ZyXEL Communications Prestige 28641 User manual

Prestige 2864I
User’s Manual
Version 2.0
ZyXEL
ACCESSING THE INTERNET & INTRANET

ii
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is
free from any defects in materials or workmanship for a period of up to
two (2) years from the date of purchase. During the warranty period,
and upon proof of purchase, should the product have indications of
failure due to faulty workmanship and/or materials, ZyXEL will, at its
discretion, repair or replace the defective products or components
without charge for either parts or labor, and to whatever extent it shall
deem necessary to restore the product or components to proper
operating condition. Any replacement will consist of a new or re-
manufactured functionally equivalent product of equal value, and will be
solely at the discretion of ZyXEL. This warranty shall not apply if the
product is modified, misused, tampered with, damaged by an act of
God, or subjected to abnormal working conditions.
Note:Repair or replacement, as provided under this warranty, is the
exclusive remedy of the purchaser. This warranty is in lieu of all other
warranties, express or implied, including any implied warranty of
merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any
kind or character to the purchaser.
To obtain the services of this warranty, contact ZyXEL’s Service
Center, refer to the separate Warranty Card for your Return Material
Authorization number (RMA). Products must be returned Postage
Prepaid. It is recommended that the unit be insured when shipped. Any
returned products without proof of purchase or those with an out-dated
warranty will be repaired or replaced (at the discretion of ZyXEL) and
the customer will be billed for parts and labor. All repaired or replaced
products will be shipped by ZyXEL to the corresponding return
address, Postage Paid (USA and territories only). If the customer
desires some other return destination beyond the U.S. borders, the
customer shall bear the cost of the return shipment. This warranty gives

iii
you specific legal rights, and you may also have other rights which vary
from state to state.
Copyright © 1997 by ZyXEL
The contents of this book may not be reproduced (in any part or as a
whole) or transmitted in any form or by any means without the written
permission of the publisher.
Published by ZyXEL Communications Corporation. All rights reserved.
Note:ZyXEL does not assume any liability arising out of the
application or use of any products, or software described herein.
Neither does it convey any license under its patent rights nor the patents
rights of others. ZyXEL further reserves the right to make changes in
any products described herein without notice. This document is subject
to change without notice.
Acknowledgments
Trademarks mentioned in this manual are used for informational
purposes only.
Trademarks are properties of their respective owners.
FCC Part 15 Information
This device complies with Part 15 of FCC rules. Operation is subject to
the following two conditions:
1. This device may not cause harmful interference.
2. This device must accept any interference received, including
interference that may cause undesired operations.
This equipment has been tested and found to comply with the limits for
a CLASS B digital device pursuant to Part 15 of the FCC Rules. These
limits are designed to provide reasonable protection against harmful

iv
interference in a commercial environment. This equipment generates,
uses, and can radiate radio frequency energy, and if not installed and
used in accordance with the instructions, may cause harmful interference
to radio communications.
If this equipment does cause harmful interference to radio/television
reception, which can be determined by turning the equipment off and
on, the user is encouraged to try to correct the interference by one or
more of the following measures:
•Reorient or relocate the receiving antenna.
•Increase the separation between the equipment and the receiver.
•Connect the equipment into an outlet on a circuit different from that
to which the receiver is connected.
•Consult the dealer or an experienced radio/TV technician for help.
Changes or modifications not expressly approved by the party
responsible for compliance could void the user’s authority to operate
the equipment. Shielded RS-232 cables are required to be used to
ensure compliance with FCC Part 15, and it is the responsibility of the
user to provide and use shielded RS-232 cables.
Information for Canadian Users
The Industry Canada label identifies certified equipment. This
certification means that the equipment meets certain telecommunications
network protective, operation, and safety requirements. The Industry
Canada does not guarantee that the equipment will operate to a user’s
satisfaction.
Before installing this equipment, users should ensure that it is permissible
to be connected to the facilities of the local telecommunications
company. The equipment must also be installed using an acceptable

v
method of connection. In some cases, the company’s inside wiring
associated with a single line individual service may be extended by
means of a certified connector assembly. The customer should be
aware that the compliance with the above conditions may not prevent
degradation of service in some situations.
Repairs to certified equipment should be made by an authorized
Canadian maintenance facility designated by the supplier. Any repairs or
alterations made by the user to this equipment, or equipment
malfunctions, may give the telecommunications company cause to
request the user to disconnect the equipment.
For their own protection, users should ensure that the electrical ground
connections of the power utility, telephone lines, and internal metallic
water pipe system, if present, are connected together. This precaution
may be particularly important in rural areas.
Caution: Users should not attempt to make such connections
themselves, but should contact the appropriate electrical
inspection authority, or electrician, as appropriate.
This digital apparatus does not exceed the class A limits for radio noise
emissions from digital apparatus set out in the radio interference
regulations of Industry Canada. The declarations of CE marking:
The Prestige has been approved for connection to the Public Switched
Telecommunication Network using interfaces compatible with ITU-TSS
recommendation I.420 (Basic Rate ISDN user access). The Prestige
complies with the following directives:

vi
•The Council Directive 89/336/EEC of 3 May 1992 on the
approximation of the laws of the member states relation to Electro
Magnetic Compatibility. (EMC Directive)
•Council Directive 91/263/EEC of 29 April 1991 on the
approximation of the laws of the Member States concerning
telecommunication terminal equipment. (The Telecom Terminal
Equipment Directive)
•93/68/EEC of 22 July 1993 amending the Directives 89/336/EEC,
91/263 /EEC and 92/31/EEC.(Marking Directive)
•The Council Directive 92/31/EEC of 28 April 1992 amending
directive on the approximation of the laws of the member states
relating to EletoMagnetic Compatibility.
Contacting ZyXEL
If you have questions about your ZyXEL product or desire assistance,
contact ZyXEL Communications Corporation in one of the following
ways:
•Phone: In North America call between 8:00 AM and 5:00 PM
PST at [phone]
Outside North America, you can dial [phone] EXT 252
between 8:00AM and 5:00PM Taiwan time (GMT +8:00).
•Fax: ZyXEL in North America: [phone] or Taiwan: +886-
3-5782439
•E-mail:
•Sales inquiries: [email protected] in North America.
[email protected] outside North America.

vii
•Technical support: [email protected] in North America.
[email protected] outside North America.
•Product information: Visit our site on the World Wide Web:
http://www.zyxel.com.
•FTP: Information , such as ZyXEL software and ROM updates for
North America can be found at this FTP address: ftp.zyxel.com
For European and Asian versions and related files, use the address:
ftp.zyxel.co.at
•Postal Service: You can send written communications at the
following address:
ZyXEL Communications Corporation
6, Innovation Road II, Science-Based Industrial Park
Hsinchu, Taiwan 300, R.O.C.
or
ZyXEL Communications Inc.
4920 E. La Palma Avenue
Anaheim, CA92807, U.S.A.

viii
Contents
ZyXEL Limited Warranty ii
Copyright © 1997 by ZyXEL iii
Acknowledgments iii
FCC Part 15 Information iii
Information for Canadian Users iv
Contacting ZyXEL vi
1Introduction 1
Features 1
Ease of Installation 1
ISDN Basic Rate Interface (BRI) 2
Built-in V.34 Modem 2
Multiple Networking Protocol Support 2
Standard Phone Jack 2
Dial On Demand 2
Bandwidth On Demand 3
Full Network Management 3
RADIUS (Remote Authentication Dial In User Service) 3
PPP Security 3
DHCP Support (Dynamic Host Configuration Protocol) 3
Call Control 4
Data Compression 4
Networking Compatibility 4
Applications For Your Prestige 4
Internet Access 4
Internet Single User Account (SUA) 4
Multiprotocol LAN-to-LAN Connection 5
Telecommuting Server 5

ix
Mobile Users with V.34 Modems 5
What This Manual Covers 5
What This Manual Doesn’t Cover 6
Other Resources 6
Packing List 7
Additional Installation Requirements 7
2Before You Begin 9
Road Map and Flow 9
Completing the Worksheet 10
Ordering Your ISDN Line 10
Collecting General Setup Information 11
Collecting ISDN Phone Line Information 12
Collecting Ethernet Setup Information 14
3Installation 21
A Warning On Connection Cables 22
Connecting Your Computer and Your Prestige 22
Connecting the RS-232 Cable to your Prestige 22
Connecting an ISDN Line to your Prestige 22
Connecting a Telephone/Fax to your Prestige 23
Connecting an Ethernet Cable to your Prestige 23
Connecting a Power Adapter to your Prestige 24
Prestige Front Panel 24
Powering On Your Prestige 26
Navigating Through the System Management Terminal
Interface 27
System Management Terminal Interface Summary 28
General Setup 29
ISDN Setup 31
North American ISDN 31
DSS1 & 1TR6 ISDN 33
Ethernet Setup 36

x
General Ethernet Setup 36
TCP/IP Ethernet Setup and DHCP 37
Novell IPX Ethernet Setup 40
Bridge Ethernet Setup 40
4Configuring for Internet Access 41
IP Addresses and the Internet 42
Internet Access Configuration 43
Single User Account 46
Configuration for Single User Account 48
Configuring Backup ISP Accounts 48
5Remote Node Configuration 51
Bandwidth on Demand 57
Editing PPP Options 59
6Dial-In Configuration 61
Telecommuting 62
Dial-In Server Application 62
Default Dial-In Setup 63
Dial-In Users Setup 67
More on CLID 70
7TCP/IP Configuration 71
IP Subnet Mask 71
LAN-to-LAN Application 72
Remote Node Setup 73
Static Route Setup 75
8Novell IPX Configuration 79
IPX Network Environment 79
Frame Type 79
Network Numbers 79
Prestige on LAN with Server 80

xi
Prestige on LAN without Server 80
IPX Spoofing 81
IPX Ethernet Setup 81
LAN-to-LAN Application 83
Remote Node Setup 83
Static Route Setup 85
9Bridging Configuration 89
IPX Spoofing 89
Bridge Ethernet Setup 89
LAN-to-LAN Application 91
Remote Node Setup 91
Default Dial-In Setup for Bridge 92
Bridge Static Route Setup 93
10 Filter Configuration 95
About Filtering 95
Prestige’s Filter Structure 96
Configuring a Filter Set 96
Configuring a Filter Rule 99
TCP/IP Filter Rule 99
Generic Filter Rule 103
Novell IPX Filter Rule 104
11 SNMP 107
About SNMP 107
Configuring Your Prestige ForSNMP Support 107
12 System Security 111
Using RADIUS Authentication 111
Installing a RADIUS Server 111
Configuring the Prestige for RADIUS Authentication 112
Adding Users to the RADIUS Database 114

xii
Using RADIUS Authentication for CLID 114
Configuring the SMT Password 115
13 Telnet Configuration and Capabilities 117
About Telnet Configuration 117
Telnet Capabilities 118
Single Administrator 118
System Timeout 118
14 System Maintenance 119
System Status 119
Terminal Baud Rate 122
Log and Trace 123
View Error Log 123
Syslog And Accounting 124
Diagnostic 125
Backup Configuration 128
Restore Configuration 129
Software Update 129
Command Interpreter Mode 130
Call Control 131
Call Control Parameters 131
Blacklist 132
Budget Management 133
Modem/ISDN TA Emulation 133
15 Troubleshooting 135
Problems Starting Up the Prestige 135
None of the LEDs are on when you power up the Prestige 135
Connecting the RS-232 cable, cannot access the SMT 135
Problems With the ISDN Line 136
The ISDN initialization failed 136
The ISDN loopback test failed 136

xiii
Problems with the LAN Interface 137
Can’t PING any station on the LAN 137
Problems Connecting to a Remote Node or ISP 137
Problems Connecting to a Remote User 138
16 ISDN Switch Types 139
Provisioning For U.S. Switches 139
Provisioning For the AT&T 5ESS Switches 140
Provisioning For the Northern Telecom Switch 141
17 Index 143

xiv

Introduction 1
1Introduction
Congratulations on your purchase of the ZyXEL Prestige 2864I
Remote Access Router. The Prestige is the first device to integrate a
Router and Bridge into a single package. In a modem-sized box, the
Prestige offers inexpensive yet complete telecommunications and
internetworking solutions for your home or branch office. The Prestige
is ideal for everything from Internet browsing to receiving calls from
Remote Dial-in Users to making LAN-to-LAN connections to Remote
Nodes.
Distinguishing features of the Prestige include support for a full range of
networking protocols such as TCP/IP (Transmission Control
Protocol/Internet Protocol), Novell IPX (Internet Packet Exchange),
and Transparent Bridging. The complete solution also includes Remote
Dial-in User support, an Internet Single User Account (Network
Address Translation), POTS line support (Plain Old Telephone Service;
also called A/B Adapter in Europe), extensive Network Management,
and solid security features.
Features
The Prestige is packed with a number of features that give it the
flexibility to provide a complete networking solution for almost any user.
Ease of Installation
The Prestige is a self-contained unit that is quick and easy to install.
Physically, it resembles an external modem except for the fact that it is a
router and uses an Ethernet cable to connect to the host network.

2Introduction
ISDN Basic Rate Interface (BRI)
Using either a standard S/T or U Interface the Prestige supports a full
range of switch types. The switch type depends on the CO (Central
Office) switch your ISDN line is connected to. See Chapter 16 for
more information on North American, European, and Asian ISDN
firmware and switch types supported by the Prestige.
The two B-channels can be used independently for two destinations. Or
they can be bundled for one connection to support bandwidth-on-
demand.
Built-in V.34 Modem
The Prestige has a built-in V.34 modem. This enables it to communicate
to remote routers or users at speeds up to 28.8Kbps through the ISDN
connection.
Multiple Networking Protocol Support
The Prestige is a multi-protocol router. It supports TCP/IP, Novell
IPX, and Transparent Bridging.
Standard Phone Jack
The Prestige is equipped with a standard phone jack for connection to a
telephone, FAX machine, or modem.
Dial On Demand
The Dial On Demand feature allows the Prestige to automatically place
a call to a Remote Node whenever there is traffic coming from any
workstation on the LAN to that remote site.

Introduction 3
Bandwidth On Demand
The Prestige supports bandwidth up to 128Kbps over a single ISDN
BRI line. It incorporates PPP/MP (Point-to-Point Protocol/Multilink
Protocol) to bundle two B channels over a BRI line. In addition, the
Prestige dynamically allocates bandwidth between the two B channels,
increasing or decreasing speeds as needed to allow for greater
efficiency in data transfer. It supports BAP (Bandwidth Allocation
Protocol) and BACP (Bandwidth Allocation Control Protocol) to
manage the number of links in multilink bundle.
Full Network Management
The Prestige incorporates SNMP (Simple Network Management
Protocol) support and menu-driven network management via an RS-
232 or Telnet connection. The Prestige is also equipped with a Call
Detail Record (CDR) to help analyze and manage your telephone bill.
RADIUS (Remote Authentication Dial In User
Service)
The RADIUS feature allows you to use an external, central, Unix based
server to support thousands of users.
PPP Security
The Prestige supports PAP (Password Authentication Protocol) and
CHAP (Challenge Handshake Authentication Protocol).
DHCP Support (Dynamic Host Configuration
Protocol)
DHCP (Dynamic Host Configuration Protocol) allows you to
dynamically and automatically assign IP address settings to hosts on
your network.

4Introduction
Call Control
The Prestige provides budget management for outgoing calls and
maintains a blacklist for unreachable phone numbers in order to save
you the expense of unnecessary charges.
Data Compression
The Prestige incorporates Stac data compression and CCP
(Compression Control Protocol).
Networking Compatibility
The Prestige is compatible with remote access products from other
companies such as Ascend, Cisco, and 3Com. Furthermore, it supports
Microsoft Windows 95 and Windows NT remote access capability.
Applications For Your Prestige
Some applications for the Prestige include:
Internet Access
The Prestige supports the TCP/IP protocol, which is the language used
for the Internet. It is also compatible with access servers manufactured
by major vendors such as Cisco and Ascend.
Internet Single User Account (SUA)
For a small office environment, the Prestige offers a Single User Internet
Account from an ISP (Internet Service Provider). This allows multiple
users on the LAN (Local Area Network) to access the Internet
concurrently for the cost of a single user.
Single User Account address mapping can also be used for LAN to
LAN connection.

Introduction 5
Multiprotocol LAN-to-LAN Connection
The Prestige can dial to or answer calls from another remote access
router connected to a different network. The Prestige supports TCP/IP,
Novell IPX, and has the capability to bridge any Ethernet protocol.
Telecommuting Server
The Prestige allows Remote Dial-in Users to dial-in and gain access to
your LAN. This feature enables users that have workstations with
remote access capabilities, e.g., Windows 95, to dial in using an ISDN
terminal adapter (TA) to access the network resources without
physically being in the office.
Mobile Users with V.34 Modems
The Prestige has a built-in V.34 modem. This allows mobile users that
have workstations with remote access capabilities to dial-in to the
Prestige using a standard V.34 modem to access network resources.
What This Manual Covers
This manual is divided into five parts.
1. Part One -Getting Started(Chapters 1-3) -is structured as a
step-by-step guide to help you connect, install, and setup your
Prestige to operate on your LAN.
2. Part Two -The Internet (Chapter 4) -describes how to configure
the Prestige to connect to the Internet.
3. Part Three -Setting Up Advanced Applications (Chapters 5-10)
-describes how to use the Prestige for more advanced applications,
such as TCP/IP routing and Bridging.

6Introduction
4. Part Four -Advanced Management (Chapters 11-14) -provides
information on advanced management features for network
managers.
5. Part Five -System Maintenance (Chapters 15-16) -describes
maintenance features for checking system status and logging errors.
Regardless of the application, it is important that you follow the steps
outlined in Part One (Chapters 1-3) to correctly connect your Prestige
to your LAN. You can then refer to other chapters of the manual
depending on which applications you wish to use.
What This Manual Doesn’t Cover
This manual assumes that you know how to use your computer and are
familiar with your communications software. If you have questions about
using either one, refer to the manual for the product.
Other Resources
For more information about the Prestige check the following sources:
•Quick Start Guide.
•Prestige Support disk.
•Release notes for firmware upgrades and other information can be
accessed through a ZyXEL FTP server site.
For ZyXEL contact information see page vi.