ZyXEL Communications Prestige P-662HW-61 User manual

Prestige 662HW Series
802.11g Wireless ADSL2+ 4-Port Security Gateway
User’s Guide
Version 3.40
August 2004

Prestige 662HW Series User’s Guide
Copyright 2
Copyright
Copyright © 2004 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.
Trademarks
ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

Prestige 662HW Series User’s Guide
3 Federal Communications Commission (FCC) Interference Statement
Federal Communications
Commission (FCC) Interference
Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause
undesired operations.
This equipment has been tested and found to comply with the limits for a Class B digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and the receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.
• Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate the equipment.
This product has been designed for the WLAN 2.4 GHz network throughout the EC region and
Switzerland, with restrictions in France.
Certifications
1Go to www.zyxel.com
2Select your product from the drop-down list box on the
ZyXEL home page to go to that product's page.
3Select the certification you wish to view from this page

Prestige 662HW Series User’s Guide
ZyXEL Limited Warranty 4
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not
apply if the product is modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind of character to the
purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.
Safety Warnings
1To reduce the risk of fire, use only No. 26 AWG or larger telephone wire.
2Do not use this product near water, for example, in a wet basement or near a swimming
pool.
3Avoid using this product during an electrical storm. There may be a remote risk of electric
shock from lightening.

Prestige 662HW Series User’s Guide
5Customer Support
Customer Support
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
METHOD
LOCATION
SUPPORT E-MAIL TELEPHONEAWEB SITE REGULAR MAIL
SALES E-MAIL FAX FTP SITE
WORLDWIDE
[email protected] [phone] www.zyxel.com
www.europe.zyxel.com ZyXELCommunicationsCorp. 6 Innovation Road II
Science Park
Hsinchu 300
Taiwan
[email protected] [phone] ftp.zyxel.com
ftp.europe.zyxel.com
NORTH
AMERICA
[email protected] [phone]
[phone] www.us.zyxel.com ZyXEL Communications Inc.
1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.
[email protected] [phone] ftp.us.zyxel.com
GERMANY
[email protected] [phone] www.zyxel.de ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen
Germany
[email protected] [phone]
FRANCE
[email protected] [phone] www.zyxel.fr ZyXEL France
1 rue des Vergers
Bat. 1 / C
69760Limonest
France
[phone]
SPAIN
[email protected] [phone] www.zyxel.es ZyXEL Communications
Alejandro Villegas 33
1º, 280 43 Mad rid
Spain
[email protected] [phone]
DENMARK
[email protected] [phone] www.zyxel.dk Zy X E L C o m m u nicat i o n s A /S
Columbusvej 5
2860 Soeborg
Denmark
[email protected] [phone]
NORWAY
[email protected] [phone] www.zyxel.no ZyXEL Com m u nications A/S
Nils Hansens vei 13
0667 Oslo
Norway
[email protected] [phone]
SWEDEN [email protected] [phone] www.zyxel.se ZyXELCommunicationsA/S
Sjöporten 4, 41764 Göteborg
Sweden
[email protected] [phone]
FINLAND
[email protected] [phone] www.zyxel.fi ZyXEL Communications Oy
Malminkaari 10
00700 Helsinki
Finland
[email protected] [phone]
a. “+” is the (prefix) number you enter to make an international telephone call.

Prestige 662HW Series User’s Guide
Customer Support 6

Prestige 662HW Series User’s Guide
7Customer Support

Prestige 662HW Series User’s Guide
Table of Contents 8
Table of Contents
Copyright ..................................................................................................................2
Federal Communications Commission (FCC) Interference Statement...............3
ZyXEL Limited Warranty..........................................................................................4
Customer Support....................................................................................................5
Table of Contents.....................................................................................................8
List of Figures ........................................................................................................26
List of Tables..........................................................................................................34
Preface ....................................................................................................................40
Introduction to DSL................................................................................................42
Chapter 1
Getting To Know Your Prestige.............................................................................44
1.1 Introducing the Prestige .....................................................................................44
1.1.1 Features of the Prestige ...........................................................................45
1.1.2 Applications for the Prestige .....................................................................50
1.1.2.1 Internet Access ...............................................................................51
1.1.3 Firewall for Secure Broadband Internet Access .......................................51
1.1.3.1 LAN to LAN Application ...................................................................51
1.1.4 Prestige Hardware Installation and Connection ........................................52
Chapter 2
Introducing the Web Configurator........................................................................54
2.1 Web Configurator Overview ...............................................................................54
2.1.1 Accessing the Prestige Web Configurator ................................................54
2.1.2 Resetting the Prestige ..............................................................................55
2.1.2.1 Using the Reset Button ...................................................................55
2.1.3 Navigating the Prestige Web Configurator ...............................................56
Chapter 3
Wizard Setup for Internet Access.........................................................................60
3.1 Introduction ........................................................................................................60

Prestige 662HW Series User’s Guide
9Table of Contents
3.1.1 Encapsulation ...........................................................................................60
3.1.1.1 ENET ENCAP .................................................................................60
3.1.1.2 PPP over Ethernet ..........................................................................60
3.1.1.3 PPPoA .............................................................................................60
3.1.1.4 RFC 1483 ........................................................................................61
3.1.2 Multiplexing ...............................................................................................61
3.1.2.1 VC-based Multiplexing ....................................................................61
3.1.2.2 LLC-based Multiplexing ...................................................................61
3.1.3 VPI and VCI ..............................................................................................61
3.1.4 Internet Access Wizard Setup: First Screen .............................................61
3.2 IP Address and Subnet Mask .............................................................................62
3.2.1 IP Address Assignment ............................................................................63
3.2.1.1 IP Assignment with PPPoA or PPPoE Encapsulation .....................63
3.2.1.2 IP Assignment with RFC 1483 Encapsulation .................................63
3.2.1.3 IP Assignment with ENET ENCAP Encapsulation ..........................63
3.2.1.4 Private IP Addresses .......................................................................64
3.2.2 Nailed-Up Connection (PPP) ....................................................................64
3.2.3 NAT ...........................................................................................................64
3.2.4 Internet Access Wizard Setup: Second Screen ........................................64
3.2.5 DHCP Setup .............................................................................................69
3.2.5.1 IP Pool Setup ..................................................................................69
3.2.6 Internet Access Wizard Setup: Third Screen ............................................69
3.2.7 Internet Access Wizard Setup: Connection Test .......................................70
3.2.7.1 Test Your Internet Connection .........................................................71
Chapter 4
Wizard Setup for Media Bandwidth Management...............................................72
4.1 Introduction ........................................................................................................72
4.1.1 Predefined Media Bandwidth Management Services ...............................72
4.2 Media Bandwidth Management Setup 1 ............................................................73
4.3 Media Bandwidth Mgnt. Wizard Setup: Second Screen ....................................74
4.4 Media Bandwidth Mgnt. Wizard Setup: Finish ...................................................75
Chapter 5
Password Setup .....................................................................................................76
5.1 Password Overview ...........................................................................................76
5.1.1 Configuring Password ...............................................................................76
Chapter 6
LAN Setup...............................................................................................................78
6.1 LAN Overview ....................................................................................................78
6.1.1 LANs, WANs and the Prestige ..................................................................78
6.2 DNS Server Address ..........................................................................................79

Prestige 662HW Series User’s Guide
Table of Contents 10
6.3 DNS Server Address Assignment ......................................................................79
6.4 LAN TCP/IP ........................................................................................................80
6.4.1 Factory LAN Defaults ................................................................................80
6.4.2 IP Address and Subnet Mask ...................................................................80
6.4.3 RIP Setup .................................................................................................80
6.4.4 Multicast ....................................................................................................81
6.5 Any IP .................................................................................................................81
6.5.1 How Any IP Works ....................................................................................82
6.6 Configuring LAN .................................................................................................83
6.7 Configuring Static DHCP ....................................................................................84
Chapter 7
DMZ .........................................................................................................................86
7.1 Introduction ........................................................................................................86
7.2 Configuring DMZ ................................................................................................86
Chapter 8
Wireless LAN Setup...............................................................................................90
8.1 Introduction ........................................................................................................90
8.1.1 Additional Installation Requirements for Using 802.1x .............................90
8.1.2 Channel ....................................................................................................90
8.1.3 ESS ID ......................................................................................................91
8.1.4 RTS/CTS ..................................................................................................91
8.1.5 Fragmentation Threshold ..........................................................................92
8.2 Levels of Security ...............................................................................................92
8.3 Data Encryption with WEP .................................................................................93
8.4 Configuring Wireless LAN ..................................................................................93
8.5 Configuring MAC Filter .......................................................................................95
8.6 Network Authentication ......................................................................................97
8.6.1 EAP ...........................................................................................................97
8.6.1.1 RADIUS ...........................................................................................97
8.6.1.2 Types of RADIUS Messages ...........................................................97
8.6.2 EAP Authentication Overview ...................................................................98
8.7 Introduction to WPA ...........................................................................................99
8.7.1 User Authentication .................................................................................99
8.7.2 Encryption ................................................................................................99
8.8 WPA-PSK Application Example .......................................................................100
8.9 WPA with RADIUS Application Example ..........................................................100
8.10 Security Parameters Summary ......................................................................101
8.11 Wireless Client WPA Supplicants ..................................................................102
8.12 Configuring 802.1x and WPA .........................................................................102
8.12.1 Authentication Required: 802.1x ...........................................................103
8.12.2 Authentication Required: WPA .............................................................105

Prestige 662HW Series User’s Guide
11 Table of Contents
8.12.3 Authentication Required: WPA-PSK .....................................................106
8.13 Configuring Local User Authentication ...........................................................108
8.14 Configuring RADIUS ......................................................................................109
Chapter 9
WAN Setup............................................................................................................ 112
9.1 WAN Overview .................................................................................................112
9.2 Metric ..............................................................................................................112
9.3 PPPoE Encapsulation ......................................................................................113
9.4 Traffic Shaping .................................................................................................113
9.5 Zero Configuration Internet Access ..................................................................114
9.6 Configuring WAN Setup ...................................................................................114
9.7 Traffic Redirect ................................................................................................117
9.8 Configuring WAN Backup .................................................................................118
9.9 Configuring Advanced WAN Backup ................................................................121
9.10 AT Command Strings .....................................................................................124
9.11 DTR Signal .....................................................................................................124
9.12 Response Strings ...........................................................................................124
9.13 Configuring Advanced Modem Setup ............................................................124
Chapter 10
Network Address Translation (NAT) Screens....................................................128
10.1 NAT Overview ................................................................................................128
10.1.1 NAT Definitions .....................................................................................128
10.1.2 What NAT Does ....................................................................................129
10.1.3 How NAT Works ...................................................................................129
10.1.4 NAT Application ....................................................................................130
10.1.5 NAT Mapping Types .............................................................................130
10.2 SUA (Single User Account) Versus NAT ........................................................131
10.3 SUA Server ....................................................................................................132
10.3.1 Default Server IP Address ....................................................................132
10.3.2 Port Forwarding: Services and Port Numbers ......................................132
10.3.3 Configuring Servers Behind SUA (Example) ........................................133
10.4 Selecting the NAT Mode ................................................................................133
10.5 Configuring SUA Server .................................................................................134
10.6 Configuring Address Mapping ........................................................................136
10.7 Editing an Address Mapping Rule ..................................................................137
Chapter 11
Dynamic DNS Setup.............................................................................................140
11.1 Dynamic DNS .................................................................................................140
11.1.1 DYNDNS Wildcard ................................................................................140
11.2 Configuring Dynamic DNS .............................................................................140

Prestige 662HW Series User’s Guide
Table of Contents 12
Chapter 12
Time and Date.......................................................................................................142
12.1 Configuring Time and Date ............................................................................142
Chapter 13
Firewalls................................................................................................................144
13.1 Firewall Overview ...........................................................................................144
13.2 Types of Firewalls ..........................................................................................144
13.2.1 Packet Filtering Firewalls ......................................................................144
13.2.2 Application-level Firewalls ....................................................................144
13.2.3 Stateful Inspection Firewalls ................................................................145
13.3 Introduction to ZyXEL’s Firewall .....................................................................145
13.3.1 Denial of Service Attacks ......................................................................146
13.4 Denial of Service ............................................................................................146
13.4.1 Basics ...................................................................................................146
13.4.2 Types of DoS Attacks ...........................................................................147
13.4.2.1 ICMP Vulnerability ......................................................................149
13.4.2.2 Illegal Commands (NetBIOS and SMTP) ....................................149
13.4.2.3 Traceroute ...................................................................................150
13.5 Stateful Inspection ..........................................................................................150
13.5.1 Stateful Inspection Process ..................................................................151
13.5.2 Stateful Inspection and the Prestige .....................................................152
13.5.3 TCP Security .........................................................................................152
13.5.4 UDP/ICMP Security ..............................................................................153
13.5.5 Upper Layer Protocols ..........................................................................153
13.6 Guidelines for Enhancing Security with Your Firewall ....................................154
13.6.1 Security In General ...............................................................................154
13.7 Packet Filtering Vs Firewall ............................................................................155
13.7.1 Packet Filtering: ....................................................................................155
13.7.1.1 When To Use Filtering .................................................................155
13.7.2 Firewall .................................................................................................155
13.7.2.1 When To Use The Firewall ..........................................................156
Chapter 14
Firewall Configuration .........................................................................................158
14.1 Access Methods .............................................................................................158
14.2 Firewall Policies Overview .............................................................................158
14.3 Rule Logic Overview ......................................................................................159
14.3.1 Rule Checklist .......................................................................................159
14.3.2 Security Ramifications ..........................................................................160
14.3.3 Key Fields For Configuring Rules .........................................................160
14.3.3.1 Action ..........................................................................................160
14.3.3.2 Service ........................................................................................160

Prestige 662HW Series User’s Guide
13 Table of Contents
14.3.3.3 Source Address ...........................................................................160
14.3.3.4 Destination Address ....................................................................161
14.4 Connection Direction Example .......................................................................161
14.4.1 LAN to WAN Rules ...............................................................................161
14.4.2 WAN to LAN Rules ...............................................................................161
14.4.3 Alerts .....................................................................................................162
14.5 Configuring Basic Firewall Settings ................................................................162
14.6 Rule Summary ...............................................................................................164
14.6.1 Configuring Firewall Rules ....................................................................165
14.7 Customized Services .....................................................................................168
14.8 Creating/Editing A Customized Service .........................................................168
14.9 Example Firewall Rule ...................................................................................169
14.10 Predefined Services .....................................................................................173
14.11 Anti-Probing ..................................................................................................175
14.12 Configuring Attack Alert ...............................................................................176
14.12.1 Threshold Values ................................................................................177
14.12.2 Half-Open Sessions ............................................................................177
14.12.2.1 TCP Maximum Incomplete and Blocking Time .........................177
Chapter 15
Content Filtering ..................................................................................................180
15.1 Content Filtering Overview .............................................................................180
15.2 Configuring Keyword Blocking .......................................................................180
15.3 Configuring the Schedule ..............................................................................181
15.4 Configuring Trusted Computers .....................................................................182
Chapter 16
Content Access Control......................................................................................184
16.1 Content Access Control Overview .................................................................184
16.1.1 Content Access Control WLAN Application ..........................................184
16.1.2 Configuration Steps ..............................................................................184
16.2 Activating CAC and Create User Groups .......................................................185
16.2.1 Configuring Time Schedule ..................................................................186
16.2.2 Configuring Services .............................................................................188
16.2.2.1 Available Services .......................................................................189
16.2.3 Configuring Web Site Filters .................................................................191
16.2.4 Testing Web Site Access Privileges ......................................................197
16.3 User Account Setup .......................................................................................198
16.4 User Online Status .........................................................................................200
16.5 Content Access Control Logins ......................................................................201
16.5.1 User Login ............................................................................................201
16.5.2 Administrator Login ...............................................................................202

Prestige 662HW Series User’s Guide
Table of Contents 14
Chapter 17
Anti-Virus Packet Scan........................................................................................204
17.1 Overview ........................................................................................................204
17.1.1 Types of Computer Viruses ..................................................................204
17.2 Signature-Based Virus Scan ..........................................................................204
17.2.1 Computer Virus Infection and Prevention .............................................205
17.3 Introduction to the Prestige Anti-virus Packet Scan .......................................205
17.3.1 How the Prestige Virus Scan Works ....................................................206
17.3.2 Limitations of the Prestige Packet Scan ...............................................206
17.4 Anti-virus Packet Scan Configuration .............................................................207
17.5 Registration and Online Update .....................................................................208
17.5.1 Updating the Anti Virus Packet Scan ....................................................210
Chapter 18
Introduction to IPSec...........................................................................................212
18.1 VPN Overview ................................................................................................212
18.1.1 IPSec ....................................................................................................212
18.1.2 Security Association .............................................................................212
18.1.3 Other Terminology ................................................................................212
18.1.3.1 Encryption ...................................................................................212
18.1.3.2 Data Confidentiality .....................................................................213
18.1.3.3 Data Integrity ...............................................................................213
18.1.3.4 Data Origin Authentication ..........................................................213
18.1.4 VPN Applications ..................................................................................213
18.2 IPSec Architecture .........................................................................................213
18.2.1 IPSec Algorithms ..................................................................................214
18.2.2 Key Management ..................................................................................214
18.3 Encapsulation .................................................................................................214
18.3.1 Transport Mode ....................................................................................215
18.3.2 Tunnel Mode ........................................................................................215
18.4 IPSec and NAT ...............................................................................................215
Chapter 19
VPN Screens.........................................................................................................218
19.1 VPN/IPSec Overview .....................................................................................218
19.2 IPSec Algorithms ............................................................................................218
19.2.1 AH (Authentication Header) Protocol ...................................................218
19.2.2 ESP (Encapsulating Security Payload) Protocol .................................218
19.3 My IP Address ................................................................................................219
19.4 Secure Gateway Address ..............................................................................219
19.4.1 Dynamic Secure Gateway Address ......................................................220
19.5 VPN Summary Screen ...................................................................................220
19.6 Keep Alive ......................................................................................................222

Prestige 662HW Series User’s Guide
15 Table of Contents
19.7 NAT Traversal ................................................................................................222
19.7.1 NAT Traversal Configuration .................................................................223
19.7.2 Remote DNS Server .............................................................................223
19.8 ID Type and Content ......................................................................................224
19.8.1 ID Type and Content Examples ............................................................225
19.9 Pre-Shared Key ..............................................................................................226
19.10 Editing VPN Policies ....................................................................................226
19.11 IKE Phases ..................................................................................................231
19.11.1 Negotiation Mode ................................................................................232
19.11.2 Diffie-Hellman (DH) Key Groups .........................................................233
19.11.3 Perfect Forward Secrecy (PFS) .........................................................233
19.12 Configuring Advanced IKE Settings .............................................................233
19.13 Manual Key Setup ........................................................................................236
19.13.1 Security Parameter Index (SPI) .........................................................236
19.14 Configuring Manual Key ...............................................................................237
19.15 Viewing SA Monitor ......................................................................................240
19.16 Configuring Global Setting ...........................................................................241
19.17 Telecommuter VPN/IPSec Examples ...........................................................242
19.17.1 Telecommuters Sharing One VPN Rule Example ..............................242
19.17.2 Telecommuters Using Unique VPN Rules Example ...........................243
19.18 VPN and Remote Management ...................................................................245
Chapter 20
Remote Management Configuration ..................................................................246
20.1 Remote Management Overview .....................................................................246
20.1.1 Remote Management Limitations .........................................................246
20.1.2 Remote Management and NAT ............................................................247
20.1.3 System Timeout ...................................................................................247
20.2 Telnet ..............................................................................................................247
20.3 FTP ................................................................................................................247
20.4 Web ................................................................................................................248
20.5 Configuring Remote Management .................................................................248
Chapter 21
Universal Plug-and-Play (UPnP).........................................................................250
21.1 Introducing Universal Plug and Play ..............................................................250
21.1.1 How do I know if I'm using UPnP? ........................................................250
21.1.2 NAT Traversal .......................................................................................250
21.1.3 Cautions with UPnP ..............................................................................250
21.2 UPnP and ZyXEL ...........................................................................................251
21.2.1 Configuring UPnP .................................................................................251
21.3 Installing UPnP in Windows Example ............................................................252
21.4 Using UPnP in Windows XP Example ...........................................................256

Prestige 662HW Series User’s Guide
Table of Contents 16
Chapter 22
Logs Screens........................................................................................................264
22.1 Logs Overview ...............................................................................................264
22.1.1 Alerts and Logs .....................................................................................264
22.2 Configuring Log Settings ................................................................................264
22.3 Displaying the Logs ........................................................................................266
22.4 SMTP Error Messages ...................................................................................267
22.4.1 Example E-mail Log ..............................................................................268
Chapter 23
Media Bandwidth Management Advanced Setup..............................................270
23.1 Bandwidth Management Advanced Setup Overview .....................................270
23.2 Bandwidth Classes and Filters .......................................................................270
23.3 Proportional Bandwidth Allocation .................................................................271
23.4 Bandwidth Management Usage Examples ....................................................271
23.4.1 Application-based Bandwidth Management Example ..........................271
23.4.2 Subnet-based Bandwidth Management Example .................................271
23.4.3 Application and Subnet-based Bandwidth Management Example .......272
23.5 Scheduler .......................................................................................................272
23.5.1 Priority-based Scheduler ......................................................................273
23.5.2 Fairness-based Scheduler ....................................................................273
23.6 Maximize Bandwidth Usage ...........................................................................273
23.6.1 Reserving Bandwidth for Non-Bandwidth Class Traffic ........................273
23.6.2 Maximize Bandwidth Usage Example ..................................................274
23.7 Bandwidth Borrowing .....................................................................................275
23.7.1 Bandwidth Borrowing Example .............................................................275
23.7.2 Maximize Bandwidth Usage With Bandwidth Borrowing ......................277
23.8 Configuring Summary ....................................................................................277
23.9 Configuring Class Setup ................................................................................278
23.9.1 Media Bandwidth Management Class Configuration ............................279
23.9.2 Media Bandwidth Management Statistics .............................................282
23.10 Bandwidth Monitor ......................................................................................283
Chapter 24
Maintenance .........................................................................................................284
24.1 Maintenance Overview ...................................................................................284
24.2 System Status Screen ....................................................................................284
24.2.1 System Statistics ...................................................................................286
24.3 DHCP Table Screen .......................................................................................288
24.4 Any IP Table Screen .......................................................................................289
24.5 Wireless Screen .............................................................................................289
24.5.1 Association List .....................................................................................289
24.6 Diagnostic Screens ........................................................................................290

Prestige 662HW Series User’s Guide
17 Table of Contents
24.6.1 Diagnostic General Screen ...................................................................290
24.6.2 Diagnostic DSL Line Screen .................................................................291
24.7 Firmware Screen ............................................................................................293
Chapter 25
Introducing the SMT ............................................................................................296
25.1 SMT Introduction ............................................................................................296
25.1.1 Procedure for SMT Configuration via Telnet .........................................296
25.1.2 Entering Password ................................................................................296
25.1.3 Prestige SMT Menu Overview ..............................................................297
25.2 Navigating the SMT Interface .........................................................................297
25.2.1 System Management Terminal Interface Summary ..............................299
25.3 Changing the System Password ....................................................................299
Chapter 26
Menu 1 General Setup .........................................................................................302
26.1 General Setup ................................................................................................302
26.2 Procedure To Configure Menu 1 ....................................................................302
26.2.1 Procedure to Configure Dynamic DNS .................................................303
Chapter 27
Menu 2 WAN Backup Setup ................................................................................306
27.1 Introduction to WAN Backup Setup ................................................................306
27.2 Configuring Dial Backup in Menu 2 ................................................................306
27.2.1 Traffic Redirect Setup ...........................................................................307
27.3 Configuring Dial Backup Setup ......................................................................308
27.4 Advanced Dial Backup Setup .........................................................................309
Chapter 28
Menu 3 LAN Setup ...............................................................................................312
28.1 LAN Setup ......................................................................................................312
28.1.1 General Ethernet Setup ........................................................................312
28.2 Protocol Dependent Ethernet Setup ..............................................................313
28.3 CP/IP Ethernet Setup and DHCP ...................................................................313
Chapter 29
Wireless LAN Setup.............................................................................................316
29.1 Wireless LAN Overview .................................................................................316
29.2 Wireless LAN Setup .......................................................................................316
29.2.1 Wireless LAN MAC Address Filter ........................................................317

Prestige 662HW Series User’s Guide
Table of Contents 18
Chapter 30
Internet Access ....................................................................................................320
30.1 Internet Access Overview ..............................................................................320
30.2 IP Policies ......................................................................................................320
30.3 IP Alias ...........................................................................................................320
30.4 IP Alias Setup .................................................................................................321
30.5 Route IP Setup ...............................................................................................322
30.6 Internet Access Configuration ........................................................................323
Chapter 31
Remote Node Configuration ...............................................................................326
31.1 Remote Node Setup Overview .......................................................................326
31.2 Remote Node Setup .......................................................................................326
31.2.1 Remote Node Profile ............................................................................326
31.2.2 Encapsulation and Multiplexing Scenarios ...........................................327
31.2.2.1 Scenario 1: One VC, Multiple Protocols ......................................327
31.2.2.2 Scenario 2: One VC, One Protocol (IP) ......................................327
31.2.2.3 Scenario 3: Multiple VCs .............................................................327
31.2.3 Outgoing Authentication Protocol .........................................................329
31.3 Remote Node Network Layer Options ...........................................................330
31.3.1 My WAN Addr Sample IP Addresses ...................................................331
31.4 Remote Node Filter ........................................................................................332
31.5 Editing ATM Layer Options ............................................................................333
31.5.1 VC-based Multiplexing (non-PPP Encapsulation) ................................333
31.5.2 LLC-based Multiplexing or PPP Encapsulation ....................................334
31.5.3 Advance Setup Options ........................................................................334
Chapter 32
Static Route Setup ...............................................................................................336
32.1 IP Static Route Overview ...............................................................................336
32.2 Configuration ..................................................................................................336
Chapter 33
Bridging Setup .....................................................................................................340
33.1 Bridging in General ........................................................................................340
33.2 Bridge Ethernet Setup ....................................................................................340
33.2.1 Remote Node Bridging Setup ...............................................................340
33.2.2 Bridge Static Route Setup .....................................................................342
Chapter 34
Network Address Translation (NAT)...................................................................344
34.1 Using NAT ......................................................................................................344
34.1.1 SUA (Single User Account) Versus NAT ..............................................344

Prestige 662HW Series User’s Guide
19 Table of Contents
34.2 Applying NAT .................................................................................................344
34.3 NAT Setup ......................................................................................................346
34.3.1 Address Mapping Sets ..........................................................................346
34.3.1.1 SUA Address Mapping Set .........................................................347
34.3.1.2 User-Defined Address Mapping Sets ..........................................348
34.3.1.3 Ordering Your Rules ....................................................................349
34.4 Configuring a Server behind NAT ..................................................................350
34.5 General NAT Examples ..................................................................................352
34.5.1 Example 1: Internet Access Only ..........................................................352
34.5.2 Example 2: Internet Access with an Inside Server ...............................353
34.5.3 Example 3: Multiple Public IP Addresses With Inside Servers .............354
34.5.4 Example 4: NAT Unfriendly Application Programs ...............................358
Chapter 35
Enabling the Firewall...........................................................................................360
35.1 Remote Management and the Firewall ..........................................................360
35.2 Access Methods .............................................................................................360
35.3 Enabling the Firewall ......................................................................................360
Chapter 36
Filter Configuration..............................................................................................362
36.1 About Filtering ................................................................................................362
36.1.1 The Filter Structure of the Prestige .......................................................363
36.2 Configuring a Filter Set for the Prestige .........................................................364
36.3 Filter Rules Summary Menus .........................................................................365
36.4 Configuring a Filter Rule ................................................................................366
36.4.1 TCP/IP Filter Rule .................................................................................367
36.4.2 Generic Filter Rule ................................................................................369
36.5 Filter Types and NAT .....................................................................................371
36.6 Example Filter ................................................................................................371
36.7 Applying Filters and Factory Defaults ............................................................373
36.7.1 Ethernet Traffic .....................................................................................374
36.7.2 Remote Node Filters .............................................................................374
Chapter 37
SNMP Configuration ............................................................................................376
37.1 About SNMP ..................................................................................................376
37.2 Supported MIBs ............................................................................................377
37.3 SNMP Configuration ......................................................................................377
37.4 SNMP Traps ...................................................................................................378

Prestige 662HW Series User’s Guide
Table of Contents 20
Chapter 38
System Security ...................................................................................................380
38.1 System Security .............................................................................................380
38.1.1 System Password .................................................................................380
38.1.2 Configuring External RADIUS Server ...................................................380
38.1.3 IEEE802.1x ...........................................................................................382
38.2 Creating User Accounts on the Prestige ........................................................384
Chapter 39
System Information and Diagnosis....................................................................386
39.1 Overview ........................................................................................................386
39.2 System Status ................................................................................................386
39.3 System Information ........................................................................................388
39.3.1 System Information ...............................................................................388
39.3.2 Console Port Speed ..............................................................................389
39.4 Log and Trace ................................................................................................390
39.4.1 Viewing Error Log .................................................................................390
39.4.2 Syslog and Accounting .........................................................................391
39.5 Diagnostic ......................................................................................................393
Chapter 40
Firmware and Configuration File Maintenance.................................................396
40.1 Filename Conventions ...................................................................................396
40.2 Backup Configuration .....................................................................................397
40.2.1 Backup Configuration ...........................................................................397
40.2.2 Using the FTP Command from the Command Line ..............................398
40.2.3 Example of FTP Commands from the Command Line .........................398
40.2.4 GUI-based FTP Clients .........................................................................399
40.2.5 TFTP and FTP over WAN Management Limitations .............................399
40.2.6 Backup Configuration Using TFTP .......................................................400
40.2.7 TFTP Command Example ....................................................................400
40.2.8 GUI-based TFTP Clients ......................................................................400
40.2.9 Backup Via Console Port ......................................................................401
40.3 Restore Configuration ....................................................................................402
40.3.1 Restore Using FTP ...............................................................................402
40.3.2 Restore Using FTP Session Example ..................................................403
40.3.3 Restore Via Console Port .....................................................................404
40.4 Uploading Firmware and Configuration Files .................................................405
40.4.1 Firmware File Upload ............................................................................405
40.4.2 Configuration File Upload .....................................................................405
40.4.3 FTP File Upload Command from the DOS Prompt Example ................406
40.4.4 FTP Session Example of Firmware File Upload ...................................407
40.4.5 TFTP File Upload ..................................................................................407