Zyxel 2602HWL-D3A - Manuals

Page 2 - Prestige 2602HWL-D3A Support Notes

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 2 INDEX APPLICATION NOTES .............................................................................................................................................................. 8 G ENERAL A P...

Page 8 - Application Notes; General Application Notes; components needs to be checked before accessing the Internet.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 8 What is the difference between Open System and Shared Key of Authentication Type ? ................................................ 210 What is 802.1x ? ...............................................

Page 9 - Before you begin; Control Panel/Network; In the; Select Network Component Type; and click; Add

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 9  Before you begin The Prestige is shipped with the following factory default: 1. IP address = 192.168.1.1, subnet mask = 255.255.255.0 (24 bits) 2. DHCP server enabled with IP pool starting from 1...

Page 10 - Follow these steps to configure Windows TCP/IP:; Disable WINS Resolution; Retrieve Prestige Web

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 10  In the Select Network Protocol windows, select Microsoft from the manufacturers, then select TCP/IP from the Network Protocols and click OK . 3. TCP/IP Configuration Follow these steps to config...

Page 11 - Configure Prestige for Internet access by using WIZARD SETUP

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 11 3. Configure Prestige for Internet access by using WIZARD SETUP The Web screen shown below takes PPPoE as the example.

Page 12 - Setup the Prestige as a DHCP Relay

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 12 Setup the Prestige as a DHCP Relay  What is DHCP Relay? DHCP stands for Dynamic Host Configuration Protocol. In addition to the DHCP server feature, the P2602 supports the DHCP relay function. Wh...

Page 13 - Setup the Prestige as a DHCP Client

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 13 LAN clients. When it is configured as DHCP relay, it is reponsable for forwarding the requests and responses negotiating between the DHCP clients and the server. See figure 1.  Setup the Prestige...

Page 14 - Edit IP Alias= No; Configure an Internal Server Behind SUA; Introduction

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 14 Edit IP Alias= No Press ENTER to Confirm or ESC to Cancel: Configure an Internal Server Behind SUA  Introduction If you wish, you can make internal servers (e.g., Web, ftp or mail server) accessi...

Page 15 - WAN IP; address which can be obtained from menu 24.1.; Port numbers for some services; Service; FTP

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 15 To make a server visible to the outside world, specify the port number of the service and the inside address of the server in 'Menu 15.2.1', Multiple Server Configuration. The outside users can ac...

Page 16 - Configure a PPTP server Behind SUA

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 16 DNS (Domain Name Server) 53 www-http (Web) 80 Configure a PPTP server Behind SUA  Introduction PPTP is a tunneling protocol defined by the PPTP forum that allows PPP packets to be encapsulated wi...

Page 18 - logging to NT RAS server.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 18 o PPTP client setup (Win9x)  Add one VPN connection from Dial-Up Networking by entering the correct username & password and the IP address of the Prestige's Internet IP address for logging to...

Page 20 - inside; network and the other is the; outside; How NAT works

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 20 Using NAT / Multi-NAT  What is Multi-NAT? NAT (Network Address Translation-NAT RFC 1631) is the translation of an Internet Protocol address used within one network to a different IP address known...

Page 21 - NAT Mapping Types; One to One

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 21 1. NAT Mapping Types NAT supports five types of IP/port mapping. They are: 2. One to One In One-to-One mode, the Prestige maps one ILA to one IGA. 3. Many to One In Many-to-One mode, the Prestige ...

Page 22 - The following table summarizes these types.; NAT Type; The Prestige now has

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 22 The following table summarizes these types. NAT Type IP Mapping Mapping Direction One-to-One ILA1<--->IGA1 Both Many-to-One (SUA/PAT) ILA1---->IGA1 ILA2---->IGA1 ... Outgoing Many-to-M...

Page 23 - access in menu 4. Enter 4 from the Main Menu to go to Menu 4-; Network Address Translation

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 23 You apply NAT via menus 4 and 11.3 as displayed next. The next figure how you apply NAT for Internet access in menu 4. Enter 4 from the Main Menu to go to Menu 4- Internet Access Setup . Menu 4 - ...

Page 24 - Full Feature; NAT Server Sets

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 24 Overload mapping. Select Full Feature when you require other mapping types. It is a convenient, pre-configured, read only, Many-to-One mapping set, sufficient for most purposes and helpful to peop...

Page 26 - Field

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 26 The following table explains the fields in this screen. Please note that the fields in this menu are read-only. Field Description Option/Example Set Name This is the name of the set you selected i...

Page 27 - Please note

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 27 9. 10. Action= Edit , Select Rule= 0 Press ENTER to Confirm or ESC to Cancel: We will just look at the differences from the previous menu. Note that, this screen is not read only, so we have extra...

Page 29 - Step 1. Enter 15 in the Main Menu to go to Menu 15-NAT Setup.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 29 The NAT Server Set is a list of LAN side servers mapped to external ports (similar to the old SUA menu of before). If you wish, you can make inside servers for different services, e.g., Web or FTP...

Page 32 - Internet Access with an Internal Server

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 32 From Menu 4 shown above simply choose the SUA Only option from the NAT field. This is the Many-to-One mapping discussed earlier. The SUA read only option from the NAT field in menu 4 and 11.3 is s...

Page 33 - Server

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 33 8. 0 0 0.0.0.0 9. 0 0 0.0.0.0 10. 0 0 0.0.0.0 11. 0 0 0.0.0.0 12. 0 0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: 3. Using Multiple Global IP addresses for clients and servers (One-to-One, Ma...

Page 37 - Support Non NAT Friendly Applications

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 37 9. 10. Press ESC or RETURN to Exit: Step 3: Now we configure all other incoming traffic to go to our web server aand mail server from Menu 15.2 - NAT Server Setup (not Set 1, Set 1 is used for SUA...

Page 41 - About Filter & Filter Examples; How does ZyXEL filter work?; Filter Structure

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 41 ... Server (SUA) Server 1 IP<--->IGA1 Server 2 IP<--->IGA1 About Filter & Filter Examples How does ZyXEL filter work?  Filter Structure The Prestige allows you to configure up to ...

Page 42 - Filter Types and SUA; Conceptually, there are two categories of filter rules:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 42  Filter Types and SUA Conceptually, there are two categories of filter rules: device and protocol . The Generic filter rules belong to the device category; they act on the raw data from/to LAN an...

Page 43 - LAN device and protocol input filter sets.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 43 In order to allow users to specify the local network IP address and port number in the filter rules with SUA connections, the TCP/IP filter function has to be executed before SUA for WAN outgoing ...

Page 46 - device filters; filter for blocking the web service; Configuration

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 46 Outgoing: Session Options: My Login= testt Edit Filter Sets= Yes My Password= ***** Authen= CHAP/PAP Press ENTER to Confirm or ESC to Cancel: Menu 11.5: Menu 11.5 - Remote Node Filter Input Filter...

Page 47 - Apply the filter set in menu 4

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 47 1. The outbound packet type (protocol & port number) 2. The source IP address Generally, the outbound packets for Web service could be as following: a. HTTP packet, TCP (06) protocol with port...

Page 50 - A filter for blocking a specific client

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 50 Menu 21.1 - Filter Rules Summary # A Type Filter Rules M m n - - ---- -------------------------------------- - - - 1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=80 N D N 2 Y IP Pr=6, SA=0.0.0.0, DA=0.0....

Page 51 - One rule for blocking all packets from this client; A filter for blocking a specific MAC address

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 51 2. One rule for blocking all packets from this client Menu 21.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 0 IP Source Route= No Destination: IP ...

Page 52 - Before you Begin

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 52 This configuration example shows you how to use a Generic Filter to block a specific MAC address of the LAN. Before you Begin Before you configure the filter, you need to know the MAC address of t...

Page 53 - Configurations

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 53 + Internet Protocol - Version (MSB 4 bits): 4 - Header length (LSB 4 bits): 5 - Service type: Precd=Routine, Delay=Normal, Thrput=Normal, Reli=Normal - Total length: 60 (Octets) - Fragment ID: 601...

Page 55 - You can now apply it to the

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 55  Action Matched= Enter the action you want if the masked packet matches the 'Value'. In this case, we will drop it.  Action Not Matched= Enter the action you want if the masked packet does not m...

Page 56 - A filter for blocking the NetBIOS packets

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 56 A filter for blocking the NetBIOS packets  Introduction The NETBIOS protocol is used to share a Microsoft comupter of a workgroup. For the security concern, the NetBIOS connection to a outside ho...

Page 57 - Rule 1-Destination port number 137 with protocol number 6 (TCP)

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 57 Set # Comments Set # Comments ------ ----------------- ------ ----------------- 1 NetBIOS_WAN 7 _______________ 2 NetBIOS_LAN 8 _______________ 3 _______________ 9 _______________ 4 ______________...

Page 58 - Rule 2-Destination port number 137 with protocol number 17 (UDP)

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 58  Rule 2-Destination port number 137 with protocol number 17 (UDP) Menu 21.1.2 - TCP/IP Filter Rule Filter #: 1,2 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 17 IP Source Route= No De...

Page 59 - Rule 4-Destination port number 138 with protocol number 17 (UDP)

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 59 IP Protocol= 6 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 138 Port # Comp= Equal Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 0 Port # Comp= None TCP Estab= No...

Page 60 - Rule 5-Destination port number 139 with protocol number 6 (TCP)

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 60 Action Matched= Drop Action Not Matched= Check Next Rule Press ENTER to Confirm or ESC to Cancel:  Rule 5-Destination port number 139 with protocol number 6 (TCP) Menu 21.1.5 - TCP/IP Filter Rule...

Page 62 - in the remote node

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 62  Apply the first filter set 'NetBIOS_WAN' to the 'Output Protocol Filter' in the remote node setup. Configure the second filter set 'NetBIOS_LAN' by selecting the Filter Set number 2.  Rule 1-So...

Page 63 - in the Menu 3 for blocking

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 63 IP Protocol= 17 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 53 Port # Comp= Equal Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 137 Port # Comp= Equal TCP Estab=...

Page 64 - The DDNS servers the Prestige supports currently is

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 64 protocol filters= 2 device filters= Output Filter Sets: protocol filters= device filters= Using the Dynamic DNS (DDNS) 1. What is DDNS? The DDNS service, an IP Registry provides a public central d...

Page 65 - Key Settings for using DDNS function:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 65 Menu 1 - General Setup System Name= Prestige Location= Contact Person's Name= Domain Name= Edit Dynamic DNS= Yes Route IP= Yes Bridge= No Menu 1.1 - Configure Dynamic DNS Service Provider= WWW.Dyn...

Page 66 - Password; Enter the password that the DDNS server gives to you.; Enable Wildcard; Enter the hostname for the wildcard function that the; Network Management Using SNMP; The; Simple Network Management Protocol; (SNMP) is an applications-layer protocol used to exchange the; Management Information Base

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 66 Password Enter the password that the DDNS server gives to you. Enable Wildcard Enter the hostname for the wildcard function that the WWW.DYNDNS.ORG supports. Note that Wildcard option is available...

Page 67 - Reads

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 67 The current Internet-standard MIB, MIB-II, is defined in RFC 1213 and contains 171 objects. These objects are grouped by protocol (including TCP, IP, UDP, SNMP, and other categories, including 'sy...

Page 68 - Get; Allows the NMS to retrieve an object variable from the agent.; GetNext; operation, followed by a series of GetNext operations.; Set; Allows the NMS to set values for object variables within an agent.; Trap; Used by the agent to inform the NMS of some events.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 68 2. SNMPv1 Operations SNMP itself is a simple request/response protocol. 4 SNMPv1 operations are defined as below.  Get Allows the NMS to retrieve an object variable from the agent.  GetNext Allo...

Page 69 - The SNMP PDU contains the following fields:; PDU type; Specifies the type of PDU.; Request ID; Associates requests with responses.; Error status; Indicates an error and an error type.; Error index; Associates the error with a particular object variable.; ZyXEL SNMP Implementation; If the machine coldstarts, the trap will be sent after booting.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 69 so on) and the object values involved in the operation. The following figure shows the SNMPv1 message format. The SNMP PDU contains the following fields:  PDU type Specifies the type of PDU.  Re...

Page 70 - If the machine warmstarts, the trap will be sent after booting.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 70  warmStart (defined in RFC-1215) : If the machine warmstarts, the trap will be sent after booting.  linkDown (defined in RFC-1215) : If any link of IDSL or WAN is down, the trap will be sent wit...

Page 71 - Configure the Prestige for SNMP

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 71 4. Configure the Prestige for SNMP The SNMP related settings in Prestige are configured in menu 22, SNMP Configuration. The following steps describe a simple setup procedure for configuring all SN...

Page 72 - Option; Using syslog

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 72 Trap: Community= public Destination= 192.168.1.33 Press ENTER to Confirm or ESC to Cancel: Key Settings: Option Descriptions Get Community Enter the correct Get Community. This Get Community must ...

Page 73 - UNIX Setup

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 73 Configuration: 1. Active, use the space bar to turn on the syslog option. 2. Syslog IP Address, enter the IP address of the UNIX server that you wish to send the syslog. 3. Log Facility, use the s...

Page 74 - Packet triggered log; This message is available when the

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 74 L02 Call Terminated C02 Call Terminated Example: Feb 14 16:57:17 192.168.1.1 ZyXEL Communications Corp.: board 0 line 0 channel 0, call 18, C01 Incoming Call OK Feb 14 17:07:18 192.168.1.1 ZyXEL C...

Page 75 - PPP Log

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 75 prot: Protocol (TCP,UDP,ICMP) spo: Source port dpo: Destination port Example: Jul 19 14:44:09 192.168.1.1 ZyXEL Communications Corp.: IP[Src=202.132.154.1 Dst=192.168.1.33 UDP spo=0035 dpo=05d4]}S...

Page 76 - Using IP Alias

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 76 Using IP Alias  What is IP Alias ? In a typical environment, a LAN router is required to connect two local networks. The Prestige can connect three local networks to the ISP or a remote node, we ...

Page 77 - IP Alias Setup; DHCP Setup

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 77 Two new protocol filter interfaces in menu 3.2.1 allow you to accept or deny LAN packets from/to the IP alias 1 and IP alias 2 go through the Prestige. The filter set in menu 3.1 is used for main ...

Page 78 - Edit IP Alias; IP Alias 1; Toggle to; IP Alias 2; Toggle to; Using Call Scheduling; What is Call Scheduling ?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 78 Edit IP Alias Toggle to 'Yes' to enter menu 3.2.1 for setting up the second and third networks. 2. Edit the second and third networks in menu 3.2.1 by configuring the Prestige's second and third L...

Page 79 - SMT Menu for Call Scheduling

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 79 Call scheduling enables the mechanisim for the Prestige to run the remote node connection according to the pre-defined schedule.This feature is just like the scheduler ina video recorder which rec...

Page 81 - completely, it will be deleted automatically.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 81 Start Date Start date of this schedule rule. It can be unmatched with weekday setting. For example, if Start Date is 2004/10/02(Monday), but Monday setting in weekday can be No. How Often If once ...

Page 82 - Time Service in Prestige

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 82 Session Options: Edit Filter Sets= No Idle Timeout(sec)= 100 Edit Traffic Redirect= No Press ENTER to Confirm or ESC to Cancel:  Time Service in Prestige There is no RTC (Real-Time Clock) chip so...

Page 83 - Using IP Multicast; What is IP Multicast ?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 83 Press ENTER to Confirm or ESC to Cancel: Using IP Multicast  What is IP Multicast ? Traditionally, IP packets are transmitted in two ways - unicast or broadcast. Multicast is a third way to deliv...

Page 84 - Multicast

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 84 IP Subnet Mask= 255.255.255.0 RIP Direction= Both Version= RIP-2B Multicast= IGMP-v2 IP Policies= Edit IP Alias= No Press ENTER to Confirm or ESC to Cancel: Enable IGMP in Prestige's remote node i...

Page 85 - Using Prestige traffic redirect; What is Traffic Redirect ?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 85 Using Prestige traffic redirect  What is Traffic Redirect ? Traffic redirect forwards WAN traffic to a backup gateway when Prestige cannot connect to the Internet through it's normal gateway. Thu...

Page 88 - Devices; UPnP Operations

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 88  Devices : Network devices, such as networking gateways, TV, refrigerators, printers...etc, which provides services.  Services : Services are provided by devices, such as time services provided ...

Page 89 - Using UPnP in ZyXEL devices; Device: Prestige Router

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 89  Eventing: Devices can send event message to notify control points if there is any update on services provided.  Presentation: Each device can provide their own control interface by URL link. So...

Page 90 - The first check box enables UPnP function in this device.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 90 Go to Advanced->UPnP, check two boxes, Active UPnP feature and Allow users to make configuration changes through UPnP. The first check box enables UPnP function in this device. The second check...

Page 91 - Start a Video conversation with one online user.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 91 3. Start a Video conversation with one online user. 4. On the opposite side, your partner selects Accept to accept your conversation request.

Page 93 - Wireless Application Notes; Infrastructure mode; What is Infrastructure mode?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 93 Wireless Application Notes Infrastructure mode What is Infrastructure mode? Infrastructure mode, sometimes referred to as Access Point mode, is an operating mode of an 802.11b/Wi-Fi client unit. I...

Page 94 - Configuration Prestige Wireless using SMT.; From the SMT main menu, enter 3 to display Menu 3 – LAN Setup.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 94 Configuration Prestige Wireless using SMT. To configure Infrastructure mode of your Prestige wireless VoIP IAD please follow the steps below. 1. From the SMT main menu, enter 3 to display Menu 3 –...

Page 95 - When finish click on apply button to take effect.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 95 Edit MAC Address Filter= No Press ENTER to Confirm or ESC to Cancel: 3. Configure ESSID, Channel ID, WEP, Default Key and Keys as yo desire. Configuration Wireless Access Point to Infrastructure m...

Page 96 - Configuration Wireless Station to Infrastructure mode

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 96  Configuration Wireless Station to Infrastructure mode To configure Infrastructure mode on your ZyAIR B-100/B-200/B-300 wireless NIC card please follow the following steps. 1. Double click on the...

Page 97 - Double click on the AP you want to associated with.

Page 98 - Wireless MAC address filtering; MAC Filter Overview; ZyXEL MAC Filter Implementation

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 98 6. After the client have associated with the selected AP. The linked AP's channel, current linkup rate, SSID, link quality, and signal strength will show on the Link Info page. You now successfull...

Page 100 - MAC Address

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 100 MAC Address This field specifies those MAC Addresses that you want to add in the list. If you use WEB configuration, the MAC Address Filter configuration are as shown below. 1. Using a web browse...

Page 101 - WEP configuration (Wired Equivalent Privacy)

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 101 WEP configuration (Wired Equivalent Privacy) Introduction The 802.11 standard describes the communication that occurs in wireless LANs. The Wired Equivalent Privacy (WEP) algorithm is used to pro...

Page 102 - Setting up the Access Point

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 102 Setting up the Access Point Most access points and clients have the ability to hold up to 4 WEP keys simultaneously. You need to specify one of the 4 keys as default Key for data encryption. To s...

Page 103 - Key settings

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 103 You can set up the Access Point by SMT or Web configurator  Setting up the Access Point from SMT Menu 3.5 B1000 hold up to 4 WEP Keys. You have to specify one of the 4 keys as default Key which ...

Page 104 - The access point will decrypt the data by its Key 2.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 104 Key3= 0x 3456789ABC Key4= 0x 456789ABCD 128-bit WEP with 13 characters Key1= 2e3f4w345ytre Key2= 5y7jse8r4i038 Key3= 24fg70okx3fr7 Key4= 98jui2wss35u4 128-bit WEP with 26 hexadecimal digits ('0-9...

Page 105 - Setting up the Station

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 105 Key settings Enter exactly 5, 13 or 29 characters to match the security strength 40/64bit, 128-bit, 256-nit respectively. Setting up the Station 1. Double click on the utility icon in your window...

Page 106 - Select encryption type corresponds with access point.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 106 Note: If the utility icon doesn't exist in your task bar, click Start -> Programs -> IEEE802.11b WLAN Card -> IEEE802.11b WLAN Card. 2. Select the 'Encryption' tab. Select encryption typ...

Page 108 - The WEP Encryption type of station has to equal to the access point.; IEEE 802 LAN infrastructures; authentication process fails.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 108 Key settings The WEP Encryption type of station has to equal to the access point. Check 'ASCII' field for characters WEP key or uncheck 'ASCII' field for Hexadecimal digits WEP key. Hexadecimal d...

Page 109 - Authenticator

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 109 IEEE 802.1x authentication is a client-server architecture delivered with EAPOL (Extensible Authentication Protocol over LAN). The authentication server authenticates each client connected to a A...

Page 110 - access the services provided by the authenticator.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 110 The device (i.e. RADIUS server) provides an authentication service to an authenticator. This service determines, from the credentials provided by the supplicant, whether the supplicant is authori...

Page 111 - EAPOL (Extensible Authentication Protocol over LAN)

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 111 1. Force Authorized : Disables 802.1x and causes the port to transition to the authorized state without any authentication exchange required. The port transmits and receives normal traffic withou...

Page 112 - EAPOL Exchange between 802.1x Authenticator and Supplicant

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 112 The EAP protocol can support multiple authentication mechanisms, such as MD5-challenge, One-Time Passwords, Generic Token Card, TLS and TTLS etc. Typically, the authenticator will send an initial...

Page 114 - required for authentication.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 114  EAP-Packet : Both the supplicant and the authenticator send this packet when authentication is taking place. This is the packet that contains either the MD5-Challenge or TLS information require...

Page 115 - If you use WEB Configuration,; Apply; to make your setting work.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 115 Menu 23.4 - System Security - IEEE802.1x Wireless Port Control= No Authentication Required ReAuthentication Timer (in second)= N/A Idle Timeout (in second)= N/A Key Management Protocol= N/A Dynam...

Page 116 - Using Internal Authentication Server; Menu 14 - Dial-in User Setup

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 116  Using Internal Authentication Server ZyXEL Wireless Access Point has an internal authentication server for authenticating the wireless 802.1x client users. It builds total 32-users database and...

Page 117 - ZyXEL; Enter a username up to 31 alphanumeric characters long.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 117 2. ________ 10. ________ 18. ________ 26. ________ 3. ________ 11. ________ 19. ________ 27. ________ 4. ________ 12. ________ 20. ________ 28. ________ 5. ________ 13. ________ 21. ________ 29. ...

Page 118 - Using External RADIUS Authentication Server

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 118  Using External RADIUS Authentication Server In addition to the internal authentication server inside ZyXEL AP, you can use external RADIUS authentication server to centrally manage the user acc...

Page 119 - Menu 23.2 - System Security - RADIUS Server; Server Address=

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 119 between the supplicant and the authentication server until authentication succeeds or fails. If the authentication succeeds, the switch port becomes authorized. The specific exchange of EAP frame...

Page 120 - Key settings for authentication server:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 120 Shared Secret= ***** Accounting Server: Active= Yes Server Address= 192.168.1.100 Port #= 1813 Shared Secret= ****** Press ENTER to Confirm or ESC to Cancel: Key settings for authentication serve...

Page 121 - Site Survey; Preparation

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 121 Site Survey Introduction What is Site Survey? An RF site survey is a MAP to RF contour of RF coverage in a particular facility. With wireless system it is very difficult to predict the propagatio...

Page 122 - Survey on Site; Install an access point at the preliminary location.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 122 3. Identify user's area, when doing so ask a question where is wireless coverage needed and where does not, and note and take note on the diagram this is information is needed to determine the nu...

Page 124 - PSTN Lifeline Application Notes; Usage of PSTN Lifeline

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 124 Note: If there are more than one access point is needed be sure to make the adjacent access point service area over lap one another. So the wireless station are able to roam. For more information...

Page 125 - Lifeline configuration

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 125 Furthermore, when the P2602HWL – D3A experience power loss such as in case of earthquake and other natural hazard that cause power loss, it will automatically switch to PSTN line and you can dial...

Page 126 - Relay to PSTN; Firgure 1 Splitter type

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 126 Relay to PSTN The Relay to PSTN field can be found under PSTN configuration WEB GUI in Relay to PSTN section. This field is used to specify phone numbers to which the Prestige will always send ca...

Page 127 - VoIP Application Notes

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 127 1. The P2602HWL-D3A includes a DSL cable and a RJ-11 cable. Connect the DSL cable to the DSL port and connect RJ-11 to Lifeline port. 2. Connect the RJ11 to the splitter phone jack or a telephone...

Page 128 - Setup SIP Account

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 128 Setup SIP Account VoIP is the sending of voice signals over the Internet Protocol. This allows you to make phone calls and send faxes over the Internet at a fraction of the cost of using the trad...

Page 129 - Each field's detail description on this page is listed below.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 129 Step 1. Open the web browser from your workstation to connect to the Prestige by entering the Management IP address of the Prestige (LAN IP address). The default management IP of Prestige is 192....

Page 131 - Phone port settings; To configure the phone port setting, please follow the below step.; Each field's detail description is listed below.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 131 Phone port settings Prestige allows you to configure the volume and echo cancellation setting for each individual phone port. To configure the phone port setting, please follow the below step. St...

Page 132 - Label; Click; VoIP; in the navigation panel and then; SIP; to open the; Advanced Settings

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 132 Label Description Speaking Volume Use this field to set the loudness that the Prestige uses for the speech signal that it sends to the peer device. -1 is the quietest and 1 is the loudest. Listen...

Page 133 - Each field's detail description of the page is listed below.; settings with the SIP account displayed here..

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 133 Each field's detail description of the page is listed below. Label Description SIP Account This read-only field displays the number of the SIP account that you are configuring. The changes that y...

Page 138 - prefix number. These numbers must be for phones on the PSTN (not VoIP

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 138 Voice – Common Settings Click VoIP -> Phone -> Common to display the following screen. Use this screen to configure Immediate Dial Click VoIP -> Phone -> Region to display the followi...

Page 139 - to display

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 139 phones). Call Service Mode Use this field to set how the Prestige handles supplementary phone services (call hold, call waiting, call transfer and three-way conference calls). Select the mode tha...

Page 141 - Unconditional Forward to Number; your SIP account has a call connected.; No Answer Forward to Number; whenever you do not answer the call after a specific time period.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 141 Unconditional Forward to Number Enable this feature to have the Prestige forward incoming calls to the number that you configure. Busy Forward to Number Enable this feature to have the Prestige f...

Page 144 - Scenario; A calls B and start conversation; Scenario 1

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 144 telephone number. If there is a second call to your telephone number, you will hear a call waiting tone. Scenario A calls B and start conversation C calls A In this scenario, there are 3 kinds of...

Page 145 - Scenario 2

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 145 Scenario 2 : If A presses flash key + 1, A will disconnect B and answer C. Scenario 3 : If A presses flash key + 2, A will put B on hold and answer C.

Page 147 - Call Transfer setup; Three kinds of call transfer service available:; Blind Transfer; A dial to B

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 147 Call Transfer setup This feature allows transfer an incoming call (that you have answered) to another phone. Note: The primary call between user A and user B must be answered before transfer can ...

Page 148 - To active Blind Transfer please follow the steps below:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 148 If user A does not want to communicate with user B or user C after call transfer, user A could choose Blind Transfer. To active Blind Transfer please follow the steps below: Step 1: A flash, B MO...

Page 149 - To active Consult On - hold Transfer please follow the steps below:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 149 To active Consult On - hold Transfer please follow the steps below: Step 1: A flash, B MOH (Music On Hold). Step 2: A dial *98# + C’s Number. Step 3: C rings, A hears the ring back tone. Step 4: ...

Page 150 - To active Attendant Transfer please follow the steps below:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 150 To active Attendant Transfer please follow the steps below: Step 1: A flash, B MOH (Music On Hold). Step 2: A dial to C. Step 3: C rings, A hears the ring back tone. Step 4: C off hook, A and C s...

Page 151 - relay outgoing calls to IP network when PSTN line is unplugged.; Call Fallback; another phone in the system.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 151 phone calls to PSTN network if the DSL line is unplugged or SIP account cannot be registered, or relay outgoing calls to IP network when PSTN line is unplugged. You may set up Call Fallback easil...

Page 152 - Phone Configuration:; Call Park Call Flow; When a call has been established between A and the caller:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 152 Phone Configuration: Press *97# + park number to park the call Press #97# + park number to pick-up the call Call Park Call Flow When a call has been established between A and the caller: To Call ...

Page 153 - Call Pickup Call Flow; missed). The last incoming call can be through either SIP or PSTN.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 153 Call Pickup Call Flow To pick up the call, you only need to input #97# and the park number: In the graph below, user B presses #97# + park number (5000) to pick up the call. Call Return With call...

Page 154 - In both scenarios, user A only needs to pick up the phone and press; Distinctive Ringing; Application Scenario:; Distinctive Ring

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 154 In both scenarios, user A only needs to pick up the phone and press “*66#”, and B will ring automatically. Distinctive Ringing With the distinctive ring feature, you can assign different ringing ...

Page 155 - Each filed is described in the following table:

Page 156 - How do you configure DND on phone keypad?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 156 Do Not Disturb (DND) This feature allows you to set your phone not to ring when someone calls you. You can set each phone independently using its keypad, or configure global setting for all phone...

Page 157 - Advanced

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 157 For example, if you need to block the call from 3333 (SIP Number) for 2 hours, you just need to input *95#3333*2# on the phone keypad, and it will implement this feature. Hot Line (Auto Dial) Thi...

Page 158 - Music on hold

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 158 ras> voice config fxs save 1 Music on hold This feature allows you to put a call on hold and have the other person hear a piece of audio (music, speech, etc.) you previously recorded. Applicat...

Page 159 - Trunking; composed of fixed and mobile telephones.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 159 Trunking VoIP trunking connects an IP network (like the Internet) and the Public Switched Telephone Ne twork (PSTN). PSTN includes the world’s circuit-switched telephone network which is composed...

Page 160 - DTMF Mode field needs to be set to SIP INFO.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 160 Note: VoIP Trunking requires the following additional configuration in the VoIP > SIP > SIP Setting > Advanced Setup screen: Voice Compression field needs to be set to G.729 and DTMF Mod...

Page 161 - another side PSTN network.; Configuration details; Choose “Activate Trunking”in P2602HWL-D3A web GUI:; Authentication; , set username 103 and password 1234 for item 1, then click the

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 161 Phone 3 number: 103, it is a PTSN phone. In this graph, User X uses Phone 1 to make a Speed Dial to call user Y who is located in the another side PSTN network. Once dials #01 on phone 1, phone 3...

Page 164 - Trunking: SIP to FXO; Choose “Activate Trunking”on P2602HWL-D3A web GUI:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 164 Trunking: SIP to FXO User X uses phone 1 (SIP number: 33333) to make a call to the ZyXEL Device A via VoIP. A forwards the call to User Y PSTN phone (103). Application Scenario: Device A is P2602...

Page 165 - No special configuration needed.; Trunking: FXO to SIP; connects B over IP network.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 165 On Device B: No special configuration needed. Trunking: FXO to SIP User Y uses PSTN phone (103) to make a call to the ZyXEL Device A FXO (101). Device A connects B over IP network. Application Sc...

Page 167 - Trunking: FXO to FXO

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 167 Trunking: FXO to FXO User X uses PSTN phone (203) to make a call to the Device B FXO (201), Device B connects to a peer device A over Internet, and A forwards the call to User Y PSTN phone (103)....

Page 168 - , Input username 1234 and password 1234 then click the

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 168 Configuration details On Device A: Step 1: Choose “Activate Trunking”on P2602HWL-D3A web GUI: VoIP > Trunking > General . Step 2: Set Auto Attendant Timeout 10 sec, Dialing Interval 3 sec o...

Page 169 - Choose “Activate Trunking” on P2602HWL-D3A web GUI:; VoIP > Trunking > Peer Call > Outgoing Authentication

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 169 On Device B: Step 1: Choose “Activate Trunking” on P2602HWL-D3A web GUI: VoIP > Trunking > General , then click the “Apply” button. Step 2: Set an Outgoing Authentication account. It consis...

Page 170 - connect to in order to complete the call.; FAQ; ZyNOS FAQ; How do I access the embedded web configurator?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 170 Step 3: Create a Call Rule. This rule tells P2602HWL-D3A which remote peer device it should connect to in order to complete the call. On P2602HWL-D3A web GUI: VoIP > Trunking > Call Rule , ...

Page 171 - Log on into the web configurator.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 171 The Web configurator a user friendly configuration interface via user's web browser, which can be access by typing in the LAN IP address of the Prestige in users web browser. To access the Presti...

Page 172 - How do I upload or backup ROMFILE via web configurator?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 172 How do I upload or backup ROMFILE via web configurator? In some situations, you may need to upload the ROMFILE, restore to previous saved configuration, or the need of resetting SMT to factory de...

Page 173 - What should I do if I forget the system password?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 173 c. The default filter rule 3 (Telnet_FTP_WAN) is applied in the Input Protocol field in menu 11.5. What should I do if I forget the system password? In case you forget the system password. You ca...

Page 174 - How many network users can the SUA/NAT support?; Product FAQ; What is the Prestige Integrated Access Device?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 174 The design goal of ZyXEL's SUA is to minimize the Internet access cost in a small office environment by using a single IP address to represent the multiple hosts inside. It does more than IP addr...

Page 175 - Will the Prestige work with my Internet connection?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 175 Will the Prestige work with my Internet connection? The Prestige is designed to be compatible major ISP utilize ADSL as a broadband service. Prestige IAD offers an Ethernet port to connect to you...

Page 176 - Web browser- web server embedded for easy configurations

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 176 Why does my provider use PPPoE? PPPoE emulates a familiar Dial-Up connection. It allows your ISP to provide services using their existing network configuration over the broadband connections. Bes...

Page 177 - How does e-mail work through the Prestige?; SUA Server Setup; What DHCP capability does the Prestige support?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 177 How does e-mail work through the Prestige? It depends on what kind of IP you have: Static or Dynamic. If your company has a domain name, it means that you have a static IP address. Suppose your c...

Page 178 - What network interface does the new Prestige series support?; Switch on LAN and ADSL port on WAN.; How does the Prestige support TFTP?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 178 What network interface does the new Prestige series support? The new Prestige series support auto MDX/MDIX 10/100M Ethernet LAN port to connect to the computer or Switch on LAN and ADSL port on W...

Page 179 - Make local server accessible from outside Internet

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 179 To create the appearance of faster network access, service companies plan to store or "cache" frequently requested web sites and Usenet newsgroups on a server at their head-end. Storing d...

Page 181 - Overload; What is the difference between SUA and Multi-NAT?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 181 Overload ILA2<--->IGA2 ILA3<--->IGA1 ILA4<--->IGA2 ... Many-to-Many No Overload ILA1<--->IGA1 ILA2<--->IGA2 ILA3<--->IGA3 ILA4<--->IGA4 ... Server Server...

Page 182 - When do I need DDNS service?; What is DDNS wildcard?; Yes, the Prestige supports DDNS wildcard that

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 182 (e.g., www.zyxel.com.tw) for your server (e.g., Web server) from a DDNS server. The outside users can always access the web server using the www.zyxel.com.tw regardless of the WAN IP of the 312. ...

Page 183 - How do I setup my Prestige for routing IPsec packets over SUA?; PSTN Lifeline FAQ; What does Lifeline mean?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 183 How do I setup my Prestige for routing IPsec packets over SUA? For outgoing IPsec tunnels, no extra setting is required. For forwarding the inbound IPsec ESP tunnel, A 'Default' server set in men...

Page 184 - Can I make an outgoing PSTN call through P2602HWL; VoIP FAQ; What is Voice over IP?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 184 Can I make an outgoing PSTN call through P2602HWL – 6xC? Yes, P2602HWL – 6xC allows you to make outgoing PSTN call via a prefix number that is defined in the configurable lifeline table. It allow...

Page 185 - What advantage does Voice over IP can provide?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 185 What advantage does Voice over IP can provide? The advantage of VoIP is it can provide advance services such as joining e-mail, instant messaging, video, voice mail all together. Where current ci...

Page 186 - What is the relation of codec and VoIP?; Prestige supports the following commonly used codec.; Which codec should I choose?; The minimum required to use VoIP is as follow.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 186 What is the relation of codec and VoIP? As VoIP is a general term send voice information in digital form in discrete packets over digital network and this digital network is public network, thus ...

Page 187 - Unable to register with the SIP server?; If you are unable to register with SIP server.; I can register but can not establish a call?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 187 Unable to register with the SIP server? If you are unable to register with SIP server. 1. Make sure the Internet is reachable and the SIP register server is reachable. If your register server use...

Page 188 - Your device firmware version and romfile with password.; Firewall FAQ; What is a network firewall?; Conceptually, there are three types of firewalls:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 188 1. Serial number of the device. 2. SIP Call server type and vendor. 3. Your device firmware version and romfile with password. 4. Detail information what you have tried to resolve the problem. I ...

Page 189 - by mean of a proxy. A key drawback of this device is performance.; What kind of firewall is the Prestige?; application layer.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 189 Packet Filtering Firewalls generally make their decisions based on the header information in individual packets. These header information include the source, destination addresses and ports of th...

Page 190 - network resources.; What is Ping of Death attack?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 190 What is Denials of Service (DoS)attack? Denial of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable...

Page 191 - What is LAND attack?; unavailable while the target system tries to respond to itself.; What is IP Spoofing attack?; be allowed through the router or firewall.; What are the default ACL firewall rules in Prestige?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 191 What is LAND attack? In a LAN attack, hackers flood SYN packets to the network with a spoofed source IP address of the targeted system. This makes it appear as if the host computer sent the packe...

Page 192 - How can I protect against IP spoofing attacks?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 192 How can I protect against IP spoofing attacks? The Prestige's firewall will automatically detect the IP spoofing and drop it if the firewall is turned on. If the firewall is not turned on we can ...

Page 193 - Content Filter FAQ; What types of content filter does Prestige provide?; Yes, you can use key word blocking to achieve this.; How many URL keywords does Prestige support?; IPSec FAQ; Security

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 193 Content Filter FAQ What types of content filter does Prestige provide? Can I have different policies in effect for different times of the day or week? Yes, but only one blocking period of time is...

Page 194 - Cost; making a long direct connection to the remote office.; What are most common VPN protocols?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 194 With encryption, VPN guarantees the confidentiality of the original user data. Cost 1). Cut long distance phone charges Because users typically dial the their local ISP for VPN, thus, long distan...

Page 195 - What secure protocols does IPSec support?; lacking of IPSec capability.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 195 provides cryptographic security services. These services allow for authentication, integrity, access control, and confidentiality. IPSec allows for the information exchanged between remote sites ...

Page 196 - What are the differences between IKE and manual key VPN?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 196 What is Pre-Shared Key? A pre-shared key identifies a communicating party during a phase 1 IKE negotiation. It is called 'Pre-shared' because you have to share it with another party before you ca...

Page 197 - When should I use FQDN?; phase 1 negotiation .; Is my Prestige ready for IPSec VPN?; firmware from our web site.; How do I configure Prestige VPN?; tunnels. Prestige 100 supports 100 tunnels.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 197 E-mail [email protected] Please note that, in Prestige, if "DNS" or "E-mail" type is choosen, you can still use a random string as the content, such as "this_is_Prestige...

Page 198 - What VPN protocols are supported by Prestige?; two go always together). Confidentiality; Source IP/Destination IP; addresses are indistinguishable, and VPN will not work.; Secure Gateway IP Address

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 198 What VPN protocols are supported by Prestige? All Prestige series support ESP (protocol number 50) and AH (protocol number 51). What types of encryption does Prestige VPN support? Prestige suppor...

Page 199 - Does Prestige support dynamic secure gateway IP?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 199 172.16.0.0 - 172.31.255.255 (these address ranges are reserved by internet standard for private LAN numberings behind NAT devices). It is usually a static IP so that we can pre-configure it in Pr...

Page 200 - Will ZyXEL support Secure Remote Management?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 200  Windows 2000, Windows XP IPSec Will ZyXEL support Secure Remote Management? Yes, we will support it and we are working on it currently. Does Prestige VPN support NetBIOS broadcast? The current ...

Page 201 - We presume your environment may look like this,

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 201 If I have NAT router between two VPN gateways, and I would like to use IP type as Phase 1 ID, what should I know? We presume your environment may look like this,

Page 202 - How can I keep a tunnel alive?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 202 VPN client: 10.1.33.33 NAT router WAN IP: 202.132.154.2 Prestige WAN: 202.132.154.3 Since the VPN client is behind a NAT router, it must have a private IP address in most case. This may cause the...

Page 203 - gateway simultaneously?; Wireless FAQ; What is a Wireless LAN ?; wireless client population.; What are the advantages of Wireless LANs ?; walls and ceilings.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 203 Can Prestige behave as a NAT router supporting IPSec passthrough and an IPSec gateway simultaneously? No, Prestige can't support them simultaneously. You need to choose either one. If Prestige is...

Page 204 - roaming over a broad area.; What are the disadvantages of Wireless LANs ?; is higher than hubs and CAT 5 cables.; Where can you find wireless 802.11 networks ?; Mbps transmission in the 2.4 GHz ISM band using either FHSS or DSSS.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 204 LAN hardware, overall installation expenses and life-cycle costs can be significantly lower. Long-term cost benefits are greatest in dynamic environments requiring frequent moves and changes. e. ...

Page 205 - Is it possible to use products from a variety of vendors ?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 205 What is 802.11b ? 802.11b is the first revision of 802.11 standard allowing data rates up to 11Mbps in the 2.4GHz ISM band. Also known as 802.11 High-Rate and Wi-Fi. 802.11b only uses DSSS, the m...

Page 206 - What types of devices use the 2.4GHz Band ?; Factors of interference:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 206 What is Wi-Fi ? The Wi-Fi logo signifies that a product is interoperable with wireless networking equipment from other vendors. A Wi-Fi logo product has been tested and certified by the Wireless ...

Page 207 - Minimizing the number of walls and ceilings; What's the difference between a WLAN and a WWAN ?; or any connection to a wired network.; What is Infrastructure mode ?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 207 Solution : 1.Minimizing the number of walls and ceilings 2.Antenna is positioned for best reception 3.Keep WLAN products away from electrical devices, eg: microwaves, monitors, electric motors,…,...

Page 208 - What is Frequency-hopping Spread Spectrum Technology; password between base stations and clients.; What is an ESSID ?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 208 bit-pattern at the sending station into a higher data rate bit sequence using a "chipping" code. The chipping code (also known as processing gain) introduces redundancy which allows data ...

Page 209 - How do I secure the data across an Access Point's radio link ?; packets sent across a radio link.; Can the SSID be encrypted ?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 209 How do I secure the data across an Access Point's radio link ? Enable Wired Equivalency Protocol (WEP) or Wi-Fi Protected Access (WPA) to encrypt the payload of packets sent across a radio link. ...

Page 210 - What are Insertion Attacks?; through a security process and review.; What is Wireless Sniffer?

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 210 WEP is turned on. The SSID goes over the air in clear text. This makes obtaining the SSID easy by sniffing 802.11 wireless traffic. By turning off the broadcast of SSID, can someone still sniff t...

Page 211 - Authentication required ?; mechanism for accounting.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 211 users' access to IEEE 802 networks such as Ethernet (IEEE 802.3) and Wireless LAN (IEEE 802.11). For IEEE 802.11 WLAN, IEEE 802.1x authentication can be based on username/password or digital cert...

Page 212 - Trouble Shooting; Using Embedded Packet Trace; Embedded Packet Trace; Online Trace--display the trace real time on screen; The details for capturing the trace in SMT menu 24.8 are as follows.

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 212 What is WPA-PSK? WPA-PSK (Wi-Fi Protected Access Pre-Shared Key) can be used if user do not have a Radius server but still want to benefit from it. Because WPA-PSK only requires a single password...

Page 213 - Online Trace; Display the brief trace online by entering:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 213 Online Trace 1. Trace LAN packet 2. Trace WAN packet 1. Trace LAN packet 1.1 Disable to capture the WAN packet by entering: sys trcp channel enet1 none 1.2 Enable to capture the LAN packet by ent...

Page 217 - Trace WAN packet

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 217 Urgent Ptr = 0x0000 (0) TCP Data: (Length=6, Captured=6) 0000: 20 20 20 20 20 20 RAW DATA: 0000: 00 A0 C5 92 13 11 00 80-C8 4C EA 63 08 00 45 00 .........L.c..E. 0010: 00 28 35 0B 40 00 80 06-3C ...

Page 221 - sys trcp channel enet1 none; sys trcp sw off; sys trcp brief

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 221 Header Length = 20 Flags = 0x11 (.A...F) Window Size = 0x1DD5 (7637) Checksum = 0x7A11 (31249) Urgent Ptr = 0x0000 (0) RAW DATA: 0000: 00 A0 C5 01 23 45 00 A0-C5 92 13 12 08 00 45 00 ....#E.........

Page 223 - Wait for packet passing through Prestige over WAN; Display the trace briefly by entering:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 223 TCP Header: Source Port = 0x0050 (80) Destination Port = 0x044F (1103) Sequence Number = 0xD91B1826 (3642431526) Ack Number = 0x00AA405F (11157599) Header Length = 24 Flags = 0x12 (.A..S.) Window...

Page 226 - Debug PPPoE Connection

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 226 Header Checksum = 0xD59C (54684) Source IP = 0xCA849B61 (202.132.155.97) Destination IP = 0xCCD90002 (204.217.0.2) TCP Header: Source Port = 0x2826 (10278) Destination Port = 0x0050 (80) Sequence...

Page 227 - Example- A trace with system crashes

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 227 The Prestige supports traces when there is problem to connect your ISP using PPPoE protocol. Please follow the procedure below to collect the trace for our troubleshooting. 1. Remove the LAN cabl...

Page 230 - LAN/WAN Packet Trace; The format of the display is as following:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 230 ........................................ done VC5402 Init...OK Press ENTER to continue... Enter Password : XXXX LAN/WAN Packet Trace The Prestige packet trace records and analyzes packets running...

Page 231 - Disable to capture the WAN packet by entering:

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 231 1.1 Disable to capture the WAN packet by entering: sys trcp channel mpoa00 none 1.2 Enable to capture the LAN packet by entering: sys trcp channel enet0 bothway 1.3 Enable the trace log by enteri...

Page 236 - Offline Trace

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 236 Fragment Offset = 0x00 Time to Live = 0xEE (238) Protocol = 0x06 (TCP) Header Checksum = 0xA9AB (43435) Source IP = 0xC01F0782 (192.31.7.130) Destination IP = 0xCA849B61 (202.132.155.97) TCP Head...

Page 237 - CLI Command List

Prestige 2602HWL-D3A Support Notes All contents copyright (c) 2007 ZyXEL Communications Corporation. 237 1. Trace LAN packet 1.1 Disable the capture of the WAN packet by entering: sys trcp channel mpoa00 none 1.2 Enable the capture of the LAN packet by entering: sys trcp channel enet0 bothway 1.3 En...