ZyXEL Communications PRESTIGE 128 User manual

Prestige 128
User’s Manual
Version 2.0
JiH5<
ACCESSING INTERNET & INTRANET

ii
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this
product is free from any defects in materials or workmanship for a
period of up to two (2) years from the date of purchase. During the
warranty period, and upon proof of purchase, should the product
have indications of failure due to faulty workmanship and/or
materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts
or labor, and to whatever extent it shall deem necessary to restore
the product or components to proper operating condition. Any
replacement will consist of a new or re-manufactured functionally
equivalent product of equal value, and will be solely at the
discretion of ZyXEL. This warranty shall not apply if the product is
modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.
Note: Repair or replacement, as provided under this warranty, is
the exclusive remedy of the purchaser. This warranty is in lieu of
all other warranties, express or implied, including any implied
warranty of merchantability or fitness for a particular use or
purpose. ZyXEL shall in no event be held liable for indirect or
consequential damages of any kind or character to the purchaser.
To obtain the services of this warranty, contact ZyXEL’s Service
Center, refer to the separate Warranty Card for your Return
Material Authorization number (RMA). Products must be returned
Postage Prepaid. It is recommended that the unit be insured when
shipped. Any returned products without proof of purchase or those
with an out-dated warranty will be repaired or replaced (at the
discretion of ZyXEL) and the customer will be billed for parts and
labor. All repaired or replaced products will be shipped by ZyXEL
to the corresponding return address, Postage Paid (USA and
territories only). If the customer desires some other return
destination beyond the U.S. borders, the customer shall bear the
cost of the return shipment. This warranty gives you specific legal

iii
rights, and you may also have other rights which vary from state to
state.
Copyright © 1997 by ZyXEL
The contents of this book may not be reproduced (in any part or as
a whole) or transmitted in any form or by any means without the
written permission of the publisher.
Published by ZyXEL Communications Corporation. All rights
reserved.
Note: ZyXEL does not assume any liability arising out of the
application or use of any products, or software described herein.
Neither does it convey any license under its patent rights nor the
patents rights of others. ZyXEL further reserves the right to make
changes in any products described herein without notice. This
document is subject to change without notice.
Acknowledgments
Trademarks mentioned in this manual are used for informational
purposes only.
Trademarks are properties of their respective owners.
FCC Part 15 Information
This device complies with Part 15 of FCC rules. Operation is
subject to the following two conditions:
1. This device may not cause harmful interference.
2. This device must accept any interference received, including
interference that may cause undesired operations.
This equipment has been tested and found to comply with the limits
for a CLASS B digital device pursuant to Part 15 of the FCC Rules.

iv
These limits are designed to provide reasonable protection against
harmful interference in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if not
installed and used in accordance with the instructions, may cause
harmful interference to radio communications.
If this equipment does cause harmful interference to
radio/television reception, which can be determined by turning the
equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and the
receiver.
• Connect the equipment into an outlet on a circuit different from
that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for
help.
Changes or modifications not expressly approved by the party
responsible for compliance could void the user’s authority to
operate the equipment. Shielded RS-232 cables are required to be
used to ensure compliance with FCC Part 15, and it is the
responsibility of the user to provide and use shielded RS-232
cables.
Information for Canadian Users
The Industry Canada label identifies certified equipment. This
certification means that the equipment meets certain
telecommunications network protective, operation, and safety
requirements. The Industry Canada does not guarantee that the
equipment will operate to a user’s satisfaction.

v
Before installing this equipment, users should ensure that it is
permissible to be connected to the facilities of the local
telecommunications company. The equipment must also be
installed using an acceptable method of connection. In some cases,
the company’s inside wiring associated with a single line individual
service may be extended by means of a certified connector
assembly. The customer should be aware that the compliance with
the above conditions may not prevent degradation of service in
some situations.
Repairs to certified equipment should be made by an authorized
Canadian maintenance facility designated by the supplier. Any
repairs or alterations made by the user to this equipment, or
equipment malfunctions, may give the telecommunications
company cause to request the user to disconnect the equipment.
For their own protection, users should ensure that the electrical
ground connections of the power utility, telephone lines, and
internal metallic water pipe system, if present, are connected
together. This precaution may be particularly important in rural
areas.
Caution: Users should not attempt to make such connections
themselves, but should contact the appropriate electrical
inspection authority, or electrician, as appropriate.
This digital apparatus does not exceed the class A limits for radio
noise emissions from digital apparatus set out in the radio
interference regulations of Industry Canada. The declarations of
CE marking:
The Prestige 128 has been approved for connection to the Public
Switched Telecommunication Network using interfaces compatible

vi
with ITU-TSS recommendation I.420 (Basic Rate ISDN user
access). The Prestige 128 complies with the following directives:
1. The Council Directive 89/336/EEC of 3 May 1992 on the
approximation of the laws of the member states relation to
Electro Magnetic Compatibility. (EMC Directive)
2. Council Directive 91/263/EEC of 29 April 1991 on the
approximation of the laws of the Member States concerning
telecommunication terminal equipment. (The Telecom
Terminal Equipment Directive)
3. 93/68/EEC of 22 July 1993 amending the Directives
89/336/EEC, 91/263 /EEC and 92/31/EEC.(Marking Directive)
4. The Council Directive 92/31/EEC of 28 April 1992 amending
directive on the approximation of the laws of the member states
relating to EletoMagnetic Compatibility.
Contacting ZyXEL
If you have questions about your ZyXEL product or desire
assistance, contact ZyXEL Communications Corporation in one of
the following ways:
• Phone: In North America call between 8:00 AM and 5:00 PM
PST at [phone]
Outside North America, you can dial [phone] EXT
252 between 8:00AM and 5:00PM Taiwan time (GMT +8:00).
• Fax: ZyXEL in North America: [phone] or Taiwan:
[phone]
• E-mail:
• Sales inquiries: [email protected] in North America.
[email protected] outside North America.

vii
• Technical support: [email protected] in North America.
[email protected] outside North America.
• Product information: Visit our site on the World Wide Web:
http://www.zyxel.com.
• FTP: Information , such as ZyXEL software and ROM updates
for North America can be found at this FTP address:
ftp.zyxel.com
For European and Asian versions and related files, use the
address: ftp.zyxel.co.at
• Postal Service: You can send written communications at the
following address:
ZyXEL Communications Corporation
6, Innovation Road II, Science-Based Industrial Park
Hsinchu, Taiwan 300, R.O.C.
or
ZyXEL Communications Inc.
4920 E. La Palma Avenue
Anaheim, CA92807, U.S.A.

viii
Contents
ZyXEL Limited Warranty ii
Copyright © 1997 by ZyXEL iii
Acknowledgments iii
FCC Part 15 Information iii
Information for Canadian Users iv
Contacting ZyXEL vi
1Introduction 1
Features 1
Ease of Installation 1
ISDN Basic Rate Interface (BRI) 2
Multiple Networking Protocol Support 2
Standard Phone Jack 2
Dial On Demand 2
Bandwidth On Demand 2
Full Network Management 3
RADIUS (Remote Authentication Dial In User Service) 3
PPP Security 3
DHCP Support (Dynamic Host Configuration Protocol) 3
Call Control 3
Data Compression 4
Networking Compatibility 4
Applications For Your Prestige 4
Internet Access 4
Internet Single User Account (SUA) 4
Multiprotocol LAN-to-LAN Connection 4
Telecommuting Server 5
What This Manual Covers 5
What This Manual Doesn’t Cover 6
Other Resources 6

ix
Packing List 6
Additional Installation Requirements 7
2Before You Begin 9
Road Map and Flow 9
Completing the Worksheet 10
Ordering Your ISDN Line 11
Collecting General Setup Information 11
Collecting ISDN Phone Line Information 12
Collecting Ethernet Setup Information 14
3Installation 21
A Warning On Connection Cables 21
Connecting Your Computer and Your Prestige 21
Connecting the RS-232 Cable to your Prestige 22
Connecting an ISDN Line to your Prestige 22
Connecting a Telephone/Fax to your Prestige 22
Connecting an Ethernet Cable to your Prestige 23
Connecting a Power Adapter to your Prestige 24
Prestige Front Panel 24
Powering On Your Prestige 25
Navigating Through the System Management Terminal
Interface 26
System Management Terminal Interface Summary 28
General Setup 29
ISDN Setup 30
North American ISDN 30
DSS1 & 1TR6 ISDN 32
Ethernet Setup 35
General Ethernet Setup 35
TCP/IP Ethernet Setup and DHCP 36
Novell IPX Ethernet Setup 39
Bridge Ethernet Setup 39
4Configuring for Internet Access 40
IP Addresses and the Internet 41

x
Internet Access Configuration 42
Single User Account 44
Configuration for Single User Account 46
Configuring Backup ISP Accounts 47
5Remote Node Configuration 50
Bandwidth on Demand 56
Editing PPP Options 57
6Dial-In Configuration 60
Telecommuting 61
Dial-In Server Application 61
Default Dial-In Setup 62
Dial-In Users Setup 66
More on CLID 69
7TCP/IP Configuration 70
IP Subnet Mask 70
LAN-to-LAN Application 71
Remote Node Setup 72
Static Route Setup 74
8Novell IPX Configuration 78
IPX Network Environment 78
Frame Type 78
Network Numbers 78
Prestige on LAN with Server 79
Prestige on LAN without Server 79
IPX Spoofing 80
IPX Ethernet Setup 80
LAN-to-LAN Application 82
Remote Node Setup 82
Static Route Setup 84
9Bridging Configuration 88
IPX Spoofing 88

xi
Bridge Ethernet Setup 89
LAN-to-LAN Application 90
Remote Node Setup 91
Default Dial-In Setup for Bridge 92
Bridge Static Route Setup 92
10 Filter Configuration 94
About Filtering 94
Prestige’s Filter Structure 95
Configuring a Filter Set 95
Configuring a Filter Rule 98
TCP/IP Filter Rule 98
Generic Filter Rule 102
Novell IPX Filter Rule 103
11 SNMP 106
About SNMP 106
Configuring Your Prestige For SNMP Support 106
12 System Security 110
Using RADIUS Authentication 110
Installing a RADIUS Server 110
Configuring the Prestige for RADIUS Authentication 111
Adding Users to the RADIUS Database 113
Using RADIUS Authentication for CLID 113
Configuring the SMT Password 114
13 Telnet Configuration and Capabilities 116
About Telnet Configuration 116
Telnet Capabilities 117
Single Administrator 117
System Timeout 117
14 System Maintenance 118
System Status 118
Terminal Baud Rate 121

xii
Log and Trace 122
View Error Log 123
Syslog And Accounting 123
Diagnostic 124
Backup Configuration 127
Restore Configuration 128
Software Update 128
Command Interpreter Mode 129
Call Control 129
Call Control Parameters 130
Blacklist 131
Budget Management 132
15 Troubleshooting 134
Problems Starting Up the Prestige 134
None of the LEDs are on when you power up the Prestige 134
Connecting the RS-232 cable, cannot access the SMT 134
Problems With the ISDN Line 135
The ISDN initialization failed 135
The ISDN loopback test failed 135
Problems with the LAN Interface 136
Can’t PING any station on the LAN 136
Problems Connecting to a Remote Node or ISP 136
Problems Connecting to a Remote User 137
16 ISDN Switch Types 138
Provisioning For U.S. Switches 138
Provisioning For the AT&T 5ESS Switches 138
Provisioning For the Northern Telecom Switch 140
17 Index 142

xiii

Introduction 1
 Introduction
Congratulations on your purchase of the ZyXEL Prestige 128
Remote Access Router. The Prestige is the first device to integrate
a Router and Bridge into a single package. In a modem-sized box,
the Prestige offers inexpensive yet complete telecommunications
and internetworking solutions for your home or branch office. The
Prestige is ideal for everything from Internet browsing to receiving
calls from Remote Dial-in Users to making LAN-to-LAN
connections to Remote Nodes.
Distinguishing features of the Prestige include support for a full
range of networking protocols such as TCP/IP (Transmission
Control Protocol/Internet Protocol), Novell IPX (Internet Packet
Exchange), and Transparent Bridging. The complete solution also
includes Remote Dial-in User support, an Internet Single User
Account (Network Address Translation), POTS line support (Plain
Old Telephone Service; also called A/B Adapter in Europe),
extensive Network Management, and solid security features.
Features
The Prestige is packed with a number of features that give it the
flexibility to provide a complete networking solution for almost any
user.
Ease of Installation
The Prestige is a self-contained unit that is quick and easy to
install. Physically, it resembles an external modem except for the
fact that it is a router and uses an Ethernet cable to connect to the
host network.

2 Introduction
ISDN Basic Rate Interface (BRI)
Using either a standard S/T or U Interface (128 uses the S/T
interface and 128U uses the U interface) the Prestige supports a
full range of switch types. The switch type depends on the CO
(Central Office) switch your ISDN line is connected to. See
Chapter 16 for more information on North American, European,
and Asian ISDN firmware and switch types supported by the
Prestige.
The two B-channels can be used independently for two
destinations. Or they can be bundled for one connection to support
bandwidth-on-demand.
Multiple Networking Protocol Support
The Prestige is a multi-protocol router. It supports TCP/IP, Novell
IPX, and Transparent Bridging.
Standard Phone Jack
The Prestige is equipped with two standard phone jacks to connect
to telephones, FAX machines, or modems. This allows the ISDN
line to be used for voice calls as well as data calls.
Dial On Demand
The Dial On Demand feature allows the Prestige to automatically
place a call to a Remote Node whenever there is traffic coming
from any workstation on the LAN to that remote site.
Bandwidth On Demand
The Prestige supports bandwidth up to 128Kbps over a single ISDN
BRI line. It incorporates PPP/MP (Point-to-Point
Protocol/Multilink Protocol) to bundle two B channels over a BRI
line. In addition, the Prestige dynamically allocates bandwidth
between the two B channels, increasing or decreasing speeds as

Introduction 3
needed to allow for greater efficiency in data transfer. It supports
BAP (Bandwidth Allocation Protocol) and BACP (Bandwidth
Allocation Control Protocol) to manage the number of links in
multilink bundle.
Full Network Management
The Prestige incorporates SNMP (Simple Network Management
Protocol) support and menu-driven network management via an
RS-232 or Telnet connection. The Prestige is also equipped with a
Call Detail Record (CDR) to help analyze and manage your
telephone bill.
RADIUS (Remote Authentication Dial In User
Service)
The RADIUS feature allows you to use an external, central, Unix
based server to support thousands of users.
PPP Security
The Prestige supports PAP (Password Authentication Protocol)
and CHAP (Challenge Handshake Authentication Protocol).
DHCP Support (Dynamic Host Configuration
Protocol)
DHCP (Dynamic Host Configuration Protocol) allows you to
dynamically and automatically assign IP address settings to hosts
on your network.
Call Control
The Prestige provides budget management for outgoing calls and
maintains a blacklist for unreachable phone numbers in order to
save you the expense of unnecessary charges.

4 Introduction
Data Compression
The Prestige incorporates Stac data compression and CCP
(Compression Control Protocol).
Networking Compatibility
The Prestige is compatible with remote access products from other
companies such as Ascend, Cisco, and 3Com. Furthermore, it
supports Microsoft Windows 95 and Windows NT remote access
capability.
Applications For Your Prestige
Some applications for the Prestige include:
Internet Access
The Prestige supports the TCP/IP protocol, which is the language
used for the Internet. It is also compatible with access servers
manufactured by major vendors such as Cisco and Ascend.
Internet Single User Account (SUA)
For a small office environment, the Prestige offers a Single User
Internet Account from an ISP (Internet Service Provider). This
allows multiple users on the LAN (Local Area Network) to access
the Internet concurrently for the cost of a single user.
Single User Account address mapping can also be used for LAN to
LAN connection.
Multiprotocol LAN-to-LAN Connection
The Prestige can dial to or answer calls from another remote access
router connected to a different network. The Prestige supports
TCP/IP, Novell IPX, and has the capability to bridge any Ethernet
protocol.

Introduction 5
Telecommuting Server
The Prestige allows Remote Dial-in Users to dial-in and gain access
to your LAN. This feature enables users that have workstations
with remote access capabilities, e.g., Windows 95, to dial in using
an ISDN terminal adapter (TA) to access the network resources
without physically being in the office.
What This Manual Covers
This manual is divided into five parts.
1. Part One - Getting Started (Chapters 1-3) - is structured as a
step-by-step guide to help you connect, install, and setup your
Prestige to operate on your LAN.
2. Part Two - The Internet (Chapter 4) - describes how to
configure the Prestige to connect to the Internet.
3. Part Three - Setting Up Advanced Applications (Chapters 5-
10) -describes how to use the Prestige for more advanced
applications, such as TCP/IP routing and Bridging.
4. Part Four - Advanced Management (Chapters 11-14) -
provides information on advanced management features for
network managers.
5. Part Five - System Maintenance (Chapters 15-16) - describes
maintenance features for checking system status and logging
errors.
Regardless of the application, it is important that you follow the
steps outlined in Part One (Chapters 1-3) to correctly connect your
Prestige to your LAN. You can then refer to other chapters of the
manual depending on which applications you wish to use.

6 Introduction
What This Manual Doesn’t Cover
This manual assumes that you know how to use your computer and
are familiar with your communications software. If you have
questions about using either one, refer to the manual for the
product.
Other Resources
For more information about the Prestige 128 check the following
sources:
• Quick Start Guide.
• Prestige Support disk.
• Release notes for firmware upgrades and other information can
be accessed through a ZyXEL FTP server site.
For ZyXEL contact information see page vi.
Packing List
Before you proceed further, check all items you received with your
Prestige against this list to make sure nothing is missing. The
complete package should include:
• One Prestige 128.
• One power adapter.
• One RJ-45 phone cable.
• One RJ-11 phone cable.
• One 25 pin female - 9 pin male adapter.

Introduction 7
• One LAN crossover cable (red tag).
• One LAN straight cable (white tag).
• One Prestige Support Disk.
• One Prestige 128/100 Quick Start Guide.
• This Prestige 128 User’s Manual.
Additional Installation Requirements
In addition to the contents of your package, there are other
hardware and software requirements you need before you can
install and use your Prestige. These requirements include:
• An ISDN telephone line.
• An Ethernet connection to your computer.
• A computer equipped with communications software
configured to the following parameters:
• VT100 terminal emulation.
• 9600 Baud rate.
• No parity, 8 Data bits, 1 Stop bit.
After the Prestige has been successfully connected to your
network, you can make future changes to the configuration by
using a Telnet application.