  • 18.1 Remote Management Overview
    • 18.1.1 Remote Management Limitations
    • 18.1.2 Remote Management and NAT
    • 18.1.3 System Timeout
  • 18.2 Telnet
  • 18.3 FTP
  • 18.4 Web
  • 18.5 Configuring Remote Management
• Universal Plug-and-Play (UPnP)
  • 19.1 Introducing Universal Plug and Play
    • 19.1.1 How do I know if I'm using UPnP?
    • 19.1.2 NAT Traversal
    • 19.1.3 Cautions with UPnP
  • 19.2 UPnP and ZyXEL
    • 19.2.1 Configuring UPnP
  • 19.3 Installing UPnP in Windows Example
  • 19.4 Using UPnP in Windows XP Example
• Logs Screens
  • 20.1 Logs Overview
    • 20.1.1 Alerts and Logs
  • 20.2 Configuring Log Settings
  • 20.3 Displaying the Logs
  • 20.4 SMTP Error Messages
    • 20.4.1 Example E-mail Log
• Media Bandwidth Management Advanced Setup
  • 21.1 Bandwidth Management Advanced Setup Overview
  • 21.2 Bandwidth Classes and Filters
  • 21.3 Proportional Bandwidth Allocation
  • 21.4 Bandwidth Management Usage Examples
    • 21.4.1 Application-based Bandwidth Management Example
    • 21.4.2 Subnet-based Bandwidth Management Example
    • 21.4.3 Application and Subnet-based Bandwidth Management Example
  • 21.5 Scheduler
    • 21.5.1 Priority-based Scheduler
    • 21.5.2 Fairness-based Scheduler
  • 21.6 Maximize Bandwidth Usage
    • 21.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic
    • 21.6.2 Maximize Bandwidth Usage Example
  • 21.7 Bandwidth Borrowing
    • 21.7.1 Bandwidth Borrowing Example
    • 21.7.2 Maximize Bandwidth Usage With Bandwidth Borrowing
  • 21.8 Configuring Summary
  • 21.9 Configuring Class Setup
    • 21.9.1 Media Bandwidth Management Class Configuration
    • 21.9.2 Media Bandwidth Management Statistics
  • 21.10 Bandwidth Monitor
• Maintenance
  • 22.1 Maintenance Overview
  • 22.2 System Status Screen
    • 22.2.1 System Statistics
  • 22.3 DHCP Table Screen
  • 22.4 Any IP Table Screen
  • 22.5 Wireless Screen
    • 22.5.1 Association List
  • 22.6 Diagnostic Screens
    • 22.6.1 Diagnostic General Screen
    • 22.6.2 Diagnostic DSL Line Screen
  • 22.7 Firmware Screen
• Introducing the SMT
  • 23.1 Introduction to the SMT
    • 23.1.1 Procedure for SMT Configuration via Telnet
    • 23.1.2 Entering Password
  • 23.2 Navigating the SMT Interface
    • 23.2.1 System Management Terminal Interface Summary
    • 23.2.2 SMT Menus Overview
  • 23.3 Changing the System Password
• Menu 1 General Setup
  • 24.1 General Setup
  • 24.2 Procedure To Configure Menu 1
    • 24.2.1 Procedure to Configure Dynamic DNS
• Menu 2 WAN Backup Setup
  • 25.1 Introduction to WAN Backup Setup
  • 25.2 Configuring WAN Backup in Menu 2
    • 25.2.1 Traffic Redirect Setup
• Menu 3 LAN Setup
  • 26.1 LAN Setup
    • 26.1.1 General Ethernet Setup
  • 26.2 Protocol Dependent Ethernet Setup
  • 26.3 TCP/IP Ethernet Setup and DHCP
• Wireless LAN Setup
  • 27.1 Wireless LAN Overview
  • 27.2 Wireless LAN Setup
    • 27.2.1 Wireless LAN MAC Address Filter
• Internet Access
  • 28.1 Internet Access Overview
  • 28.2 IP Policies
  • 28.3 IP Alias
  • 28.4 IP Alias Setup
  • 28.5 Route IP Setup
  • 28.6 Internet Access Configuration
• Remote Node Configuration
  • 29.1 Remote Node Setup Overview
  • 29.2 Remote Node Setup
    • 29.2.1 Remote Node Profile
    • 29.2.2 Encapsulation and Multiplexing Scenarios
      • 29.2.2.1 Scenario 1: One VC, Multiple Protocols
      • 29.2.2.2 Scenario 2: One VC, One Protocol (IP)
      • 29.2.2.3 Scenario 3: Multiple VCs
    • 29.2.3 Outgoing Authentication Protocol
  • 29.3 Remote Node Network Layer Options
    • 29.3.1 My WAN Addr Sample IP Addresses
  • 29.4 Remote Node Filter
  • 29.5 Editing ATM Layer Options
    • 29.5.1 VC-based Multiplexing (non-PPP Encapsulation)
    • 29.5.2 LLC-based Multiplexing or PPP Encapsulation
    • 29.5.3 Advance Setup Options
• Static Route Setup
  • 30.1 IP Static Route Overview
  • 30.2 Configuration
• Bridging Setup
  • 31.1 Bridging in General
  • 31.2 Bridge Ethernet Setup
    • 31.2.1 Remote Node Bridging Setup
    • 31.2.2 Bridge Static Route Setup
• Network Address Translation (NAT)
  • 32.1 Using NAT
    • 32.1.1 SUA (Single User Account) Versus NAT
  • 32.2 Applying NAT
  • 32.3 NAT Setup
    • 32.3.1 Address Mapping Sets
      • 32.3.1.1 SUA Address Mapping Set
      • 32.3.1.2 User-Defined Address Mapping Sets
      • 32.3.1.3 Ordering Your Rules
  • 32.4 Configuring a Server Behind NAT
  • 32.5 General NAT Examples
    • 32.5.1 Example 1: Internet Access Only
    • 32.5.2 Example 2: Internet Access with an Inside Server
    • 32.5.3 Example 3: Multiple Public IP Addresses With Inside Servers
    • 32.5.4 Example 4: NAT Unfriendly Application Programs
• Enabling the Firewall
  • 33.1 Remote Management and the Firewall
  • 33.2 Access Methods
  • 33.3 Enabling the Firewall
• Filter Configuration
  • 34.1 About Filtering
    • 34.1.1 The Filter Structure of the Prestige
  • 34.2 Configuring a Filter Set for the Prestige
  • 34.3 Filter Rules Summary Menus
  • 34.4 Configuring a Filter Rule
    • 34.4.1 TCP/IP Filter Rule
    • 34.4.2 Generic Filter Rule
  • 34.5 Filter Types and NAT
  • 34.6 Example Filter
  • 34.7 Applying Filters and Factory Defaults
    • 34.7.1 Ethernet Traffic
    • 34.7.2 Remote Node Filters
• SNMP Configuration
  • 35.1 About SNMP
  • 35.2 Supported MIBs
  • 35.3 SNMP Configuration
  • 35.4 SNMP Traps
• System Security
  • 36.1 System Security
    • 36.1.1 System Password
    • 36.1.2 Configuring External RADIUS Server
    • 36.1.3 IEEE802.1x
  • 36.2 Creating User Accounts on the Prestige
• System Information and Diagnosis
  • 37.1 Overview
  • 37.2 System Status
  • 37.3 System Information
    • 37.3.1 System Information
    • 37.3.2 Console Port Speed
  • 37.4 Log and Trace
    • 37.4.1 Viewing Error Log
    • 37.4.2 Syslog and Accounting
  • 37.5 Diagnostic
• Firmware and Configuration File Maintenance
  • 38.1 Filename Conventions
  • 38.2 Backup Configuration
    • 38.2.1 Backup Configuration
    • 38.2.2 Using the FTP Command from the Command Line
    • 38.2.3 Example of FTP Commands from the Command Line
    • 38.2.4 GUI-based FTP Clients
    • 38.2.5 TFTP and FTP over WAN Management Limitations
    • 38.2.6 Backup Configuration Using TFTP
    • 38.2.7 TFTP Command Example
    • 38.2.8 GUI-based TFTP Clients
  • 38.3 Restore Configuration
    • 38.3.1 Restore Using FTP
    • 38.3.2 Restore Using FTP Session Example
  • 38.4 Uploading Firmware and Configuration Files
    • 38.4.1 Firmware File Upload
    • 38.4.2 Configuration File Upload
    • 38.4.3 FTP File Upload Command from the DOS Prompt Example
    • 38.4.4 FTP Session Example of Firmware File Upload
    • 38.4.5 TFTP File Upload
    • 38.4.6 TFTP Upload Command Example
• System Maintenance
  • 39.1 Command Interpreter Mode
  • 39.2 Call Control Support
    • 39.2.1 Budget Management
  • 39.3 Time and Date Setting
    • 39.3.1 Resetting the Time
• Remote Management
  • 40.1 Remote Management Overview
  • 40.2 Remote Management
    • 40.2.1 Remote Management Setup
    • 40.2.2 Remote Management Limitations
  • 40.3 Remote Management and NAT
  • 40.4 System Timeout
• IP Policy Routing
  • 41.1 IP Policy Routing Overview
  • 41.2 Benefits of IP Policy Routing
  • 41.3 Routing Policy
  • 41.4 IP Routing Policy Setup
  • 41.5 Applying an IP Policy
    • 41.5.1 Ethernet IP Policies
  • 41.6 IP Policy Routing Example
• Call Scheduling
  • 42.1 Introduction
• VPN/IPSec Setup
  • 43.1 VPN/IPSec Overview
  • 43.2 IPSec Summary Screen
  • 43.3 IPSec Setup
  • 43.4 IKE Setup
  • 43.5 Manual Setup
    • 43.5.1 Active Protocol
    • 43.5.2 Security Parameter Index (SPI)
• SA Monitor
  • 44.1 SA Monitor Overview
  • 44.2 Using SA Monitor
• Troubleshooting
  • 45.1 Problems Starting Up the Prestige
  • 45.2 Problems with the LAN
  • 45.3 Problems with the WAN
  • 45.4 Problems Accessing the Prestige
    • 45.4.1 Pop-up Windows, JavaScripts and Java Permissions
      • 45.4.1.1 Internet Explorer Pop-up Blockers
      • 45.4.1.2 JavaScripts
      • 45.4.1.3 Java Permissions
  • 45.5 Telephone Problems
• Product Specifications
• Setting up Your Computer’s IP Address
• IP Subnetting
• PPPoE
• Wireless LANs
• Triangle Route
• Internal SPTGEN
• Command Interpreter
• Firewall Commands
• Boot Commands
• Log Descriptions
• Index
  • Numerics
  • A
  • B
  • C
  • D
  • E
  • F
  • G
  • H
  • I
  • J
  • K
  • L
  • M
  • N
  • O
  • P
  • Q
  • R
  • S
  • T
  • U
  • V
  • W
  • Z