ZyXEL Communications PRESTIGE 335 User manual

P-335
Firewall Router with Print Server
P-335WT
802.11g Wireless Firewall Router with Print Server
User’s Guide
Version 3.60
12/2004

P-335 Series User’s Guide
Copyright 3
Copyright
Copyright © 2004 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.
Trademarks
ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.

P-335 Series User’s Guide
4 Federal Communications Commission (FCC) Interference Statement
Federal Communications
Commission (FCC) Interference
Statement
This device complies with Part 15 of FCC rules. Operation is subject to the following two
conditions:
• This device may not cause harmful interference.
• This device must accept any interference received, including interference that may cause
undesired operations.
This equipment has been tested and found to comply with the limits for a Class B digital
device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a commercial environment. This equipment
generates, uses, and can radiate radio frequency energy, and if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications.
If this equipment does cause harmful interference to radio/television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and the receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.
• Consult the dealer or an experienced radio/TV technician for help.
Notice 1
Changes or modifications not expressly approved by the party responsible for compliance
could void the user's authority to operate the equipment.
Certifications
Go to www.zyxel.com
1Select your product from the drop-down list box on the ZyXEL home page to go to that
product's page.
2Select the certification you wish to view from this page

P-335 Series User’s Guide
Federal Communications Commission (FCC) Interference Statement 5

P-335 Series User’s Guide
6ZyXEL Limited Warranty
ZyXEL Limited Warranty
ZyXEL warrants to the original end user (purchaser) that this product is free from any defects
in materials or workmanship for a period of up to two years from the date of purchase. During
the warranty period, and upon proof of purchase, should the product have indications of failure
due to faulty workmanship and/or materials, ZyXEL will, at its discretion, repair or replace the
defective products or components without charge for either parts or labor, and to whatever
extent it shall deem necessary to restore the product or components to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal value, and will be solely at the discretion of ZyXEL. This warranty shall not
apply if the product is modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions.
Note
Repair or replacement, as provided under this warranty, is the exclusive remedy of the
purchaser. This warranty is in lieu of all other warranties, express or implied, including any
implied warranty of merchantability or fitness for a particular use or purpose. ZyXEL shall in
no event be held liable for indirect or consequential damages of any kind of character to the
purchaser.
To obtain the services of this warranty, contact ZyXEL's Service Center for your Return
Material Authorization number (RMA). Products must be returned Postage Prepaid. It is
recommended that the unit be insured when shipped. Any returned products without proof of
purchase or those with an out-dated warranty will be repaired or replaced (at the discretion of
ZyXEL) and the customer will be billed for parts and labor. All repaired or replaced products
will be shipped by ZyXEL to the corresponding return address, Postage Paid. This warranty
gives you specific legal rights, and you may also have other rights that vary from country to
country.
Safety Warnings
1To reduce the risk of fire, use only No. 26 AWG or larger telephone wire.
2Do not use this product near water, for example, in a wet basement or near a swimming
pool.
3Avoid using this product during an electrical storm. There may be a remote risk of
electric shock from lightening.
This product has been designed for the WLAN 2.4 GHz network throughout the EC region and
Switzerland, with restrictions in France.

P-335 Series User’s Guide
Customer Support 7
Customer Support
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
METHOD
LOCATION
SUPPORT E-MAIL TELEPHONEAWEB SITE
REGULAR MAIL
SALES E-MAIL FAX FTP SITE
WORLDWIDE
[email protected] [phone] www.zyxel.com
www.europe.zyxel.com
ZyXEL Communications Corp.
6 Innovation Road II
Science Park
Hsinchu 300
Taiwa n
[email protected] [phone] ftp.zyxel.com
ftp.europe.zyxel.com
NORTH
AMERICA
[email protected] [phone]
[phone]
www.us.zyxel.com ZyXEL Communications Inc.
1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.
[email protected] [phone] ftp.us.zyxel.com
GERMANY
[email protected] [phone] www.zyxel.de ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen
Germany
[email protected] [phone]
FRANCE
[email protected] [phone] www.zyxel.fr Z yXEL F r a n c e
1 rue des Vergers
Bat. 1 / C
69760 Limonest
France
[phone]
SPAIN
[email protected] [phone] www.zyxel.es Z y X E L C o m m u n i c a t i o n s
A l e j a n d r o V i l l e g a s 3 3
1 º , 2 8 0 4 3 M a d r i d
Spain
[email protected] [phone]
DENMARK
[email protected] [phone] www.zyxel.dk Z y X E L C o m m u n i c a t i o n s A / S
Columbu svej 5
2860 Soeborg
Denmark
[email protected] [phone]
NORWAY
[email protected] [phone] www.zyxel.no Z y X E L C o m m u n i c a t i o n s A / S
Nils Hansens vei 13
0667 Oslo
Norway
[email protected] [phone]
SWEDEN
[email protected] [phone] www.zyxel.se ZyXEL Communications A/S
Sjöporten 4, 41764 Göteborg
Sweden
[email protected] [phone]
FINLAND
[email protected] [phone] www.zyxel.fi Z y X E L C o m m u n i c a t i o n s O y
Malminkaari 10
00700 Helsinki
Finland
[email protected] [phone]

P-335 Series User’s Guide
8Customer Support
a. “+” is the (prefix) number you enter to make an international telephone call.

P-335 Series User’s Guide
9
Table of Contents
Copyright .................................................................................................................. 3
Federal Communications Commission (FCC) Interference Statement ............... 4
ZyXEL Limited Warranty.......................................................................................... 6
Customer Support.................................................................................................... 7
Preface .................................................................................................................... 37
Chapter 1
Getting to Know Your Prestige ............................................................................. 41
1.1 Prestige Internet Security Gateway Overview ....................................................41
1.2 Prestige Features ...............................................................................................41
1.2.1 Physical Features .....................................................................................41
1.2.1.1 USB Port .........................................................................................41
1.2.1.2 OTIST Button (P-335WT only) ........................................................41
1.2.1.3 10/100M Auto-negotiating Ethernet/Fast Ethernet Interface(s) .......41
1.2.1.4 Auto-crossover 10/100 Mbps Ethernet Interface(s) .........................42
1.2.1.5 4-Port Switch ...................................................................................42
1.2.1.6 Time and Date .................................................................................42
1.2.1.7 Reset Button ...................................................................................42
1.2.2 Non-Physical Features .............................................................................42
1.2.2.1 Print Server .....................................................................................42
1.2.2.2 OTIST (P-335WT only) ...................................................................42
1.2.2.3 Media Bandwidth Management .......................................................42
1.2.2.4 Trend Micro Security Services ........................................................42
1.2.2.5 IPSec VPN Capability ......................................................................43
1.2.2.6 Firewall ............................................................................................43
1.2.2.7 IEEE 802.1x Network Security (P-335WT only) ..............................43
1.2.2.8 Content Filtering ..............................................................................43
1.2.2.9 Brute-Force Password Guessing Protection ...................................43
1.2.2.10 802.11b Wireless LAN Standard (P-335WT only) .........................43
1.2.2.11 802.11g Wireless LAN Standard (P-335WT only) .........................44
1.2.2.12 Packet Filtering .............................................................................44
1.2.2.13 Universal Plug and Play (UPnP) ...................................................44
1.2.2.14 Call Scheduling .............................................................................44

P-335 Series User’s Guide
10
1.2.2.15 PPPoE ...........................................................................................44
1.2.2.16 PPTP Encapsulation .....................................................................45
1.2.2.17 Dynamic DNS Support ..................................................................45
1.2.2.18 IP Multicast ....................................................................................45
1.2.2.19 IP Alias ..........................................................................................45
1.2.2.20 SNMP ............................................................................................45
1.2.2.21 Network Address Translation (NAT) ..............................................45
1.2.2.22 Traffic Redirect ..............................................................................45
1.2.2.23 Port Forwarding .............................................................................46
1.2.2.24 DHCP (Dynamic Host Configuration Protocol) ..............................46
1.2.2.25 Any IP ............................................................................................46
1.2.2.26 Full Network Management ............................................................46
1.2.2.27 RoadRunner Support ....................................................................46
1.2.2.28 Logging and Tracing ......................................................................46
1.2.2.29 Upgrade Prestige Firmware via LAN .............................................46
1.2.2.30 Embedded FTP and TFTP Servers ...............................................46
1.2.2.31 Wireless Association List (P-335WT only) ....................................47
1.2.2.32 Wireless LAN Channel Usage (P-335WT only) ............................47
1.3 Applications for the Prestige ..............................................................................47
1.3.1 Print Server Application ............................................................................47
1.3.2 Secure Broadband Internet Access via Cable or DSL Modem .................47
1.3.3 VPN Application ........................................................................................48
1.3.4 Wireless LAN Application (P-335WT only) ...............................................48
Chapter 2
Introducing the Web Configurator........................................................................ 51
2.1 Web Configurator Overview ...............................................................................51
2.2 Accessing the Prestige Web Configurator .........................................................51
2.3 Resetting the Prestige ........................................................................................52
2.3.1 Procedure To Use The Reset Button ........................................................52
2.3.2 Navigating the Prestige Web Configurator ...............................................52
2.3.3 Navigation Panel .......................................................................................53
Chapter 3
Wizard Setup .......................................................................................................... 57
3.1 Wizard Setup Overview ......................................................................................57
3.2 Wizard Setup: General Setup and System Name ..............................................57
3.2.1 Domain Name ...........................................................................................57
3.3 Wizard Setup: Wireless LAN (P-335WT only) ....................................................58
3.3.1 Wizard Setup : Wireless LAN : Basic Security ..........................................59
3.3.2 Wizard Setup : Wireless LAN : Extended Security ...................................61
3.4 Wizard Setup : Wireless LAN : OTIST (P-335WT only) .....................................61
3.5 Wizard Setup : Internet Access ..........................................................................63

P-335 Series User’s Guide
11
3.5.1 Ethernet ....................................................................................................63
3.5.2 PPPoE Encapsulation ...............................................................................64
3.5.3 PPTP Encapsulation .................................................................................65
3.6 Wizard Setup : WAN ..........................................................................................67
3.6.1 WAN IP Address Assignment ...................................................................67
3.6.2 IP Address and Subnet Mask ...................................................................67
3.6.3 DNS Server Address Assignment .............................................................68
3.6.4 WAN MAC Address ..................................................................................68
3.7 Wizard Setup : Complete ...................................................................................71
Chapter 4
Media Bandwidth Management Setup.................................................................. 73
4.1 Media Bandwidth Management Setup Overview ...............................................73
4.2 Media Bandwidth Management Setup ...............................................................73
4.3 Media Bandwidth Management Setup : Services ..............................................74
4.4 Media Bandwidth Management Setup : Service Priority ....................................75
4.5 Media Bandwidth Management Setup Complete ...............................................76
Chapter 5
System Screens ..................................................................................................... 77
5.1 System Overview ...............................................................................................77
5.2 Configuring General Setup .................................................................................77
5.3 Dynamic DNS .....................................................................................................79
5.3.1 DynDNS Wildcard .....................................................................................79
5.4 Configuring Dynamic DNS .................................................................................79
5.5 Configuring Password ........................................................................................81
5.6 Configuring Time Setting ....................................................................................81
Chapter 6
LAN Screens........................................................................................................... 85
6.1 LAN Overview ....................................................................................................85
6.2 DHCP Setup .......................................................................................................85
6.2.1 IP Pool Setup ............................................................................................85
6.2.2 System DNS Servers ................................................................................85
6.3 LAN TCP/IP ........................................................................................................85
6.3.1 Factory LAN Defaults ................................................................................85
6.3.2 IP Address and Subnet Mask ...................................................................86
6.3.3 RIP Setup .................................................................................................86
6.3.4 Multicast ....................................................................................................86
6.4 Any IP .................................................................................................................87
6.4.1 How Any IP Works ....................................................................................88
6.5 Configuring IP ....................................................................................................88
6.6 Configuring Static DHCP ....................................................................................91

P-335 Series User’s Guide
12
6.7 Configuring IP Alias ............................................................................................92
Chapter 7
Wireless Configuration and Roaming .................................................................. 95
7.1 Wireless LAN Overview .....................................................................................95
7.1.1 IBSS ..........................................................................................................95
7.1.2 BSS ...........................................................................................................95
7.1.3 ESS ...........................................................................................................96
7.2 Wireless LAN Basics ..........................................................................................97
7.2.1 RTS/CTS .................................................................................................97
7.2.2 Fragmentation Threshold ..........................................................................98
7.3 Configuring Wireless ..........................................................................................99
7.4 Configuring Roaming .......................................................................................101
7.4.1 Requirements for Roaming .....................................................................102
Chapter 8
Wireless Security ..................................................................... 105
8.1 Wireless Security Overview .............................................................................105
8.2 Security Parameters Summary ........................................................................107
8.3 WEP Overview .................................................................................................108
8.3.1 Data Encryption .....................................................................................108
8.3.1.1 Authentication ...............................................................................108
8.3.2 Preamble Type ........................................................................................109
8.4 Configuring WEP Encryption ............................................................................109
8.5 Introduction to WPA ......................................................................................... 111
8.5.1 User Authentication ............................................................................... 111
8.5.2 Encryption ..............................................................................................112
8.5.3 WPA-PSK Application Example ..............................................................112
8.6 Configuring WPA-PSK Authentication ..............................................................113
8.7 Wireless Client WPA Supplicants .....................................................................115
8.8 Introduction to RADIUS ...................................................................................115
8.8.1 Types of RADIUS Messages ..................................................................116
8.8.1.1 Access-Challenge .........................................................................116
8.8.1.2 Accounting-Request ......................................................................116
8.8.1.3 Accounting-Response ...................................................................116
8.8.1.4 EAP Authentication Overview .......................................................116
8.8.2 WPA with RADIUS Application Example ................................................117
8.9 Configuring WPA Authentication ......................................................................118
8.10 802.1x Overview ............................................................................................121
8.11 Dynamic WEP Key Exchange ........................................................................121
8.12 Configuring 802.1x and Dynamic WEP Key Exchange ..................................122
8.13 Configuring 802.1x and Static WEP Key Exchange .......................................125
8.14 Configuring 802.1x .........................................................................................128

P-335 Series User’s Guide
13
8.15 MAC Filter ......................................................................................................131
8.16 One-Touch Intelligent Security Technology ....................................................133
8.17 Prestige OTIST Configuration ........................................................................133
8.17.1 OTIST button ........................................................................................133
8.17.2 Web Configurator ..................................................................................133
8.18 Wireless Client OTIST Configuration .............................................................135
8.18.1 Manual ..................................................................................................135
8.18.2 Automatic ..............................................................................................136
Chapter 9
WAN Screens ........................................................................................................ 137
9.1 WAN Overview .................................................................................................137
9.2 TCP/IP Priority (Metric) ....................................................................................137
9.3 Configuring Route ............................................................................................137
9.4 Configuring WAN ISP .......................................................................................138
9.4.1 Ethernet Encapsulation ...........................................................................138
9.4.2 PPPoE Encapsulation .............................................................................139
9.4.3 PPTP Encapsulation ...............................................................................142
9.5 Configuring WAN IP .........................................................................................144
9.6 Configuring WAN MAC .....................................................................................147
9.7 Traffic Redirect .................................................................................................148
9.8 Configuring Traffic Redirect ..............................................................................149
Chapter 10
Network Address Translation (NAT) Screens .................................................... 153
10.1 NAT Overview ................................................................................................153
10.1.1 NAT Definitions .....................................................................................153
10.1.2 What NAT Does ....................................................................................154
10.1.3 How NAT Works ...................................................................................154
10.1.4 NAT Application ....................................................................................155
10.1.5 NAT Mapping Types .............................................................................155
10.2 Using NAT ......................................................................................................157
10.2.1 SUA (Single User Account) Versus NAT ..............................................157
10.3 SUA Server ....................................................................................................157
10.3.1 Default Server IP Address ....................................................................157
10.3.2 Port Forwarding: Services and Port Numbers ......................................158
10.3.3 Configuring Servers Behind SUA (Example) ........................................159
10.4 Configuring SUA Server ................................................................................159
10.5 Configuring Address Mapping ........................................................................161
10.5.1 Configuring Address Mapping ..............................................................162
10.6 Trigger Port Forwarding .................................................................................164
10.6.1 Trigger Port Forwarding Example .........................................................164
10.6.2 Two Points To Remember About Trigger Ports .....................................165

P-335 Series User’s Guide
14
10.7 Configuring Trigger Port Forwarding ..............................................................165
Chapter 11
Static Route Screens ........................................................................................... 167
11.1 Static Route Overview ....................................................................................167
11.2 Configuring IP Static Route ............................................................................167
11.2.1 Configuring Route Entry ........................................................................168
Chapter 12
UPnP...................................................................................................................... 171
12.1 Universal Plug and Play Overview ................................................................171
12.1.1 How Do I Know If I'm Using UPnP? ......................................................171
12.1.2 NAT Traversal .......................................................................................171
12.1.3 Cautions with UPnP ..............................................................................171
12.2 UPnP and ZyXEL ...........................................................................................172
12.3 Configuring UPnP ..........................................................................................172
12.4 Installing UPnP in Windows Example ............................................................173
12.4.1 Installing UPnP in Windows Me ............................................................174
12.4.2 Installing UPnP in Windows XP ............................................................175
12.5 Using UPnP in Windows XP Example ...........................................................176
12.5.1 Auto-discover Your UPnP-enabled Network Device .............................177
12.5.2 Web Configurator Easy Access ............................................................178
12.5.3 Web Configurator Easy Access ............................................................179
Chapter 13
Trend Micro Security Services............................................................................ 181
13.1 Trend Micro Security Service Overview .........................................................181
13.2 Configuring Service Settings ..........................................................................181
13.3 Virus Protection ..............................................................................................183
13.4 Configuring Virus Protection ..........................................................................183
13.5 Parental Controls ...........................................................................................185
13.6 Parental Controls Configuration .....................................................................185
13.6.1 Parental Controls Statistics ...................................................................189
Chapter 14
Firewall.................................................................................................................. 191
14.1 Introduction ....................................................................................................191
14.1.1 What is a Firewall? ...............................................................................191
14.1.2 Stateful Inspection Firewall. ..................................................................191
14.1.3 About the Prestige Firewall ...................................................................191
14.1.4 Guidelines For Enhancing Security With Your Firewall ........................192
14.2 Firewall Settings Screen ................................................................................192
14.3 The Firewall, NAT and Remote Management ................................................194

P-335 Series User’s Guide
15
14.3.1 LAN-to-WAN rules ................................................................................194
14.3.2 WAN-to-LAN rules ................................................................................195
14.4 Services ........................................................................................................195
Chapter 15
Content Filtering ................................................................................................. 199
15.1 Introduction to Content Filtering .....................................................................199
15.2 Restrict Web Features ...................................................................................199
15.3 Days and Times .............................................................................................199
15.4 Configure Content Filtering ............................................................................199
15.5 Customizing Keyword Blocking URL Checking ..............................................202
15.5.1 Domain Name or IP Address URL Checking ........................................202
15.5.2 Full Path URL Checking .......................................................................202
15.5.3 File Name URL Checking .....................................................................202
Chapter 16
Remote Management Screens ............................................................................ 205
16.1 Remote Management Overview .....................................................................205
16.1.1 Remote Management Limitations .........................................................205
16.1.2 Remote Management and NAT ............................................................206
16.1.3 System Timeout ...................................................................................206
16.2 Configuring WWW ..........................................................................................206
16.3 Configuring Telnet ..........................................................................................207
16.4 Configuring TELNET ......................................................................................208
16.5 Configuring FTP .............................................................................................209
16.6 SNMP .............................................................................................................210
16.6.1 Supported MIBs ....................................................................................211
16.6.2 SNMP Traps .........................................................................................211
16.6.3 Configuring SNMP ................................................................................211
16.7 Configuring DNS ............................................................................................213
16.8 Configuring Security .......................................................................................214
Chapter 17
Introduction to IPSec ........................................................................................... 217
17.1 VPN Overview ................................................................................................217
17.1.1 IPSec ....................................................................................................217
17.1.2 Security Association .............................................................................217
17.1.3 Other Terminology ................................................................................217
17.1.3.1 Encryption ...................................................................................217
17.1.3.2 Data Confidentiality .....................................................................218
17.1.3.3 Data Integrity ...............................................................................218
17.1.3.4 Data Origin Authentication ..........................................................218
17.1.4 VPN Applications ..................................................................................218

P-335 Series User’s Guide
16
17.2 IPSec Architecture .........................................................................................218
17.2.1 IPSec Algorithms ..................................................................................219
17.2.2 Key Management ..................................................................................219
17.3 Encapsulation .................................................................................................219
17.3.1 Transport Mode ....................................................................................220
17.3.2 Tunnel Mode .........................................................................................220
17.4 IPSec and NAT ...............................................................................................220
Chapter 18
VPN Screens....................................................................................................... 223
18.1 VPN/IPSec Overview .....................................................................................223
18.2 IPSec Algorithms ............................................................................................223
18.2.1 AH (Authentication Header) Protocol ....................................................223
18.2.2 ESP (Encapsulating Security Payload) Protocol ..................................223
18.3 My IP Address ................................................................................................224
18.4 Secure Gateway Address ..............................................................................224
18.4.1 Dynamic Secure Gateway Address ......................................................225
18.5 Summary Screen ...........................................................................................225
18.6 Keep Alive ......................................................................................................227
18.7 NAT Traversal ................................................................................................227
18.7.1 NAT Traversal Configuration .................................................................227
18.7.2 Remote DNS Server .............................................................................228
18.8 ID Type and Content ......................................................................................229
18.8.1 ID Type and Content Examples ............................................................230
18.9 Pre-Shared Key ..............................................................................................230
18.10 Editing VPN Rules ........................................................................................231
18.11 IKE Phases ..................................................................................................234
18.11.1 Negotiation Mode ................................................................................235
18.11.2 Diffie-Hellman (DH) Key Groups .........................................................236
18.11.3 Perfect Forward Secrecy (PFS) ..........................................................236
18.12 Configuring Advanced IKE Settings .............................................................236
18.13 Manual Key Setup ........................................................................................241
18.13.1 Security Parameter Index (SPI) ..........................................................242
18.14 Configuring Manual Key ...............................................................................242
18.15 Viewing SA Monitor ......................................................................................245
18.16 Configuring Global Setting ...........................................................................246
18.17 Telecommuter VPN/IPSec Examples ...........................................................247
18.17.1 Telecommuters Sharing One VPN Rule Example ..............................247
18.17.2 Telecommuters Using Unique VPN Rules Example ...........................248
18.18 VPN and Remote Management ...................................................................249

P-335 Series User’s Guide
17
Chapter 19
Centralized Logs .................................................................................................. 251
19.1 View Log ........................................................................................................251
19.2 Log Settings ...................................................................................................252
Chapter 20
Print Server........................................................................................................... 257
20.1 Print Server Overview ....................................................................................257
20.2 Prestige Print Server ......................................................................................257
20.2.1 Installation Requirements .....................................................................257
20.3 Prestige Print Server Configuration ................................................................258
Chapter 21
Media Bandwidth Management........................................................................... 259
21.1 Bandwidth Management Overview ................................................................259
21.1.1 Application-based Bandwidth Management Example ..........................259
21.1.2 Subnet-based Bandwidth Management Example .................................260
21.1.3 Application and Subnet-based Bandwidth Management Example .......260
21.1.4 Bandwidth Usage Example ...................................................................261
21.1.5 Bandwidth Management Priorities ........................................................263
21.1.6 Bandwidth Management Services ........................................................263
21.1.6.1 Xbox Live ....................................................................................263
21.1.6.2 VoIP (SIP) ..................................................................................264
21.1.6.3 FTP .............................................................................................264
21.1.6.4 E-Mail ..........................................................................................264
21.1.6.5 eMule/eDonkey ...........................................................................264
21.1.6.6 WWW ..........................................................................................264
21.1.7 Services ................................................................................................265
21.2 Configuration Screen .....................................................................................266
21.3 Editing Bandwidth Management Rules ..........................................................268
21.3.1 Bandwidth Borrowing ...........................................................................268
21.4 Configuring Bandwidth Management Rules and Services .............................269
21.5 Monitor Screen ...............................................................................................270
Chapter 22
Maintenance ......................................................................................................... 273
22.1 Maintenance Overview ...................................................................................273
22.2 Status Screen .................................................................................................273
22.2.1 System Statistics ...................................................................................275
22.3 DHCP Table Screen .......................................................................................275
22.4 Any IP Table ...................................................................................................276
22.5 Association List ..............................................................................................277
22.6 F/W Upload Screen ........................................................................................278

P-335 Series User’s Guide
18
22.7 Configuration Screen .....................................................................................281
22.7.1 Backup Configuration ...........................................................................282
22.7.2 Restore Configuration ..........................................................................283
22.7.3 Back to Factory Defaults .......................................................................284
22.8 Restart Screen ...............................................................................................284
Chapter 23
Introducing the SMT ............................................................................................ 287
23.1 SMT Introduction ............................................................................................287
23.1.1 Procedure for SMT Configuration via Telnet .........................................287
23.1.2 Entering Password ................................................................................287
23.1.3 Prestige SMT Menu Overview ..............................................................288
23.2 Navigating the SMT Interface .........................................................................289
23.2.1 System Management Terminal Interface Summary ..............................290
23.3 Changing the System Password ....................................................................291
Chapter 24
Menu 1 General Setup ......................................................................................... 293
24.1 General Setup ................................................................................................293
24.2 Procedure To Configure Menu 1 ....................................................................293
24.2.1 Procedure to Configure Dynamic DNS .................................................295
Chapter 25
Menu 2 WAN Setup .............................................................................................. 297
25.1 Introduction to WAN .......................................................................................297
25.2 WAN Setup .....................................................................................................297
Chapter 26
Menu 3 LAN Setup ............................................................................................... 299
26.1 LAN Setup ......................................................................................................299
26.1.1 General Ethernet Setup ........................................................................299
26.2 Protocol Dependent Ethernet Setup ..............................................................300
26.3 TCP/IP Ethernet Setup and DHCP ................................................................300
26.3.1 IP Alias Setup .......................................................................................302
26.4 Wireless LAN Setup (P-335WT only) .............................................................303
26.4.1 Configuring MAC Address Filter ...........................................................305
26.4.2 Configuring Roaming on the Prestige ...................................................307
Chapter 27
Internet Access .................................................................................................... 309
27.1 Introduction to Internet Access Setup ............................................................309
27.2 Ethernet Encapsulation ..................................................................................309
27.3 Configuring the PPTP Client ..........................................................................311

P-335 Series User’s Guide
19
27.4 Configuring the PPPoE Client ........................................................................311
27.5 Basic Setup Complete ....................................................................................312
Chapter 28
Remote Node Configuration ............................................................................... 313
28.1 Introduction to Remote Node Setup ...............................................................313
28.2 Remote Node Profile Setup ...........................................................................313
28.2.1 Ethernet Encapsulation .........................................................................313
28.2.2 PPPoE Encapsulation ...........................................................................315
28.2.2.1 Outgoing Authentication Protocol ................................................315
28.2.2.2 Nailed-Up Connection .................................................................316
28.2.3 PPTP Encapsulation .............................................................................316
28.3 Edit IP .............................................................................................................317
28.4 Remote Node Filter ........................................................................................319
28.4.1 Traffic Redirect Setup ...........................................................................320
Chapter 29
Static Route Setup ............................................................................................... 323
29.1 IP Static Route Setup .....................................................................................323
Chapter 30
Network Address Translation (NAT) ................................................................... 325
30.1 Using NAT ......................................................................................................325
30.1.1 SUA (Single User Account) Versus NAT ..............................................325
30.2 Applying NAT .................................................................................................325
30.3 NAT Setup ......................................................................................................327
30.3.1 Address Mapping Sets ..........................................................................328
30.3.1.1 User-Defined Address Mapping Sets ..........................................329
30.3.1.2 Ordering Your Rules ....................................................................330
30.4 Configuring a Server behind NAT ..................................................................332
30.5 General NAT Examples ..................................................................................333
30.5.1 Example 1: Internet Access Only ..........................................................333
30.5.2 Example 2: Internet Access with an Inside Server ...............................334
30.5.3 Example 3: Multiple Public IP Addresses With Inside Servers .............335
30.5.4 Example 4: NAT Unfriendly Application Programs ...............................338
30.6 Configuring Trigger Port Forwarding .............................................................339
Chapter 31
Enabling the Firewall ........................................................................................... 341
31.1 Remote Management and the Firewall ..........................................................341
31.2 Access Methods .............................................................................................341
31.3 Enabling the Firewall ......................................................................................341

P-335 Series User’s Guide
20
Chapter 32
Filter Configuration .............................................................................................. 343
32.1 Introduction to Filters ......................................................................................343
32.1.1 The Filter Structure of the Prestige .......................................................344
32.2 Configuring a Filter Set ..................................................................................345
32.2.1 Configuring a Filter Rule .......................................................................346
32.2.2 Configuring a TCP/IP Filter Rule ..........................................................347
32.2.3 Configuring a Generic Filter Rule .........................................................349
32.3 Example Filter ................................................................................................351
32.4 Filter Types and NAT ......................................................................................353
32.5 Firewall Versus Filters ....................................................................................354
32.6 Applying a Filter ............................................................................................354
32.6.1 Applying LAN Filters .............................................................................354
32.6.2 Applying Remote Node Filters ..............................................................355
Chapter 33
SNMP Configuration ............................................................................................ 357
33.1 About SNMP ..................................................................................................357
33.2 Supported MIBs ............................................................................................358
33.3 SNMP Configuration ......................................................................................358
33.4 SNMP Traps ...................................................................................................359
Chapter 34
System Security ................................................................................................... 361
34.1 System Security .............................................................................................361
34.1.1 System Password .................................................................................361
34.1.2 Configuring External RADIUS Server ...................................................361
34.1.3 802.1x ...................................................................................................363
Chapter 35
System Information and Diagnosis .................................................................... 367
35.1 System Status ................................................................................................367
35.2 System Information ........................................................................................369
35.2.1 System Information ...............................................................................369
35.2.2 Console Port Speed ..............................................................................370
35.3 Log and Trace ................................................................................................370
35.3.1 Syslog Logging .....................................................................................370
35.3.1.1 CDR ............................................................................................372
35.3.1.2 Packet triggered ..........................................................................374
35.3.1.3 Filter log .....................................................................................374
35.3.1.4 PPP log ......................................................................................374
35.3.1.5 Firewall log ..................................................................................375
35.3.2 Call-Triggering Packet ..........................................................................375