ZyXEL P-334W User Guide
ZyXEL P-334W Manual
 |
View all ZyXEL P-334W manuals
Add to My Manuals
Save this manual to your list of manuals |
ZyXEL P-334W manual content summary:
- ZyXEL P-334W | User Guide - Page 1
Prestige 334W 802.11g Wireless Broadband Router with Firewall User's Guide Version 3.60 May 2004 - ZyXEL P-334W | User Guide - Page 2
Prestige 334W User's Guide Copyright Copyright © 2004 by ZyXEL Communications Corporation. The contents of this manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL - ZyXEL P-334W | User Guide - Page 3
Prestige 334W User's Guide Federal if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. If France ! Certifications 1. Go to www.zyxel.com. 2. Select your product from the drop-down list box on the ZyXEL home page to go to that product - ZyXEL P-334W | User Guide - Page 4
Prestige 334W User's Guide Information for Canadian Users The Industry Canada label identifies certified of connection. In some cases, the company's inside wiring associated with a single line individual service may be extended by means of a certified connector assembly. The customer should be aware - ZyXEL P-334W | User Guide - Page 5
Prestige 334W User's Guide ZyXEL Limited Warranty ZyXEL warrants to the original end user (purchaser) that damages of any kind of character to the purchaser. To obtain the services of this warranty, contact ZyXEL's Service Center for your Return Material Authorization number (RMA). Products must be - ZyXEL P-334W | User Guide - Page 6
- ZyXEL P-334W | User Guide - Page 7
Prestige 334W User's Guide Customer Support When you contact your customer support representative please have the following information ready: Please have the following information ready when you contact customer support. • Product model and serial number. • Warranty Information. • Date that you - ZyXEL P-334W | User Guide - Page 8
Prestige 334W User's Guide METHOD SUPPORT E-MAIL LOCATION SWEDEN SALES E-MAIL [email protected] [email protected] FINLAND [email protected] [email protected] TELEPHONE1 FAX1 +46 31 744 7700 +46 31 744 7701 +358-9-4780-8411 +358-9-4780 8448 WEB SITE FTP SITE www.zyxel.se www.zyxel.fi REGULAR MAIL - ZyXEL P-334W | User Guide - Page 9
Prestige 334W User's Guide Table of Contents Copyright...ii Federal Communications Commission (FCC) Interference Statement iii Information for Canadian Users ...iv ZyXEL Limited Warranty ...v Customer Support ...vi List of Figures ...xxi List of Tables ...xxvii Preface ...xxxi Getting Started ...I - ZyXEL P-334W | User Guide - Page 10
Prestige 334W User's Guide 3.6.4 WAN MAC Address...3-12 3.7 Basic Setup Complete ...3-14 Chapter 4 Media Bandwidth Management Setup 4-1 4.1 Media Bandwidth Management Setup Overview 4-1 4.2 Media Bandwidth Management Setup 1 4-1 4.3 Media Bandwidth Management - ZyXEL P-334W | User Guide - Page 11
Prestige 334W User's Guide 7.4 Configuring Roaming ...7-6 7.4.1 Requirements for Roaming ...7-8 Chapter 8 Wireless Security ...8-1 8.1 Wireless Security Overview...8-1 8.2 Security Parameters Summary 8-3 8.3 WEP Overview ...8-4 8.3.1 Data Encryption ...8-4 8.3.2 Authentication ...8-4 8.3.3 Preamble - ZyXEL P-334W | User Guide - Page 12
Prestige 334W User's Guide 10-6 10.3 SUA Server ...10-6 10.3.1 Port Forwarding: Services and Port Numbers 10-6 10.3.2 Configuring Servers Behind SUA (Example Traversal ...12-1 12.1.3 Cautions with UPnP...12-2 12.2 UPnP and ZyXEL ...12-2 12.3 Configuring UPnP...12-2 12.4 Installing UPnP in Windows - ZyXEL P-334W | User Guide - Page 13
Prestige 334W User's Guide 13.3 The Firewall, NAT and Remote Management 13-5 13.3.1 LAN-to-WAN rules ...13-5 13.3.2 WAN-to-LAN rules ...13-5 13.4 Configuring Content Filtering 13-6 13.5 Services Configuring FTP ...14-6 14.6 SNMP ...14-7 14.6.1 Supported MIBs ...14-9 14.6.2 SNMP Traps...14-9 14.6.3 - ZyXEL P-334W | User Guide - Page 14
Prestige 334W User's Guide 16.4.1 Dynamic Secure Gateway 16-18 16.13 Manual Key Setup ...16-25 16.13.1 Security Parameter Index (SPI 16-25 16.14 Configuring Manual Key ...16-26 16 Priorities 18-4 18.1.6 Bandwidth Management Services 18-5 18.1.7 Services...18-6 18.2 Configuration Screen...18-8 - ZyXEL P-334W | User Guide - Page 15
Prestige 334W User's Guide 18.5 Monitor Screen ...18-13 Chapter 19 Maintenance ...19-1 19.1 Maintenance .1.2 Procedure for SMT Configuration via Telnet 20-1 20.1.3 Entering Password...20-1 20.1.4 Prestige SMT Menu Overview 20-2 20.2 Navigating the SMT Interface 20-3 20.2.1 System Management - ZyXEL P-334W | User Guide - Page 16
Prestige 334W User's Guide 24.1 Introduction to Internet Access Setup 24-1 24.2 Ethernet Encapsulation ...24 Configuration...30-1 30.1 Introduction to Filters ...30-1 30.1.1 The Filter Structure of the Prestige 30-2 30.2 Configuring a Filter Set...30-4 30.2.1 Configuring a Filter Rule ...30-6 - ZyXEL P-334W | User Guide - Page 17
Prestige 334W User's Guide 30 Chapter 31 SNMP Configuration ...31-1 31.1 About SNMP...31-1 31.2 Supported MIBs ...31-2 31.3 SNMP Configuration ...31-2 31.4 SNMP Traps Diagnostic...33-9 33.4.1 WAN DHCP...33-10 Chapter 34 Firmware and Configuration File Maintenance 34-1 34.1 Filename Conventions...34 - ZyXEL P-334W | User Guide - Page 18
Prestige 334W User's Guide 34.3.2 Restore Using FTP Session Example 34-8 34.4 Uploading Firmware and Configuration Files 34-8 34.4.1 Firmware Screen ...38-2 38.3 IPSec Setup...38-5 38.4 IKE Setup ...38-10 38.5 Manual Setup ...38-13 38.5.1 Active Protocol ...38-13 38.5.2 Security Parameter Index ( - ZyXEL P-334W | User Guide - Page 19
Prestige 334W User's Guide Appendix G Wireless LAN With IEEE 802.1x G-1 Appendix H Types of EAP Authentication H-1 Appendix I Antenna Selection and Positioning Recommendation I-1 Appendix J Brute-Force Password Guessing Protection J-1 Appendix K - ZyXEL P-334W | User Guide - Page 20
- ZyXEL P-334W | User Guide - Page 21
Prestige 334W User's Guide List of Figures Figure 1-1 Secure Internet Access via Cable, DSL or Wireless Modem 1-6 1 4-1 Figure 4-2 Media Bandwidth Management Setup 2: Services 4-2 Figure 4-3 Media Bandwidth Management Setup 3: Service Priority 4-3 Figure 4-4 Media Bandwidth Management Setup 4: - ZyXEL P-334W | User Guide - Page 22
Prestige 334W User's Guide Figure 8-6 Wireless: WPA-PSK...8-11 Figure 8-7 WPA with RADIUS Application Example -2 Firewall Rule Directions ...13-5 Figure 13-3 Firewall: Filter...13-7 Figure 13-4 Firewall: Service ...13-9 Figure 14-1 Remote Management: WWW 14-3 Figure 14-2 Telnet Configuration on a - ZyXEL P-334W | User Guide - Page 23
Prestige 334W User's Guide Routers 16-6 Figure 16-4 VPN Host using Intranet DNS Server Example 16-7 Figure 16-5 VPN: Rule Setup (Basic)...16-11 Figure 16-6 Two Phases to Set Up the IPSec SA 16-16 Figure 16-7 VPN IKE: Advanced ...16-19 Figure 16-8 Rule Setup: Manual Maintenance Firmware Upload 19 - ZyXEL P-334W | User Guide - Page 24
Prestige 334W User's Guide Figure 19-15 System Restart...19-12 Figure 20-1 Login Screen ...20-2 Figure 20-2 SMT Menu Overview ...20-3 Figure 20-3 SMT Main Menu...20-5 Figure - ZyXEL P-334W | User Guide - Page 25
Prestige 334W User's Guide Figure 28-10 NAT Example 1 ...28-10 Figure 28-11 Menu 4 Internet Access & NAT Example 28-11 Figure 28-12 NAT Example 2 ...28-11 Figure - ZyXEL P-334W | User Guide - Page 26
Prestige 334W User's Guide Figure 33-9 LAN & WAN DHCP...33-10 Figure 34-1 Telnet in Menu 24.5 ...34-3 Figure 34-2 FTP Session Example...34-4 Figure 34-3 Telnet into Menu 24.6 ...34-7 Figure 34-4 Restore Using FTP Session Example 34-8 Figure 34-5 Telnet Into Menu 24.7.1 Upload System Firmware 34-9 - ZyXEL P-334W | User Guide - Page 27
Prestige 334W User's Guide List of Tables Table 2-1 Screens Summary...2-3 Table 3-1 Wizard 2: Wireless LAN Setup ...3-3 Table 4-2 Table 4-2 Media Bandwidth Management Setup 2: Services 4-3 Table 4-3 Media Bandwidth Management Setup 3: Service Priority 4-4 Table 5-1 System General Setup ...5-2 - ZyXEL P-334W | User Guide - Page 28
Prestige 334W User's Guide Table 9-6 WAN: Traffic Redirect ...9-13 Table 10-1 NAT Definitions...10-1 Table 10-2 NAT Mapping Types...10-5 Table 10-3 Services and Port 16-12 Table 16-8 VPN IKE: Advanced...16-20 Table 16-9 Rule Setup: Manual ...16-28 Table 16-10 SA Monitor ...16-31 Table 16-11 VPN: - ZyXEL P-334W | User Guide - Page 29
Prestige 334W User's Guide Table 19-1 Maintenance Status ...19-2 Table 19-2 Maintenance System Statistics 19-3 Table 19-3 Maintenance DHCP Table...19-4 Table 19-4 Maintenance Any IP...19-5 Table 19-5 Maintenance Association List ...19-6 Table 19-6 Maintenance Firmware Upload 19-7 Table 19-7 - ZyXEL P-334W | User Guide - Page 30
Prestige 334W User's Guide Table 32-2 Menu 23.4 System Security : IEEE802.1x 32-4 Table 33-1 System Table 38-4 Active Protocol: Encapsulation and Security Protocol 38-13 Table 38-5 Menu 27.1.1.2 Manual Setup...38-14 Table 39-1 Menu 27.2 SA Monitor ...39-2 Table C-1 NetBIOS Filter Default Settings C-2 - ZyXEL P-334W | User Guide - Page 31
configurable by the web configurator. This manual may refer to the Prestige 334W or 802.11g Wireless Broadband Router with Firewall as the Prestige. Related Documentation Support Disk Refer to the included CD for support documents. Quick Start Guide The Quick Start Guide is designed to help you get - ZyXEL P-334W | User Guide - Page 32
Prestige 334W User's Guide • The version number on the title page is the latest firmware version that is documented in this User's Guide. Earlier versions may throughout this manual. Graphics Icons Key Prestige Server Computer Modem Notebook computer Firewall Telephone Switch Router DSLAM - ZyXEL P-334W | User Guide - Page 33
Getting Started Part I: Getting Started This part helps you get to know your Prestige, introduces the web configurator and covers how to configure the Wizard Setup screens. I - ZyXEL P-334W | User Guide - Page 34
- ZyXEL P-334W | User Guide - Page 35
Prestige 334W User's Guide Chapter 1 Getting to Know Your Prestige This chapter introduces the main features and applications of the Prestige. 1.1 Prestige Internet Security Gateway Overview The Prestige , ZyXEL's Prestige is Prestige. You can also set the time manually. Reset Button The Prestige - ZyXEL P-334W | User Guide - Page 36
Prestige 334W User's Guide 1.2.2 Non-Physical Features Media Bandwidth Management ZyXEL's Media Bandwidth Service) protection. By default, when the firewall is activated, all incoming traffic from the WAN to the LAN is blocked unless it is initiated from the LAN. The Prestige firewall supports - ZyXEL P-334W | User Guide - Page 37
Prestige 334W User's Guide Data Rate (Mbps) 1 2 5.5 / 11 IEEE 802.11b Modulation DBPSK (Differential Binary Phase Shift Keyed) DQPSK (Differential Quadrature Phase Shift Keying) CCK (Complementary Code Keying) The Prestige may be prone to RF (Radio Frequency) interference from other 2.4 GHz - ZyXEL P-334W | User Guide - Page 38
Prestige 334W User's Guide Dynamic DNS Support With Dynamic DNS (Domain Name System) support, you can have a static hostname alias for a dynamic IP address, allowing the host to be more easily accessible from various locations on the Internet. You must register for this service with a Dynamic DNS - ZyXEL P-334W | User Guide - Page 39
standard cable modem services, the Prestige supports Time Warner's RoadRunner Service. Logging and Tracing ♦ Built-in message logging and packet tracing. ♦ Unix syslog facility support. ♦ Firewall logs. ♦ Content filtering logs. Upgrade Prestige Firmware via LAN The firmware of the Prestige can be - ZyXEL P-334W | User Guide - Page 40
Prestige 334W User's Guide 1.3.1 Secure Broadband Internet Access via Cable or DSL Modem You can connect a cable modem, DSL or wireless modem to the Prestige for broadband Internet access via an Ethernet or a wireless port on the modem. The Prestige guarantees not only high speed Internet access, - ZyXEL P-334W | User Guide - Page 41
Prestige 334W User's Guide 1.3.3 Internet Access Application Add a wireless LAN to your existing network without expensive network cables. Wireless stations can move freely anywhere in the coverage area and - ZyXEL P-334W | User Guide - Page 42
- ZyXEL P-334W | User Guide - Page 43
Prestige 334W User's Guide Chapter 2 Introducing the Web Configurator This chapter describes how to access the Prestige web configurator and provides an overview of its screens. 2.1 Web Configurator Overview The embedded web configurator allows you to manage the Prestige from anywhere through a - ZyXEL P-334W | User Guide - Page 44
Prestige 334W User's Guide Step 6. You should now see the MAIN MENU screen (see Figure 2-2). The management session automatically times out when the time period set in the Administrator Inactivity Timer field expires (default five minutes). Simply log back into the Prestige if this happens to you. - ZyXEL P-334W | User Guide - Page 45
Prestige 334W User's Guide Click WIZARD for initial configuration including general setup, Wireless LAN Setup, ISP parameters for Internet Access and WAN IP/DNS Server/MAC address assignment. Click BW SETUP for initial configuration of media bandwidth management. Use submenus to configure Prestige - ZyXEL P-334W | User Guide - Page 46
Prestige 334W User's Guide Table 2-1 Screens Summary LINK TAB FUNCTION DDNS Use this screen to set up dynamic DNS. Password Use this screen to change your password. Time Zone Use this screen to change your Prestige's time and date. LAN IP Use this screen to configure LAN DHCP, TCP/IP - ZyXEL P-334W | User Guide - Page 47
Prestige 334W User's Guide LINK FIREWALL TAB Settings Filter Services REMOTE MGMT TELNET FTP WWW SNMP in the URL and set the days and times for the Prestige to perform content filtering. Use this screen to enable service blocking. Use this screen to configure through which interface(s) and - ZyXEL P-334W | User Guide - Page 48
Prestige 334W User's Guide LINK LOGOUT TAB DHCP Table Any IP F/W Upload Configuration Restart Table , when the IP addresses of the computer and the Prestige are not in the same subnet. Use this screen to upload firmware to your Prestige. Use this screen to backup and restore the configuration - ZyXEL P-334W | User Guide - Page 49
Prestige 334W User's Guide Chapter 3 Wizard Setup This chapter provides information on the Wizard Setup the Computer Name tab. Note the entry in the Full computer name field and enter it as the Prestige System Name. 3.2.1 Domain Name The Domain Name entry is what is propagated to the DHCP clients on - ZyXEL P-334W | User Guide - Page 50
Prestige 334W User's Guide Figure 3-1 Wizard 1: General Setup 3.3 Wizard Setup: Screen 2 Set up your wireless LAN using the second wizard screen. Figure 3-2 Wizard 2: Wireless LAN Setup The following table describes the fields in this screen. 3-2 Wizard Setup - ZyXEL P-334W | User Guide - Page 51
Prestige 334W User's Guide Table 3-1 Wizard 2: Wireless LAN Setup LABEL ESSID DESCRIPTION Enter a descriptive name (up to 32 printable 7-bit ASCII characters) for the wireless LAN. If you change this field on the Prestige . Choose Channel ID To manually set the Prestige to use a channel, select - ZyXEL P-334W | User Guide - Page 52
Prestige 334W User's Guide Figure 3-3 Wizard 3: Wireless LAN Setup: Basic Security The following table is entered automatically. Key 1 to Key 4 The WEP keys are used to encrypt data. Both the Prestige and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP - ZyXEL P-334W | User Guide - Page 53
Prestige 334W User's Guide If you choose Extend security in the Wireless LAN Setup screen, Refer to the chapter on wireless LAN for more information. 3.5 Wizard Setup: Screen 4 The Prestige offers three choices of encapsulation. They are Ethernet, PPP over Ethernet or PPTP. 3.5.1 Ethernet Choose - ZyXEL P-334W | User Guide - Page 54
Prestige 334W User's Guide Figure 3-5 Wizard 4: Ethernet Encapsulation The following table describes the fields in this method) or Telia Login. The following fields are not applicable (N/A) for the Standard service type. User Name Type the user name given to you by your ISP. Password - ZyXEL P-334W | User Guide - Page 55
Prestige 334W User's Guide LABEL Relogin Every (min) Back Next Table 3-4 Wizard 4: Ethernet Encapsulation DESCRIPTION This field only applies when you select Telia Login in the Service Type field. The Telia server logs the Prestige out if the Prestige does not log in periodically. Type the number - ZyXEL P-334W | User Guide - Page 56
Prestige 334W User's Guide Figure 3-6 Wizard 4: PPPoE Encapsulation The following table describes the fields in this screen. Table 3-5 Wizard 4: PPPoE Encapsulation LABEL DESCRIPTION ISP Parameter for Internet Access Encapsulation Service the router automatically disconnects from the PPPoE - ZyXEL P-334W | User Guide - Page 57
Prestige 334W User's Guide LABEL Back Table 3-5 Wizard 4: PPPoE Encapsulation DESCRIPTION Click Back to return to such as the Internet. Refer to the appendix for more information on PPTP. The PRESTIGE supports one PPTP server connection at any given time. Figure 3-7 Wizard 4: PPTP Encapsulation - ZyXEL P-334W | User Guide - Page 58
Prestige 334W User's Guide Idle Timeout Type the time in seconds that elapses before the router automatically disconnects from the PPTP server. The default is 100 seconds. you can assign any IP addresses to the hosts without problems. However, the Internet Assigned Numbers Authority (IANA) has - ZyXEL P-334W | User Guide - Page 59
Prestige 334W User's Guide Table 3-7 Private IP Address Ranges 10.0.0.0 - 10.255.255.255 172. instructed to do otherwise. 3.6.3 DNS Server Address Assignment Use DNS (Domain Name System) to map a domain name to its corresponding IP address and vice versa, for instance, the IP address of www.zyxel - ZyXEL P-334W | User Guide - Page 60
Prestige 334W User's Guide The Prestige can get the DNS server addresses in the following ways configuration file). It will not change unless you change the setting or upload a different "rom" file. ZyXEL recommends you clone the MAC address from a computer on your LAN even if your ISP does not - ZyXEL P-334W | User Guide - Page 61
Prestige 334W User's Guide Figure 3-8 Wizard 5: WAN Setup The following table describes the fields in this screen. Table 3-9 Wizard 5: WAN Setup LABEL DESCRIPTION WAN IP Address Assignment Get automatically - ZyXEL P-334W | User Guide - Page 62
Prestige 334W User's Guide Table 3-9 Wizard 5: WAN Setup LABEL DESCRIPTION System DNS Server Address Server Third DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the Prestige's WAN IP address). The field to the right displays the (read-only) DNS server IP - ZyXEL P-334W | User Guide - Page 63
Prestige 334W User's Guide Figure 3-9 Wizard Finish Well done! You have successfully set up your Prestige to operate on your network and access the Internet. Wizard Setup 3-15 - ZyXEL P-334W | User Guide - Page 64
- ZyXEL P-334W | User Guide - Page 65
Prestige 334W User's Guide Chapter 4 Media Bandwidth Management Setup This chapter provides information on an interface. The Prestige does not control the bandwidth of traffic that comes into an interface. Bandwidth management applies to all traffic flowing out of the router through the interface, - ZyXEL P-334W | User Guide - Page 66
Prestige 334W User's Guide Table 4-1 Media Bandwidth Management Setup 1 LABEL DESCRIPTION Active Select the Active check box to have the Prestige apply bandwidth management to traffic going out through the Prestige's WAN, LAN or WLAN port. Managed Bandwidth (Kbps) Enter the amount of Managed - ZyXEL P-334W | User Guide - Page 67
Prestige 334W User's Guide Table 4-2 Media Bandwidth Management Setup 2: Services LABEL DESCRIPTION Choose Channel ID Create bandwidth management classes by selecting services from the list provided. XBox Live VoIP (SIP) FTP E-Mail eMule/eDonkey WWW For a detailed description of these services, - ZyXEL P-334W | User Guide - Page 68
Prestige 334W User's Guide Table 4-3 Media Bandwidth Management Setup 3: Service Priority LABEL DESCRIPTION Service These fields display the services selected in the previous screen. Priority Select High, Mid or Low priority for each service to have your Prestige use a priority for traffic - ZyXEL P-334W | User Guide - Page 69
System, LAN, WLAN and WAN Part II: System, LAN, WLAN and WAN This part covers configuration of the system, LAN, WLAN and WAN screens. II - ZyXEL P-334W | User Guide - Page 70
- ZyXEL P-334W | User Guide - Page 71
Prestige 334W User's Guide Chapter 5 System Screens This chapter provides information on the System screens. 5.1 System Overview See the Wizard Setup chapter for more information on the next few - ZyXEL P-334W | User Guide - Page 72
Prestige 334W User's Guide The following table describes the labels in this screen. Table DNS Server Third DNS Server Select From ISP if your ISP dynamically assigns DNS server information (and the Prestige's WAN IP address). The field below displays the (read-only) DNS server IP address that the - ZyXEL P-334W | User Guide - Page 73
Prestige 334W User's Guide 5.3 Dynamic DNS Dynamic DNS allows you to update your current dynamic IP address with one or many dynamic DNS services server that would still like to have a domain name. The Dynamic DNS service provider will give you a password or key. 5.3.1 DynDNS Wildcard Enabling the - ZyXEL P-334W | User Guide - Page 74
Prestige 334W User's Guide Figure 5-2 DDNS The following table describes the labels in this screen. Table 5-2 DDNS LABEL Active Service Provider DDNS Type DESCRIPTION Select this check box to use dynamic DNS. Select the name of your Dynamic DNS service provider. Select the type of service that - ZyXEL P-334W | User Guide - Page 75
Prestige 334W User's Guide Table 5-2 DDNS LABEL DESCRIPTION Host Names 1~3 Enter the host This option is available when CustomDNS is selected in the DDNS Type field. Check with your Dynamic DNS service provider to have traffic redirected to a URL (that you can specify) while you are off line. - ZyXEL P-334W | User Guide - Page 76
Prestige 334W User's Guide Figure 5-3 Password The following table describes the labels in this screen. Table 5-3 Password LABEL Old Password New Password Retype to Confirm Apply Reset DESCRIPTION Type - ZyXEL P-334W | User Guide - Page 77
334W User's Guide Figure 5-4 Time Setting The following table describes the labels in this screen. Table 5-4 Time Setting LABEL Use Time Server when Bootup DESCRIPTION Select the time service protocol that your time server sends when you turn on the Prestige. Not all time servers support - ZyXEL P-334W | User Guide - Page 78
Prestige 334W User's Guide LABEL Time Server IP Address Current Time New Time Current in this field and then click Apply. This field displays the date of your Prestige. Each time you reload this page, the Prestige synchronizes the time with the time server. This field displays the last updated date - ZyXEL P-334W | User Guide - Page 79
Prestige 334W User's Guide service is disabled, you must have another DHCP server on your LAN, or else the computer must be manually configured. 6.2.1 IP Pool Setup The Prestige to systems that support DHCP client capability. 6.3.1 Factory LAN Defaults The LAN parameters of the Prestige are preset in - ZyXEL P-334W | User Guide - Page 80
Prestige 334W User's Guide These parameters should work for the majority of installations. 224.0.0.2 is assigned to the multicast routers group. The Prestige supports both IGMP version 1 (IGMP-v1) and IGMP version 2 (IGMP-v2). At start up, the Prestige queries all directly connected networks to - ZyXEL P-334W | User Guide - Page 81
Prestige 334W User's Guide 6.4 Any IP Traditionally, you must set the IP addresses and the subnet masks of a computer and the Prestige to be in the same subnet to allow the computer to access the Internet (through the Prestige). In cases where your computer is required to use a static IP address in - ZyXEL P-334W | User Guide - Page 82
Prestige 334W User's Guide You must enable NAT/SUA to use the Any IP feature on the Prestige. 6.4.1 How Any IP Works Address Resolution the default gateway, an ARP request is broadcast on the LAN. Step 3. The Prestige receives the ARP request and replies to the computer with its own MAC address. Step - ZyXEL P-334W | User Guide - Page 83
Prestige 334W User's Guide Figure 6-2 IP The following table describes the fields in this screen ISP instructs you to do otherwise. Clear it to disable the Prestige acting as a DHCP server. When configured as a server, the Prestige provides TCP/IP configuration for the clients. If not, DHCP service - ZyXEL P-334W | User Guide - Page 84
Prestige 334W User's Guide Table 6-1 IP LABEL DESCRIPTION Pool Size This field specifies the size, or count of the IP address pool. DNS Servers Assigned by DHCP Server The Prestige passes a DNS (Domain Name System) server IP address (in the order you specify here) to the DHCP clients. The - ZyXEL P-334W | User Guide - Page 85
Prestige 334W User's Guide Table 6-1 IP LABEL DESCRIPTION RIP Direction RIP (Routing Information Protocol, RFC1058 and RFC 1389) allows a router to exchange routing information with other routers the Prestige sends (it recognizes both formats when receiving). RIP-1 is universally supported but - ZyXEL P-334W | User Guide - Page 86
Prestige 334W User's Guide Table 6-1 IP LABEL DESCRIPTION Allow from LAN to WAN Select WAN and from the WAN to the LAN. Apply Click Apply to save your changes back to the Prestige. Reset Click Reset to begin configuring this screen afresh. 6.6 Configuring Static DHCP This table allows you - ZyXEL P-334W | User Guide - Page 87
Prestige 334W User's Guide LABEL # MAC Address IP Address Apply Reset Table 6-2 Static DHCP interface. The Prestige supports three logical LAN interfaces via its single physical Ethernet interface with the Prestige itself as the gateway for each LAN network. To change your Prestige's IP Alias - ZyXEL P-334W | User Guide - Page 88
Prestige 334W User's Guide LABEL IP Alias 1,2 IP Address IP Subnet Mask RIP Direction RIP Version Apply Reset Table 6-3 IP Alias DESCRIPTION Select the check box to configure another LAN network for the Prestige. Enter the IP address of your Prestige in dotted decimal notation. Your Prestige will - ZyXEL P-334W | User Guide - Page 89
Prestige 334W User's Guide Chapter 7 Wireless Configuration and Roaming This chapter discusses how to configure the Wireless and Roaming screens on the Prestige. 7.1 Wireless LAN Overview This section introduces the wireless LAN(WLAN) and some basic scenarios. 7.1.1 IBSS An Independent Basic Service - ZyXEL P-334W | User Guide - Page 90
Prestige 334W User's Guide Figure 7-2 Basic Service set 7.1.3 ESS An Extended Service Set (ESS) consists of a series of overlapping BSSs, each containing an access point, with each access point connected together by a wired network. This wired connection - ZyXEL P-334W | User Guide - Page 91
Prestige 334W User's Guide Figure 7-3 Extended Service Set 7.2 Wireless LAN Basics Refer also to the Wizard Setup chapter for more background information on Wireless LAN features, such as channels. 7.2.1 RTS/CTS A hidden - ZyXEL P-334W | User Guide - Page 92
Prestige 334W User's Guide Stations A and B do not hear each other. They can hear the Prestige. Figure 7-4 RTS/CTS When station A sends data to the Prestige, it might not know that station B is already using the channel. If these two stations send data at the same time, collisions may occur when - ZyXEL P-334W | User Guide - Page 93
Prestige 334W User's Guide A large Fragmentation Threshold is recommended for networks not prone to interference to confirm. You must then change the wireless settings of your computer to match the Prestige's new settings. Click the WIRELESS link under ADVANCED to open the Wireless screen. Figure - ZyXEL P-334W | User Guide - Page 94
Prestige 334W User's Guide Table 7-1 Wireless LABEL ESSID DESCRIPTION (Extended Service Set IDentity) The ESSID identifies the Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same ESSID. Enter a descriptive name (up to - ZyXEL P-334W | User Guide - Page 95
Prestige 334W User's Guide The roaming feature on the access points allows the access points to relay information about the wireless stations to each other. When a wireless station moves - ZyXEL P-334W | User Guide - Page 96
Prestige 334W User's Guide 7.4.1 Requirements for Roaming The following requirements must be met in IP addresses from a DHCP server if using dynamic IP address assignment. To enable roaming on your Prestige, click the WIRELESS link under ADVANCED and then the Roaming tab. The screen appears as shown. - ZyXEL P-334W | User Guide - Page 97
Prestige 334W User's Guide LABEL Port Apply Reset Table 7-2 Roaming DESCRIPTION Enter the port number to communicate roaming information between APs. The port number must be the same on all APs. The default is 3517. Make sure this port is not used by other services. Click Apply to save your - ZyXEL P-334W | User Guide - Page 98
- ZyXEL P-334W | User Guide - Page 99
Prestige 334W User's Guide Chapter 8 Wireless Security This Chapter describes how to use the MAC Filter, 802.1x, Local User Database and RADIUS to configure wireless security on your Prestige. 8.1 Wireless Security Overview Wireless security is vital to your network to protect wireless communication - ZyXEL P-334W | User Guide - Page 100
Prestige 334W User's Guide Figure 8-2 Wireless: No Security The following table describes the labels in this screen. Table 8-1 Wireless: No Security LABEL Security Preamble DESCRIPTION Choose from one of - ZyXEL P-334W | User Guide - Page 101
Prestige 334W User's Guide LABEL 802.11 Mode Max. Frame Burst Apply Reset Table 8-1 Wireless: No Security DESCRIPTION Select 802.11b Only to allow only IEEE 802.11b compliant WLAN devices to associate with the Prestige key management protocol type. You enter manual keys by first selecting 64-bit - ZyXEL P-334W | User Guide - Page 102
Prestige 334W User's Guide Table 8-2 Wireless Security Relational Matrix AUTHENTICATION METHOD/ KEY MANAGEMENT PROTOCOL WPA WPA WPA-PSK WPA-PSK ENCRYPTION METHOD WEP TKIP WEP TKIP ENTER MANUAL KEY Yes Yes No No Yes Yes IEEE 802.1X Enable without Dynamic WEP Key Disable Enable Enable Enable - ZyXEL P-334W | User Guide - Page 103
Prestige 334W User's Guide Figure 8-3 WEP Authentication Steps Open system authentication involves the decrypted message matches the challenge text, the wireless station is authenticated. When your Prestige's authentication method is set to open system, it will only accept open system authentication - ZyXEL P-334W | User Guide - Page 104
Prestige 334W User's Guide 8.3.3 Preamble Type A preamble is used to synchronize the of what preamble mode your wireless clients support as all IEEE 802.11b compliant wireless adapters must support long preamble. However, not all wireless adapters support short preamble. Use long preamble if - ZyXEL P-334W | User Guide - Page 105
Prestige 334W User's Guide Figure 8-4 Wireless: Static WEP Encryption The following table describes the wireless LAN security labels in this screen. Table 8-3 Wireless: Static WEP Encryption LABEL DESCRIPTION WEP - ZyXEL P-334W | User Guide - Page 106
Prestige 334W User's Guide LABEL Hex Key 1 to Key 4 Preamble 802.11 Mode Max Enter 0 to disable this feature. The default is 650. Click Apply to save your changes back to the Prestige. Click Reset to reload the previous configuration for this screen. 8.5 Introduction to WPA Wi-Fi Protected Access ( - ZyXEL P-334W | User Guide - Page 107
Prestige 334W User's Guide 8.5.1 User Authentication WPA applies IEEE 802.1x and Extensible Authentication Protocol (EAP) to authenticate wireless clients using an external RADIUS database. You can't use the Prestige's Local User Database for WPA authentication purposes since the Local User Database - ZyXEL P-334W | User Guide - Page 108
Prestige 334W User's Guide Step 3. Step 4. The AP derives and distributes keys to the wireless clients. The AP and wireless clients use the TKIP encryption process to encrypt data - ZyXEL P-334W | User Guide - Page 109
Prestige 334W User's Guide Figure 8-6 Wireless: WPA-PSK The following table describes the labels in this screen. Table 8-4 Wireless: WPA-PSK LABEL Pre-Shared Key DESCRIPTION The encryption mechanisms - ZyXEL P-334W | User Guide - Page 110
Prestige 334W User's Guide Table 8-4 Wireless: WPA-PSK LABEL DESCRIPTION ReAuthentication a WLAN on a periodic basis. Setting of the WPA Group Key Update Timer is also supported in WPA-PSK mode. The Prestige default is 1800 seconds (30 minutes). Select a preamble type from the drop-down list - ZyXEL P-334W | User Guide - Page 111
Prestige 334W User's Guide 8.7 Wireless Client WPA Supplicants A wireless client supplicant is the software that runs on an operating system instructing the , you must run Windows XP to use it. Funk's client runs supports a wider variety of authentication protocols than the Windows XP patch, but you - ZyXEL P-334W | User Guide - Page 112
Prestige 334W User's Guide Figure 8-7 WPA with RADIUS Application Example 8.8 Configuring WPA Authentication In order to configure and enable WPA Authentication; click the WIRELESS link under ADVANCED to display the Wireless screen. Select WPA from the Security list. 8-14 Wireless Security - ZyXEL P-334W | User Guide - Page 113
Prestige 334W User's Guide Figure 8-8 Wireless: WPA The following table describes the labels in this server, the reauthentication timer on the RADIUS server has priority. Idle Timeout The Prestige automatically disconnects a wireless station from the wired network after a period of inactivity. - ZyXEL P-334W | User Guide - Page 114
Prestige 334W User's Guide Table 8-5 Wireless: WPA LABEL WPA Group Key Update Timer in a WLAN on a periodic basis. Setting of the WPA Group Key Update Timer is also supported in WPA-PSK mode. The Prestige default is 1800 seconds (30 minutes). Select a preamble type from the drop-down list menu. - ZyXEL P-334W | User Guide - Page 115
Prestige 334W User's Guide 8.10 Dynamic WEP Key Exchange The AP maps a unique key that is generated with the RADIUS server. This key expires when the wireless connection times - ZyXEL P-334W | User Guide - Page 116
Prestige 334W User's Guide Figure 8-9 Wireless: 802.1x and Dynamic WEP The following table describes server, the reauthentication timer on the RADIUS server has priority. Idle Timeout The Prestige automatically disconnects a wireless station from the wired network after a period of inactivity. - ZyXEL P-334W | User Guide - Page 117
Prestige 334W User's Guide Table 8-6 Wireless: 802.1x and Dynamic WEP LABEL Dynamic WEP Key Exchange Preamble 802.11 Mode Max. Frame Burst Apply Reset DESCRIPTION Select 64-bit WEP or 128-bit WEP to enable data encryption. Up to 32 stations can access the Prestige when you configure dynamic WEP - ZyXEL P-334W | User Guide - Page 118
Prestige 334W User's Guide Figure 8-10 Wireless: 802.1x and Static WEP The following table describes the labels in this screen. Table 8-7 Wireless: 802.1x and Static WEP LABEL - ZyXEL P-334W | User Guide - Page 119
Prestige 334W User's Guide Table 8-7 Wireless: 802.1x and Static WEP LABEL DESCRIPTION key, is entered automatically. Key 1 to Key 4 The WEP keys are used to encrypt data. Both the Prestige and the wireless stations must use the same WEP key for data transmission. If you chose 64-bit WEP, - ZyXEL P-334W | User Guide - Page 120
Prestige 334W User's Guide Table 8-7 Wireless: 802.1x and Static WEP LABEL Authentication Databases Preamble 802.11 Mode Max. Frame Burst DESCRIPTION The authentication database contains wireless station login information. The local user database is the built-in database on the Prestige. The - ZyXEL P-334W | User Guide - Page 121
Prestige 334W User's Guide LABEL Apply Reset Table 8-7 Wireless: 802.1x and Static WEP DESCRIPTION Click Apply to save your changes back to the Prestige. Click Reset to reload the previous configuration for this screen. 8.13 Configuring 802.1x In order to configure and enable 802.1x; click the - ZyXEL P-334W | User Guide - Page 122
Prestige 334W User's Guide Table 8-8 Wireless: 802.1x and No WEP LABEL DESCRIPTION ReAuthentication Specify how often wireless stations have to reenter usernames and passwords in Timer (in seconds) - ZyXEL P-334W | User Guide - Page 123
Prestige 334W User's Guide Table 8-8 Wireless: 802.1x and No WEP LABEL 802.11 Mode Max. Frame Burst Apply Reset DESCRIPTION Select 802.11b Only to allow only IEEE 802.11b compliant WLAN devices to associate with the Prestige. Select 802.11g Only to allow only IEEE 802.11g compliant WLAN devices - ZyXEL P-334W | User Guide - Page 124
Prestige 334W User's Guide Figure 8-12 MAC Address Filter The following table describes the labels in this menu. Table 8-9 MAC Address Filter LABEL Active DESCRIPTION Select Yes from the drop down list box to enable MAC address filtering. 8-26 Wireless Security - ZyXEL P-334W | User Guide - Page 125
Prestige 334W User's Guide LABEL Filter Action Set MAC Address Apply Reset Table 8-9 MAC Address Filter DESCRIPTION Define the filter action for the list of MAC addresses in the MAC Address table. Select Deny Association to block access to the Prestige, MAC addresses not listed will be allowed to - ZyXEL P-334W | User Guide - Page 126
Prestige 334W User's Guide 8.16 Configuring Local User Database To change your Prestige's local user database, click the WIRELESS link under ADVANCED and then the Local User Database tab. The screen appears as shown. 8-28 Figure 8-13 Local User Database Wireless Security - ZyXEL P-334W | User Guide - Page 127
Prestige 334W User's Guide The following table describes the labels in this screen. Table 8-10 for this screen. 8.17 Introduction to RADIUS RADIUS is based on a client-sever model that supports authentication and accounting, where access point is the client and the server is the RADIUS server. - ZyXEL P-334W | User Guide - Page 128
Prestige 334W User's Guide • Access-Challenge Sent by a RADIUS server requesting more information to the Types of EAP Authentication appendix for descriptions on the four common types. Your Prestige supports EAP-MD5 (Message-Digest Algorithm 5) with the local user database and RADIUS. The following - ZyXEL P-334W | User Guide - Page 129
Prestige 334W User's Guide • The wireless station sends a "start" message to the Prestige. • The Prestige sends a "request identity" message to the wireless station for identity information. • The wireless station replies with identity information, including username and password. • The RADIUS - ZyXEL P-334W | User Guide - Page 130
Prestige 334W User's Guide Table 8-11 RADIUS LABEL DESCRIPTION Server IP Address Enter the The default port number is 1812. You need not change this value unless your network administrator instructs you to do so with additional information. Shared Secret Enter a password (up to 31 alphanumeric - ZyXEL P-334W | User Guide - Page 131
Prestige 334W User's Guide Chapter 9 WAN Screens This chapter describes how to configure WAN settings. 9.1 WAN Overview See the Wizard Setup chapter for more information on the fields in the WAN screens. 9.2 TCP/IP Priority (Metric) The metric represents the "cost of transmission". A router - ZyXEL P-334W | User Guide - Page 132
Prestige 334W User's Guide Figure 9-1 WAN: Route The following table describes the labels in this screen. Table 9-1 WAN: Route LABEL WAN Traffic Redirect Apply Reset DESCRIPTION The default WAN connection is "1' as your broadband connection via the WAN port should always be your preferred method - ZyXEL P-334W | User Guide - Page 133
Prestige 334W User's Guide Figure 9-2 Ethernet Encapsulation The following table describes the labels in this screen. Table 9-2 Ethernet Encapsulation LABEL DESCRIPTION Encapsulation You must choose the Ethernet option when the WAN port is used as a regular Ethernet. Service Type Choose from - ZyXEL P-334W | User Guide - Page 134
Prestige 334W User's Guide LABEL Apply Reset Table 9-2 Ethernet Encapsulation DESCRIPTION Click Apply to save your changes back to the Prestige. Click Reset to begin configuring this screen afresh. 9.4.2 PPPoE Encapsulation The Prestige supports PPPoE (Point-to-Point Protocol over Ethernet). - ZyXEL P-334W | User Guide - Page 135
Prestige 334W User's Guide the broadband modem at the customer site. By implementing PPPoE directly on the router rather router does that part of the task. Further, with NAT, all of the LAN's computers will have access. Service Name Type the PPPoE service name provided to you. PPPoE uses a service - ZyXEL P-334W | User Guide - Page 136
Prestige 334W User's Guide LABEL Nailed-Up Connection Idle Timeout Apply Reset Table 9-3 PPPoE Encapsulation DESCRIPTION Select Nailed-Up Connection if you do not want the connection to time out. This value specifies the time in seconds that elapses before the router . PPTP supports on-demand - ZyXEL P-334W | User Guide - Page 137
Prestige 334W User's Guide The following table describes the labels in this screen. Table 9-4 using TCP/IP-based networks. PPTP supports on-demand, multiprotocol, and virtual private networking over public networks, such as the Internet. The Prestige supports only one PPTP server connection at any - ZyXEL P-334W | User Guide - Page 138
Prestige 334W User's Guide Figure 9-5 WAN: IP The following table describes the labels in this screen. Table 9-5 WAN: IP LABEL DESCRIPTION WAN IP Address Assignment Get automatically from ISP - ZyXEL P-334W | User Guide - Page 139
Prestige 334W User's Guide address. SUA (Single User Account) is a subset of NAT that supports two types of mapping: Many-to-One and Server. Choose Full Feature Guide. This field sets this route's priority among the routes the Prestige uses. The metric represents the "cost of transmission". A router - ZyXEL P-334W | User Guide - Page 140
Prestige 334W User's Guide Table 9-5 WAN: IP LABEL DESCRIPTION RIP Direction RIP (Routing Information Protocol) allows a router to exchange routing information with other routers to and communicate with a LAN. For some dial-up services such as PPPoE or PPTP, NetBIOS packets cause unwanted calls - ZyXEL P-334W | User Guide - Page 141
Prestige 334W User's Guide Table 9-5 WAN: IP LABEL DESCRIPTION Allow between WAN and Click Apply to save your changes back to the Prestige. Reset Click Reset to begin configuring this screen afresh. 9.6 Configuring WAN MAC To change your Prestige's WAN MAC settings, click WAN, then the WAN - ZyXEL P-334W | User Guide - Page 142
Prestige 334W User's Guide 9.7 Traffic Redirect Traffic redirect forwards WAN traffic to a backup gateway when the Prestige cannot connect to the Internet through its normal gateway. Connect the backup gateway on the WAN so that the Prestige still provides firewall protection. Figure 9-7 Traffic - ZyXEL P-334W | User Guide - Page 143
Prestige 334W User's Guide 9.8 Configuring Traffic Redirect To change your Prestige's Traffic Redirect settings, click WAN, then this route's priority among the routes the Prestige uses. The metric represents the "cost of transmission". A router determines the best route for transmission by choosing - ZyXEL P-334W | User Guide - Page 144
Prestige 334W User's Guide Table 9-6 WAN: Traffic Redirect LABEL Check WAN IP Address Fail Tolerance Period (seconds) Timeout (seconds) Apply Reset DESCRIPTION Configuration of this field is optional. If you do not enter an IP address here, the Prestige will use the default gateway IP address. - ZyXEL P-334W | User Guide - Page 145
NAT and Static Route Part III: SUA/NAT and Static Route This part covers Network Address Translation and setting up static routes. III - ZyXEL P-334W | User Guide - Page 146
- ZyXEL P-334W | User Guide - Page 147
Prestige 334W User's Guide Chapter 10 Network Address Translation (NAT) Screens This chapter discusses how to configure NAT on the Prestige. 10.1 NAT Overview the IP address of a host in a packet as the packet traverses a router. For example, the local address refers to the IP address of a host - ZyXEL P-334W | User Guide - Page 148
Prestige 334W User's Guide NAT never changes the IP address (either local or global) of Many-to-Many Overload NAT mapping) in each packet and then forwards it to the Internet. The Prestige keeps track of the original addresses and port numbers so incoming reply packets can have their original values - ZyXEL P-334W | User Guide - Page 149
Prestige 334W User's Guide Figure 10-1 How NAT Works 10.1.4 NAT Application The following figure illustrates a possible NAT application, where three inside LANs (logical LANs using IP Alias) behind the Prestige can communicate with three distinct WAN networks. More examples follow at the end of this - ZyXEL P-334W | User Guide - Page 150
Prestige 334W User's Guide Figure 10-2 NAT Application With IP Alias 10.1.5 NAT Mapping Types NAT supports five types of IP/port mapping. They are: One to One: In One-to-One mode, the Prestige maps one local IP address to one global IP address. Many to One: In Many-to-One mode, the Prestige maps - ZyXEL P-334W | User Guide - Page 151
Prestige 334W User's Guide Many One-to-One: In Many-One-to-One mode, the Prestige maps each local IP address to a unique global IP address. Server: This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world. Port numbers do not change - ZyXEL P-334W | User Guide - Page 152
334W User's Guide 10.2 Using NAT You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the Prestige. 10.2.1 SUA (Single User Account) Versus NAT SUA (Single User Account) is a ZyNOS implementation of a subset of NAT that supports - ZyXEL P-334W | User Guide - Page 153
Prestige 334W User's Guide 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers. In addition to the servers for specified services, NAT supports a default - ZyXEL P-334W | User Guide - Page 154
Prestige 334W User's Guide IP address assigned by ISP. Figure 10-3 Multiple Servers Behind NAT Example 10.4 Configuring SUA Server If you do not assign a Default Server IP Address, the Prestige discards all packets received for ports that are not specified in this screen or remote management. Click - ZyXEL P-334W | User Guide - Page 155
Prestige 334W User's Guide Figure 10-4 SUA/NAT Setup The following table describes the labels in this screen. Table 10-4 SUA/NAT Setup LABEL Default Server DESCRIPTION In addition to the servers for specified services, NAT supports a default server. A default server receives packets from ports - ZyXEL P-334W | User Guide - Page 156
Prestige 334W User's Guide LABEL # Active Name Start Port End Port Server IP Address up by 1 rule, so old rules 5, 6 and 7 become new rules 4, 5 and 6. To change your Prestige's Address Mapping settings, click SUA/NAT, then the Address Mapping tab. The screen appears as shown. 10-10 NAT Screens - ZyXEL P-334W | User Guide - Page 157
Prestige 334W User's Guide Figure 10-5 Address Mapping The following table describes the labels in this screen. Table 10-5 Address Mapping LABEL DESCRIPTION Local Start IP This refers to - ZyXEL P-334W | User Guide - Page 158
Prestige 334W User's Guide ZyXEL routers supported only. 3. Many-to-Many Overload mode maps multiple local IP addresses to shared global IP addresses. 4. Many One-to-One mode maps each local IP address to unique global IP addresses. 5. Server allows you to specify inside servers of different services - ZyXEL P-334W | User Guide - Page 159
Prestige 334W User's Guide translation), ZyXEL's Single manually replace the LAN computer's IP address in the forwarding port with another LAN computer's IP address, Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The Prestige - ZyXEL P-334W | User Guide - Page 160
Prestige 334W User's Guide receives a response with a specific port number and protocol ("incoming" port), the Prestige forwards the traffic to the LAN IP address of the computer that sent the request. After that computer's connection for that service closes, another computer on the LAN can use the - ZyXEL P-334W | User Guide - Page 161
Prestige 334W User's Guide Only one LAN computer can use a trigger port (range) at a time. Figure 10-8 Trigger Port The following table describes the labels in this screen. Table 10-7 Trigger Port LABEL # DESCRIPTION This is the rule index number (read-only). NAT Screens 10-15 - ZyXEL P-334W | User Guide - Page 162
Prestige 334W User's Guide Table 10-7 Trigger Port LABEL DESCRIPTION Name Type a unique name (up to or a range of ports) that a server on the WAN uses when it sends out a particular service. The Prestige forwards the traffic with this port (or range of ports) to the client computer on the LAN - ZyXEL P-334W | User Guide - Page 163
Prestige 334W User's Guide Chapter 11 Static Route Screens This chapter shows you how to configure static routes for your Prestige. 11.1 Static Route Overview Each remote node specifies only the network to which the gateway is directly connected, and the Prestige has no knowledge of the networks - ZyXEL P-334W | User Guide - Page 164
Prestige 334W User's Guide Figure 11-2 Static Route The following table describes the labels is an immediate neighbor of your Prestige that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your Prestige; over the WAN, the gateway must - ZyXEL P-334W | User Guide - Page 165
Prestige 334W User's Guide Figure 11-3 Static Route: Edit The following table describes the gateway is an immediate neighbor of your Prestige that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your Prestige; over the WAN, the gateway must - ZyXEL P-334W | User Guide - Page 166
Prestige 334W User's Guide LABEL Private Apply Cancel Table 11-2 Static Route: Edit DESCRIPTION This parameter determines if the Prestige will include this route to a remote node in its RIP broadcasts. Select this check box to keep this route private and not included in RIP - ZyXEL P-334W | User Guide - Page 167
UPnP and Firewall Part IV: UPnP and Firewall This part provides information and configuration instructions for configuration of Universal Plug and Play, firewall and content filtering. IV - ZyXEL P-334W | User Guide - Page 168
- ZyXEL P-334W | User Guide - Page 169
Prestige 334W User's Guide Chapter 12 UPnP This chapter introduces the Universal Plug and Play feature. 12.1 the network to other UPnP devices and enable exchange of simple product and service descriptions. NAT traversal allows the following: Dynamic port mapping Learning public IP addresses - ZyXEL P-334W | User Guide - Page 170
Prestige 334W User's Guide 12.1.3 Cautions with UPnP The automated nature of NAT traversal applications in establishing their own services and (UIC). ZyXEL's UPnP implementation supports IGD 1.0 (Internet Gateway Device). At the time of writing ZyXEL's UPnP implementation supports Windows Messenger - ZyXEL P-334W | User Guide - Page 171
Prestige 334W User's Guide Figure 12-1 Configuring UPnP The following table describes the labels Prestige, for example by using NAT traversal, UPnP applications automatically reserve a NAT forwarding port in order to communicate with another UPnP enabled device; this eliminates the need to manually - ZyXEL P-334W | User Guide - Page 172
Prestige 334W User's Guide 12.4 Installing UPnP in Windows Example This section shows how to install UPnP in Windows Me and Windows XP. 12.4.1 Installing UPnP in Windows Me - ZyXEL P-334W | User Guide - Page 173
Components .... The Windows Optional Networking Components Wizard window displays. Select Networking Service in the Components selection box and click Details. Prestige 334W User's Guide Step 5. Step 6. In the Networking Services window, select the Universal Plug and Play check box. Click OK to - ZyXEL P-334W | User Guide - Page 174
Prestige 334W User's Guide 12.5 Using UPnP in Windows XP Example This section shows you how to use the UPnP feature in Windows XP. You must already have UPnP installed in Windows XP and UPnP activated on the ZyXEL device. Make sure the computer is connected to a LAN port of the ZyXEL device. Turn - ZyXEL P-334W | User Guide - Page 175
Step 3. In the Internet Connection Properties window, click Settings to see the port mappings that were automatically created. Prestige 334W User's Guide Step 4. You may edit or delete the port mappings or click Add to manually add port mappings. UPnP 12-7 - ZyXEL P-334W | User Guide - Page 176
Prestige 334W User's Guide When the UPnP-enabled device is disconnected from your computer, all port Easy Access With UPnP, you can access the web-based configurator on the ZyXEL device without finding out the IP address of the ZyXEL device first. This is helpful if you do not know the IP address - ZyXEL P-334W | User Guide - Page 177
Network Connections. Select My Network Places under Other Places. Prestige 334W User's Guide Step 4. Step 5. An icon with the description for each UPnP-enabled device displays under Local Network. Right-click the icon for your ZyXEL device and select Invoke. The web configurator login screen - ZyXEL P-334W | User Guide - Page 178
Prestige 334W User's Guide Step 6. Right-click the icon for your ZyXEL device and select Properties. A properties window displays with basic information about the ZyXEL device. 12-10 UPnP - ZyXEL P-334W | User Guide - Page 179
Prestige 334W User's Guide Chapter 13 Firewall This chapter gives some background information on firewalls and explains how to get started with the Prestige solve every security problem. A firewall is one of the mechanisms used to establish a network security perimeter in support of a network - ZyXEL P-334W | User Guide - Page 180
Prestige 334W User's Guide Prestige can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network. The Prestige is installed between the LAN and a broadband modem connecting to the Internet. This allows it to act as - ZyXEL P-334W | User Guide - Page 181
Prestige 334W User's Guide 13.2 Firewall Settings Screen From the MAIN MENU, click FIREWALL to Route DESCRIPTION Select this check box to activate the firewall. The Prestige performs access control and protects against Denial of Service (DoS) attacks when the firewall is activated. Select this - ZyXEL P-334W | User Guide - Page 182
Prestige 334W User's Guide Table 13-1 Firewall: Settings LABEL DESCRIPTION LAN to log. Choose from: No Log Log Blocked (blocked LAN to WAN services appear in the Blocked Services textbox in the Services screen (with Enable Services Blocking selected)) Log All (log all LAN to WAN packets) WAN - ZyXEL P-334W | User Guide - Page 183
Prestige 334W User's Guide 13.3 The Firewall, NAT and Remote Management Figure 13-2 to-WAN traffic in the Services screen (click the Services tab). All services displayed in the Blocked Services list box are LAN-to-WAN firewall rules that block those services originating from the LAN. Blocked - ZyXEL P-334W | User Guide - Page 184
Prestige 334W User's Guide How can you forward certain WAN to LAN traffic? You may allow web configurator Address Mapping screen or SMT NAT menus. Configuring WAN or LAN & WAN access for services in the Remote Management screens or SMT menus. When you allow remote management from the WAN, you are actually - ZyXEL P-334W | User Guide - Page 185
Prestige 334W User's Guide Figure 13-3 Firewall: Filter The following table describes the labels in this screen. Table 13-2 Firewall: Filter LABEL DESCRIPTION Restricted Web Features ActiveX ActiveX is a - ZyXEL P-334W | User Guide - Page 186
Prestige 334W User's Guide Table 13-2 Firewall: Filter LABEL DESCRIPTION Java Java is a programming language and development environment for building downloadable Web components or Internet and intranet business applications of all kinds. Cookies Web servers that track usage and provide service - ZyXEL P-334W | User Guide - Page 187
Prestige 334W User's Guide Figure 13-4 Firewall: Service The following table describes the labels in this screen. Table 13-3 Firewall: Service LABEL DESCRIPTION Enable Services Blocking Select this check box to enable this feature. Available Service This is a list of pre-defined services ( - ZyXEL P-334W | User Guide - Page 188
Prestige 334W User's Guide Table 13-3 Firewall: Service LABEL DESCRIPTION Blocked Service This is a list of services (ports) that will be inaccessible to computers on your LAN once you enable service blocking. Choose the IP port (TCP, UDP or TCP/UDP) that defines your customized port from the - ZyXEL P-334W | User Guide - Page 189
Remote Management and VPN/IPSec Part V: Remote Management and VPN/IPSec This part provides information and configuration instructions for configuration of remote management and VPN/IPSec. V - ZyXEL P-334W | User Guide - Page 190
- ZyXEL P-334W | User Guide - Page 191
Prestige 334W User's Guide Chapter 14 Remote Management Screens This chapter provides information on the Remote Management screens. 14.1 Remote Management Overview Remote management allows you to determine which services/protocols can access which Prestige interface (if any) from which computers. - ZyXEL P-334W | User Guide - Page 192
Prestige 334W User's Guide 14.1.1 Remote Management Limitations Remote management over LAN or WAN will not work when: 1. A filter in SMT menu 3.1 (LAN) or in menu 11.5 (WAN) is applied to block a Telnet, FTP or Web service. 2. You have disabled that service in one of the remote management screens. - ZyXEL P-334W | User Guide - Page 193
Prestige 334W User's Guide Figure 14-1 Remote Management: WWW The following table describes the labels in this screen. Table 14-1 Remote Management: WWW LABEL Server Port Server Access Secured Client IP Address Apply Reset DESCRIPTION You may change the server port number for a service if - ZyXEL P-334W | User Guide - Page 194
Prestige 334W User's Guide 14.3 Configuring Telnet You can configure your Prestige for remote Telnet access as shown next. The administrator uses Telnet from a computer on a remote network to access the Prestige. Figure 14-2 Telnet Configuration on a TCP/IP Network 14.4 Configuring TELNET Click - ZyXEL P-334W | User Guide - Page 195
Prestige 334W User's Guide Figure 14-3 Remote Management: Telnet The following table describes the labels in this screen. Table 14-2 Remote Management: Telnet LABEL Server Port Server Access Secured Client IP Address Apply Reset DESCRIPTION You may change the server port number for a service if - ZyXEL P-334W | User Guide - Page 196
Prestige 334W User's Guide 14.5 Configuring FTP You can upload and download the Prestige's firmware and configuration files using FTP, please see the chapter on firmware and configuration file maintenance for details. To use this feature, your computer must have an FTP client. To change your - ZyXEL P-334W | User Guide - Page 197
Prestige 334W User's Guide LABEL Secured Client IP Address Apply Reset Table 14-3 Remote Management: FTP DESCRIPTION A secured client is a "trusted" computer that is allowed to communicate with the Prestige using this service. Select All to allow any computer to access the Prestige using this - ZyXEL P-334W | User Guide - Page 198
Prestige 334W User's Guide SNMP is only available if TCP/IP is configured. Figure 14-5 SNMP Management Model An SNMP managed network consists of two main types of component: agents and a manager. An agent is a management software module that resides in a managed device (the Prestige). An agent - ZyXEL P-334W | User Guide - Page 199
Prestige 334W User's Guide SNMP itself is a simple request/response protocol based on the manager/agent an agent. • Trap - Used by the agent to inform the manager of some events. 14.6.1 Supported MIBs The Prestige supports MIB II that is defined in RFC-1213 and RFC-1215. The focus of the MIBs is to - ZyXEL P-334W | User Guide - Page 200
Prestige 334W User's Guide 14.6.3 Configuring SNMP To change your Prestige's SNMP settings, click REMOTE MGMT, then the SNMP tab. The screen appears as shown. Figure 14-6 Remote Management: SNMP The following table describes the labels in this screen. 14-10 Remote Management Screens - ZyXEL P-334W | User Guide - Page 201
Prestige 334W User's Guide Table 14-5 Remote Management: SNMP LABEL DESCRIPTION SNMP " computer that is allowed to communicate with the Prestige using this service. Select All to allow any computer to access the Prestige using this service. Choose Selected to just allow the computer with - ZyXEL P-334W | User Guide - Page 202
Prestige 334W User's Guide To change your Prestige's DNS settings, click REMOTE MGMT, then the DNS tab. Apply Reset DESCRIPTION The DNS service port number is 53 and cannot be changed here. Select the interface(s) through which a computer may send DNS queries to the Prestige. A secured client is a - ZyXEL P-334W | User Guide - Page 203
Prestige 334W User's Guide 14.8 Configuring Security To change your Prestige's security settings, click REMOTE MGMT, then the Security tab. The screen appears as shown. If an outside user attempts to probe an unsupported port on your Prestige, an ICMP response packet is automatically returned. This - ZyXEL P-334W | User Guide - Page 204
Prestige 334W User's Guide Table 14-7 Security LABEL DESCRIPTION Respond to Ping on The Prestige will not respond to for unauthorized services Select this option to prevent hackers from finding the Prestige by probing for unused ports. If you select this option, the Prestige will not respond - ZyXEL P-334W | User Guide - Page 205
Prestige 334W User's Guide Chapter 15 Introduction to IPSec This chapter introduces the basics secure VPN is a combination of tunneling, encryption, authentication, access control and auditing technologies/services used to transport traffic over the Internet or any insecure network that uses the TCP - ZyXEL P-334W | User Guide - Page 206
Prestige 334W User's Guide Figure 15-1 Encryption and Decryption Data Confidentiality The IPSec sender can encrypt verify the source of IPSec packets. This service depends on the data integrity service. 15.1.4 VPN Applications The Prestige supports the following VPN applications. Linking Two or - ZyXEL P-334W | User Guide - Page 207
15.2 IPSec Architecture The overall IPSec architecture is shown as follows. Prestige 334W User's Guide Figure 15-2 IPSec Architecture 15.2.1 IPSec Algorithms The ESP (Encapsulating Security Payload) Protocol (RFC 2406) and AH (Authentication Header) protocol (RFC 2402) describe the packet - ZyXEL P-334W | User Guide - Page 208
Prestige 334W User's Guide 15.2.2 Key Management Key management allows you to determine whether to use IKE (ISAKMP) or manual key configuration in order to transmit it securely. A Tunnel mode is required for gateway services to provide access to internal systems. Tunnel mode is fundamentally an IP - ZyXEL P-334W | User Guide - Page 209
Prestige 334W User's Guide Inside header: The inside IP header contains the destination IP with NAT, although NAT traversal provides a way to use Transport mode ESP when there is a NAT router between the IPSec endpoints (see section 16.7 for details). Table 15-1 VPN and NAT SECURITY PROTOCOL - ZyXEL P-334W | User Guide - Page 210
- ZyXEL P-334W | User Guide - Page 211
Prestige 334W User's Guide Chapter 16 VPN Screens This chapter introduces the VPN Web Configurator. See the Logs chapter for information on viewing logs and the Appendices for IPSec - ZyXEL P-334W | User Guide - Page 212
Prestige 334W User's Guide 16.2.2 ESP (Encapsulating Security Payload) Protocol The ESP protocol (RFC 2406) provides encryption as well as some of the services offered by AH. ESP authenticating properties are limited compared to the AH due to the non-inclusion of the IP header information during - ZyXEL P-334W | User Guide - Page 213
Prestige 334W User's Guide If the remote secure gateway has a static WAN IP address, enter it Secure Gateway IP Address may be configured as 0.0.0.0 only when using IKE key management and not Manual key management. 16.5 Summary Screen The following figure helps explain the main fields in the web - ZyXEL P-334W | User Guide - Page 214
Prestige 334W User's Guide Local and remote IP addresses must be static. Click VPN to open the Summary screen. This is a read-only menu of your IPSec N signifies that this VPN policy is not active. This is the IP address of the computer on your local network behind your Prestige. 16-4 VPN Screens - ZyXEL P-334W | User Guide - Page 215
Prestige 334W User's Guide Table 16-2 VPN: Summary LABEL DESCRIPTION Remote Addr. This is the IP address(es) of computer(s) on the remote network behind the remote IPSec router Address End/Mask fields in the Rule Setup IKE (or Manual) screen are configured for a subnet. This field displays - ZyXEL P-334W | User Guide - Page 216
Prestige 334W User's Guide If the Prestige has its maximum number of simultaneous IPSec tunnels connected to it and they all have keep alive enabled, then no other tunnels can take a turn connecting to the Prestige because the Prestige never drops the tunnels that are already connected. When there - ZyXEL P-334W | User Guide - Page 217
Prestige 334W User's Guide Use ESP security protocol (in either transport or tunnel mode). Use IKE keying mode. Enable NAT traversal on both IPSec endpoints. In order for IPSec router A (see the figure) to receive an initiating IPSec packet from IPSec router B, set the NAT router to forward UDP port - ZyXEL P-334W | User Guide - Page 218
Prestige 334W User's Guide If you do not specify an Intranet DNS server on the remote network, then the VPN host must use IP addresses to access the computers on the remote network. 16.8 ID Type and Content With aggressive negotiation mode (see Section 16.11.1), the Prestige identifies incoming - ZyXEL P-334W | User Guide - Page 219
Prestige 334W User's Guide Table 16-4 Peer ID Type and Content Fields PEER ID TYPE CONTENT IP Type the IP address of the computer with which you will make the VPN connection or leave the field blank to have the Prestige to match the remote router's IP address or what you configure in the - ZyXEL P-334W | User Guide - Page 220
Prestige 334W User's Guide Table 16-6 Mismatching ID Type and Content Configuration Example PRESTIGE A Peer ID content: [email protected] PRESTIGE B Peer ID content: N/A 16.9 Pre-Shared Key A pre-shared key identifies a communicating party during a phase 1 IKE negotiation (see Section 16.11 for more - ZyXEL P-334W | User Guide - Page 221
Prestige 334W User's Guide Figure 16-5 VPN: Rule Setup (Basic) The following table describes the labels in this screen. VPN Screens 16-11 - ZyXEL P-334W | User Guide - Page 222
Prestige 334W User's Guide LABEL Active Keep Alive NAT Traversal IPSec Keying Mode protection so it is generally recommended. Manual is a useful option for troubleshooting. The local IP address must be static and correspond to the remote IPSec router's configured remote IP addresses. Two active - ZyXEL P-334W | User Guide - Page 223
Prestige 334W User's Guide LABEL DNS Server (for IPSec VPN) My IP Address Local ID Type Local Content Secure Gateway Address Peer ID Type Table 16-7 VPN: Rule Setup (Basic) DESCRIPTION If there is a private DNS server that services the VPN, type its IP address here. The Prestige assigns this - ZyXEL P-334W | User Guide - Page 224
Prestige 334W User's Guide LABEL Peer Content routers with dynamic WAN IP addresses. Select Tunnel mode or Transport mode from the drop-down list box. Select ESP if you want to use ESP (Encapsulation Security Payload). The ESP protocol (RFC 2406) provides encryption as well as some of the services - ZyXEL P-334W | User Guide - Page 225
Prestige 334W User's Guide LABEL Pre-Shared Key Encryption Algorithm Authentication Algorithm Advanced Apply is not used on both ends Select DES or 3DES from the drop-down list box. The Prestige's encryption algorithm should be identical to the secure remote gateway. When DES is used for data - ZyXEL P-334W | User Guide - Page 226
Prestige 334W User's Guide Figure 16-6 Two Phases to Set Up the IPSec SA In phase 1 you must: Choose a negotiation mode. Authenticate the connection by entering a pre-shared key. - ZyXEL P-334W | User Guide - Page 227
Prestige 334W User's Guide Choose Tunnel mode or Transport mode. Set the IPSec SA lifetime. This field allows you to determine how long the IPSec SA should stay up before it times out. The Prestige Group 2 - DH2) Diffie-Hellman groups are supported. Upon completion of the Diffie-Hellman exchange, - ZyXEL P-334W | User Guide - Page 228
Prestige 334W User's Guide 16.11.3 Perfect Forward Secrecy (PFS) Enabling PFS means that the data that does not require such security, so PFS is disabled (None) by default in the Prestige. Disabling PFS means new authentication and encryption keys are derived from the same root secret (which may - ZyXEL P-334W | User Guide - Page 229
Prestige 334W User's Guide VPN Screens Figure 16-7 VPN IKE: Advanced 16-19 - ZyXEL P-334W | User Guide - Page 230
Prestige 334W User's Guide manual key management. In order for an IPSec router behind a NAT router to receive an initiating IPSec packet, set the NAT router to forward UDP port 500 to the IPSec router behind the NAT router the system is vulnerable to Denial of Service (DOS) attacks The IPSec receiver - ZyXEL P-334W | User Guide - Page 231
Prestige 334W User's Guide Enter a (static) IP address on the network behind the remote IPSec router. When the remote IP address is a single address, type it a server that services the VPN, type its IP address here. The Prestige assigns this additional DNS server to the Prestige's DHCP clients - ZyXEL P-334W | User Guide - Page 232
Prestige 334W User's Guide LABEL Local Content Secure Gateway Address Peer ID Type Table 16-8 VPN IKE: Advanced DESCRIPTION When you select IP in the Local ID Type field, type the IP address of your computer in the local Content field. The Prestige automatically uses the IP address in the My IP - ZyXEL P-334W | User Guide - Page 233
Prestige 334W User's Guide Table 16-8 VPN IKE: Advanced LABEL Peer Content IKE Phase 1 Negotiation or E-mail, type a domain name or e-mail address by which to identify the remote IPSec router. Use up to 31 ASCII characters including spaces, although trailing spaces are truncated. The domain name - ZyXEL P-334W | User Guide - Page 234
Prestige 334W User's Guide Table 16-8 VPN IKE: Advanced LABEL SA Life Time Key Group AH here, you must select options from the Authentication Algorithm field. The encryption algorithm for the Prestige and the secure remote gateway should be identical. When DES is used for data communications, both - ZyXEL P-334W | User Guide - Page 235
Time Perfect Forward Secrecy (PFS) Basic Apply Reset Prestige 334W User's Guide Table 16-8 VPN IKE: Advanced DESCRIPTION Select SHA1 configuring this screen afresh. 16.13Manual Key Setup Manual key management is useful if you have problems with IKE key management. 16.13.1 Security Parameter - ZyXEL P-334W | User Guide - Page 236
Prestige 334W User's Guide Current ZyXEL implementation assumes identical outgoing and incoming SPIs. 16.14Configuring Manual Key You only configure VPN Manual Key when you select Manual in the IPSec Keying Mode field on the Rule Setup IKE screen. This is the Rule Setup Manual screen as shown next. - ZyXEL P-334W | User Guide - Page 237
Prestige 334W User's Guide Figure 16-8 Rule Setup: Manual The following table describes the labels in this screen. VPN Screens 16-27 - ZyXEL P-334W | User Guide - Page 238
Prestige 334W User's Guide Table 16-9 Rule Setup: Manual LABEL DESCRIPTION Active Select this check box to activate this VPN policy. IPSec Keying Mode Select IKE or Manual from the drop-down list box. Manual is a useful option for troubleshooting if you have problems IPSec router. Remote - ZyXEL P-334W | User Guide - Page 239
Prestige 334W User's Guide Table 16-9 Rule Setup: Manual address or the URL (up to 31 characters) of the IPSec router with which you're making the VPN connection. SPI Type a processing intensive, the system is vulnerable to Denial of Service (DoS) attacks The IPSec receiver can detect and reject - ZyXEL P-334W | User Guide - Page 240
Prestige 334W User's Guide LABEL Authentication Algorithm Encryption Key (Only with ESP) Authentication Key Apply Reset Table 16-9 Rule Setup: Manual DESCRIPTION Select SHA1 or MD5 from the drop-down list box. MD5 (Message Digest 5) and SHA1 (Secure Hash Algorithm) are hash algorithms used to - ZyXEL P-334W | User Guide - Page 241
Prestige 334W User's Guide When there is outbound traffic but no inbound traffic, the SA times out automatically after two minutes. A tunnel with no outbound or inbound traffic is "idle" and does not timeout until the SA lifetime period expires. See section 16.6 on keep alive to have the Prestige - ZyXEL P-334W | User Guide - Page 242
Prestige 334W User's Guide LABEL Previous Page (If applicable) Refresh Next Page (If applicable Click Next Page to view more items in the summary. 16.16Configuring Global Setting To change your Prestige's Global Settings, click VPN, then the Global Setting tab. The screen appears as shown. Figure - ZyXEL P-334W | User Guide - Page 243
Prestige 334W User's Guide LABEL Allow Through IP/Sec Tunnel Apply Reset Table 16-11 VPN: Global Setting DESCRIPTION Select this check box to send NetBIOS packets through the VPN connection. Click Apply to save your changes back to the Prestige Prestige at headquarters from remote IPSec routers - ZyXEL P-334W | User Guide - Page 244
Prestige 334W User's Guide Figure 16-11 Telecommuters Sharing One VPN Rule Example 16.17.2 Telecommuters Using Unique VPN Rules Example With aggressive negotiation mode (see section 16.11.1), the Prestige can use the ID types and contents to distinguish between VPN rules. Telecommuters can each - ZyXEL P-334W | User Guide - Page 245
Prestige 334W User's Guide Figure 16-12 Telecommuters Using Unique VPN Rules Example VPN Screens 16-35 - ZyXEL P-334W | User Guide - Page 246
Prestige 334W User's Guide 16.18VPN and Remote Management If a VPN tunnel uses a remote management service port (Telnet, FTP, WWW SNMP, DNS or ICMP) and terminates at the Prestige's LAN or WAN port, configure remote management (REMOTE MGNT) to allow access for that service. If the VPN tunnel - ZyXEL P-334W | User Guide - Page 247
Logs, Media Bandwidth Management and Maintenance Part VI: Logs, Media Bandwidth Management and Maintenance This part covers the centralized logs, media bandwidth management and maintenance screens. VI - ZyXEL P-334W | User Guide - Page 248
- ZyXEL P-334W | User Guide - Page 249
Prestige 334W User's Guide Chapter 17 Centralized Logs This chapter contains information about configuring general log settings and viewing the Prestige's logs. Refer to the appendices for example log message explanations. 17.1 View Log The web configurator allows you to look at all of the Prestige - ZyXEL P-334W | User Guide - Page 250
Prestige 334W User's Guide Table 17-1 View Logs LABEL Display Time Message Source displays the time the log was recorded. See the chapter on system maintenance and information to configure the Prestige's time and date. This field states the reason for the log. This field lists the source IP - ZyXEL P-334W | User Guide - Page 251
Prestige 334W User's Guide Centralized Logs Figure 17-2 Log Settings 17-3 - ZyXEL P-334W | User Guide - Page 252
Prestige 334W User's Guide The following table describes the labels in this screen. Table 17-2 log Settings LABEL DESCRIPTION Address Info you to log the messages to different files in the syslog server. Refer to the syslog server manual for more information. Send Log 17-4 Centralized Logs - ZyXEL P-334W | User Guide - Page 253
Prestige 334W User's Guide Table 17-2 log Settings LABEL Log Schedule Day for Sending categories of logs that you want to record. Select log categories for which you want the Prestige to send e-mail alerts immediately. Click Apply to save your changes. Click Reset to begin configuring this screen - ZyXEL P-334W | User Guide - Page 254
- ZyXEL P-334W | User Guide - Page 255
Prestige 334W User's Guide Chapter 18 Media Bandwidth Management This chapter contains information about configuring media bandwidth management, editing rules and viewing the Prestige's media bandwidth management logs. 18.1 Bandwidth Management Overview ZyXEL's Media Bandwidth Management allows you - ZyXEL P-334W | User Guide - Page 256
Prestige 334W User's Guide Figure 18-1 Application-based Bandwidth Management Example 18.1.2 Subnet-based Bandwidth Management Example The following example uses bandwidth rules based solely on LAN subnets. Each - ZyXEL P-334W | User Guide - Page 257
Prestige 334W User's Guide Figure 18-3 Application and Subnet-based Bandwidth Management Example 18.1.4 Bandwidth Usage Example Here is an example of a Prestige that has bandwidth usage enabled on an interface. The first figure shows each bandwidth rule's bandwidth budget. The rules are set up based - ZyXEL P-334W | User Guide - Page 258
Prestige 334W User's Guide The following figure shows the bandwidth usage with the maximize bandwidth usage option enabled. The Prestige divides up the unbudgeted 64 Kbps among the rules that require more bandwidth. If the administration department only uses 32 Kbps of the budgeted 64 - ZyXEL P-334W | User Guide - Page 259
Prestige 334W User's Guide Table 18-2 Media Bandwidth Management Priorities Priority Levels: Traffic with in BW Setup. Xbox Live This is Microsoft's online gaming service that lets you play multiplayer Xbox games on the Internet via broadband technology. Xbox Live uses port 3074. VoIP (SIP) Sending - ZyXEL P-334W | User Guide - Page 260
Prestige 334W User's Guide eMule/eDonkey These programs use advanced file sharing Server. A popular videoconferencing solution from White Pines Software. Domain Name Server, a service that matches web names (e.g. www.zyxel.com) to IP numbers. Finger is a UNIX or Internet related command that - ZyXEL P-334W | User Guide - Page 261
Prestige 334W User's Guide Table 18-3 Commonly Used Services SERVICE HTTP(TCP:80) HTTPS(TCP:443) ICQ(UDP:4000) environments. Network News Transport Protocol is the delivery mechanism for the USENET newsgroup service. Packet INternet Groper is a protocol that sends out ICMP echo requests to test - ZyXEL P-334W | User Guide - Page 262
Prestige 334W User's Guide Table 18-3 Commonly Used Services SERVICE REXEC(TCP:514) RLOGIN(TCP:513) RTELNET(TCP:107) RTSP(TCP/UDP:554) SFTP(TCP:115) then BW MGMT to open the media bandwidth management Configuration screen, where you can configure your Prestige. 18-8 Media Bandwidth Management - ZyXEL P-334W | User Guide - Page 263
Prestige 334W User's Guide Figure 18-6 Bandwidth Management Configuration Media Bandwidth Management 18-9 - ZyXEL P-334W | User Guide - Page 264
Prestige 334W User's Guide The following table describes the labels in this screen. Table 18-4 Bandwidth Management Configuration LABEL Active WAN BW Budget (kbps) # Direction Name Service Dest Port Priority Edit Apply Reset DESCRIPTION Select this check box to have the Prestige apply bandwidth - ZyXEL P-334W | User Guide - Page 265
Prestige 334W User's Guide 18.3 Editing Bandwidth Management Rules Use the Bandwidth Management Configuration is given to the highest priority rule first. 18.4 Configuring Bandwidth Management Rules and Services Select a radio button for a rule and then click Edit to open the Bandwidth Management - ZyXEL P-334W | User Guide - Page 266
Prestige 334W User's Guide Table 18-5 Bandwidth Management Edit LABEL DESCRIPTION Active Rule Name BW Budget Select this check box to have the Prestige can be used for the traffic that matches this rule. Service Select a service for your rule or you can define your own. Destination Address - ZyXEL P-334W | User Guide - Page 267
Prestige 334W User's Guide LABEL Protocol Apply Reset Delete Table 18-5 Bandwidth Management Edit DESCRIPTION Enter the protocol (service type) number, for example: 1 for ICMP, 6 for TCP or 17 for UDP. Click Apply to save your customized settings and exit this screen. Click Reset - ZyXEL P-334W | User Guide - Page 268
Prestige 334W User's Guide 18-14 Figure 18-8 Bandwidth Management Monitor Media Bandwidth Management - ZyXEL P-334W | User Guide - Page 269
Prestige 334W User's Guide Chapter 19 Maintenance This chapter displays system information such as ZyNOS firmware, port IP addresses and port traffic statistics. 19.1 Maintenance Overview The maintenance screens can help you view system information, upload new firmware, manage configuration and - ZyXEL P-334W | User Guide - Page 270
Prestige 334W User's Guide Table 19-1 Firmware version and the date created. ZyNOS is ZyXEL's Version proprietary Network Operating System design. Routing Protocols This shows the routing protocol - IP for which the Prestige is configured. This field is not configurable in all Prestige router - ZyXEL P-334W | User Guide - Page 271
Prestige 334W User's Guide Figure 19-2 Maintenance System Statistics The following table describes the amount of time the line has been up. System Up Time This is the total time the Prestige has been on. Poll Interval(s) Enter the time interval for refreshing statistics in this field. Set - ZyXEL P-334W | User Guide - Page 272
Prestige 334W User's Guide 19.3 DHCP Table Screen DHCP (Dynamic Host Configuration Protocol, RFC 2131 and RFC 2132) allows individual clients to obtain TCP/IP configuration at start-up from a server. You can configure the Prestige as a DHCP server or disable it. When configured as a server, the - ZyXEL P-334W | User Guide - Page 273
Prestige 334W User's Guide LABEL Refresh Table 19-3 Maintenance DHCP Table DESCRIPTION Click Refresh to MAC address) of all network devices that use the Any IP feature to communicate with the Prestige. Figure 19-4 Maintenance Any IP The following table describes the labels in this screen. Table - ZyXEL P-334W | User Guide - Page 274
Prestige 334W User's Guide Figure 19-5 Maintenance Association List The Firmware and Configuration File Maintenance chapter for upgrading firmware using FTP/TFTP commands. Click MAINTENANCE, and then the F/W Upload tab. Follow the instructions in this screen to upload firmware to your Prestige - ZyXEL P-334W | User Guide - Page 275
Prestige 334W User's Guide The following table describes the labels in this screen. Table 19-6 Maintenance Firmware Upload LABEL File Path Browse... Upload DESCRIPTION Type in the location of the file you want to upload in this field or click Browse ... to - ZyXEL P-334W | User Guide - Page 276
Prestige 334W User's Guide If the upload was not successful, the following screen will appear. Click Return to go back to the F/W Upload screen. Figure 19-9 Upload Error Message 19.7 Configuration Screen See the Firmware and Configuration File Maintenance chapter for transferring configuration files - ZyXEL P-334W | User Guide - Page 277
Prestige 334W User's Guide Figure 19-10 Maintenance Configuration 19.7.1 Backup Configuration Backup configuration allows you to back up (save) the Prestige's current configuration to a file on your computer. Once your Prestige is configured and functioning properly, it is highly recommended that - ZyXEL P-334W | User Guide - Page 278
Prestige 334W User's Guide Table 19-7 Maintenance Restore Configuration LABEL File Path Browse... Upload of your computer to be in the same subnet as that of the default Prestige IP address (192.168.1.1). See your Quick Start Guide for details on how to set up your computer's IP address. If the - ZyXEL P-334W | User Guide - Page 279
Prestige 334W User's Guide Figure 19-13 Configuration Restore Error 19.7.3 Back to Factory Defaults Pressing the Reset button in this section clears all user-entered configuration information and returns the Prestige to its factory defaults as shown on the screen. The following warning screen will - ZyXEL P-334W | User Guide - Page 280
Prestige 334W User's Guide Figure 19-15 System Restart 19-12 Maintenance - ZyXEL P-334W | User Guide - Page 281
setup, WAN setup, LAN setup, WLAN setup, Internet access, remote node, static route, NAT and enabling the firewall. See the web configurator parts of this guide for background information on features configurable by web configurator and SMT. VII - ZyXEL P-334W | User Guide - Page 282
- ZyXEL P-334W | User Guide - Page 283
Prestige 334W User's Guide Chapter 20 Introducing the SMT This chapter explains how to access and navigate the System Management Terminal and gives an overview of its menus. 20.1 SMT Introduction The Prestige's SMT (System Management Terminal) is a menu-driven interface that you can access from a - ZyXEL P-334W | User Guide - Page 284
Prestige 334W User's Guide Please note that if there is no activity for longer than five minutes after you log in, your Prestige will automatically log you out. Enter Password : **** Figure 20-1 Login Screen 20.1.4 Prestige SMT Menu Overview The following figure gives you an overview of the various - ZyXEL P-334W | User Guide - Page 285
Prestige 334W User's Guide Figure 20-2 SMT Menu Overview 20.2 Navigating the SMT Interface The SMT (System Management Terminal) is the interface that you use to configure your Prestige. Several operations that you should be familiar with before you attempt to modify the configuration are listed in - ZyXEL P-334W | User Guide - Page 286
Prestige 334W User's Guide Table 20-1 Main Menu Commands OPERATION KEYSTROKE DESCRIPTION Move down to another menu [ENTER] To move forward to a submenu, type in the number of the - ZyXEL P-334W | User Guide - Page 287
Prestige 334W User's Guide Copyright (c) 1994 - 2004 ZyXEL Communications Corp. Prestige 334W Main Menu Getting Started 1. General Setup 2. Dial-in User Setup Use this menu to set up local user profiles on the Prestige. 15 NAT Setup Use this menu to specify inside servers when NAT is enabled - ZyXEL P-334W | User Guide - Page 288
Prestige 334W User's Guide # MENU TITLE 24 System Maintenance 26 Schedule Setup 27 VPN this to exit from SMT and return to a blank screen. 20.3 Changing the System Password Change the Prestige default password by following the steps shown next. Step 1. Enter 23 in the main menu to display Menu - ZyXEL P-334W | User Guide - Page 289
Prestige 334W User's Guide Chapter 21 Menu 1 General Setup Menu 1 - General Setup contains administrative then the Properties button. Note the entry for the Computer name field and enter it as the Prestige System Name. • In Windows XP, click start, My Computer, View system information and then click - ZyXEL P-334W | User Guide - Page 290
Prestige 334W User's Guide Menu 1 - General Setup System Name= Domain Name= zyxel.com.tw First System DNS Server= From ISP IP 24.8 and type "sys domain name" to see the current domain name used by your router. The domain name entered by you is given priority over the ISP assigned domain name. If - ZyXEL P-334W | User Guide - Page 291
Prestige 334W User's Guide Table 21-1 Menu 1 General Setup FIELD DESCRIPTION EXAMPLE First important because without it, you must know the IP address of a machine before you can access it. The Prestige uses a system DNS server (in the order you specify here) to resolve domain names for VPN, DDNS - ZyXEL P-334W | User Guide - Page 292
Prestige 334W User's Guide Menu 1.1 - Configure Dynamic DNS Service instructions in the next table to configure Dynamic DNS parameters. Table 21-2 Menu 1.1 Configure Dynamic DNS FIELD DESCRIPTION Service Provider This is the name of your Dynamic DNS service Your Prestige supports DYNDNS Wildcard. - ZyXEL P-334W | User Guide - Page 293
Prestige 334W User's Guide Table 21-2 Menu 1.1 Configure Dynamic DNS FIELD DESCRIPTION EXAMPLE DDNS server automatically update the IP address of the host name(s) with the public IP address that the Prestige uses or is behind. You can set this field to Yes whether the IP address is public or - ZyXEL P-334W | User Guide - Page 294
- ZyXEL P-334W | User Guide - Page 295
Prestige 334W User's Guide Chapter 22 Menu 2 WAN Setup This chapter describes how to configure the WAN using menu 2. 22.1 Introduction to WAN This chapter explains how to configure - ZyXEL P-334W | User Guide - Page 296
Prestige 334W User's Guide Table 22-1 Menu 2 WAN Setup FIELD DESCRIPTION When you have completed this menu, press [ENTER] at the prompt "Press ENTER to Confirm..." to save your configuration, or press [ESC] at any time to cancel. 22-2 Menu 2 WAN Setup - ZyXEL P-334W | User Guide - Page 297
Prestige 334W User's Guide Chapter 23 Menu 3 LAN Setup This chapter covers how to configure your wired Local Area Network (LAN) settings. 23.1 LAN Setup This section describes how - ZyXEL P-334W | User Guide - Page 298
Prestige 334W User's Guide 23.2 Protocol Dependent Ethernet Setup Depending on the protocols for your to Cancel: the DNS servers Figure 23-3 Menu 3.2 TCP/IP and DHCP Ethernet Setup Follow the instructions in the next table on how to configure the DHCP fields. Table 23-1 Menu 3.2: DHCP Ethernet - ZyXEL P-334W | User Guide - Page 299
Prestige 334W User's Guide Table 23-1 Menu 3.2: DHCP Ethernet Setup Fields FIELD DESCRIPTION EXAMPLE Client IP Pool: type the IP address of the actual, remote DHCP server here. Use the instructions in the following table to configure TCP/IP parameters for the LAN port. Menu 3 LAN Setup 23-3 - ZyXEL P-334W | User Guide - Page 300
Prestige 334W User's Guide Table 23-2 Menu 3.2: LAN TCP/IP Setup Fields FIELD DESCRIPTION EXAMPLE TCP/IP Setup: IP Address Enter the IP address of your Prestige in dotted decimal notation 192.168.1.1 (default) IP Subnet Mask Your Prestige group. The Prestige supports both IGMP version - ZyXEL P-334W | User Guide - Page 301
Prestige 334W User's Guide Figure 23-4 Physical Network & Partitioned Logical Networks You must use menu 3.2 to = N/A Enter here to CONFIRM or ESC to CANCEL: Figure 23-5 Menu 3.2.1: IP Alias Setup Use the instructions in the following table to configure IP alias parameters. Menu 3 LAN Setup 23-5 - ZyXEL P-334W | User Guide - Page 302
Prestige 334W User's Guide Table 23-3 Menu 3.2.1: IP Alias Setup FIELD DESCRIPTION EXAMPLE IP Alias 1, 2 Choose Yes to configure the LAN network for the Prestige. Yes IP Address Enter the IP address of your Prestige in dotted decimal notation. 192.168.1.1 IP Subnet Mask Your Prestige - ZyXEL P-334W | User Guide - Page 303
Prestige 334W User's Guide Menu 3.5 - Wireless LAN Setup ESSID= Wireless Hide ESSID= No Channel ID= Table 23-4 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION ESSID The ESSID (Extended Service Set IDentity) identifies the AP to which the wireless stations associate. Wireless stations associating - ZyXEL P-334W | User Guide - Page 304
Prestige 334W User's Guide Table 23-4 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXAMPLE WEP Select to communicate. Key 1 to Key 4 The WEP keys are used to encrypt data. Both the Prestige and the wireless 0x12345abcd stations must use the same WEP key for data transmission. e If you - ZyXEL P-334W | User Guide - Page 305
Prestige 334W User's Guide Table 23-4 Menu 3.5 Wireless LAN Setup FIELD DESCRIPTION EXAMPLE When ESC] to cancel and go back to the previous screen. 23.4.1 Configuring MAC Address Filter Your Prestige checks the MAC address of the wireless station device against a list of allowed or denied MAC - ZyXEL P-334W | User Guide - Page 306
Prestige 334W User's Guide Menu 3.5.1 - WLAN MAC Address Filter Active= No Filter Action= Allowed will be allowed to access the router. The default action, Allowed Association, permits association with the Prestige. MAC addresses not listed will be denied access to the router. 23-10 Menu 3 LAN - ZyXEL P-334W | User Guide - Page 307
Prestige 334W User's Guide Table 23-5 Menu 3.5.1 WLAN MAC Address Filter FIELD DESCRIPTION MAC Address Filter 1..32 Enter the MAC addresses (in XX:XX:XX:XX:XX:XX format) of the client computers that are allowed or denied access to the Prestige in these address fields. When you have completed - ZyXEL P-334W | User Guide - Page 308
Prestige 334W User's Guide Menu 3.5.2 - Roaming Prestige's on the same subnet. Port # Enter the port number to communicate roaming information between access points. The port number must be the same on all access points. The default is 3517. Make sure this port is not used by other services - ZyXEL P-334W | User Guide - Page 309
Prestige 334W User's Guide Chapter 24 Internet Access This chapter shows you how to configure your Prestige for Internet access . 24.1 Introduction to Internet Access Setup Use information from your ISP along with the instructions in this chapter to set up your Prestige = Ethernet Service Type= - ZyXEL P-334W | User Guide - Page 310
Prestige 334W User's Guide Table 24-1 Menu 4: Internet Access Setup (Ethernet) FIELD DESCRIPTION ISP's Name Enter the name of your Internet Service Provider, e.g., myISP. This information is for identification purposes only. Encapsulation Press [SPACE BAR] and then press [ENTER] to choose - ZyXEL P-334W | User Guide - Page 311
Prestige 334W User's Guide Table 24-1 Menu 4: Internet Access Setup (Ethernet) FIELD configuration, or press [ESC] at any time to cancel. 24.3 Configuring the PPTP Client The Prestige supports only one PPTP server connection at any given time. To configure a PPTP client, you must configure - ZyXEL P-334W | User Guide - Page 312
Prestige 334W User's Guide Menu 4 - Internet Access Setup ISP's Name= MyISP Encapsulation= PPTP Service Type= N/A My Login= My Password= : Figure 24-2 Internet Access Setup (PPTP) The following table contains instructions about the new fields when you choose PPTP in the Encapsulation field - ZyXEL P-334W | User Guide - Page 313
Prestige 334W User's Guide Menu 4 - Internet Access Setup ISP's Name= MyISP Encapsulation= PPPoE Service Type= N/A My Login= My Password= : Figure 24-3 Internet Access Setup (PPPoE) The following table contains instructions about the new fields when you choose PPPoE in the Encapsulation field - ZyXEL P-334W | User Guide - Page 314
Prestige 334W User's Guide You may deactivate the firewall in menu 21.2 or via the Prestige embedded web configurator. You may also define additional firewall rules or modify existing ones but please exercise extreme caution in doing so. See the chapters - ZyXEL P-334W | User Guide - Page 315
Prestige 334W User's Guide Chapter 25 Remote Node Configuration This chapter covers remote node configuration. 25.1 Introduction to Remote Node Setup A remote node is required for placing calls to a - ZyXEL P-334W | User Guide - Page 316
Prestige 334W User's Guide Menu 11.1 - Remote Node Profile Rem Node Name= MyISP Active= Yes Route= IP Encapsulation= Ethernet Service Type= Standard Service Name= N/A Outgoing: My Login= N/A My Password= N/A Retype to Confirm= N/A Server= N/A Relogin Every (min)= N/A Edit IP= No Session Options - ZyXEL P-334W | User Guide - Page 317
Prestige 334W User's Guide Table 25-1 Menu 11.1 Remote Node Profile for Ethernet Encapsulation FIELD DESCRIPTION EXAMPLE My Password Enter the password assigned by your ISP when the Prestige when RoadRunner is selected in the Service Type field. The Prestige will find the RoadRunner Server IP - ZyXEL P-334W | User Guide - Page 318
Prestige 334W User's Guide 25.2.2 PPPoE Encapsulation The Prestige supports PPPoE (Point-to-Point Protocol over Ethernet). You can only use PPPoE encapsulation when you're using the Prestige Active= Yes Route= IP Encapsulation= PPPoE Service Type= Standard Service Name= Outgoing: My Login= My - ZyXEL P-334W | User Guide - Page 319
334W User's Guide The second is that the Prestige will try to bring up the connection when turned on and whenever the connection is down. A nailed-up connection can be very expensive for obvious reasons. Do not specify a nailed-up connection unless your telephone company offers flat-rate service - ZyXEL P-334W | User Guide - Page 320
Prestige 334W User's Guide 25.2.3 PPTP Encapsulation If you change the Encapsulation to PPTP in menu 11.1, then you will see the next screen. Please see the appendix for information on PPTP. Menu 11.1 - Remote Node Profile Rem Node Name= MyISP Active= Yes Route= IP Encapsulation= PPTP Service - ZyXEL P-334W | User Guide - Page 321
Prestige 334W User's Guide 25.3 Edit IP Move the cursor to the Edit IP field in menu 11.1, then press [SPACE BAR] to select Yes. Press [ENTER] to open - ZyXEL P-334W | User Guide - Page 322
Prestige 334W User's Guide port of your Prestige. Note that this is the address assigned to your local Prestige, not the remote router. Network Address IP address. SUA (Single User Account) is a subset of NAT that supports two types of mapping: Many-to-One and Server. Choose Full Feature if - ZyXEL P-334W | User Guide - Page 323
Prestige 334W User's Guide Table 25-4 Remote Node Network Layer Options FIELD DESCRIPTION EXAMPLE Multicast IGMP (Internet Group Multicast Protocol) is a network-layer protocol used to establish membership in a Multicast group. The Prestige supports both IGMP version 1 (IGMP-v1) and version 2 - ZyXEL P-334W | User Guide - Page 324
Prestige 334W User's Guide Menu 11.5 - Remote Node Filter Input Filter Sets: protocol filters= (PPPoE or PPTP Encapsulation) 25.4.1 Traffic Redirect Setup Configure parameters that determine when the Prestige will forward WAN traffic to the backup gateway using Menu 11.6 - Traffic Redirect Setup - ZyXEL P-334W | User Guide - Page 325
Prestige 334W User's Guide Table 25-5 Menu 11.6: Traffic Redirect Setup FIELD DESCRIPTION EXAMPLE Configuration: Backup Gateway IP Address Enter the IP address of your backup gateway in dotted decimal notation. The Prestige automatically forwards traffic to this IP address if the Prestige's - ZyXEL P-334W | User Guide - Page 326
- ZyXEL P-334W | User Guide - Page 327
Prestige 334W User's Guide Chapter 26 Static Route Setup This chapter shows how to setup IP static routes. 26.1 IP Static Route Setup Step 1. To configure an IP static - ZyXEL P-334W | User Guide - Page 328
Prestige 334W User's Guide Menu 12.1 - Edit IP Static Route Route #: 1 manual. Type the IP address of the gateway. The gateway is an immediate neighbor of your Prestige that will forward the packet to the destination. On the LAN, the gateway must be a router on the same segment as your Prestige - ZyXEL P-334W | User Guide - Page 329
Prestige 334W User's Guide Table 26-1 Menu12.1 Edit IP Static Route FIELD DESCRIPTION Private This parameter determines if the Prestige will include the route to this remote node in its RIP broadcasts. If set to Yes, this route is kept private and is not included - ZyXEL P-334W | User Guide - Page 330
- ZyXEL P-334W | User Guide - Page 331
Prestige 334W User's Guide Chapter 27 Dial-in User Setup This chapter shows you how to create user accounts on the ZyAIR. 27.1 Dial-in User Setup By storing - ZyXEL P-334W | User Guide - Page 332
Prestige 334W User's Guide The following table describes the fields in this screen. Table 27-1 Menu 14.1- Edit Dial-in User FIELD DESCRIPTION User Name Enter a username up to - ZyXEL P-334W | User Guide - Page 333
Prestige 334W User's Guide Chapter 28 Network Address Translation (NAT) This chapter discusses how to configure NAT on the Prestige. 28.1 Using NAT You must create a firewall rule in addition to setting up SUA/NAT, to allow traffic from the WAN to be forwarded through the Prestige. 28.1.1 SUA ( - ZyXEL P-334W | User Guide - Page 334
Prestige 334W User's Guide Menu 4 - Internet Access Setup ISP's Name= MyISP Encapsulation= Ethernet Service Type= Standard My Login= N/A My Password= N/A Retype to Confirm= N/A Login Server= N/A Relogin Every (min)= N/A IP Address Assignment= Dynamic IP Address= N/A IP Subnet Mask= N/A Gateway IP - ZyXEL P-334W | User Guide - Page 335
Prestige 334W User's Guide Menu 11.3 - Remote Node Network Layer Options IP Address Assignment= Dynamic IP see section 28.3.1). Choose SUA Only if you have just one public WAN IP address for your Prestige. EXAMPLE Full Feature None SUA Only 28.3 NAT Setup Use the address mapping sets menus and - ZyXEL P-334W | User Guide - Page 336
Prestige 334W User's Guide configurator screens for further information on these menus. To configure NAT, enter 15 from the main menu to bring up the following screen. Menu 15 - - ZyXEL P-334W | User Guide - Page 337
Prestige 334W User's Guide Menu 15.1.255 - Address Mapping Rules Set Name= SUA Idx Local Start IP Local End IP Global Start IP Global End IP Type 1. 0.0.0.0 255.255. - ZyXEL P-334W | User Guide - Page 338
Prestige 334W User's Guide Table 28-2 SUA Address Mapping Rules FIELD DESCRIPTION EXAMPLE When you have completed displayed here. Ordering Your Rules Ordering your rules is important because the Prestige applies the rules in the order that you specify. When a rule matches the current packet, the - ZyXEL P-334W | User Guide - Page 339
Prestige 334W User's Guide ignored. If there are any empty rules before your new configured rule, your configured rule will be pushed up by that number of empty rules. - ZyXEL P-334W | User Guide - Page 340
Prestige 334W User's Guide Menu 15.1.1.1 Address Mapping Rule Type= One-to-One Local IP: Start= 0.0.0.0 End = N/A Global IP: Start= 0.0.0.0 End = N/A Press ENTER to Confirm or ESC to Cancel: - ZyXEL P-334W | User Guide - Page 341
Prestige 334W User's Guide 28.4 Configuring a Server behind NAT Follow these steps to configure a server behind NAT: Step 1. Enter 15 in the main menu to go to Menu 15 - - ZyXEL P-334W | User Guide - Page 342
Prestige 334W User's Guide Figure 28-9 Multiple Servers Behind NAT Example 28.5 General NAT Examples The following are some examples of NAT configuration. 28.5.1 Example 1: Internet Access Only In - ZyXEL P-334W | User Guide - Page 343
Prestige 334W User's Guide Menu 4 - Internet Access Setup ISP's Name= MyISP Encapsulation= Ethernet Service Type= Standard My Login= N/A My Password= N/A Retype to Confirm= N/A Login Server= N/A Relogin Every (min)= N/A IP Address Assignment= Dynamic IP Address= N/A IP Subnet Mask= N/A Gateway IP - ZyXEL P-334W | User Guide - Page 344
Prestige 334W User's Guide Menu 15.2.1 - NAT Server Setup Rule Start Port No. End Port No. IP Address 1. Default Default 192.168.1.10 2. 0 0 0.0.0.0 two have their own FTP server. All departments share the same router. The example will reserve one IGA for each department with an FTP - ZyXEL P-334W | User Guide - Page 345
Prestige 334W User's Guide Figure 28-14 NAT Example 3 Step 1. Step 2. Step 3. Step 4. Step 5. Step 6. Step 7. In this case you need to configure Address Mapping Set 1 from Menu 15.1 - - ZyXEL P-334W | User Guide - Page 346
Prestige 334W User's Guide Menu 11.3 - Remote Node Network Layer Options IP Address Assignment= Dynamic IP Address= N/A IP Subnet Mask= N/A Gateway IP Addr= N/A Network Address Translation= Full Feature Metric= 1 - ZyXEL P-334W | User Guide - Page 347
Prestige 334W User's Guide Menu 15.1.1 - Address Mapping Rules Set Name= NAT_SET Idx Local Start IP Local End IP Global Start IP Global End IP Type 1. 192.168.1.10 - ZyXEL P-334W | User Guide - Page 348
Prestige 334W User's Guide Menu 15.2 - NAT Server Setup Rule Start Port No. End Port No PPTP:1723 Example 3: Menu 15.2 28.5.4 Example 4: NAT Unfriendly Application Programs Some applications do not support NAT Mapping using TCP or UDP port address translation. In this case it is better to use Many - ZyXEL P-334W | User Guide - Page 349
Prestige 334W User's Guide Other applications such as some gaming programs are NAT unfriendly because they embed addressing information in the data stream. These applications won't work through NAT - ZyXEL P-334W | User Guide - Page 350
Prestige 334W User's Guide 28.6 Configuring Trigger Port Forwarding Only one LAN computer can use a trigger a range of ports) that a server on the WAN uses when it sends out a particular service. The Prestige forwards the traffic with this port (or range of ports) to the client computer on the - ZyXEL P-334W | User Guide - Page 351
Prestige 334W User's Guide Table 28-5 Menu 15.3 Trigger Port Setup FIELD DESCRIPTION EXAMPLE End Port Enter a port number or the ending port number in a range of port numbers. - ZyXEL P-334W | User Guide - Page 352
- ZyXEL P-334W | User Guide - Page 353
Prestige 334W User's Guide Chapter 29 Enabling the Firewall This chapter shows you how to get started with the Prestige firewall. 29.1 Prestige has to offer. For this reason, it is recommended that you configure your firewall using the web configurator, see the following chapters for instructions - ZyXEL P-334W | User Guide - Page 354
Prestige 334W User's Guide Menu 21.2 - Firewall Setup The firewall protects against Denial of Service (DoS) attacks when it is active. Your network is vulnerable to attacks when the firewall is turned off. Refer to the User's Guide for details about the firewall default policies. You may define - ZyXEL P-334W | User Guide - Page 355
SMT Advanced Management Part VIII: SMT Advanced Management This part discusses filtering setup, SNMP, system security, system information and diagnosis, firmware and configuration file maintenance, system maintenance, remote management and call scheduling. See the web configurator parts of this - ZyXEL P-334W | User Guide - Page 356
- ZyXEL P-334W | User Guide - Page 357
Prestige 334W User's Guide Chapter 30 Filter Configuration This chapter shows you how to create and apply filters. 30.1 Introduction to Filters Your Prestige uses filters to decide whether to allow passage of a data packet and/or to make a call. There are two types of filter applications: data - ZyXEL P-334W | User Guide - Page 358
Prestige 334W User's Guide Outgoing Packet Data Filtering No match Match Call Filtering related rules, e.g., all the rules for NetBIOS, into a single set and give it a descriptive name. The Prestige allows you to configure up to twelve filter sets with six rules in each set, for a total of 72 - ZyXEL P-334W | User Guide - Page 359
Prestige 334W User's Guide Fetch Next Filter Set Yes Next Filter Set Available? No Drop Packet Filter Configuration Start Packet into filter Filter Set Fetch Next Filter Rule Yes - ZyXEL P-334W | User Guide - Page 360
Prestige 334W User's Guide You can apply up to four filter sets to a particular port to block multiple types of packets. With each filter set having up to six rules, you can have a maximum of 24 rules active for a single port. 30.2 Configuring a Filter Set The Prestige includes filtering for NetBIOS - ZyXEL P-334W | User Guide - Page 361
Prestige 334W User's Guide Step 3. Select the filter set you wish to configure (1-12) and press [ENTER]. Step 4. Enter a descriptive name or comment in the Edit Comments field and - ZyXEL P-334W | User Guide - Page 362
Prestige 334W User's Guide Table 30-2 Rule Abbreviations Used ABBREVIATION DESCRIPTION IP filter sets. If you include a protocol filter set in a device filter field or vice versa, the Prestige will warn you and will not allow you to save. 30.2.2 Configuring a TCP/IP Filter Rule This section - ZyXEL P-334W | User Guide - Page 363
Prestige 334W User's Guide To configure TCP/IP rules, select TCP/IP Filter Rule from the Filter Type field and press [ENTER] to open Menu 21.1.1.1 - TCP/IP Filter - ZyXEL P-334W | User Guide - Page 364
Prestige 334W User's Guide Table 30-3 TCP/IP Filter Rule FIELD DESCRIPTION IP Mask Enter the IP mask to apply to the Destination: IP Addr. Port # Enter the destination - ZyXEL P-334W | User Guide - Page 365
Prestige 334W User's Guide Table 30-3 TCP/IP Filter Rule FIELD DESCRIPTION OPTIONS Log Press [SPACE BAR] and then [ENTER] to select a logging None option from the following: None - - ZyXEL P-334W | User Guide - Page 366
Prestige 334W User's Guide Packet into IP Filter Filter Active? No Yes Apply SrcAddrMask to Src Addr Check Src IP Addr Not Matched Matched Apply DestAddrMask to Dest Addr - ZyXEL P-334W | User Guide - Page 367
Prestige 334W User's Guide 30.2.3 Configuring a Generic Filter Rule This section shows you how to configure a generic filter rule. The purpose of generic rules is to allow you to filter non-IP packets. For IP, it is generally easier to use the IP rules directly. For generic rules, the Prestige - ZyXEL P-334W | User Guide - Page 368
Prestige 334W User's Guide Table 30-4 Generic Filter Rule Menu Fields FIELD DESCRIPTION OPTIONS Filter Type Use [SPACE BAR] and then [ENTER] to select a rule type. Parameters displayed below - ZyXEL P-334W | User Guide - Page 369
Prestige 334W User's Guide 30.3 Example Filter Let's look at an example to block outside users from accessing the Prestige via telnet. Figure 30-9 Telnet Filter Example Step 1. Enter 21 from the main menu to open Menu 21 - Filter and Firewall Setup. Step 2. Enter 1 to - ZyXEL P-334W | User Guide - Page 370
Prestige 334W User's Guide Step 6. Enter 1 to configure the first filter rule (the active. 6 is the TCP protocol. The port number for the telnet service (TCP protocol) is 23. See RFC 1060 for port numbers of wellknown services. Select Forward here so that the packet will be forwarded if its - ZyXEL P-334W | User Guide - Page 371
Prestige 334W User's Guide Menu 21.1.3 - Filter Rules Summary # A Type Filter Rules M m n 1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=23 N D F 2 N 3 N 4 N 5 N 6 N Enter Filter Rule Number (1-6) to Configure: This shows you that you - ZyXEL P-334W | User Guide - Page 372
Prestige 334W User's Guide Generic and TCP/IP filter rules are discussed in more detail Filter Sets 30.5 Firewall Versus Filters Firewall configuration is discussed in the firewall chapters of this manual. Further comparisons are also made between filtering, NAT and the firewall. 30.6 Applying a - ZyXEL P-334W | User Guide - Page 373
Prestige 334W User's Guide 30.6.1 Applying LAN Filters LAN traffic filter sets may be useful to You can cascade up to four filter sets by entering their numbers separated by commas. The Prestige already has filters to prevent NetBIOS traffic from triggering calls, and block incoming telnet, FTP and - ZyXEL P-334W | User Guide - Page 374
Prestige 334W User's Guide Menu 11.5 - Remote Node Filter Input Filter Sets: protocol filters= device filters= Output Filter Sets: protocol filters= device filters= Enter here to CONFIRM or ESC to CANCEL: Figure 30-14 Filtering Remote Node Traffic 30-18 Filter Configuration - ZyXEL P-334W | User Guide - Page 375
334W User's Guide Chapter 31 SNMP Configuration This chapter explains SNMP Configuration menu 22. 31.1 About SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. Your Prestige supports - ZyXEL P-334W | User Guide - Page 376
Prestige 334W User's Guide An agent is a management software module that resides in a managed device (the Prestige). An agent the manager of some events. 31.2 Supported MIBs The Prestige supports RFC-1215 and MIB II as defined in RFC-1213 as well as ZyXEL private MIBs. The focus of the MIBs - ZyXEL P-334W | User Guide - Page 377
Prestige 334W User's Guide Menu 22 - SNMP Configuration SNMP: Get Community= public Set Community= public Trusted Host= 0.0.0.0 Trap: Community= public Destination= 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: - ZyXEL P-334W | User Guide - Page 378
Prestige 334W User's Guide 31.4 SNMP Traps The Prestige will send traps to the SNMP manager when any one SNMP RFC-1215) gets or sets requirements with wrong community (password). 6 whyReboot (defined in ZYXEL- A trap is sent with the reason of restart before rebooting MIB) when the system - ZyXEL P-334W | User Guide - Page 379
Prestige 334W User's Guide Chapter 32 System Security This chapter describes how to configure the system security on the Prestige. 32.1 System the Introducing the SMT chapter and the section on resetting the Prestige in the Introducing the Web Configurator chapter. 32.1.2 Configuring External - ZyXEL P-334W | User Guide - Page 380
Prestige 334W User's Guide Menu 23.2 - System Security - RADIUS Server Authentication Server: Active= No server for authentication is 1812. You need not change this value unless your network administrator instructs you to do so with additional information. Shared Secret Specify a password (up to - ZyXEL P-334W | User Guide - Page 381
Prestige 334W User's Guide Table 32-1 Menu 23.2 System Security : RADIUS Server RADIUS server for accounting is 1813. 1813 You need not change this value unless your network administrator instructs you to do so with additional information. Shared Secret Specify a password (up to 31 alphanumeric - ZyXEL P-334W | User Guide - Page 382
Prestige 334W User's Guide Menu 23.4 - System Security - IEEE802.1x Wireless Port Control= No Authentication Required ReAuthentication Timer (in second)= 1800 Idle Timeout (in second)= 3600 Key Management Protocol= - ZyXEL P-334W | User Guide - Page 383
Prestige 334W User's Guide Table 32-2 Menu 23.4 System Security : IEEE802.1x FIELD DESCRIPTION Idle Timeout (in second) The on a periodic basis. Setting of the WPA Group Key Update Timer is also supported in WPA-PSK mode. The ZyAIR default is 1800 seconds (30 minutes). System Security 32-5 - ZyXEL P-334W | User Guide - Page 384
Prestige 334W User's Guide Table 32-2 Menu 23.4 System Security : IEEE802.1x FIELD DESCRIPTION Authentication Databases The authentication database contains , you need to specify an external RADIUS server or create local user accounts on the Prestige for authentication. 32-6 System Security - ZyXEL P-334W | User Guide - Page 385
Prestige 334W User's Guide Chapter 33 System Information and Diagnosis This chapter covers the information Port Speed 3. Log and Trace 4. Diagnostic 5. Backup Configuration 6. Restore Configuration 7. Upload Firmware 8. Command Interpreter Mode 9. Call Control 10. Time and Date Setting 11. Remote - ZyXEL P-334W | User Guide - Page 386
Prestige 334W User's Guide Menu 24.1 - System Maintenance - Status 07:33:32 Wed. Dec Rx B/s Up Time Ethernet Address IP Address DESCRIPTION Identifies a port (WAN, LAN or WLAN) on the Prestige. Shows the port speed and duplex setting if you're using Ethernet Encapsulation and Down (line is down), - ZyXEL P-334W | User Guide - Page 387
Prestige 334W User's Guide Table 33-1 System Maintenance: Status Menu Fields FIELD DESCRIPTION IP Mask The IP mask of the port listed on the left. DHCP The DHCP setting of the port listed on the left. System up Time The total time the Prestige has been on. Name This is the Prestige's - ZyXEL P-334W | User Guide - Page 388
Prestige 334W User's Guide Menu 24.2.1 - System Maintenance - Information Name: P334W Routing: IP ZyNOS F/W Version: V3.60(JK.0)b1 | 01/28/2004 LAN Ethernet Address: 00:A0:C5:01:23:45 IP Address: 192.168.1.1 IP - ZyXEL P-334W | User Guide - Page 389
Prestige 334W User's Guide Menu 24.2.2 - System Maintenance - Change Console Port Speed Console Port Speed: 9600 Press ENTER to Confirm or ESC to Cancel: Figure 33-5 Menu 24.2.2 System Maintenance : Change Console Port Speed 33.3 Log and Trace There are two logging facilities in the Prestige. The - ZyXEL P-334W | User Guide - Page 390
Prestige 334W User's Guide Table 33-3 Menu 24.3.2 System Maintenance : Syslog and Accounting PARAMETER DESCRIPTION Syslog ) L02 Call Terminated C02 Call Terminated Jul 19 11:19:27 192.168.102.2 ZyXEL: board 0 line 0 channel 0, call 1, C01 Outgoing Call dev=2 ch=0 40002 Jul 19 11:19:32 192.168 - ZyXEL P-334W | User Guide - Page 391
Prestige 334W User's Guide 3. Filter log Filter log Message Format SdcmdSyslogSend(SYSLOG_FILLOG, SYSLOG_NOTICE, 202.132.155.97 ZyXEL: GEN[fffffffffffnordff0080] }S05>R01mF Mar 03 10:41:29 202.132.155.97 ZyXEL: GEN[00a0c5f502fnord010080] }S05>R01mF Mar 03 10:41:34 202.132.155.97 ZyXEL: IP[Src=192 - ZyXEL P-334W | User Guide - Page 392
Prestige 334W User's Guide 5. Firewall log Firewall Log Message Format SdcmdSyslogSend(SYSLOG_FIREWALL, SYSLOG_NOTICE, buf); buf = IP[Src=xx.xx.xx.xx : spo=xxxx Dst=xx.xx.xx.xx : dpo= - ZyXEL P-334W | User Guide - Page 393
Prestige 334W User's Guide IP Frame: ENET0-RECV Size: 44/ 44 Time: 17:02:44.262 Frame Type: IP Header: IP Version Header Length Type of Service Total Length Identification Flags Fragment Offset Time to Live Protocol Header Checksum Source IP Destination IP = 4 = 20 = 0x00 (0) = 0x002C (44) = - ZyXEL P-334W | User Guide - Page 394
Prestige 334W User's Guide Menu 24.4 - System Maintenance - Diagnostic TCP/IP 1. Ping Host 2. WAN DHCP enabled on the LAN or WAN as shown in Figure 33-9. LAN DHCP has already been discussed. The Prestige can act either as a WAN DHCP client (IP Address Assignment field in menu 4 or menu 11.3 is - ZyXEL P-334W | User Guide - Page 395
Prestige 334W User's Guide Table 33-4 System Maintenance Menu Diagnostic FIELD DESCRIPTION Ping available for dial-up connections using PPPoE or PPTP encapsulation. Reboot System Enter 11 to reboot the Prestige. Host IP Address= If you entered 1 in Ping Host, then enter the IP address of - ZyXEL P-334W | User Guide - Page 396
- ZyXEL P-334W | User Guide - Page 397
Prestige 334W User's Guide Chapter 34 Firmware and Configuration File Maintenance This chapter tells you how to backup and restore your configuration file as well as upload new firmware and configuration files. 34.1 Filename Conventions The configuration file (often called the romfile or rom-0) - ZyXEL P-334W | User Guide - Page 398
Prestige 334W User's Guide Table 34-1 Filename Conventions FILE TYPE INTERNAL NAME EXTERNAL NAME DESCRIPTION Configuration Rom-0 File This is the configuration filename on the Prestige. Uploading the rom-0 file replaces the entire ROM file system, including your Prestige configurations, system - ZyXEL P-334W | User Guide - Page 399
Prestige 334W User's Guide 34.2.1 Backup Configuration Follow the instructions see your Prestige manual. Press ENTER Prestige to your computer and renames it "config.rom". See earlier in this chapter for more information on filename conventions. Step 7. Enter "quit" to exit the ftp prompt. Firmware - ZyXEL P-334W | User Guide - Page 400
Prestige 334W User's Guide 34.2.3 Example of FTP Commands from the Command Line 331 Enter PASS command Password: 230 Logged in ftp> bin 200 Type I OK ftp> get rom-0 zyxel only if your ISP or service administrator has enabled this option mode. Configuration and firmware files should be transferred - ZyXEL P-334W | User Guide - Page 401
334W User's Guide 3. The IP address in the Secured Client IP field in menu 24.11 does not match the client IP. If it does not match, the Prestige will disconnect the Telnet session immediately. 4. You have an SMT console session running. 34.2.6 Backup Configuration Using TFTP The Prestige supports - ZyXEL P-334W | User Guide - Page 402
Prestige 334W User's Guide 34.2.8 GUI-based TFTP Clients The following table describes some of the fields that you may see in GUI-based TFTP clients. Table 34-3 General Commands for GUI-based TFTP Clients COMMAND DESCRIPTION Host Enter the IP address of the Prestige. 192.168.1.1 is the - ZyXEL P-334W | User Guide - Page 403
Prestige 334W User's Guide 34.3.1 Restore Using FTP For details about backup using (T)FTP please refer to earlier sections on FTP and TFTP file upload in this chapter. Menu 24.6 -- System Maintenance - Restore Configuration To transfer the firmware please see your Prestige manual. Press ENTER to - ZyXEL P-334W | User Guide - Page 404
Prestige 334W User's Guide 34.3.2 Restore Using FTP Session Example ftp> put config.rom rom-0 200 the instructions in Menu 24.7.2 - System Maintenance - Upload System Configuration File. WARNING! DO NOT INTERRUPT THE FILE TRANSFER PROCESS AS THIS MAY PERMANENTLY DAMAGE YOUR PRESTIGE. 34.4.1 Firmware - ZyXEL P-334W | User Guide - Page 405
Prestige 334W User's Guide Menu 24.7.1 - System Maintenance - Upload System Firmware To upload the system firmware, follow the procedure below: 1. uploading system firmware using TFTP (note that you must remain on this menu to upload system firmware using TFTP), please see your manual. Press ENTER - ZyXEL P-334W | User Guide - Page 406
Prestige 334W User's Guide 34.4.3 FTP File Upload Command from the DOS Prompt Example Step 1. Launch the FTP client on your computer. Step 2. Enter "open", followed by a space and the IP address of your Prestige File Upload The Prestige also supports the uploading of firmware files using TFTP - ZyXEL P-334W | User Guide - Page 407
Prestige 334W User's Guide To use TFTP, your computer must have both telnet and TFTP clients. To transfer the firmware and the configuration file, follow the procedure shown next. Step 1. Use telnet from your computer to connect to the Prestige and log in. Because TFTP does not have any security - ZyXEL P-334W | User Guide - Page 408
- ZyXEL P-334W | User Guide - Page 409
Prestige 334W User's Guide Chapter 35 System Maintenance This chapter leads you through SMT menus 24.8 to 24.10. 35.1 Command Interpreter Mode The Command Interpreter (CI) is a part of the main system firmware. The CI provides much of the same functionality as the SMT, while adding some low-level - ZyXEL P-334W | User Guide - Page 410
Prestige 334W User's Guide The |symbol means "or". For example, sys filter ZyXEL Communications Corp. ras> ? Valid commands are: sys exit device ether poe pptp config wlan ip ipsec ppp bridge hdap radius 8021x ras> Figure 35-2 Valid Commands 35.2 Call Control Support The Prestige - ZyXEL P-334W | User Guide - Page 411
Prestige 334W User's Guide 35.2.1 Budget Management Menu 24.9.1 shows the budget management statistics for outgoing calls. Enter 1 from Menu 24.9 - System Maintenance - Call Control to bring up the - ZyXEL P-334W | User Guide - Page 412
Prestige 334W User's Guide 35.2.2 Call History Table 35-2 Call History Fields FIELD DESCRIPTION Phone Number The PPPoE service names are shown here. Dir This shows whether the call was the time manually or get the current time and date from an external server when 35-4 System - ZyXEL P-334W | User Guide - Page 413
Prestige 334W User's Guide you turn on your Prestige. Menu 24.10 allows you to update the time and date settings of your Prestige. The real time is then displayed in the Prestige 5. Backup Configuration 6. Restore Configuration 7. Upload Firmware 8. Command Interpreter Mode 9. Call Control 10. - ZyXEL P-334W | User Guide - Page 414
Prestige 334W User's Guide FIELD Time Protocol Table 35-3 Time and Date Setting Fields DESCRIPTION Enter the time service protocol that your timeserver sends when you turn on the Prestige. Not all timeservers support (RFC-868). None enter the time manually. Time Server Address Enter the IP - ZyXEL P-334W | User Guide - Page 415
Prestige 334W User's Guide i. On leaving menu 24.10 after making changes. ii. When the Prestige starts up, if there is a timeserver configured in menu 24.10. iii. 24-hour intervals after starting. System Maintenance 35-7 - ZyXEL P-334W | User Guide - Page 416
- ZyXEL P-334W | User Guide - Page 417
Prestige 334W User's Guide Chapter 36 Remote Management This chapter covers remote management (SMT menu 24.11). 36.1 Remote Management Remote management allows you to determine which services/protocols can access which Prestige interface (if any) from which computers. You may manage your - ZyXEL P-334W | User Guide - Page 418
Prestige 334W User's Guide The following table describes the fields in this screen. Table 36-1 Menu 24.11 - Remote Management Control FIELD DESCRIPTION EXAMPLE Telnet Server FTP Server Web Server SNMP Service DNS Service Each of these read-only labels denotes a service or protocol. Port - ZyXEL P-334W | User Guide - Page 419
Prestige 334W User's Guide Chapter 37 Call Scheduling Call scheduling (applicable for PPPoA or PPPoE encapsulation only) allows you to dictate when a remote node should be called and for how long. 37.1 Introduction to Call Scheduling The call scheduling feature allows the Prestige to manage a - ZyXEL P-334W | User Guide - Page 420
Prestige 334W User's Guide To setup a schedule set, select the schedule set you want to 26.1 Schedule Set Setup If a connection has been already established, your Prestige will not drop it. Once the connection is dropped manually or it times out, then that remote node can't be triggered up until - ZyXEL P-334W | User Guide - Page 421
Prestige 334W User's Guide Table 37-1 Menu 26.1 Schedule Set Setup FIELD Weekday: Day DESCRIPTION If you selected Weekly in the How Often field above, then select the day(s) - ZyXEL P-334W | User Guide - Page 422
Prestige 334W User's Guide Menu 11.1 - Remote Node Profile Rem Node Name= MyISP Active= Yes Route= IP Encapsulation= PPPoE Service Type= Standard Service Name= Outgoing: My Login= My Password= ******** Retype to Confirm= ******** Authen= CHAP/PAP Edit IP= No Telco Option: Allocated Budget(min)= - ZyXEL P-334W | User Guide - Page 423
SMT VPN/IPSec Part IX: SMT VPN/IPSec This part provides information about configuring VPN/IPSec for secure communications. See the web configurator parts of this guide for background information on features configurable by web configurator and SMT. IX - ZyXEL P-334W | User Guide - Page 424
- ZyXEL P-334W | User Guide - Page 425
Prestige 334W User's Guide Chapter 38 VPN/IPSec Setup This chapter introduces the VPN SMT menus. 38.1 VPN/IPSec Overview The VPN/IPSec main SMT menu has these main submenus: 1. Define VPN policies in menu 27.1 submenus, including security policies, endpoint IP addresses, peer IPSec router IP address - ZyXEL P-334W | User Guide - Page 426
Prestige 334W User's Guide Menu 27 - VPN/IPSec Setup 1. IPSec Summary 2. SA Monitor Enter Encap -----Tunnel Tunnel Tunnel IPSec Algorithm Secure GW Addr ESP DES MD5 193.81.13.2 AH SHA1 zw50test.zyxel. ESP DES MD5 0.0.0.0 FIELD # Select Command= None Select Rule= N/A Press ENTER to Confirm or - ZyXEL P-334W | User Guide - Page 427
Prestige 334W User's Guide FIELD Name A Local Addr Start Local Addr End Encap IPSec Menu 27.1.1 IPSec Setup is configured to Single, this is a static IP address on the LAN behind your Prestige. When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to Range, this is the beginning ( - ZyXEL P-334W | User Guide - Page 428
Prestige 334W User's Guide FIELD Key Mgt Remote Addr Start Remote Addr End Secure GW Addr Table 38-1 Menu 27.1 IPSec Summary DESCRIPTION This field displays the SA's type of key management, (IKE or Manual 15 characters are displayed) of the IPSec router with which you are making the VPN connection - ZyXEL P-334W | User Guide - Page 429
Prestige 334W User's Guide Table 38-1 Menu 27.1 IPSec Summary FIELD DESCRIPTION EXAMPLE Select Command Press [SPACE BAR] to choose from None, Edit, Delete, Go To Rule, Next Page - ZyXEL P-334W | User Guide - Page 430
Prestige 334W User's Guide Menu 27.1.1 - IPSec Setup Index= 1 Name= Taiwan Active= Yes Keep Alive= No Nat Traversal= No Local ID type Content= My IP Addr= 0.0.0.0 Peer ID type= IP Content= Secure Gateway Address= zw50test.zyxel.com.tw Protocol= 0 DNS Server= 0.0.0.0 Local: Addr Type= - ZyXEL P-334W | User Guide - Page 431
Prestige 334W User's Guide Table 38-2 Menu 27.1.1 IPSec Setup FIELD DESCRIPTION Nat Traversal Select this check box to enable NAT traversal. NAT traversal allows you to set up a VPN connection when there are NAT routers between the two IPSec routers. The remote IPSec router must also have NAT - ZyXEL P-334W | User Guide - Page 432
Prestige 334W User's Guide Table 38-2 Menu 27.1.1 IPSec Setup FIELD DESCRIPTION EXAMPLE Content When you select IP in the Peer ID Type field, type the IP address of the computer with which you will make the VPN connection or leave the field blank to have the Prestige IPSec router's configured - ZyXEL P-334W | User Guide - Page 433
Prestige 334W User's Guide Table 38-2 Menu 27.1.1 IPSec Setup FIELD DESCRIPTION End Enter Type field is configured to Single, enter a static IP address on the network behind the remote IPSec router. When the Addr Type field is configured to Range, enter the beginning (static) IP address, in - ZyXEL P-334W | User Guide - Page 434
Prestige 334W User's Guide Table 38-2 Menu 27.1.1 IPSec Setup FIELD DESCRIPTION EXAMPLE Port Start 0 is the default and signifies any port. Type a port number from 0 to 65535. 0 Someone behind the remote IPSec router cannot create a VPN tunnel when attempting to connect using a port number - ZyXEL P-334W | User Guide - Page 435
Prestige 334W User's Guide Menu 27.1.1.1 - IKE Setup Phase 1 Negotiation Mode= Main PSK= qwer1234 Multiple SAs connecting through a secure gateway must have the same negotiation mode. Main PSK Prestige gateways authenticate an IKE VPN session by matching pre-shared keys. Pre-shared keys are best - ZyXEL P-334W | User Guide - Page 436
Prestige 334W User's Guide Table 38-3 Menu 27.1.1.1 IKE Setup FIELD DESCRIPTION which can be used to encrypt and decrypt the message or to generate and verify a message authentication code. Prestige DES encryption algorithm uses a 56-bit key. DES Triple DES (3DES), is a variation on DES that - ZyXEL P-334W | User Guide - Page 437
Prestige 334W User's Guide Table 38-3 Menu 27.1.1.1 IKE Setup FIELD DESCRIPTION EXAMPLE 38.5 Manual Setup You only configure Menu 27.1.1.2 - Manual Setup when you select Manual in the Key Management field in Menu 27.1.1 - IPSec Setup. Manual key management is useful if you have problems with - ZyXEL P-334W | User Guide - Page 438
Prestige 334W User's Guide Menu 27.1.1.2 - Manual Setup Active Protocol= ESP Tunnel ESP Setup SPI (Decimal)= Encryption Algorithm= DES Key1= Key2= N/A Key3= N/A Authentication Algorithm= MD5 Key= N/A AH Setup SPI (Decimal)= N/A Authentication Algorithm= N/A - ZyXEL P-334W | User Guide - Page 439
Prestige 334W User's Guide Table 38-5 Menu 27.1.1.2 Manual Setup FIELD DESCRIPTION EXAMPLE Key3 Enter a unique eight-character key. It can be comprised of any character including spaces (but trailing spaces are truncated). Authentication - ZyXEL P-334W | User Guide - Page 440
- ZyXEL P-334W | User Guide - Page 441
Prestige 334W User's Guide Chapter 39 SA Monitor This chapter teaches you how to manage not timeout until the SA lifetime period expires. See the Web configurator part on keep alive to have the Prestige renegotiate an IPSec SA when the SA lifetime expires, even if there is no traffic. 39.2 Using SA - ZyXEL P-334W | User Guide - Page 442
Prestige 334W User's Guide The following table describes the fields in this menu. Table 39-1 are MD5 (default - 128 bits) and SHA -1(160 bits). Both AH and ESP increase Prestige processing requirements and communications latency (delay). Select Press [SPACE BAR] to choose from Refresh, Disconnect - ZyXEL P-334W | User Guide - Page 443
Part X: Appendices and Index This section provides some Appendices and an Index. X - ZyXEL P-334W | User Guide - Page 444
- ZyXEL P-334W | User Guide - Page 445
Prestige 334W User's Guide Appendix A PPPoE PPPoE in Action An ADSL modem bridges a PPP session next figure). One PVC can support any number of PPP sessions from your LAN. PPPoE provides access control and billing functionality in a manner similar to dial-up services using PPP. Benefits of PPPoE - ZyXEL P-334W | User Guide - Page 446
Prestige 334W User's Guide Diagram A-1 Single-PC per Modem Hardware Configuration How PPPoE Works The PPPoE driver makes the Ethernet appear as a serial link to the PC and the - ZyXEL P-334W | User Guide - Page 447
Prestige 334W User's Guide The Prestige as a PPPoE Client When using the Prestige as a PPPoE client, the PCs on the LAN see only Ethernet and are not aware of PPPoE. This alleviates the administrator from having to manage the PPPoE clients on the individual PCs. Diagram A-2 The Prestige as a PPPoE - ZyXEL P-334W | User Guide - Page 448
- ZyXEL P-334W | User Guide - Page 449
Prestige 334W User's Guide Appendix B PPTP What is PPTP? PPTP (Point-to-Point Tunneling Protocol) is a Microsoft proprietary protocol (RFC 2637 for PPTP is informational only) to tunnel PPP frames. How can we transport PPP frames from a PC to a broadband modem over Ethernet? A solution is to build - ZyXEL P-334W | User Guide - Page 450
Prestige 334W User's Guide In Windows VPN or PPTP Pass-Through feature, the PPTP tunneling is created from Windows 95, 98 and NT clients to an NT server in a remote location. The pass-through feature allows users on the network to access a different remote server using the Prestige's Internet - ZyXEL P-334W | User Guide - Page 451
Prestige 334W User's Guide The control connection runs over TCP. Similar to L2TP, a tunnel control connection is first established before call control messages can be exchanged. Please note that a tunnel control connection supports multiple call sessions. The following diagram depicts the message - ZyXEL P-334W | User Guide - Page 452
- ZyXEL P-334W | User Guide - Page 453
Prestige 334W User's Guide Appendix C NetBIOS Filter Commands The following describes the NetBIOS packet filter commands. Introduction NetBIOS (Network Basic Input/Output System) are TCP or UDP broadcast packets - ZyXEL P-334W | User Guide - Page 454
Prestige 334W User's Guide Table C-1 NetBIOS Filter Default Settings NAME Between LAN and WAN IPSec Packets Trigger dial DESCRIPTION This field displays whether NetBIOS packets are blocked or forwarded - ZyXEL P-334W | User Guide - Page 455
Command: sys filter netbios config 4 off This command stops NetBIOS commands from initiating calls. Prestige 334W User's Guide NetBIOS Filter Commands C-3 - ZyXEL P-334W | User Guide - Page 456
- ZyXEL P-334W | User Guide - Page 457
Prestige 334W User's Guide Appendix D Log Descriptions Configure centralized logs using the Login Fail WEB Login Successfully WEB Login Fail DESCRIPTION The router has adjusted its time based on information from the time server. The router failed to get information from the time server. A - ZyXEL P-334W | User Guide - Page 458
Prestige 334W User's Guide Chart 2 System Maintenance Logs LOG MESSAGE TELNET Login Successfully TELNET Login on to the router via telnet. Someone has failed to log on to the router via telnet. Someone has logged on to the router via ftp. Someone has failed to log on to the router via ftp. The - ZyXEL P-334W | User Guide - Page 459
Prestige 334W User's Guide CATEGORY JAVBLK Chart 4 Content Filtering Logs LOG MESSAGE IP/Domain Name DESCRIPTION The Prestige blocked access to this IP address or domain name because of a forbidden service such as: ActiveX, a Java applet, a cookie, or a proxy. TYPE 0 3 4 5 8 CODE 0 0 1 2 3 4 5 - ZyXEL P-334W | User Guide - Page 460
Prestige 334W User's Guide TYPE 11 12 13 14 15 16 CODE 0 0 1 0 0 0 0 0 Chart 5 ICMP Type and Code Explanations DESCRIPTION Echo message Time Exceeded Time to live exceeded in transit Fragment reassembly time exceeded Parameter Problem Pointer indicates the error Timestamp Timestamp request - ZyXEL P-334W | User Guide - Page 461
Prestige 334W User's Guide Appendix E Setting up Your Computer's IP Address All computers must have , configure the TCP/IP settings in order to "communicate" with your network. If you manually assign IP information instead of using dynamic assignment, make sure that your computers have IP addresses - ZyXEL P-334W | User Guide - Page 462
Prestige 334W User's Guide 1. Click Start, Settings, Control Panel and double-click the Network icon to open the Network window. 2. The Network window Configuration tab displays a list of installed - ZyXEL P-334W | User Guide - Page 463
Prestige 334W User's Guide d. Select Client for Microsoft Networks from the list of network clients and then click OK. e. Restart your computer so the changes you made take effect. - ZyXEL P-334W | User Guide - Page 464
Prestige 334W User's Guide 2. Click the DNS Configuration tab. -If you do not know your DNS information, select Disable DNS. -If you know your DNS information, select Enable DNS - ZyXEL P-334W | User Guide - Page 465
Prestige 334W User's Guide 5. Click OK to close the Network window. Insert the Windows CD if prompted. 6. Turn on your Prestige and restart your computer when prompted. Checking/Modifying Your Computer's IP Address 1. Click Start and then Run. 2. In the Run window, type "winipcfg" and then - ZyXEL P-334W | User Guide - Page 466
Prestige 334W User's Guide Windows 2000/NT/XP 1. In Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel. 2. In Windows XP, click Network - ZyXEL P-334W | User Guide - Page 467
4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties. Prestige 334W User's Guide Setting up Your Computer's IP Address E-7 - ZyXEL P-334W | User Guide - Page 468
Prestige 334W User's Guide 5. The Internet Protocol TCP/IP Properties window opens (the General tab in Windows XP). - To have your computer assigned a dynamic IP address, click Obtain an - ZyXEL P-334W | User Guide - Page 469
Prestige 334W User's Guide 6. -If you do not know your gateway's IP address, remove gateways. -In TCP/IP Gateway Address, type the IP address of the default gateway in Gateway. To manually configure a default metric (the number of transmission hops), clear the Automatic metric check box and type a - ZyXEL P-334W | User Guide - Page 470
Prestige 334W User's Guide 7. In the Internet Protocol TCP/IP Properties window (the General tab window. 9. Click OK to close the Local Area Connection Properties window. 10. Turn on your Prestige and restart your computer (if prompted). Checking/Modifying Your Computer's IP Address 1. Click Start, - ZyXEL P-334W | User Guide - Page 471
Macintosh OS 8/9 1. Click the Apple menu, Control Panel and double-click TCP/IP to open the TCP/IP Control Panel. Prestige 334W User's Guide 2. Select Ethernet built-in from the Connect via list. Setting up Your Computer's IP Address E-11 - ZyXEL P-334W | User Guide - Page 472
Prestige 334W User's Guide 3. For dynamically assigned settings, select Using DHCP Server from the Configure: list. 4. For statically assigned settings, do the following: -From the Configure box, select Manually. -Type your IP address in the IP Address box. -Type your subnet mask in the Subnet mask - ZyXEL P-334W | User Guide - Page 473
from the Show list. - Click the TCP/IP tab. Prestige 334W User's Guide 3. For dynamically assigned settings, select Using DHCP from the Configure list. 4. For statically assigned settings, do the following: -From the Configure box, select Manually. -Type your IP address in the IP Address box - ZyXEL P-334W | User Guide - Page 474
- ZyXEL P-334W | User Guide - Page 475
Prestige 334W User's Guide Appendix F Wireless LAN and IEEE 802.11 A wireless LAN (WLAN) provides a flexible data communications system that you can use to access various services (navigating the Internet, email, printer services, etc.) without the use of a cabled connection. In effect a wireless - ZyXEL P-334W | User Guide - Page 476
Prestige 334W User's Guide Spread Spectrum (DSSS) and Frequency-Hopping Spread Spectrum (FHSS), in the up an independent network, which is commonly referred to as an Ad-hoc network or Independent Basic Service Set (IBSS). See the following diagram of an example of an Ad-hoc wireless LAN. Diagram - ZyXEL P-334W | User Guide - Page 477
Prestige 334W User's Guide points can provide wireless coverage for an entire building or campus. All communications between stations or between a station and a wired network client go through the access point. The Extended Service Set (ESS) shown in the next figure consists of a series of - ZyXEL P-334W | User Guide - Page 478
- ZyXEL P-334W | User Guide - Page 479
Prestige 334W User's Guide central user account management. User access control is done through manual modification of the MAC address table on the access point. identification that allows for roaming. • Support for RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized - ZyXEL P-334W | User Guide - Page 480
Prestige 334W User's Guide RADIUS Server Authentication Sequence The following figure depicts a typical wireless network with a remote RADIUS server for user authentication using EAPOL (EAP Over LAN). Client computer - ZyXEL P-334W | User Guide - Page 481
Prestige 334W User's Guide imposes a management overhead. EAP-TTLS (Tunneled Transport Layer Service) EAP-TTLS is an extension of the EAP-TLS authentication thus client identity is protected. For client authentication, EAP-TTLS supports EAP methods and legacy authentication methods such as PAP, CHAP - ZyXEL P-334W | User Guide - Page 482
Prestige 334W User's Guide hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5 and EAPMSCHAPv2, for client authentication. For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic - ZyXEL P-334W | User Guide - Page 483
Prestige 334W User's Guide Appendix I Antenna Selection and Positioning Recommendation An antenna couples RF signals onto air. A transmitter within a wireless device sends an RF signal to the antenna, which - ZyXEL P-334W | User Guide - Page 484
Prestige 334W User's Guide Types of Antennas For WLAN There are two types of antennas used for wireless LAN applications. • Omni-directional antennas send the RF signal out in - ZyXEL P-334W | User Guide - Page 485
Prestige 334W User's Guide Appendix J Brute-Force Password Guessing Protection The following describes the commands for enabling, disabling and configuring the brute-force password guessing protection mechanism for the - ZyXEL P-334W | User Guide - Page 486
- ZyXEL P-334W | User Guide - Page 487
Prestige 334W User's Guide Appendix K Triangle Route The Ideal Setup When the firewall is on, your Prestige acts as a secure gateway between your LAN and the Internet. In an ideal network topology, all incoming and outgoing network traffic passes through the Prestige to protect your LAN against - ZyXEL P-334W | User Guide - Page 488
334W User's Guide Diagram K-2 "Triangle Route" Problem The "Triangle Route" Solutions This section presents you two solutions to the "triangle route" problem. IP Aliasing IP alias allows you to partition your network into logical sections over the same Ethernet interface. Your Prestige supports - ZyXEL P-334W | User Guide - Page 489
Prestige 334W User's Guide Diagram K-3 IP Alias Gateways on the WAN Side A second solution to the "triangle route" problem is to put all of your network gateways on the WAN side as the following figure shows. This ensures that all incoming network traffic passes through your Prestige to your LAN. - ZyXEL P-334W | User Guide - Page 490
Prestige 334W User's Guide Step 3. Use the following commands to allow/disallow triangle route. sys firewall ignore triangle all off This command allows triangle route. sys firewall ignore triangle all on This command disallows triangle route. K-4 Triangle Route - ZyXEL P-334W | User Guide - Page 491
Prestige 334W User's Guide 8 802.1x 8-16 A Active 25-2 Address Assignment 3-10, 3-11 Address Resolution Protocol 1-2 Copyright ii Cost Of Transmission 26-2 Customer Support vi D Data Encryption 8-4 DDNS Type 21-4 Default 19-11 Denial of Service 29-1 DHCP ....3-1, 3-12, 5-3, 6-1, 6-5, - ZyXEL P-334W | User Guide - Page 492
Prestige 334W User's Guide Disclaimer ii Distribution System F-3 DNS 14-11, 23-3 DNS Server For VPN Host 16-7 Domain Name 3-1, 3-11, 10-7, 18-3, 33-3 DoS (Denial of Service Methods 29-1 Remote Management 29-1 SMT Menus 29-1 Firmware File Maintenance 19-6, 19-8 Fragment Threshold 23-7 - ZyXEL P-334W | User Guide - Page 493
10 I i.e See Syntax Conventions IBSS ........ 7-1. See Independent Basic Service Set Idle Timeout 25-4, 25-5 IEEE 802.11 F-1 Deployment Issues 1-4, 23-6 IP Alias Setup 23-5 IP Multicast 1-4 Index Prestige 334W User's Guide Internet Group Management Protocol (IGMP 1-4 IP Pool 6-5, 6-6, 23 - ZyXEL P-334W | User Guide - Page 494
Prestige 334W User's Guide N Nailed-up Connection 25-4 Nailed-Up Connection 25-5 NAT........ 3-7, 10-6, 10-7, 23-6 Q Quick Start Guide 2-1 R RADIUS 1-2, 8-29 RAS 33-4 Related Documentation xxxi Relay 23-2 Rem Node Name 25-2 Remote Authentication Dial In User Service .. See RADIUS Remote - ZyXEL P-334W | User Guide - Page 495
Service v Service Name 25-5 Service Set 7-6 Service Type 24-2, 25-2 Services 10-6, 10-7, 13-8, 18-3 Session Initated Protocol 18-2 setup a schedule 37-2 SIP 18-2 SMT Menu Overview 20-2 Index Prestige 334W User's Guide 24-2, 25-7, 262, 33-4 Support Disk xxxi Syntax Conventions xxxi Syslog - ZyXEL P-334W | User Guide - Page 496
Prestige 334W User's Guide T TCP/IP ..... 6-6, 14-4, 23-3, Service.........See TTLS U Universal Plug and Play 1-3 Universal Plug and Play (UPnP 12-1, 12-3 UNIX Syslog 33-5 UNIX syslog parameters 33-5 Upload Firmware -1, 34-2 ZyNOS F/W Version 33-3, 34-1 ZyXEL Limited Warranty Note v L-6 Index
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
-
421
-
422
-
423
-
424
-
425
-
426
-
427
-
428
-
429
-
430
-
431
-
432
-
433
-
434
-
435
-
436
-
437
-
438
-
439
-
440
-
441
-
442
-
443
-
444
-
445
-
446
-
447
-
448
-
449
-
450
-
451
-
452
-
453
-
454
-
455
-
456
-
457
-
458
-
459
-
460
-
461
-
462
-
463
-
464
-
465
-
466
-
467
-
468
-
469
-
470
-
471
-
472
-
473
-
474
-
475
-
476
-
477
-
478
-
479
-
480
-
481
-
482
-
483
-
484
-
485
-
486
-
487
-
488
-
489
-
490
-
491
-
492
-
493
-
494
-
495
-
496
 |
 |
Prestige 334W
802.11g Wireless Broadband Router with Firewall
User’s Guide
Version 3.60
May 2004