ZyXEL Communications Prestige 2864I User manual

Prestige 2864I
User’s Manual
Version 2.0
JiH5<
ACCESSING THE INTERNET & INTRANET

ii
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this
product is free from any defects in materials or workmanship for a
period of up to two (2) years from the date of purchase. During the
warranty period, and upon proof of purchase, should the product
have indications of failure due to faulty workmanship and/or
materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts
or labor, and to whatever extent it shall deem necessary to restore
the product or components to proper operating condition. Any
replacement will consist of a new or re-manufactured functionally
equivalent product of equal value, and will be solely at the
discretion of ZyXEL. This warranty shall not apply if the product is
modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.
Note: Repair or replacement, as provided under this warranty, is
the exclusive remedy of the purchaser. This warranty is in lieu of
all other warranties, express or implied, including any implied
warranty of merchantability or fitness for a particular use or
purpose. ZyXEL shall in no event be held liable for indirect or
consequential damages of any kind or character to the purchaser.
To obtain the services of this warranty, contact ZyXEL’s Service
Center, refer to the separate Warranty Card for your Return
Material Authorization number (RMA). Products must be returned
Postage Prepaid. It is recommended that the unit be insured when
shipped. Any returned products without proof of purchase or those
with an out-dated warranty will be repaired or replaced (at the
discretion of ZyXEL) and the customer will be billed for parts and
labor. All repaired or replaced products will be shipped by ZyXEL
to the corresponding return address, Postage Paid (USA and
territories only). If the customer desires some other return
destination beyond the U.S. borders, the customer shall bear the
cost of the return shipment. This warranty gives you specific legal

iii
rights, and you may also have other rights which vary from state to
state.
Copyright © 1997 by ZyXEL
The contents of this book may not be reproduced (in any part or as
a whole) or transmitted in any form or by any means without the
written permission of the publisher.
Published by ZyXEL Communications Corporation. All rights
reserved.
Note: ZyXEL does not assume any liability arising out of the
application or use of any products, or software described herein.
Neither does it convey any license under its patent rights nor the
patents rights of others. ZyXEL further reserves the right to make
changes in any products described herein without notice. This
document is subject to change without notice.
Acknowledgments
Trademarks mentioned in this manual are used for informational
purposes only.
Trademarks are properties of their respective owners.
FCC Part 15 Information
This device complies with Part 15 of FCC rules. Operation is
subject to the following two conditions:
1. This device may not cause harmful interference.
2. This device must accept any interference received, including
interference that may cause undesired operations.
This equipment has been tested and found to comply with the limits
for a CLASS B digital device pursuant to Part 15 of the FCC Rules.
These limits are designed to provide reasonable protection against
harmful interference in a commercial environment. This equipment

iv
generates, uses, and can radiate radio frequency energy, and if not
installed and used in accordance with the instructions, may cause
harmful interference to radio communications.
If this equipment does cause harmful interference to
radio/television reception, which can be determined by turning the
equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and the
receiver.
• Connect the equipment into an outlet on a circuit different from
that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for
help.
Changes or modifications not expressly approved by the party
responsible for compliance could void the user’s authority to
operate the equipment. Shielded RS-232 cables are required to be
used to ensure compliance with FCC Part 15, and it is the
responsibility of the user to provide and use shielded RS-232
cables.
Information for Canadian Users
The Industry Canada label identifies certified equipment. This
certification means that the equipment meets certain
telecommunications network protective, operation, and safety
requirements. The Industry Canada does not guarantee that the
equipment will operate to a user’s satisfaction.
Before installing this equipment, users should ensure that it is
permissible to be connected to the facilities of the local

v
telecommunications company. The equipment must also be
installed using an acceptable method of connection. In some cases,
the company’s inside wiring associated with a single line individual
service may be extended by means of a certified connector
assembly. The customer should be aware that the compliance with
the above conditions may not prevent degradation of service in
some situations.
Repairs to certified equipment should be made by an authorized
Canadian maintenance facility designated by the supplier. Any
repairs or alterations made by the user to this equipment, or
equipment malfunctions, may give the telecommunications
company cause to request the user to disconnect the equipment.
For their own protection, users should ensure that the electrical
ground connections of the power utility, telephone lines, and
internal metallic water pipe system, if present, are connected
together. This precaution may be particularly important in rural
areas.
Caution: Users should not attempt to make such connections
themselves, but should contact the appropriate electrical
inspection authority, or electrician, as appropriate.
This digital apparatus does not exceed the class A limits for radio
noise emissions from digital apparatus set out in the radio
interference regulations of Industry Canada. The declarations of
CE marking:
The Prestige has been approved for connection to the Public
Switched Telecommunication Network using interfaces compatible
with ITU-TSS recommendation I.420 (Basic Rate ISDN user
access). The Prestige complies with the following directives:

vi
• The Council Directive 89/336/EEC of 3 May 1992 on the
approximation of the laws of the member states relation to
Electro Magnetic Compatibility. (EMC Directive)
• Council Directive 91/263/EEC of 29 April 1991 on the
approximation of the laws of the Member States concerning
telecommunication terminal equipment. (The Telecom
Terminal Equipment Directive)
• 93/68/EEC of 22 July 1993 amending the Directives
89/336/EEC, 91/263 /EEC and 92/31/EEC.(Marking Directive)
• The Council Directive 92/31/EEC of 28 April 1992 amending
directive on the approximation of the laws of the member states
relating to EletoMagnetic Compatibility.
Contacting ZyXEL
If you have questions about your ZyXEL product or desire
assistance, contact ZyXEL Communications Corporation in one of
the following ways:
• Phone: In North America call between 8:00 AM and 5:00 PM
PST at [phone]
Outside North America, you can dial [phone] EXT
252 between 8:00AM and 5:00PM Taiwan time (GMT +8:00).
• Fax: ZyXEL in North America: [phone] or Taiwan:
[phone]
• E-mail:
• Sales inquiries: [email protected] in North America.
[email protected] outside North America.

vii
• Technical support: [email protected] in North America.
[email protected] outside North America.
• Product information: Visit our site on the World Wide Web:
http://www.zyxel.com.
• FTP: Information , such as ZyXEL software and ROM updates
for North America can be found at this FTP address:
ftp.zyxel.com
For European and Asian versions and related files, use the
address: ftp.zyxel.co.at
• Postal Service: You can send written communications at the
following address:
ZyXEL Communications Corporation
6, Innovation Road II, Science-Based Industrial Park
Hsinchu, Taiwan 300, R.O.C.
or
ZyXEL Communications Inc.
4920 E. La Palma Avenue
Anaheim, CA92807, U.S.A.

viii
Contents
ZyXEL Limited Warranty ii
Copyright © 1997 by ZyXEL iii
Acknowledgments iii
FCC Part 15 Information iii
Information for Canadian Users iv
Contacting ZyXEL vi
1Introduction 1
Features 1
Ease of Installation 1
ISDN Basic Rate Interface (BRI) 2
Built-in V.34 Modem 2
Multiple Networking Protocol Support 2
Standard Phone Jack 2
Dial On Demand 2
Bandwidth On Demand 2
Full Network Management 3
RADIUS (Remote Authentication Dial In User Service) 3
PPP Security 3
DHCP Support (Dynamic Host Configuration Protocol) 3
Call Control 4
Data Compression 4
Networking Compatibility 4
Applications For Your Prestige 4
Internet Access 4
Internet Single User Account (SUA) 4
Multiprotocol LAN-to-LAN Connection 5
Telecommuting Server 5
Mobile Users with V.34 Modems 5
What This Manual Covers 5

ix
What This Manual Doesn’t Cover 6
Other Resources 6
Packing List 7
Additional Installation Requirements 7
2Before You Begin 9
Road Map and Flow 9
Completing the Worksheet 10
Ordering Your ISDN Line 11
Collecting General Setup Information 11
Collecting ISDN Phone Line Information 12
Collecting Ethernet Setup Information 14
3Installation 21
A Warning On Connection Cables 22
Connecting Your Computer and Your Prestige 22
Connecting the RS-232 Cable to your Prestige 22
Connecting an ISDN Line to your Prestige 22
Connecting a Telephone/Fax to your Prestige 23
Connecting an Ethernet Cable to your Prestige 23
Connecting a Power Adapter to your Prestige 24
Prestige Front Panel 24
Powering On Your Prestige 25
Navigating Through the System Management Terminal
Interface 27
System Management Terminal Interface Summary 28
General Setup 29
ISDN Setup 30
North American ISDN 31
DSS1 & 1TR6 ISDN 32
Ethernet Setup 36
General Ethernet Setup 36
TCP/IP Ethernet Setup and DHCP 37
Novell IPX Ethernet Setup 39
Bridge Ethernet Setup 39

x
4Configuring for Internet Access 40
IP Addresses and the Internet 41
Internet Access Configuration 42
Single User Account 45
Configuration for Single User Account 47
Configuring Backup ISP Accounts 47
5Remote Node Configuration 50
Bandwidth on Demand 56
Editing PPP Options 57
6Dial-In Configuration 59
Telecommuting 60
Dial-In Server Application 60
Default Dial-In Setup 61
Dial-In Users Setup 65
More on CLID 68
7TCP/IP Configuration 69
IP Subnet Mask 69
LAN-to-LAN Application 70
Remote Node Setup 71
Static Route Setup 73
8Novell IPX Configuration 77
IPX Network Environment 77
Frame Type 77
Network Numbers 77
Prestige on LAN with Server 78
Prestige on LAN without Server 78
IPX Spoofing 79
IPX Ethernet Setup 79
LAN-to-LAN Application 81
Remote Node Setup 81
Static Route Setup 83

xi
9Bridging Configuration 87
IPX Spoofing 87
Bridge Ethernet Setup 88
LAN-to-LAN Application 89
Remote Node Setup 90
Default Dial-In Setup for Bridge 91
Bridge Static Route Setup 91
10 Filter Configuration 93
About Filtering 93
Prestige’s Filter Structure 94
Configuring a Filter Set 94
Configuring a Filter Rule 97
TCP/IP Filter Rule 97
Generic Filter Rule 101
Novell IPX Filter Rule 102
11 SNMP 105
About SNMP 105
Configuring Your Prestige For SNMP Support 105
12 System Security 109
Using RADIUS Authentication 109
Installing a RADIUS Server 109
Configuring the Prestige for RADIUS Authentication 110
Adding Users to the RADIUS Database 112
Using RADIUS Authentication for CLID 112
Configuring the SMT Password 113
13 Telnet Configuration and Capabilities 115
About Telnet Configuration 115
Telnet Capabilities 116
Single Administrator 116
System Timeout 116
14 System Maintenance 117

xii
System Status 117
Terminal Baud Rate 120
Log and Trace 121
View Error Log 121
Syslog And Accounting 122
Diagnostic 123
Backup Configuration 126
Restore Configuration 126
Software Update 127
Command Interpreter Mode 128
Call Control 128
Call Control Parameters 129
Blacklist 130
Budget Management 130
Modem/ISDN TA Emulation 131
15 Troubleshooting 133
Problems Starting Up the Prestige 133
None of the LEDs are on when you power up the Prestige 133
Connecting the RS-232 cable, cannot access the SMT 133
Problems With the ISDN Line 134
The ISDN initialization failed 134
The ISDN loopback test failed 134
Problems with the LAN Interface 135
Can’t PING any station on the LAN 135
Problems Connecting to a Remote Node or ISP 135
Problems Connecting to a Remote User 136
16 ISDN Switch Types 137
Provisioning For U.S. Switches 137
Provisioning For the AT&T 5ESS Switches 137
Provisioning For the Northern Telecom Switch 139
17 Index 141

xiii

Introduction 1
 Introduction
Congratulations on your purchase of the ZyXEL Prestige 2864I
Remote Access Router. The Prestige is the first device to integrate
a Router and Bridge into a single package. In a modem-sized box,
the Prestige offers inexpensive yet complete telecommunications
and internetworking solutions for your home or branch office. The
Prestige is ideal for everything from Internet browsing to receiving
calls from Remote Dial-in Users to making LAN-to-LAN
connections to Remote Nodes.
Distinguishing features of the Prestige include support for a full
range of networking protocols such as TCP/IP (Transmission
Control Protocol/Internet Protocol), Novell IPX (Internet Packet
Exchange), and Transparent Bridging. The complete solution also
includes Remote Dial-in User support, an Internet Single User
Account (Network Address Translation), POTS line support (Plain
Old Telephone Service; also called A/B Adapter in Europe),
extensive Network Management, and solid security features.
Features
The Prestige is packed with a number of features that give it the
flexibility to provide a complete networking solution for almost any
user.
Ease of Installation
The Prestige is a self-contained unit that is quick and easy to
install. Physically, it resembles an external modem except for the
fact that it is a router and uses an Ethernet cable to connect to the
host network.

2 Introduction
ISDN Basic Rate Interface (BRI)
Using either a standard S/T or U Interface the Prestige supports a
full range of switch types. The switch type depends on the CO
(Central Office) switch your ISDN line is connected to. See
Chapter 16 for more information on North American, European,
and Asian ISDN firmware and switch types supported by the
Prestige.
The two B-channels can be used independently for two
destinations. Or they can be bundled for one connection to support
bandwidth-on-demand.
Built-in V.34 Modem
The Prestige has a built-in V.34 modem. This enables it to
communicate to remote routers or users at speeds up to 28.8Kbps
through the ISDN connection.
Multiple Networking Protocol Support
The Prestige is a multi-protocol router. It supports TCP/IP, Novell
IPX, and Transparent Bridging.
Standard Phone Jack
The Prestige is equipped with a standard phone jack for connection
to a telephone, FAX machine, or modem.
Dial On Demand
The Dial On Demand feature allows the Prestige to automatically
place a call to a Remote Node whenever there is traffic coming
from any workstation on the LAN to that remote site.
Bandwidth On Demand
The Prestige supports bandwidth up to 128Kbps over a single ISDN
BRI line. It incorporates PPP/MP (Point-to-Point

Introduction 3
Protocol/Multilink Protocol) to bundle two B channels over a BRI
line. In addition, the Prestige dynamically allocates bandwidth
between the two B channels, increasing or decreasing speeds as
needed to allow for greater efficiency in data transfer. It supports
BAP (Bandwidth Allocation Protocol) and BACP (Bandwidth
Allocation Control Protocol) to manage the number of links in
multilink bundle.
Full Network Management
The Prestige incorporates SNMP (Simple Network Management
Protocol) support and menu-driven network management via an
RS-232 or Telnet connection. The Prestige is also equipped with a
Call Detail Record (CDR) to help analyze and manage your
telephone bill.
RADIUS (Remote Authentication Dial In User
Service)
The RADIUS feature allows you to use an external, central, Unix
based server to support thousands of users.
PPP Security
The Prestige supports PAP (Password Authentication Protocol)
and CHAP (Challenge Handshake Authentication Protocol).
DHCP Support (Dynamic Host Configuration
Protocol)
DHCP (Dynamic Host Configuration Protocol) allows you to
dynamically and automatically assign IP address settings to hosts
on your network.

4 Introduction
Call Control
The Prestige provides budget management for outgoing calls and
maintains a blacklist for unreachable phone numbers in order to
save you the expense of unnecessary charges.
Data Compression
The Prestige incorporates Stac data compression and CCP
(Compression Control Protocol).
Networking Compatibility
The Prestige is compatible with remote access products from other
companies such as Ascend, Cisco, and 3Com. Furthermore, it
supports Microsoft Windows 95 and Windows NT remote access
capability.
Applications For Your Prestige
Some applications for the Prestige include:
Internet Access
The Prestige supports the TCP/IP protocol, which is the language
used for the Internet. It is also compatible with access servers
manufactured by major vendors such as Cisco and Ascend.
Internet Single User Account (SUA)
For a small office environment, the Prestige offers a Single User
Internet Account from an ISP (Internet Service Provider). This
allows multiple users on the LAN (Local Area Network) to access
the Internet concurrently for the cost of a single user.
Single User Account address mapping can also be used for LAN to
LAN connection.

Introduction 5
Multiprotocol LAN-to-LAN Connection
The Prestige can dial to or answer calls from another remote access
router connected to a different network. The Prestige supports
TCP/IP, Novell IPX, and has the capability to bridge any Ethernet
protocol.
Telecommuting Server
The Prestige allows Remote Dial-in Users to dial-in and gain access
to your LAN. This feature enables users that have workstations
with remote access capabilities, e.g., Windows 95, to dial in using
an ISDN terminal adapter (TA) to access the network resources
without physically being in the office.
Mobile Users with V.34 Modems
The Prestige has a built-in V.34 modem. This allows mobile users
that have workstations with remote access capabilities to dial-in to
the Prestige using a standard V.34 modem to access network
resources.
What This Manual Covers
This manual is divided into five parts.
1. Part One - Getting Started (Chapters 1-3) - is structured as a
step-by-step guide to help you connect, install, and setup your
Prestige to operate on your LAN.
2. Part Two - The Internet (Chapter 4) - describes how to
configure the Prestige to connect to the Internet.
3. Part Three - Setting Up Advanced Applications (Chapters 5-
10) -describes how to use the Prestige for more advanced
applications, such as TCP/IP routing and Bridging.

6 Introduction
4. Part Four - Advanced Management (Chapters 11-14) -
provides information on advanced management features for
network managers.
5. Part Five - System Maintenance (Chapters 15-16) - describes
maintenance features for checking system status and logging
errors.
Regardless of the application, it is important that you follow the
steps outlined in Part One (Chapters 1-3) to correctly connect your
Prestige to your LAN. You can then refer to other chapters of the
manual depending on which applications you wish to use.
What This Manual Doesn’t Cover
This manual assumes that you know how to use your computer and
are familiar with your communications software. If you have
questions about using either one, refer to the manual for the
product.
Other Resources
For more information about the Prestige check the following
sources:
• Quick Start Guide.
• Prestige Support disk.
• Release notes for firmware upgrades and other information can
be accessed through a ZyXEL FTP server site.
For ZyXEL contact information see page vi.

Introduction 7
Packing List
Before you proceed further, check all items you received with your
Prestige against this list to make sure nothing is missing. The
complete package should include:
• One Prestige 2864I.
• One power adapter.
• One RJ-45 phone cable.
• One RJ-11 phone cable.
• One 25 pin female - 9 pin male cable.
• One LAN crossover cable (red tag).
• One LAN straight cable (white tag).
• One Prestige Support Disk.
• One Prestige 2864I Quick Start Guide.
• This Prestige 2864I User’s Manual.
Additional Installation Requirements
In addition to the contents of your package, there are other
hardware and software requirements you need before you can
install and use your Prestige. These requirements include:
• An ISDN telephone line.
• An Ethernet connection to your computer.