ZyXEL Communications P-792H Installation instructions

Prestige 792H
G.SHDSL 4-port Security Gateway
Compact Guide
Version 3.40(BZ.0)
March 2004

Prestige 792H
2
Table of Contents
1 Introducing the Prestige ................................................................................................................. 3
1.1 Certifications............................................................................................................................. 3
2 Hardware......................................................................................................................................... 4
2.1 Rear Panel Connections ............................................................................................................ 4
2.2 The Front Panel LEDs............................................................................................................... 5
3 Setting Up Your Computer’s IP Address...................................................................................... 6
3.1 Windows 95/98/Me................................................................................................................... 7
3.2 Windows 2000/NT/XP.............................................................................................................. 9
3.3 Checking/Updating Your Computer’s IP Address.................................................................. 11
3.4 Testing the Connection to the Prestige.................................................................................... 11
4 Configuring Your Prestige ........................................................................................................... 11
4.1 Accessing Your Prestige Via Web Configurator..................................................................... 12
4.2 Common Screen Command Buttons....................................................................................... 13
4.3 Internet Access Using the Wizard........................................................................................... 13
4.4 Test Your Internet Connection................................................................................................ 19
5 Advanced Configuration .............................................................................................................. 19
5.1 Network Address Translation Overview................................................................................. 19
5.2 Configuring SUA Server......................................................................................................... 19
5.3 Firewall Overview................................................................................................................... 21
5.4 Enabling the Firewall .............................................................................................................. 22
5.5 Procedure for Configuring Firewall Rules .............................................................................. 22
5.6 Configuring Source and Destination Addresses...................................................................... 26
6 Troubleshooting ............................................................................................................................ 27

Prestige 792H
3
1 Introducing the Prestige
The Prestige 792H G.SHDSL 4-port Security Gateway is a cost effective DSL solution designed for
medium sized business networks connecting to the Internet or remote office networks. Key features
of the Prestige include high-speed Internet access, robust firewall security, VPN (Virtual Private
Network) support, auto fail-over and fail-back WAN dial backup solution and effective network
bandwidth management. See your User’s Guide for more details on all Prestige features.
You should have an Internet account already set up and have been given most of the following
information.
INTERNET ACCOUNT INFORMATION
Your device’s WAN IP Address (if given): __________________
DNS Server IP Address (if given): Primary __________________, Secondary _________________
Virtual Path Identifier (VPI): ____________
Virtual Channel Identifier (VCI): ____________
Multiplexing (VC-based or LLC-based): VC LLC
Encapsulation:
Transfer Rate:
Standard Mode: (Select one of the choices below)
 RFC 1483
 ENET ENCAP Ethernet Encapsulation Gateway IP Address: ____________________
 PPPoA User Name: ____________ Password: ____________
 PPPoE Service Name: ____________
User Name: ____________ Password: ____________
1.1 Certifications
1. Go to www.zyxel.com
2. Select your product from the drop-down list box on the ZyXEL home page to go to that
product's page.
3. Select the certification you wish to view from this page.

Prestige 792H
4
2 Hardware
2.1 Rear Panel Connections
Figure 1 P792H Hardware Connections
Table 1 Prestige Rear Panel Description
LABEL DESCRIPTION
POWER Connect to a power source using the power adapter for your region (see your User’s
Guide).
RESET You only need to use this button if you’ve forgotten the Prestige’s password. It returns the
Prestige to the factory defaults (password is 1234, LAN IP address 192.168.1.1, see your
User’s Guide for details).
LAN 10/100
Ethernet Ports
Connect computers or hubs to these ports with Ethernet cables. These ports are auto-
negotiating (can connect at 10 or 100Mbps) and auto-crossover (automatically adjust to
straight-through or crossover Ethernet cable.

Prestige 792H
5
Table 1 Prestige Rear Panel Description
LABEL DESCRIPTION
CON/AUX switch
CON/AUX port
Only connect this port if you want to configure the Prestige using the SMT via console port
or set up a backup WAN connection; see your User’s Guide for details.
Set this switch to the “CON” side to use the CON/AUX port as a console port for local
device configuration and management. Connect the Rj-45 of the console cable to the
console port of the Prestige and the 9-pin female end to a serial port (COM1, COM2 or
other COM port) on your computer. Your computer should have a terminal emulation
communications program (such as HyperTerminal) set to VT100 terminal emulation, no
parity, 8 data bits, 1 stop bit, no flow control and 9600 bps port speed.
Set this switch to the “AUX” side to use the CON/AUX port as an auxiliary dial-up WAN
connection. Connect the RJ-45 end of the console cable to the CON/AUX port and use the
9-pin end of the cable to connect to a modem or TA.
DSL Connect to a telephone jack using a telephone wire.
2.2 The Front Panel LEDs
Turn on the Prestige by pressing the ON/OFF button.
The PWR/SYS LED turns on when you connect the power. The PWR and SYS LED blinks while
performing system testing and then stays on if the testing is successful. The PPP/ACT, DSL and
four LAN LEDs turn on if they are properly connected. Refer to the User’s Guide for more detailed
LED descriptions.
Figure 2 P792H Front Panel LED Description
Table 2 P792H Front Panel LED Description
LED COLOR STATUS DESCRIPTION
PWR/SYS Green On The Prestige is receiving power and functioning properly.

Prestige 792H
6
Table 2 P792H Front Panel LED Description
LED COLOR STATUS DESCRIPTION
Blinking The Prestige is rebooting.
Red On Power to the Prestige is too low.
Off The system is not ready or has malfunctioned.
On The Prestige is linked successfully to a DSLAM.Green
Blinking The Prestige is initializing the G.SHDSL line.
DSL
Off The G.SHDSL link is down.
Green Blinking The Prestige is sending/receiving non-PPP data.
On The Prestige has a PPP (PPPoA or PPPoE) connection.Amber
Blinking The Prestige is sending/receiving PPPoA or PPPoE traffic.
PPP/ACT
Off The system is ready, but is not sending/receiving data.
On The Prestige has a successful 10Mb Ethernet connection.Green
Blinking The Prestige is sending/receiving data.
On The Prestige has a successful 100Mb Ethernet connection.Amber
Blinking The Prestige is sending/receiving data.
LAN 1 ~ 4
Off The LAN is not connected.
3 Setting Up Your Computer’s IP
Address
Skip this section if your computer is already set up to accept a dynamic IP
address. This is the default for most new computers.
The Prestige is already set up to assign your computer an IP address. Use this section to set up your
computer to receive an IP address or assign it a static IP address in the 192.168.1.2 to 192.168.1.254
range with a subnet mask of 255.255.255.0. This is necessary to ensure that your computer can
communicate with your Prestige.
Your computer must have an Ethernet card and TCP/IP installed. TCP/IP should already be installed
on computers using Windows NT/2000/XP, Macintosh OS 7 and later operating systems.

Prestige 792H
7
3.1 Windows 95/98/Me
1. Click Start, Settings, Control Panel and double-click the Network icon to open the Network
window.
2. The Network window Configuration tab displays a list of installed components. You need a
network adapter, the TCP/IP protocol and Client for Microsoft Networks.
3. In the Network window Configuration tab,
select your network adapter's TCP/IP entry and
click Properties.

Prestige 792H
8
4. Click the IP Address tab.
-If your IP address is dynamic, select Obtain an IP
address automatically.
-If you have a static IP address, select Specify an IP
address and type your information into the IP
Address and Subnet Mask fields.
5. Click the DNS Configuration tab.
-If you do not know your DNS information, select
Disable DNS.
-If you know your DNS information, select Enable
DNS and type the information in the fields below (you
may not need to fill them all in).

Prestige 792H
9
6. Click the Gateway tab.
-If you do not know your gateway’s IP address,
remove previously installed gateways.
-If you have a gateway IP address, type it in the New
gateway field and click Add.
7. Click OK to save and close the TCP/IP Properties window.
8. Click OK to close the Network window. Insert the Windows CD if prompted.
9. Turn on your Prestige and restart your computer when prompted.
Verifying Your Computer’s IP Address
1. Click Start and then Run.
2. In the Run window, type "winipcfg" and then click OK to open the IP Configuration window.
3. Select your network adapter. You should see your computer's IP address, subnet mask and default
gateway.
3.2 Windows 2000/NT/XP
1. In Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel.
2. In Windows XP, click Network Connections.
In Windows 2000/NT, click Network and Dial-up Connections.
3. Right-click Local Area Connection and then click Properties.
4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties.

Prestige 792H
10
5. The Internet Protocol TCP/IP Properties screen opens (the
General tab in Windows XP).
- To have your computer assigned a dynamic IP address, click
Obtain an IP address automatically.
If you know your DNS sever IP address(es), type them in the
Preferred DNS server and/or Alternate DNS server fields.
-To configure a static IP address, click Use the following IP
Address and fill in the IP address (choose one
from192.168.1.2 to 192.168.1.254), Subnet mask
(255.255.255.0), and Default gateway (192.168.1.1) fields.
Then enter your DNS server IP address(es) in the Preferred
DNS server and/or Alternate DNS server fields.
If you have more than two DNS servers, click Advanced, the
DNS tab and then configure them using Add.
6. Click Advanced. Remove any previously installed gateways in
the IP Settings tab and click OK to go back to the Internet
Protocol TCP/IP Properties screen.
7. Click OK to close the Internet Protocol (TCP/IP) Properties
window.
8. Click OK to close the Local Area Connection Properties
window.

Prestige 792H
11
3.3 Checking/Updating Your Computer’s IP Address
1. In the computer, click Start, (All) Programs, Accessories and then Command Prompt.
2. In the Command Prompt window, type "ipconfig" and then press ENTER to verify that your computer’s IP
address is in the correct range (192.168.1.2 to 192.168.1.254) with subnet mask 255.255.255.0. This is
necessary in order to communicate with the Prestige.
Refer to your User’s Guide for detailed IP address configuration for other Windows and Macintosh
computer operating systems.
3.4 Testing the Connection to the Prestige
1. Click Start, (All) Programs, Accessories and then Command Prompt.
2. In the Command Prompt window, type "ping” followed by a space and the IP address of the Prestige
(192.168.1.1 is the default).
3. Press ENTER and the following screen displays.
Your computer can now communicate with the Prestige using a LAN port.
4 Configuring Your Prestige
Choose one of these methods to access and configure the Prestige. This
Quick Start Guide shows you how to use the web configurator wizard only.
See your User’s Guide for background information on all Prestige features
and SMT configuration. Click the web configurator online help for screen-
specific web help.
 Web Configurator
 SMT (System Management Terminal). Access the SMT via:
C:\>ping 192.168.1.1
Pinging 192.168.1.1 with 32 bytes of data:
Reply from 192.168.1.1: bytes=32 time=10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Reply from 192.168.1.1: bytes=32 time<10ms TTL=254
Ping statistics for 192.168.1.1:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 10ms, Average = 2ms

Prestige 792H
12
 Console port using terminal emulation software
 LAN or WAN using Telnet
4.1 Accessing Your Prestige Via Web Configurator
Step 1. Launch your web browser. Enter “192.168.1.1” as the web site address.
Figure 3 Entering Prestige LAN IP Address in Internet Explorer
Step 2. Type the User Name and default password (“1234”) in the Password field (in non-
readable format). Click Cancel to refresh the password screen without saving any
changes. Click OK to proceed to the Site Map.
Figure 4 Web Configurator: Password Screen
Step 3. You should now see the web configurator Site Map screen.
 Click Wizard Setup to begin a series of screens to configure your Prestige for the first time.
 Click a link under Advanced Setup to configure advanced Prestige features.
 Click a link under Maintenance to see Prestige performance statistics, upload firmware and
back up, restore or upload a configuration file.
 Click Logout in the navigation panel when you have finished a Prestige management session.
Web site address.
Default user name.

Prestige 792H
13
Figure 5 Web Configurator: Site Map Screen
The Prestige automatically logs you out if it is left idle for five minutes;
press ENTER to log back in again.
4.2 Common Screen Command Buttons
The following table shows common command buttons found on many web configurator screens.
Back Click Back to return to the previous screen.
Next Click Next to proceed to the next screen.
Apply Click Apply to save your changes back to the Prestige.
Reset/Cancel Click Reset or Cancel to begin configuring this screen afresh.
4.3 Internet Access Using the Wizard
Use the Wizard Setup screens to configure your system for Internet access settings and fill in the
fields with the information in the Internet Account Information table. Your ISP may have already
configured some of the fields in the wizard screens for you.
Step 1. In the Site Map screen click Wizard Setup to display the first wizard screen.
WIZARD
NAVIGATION PANEL
LOGOUT

Prestige 792H
14
Figure 6 Wizard Screen 1
If your Prestige is a server, then select the mode that applies to your
region: ANSI (American National Standards Institute) and ETSI
(European Telecommunications Standards Institute). If your Prestige
is a client, select the same Standard Mode that the server side
selects.
Select Client if your Prestige will act as a
client device or Server if your Prestige
will act as a server.
If you enable Rate Adaption, the
Prestige will connect at the optimal
transfer rate between the min and max
rates below. If you disable Rate
Adaption, it will attempt to connect at
the maximum transfer rate configured. If
that rate can’t be attained, the
connection will not be established. Next,
select transfer rates from the Max Rate
and Min Rate drop-down list boxes. For
LAN-to-LAN applications make sure that
your Prestige and its peer have the
same Transfer Max Rate and the same
Transfer Min Rate.
Step 2. Click Next to go to the second Wizard screen.
Figure 7 Wizard Screen 2
From the Mode drop-down list box, select
Routing (default) if your ISP allows multiple
computers to share an Internet account.
Otherwise select Bridge.
Select the encapsulation type your ISP uses
from the Encapsulation drop-down list box.
Choices vary depending on what you select
in the Mode field.
Select the multiplexing method used by your
ISP from the Multiplex drop-down list box.
Enter the correct Virtual Path Identifier (VPI)
and Virtual Channel Identifier (VCI) numbers
supplied by your ISP in the VPI and VCI
fields. These fields may already be
configured.
Click Next.
Step 3. The third wizard screen varies depending on what mode and encapsulation type you use.
All screens shown are with routing mode. Configure the fields and click Next to continue
or Back to go to the previous screen. See the first screen below, Internet Connection
with PPPoA, for explanations of the following fields: User Name, Password, IP
Address, Connection, and Network Address Translation.

Prestige 792H
15
Figure 8 Internet Connection with PPPoA
Enter the user name and password
exactly as your ISP assigned them.
Select Obtain an IP Address
Automatically if you have a dynamic IP
address; otherwise select Static IP
Address and type your ISP assigned IP
address in the text box below.
Select Connect on Demand when you
don't want the connection up all the
time and specify an idle time-out period
(in seconds) in the Max. Idle Timeout
field.
Select Nailed-Up Connection when
you want your connection up all the
time. The Prestige will try to bring up
the connection automatically if it is
disconnected
From the Network Address Translation drop-down list box, select SUA Only, Full Feature or None. Refer to
the Network Address Translation section for more information.
IP Address and NAT will not be shown for PPPoA when the Prestige is in
bridge mode.

Prestige 792H
16
Figure 9 Internet Connection with PPPoE
If your ISP provides the name of your
PPPoE service provider, enter it in the
Service Name field.
See Internet Connection with PPPoA
for information on the remaining fields.
Figure 10 Internet Connection with ENET ENCAP
Enter a subnet mask in dotted decimal
notation in the Subnet Mask field.
In the ENET ENCAP Gateway field,
enter the gateway IP address given by
your ISP.
See Internet Connection with PPPoA
for information on the remaining fields.

Prestige 792H
17
Figure 11 Internet Connection with RFC 1483
Enter the IP address given by your ISP
in the IP Address field.
The IP Address
field is not
available for
bridge mode.
Refer to the Advanced Configuration for
a description of the Network Address
Translation field.
This screen will not be shown when the Prestige is in bridge mode. Instead
the summary screen will be shown.
Step 4. Verify the settings in the screen shown next. To change the LAN information on the
Prestige, click Change LAN Configuration. Otherwise click Save Settings to save the
configuration and skip to step 6.
Figure 12 Wizard Screen 3
Step 5. If you want to change your Prestige LAN settings, click Change LAN Configuration to
display the screen as shown next.

Prestige 792H
18
Figure 13 Wizard: LAN Configuration
Enter the LAN IP address of your Prestige in
dotted decimal notation in the LAN IP Address
field. For example, 192.168.1.1 (factory default).
If you change the
Prestige’s LAN IP address,
you must use the new IP
address if you want to
access the web
configurator again.
Enter a subnet mask in dotted decimal notation
in the LAN Subnet Mask field.
From the DHCP Server drop-down list box, select ON to allow your Prestige to assign IP addresses, an IP default
gateway and DNS servers to computer systems that support the DHCP client. Select OFF to disable DHCP
server.
When DHCP server is used, set the following items:
Specify the first of the contiguous addresses in the IP address pool in the Client IP Pool Starting Address field.
Specify the size or count of the IP address pool in the Size of Client IP Pool field.
Enter the IP address(es) of the DNS server(s) in the Primary DNS Server and/or Secondary DNS Server fields.
Step 6. The Prestige automatically tests the connection to the computer(s) connected to the LAN
ports. To test the WAN connection from the Prestige to the ISP, click Start Diagnose.
Otherwise click Return to Main Menu to go back to the Site Map screen.
Figure 14 Wizard Screen 4

Prestige 792H
19
4.4 Test Your Internet Connection
Launch your web browser and navigate to www.zyxel.com. Internet access is just the beginning.
Refer to the User’s Guide for more detailed information on the complete range of Prestige features.
If you cannot access the Internet, open the web configurator again to confirm that the Internet
settings you configured in the Wizard Setup are correct.
5 Advanced Configuration
This section shows how to configure some of the advanced features of the Prestige.
5.1 Network Address Translation Overview
NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host
in a packet. For example, the source address of an outgoing packet, used within one network is
changed to a different IP address known within another network.
If you have a single public IP address then select SUA Only in the NAT-Mode screen (see Figure
15). If you have multiple public IP addresses then you may use full feature mapping types (see the
User’s Guide for more details).
NAT supports five types of IP/port mapping. They are:
1. One-to-One: One-to-one mode maps one local IP address to one global IP address. Note
that port numbers do not change for One-to-one NAT mapping type.
2. Many-to-One: Many-to-One mode maps multiple local IP addresses to one global IP
address.
3. Many-to-Many Overload: Many-to-Many Overload mode maps multiple local IP
addresses to shared global IP addresses.
4. Many-to-Many No Overload: Many-to-Many No Overload mode maps each local IP
address to unique global IP addresses.
5. Server: This type allows you to specify inside servers of different services behind the NAT
to be accessible to the outside world.
5.2 Configuring SUA Server
An SUA server set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP,
that you can make visible to the outside world even though SUA makes your whole inside network
appear as a single computer to the outside world.

Prestige 792H
20
Step 1. From the main screen click Advanced Setup and then NAT to open the NAT-Mode
screen. Select SUA Only. Click Edit Details.
Figure 15 NAT: Mode
Step 4. The following table describes the labels in this screen.
Figure 16 SUA/NAT Server
Table 3 SUA/NAT Server
LABEL DESCRIPTION
Start Port No. Type a port number in this field. To forward only one port, type the port number again
in the End Port field. To forward a series of ports, type the start port number here and
the end port number in the End Port field.