Document Outline

• User’s Guide
• Copyright
  • Disclaimer
  • Trademarks
• Federal Communications Commission (FCC) Interference Statement
  • Notice 1
  • Certifications
• ZyXEL Limited Warranty
  • Note
  • Safety Warnings
• Customer Support
• Table of Contents
• List of Figures
• List of Tables
• Preface
  • About This User's Guide
  • Related Documentation
  • User Guide Feedback
  • Syntax Conventions
  • Graphics Icons Key
• Getting to Know Your Prestige
  • 1.1 Prestige Internet Security Gateway Overview
  • 1.2 Prestige Features
    • 1.2.1 Physical Features
      • 1.2.1.1 10/100M Auto-negotiating Ethernet/Fast Ethernet Interface(s)
      • 1.2.1.2 Auto-crossover 10/100 Mbps Ethernet Interface(s)
      • 1.2.1.3 4-Port Switch
      • 1.2.1.4 Time and Date
      • 1.2.1.5 Reset Button
    • 1.2.2 Non-Physical Features
      • 1.2.2.1 Trend Micro Security Services
      • 1.2.2.2 IPSec VPN Capability
      • 1.2.2.3 Firewall
      • 1.2.2.4 Content Filtering
      • 1.2.2.5 Brute-Force Password Guessing Protection
      • 1.2.2.6 Packet Filtering
      • 1.2.2.7 Universal Plug and Play (UPnP)
      • 1.2.2.8 Call Scheduling
      • 1.2.2.9 PPPoE
      • 1.2.2.10 PPTP Encapsulation
      • 1.2.2.11 Dynamic DNS Support
      • 1.2.2.12 IP Multicast
      • 1.2.2.13 IP Alias
      • 1.2.2.14 SNMP
      • 1.2.2.15 Network Address Translation (NAT)
      • 1.2.2.16 Traffic Redirect
      • 1.2.2.17 Port Forwarding
      • 1.2.2.18 DHCP (Dynamic Host Configuration Protocol)
      • 1.2.2.19 Full Network Management
      • 1.2.2.20 RoadRunner Support
      • 1.2.2.21 Logging and Tracing
      • 1.2.2.22 Upgrade Prestige Firmware via LAN
      • 1.2.2.23 Embedded FTP and TFTP Servers
  • 1.3 Applications for the Prestige
    • 1.3.1 Secure Broadband Internet Access via Cable or DSL Modem
    • 1.3.2 VPN Application
• Introducing the Web Configurator
  • 2.1 Web Configurator Overview
  • 2.2 Accessing the Prestige Web Configurator
  • 2.3 Resetting the Prestige
    • 2.3.1 Procedure To Use The Reset Button
    • 2.3.2 Navigating the Prestige Web Configurator
    • 2.3.3 Navigation Panel
• Wizard Setup
  • 3.1 Wizard Setup Overview
  • 3.2 Wizard Setup: General Setup and System Name
    • 3.2.1 Domain Name
  • 3.3 Wizard Setup: Screen 2
    • 3.3.1 Ethernet
    • 3.3.2 PPPoE Encapsulation
    • 3.3.3 PPTP Encapsulation
  • 3.4 Wizard Setup: Screen 3
    • 3.4.1 WAN IP Address Assignment
    • 3.4.2 IP Address and Subnet Mask
    • 3.4.3 DNS Server Address Assignment
    • 3.4.4 WAN MAC Address
  • 3.5 Basic Setup Complete
• System Screens
  • 4.1 System Overview
  • 4.2 Configuring General Setup
  • 4.3 Dynamic DNS
    • 4.3.1 DynDNS Wildcard
  • 4.4 Configuring Dynamic DNS
  • 4.5 Configuring Password
  • 4.6 Configuring Time Setting
• LAN Screens
  • 5.1 LAN Overview
  • 5.2 DHCP Setup
    • 5.2.1 IP Pool Setup
    • 5.2.2 System DNS Servers
  • 5.3 LAN TCP/IP
    • 5.3.1 Factory LAN Defaults
    • 5.3.2 IP Address and Subnet Mask
    • 5.3.3 RIP Setup
    • 5.3.4 Multicast
  • 5.4 Configuring IP
  • 5.5 Configuring Static DHCP
  • 5.6 Configuring IP Alias
• WAN Screens
  • 6.1 WAN Overview
  • 6.2 TCP/IP Priority (Metric)
  • 6.3 Configuring Route
  • 6.4 Configuring WAN ISP
    • 6.4.1 Ethernet Encapsulation
    • 6.4.2 PPPoE Encapsulation
    • 6.4.3 PPTP Encapsulation
  • 6.5 Configuring WAN IP
  • 6.6 Configuring WAN MAC
  • 6.7 Traffic Redirect
  • 6.8 Configuring Traffic Redirect
• Network Address Translation (NAT) Screens
  • 7.1 NAT Overview
    • 7.1.1 NAT Definitions
    • 7.1.2 What NAT Does
    • 7.1.3 How NAT Works
    • 7.1.4 NAT Application
    • 7.1.5 NAT Mapping Types
  • 7.2 Using NAT
    • 7.2.1 SUA (Single User Account) Versus NAT
  • 7.3 SUA Server
    • 7.3.1 Default Server IP Address
    • 7.3.2 Port Forwarding: Services and Port Numbers
    • 7.3.3 Configuring Servers Behind SUA (Example)
  • 7.4 Configuring SUA Server
  • 7.5 Configuring Address Mapping
    • 7.5.1 Configuring Address Mapping
  • 7.6 Trigger Port Forwarding
    • 7.6.1 Trigger Port Forwarding Example
    • 7.6.2 Two Points To Remember About Trigger Ports
  • 7.7 Configuring Trigger Port Forwarding
• Static Route Screens
  • 8.1 Static Route Overview
  • 8.2 Configuring IP Static Route
    • 8.2.1 Configuring Route Entry
• UPnP
  • 9.1 Universal Plug and Play Overview
    • 9.1.1 How Do I Know If I'm Using UPnP?
    • 9.1.2 NAT Traversal
    • 9.1.3 Cautions with UPnP
  • 9.2 UPnP and ZyXEL
  • 9.3 Configuring UPnP
  • 9.4 Installing UPnP in Windows Example
    • 9.4.1 Installing UPnP in Windows Me
    • 9.4.2 Installing UPnP in Windows XP
  • 9.5 Using UPnP in Windows XP Example
    • 9.5.1 Auto-discover Your UPnP-enabled Network Device
    • 9.5.2 Web Configurator Easy Access
    • 9.5.3 Web Configurator Easy Access
• Trend Micro Security Services
  • 10.1 Trend Micro Security Service Overview
  • 10.2 Configuring Service Settings
  • 10.3 Virus Protection
  • 10.4 Configuring Virus Protection
  • 10.5 Parental Controls
  • 10.6 Parental Controls Configuration
    • 10.6.1 Parental Controls Statistics
• Firewall
  • 11.1 Introduction
    • 11.1.1 What is a Firewall?
    • 11.1.2 Stateful Inspection Firewall.
    • 11.1.3 About the Prestige Firewall
    • 11.1.4 Guidelines For Enhancing Security With Your Firewall
  • 11.2 Firewall Settings Screen
  • 11.3 The Firewall, NAT and Remote Management
    • 11.3.1 LAN-to-WAN rules
    • 11.3.2 WAN-to-LAN rules
  • 11.4 Services
• Content Filtering
  • 12.1 Introduction to Content Filtering
  • 12.2 Restrict Web Features
  • 12.3 Days and Times
  • 12.4 Configure Content Filtering
• Remote Management Screens
  • 13.1 Remote Management Overview
    • 13.1.1 Remote Management Limitations
    • 13.1.2 Remote Management and NAT
    • 13.1.3 System Timeout
  • 13.2 Configuring WWW
  • 13.3 Configuring Telnet
  • 13.4 Configuring TELNET
  • 13.5 Configuring FTP
  • 13.6 SNMP
    • 13.6.1 Supported MIBs
    • 13.6.2 SNMP Traps
    • 13.6.3 Configuring SNMP
  • 13.7 Configuring DNS
  • 13.8 Configuring Security
• Introduction to IPSec
  • 14.1 VPN Overview
    • 14.1.1 IPSec
    • 14.1.2 Security Association
    • 14.1.3 Other Terminology
      • 14.1.3.1 Encryption
      • 14.1.3.2 Data Confidentiality
      • 14.1.3.3 Data Integrity
      • 14.1.3.4 Data Origin Authentication
    • 14.1.4 VPN Applications
  • 14.2 IPSec Architecture
    • 14.2.1 IPSec Algorithms
    • 14.2.2 Key Management
  • 14.3 Encapsulation
    • 14.3.1 Transport Mode
    • 14.3.2 Tunnel Mode
  • 14.4 IPSec and NAT
• VPN Screens
  • 15.1 VPN/IPSec Overview
  • 15.2 IPSec Algorithms
    • 15.2.1 AH (Authentication Header) Protocol
    • 15.2.2 ESP (Encapsulating Security Payload) Protocol
  • 15.3 My IP Address
  • 15.4 Secure Gateway Address
    • 15.4.1 Dynamic Secure Gateway Address
  • 15.5 Summary Screen
  • 15.6 Keep Alive
  • 15.7 NAT Traversal
    • 15.7.1 NAT Traversal Configuration
    • 15.7.2 Remote DNS Server
  • 15.8 ID Type and Content
    • 15.8.1 ID Type and Content Examples
  • 15.9 Pre-Shared Key
  • 15.10 Editing VPN Rules
  • 15.11 IKE Phases
    • 15.11.1 Negotiation Mode
    • 15.11.2 Diffie-Hellman (DH) Key Groups
    • 15.11.3 Perfect Forward Secrecy (PFS)
  • 15.12 Configuring Advanced IKE Settings
  • 15.13 Manual Key Setup
    • 15.13.1 Security Parameter Index (SPI)
  • 15.14 Configuring Manual Key
  • 15.15 Viewing SA Monitor
  • 15.16 Configuring Global Setting
  • 15.17 Telecommuter VPN/IPSec Examples
    • 15.17.1 Telecommuters Sharing One VPN Rule Example
    • 15.17.2 Telecommuters Using Unique VPN Rules Example
  • 15.18 VPN and Remote Management
• Centralized Logs
  • 16.1 View Log
  • 16.2 Log Settings
• Maintenance
  • 17.1 Maintenance Overview
  • 17.2 Status Screen
    • 17.2.1 System Statistics
  • 17.3 DHCP Table Screen
  • 17.4 F/W Upload Screen
    • 17.4.1 Preparing your Prestige for Firmware Upload
  • 17.5 Configuration Screen
    • 17.5.1 Backup Configuration
    • 17.5.2 Restore Configuration
    • 17.5.3 Back to Factory Defaults
  • 17.6 Restart Screen
• Introducing the SMT
  • 18.1 SMT Introduction
    • 18.1.1 Procedure for SMT Configuration via Telnet
    • 18.1.2 Entering Password
    • 18.1.3 Prestige SMT Menu Overview
  • 18.2 Navigating the SMT Interface
    • 18.2.1 System Management Terminal Interface Summary
  • 18.3 Changing the System Password
• Menu 1 General Setup
  • 19.1 General Setup
  • 19.2 Procedure To Configure Menu 1
    • 19.2.1 Procedure to Configure Dynamic DNS
• Menu 2 WAN Setup
  • 20.1 Introduction to WAN
  • 20.2 WAN Setup
• Menu 3 LAN Setup
  • 21.1 LAN Setup
    • 21.1.1 General Ethernet Setup
  • 21.2 Protocol Dependent Ethernet Setup
  • 21.3 TCP/IP Ethernet Setup and DHCP
    • 21.3.1 IP Alias Setup
• Internet Access
  • 22.1 Introduction to Internet Access Setup
  • 22.2 Ethernet Encapsulation
  • 22.3 Configuring the PPTP Client
  • 22.4 Configuring the PPPoE Client
  • 22.5 Basic Setup Complete
• Remote Node Configuration
  • 23.1 Introduction to Remote Node Setup
  • 23.2 Remote Node Profile Setup
    • 23.2.1 Ethernet Encapsulation
    • 23.2.2 PPPoE Encapsulation
      • 23.2.2.1 Outgoing Authentication Protocol
      • 23.2.2.2 Nailed-Up Connection
    • 23.2.3 PPTP Encapsulation
  • 23.3 Edit IP
  • 23.4 Remote Node Filter
    • 23.4.1 Traffic Redirect Setup
• Static Route Setup
  • 24.1 IP Static Route Setup
• Network Address Translation (NAT)
  • 25.1 Using NAT
    • 25.1.1 SUA (Single User Account) Versus NAT
  • 25.2 Applying NAT
  • 25.3 NAT Setup
    • 25.3.1 Address Mapping Sets
      • 25.3.1.1 User-Defined Address Mapping Sets
      • 25.3.1.2 Ordering Your Rules
  • 25.4 Configuring a Server behind NAT
  • 25.5 General NAT Examples
    • 25.5.1 Example 1: Internet Access Only
    • 25.5.2 Example 2: Internet Access with an Inside Server
    • 25.5.3 Example 3: Multiple Public IP Addresses With Inside Servers
    • 25.5.4 Example 4: NAT Unfriendly Application Programs
  • 25.6 Configuring Trigger Port Forwarding
• Enabling the Firewall
  • 26.1 Remote Management and the Firewall
  • 26.2 Access Methods
  • 26.3 Enabling the Firewall
• Filter Configuration
  • 27.1 Introduction to Filters
    • 27.1.1 The Filter Structure of the Prestige
  • 27.2 Configuring a Filter Set
    • 27.2.1 Configuring a Filter Rule
    • 27.2.2 Configuring a TCP/IP Filter Rule
    • 27.2.3 Configuring a Generic Filter Rule
  • 27.3 Example Filter
  • 27.4 Filter Types and NAT
  • 27.5 Firewall Versus Filters
  • 27.6 Applying a Filter
    • 27.6.1 Applying LAN Filters
    • 27.6.2 Applying Remote Node Filters
• SNMP Configuration
  • 28.1 About SNMP
  • 28.2 Supported MIBs
  • 28.3 SNMP Configuration
  • 28.4 SNMP Traps
• System Information and Diagnosis
  • 29.1 System Status
  • 29.2 System Information
    • 29.2.1 System Information
    • 29.2.2 Console Port Speed
  • 29.3 Log and Trace
    • 29.3.1 Syslog Logging
      • 29.3.1.1 CDR
      • 29.3.1.2 Packet triggered
      • 29.3.1.3 Filter log
      • 29.3.1.4 PPP log
      • 29.3.1.5 Firewall log
    • 29.3.2 Call-Triggering Packet
  • 29.4 Diagnostic
    • 29.4.1 WAN DHCP
• Firmware and Configuration File Maintenance
  • 30.1 Filename Conventions
  • 30.2 Backup Configuration
    • 30.2.1 Backup Configuration
    • 30.2.2 Using the FTP Command from the Command Line
    • 30.2.3 Example of FTP Commands from the Command Line
    • 30.2.4 GUI-based FTP Clients
    • 30.2.5 TFTP and FTP over WAN Management Limitations
    • 30.2.6 Backup Configuration Using TFTP
    • 30.2.7 TFTP Command Example
    • 30.2.8 GUI-based TFTP Clients
  • 30.3 Restore Configuration
    • 30.3.1 Restore Using FTP
    • 30.3.2 Restore Using FTP Session Example
  • 30.4 Uploading Firmware and Configuration Files
    • 30.4.1 Firmware File Upload
    • 30.4.2 Configuration File Upload
    • 30.4.3 FTP File Upload Command from the DOS Prompt Example
    • 30.4.4 FTP Session Example of Firmware File Upload
    • 30.4.5 TFTP File Upload
    • 30.4.6 TFTP Upload Command Example
• System Maintenance
  • 31.1 Command Interpreter Mode
    • 31.1.1 Command Syntax
    • 31.1.2 Command Usage
  • 31.2 Call Control Support
    • 31.2.1 Budget Management
    • 31.2.2 Call History
  • 31.3 Time and Date Setting
    • 31.3.1 Resetting the Time
• Remote Management
  • 32.1 Remote Management
    • 32.1.1 Remote Management Limitations
• Call Scheduling
  • 33.1 Introduction to Call Scheduling
• VPN/IPSec Setup
  • 34.1 VPN/IPSec Overview
  • 34.2 IPSec Summary Screen
  • 34.3 IKE Setup
  • 34.4 Manual Setup
    • 34.4.0.1 Active Protocol
    • 34.4.0.2 Security Parameter Index (SPI)
• SA Monitor
  • 35.1 SA Monitor Overview
  • 35.2 Using SA Monitor
    • AppendixA
      • Troubleshooting
• Appendix
  • Appendix
    • Appendix A
      • Troubleshooting
    • Appendix B
      • PPPoE
        • PPPoE in Action
        • Benefits of PPPoE
        • Traditional Dial-up Scenario
        • How PPPoE Works
        • Prestige as a PPPoE Client
    • Appendix C
      • PPTP
        • What is PPTP?
          • How can we transport PPP frames from a computer to a broadband modem over Ethernet?
        • PPTP and the Prestige
        • PPTP Protocol Overview
        • Control & PPP Connections
          • Call Connection
          • PPP Data Connection
    • Appendix D
      • NetBIOS Filter Commands
        • Introduction
        • Display NetBIOS Filter Settings
        • NetBIOS Filter Configuration
    • Appendix E
      • Log Descriptions
    • Appendix F
      • Setting up Your Computer’s IP Address
        • Windows 95/98/Me
          • Installing Components
          • Configuring
          • Verifying Settings
        • Windows 2000/NT/XP
          • Verifying Settings
        • Macintosh OS 8/9
          • Verifying Settings
        • Macintosh OS X
          • Verifying Settings
    • Appendix G
      • Brute-Force Password Guessing Protection
        • Example
    • Appendix H
      • TMSS
    • Appendix I
      • Triangle Route
        • The Ideal Setup
        • The “Triangle Route” Problem
        • The “Triangle Route” Solutions
        • IP Aliasing
        • Gateways on the WAN Side
        • How To Configure Triangle Route
• Index
  • Index
    • A
    • B
    • C
    • D
    • E
    • F
    • G
    • H
    • I
    • J
    • L
    • M
    • N
    • O
    • P
    • R
    • S
    • T
    • U
    • V
    • W
    • Z