Page 2 - P-660 Series Support Notes; INDEX
P-660 Series Support Notes INDEX ZyNOS FAQ ............................................................................................................. 3 1. What is ZyNOS? ................................................................................................ 3 2. How do I access the Prest...
Page 3 - General Application Notes
P-660 Series Support Notes 3. What is the micro filter used for? .................................................................... 13 4. How do I know the ADSL line is up? .............................................................. 13 5. How does the P-660 work on a noisy ADSL? ..................
Page 4 - ZyNOS FAQ; How do I access the Prestige SMT menu?; VT100 terminal emulation; How do I update the firmware and configuration file?; The procedure for uploading ZyNOS via console is as follows.
P-660 Series Support Notes ZyNOS FAQ 1. What is ZyNOS? ZyNOS is ZyXEL's proprietary Network Operating System. It is the platform on all Prestige routers that delivers network services and applications. It is designed in a modular fashion so it is easy for developers to add new features. New ZyNOS so...
Page 5 - How do I upload ROMFILE via console port?
P-660 Series Support Notes c. Use X-modem protocol to transfer the ZyNOS code d. Enter 'ATGO' to restart the Prestige 6. How do I upgrade/backup the ZyNOS firmware by using TFTP client program via LAN? The Prestige allows you to transfer the firmware to Prestige by using TFTP program via LAN. The pr...
Page 6 - RESET button
P-660 Series Support Notes b. Use the RESET button on the rear panel of P-660 to reset the router. After the router is reset, the LAN IP address and the SMT password will be reset to '192.168.1.1' and '1234' . So now you can reach the router through console port or telnet again. c. Upload the defaul...
Page 7 - NAT Server Setup; Make local server accessible from outside Internet; One to One
P-660 Series Support Notes 13. Is it possible to access a server running behind SUA from the outside Internet? If possible, how? Yes, it is possible because P-660 delivers the packet to the local server by looking up to a SUA server table. Therefore, to make a local server accessible to the outside ...
Page 8 - Server; The following table summarizes these types.; NAT Type; Many; What are Device filters and Protocol filters?
P-660 Series Support Notes 4. Many One-to-One In Many One-to-One mode, the P-660 maps each ILA to unique IGA. 5. Server In Server mode, the P-660 maps multiple inside servers to one global IP address. This allows us to specify multiple servers of different types behind the NAT for outside access. No...
Page 9 - Why can't I configure device filters or protocol filters?
P-660 Series Support Notes 18. Why can't I configure device filters or protocol filters? In ZyNOS, you can not mix different filter groups in the same filter set. 19. How can I protect against IP spoofing attacks? The Prestige's filter sets provide a means to protect against IP spoofing attacks. The...
Page 10 - General FAQ; What is the micro filter or splitter used for
P-660 Series Support Notes General FAQ 1. How can I manage P-660? Menu driven user interface for easy network management Local and remote console management Web configurator Telnet remote management TFTP (Trivial File Transfer Protocol) and FTP firmware upgrade and configuration backup and r...
Page 12 - Configure Dynamic DNS.; How do I setup my P-660 for routing IPSec packets over SUA?; For outgoing IPSec tunnels, no extra setting is required.
P-660 Series Support Notes 10. What is DDNS wildcard? Does the P-660 support DDNS wildcard? Some DDNS servers support the wildcard feature which allows the hostname, *.yourhost.dyndns.org, to be aliased to the same IP address as yourhost.dyndns.org. This feature is useful when there are multiple ser...
Page 13 - The maximum bandwidth allocated to this connection. The
P-660 Series Support Notes 14. What do the parameters (PCR, SCR, MBS) mean? Traffic shaping parameters (PCR, SCR, MBS) can be set in Menu 4 and Menu 11.6 and is valid for both incoming and outgoing direction since G.shdsl is symmetric. Peak Cell Rate(PCR): The maximum bandwidth allocated to this con...
Page 14 - ADSL FAQ; How does ADSL compare to Cable modems?
P-660 Series Support Notes ADSL FAQ 1. How does ADSL compare to Cable modems? ADSL provides a dedicated service over a single telephone line; cable modems offer a dedicated service over a shared media. While cable modems have greater downstream bandwidth capabilities (up to 30 Mbps), that bandwidth ...
Page 15 - How do I know the details of my ADSL line statistics?
P-660 Series Support Notes 6. Does the VC-based multiplexing perform better than the LLC-based multiplexing? Though the LLC-based multiplexing can carry multiple protocols over a single VC, it requires extra header information to identify the protocol being carried on the virtual circuit (VC). The V...
Page 16 - Internet Access Using P-660 under Bridge mode; Setup your workstation; Set up your workstation; in its TCP/IP setup, please see the example
P-660 Series Support Notes General Application Notes 1. Internet Access Using P-660 under Bridge mode • Setup your workstation • Setup your P-660 under bridge mode If the ISP limits some specific computers to access Internet, that means only the traffic to/from these computers will be forwarded and ...
Page 17 - Setup your P-660 under bridge mode; Configure P-660 as bridge mode in Menu 1 General Setup.; Menu 1
P-660 Series Support Notes Setup your P-660 under bridge mode The following procedure shows you how to configure your P-660 as an ADSL Modem for bridging traffic. We will use SMT menu to guide you through the related menu. You can use console or Telnet for finishing these configurations. 1. Configur...
Page 18 - Configure for Internet setup in Menu 11-Remote Node Profile.; Option
P-660 Series Support Notes Menu 3.2 - TCP/IP and DHCP Setup DHCP Setup DHCP= None Client IP Pool Starting Address= N/A Size of Client IP Pool= N/A Primary DNS Server= N/A Secondary DNS Server= N/A Remote DHCP Server= N/A TCP/IP Setup: IP Address= 192.168.1.1 IP Subnet Mask= 255.255.255.0 RIP Directi...
Page 19 - number; Internet Access Using P-660 under Router mode
P-660 Series Support Notes 4. Configure ATM setting in Menu 11.6-Remote Node ATM Layer Options. In Menu 11.1, setup "Edit ATM Options= Yes" to enter Menu 11.6 sub-Menu. Menu 11.6 - Remote Node ATM Layer Options VPI #= 0 VCI #= 33 ATM QoS Type= CBR Peak Cell Rate (PCR)= 0 Sustain Cell Rate (S...
Page 20 - example shown below.; Menu 1– General Setup
P-660 Series Support Notes Connect the LAN ports of all computers and the P-660 to a HUB using a straight Ethernet cable. 2. TCP/IP configuration Since the P-660 is set to DHCP server as default, so you need only to configure the workstations as the DHCP clients in the networking settings. In this c...
Page 21 - Yes
P-660 Series Support Notes Contact Person's Name= Domain Name= Edit Dynamic DNS= No Route IP= Yes Bridge= No 2. Configure a LAN IP for the P-660 and the DHCP settings in Menu 3.2-TCP/IP Ethernet Setup. The settings except of the DNS addresses shown below are the pre-configured defaults. Menu 3.2 - T...
Page 22 - Dynamic; What is DHCP Relay?
P-660 Series Support Notes My Password= ******** Idle Timeout (sec)= 0 IP Address Assignment= Dynamic IP Address= N/A Network Address Translation= SUA Only Address Mapping Set= N/A Press ENTER to Confirm or ESC to Cancel: Key Settings: Option Description Encapsulation Select the correct Encapsulatio...
Page 23 - Setup the P-660 as a DHCP Client; Relay
P-660 Series Support Notes Setup the P-660 as a DHCP Client 1. Toggle the DHCP to Relay in menu 3.2 and enter the IP address of the DHCP server in the 'Relay Server Address' field. Menu 3.2 - TCP/IP and DHCP Ethernet Setup DHCP Setup DHCP= Relay Client IP Pool Starting Address= N/A Size of Client IP...
Page 24 - SUA
P-660 Series Support Notes Introduction Generally, SUA makes your LAN appear as a single machine to the outside world. LAN users are invisible to outside users. However, some applications such as Cu-SeeMe, and ICQ will need to connect to the local user behind the P-660. In such case, a SUA server mu...
Page 26 - WAN IP; Rule Start Port No. End Port No. IP Address
P-660 Series Support Notes Virtual Network Computing (VNC) None 5500/client IP 5800/client IP 5900/client IP AIM (AOL Instant Messenger) None for Chat and IM None for Chat and IM e-Donkey None 4661 - 4662/client IP POLYCOM Video Conferencing None Default/client IP iVISTA 4.1 None 80/server IP Micros...
Page 27 - Configure an Internal Server Behind SUA; Introduction
P-660 Series Support Notes 2. 0 0 0.0.0.0 3. 0 0 0.0.0.0 4. 0 0 0.0.0.0 5. 0 0 0.0.0.0 6. 0 0 0.0.0.0 7. 0 0 0.0.0.0 8. 0 0 0.0.0.0 9. 0 0 0.0.0.0 10. 0 0 0.0.0.0 Configure an Internal Server Behind SUA Introduction If you wish, you can make internal servers (e.g., Web, ftp or mail server) accessibl...
Page 28 - The outside users can access the local server using the P-660's; Port numbers for some services; Service
P-660 Series Support Notes The outside users can access the local server using the P-660's WAN IP address which can be obtained from menu 24.1. For example (Configuring an internal Web server for outside access) : Menu 15.2.1 - NAT Server Setup (Used for SUA Only) Rule Start Port No. End Port No. IP...
Page 29 - Window98 PPTP Client / Internet / NT RAS Server Protocol Stack
P-660 Series Support Notes PPTP is a tunneling protocol defined by the PPTP forum that allows PPP packets to be encapsulated within Internet Protocol (IP) packets and forwarded over any IP network, including the Internet itself. In order to run the Windows 9x PPTP client, you must be able to establi...
Page 32 - inside
P-660 Series Support Notes IP address from PNC Monitor or SMT Menu 24.1. If the Internet IP address is a fixed IP address provided by ISP in SUA mode, then you can always use this IP address for reaching the VPN server. In the following example, the IP address '140.113.1.225' is dynamically assigned...
Page 33 - we call this feature as; How NAT works
P-660 Series Support Notes we call this feature as 'Multi-NAT' . For more information on IP address translation, please refer to RFC 1631, The IP Network Address Translator (NAT). How NAT works If we define the local IP addresses as the Internal Local Addresses (ILA) and the global IP addresses as t...
Page 35 - SMT Menus; Applying NAT in the SMT Menus; Internet Access Setup; Full Feature
P-660 Series Support Notes servers had to be of different types. The P-660 supports NAT sets on a remote node basis. They are reusable, but only one set is allowed for each remote node. The P-660 supports 8 sets since there are 8 remote node. The default SUA (Read Only) Set in menu 15.1 is a conveni...
Page 36 - to; Full; Table: Applying NAT in Menu 4 and Menu 11.3
P-660 Series Support Notes Rem IP Addr = 0.0.0.0 Rem Subnet Mask= 0.0.0.0 My WAN Addr= N/A NAT= Full Feature Address Mapping Set= 1 Metric= 2 Private= No RIP Direction= None Version= RIP-1 Multicast= None IP Policies= Enter here to CONFIRM or ESC to CANCEL: Step 1. Enter 11 from the Main Menu. Step ...
Page 37 - Configuring NAT; Menu 15 - NAT Setup; Address Mapping Sets and NAT Server Sets; in menu 4 or 11.3, you must enter correct NAT Set as; SUA Only; NAT Server Sets; Enter Set Number to Edit:
P-660 Series Support Notes Configuring NAT To configure NAT, enter 15 from the Main Menu to bring up the following screen. Menu 15 - NAT Setup 1. Address Mapping Sets 2. NAT Server Sets Address Mapping Sets and NAT Server Sets Use the Address Mapping Sets menus and submenus to create the mapping tab...
Page 38 - Field
P-660 Series Support Notes Let's first look at Option 255. Option 255 is equivalent to SUA in previous ZyXEL routers. The fields in this menu cannot be changed. Entering 255 brings up this screen. Menu 15.1.255 - Address Mapping Rules Set Name= SUA (Read Only) Idx Local Start IP Local End IP Global ...
Page 39 - Please; Save Se; t in the; Action; field means to save the whole set. You must do this if
P-660 Series Support Notes Now let's look at Option 1 in Menu 15.1. Enter 1 to bring up this menu. Menu 15.1.1 - Address Mapping Rules Set Name= ? Idx Local Start IP Local End IP Global Start IP Global End IP Type --- --------------- --------------- --------------- --------------- ------ 1. 2. 3. 4....
Page 40 - Selecting; Edit; in the; field and then selecting a rule brings up the following; Global Start IP; End
P-660 Series Support Notes place until this action is taken. Be careful when ordering your rules as each rule is executed in turn beginning from the first rule. Selecting Edit in the Action field and then selecting a rule brings up the following menu, Menu 15.1.1.1-Address Mapping Rule in which you ...
Page 41 - Step 1. Enter 15 in the Main Menu to go to; IP Address
P-660 Series Support Notes NAT Server Sets The NAT Server Set is a list of LAN side servers mapped to external ports (similar to the old SUA menu of before). If you wish, you can make inside servers for different services, e.g., Web or FTP, visible to the outside users, even though NAT makes your ne...
Page 42 - Examples; Internet Access Only
P-660 Series Support Notes 4. 0 0 0.0.0.0 5. 0 0 0.0.0.0 6. 0 0 0.0.0.0 7. 0 0 0.0.0.0 8. 0 0 0.0.0.0 9. 0 0 0.0.0.0 10. 0 0 0.0.0.0 11. 0 0 0.0.0.0 12. 0 0 0.0.0.0 Press ENTER to Confirm or ESC to Cancel: The most often used port numbers are shown in the following table. Please refer RFC 1700 for f...
Page 43 - From Menu 4 shown above simply choose the; option from the; NAT; This is the
P-660 Series Support Notes Menu 4 - Internet Access Setup ISP's Name= CHT Encapsulation= PPPoE Multiplexing= LLC-based VPI #= 0 VCI #= 33 ATM QoS Type= CBR Peak Cell Rate (PCR)= 0 Sustain Cell Rate (SCR)= 0 Maximum Burst Size (MBS)= 0 My Login= [email protected] My Password= ******** Idle Timeout (sec)=...
Page 44 - Internet Access with an Internal Server
P-660 Series Support Notes 2. Internet Access with an Internal Server In this case, we do exactly as above (use the convenient pre-configured SUA Only set) and also go to Menu 15.2.1- NAT Server Setup (Used for SUA Only) to specify the Internet Server behind the NAT as shown in the NAT as shown belo...
Page 45 - allows us to specify multiple servers, of; Mapping Sets; . Therefore we must choose the
P-660 Series Support Notes 3. Using Multiple Global IP addresses for clients and servers (One-to-One, Many-to-One, Server Set mapping types are used) In this case we have 3 IGAs (IGA1, IGA2 and IGA3) from the ISP. We have two very busy internal FTP servers and also an internal general server for the...
Page 46 - Set Name; and then select 1 from; Select Rule; Rule 1 Setup: Select
P-660 Series Support Notes Menu 4 - Internet Access Setup ISP's Name= CHT Encapsulation= PPPoE Multiplexing= LLC-based VPI #= 0 VCI #= 33 ATM QoS Type= CBR Peak Cell Rate (PCR)= 0 Sustain Cell Rate (SCR)= 0 Maximum Burst Size (MBS)= 0 My Login= N/A My Password= N/A ENET ENCAP Gateway= N/A IP Address...
Page 47 - Server type
P-660 Series Support Notes Rule 2 Setup: Selecting One-to-One type to map the FTP Server 2 with ILA2 (192.168.1.11) to IGA2. Menu 15.1.1.2 - - Rule 2 Type: One-to-One Local IP: Start= 192.168.1.11 End = N/A Global IP: Start= [Enter IGA2] End = N/A Press ENTER to Confirm or ESC to Cancel: Rule 3 Setu...
Page 49 - Support Non NAT Friendly Applications
P-660 Series Support Notes Step 3: Now we configure all other incoming traffic to go to our web server aand mail server from Menu 15.2.2 - NAT Server Setup (not Set 1, Set 1 is used for SUA Only case). Menu 15.2.2 - NAT Server Setup Rule Start Port No. End Port No. IP Address -----------------------...
Page 50 - One rule configured for using
P-660 Series Support Notes One rule configured for using Many-to-Many No Overload mapping type is shown below. Menu 15.1.1.1 - - Rule 1 Type: Many-to-Many No Overload Local IP: Start= 192.168.1.10 End = 192.168.1.12 Global IP: Start= [Enter IGA1] End = [Enter IGA3] Press ENTER to Confirm or ESC to C...
Page 51 - How does ZyXEL filter work?; Filter Structure
P-660 Series Support Notes Type: One-to-One Local IP: Start= 192.168.1.11 End = N/A Global IP: Start= [Enter IGA2] End = N/A Press ENTER to Confirm or ESC to Cancel: Menu 15.1.1.3 - - Rule 3 Type: One-to-One Local IP: Start= 192.168.1.12 End = N/A Global IP: Start= [Enter IGA3] End = N/A Press ENTER...
Page 52 - Filter Types and SUA; device; and; protocol; LAN device and protocol input filter sets.
P-660 Series Support Notes Filter Types and SUA Conceptually, there are two categories of filter rules: device and protocol . The Generic filter rules belong to the device category; they act on the raw data from/to LAN and WAN. The IP and IPX filter rules belong to the protocol category; they act on...
Page 53 - Generic
P-660 Series Support Notes • WAN device output and call filter sets. The sequence of the logic flow for the packet from WAN to LAN is: WAN device input filter sets. If SUA is enabled, SUA converts the destination IP address from 203.205.115.6 to 92.168.1.33 and port number from 4034 to 1023. WAN pro...
Page 54 - Protocol and device rule cannot be active together
P-660 Series Support Notes Menu 21.1.1 - Generic Filter Rule Filter #: 1,1 Filter Type= Generic Filter Rule Active= Yes Offset= 0 Length= 0 Mask= N/A Value= N/A More= No Log= None Action Matched= Check Next Rule Action Not Matched= Check Next Rule Menu 21.1.2: Menu 21.1.2 - TCP/IP Filter Rule Filter...
Page 55 - protocol filters=; device filters; field. Even though SMT will prevent the inconsistency from being
P-660 Series Support Notes Menu 3.1: Menu 3.1 - General Ethernet Setup Input Filter Sets: protocol filters= device filters= Output Filter Sets: protocol filters= device filters= Menu 11.1: Menu 11.1 - Remote Node Profile Rem Node Name= LAN Route= IP Active= Yes Bridge= No Encapsulation= PPP Edit PPP...
Page 56 - Filter Examples; A filter for blocking the web service
P-660 Series Support Notes filter sets that were configured before. Instead, when ZyNOS translates the old configuration into the new format, it will verify the filter rules and log the inconsistencies. Please check the system log (Menu 24.3.1) before putting your device into use. In order to avoid ...
Page 57 - Create a filter set in Menu 21
P-660 Series Support Notes 1. Create a filter set in Menu 21 Menu 21 - Filter Set Configuration Filter Filter Set # Comments Set # Comments ------ ----------------- ------ ----------------- 1 Web Request 7 _______________ 2 _______________ 8 _______________ 3 _______________ 9 _______________ 4 ____...
Page 59 - in the remote node setup
P-660 Series Support Notes 5. After the three rules are completed, you will see the rule summary in Menu 21. Menu 21.1 - Filter Rules Summary # A Type Filter Rules M m n - - ---- -------------------------------------- - - - 1 Y IP Pr=6, SA=0.0.0.0, DA=0.0.0.0, DP=80 N D N 2 Y IP Pr=6, SA=0.0.0.0, DA...
Page 60 - One rule for blocking all packets from this client; Before you Begin
P-660 Series Support Notes 2. One rule for blocking all packets from this client Menu 21.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 0 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= Port # Comp= None Source: IP Addr= 192...
Page 61 - The detailed format of the Ethernet Version II:
P-660 Series Support Notes Before you configure the filter, you need to know the MAC address of the client first. The MAC address can be provided by the NICs. If there is the LAN packet passing through the P-660 you can identify the uninteresting MAC address from the P-660's LAN packet trace. Please...
Page 62 - Configurations
P-660 Series Support Notes - Flags: May be fragmented, Last fragment, Offset=0 (0x00) - Time to live: 32 seconds/hops - IP protocol type: ICMP (0x01) - Checksum: 0xE3EA - IP address 202.132.155.93 (Source IP address) ----> 202.132.155.99(Destination IP address) - No option + Internet Control Mess...
Page 63 - that the P-660 should use to
P-660 Series Support Notes More= No Log= None Action Matched= Drop Action Not Matched= Forward Key Settings: • Generic Filter Ruls Set the 'Filter Type' to 'Generic Filter Rule' • Active Turn 'Active' to 'Yes' • Offset (in bytes) Set to '6' since the source MAC address starts at 7th octets we need t...
Page 64 - A filter for blocking the NetBIOS packets
P-660 Series Support Notes Menu 21.1.2 - Generic Filter Rule Filter #: 1,2 Filter Type= Generic Filter Rule Active= Yes Offset= 6 Length= 6 Mask= ffffffffffff Value= 0080c810234a More= No Log= None Action Matched= Drop Action Not Matched= Forward You can now apply it to the 'General Ethernet Setup' ...
Page 66 - Rule 1-Destination port number 137 with protocol number 6 (TCP)
P-660 Series Support Notes • Rule 1-Destination port number 137 with protocol number 6 (TCP) Menu 21.1.1 - TCP/IP Filter Rule Filter #: 1,1 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 6 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 137 Port # Comp= Equal Sou...
Page 67 - Rule 3-Destination port number 138 with protocol number 6 (TCP)
P-660 Series Support Notes Action Not Matched= Check Next Rule Press ENTER to Confirm or ESC to Cancel: • Rule 3-Destination port number 138 with protocol number 6 (TCP) Menu 21.1.3 - TCP/IP Filter Rule Filter #: 1,3 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 6 IP Source Route= No Dest...
Page 68 - Rule 5-Destination port number 139 with protocol number 6 (TCP)
P-660 Series Support Notes Active= Yes IP Protocol= 17 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 138 Port # Comp= Equal Source: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 0 Port # Comp= None TCP Estab= N/A More= No Log= None Action Matched= Drop Action Not Matched= Ch...
Page 69 - Rule 6-Destination port number 139 with protocol number 17 (UDP)
P-660 Series Support Notes • Rule 6-Destination port number 139 with protocol number 17 (UDP) Menu 21.1.6 - TCP/IP Filter Rule Filter #: 1,6 Filter Type= TCP/IP Filter Rule Active= Yes IP Protocol= 17 IP Source Route= No Destination: IP Addr= 0.0.0.0 IP Mask= 0.0.0.0 Port #= 139 Port # Comp= Equal S...
Page 72 - Setup the DDNS; Edit Dynamic DNS= Yes
P-660 Series Support Notes Without DDNS, we always tell the users to use the WAN IP of the P-660 to access the internal server. It is inconvenient for the users if this IP is dynamic. With DDNS supported by the P-660, you apply a DNS name (e.g., www.zyxel.com.tw) for your server (e.g., Web server) f...
Page 73 - Key Settings for using DDNS function:
P-660 Series Support Notes Menu 1.1 - Configure Dynamic DNS Service Provider= WWW.DynDNS.ORG Active= Yes Host= [the local server's host name] EMAIL= [your email address] User= Password= ******** Enable Wildcard= No Key Settings for using DDNS function: Option Description Service Provider Enter the D...
Page 74 - Get; Management Information
P-660 Series Support Notes There are two versions of SNMP: Version 1 and Version 2. ZyXEL supports SNMPv1. Most of the changes introduced in Version 2 increase SNMP's security capabilities. SNMP encompasses three main areas: 1. A small set of management operations. 2. Definitions of management varia...
Page 75 - Traversal operations; Allows the NMS to retrieve an object variable from the agent.; GetNext
P-660 Series Support Notes Traversal operations NMSs use these operations to determine which variables a managed device supports and to sequentially gather information from variable tables (such as IP routing table) in managed devices. Traps The managed devices to asynchronously report certain event...
Page 77 - If the machine coldstarts, the trap will be sent after booting.
P-660 Series Support Notes SNMPv1 operation, ZyXEL permits one community string so that the router can belong to only one community and allows trap messages to be sent to only one NMS manager. Some traps are sent to the SNMP manager when anyone of the following events happens: 1. coldStart (defined ...
Page 78 - Downloading ZyXEL's private MIB; Menu 22 - SNMP Configuration
P-660 Series Support Notes • Downloading ZyXEL's private MIB • Configure the P-660 for SNMP The SNMP related settings in P-660 are configured in menu 22, SNMP Configuration. The following steps describe a simple setup procedure for configuring all SNMP settings. Menu 22 - SNMP Configuration SNMP: 77...
Page 79 - Trusted Host; respond to all NMS managers.; UNIX Setup
P-660 Series Support Notes Get Community= public Set Community= public Trusted Host= 192.168.1.33 Trap: Community= public Destination= 192.168.1.33 Press ENTER to Confirm or ESC to Cancel: Key Settings: Option Descriptions Get Community Enter the correct Get Community. This Get Community must match ...
Page 80 - Active
P-660 Series Support Notes Log Facility= Local 1 Types: CDR= No Packet triggered= No Filter log= No PPP log= No Configuration: 1. Active , use the space bar to turn on the syslog option. 2. Syslog IP Address , enter the IP address of the UNIX server that you wish to send the syslog. 3. Log Facility,...
Page 81 - log; C01 Incoming Call OK; Packet triggered log
P-660 Series Support Notes 1. CDR log (call messages) Format: sdcmdSyslogSend( SYSLOG_CDR, SYSLOG_INFO, String ); String = board xx line xx channel xx, call xx, str board = the hardware board ID line = the WAN ID in a board channel = channel ID within the WAN call = the call reference number which s...
Page 82 - This message is available when the
P-660 Series Support Notes Data=4500002c1b0140001f06b50ec0a86614ca849a7b0427001700195b3e00000000600220008cd 40000020405b4 3. Filter log This message is available when the 'Log' is enabled in the filter rule setting. The message consists of the packet header and the log of the filter rules. Format: s...
Page 83 - Using IP Alias
P-660 Series Support Notes Jul 19 11:43:43 192.168.1.1 ZyXEL Communications Corp.: ppp:IPCP Opening Jul 19 11:43:51 192.168.1.1 ZyXEL Communications Corp.: ppp:CCP Opening Jul 19 11:43:55 192.168.1.1 ZyXEL Communications Corp.: ppp:BACP Opening Jul 19 11:44:00 192.168.1.1 ZyXEL Communications Corp.:...
Page 84 - IP Alias Setup; Key Settings:
P-660 Series Support Notes ras> ip ro st Dest FF Len Interface Gateway Metric stat Timer Use 192.168.3.0 00 24 enif0:1 192.168.3.1 1 041b 0 0 192.168.2.0 00 24 enif0:0 192.168.2.1 1 041b 0 0 192.168.1.0 00 24 enif0 192.168.1.1 1 041b 0 0 ras> Two new protocol filter interfaces in menu 3.2.1 al...
Page 85 - IP Alias 1
P-660 Series Support Notes Edit IP Alias Toggle to 'Yes' to enter menu 3.2.1 for setting up the second and third networks. 2. Edit the second and third networks in menu 3.2.1 by configuring the P-660's second and third LAN IP addresses. Menu 3.2.1 - IP Alias Setup IP Alias 1= Yes IP Address= 192.168...
Page 86 - Cost Savings
P-660 Series Support Notes Traditionally, routing is based on the destination address only and the router takes the shortest path to forward a packet. IP Policy Routing (IPPR) provides a mechanism to override the default routing behavior and alter the packet forwarding based on the policy defined by...
Page 87 - Setup the IP Policy Routing; policy1
P-660 Series Support Notes port, TOS and precedence (fields in the IP header) and length. The inclusion of length criterion is to differentiate between interactive and bulk traffic. Interactive applications, e.g., Telnet, tend to have short packets, while bulk traffic, e.g., file transfer, tends to ...
Page 88 - A summary for this set is shown in menu 25.1.
P-660 Series Support Notes Criteria: IP Protocol = 6 Type of Service= Don't Care Packet length= 0 Precedence = Don't Care Len Comp= N/A Source: addr start= 192.168.1.2 end= 192.168.1.20 port start= 0 end= N/A Destination: addr start= 0.0.0.0 end= N/A port start= 80 end= 80 Action= Matched Gateway ad...
Page 90 - Using Call Scheduling; What is Call Scheduling ?
P-660 Series Support Notes Metric= 2 Private= No RIP Direction= Both Version= RIP-2B Multicast= IGMP-v2 IP Policies= 1 Enter here to CONFIRM or ESC to CANCEL: 12. Using Call Scheduling • What is Call Scheduling ? Call scheduling enables the mechanism for the P-660 to run the remote node connection a...
Page 91 - Select a Schedule Set number and give it a name:; Once
P-660 Series Support Notes 14. Dial-in User Setup 99. Exit 15. NAT Setup Enter Menu Selection Number: 2. Select a Schedule Set number and give it a name: Menu 26 - Schedule Setup Schedule Schedule Set # Name Set # Name ------ ----------------- ------ ----------------- 1 ZyXEL 7 _______________ 2 ___...
Page 92 - Apply the schedule to the Remote node
P-660 Series Support Notes Action= Enable Dial-on-demand Press ENTER to Confirm or ESC to Cancel: Key Settings: Start Date Start date of this schedule rule. It can be unmatched with weekday setting. For example, if Start Date is 2000/10/02(Monday), but Monday setting in weekday can be No. How Often ...
Page 93 - Time Service in P-660; Using IP Multicast; What is IP Multicast ?
P-660 Series Support Notes Authen= N/A Edit Filter Sets= No Idle Timeout(sec)= 0 • Time Service in P-660 There is no RTC (Real-Time Clock) chip so the P-660 should launch a mechanism to get current time and date from external server in boot time. Time service is implemented by the Daytime protocol(R...
Page 94 - IP Multicast Setup
P-660 Series Support Notes IGMP (Internet Group Management Protocol) is the protocol used to support multicast groups. The latest version is version 2 (see RFC2236). IP hosts use IGMP to report their multicast group membership to any immediate-neighbor multicast routers so the multicast routers can ...
Page 95 - Multicast
P-660 Series Support Notes My WAN Addr= 0.0.0.0 NAT = None Address Mapping Set= N/A Metric= 2 Private= No RIP Direction= Both Version= RIP-2B Multicast= IGMP-v2 IP Policies= Enter here to CONFIRM or ESC to CANCEL: Key Settings: Multicast IGMP-v1 for IGMP version 1, IGMP-v2 for IGMP version 2. 14. Us...
Page 96 - Configure the VC auto-hunting preconfigured table.
P-660 Series Support Notes • Configure the VC auto-hunting preconfigured table. 1. Display auto-haunting preconfigured table by using CI command from menu 24.8: wan atm vchunt disp 2. Add items to the auto-haunting preconfigured table by useing CI commands: wan atm vchunt add <remoteNodeIndex>...
Page 100 - Support Tool; Online Trace
P-660 Series Support Notes Support Tool 1. LAN/WAN Packet Trace The Prestige packet trace records and analyzes packets running on LAN and WAN interfaces. It is designed for users with technical backgrounds who are interested in the details of the packet flow on LAN or WAN end of Prestige. It is also...
Page 105 - Offline Trace
P-660 Series Support Notes Protocol = 0x06 (TCP) Header Checksum = 0xA9AB (43435) Source IP = 0xC01F0782 (192.31.7.130) Destination IP = 0xCA849B61 (202.132.155.97) TCP Header: Source Port = 0x0050 (80) Destination Port = 0x281E (10270) Sequence Number = 0xD3E95985 (3555285381) Ack Number = 0x00C18F...
Page 106 - Firmware/Configurations Uploading and Downloading using TFTP
P-660 Series Support Notes 2. Firmware/Configurations Uploading and Downloading using TFTP • Using TFTP client software • Using TFTP command on Windows NT • Using TFTP command on UNIX Using TFTP client software • Upload/download ZyNOS via LAN • Upload/download SMT configurations via LAN Using TFTP t...
Page 107 - Using TFTP to upload/download SMT configurations via LAN
P-660 Series Support Notes Using TFTP to upload/download SMT configurations via LAN • TELNET to your Prestige first before running the TFTP software • Type the CI command 'sys stdio 0' to disable console idle timeout in Menu 24.8 and stay in Menu 24.8 • Run the TFTP client software • To download the...
Page 108 - Download ZyNOS via LAN; TELNET to your Prestige first before using TFTP command
P-660 Series Support Notes • Download ZyNOS via LAN • Upload SMT configurations via LAN c:\tftp -i [PrestigeIP] put [localfile] rom-0 • Download SMT configurations via LAN c:\tftp -i [PrestigeIP] get rom-0 [localfile] Using TFTP command on UNIX Before you begin: 1. TELNET to your Prestige first befo...
Page 109 - Using FTP to Upload the Firmware and Configuration Files; Using FTP command in terminal
P-660 Series Support Notes Menu 24 - System Maintenance 1. System Status 2. System Information and Console Port Speed 3. Log and Trace 4. Diagnostic 5. Backup Configuration 6. Restore Configuration 7. Firmware Update 8. Command Interpreter Mode Enter Menu Selection Number: 8 Copyright (c) 1994-2005 ...
Page 110 - Using FTP client software; Step 1
P-660 Series Support Notes the IP address of the Prestige. Step2 Press 'Enter' key to ignore the username, because the Prestige does not check the username. Step 3 Enter the SMT password as the FTP login password, the default is '1234 '. Step 4 Enter command 'bin' to set the transfer type to binary....
Page 111 - or
P-660 Series Support Notes Example: 1. Connect to the Prestige by entering the Prestige's IP and SMT password in the FTP software. Set the transfer type to 'Auto-Detect' or 'Binary' . 2. Press 'OK' to ignore the 'Username' prompt. 3. To upload the firmware file, we transfer the local 'ras' file to o...
Page 112 - remote
P-660 Series Support Notes remote 'rom-0' file. 4. The Prestige reboots automatically after the uploading is finished. Please do not power off the router at this moment. 111 All contents copyright © 2005 ZyXEL Communications Corporation.
Page 113 - CI Command Reference; iface
P-660 Series Support Notes CI Command Reference Command Syntax and General User Interface CI has the following command syntax: command < iface | device > subcommand [ param ] command subcommand [ param ] command ? | help command subcommand ? | help General user interface: 1. ? Shows the follow...