ZyXEL Communications 2802HWL-IX manuale d’uso

Prestige 2802HW(L)-Ix Support Notes V ersion 3.40 Jun. 2007[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 2 Index Application Notes .......................................................................................... 9 General Application Notes .....................................................................................9 Internet C[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 3 ZyNOS F AQ ...................................................................................................... 119 What is ZyNOS? ........................................................................................ 1 19 How do I acce[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 4 What DHCP capability does the Prestige support? .................................... 126 How do I used the reset button, more over what field of parameter will be reset by reset button? ......................................................[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 5 How are voice quality normally rated? ...................................................... 134 What is codec? ........................................................................................... 134 What is the relation of codec an[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 6 What are the dif ferences between 'T ransport mode' and 'T unnel mode? ... 144 What is SA? ............................................................................................... 144 What is IKE? .....................[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 7 What is IEEE 802.11 ? ............................................................................... 153 What is 802.11b ? ...................................................................................... 154 How fast is 802.11b ?....[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 8 What is AAA ? ........................................................................................... 160 What is RADIUS ?..................................................................................... 160 What is WPA ?...........[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 9 Application Notes General Application Notes Internet Connection A typical Internet access application of the Prestige is shown b e l o w . F o r a s m a l l o f f i c e , t h e r e a r e s o m e components needs to be checked before accessi[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 10 • If you only have one PC, connect the PC's Ethern et adapter to the Prestige's LAN port with a crossover (red one) Ethernet cable. • If you have more than one PC, both the PC's Ethe rnet adapters and the Prestige' [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 11 The following procedure is for the most typical usage of the Pr estige where you have a single-user account (SUA). The Prestige supports embedded web server that allows yo u to use W eb browser to configure it. Before configuring the route[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 12 The Web screen shown below takes PPPoE as the example.[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 13 Setup the Prestige as a DHCP Relay • What is DHCP Relay? DHCP stands for Dynamic Host Configuration Protocol. In additio n to the DHCP server feature, the P2802 supports the DHCP relay function. When it is configured as DHCP server, it a[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 14 • Setup the Prestige as a DHCP Client 1. Toggle the DHCP to Relay in Network>LAN>DHCP Setup and enter the IP address of the DHCP server in the 'Remote DHCP Server' field.[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 15 Configure an Internal Server Behind SUA • Introduction If you wish, you can make internal servers (e.g., Web, ftp or m ail server) accessible for outside users, even though SUA makes your LAN appear as a single machine to t he out side w[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 16 • Port numbers for some services Service Port Number FTP 21 T elnet 23 SMTP 25 DNS (Domain Name Server) 53 www-http (W eb) 80 Configure a PPTP server Behind SUA • Introduction PPTP is a tunneling protocol defined by the PPTP forum that[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 17 Windows Dial-Up Networking uses the Internet standard Point-to- Point (PPP) to provide a secure,optimized multiple-protocol network connection over dial-up telephone lin es. All data sent over this connection can be encrypted and compresse[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 18 • Example The following example shows how to dial to an ISP via the Prest ige and then establish a tunnel to a private network. There will be three ite ms that you need to set up for PPTP applica tion, these are PP TP server (WinNT ), PP[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 19 When you have finished the above settings, you can ping to the remote Win9x client from WinNT. This ping command is used to demonstrate that remote the Win9x can be reached across the Internet. If the Internet connection between two LANs i[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 20 Using NA T / Multi-NA T • What is Multi-NA T? NAT (Network Address Translation-NAT RFC 1631) is the translati on of an Internet Protocol address used within one network to a different IP address known within anoth er network. One network[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 21 If we define the local IP addresses as the Internal Local Addre sses (ILA) and the global IP addresses as the Inside Global Address (IGA), see the following figure. The term 'inside' refers to the set of networks that are subject[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 22 5. Many to Many No Overload In Many-to-Many No Overload mode, the Prestige maps each ILA to unique IGA. • Server In Server mode, the Prestige maps multiple insid e servers to on e g l o b a l I P a d d r e s s . T h i s a l l o w s u s t[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 23 different types. The Prestige supports NAT sets on a remote nod e basis. They are reusable, but only one set is allowed for each remote node. The Prestige 2802HWL supports 8 s ets since there are 8 remote node. The default SUA (Read Only) [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 24 pre-configured, read only , Many-to-One mapping set, suf ficient for most purposes and helpful to people already familiar with SUA in previous ZyNOS versions. Note that there is also a Server type whose IGA is 0.0.0.0 in this set. 2. Addre[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 25 Field Description Option/Example # This is the rule index number . Local S tart IP This is the st arting local IP address (ILA). 0.0.0.0 for the Many-to-One type. Local End IP This is the starting local IP address (ILA). If the rule is for[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 26 The following table describes the fields in this screen. Field Description Option/Example T ype Press [CHOOSE BAR] to toggle through a total of 5 types. These are the mapping types discus sed above plus a server type. Some examples follow [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 27 Please note that a server can support more than one service, e. g., a server can provide both FTP and Mail service, while another provides only Web service. The following procedures show how to configure a server behind NAT. Step 1. Enter [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 28 The most often used port numbers are shown in the following tab le. Please refer RFC 1700 for further information about port numbers. Service Port Number FTP 20,21 T elnet 23 SMTP 25 DNS (Domain Name Server) 53 www-http (W eb) 80 PPTP (Poi[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 29 From WEB GUI Network > NAT > Gener a l shown above simply choose the SUA Only option in the NAT Setup . This is the Many- to-One mapping discussed earlier. 2. Internet Access with an Internal Server[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 30 In this case, we do exactly as above (use the convenient pre-co nfigured SUA Only set) and also go to Menu Network > NAT > Port Forwarding to specify the Internet Server behind the NAT as shown in the NAT as shown below. 3. Using Mul[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 31 In this case we have 3 IGAs (IGA1, IGA2 and IGA3) from the ISP. We have two very busy internal FTP servers and also an int ernal general server for the web and mai l. In this case, we want to assign the 3 IGAs by the following way using 4 [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 32 Step 2: Go to menu 15.1 and choose 1 (not 255, SUA this time) to begin configuring this new set. Enter a Set Name , choose the Edit Action a n d t h e n s e l e c t 1 f r o m Select Rule field. Press [ENTER] to confirm. See the f ollowing [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 33 Rule 3 Setup: Select Many-to-One type to map the other clients to IGA3. Rule 4 Setup: Select Server type to map our web server and mail server with ILA3 (192.168.1.20) to IGA3.[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 34 When we have configured all four rules WEB GUI Address Mapping Configuration should look as follows. Idx Local S tart IP Local End IP Glo bal Start IP G lobal End IP Type --- ------- -------- ----- ---------- --- ------------ - -----------[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 35 4. Support Non NAT Fri endly Applications Some servers providing Internet applications such as some mIRC servers do not allow users to login using the same IP address. In this case it is better to use Man y-to-Many No Overload or One-to-On[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 36 The three rules configured for using One-to-One mapping type is shown below.[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 37 Prestige supports mu ltiple type of NA T mapping rules[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 38 • SUA • One to One • Many to One • Many to Many overload • Many One to One • Server The following table summarizes these types. NAT Type IP Mapping One-to-One ILA1<--->IGA1 Many-to-One (SUA/PAT) ILA1<--->IGA1 ILA2&l[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 39 Using the Dynamic DNS (DDNS) 1. What is DDNS? The DDNS service, an IP Registry provides a public central data base where information such as email addresses, hostnames, IPs etc. can be stored and retrieved. Thi s solves the problems if you[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 40 Key Settings for using DDNS function: Option Description Active Dynamic DNS Select this check box to use dynamic DNS Service Pro vider Enter the DDNS server in th is field. Currently , we support WWW .DYNDNS.OR G . Dynamic DNS T y pe Selec[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 41 RL (that you can specify) while you are of f line. Use W AN IP Addr ess Select this option to update IP Address of the host name to the W AN IP Address. D y namic DNS server auto detect IP Address Select this option only when there are one[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 42 For example, the encoding of a text string includes an indicati on that the data unit is a string, along with its length and value. ASN.1 is a flexible way of defining protocols , especially for network management protocols where nodes may[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 43 2. SNMPv1 Operations SNMP itself is a simple reques t/response protocol. 4 SNMPv1 ope rations are defined as belo w. • Get Allows the NMS to retrieve an object variable from the agent. • GetNext Allows the NMS to retrieve the next obje[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 44 so on) and the object values involved in the operation. The fol lowing figure shows the SNMPv1 message format. The SNMP PDU contains the following fields: • PDU type Specifies the type of PDU. • Request ID Associates requests with resp[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 45 • warmS tart (defined in RFC-1215) : If the machine warmstarts, the trap will be sent after booting. • linkDown (defined in RFC-1215) : If any link of IDSL or WAN is down, the trap will be sent with the port number . The port number is[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 46 4. Configure the Pr estige for SNMP The SNMP related settings in Prestige are configur ed in WEB GUI m e n u Advanc ed > Remote MGMT > SNMP , SNMP Configuration. The following steps describe a simple set up procedure for configuring [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 47 Key Settings: Option Descriptions Port Y ou may change the server port number for a server if needed, however you must use the same port number in order to use that service for rem ote management. Access S tatus Select the interface throug[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 48 Destination Enter the IP address of the NMS th at you wish to send the traps to. If 0.0.0.0 is entered, the Prestige w ill not send trap any NMS manager . Using syslog 4. Prestige Setup Configuration: 1. Click Activ e to enable Syslog logg[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 49 1. Make sure that your syslogd starts with -r argument. -r , this option will enable the facility t o receive message from the network using an Int ernet domain socket with the syslog services. The default setting is not enabled. 2. Edit t[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 50 • Packet trigger ed log Format: sdcmdSyslogSend( SYSLOG_PKTTR I, SYSLOG_NOTICE, String ); String = Packet trigger: Protocol=xx Data=xxxxxxxxxx Protocol: (1:IP 2:IPX 3:IP XHC 4:BPDU 5:ATALK 6:IPNG) Data: We will send forty-eight H ex char[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 51 • PPP Log Format: sdcmdSyslogSend( SYSLOG_PPPLOG, SYSLOG_NOTICE, String ); String = ppp:Proto Starting / ppp:Proto Opening / ppp:Proto Clo sing / ppp:Proto Shutdown Proto = LCP / ATCP / BACP / BCP / CBCP / CCP / CHAP/ PAP / IPCP /IPXCP E[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 52 The Prestige supports three virtual LAN interfaces via its sing le physical E thernet interface. The first network can b e configured in menu 3.2 as usual. The second and third ne tworks that we call 'IP Alias 1' and 'IP Ali[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 53 Key Settings: IP Alias 1,2 Select the check box to configure an other LAN network for ZyXEL Device. IP Address Enter IP address of your ZyXEL Device in dotted decimal notation. Alternatively , click the right mouse bu tton to copy and/or p[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 54 "1 1 10" as their higher-order bits. In dotted deci mal notation, host group addresses range from 224.0.0.0 to 239.255.255.255. Among them, 224.0.0.1 is assigned to the perm anent IP hosts group, and 224.0.0.2 is assigned to the [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 55 Key Settings: Multicast IGMP-v1 for IGMP version 1, IG MP-v2 for IGMP version 2. Using Prestige traffic redirect • What is T raf fic Redirect ? Traffic redirect forwards WAN traffic to a backup gateway when Prestige cannot connect to the[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 56 Traffic Redirect on LAN port • T r af fic Redirect Setup Configure parameters that determine when Prestige will forward WAN traffic to the backup gateway using Network > WAN > WAN Backup in WEB GUI .[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 57 Key Settings: Label Description Backup Type Select the method that the Prestige uses to check the DSL connection. Select DSL Link to have the Prestige check if the connection to the DSLAM is up. Select ICMP to have the Prestige periodicall[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 58 Label Description Interval checks to whether or not it can use a hi gher priority connection. Type the number of seconds (30 recomm ended) for the Pr estige to wait between checks. Allow more time if your destination IP address hand les lo[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 59 UPnP (Universal Plug and Play) makes connecting PCs of all form factors, intelligent appliances, and wireless devices in the home, office, and ev er ywhere in between easier a nd even automatic by leveraging TCP/IP and Web technologies. UP[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 60 • Addressing : UPnPv1 devic es MAY su pport IPv4, IPv 6, or both. For IPv4, each devices should have DHCP client, when the device gets connected to the network, it will discover DHCP server on network to get an IP address. If not, then A[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 61 Device: Prestige Router Service: NAT function provided by Prestige Router Control Point: PC1 1. Enable UPnP function in ZyXEL device Go to Advanced->UPnP , check two boxes, Active UPnP feature and Allow users to mak e configuration chan[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 62 2. After getting IP address, you can go to open MSN application on PC and sign in MSN server. 3. Start a Video conversation with one online user.[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 63 4. On the opposite side, your partner select Accept to accept your conversation request. 5. Finally, your video conversation is achieved.[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 64 Wireless Application Notes Infrastructure mode What is Infrastructure mode? Infrastructure mode, sometimes referred to as Access Point mode , is an operating mode of an 802.11b/Wi-Fi client unit. In infrastructure mode, the client unit can[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 65 Configuration Wireless Access Point to Infr astructure mode u sin g Web configurator. To configure Infrastructure mode of your Prestige wireless VoIP IAD please follow the steps below. 1. From the web configurator main menu, click Network [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 66 3. Configure the desired configuration on Prestige wireless VoI P IAD and check the Activ e wireless LAN check box. 4. When finish click on apply button to take effect. • Configuration Wireless Sta tion to Infrastructure mode To configur[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 67 3. Select Infrastructure from the operation mode pull down menu , fill in an SSID or leave it as any if you wish to connect to any AP than press Apply Change to take effect. 4. Click on Site Survey tab, and press search all the available A[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 68 5. Double click on the AP you want to associated with. 6. After the client have associated with the selected AP. The linked AP's channel, current linkup rate, SSID, link quality, and signal strength will show on the Link Info pa ge. Y[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 69 2. ZyXEL MAC Filter Implementation ZyXEL's MAC Filter Implementation allows users to define a list to allow or block association from STAs. The filter set allows users to input 12 entries in the list. If All ow Association is selected[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 70 Key Settings : Option Descriptions Filter Action Allow or block association from MA C addresses contained in this list. If A llow Association is selected in this field, hosts with MAC addresses configured in this list will be allowed to as[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 71 The 802.11 standard describes the communica tion that occurs in wireless LANs. The Wired Equivalent Privacy (WEP) algorithm is used to protect wirele ss communication from eavesdropping, because wireless transmissions are eas ier to in ter[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 72 Setting up the Access Point Most access points and clients have the ability to hold up to 4 WEP keys simultaneously. You need to specify one of the 4 keys as default Key for data encryption. To set up the Acce ss Point, you will need to se[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 73 • Setting up the Access Point w ith W eb configurator Key settings Hexadecimal digits have to preceded by ' 0x ', WEP Key type Exam ple 64-bit WEP with 5 characters Key1= 2e3f4 Key2= 5y7js Key3= 24fg7 Key4= 98jui 64-bit WEP wit[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 74 Key4= 0x 456789ABCD 128-bit W EP with 13 characters Key1= 2e3f4w345ytre Key2= 5y7jse8r4i038 Key3= 24fg70okx3fr7 Key4= 98jui2wss35u4 128-bit W EP with 26 hexadecimal digits ('0-9', 'A-F') Key1= 0x 1 12233445566778899AABB[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 75 The utility will pop up on your windows screen. Note: If the utility icon doesn't exist in your task bar, click Start -> Programs -> IEEE802.11b WLAN Card -> IEEE802.11b WLAN Card. 2. Select the 'Encryption' tab. Se[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 76[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 77 Key settings The WEP Encryption type of station has to equal to the access point. Check 'ASCII' field for characters WEP key or uncheck 'ASCII' field for Hexadecimal digits WEP key. Hexadecimal digits don't need to[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 78 IEEE 802.1x authentication is a client-server architecture deli ver ed with EAPOL (Extensible Authentication Protocol over LAN). The authentic ation server authenticates eac h client connected to a Access Point (For Wireless LAN) or switch[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 79 The device (i.e. RADIUS server) provi des an authentication service to an authenticator. This service determines, from the cre dentials provided by the s upplicant, whether the supplicant is author ized to access the services provided by t[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 80 1. Force Authorized : Disables 802.1x and causes the port to transition to the autho rized state without any authentication exchange required. The port transmits and receiv es normal traffic without 802.1x-based authentication of the clien[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 81 The EAP protocol can support multiple authentication mechanisms , such as MD5-challenge, One-Time Passwords, Generic Token Card, TLS and TTLS etc. Typically, the authenticator will s end an initial Identity Request followed by one or more [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 82 The EAPOL packet contains the following fields: protocol versio n, packet type, packet body length and packet body. Most of the fields are obvious. The packet type can have four different values, and these values are described below:[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 83 • EAP-Packet : Both the supplicant and the auth entic ator send this packet when authentica tion is taking place. This is the packet that contains either the MD5-Challenge or TLS information required for authentication. • EAPOL-S tart [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 84 Configure in WEB GUI Configuration, 1. From the W eb Configurator main menu, Click Network > Wireless LAN > General and select 802.1x 2. Click Apply to make your setting work. • Using Internal Authentication Server ZyXEL Wireless A[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 85 Configure in WEB Configurator, 1. From the W eb Configurator main menu, Network -> W ireless LA N -> Local User Database 2. Select one of the profile and check A ctive check box 3. Input the User Name and Password then click Apply to[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 86 • Using External RADIUS Authentication Server In addition to the internal authentication server inside ZyXEL AP, you can use external RADIUS authentication server to centrally manage the user account profile. RADIUS is based on a client-[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 87 2. Configure in WEB GUI Configurator,: From the Web Configurator main me nu, Click Network -> Wireless Lan to setup the RA DIUS authentication and accounting server configuration.[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 88 If accounting is required, you must setup the external RADIUS a ccounting server. Normally, RADIUS authentication server and RADIUS accounting server are put in t he same machine. However, they own separated UDP port and shared s ecret, yo[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 89 An RF site survey is a MAP to RF contour of RF coverage in a pa rticular facility. With wireless system it is very difficult to predict the propagation of radio waves and de tect the presence of interfering signals. Walls, doors, elevator [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 90 4. It's always a good idea to s tart with putting the access poi nt at the corner of the r oom and walk away from the access point in a systematic ma nner. Record down the changes at point where transfer rate drop and the link quality[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 91 5. When you reach the farthest point of connection mark the spo t. Now you move the access point to this new spot as have already determine th e farthest point of the access point installation spot if wireless service is required from corn[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 92 Note: If there are more than one access point is needed be sure to make the adj acent access point service area over lap one another. So the wireless station are able to roam. For more information please refer to roaming at PSTN Lifeline A[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 93 Furthermore, when the P2802HWL – D1A experience power loss such as in case of earthquake and other natural hazard that cause power loss, it will automatically swi tch to PSTN line and you can dial a regular phone number without dialing a[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 94 Relay to PSTN The Relay to PSTN field can be find under PSTN configuration WE B GUI in Relay to PSTN section. This field is used to specify phone numbers to which the Prestige will alw ays send calls through the regular PSTN phone service [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 95 1. The P2802HWL includes a DSL cable and a RJ-11 cable. Connect th e DSL cable to the D SL port and connect RJ-11 to Lifeline port. 2. Connect the RJ11 to the splitter phone jack or a telephone wall jack 3. Connect the DSL cable to the spl[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 96 VoIP Application Notes Setup SIP Account VoIP is the sending of voice signals over the Internet Protocol . This allows you to make phone calls and send faxes over the Internet at a fraction of the cost of using the traditional circuit-swit[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 97 With the account information your ITSP provider provided now yo u may start. Step 1. Open the web browser from your workstation to connect to the P restige by entering the Management IP address of the Prestige (LAN IP address). The default[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 98 SIP Server Address Type the IP address of the SIP server in this field. SIP Server Port Enter the SIP server’s listeni ng port for SIP in this field. Leave this field set to the default if your VoIP service provider did not give you a lo[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 99 Reset Click Reset to begin configuring this screen afresh. Peer to Peer call T opology T opology Explanation 1. Device A and B located at Internet. 2. Device A and B W AN interface is Public Static IP (220.130.46.197 and 220.130.46.198). 3[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 100 (2) Make you can call by callee's SIP number Y ou need to configure the self SI P number and put callee's IP addre ss at SIP server , SIP proxy , Domain server all in the VOIP screen. Setup--- Configuring SIP / V oIP related set[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 101 1. Setup W EB GUI V oIP , enter device A ’ s number in the SIP number column. 2. Fill in device B’ s IP into SIP server addres s, Register serve r address… as example. 3. Setup speed dial, put device B’ s information into the colu[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 102[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 103 1. Setup W EB GUI V oIP , enter device B’ s number in the SIP num ber column. 2. Fill in device A ’ s IP into SIP server addre ss, Register server a ddress… as exam ple. 3. Setup speed dial, put device A ’ s inform ation into the [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 104 To configure the phone port setting please follow the below ste p. Step 1. Open the web browser from your workstation to connect to the P restige by entering the Management IP address of the Prestige. The default management IP of Prestige[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 105 quietest and 1 is the loudest. G.168 Active Select this check box to cancel the echo caused by the sound of your voice reverberating in the telephone receiver while you talk. VAD Support Select this check box to use Voice Ac tivity Detect[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 106 Each field's detail description of the page is listed below. Label Description SIP Account This read-only field dis plays the number of the SIP acc ount that you are configuring. The changes that you save in this page affect the Pres[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 107 URL Type Select SIP to have the Prestige include the domain name with the SIP number in the SIP messages that it sends. Select TEL to have the Prestige use t he SIP number without a domain name in the SIP messages that it sends. Expiratio[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 108 Select RFC 2833 to send the DTMF tones in RTP packets. Select PCM (Pulse Code Modulation) to include the DTMF tones in the voice data stream. This method works best when you are using a codec that does not use compression (like G.711). Co[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 109 To configure phone book for speed dial please follow the below step. Step 1. Open the web browser from your workstation to connect to the P restige by entering the Management IP address of the Prestige. The default management IP of Presti[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 11 0 Label Description Speed Dial Select a speed dial key combinati on from the drop-down list box. SIP Number Enter the SIP number of the party that you will call (u se the number or text that comes before the @ symbol in a full SIP URI). Yo[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 111 Voice - QoS setup DSCP and Per-Hop Behavior Diffserv is a class of service (CoS) model that marks pack ets so that they receive specific per -hop treatment at DiffServ-compliant network device along the route based on the application type[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 11 2 1 001 010 001 100 001 110 Class 2 AF21 AF22 AF23 2 010 010 010 100 010 110 Class 3 AF31 AF32 AF33 3 011 010 011 100 011 110 Class 4 AF41 AF42 AF43 4 100 010 100 100 100 110 Expedited Forwarding EF 5 101 110 The values in decimal are give[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 11 3 CS2 010000 16 AF21 010010 18 AF22 010100 20 AF23 010110 22 CS3 011000 24 AF31 011010 26 AF32 011100 28 AF33 011110 30 CS4 100000 32 AF41 100010 34 AF42 100100 36 AF43 100110 38 CS5 101000 40 EF 101110 46 CS6 110000 48 CS7 111000 56 Quali[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 11 4 Each field's detail description of the page is listed below. Label Description SIP TOS Priority Type a priority for voice transmissions. The Prestige applies Type of Service priority tags with this priority to voice traffic that it [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 11 5 Call Forwarding setup Call forwarding function allows users to determine handling of incoming calls. For example, a user may wish to decide that all incoming calls will ring his cell phone as well . The following screenshot shows how use[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 11 6 No Answer Forward to Number Enable this feature to have th e Prestige forward incoming calls to the number that you configure whenever you do not answer the ca ll after a specific time period. Each field's detail description of the [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 11 7 Setup perform specific actions on calls from specific numbers. If a caller’s number does not match the Incoming Call Number of any of these entries, the Prestige performs the defaul t action configured in the Forward to Number Setup se[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 11 8 Voice – Common Settings Click VoIP -> Phone -> Common to display the following screen. Use this screen to configure Immediate Dial Click VoIP -> Phone -> Region to display the following screen. Us e this screen to configure[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 11 9 phones). Call Service Mode Use this field to set how the Prestige handles supplementary phone services (call hold, call waiting, call transfer and three-way conference calls). Select the mode that your voice service provider supports. Se[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 120 How do I access the embedde d w eb configurator? The Web co nfigurator a user friendly configuration interface vi a user's web browser, which can be access by t y p i n g in t h e L A N I P a d dr e s s of t h e Pr e s t ig e i n u s[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 121 itself. Note: D o not power off the unit after upload the file via ftp until the system LED have become steady light up. Fail to due so may result in update fail and r equire RMA. b. To backup your firmware, use the FTP client program to [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 122 a. You have not enable Telnet service on WAN interface in Menu 24. 11. b. Telnet service is enabled but your host IP is not the secured h ost entered in Menu 24.11. In this case, the error message 'Client IP is not allowed!' wil[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 123 Basically, NAT is a process of translating one address to anoth er. A NAT implementation can be as simple as substituting an I P address with another. This allows a network to r ectify the illegal address problem mentioned above without g[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 124 Virtually all-popular applications over Internet, such as Web, E-Mail, FTP, Telnet, Gopher, are supported. Prestige is designed for SOHO, branch offices, workgroups, and educational users. Will the Prestige work with my Internet connectio[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 125 Why does my provider use PPPoE? PPPoE emulates a familiar Dial-Up connection. It allows your IS P to provide services using their existing network configuration over the broadband connections. Besides, PPPoE supports a broad range of exis[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 126 How does e-mail work through the Prestige? It depends o n what kind of IP you have: Static or Dynamic. If y our company has a domain name, it means that you have a static IP address. Suppose your company's e-mail ad dress is xxx@myco[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 127 What network interface does the new Prestige series support? The new Prestige series s upport auto MDX/MDIX 10/100M Ethernet LAN port to connect to the computer or Switch on LAN and ADSL port on WAN. How does the Prestige support TFTP? In[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 128 To create th e appearance of faster network access, service co mp anies plan to store or "cache" frequently requested web sites and Usenet newsgroups on a server at their head-end. Storing data l ocally will remove some of the b[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 129 What IP/Port mapping does Multi-NA T support? NAT supports five types of IP/port mapping. They are: One to On e, Many to One, Many to Many O verload, Many to Many No Overload and Server. The details of the mapping b e t w e e n I L A a n [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 130 Overload ILA2<--->IGA2 ILA3<--->IGA1 ILA4<--->IGA2 ... Many-to-Many No Overload ILA1<--->IGA1 ILA2<--->IGA2 ILA3<--->IGA3 ILA4<--->IGA4 ... Server Server 1 IP<--->IGA1 Server 2 IP<--->[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 131 (e.g., www.zyxel.com.tw) for your server (e.g., Web server) fro m a DDNS server. The out side users can always access the web server using the www.zyxel.com.tw regardless of the WAN IP of the 312. When the ISP assigns the Prestige a new I[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 132 How do I setup my Prestige for r outing IPsec p acket s over SUA? For outgoing IPsec tunnels, no extra setting is required. For f orwarding the inbound IPsec ESP tunnel, A 'Default' server set in menu 15 is required. It is becau[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 133 Can I make an outgoing PSTN call through P2802HWL ? Yes, P2802HWL allows you to make outgoing PSTN call via a prefi x number that is defined in the configurable lifeline table. It allows you to store up to 9 pre-stored numbers. If P2802HW[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 134 What advantage does Voice over IP can provide? The advantage of VoIP is it can provide advance services such a s joining e-mail, instant messaging, video, voice mail all together. Where c urrent circuit switching (PSTN ) can not. What is [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 135 What is the relation of codec and VoIP? As VoIP is a general term send voice information in digital f or m in discrete packets o ver digital network and this digital n etwork is public network, thus there maybe other packet such data pack[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 136 Unable to register with the SIP server? If you are unable to register with SIP server. 1. Make sure the Internet is reachable and the SIP register s er ver is reachable. If your register ser ver uses domain name make sure DNS name can be [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 137 1. Serial number of the device. 2. SIP Call server type and vendor. 3. Your device firmware version and romfile with password. 4. Detail information what you have tried to resolve the proble m. I suspect there is a hardware problem with m[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 138 Packet Filtering Firewalls generally make their decisions based on the header information in individual packets. These header information include the source, destination addresses and ports of the packets. Application-level Firewalls gene[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 139 What is Denials of Service (DoS)attack? Denial of Service (DoS) attacks ar e aimed at devices and networks w ith a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer h[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 140 What is LAND attack? In a LAN attack, hackers flood SYN packets to the network with a spoofed s ource IP address of the targeted system. This m akes it appear as if the host co mputer sent the p ackets to itself, making the system unavail[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 141 How can I protect against IP spoofing attacks? The Prestige's firewall will auto matically detect the IP spoofi ng and drop it if the firewall is turned on. If the firewall is not turned on we can configure a filter set to bloc k the[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 142 Content Filter FAQ What types of content filter does Prestige provide? Can I have different policies in effect fo r different times of the day or week? Y es, but only one blocking period of time is supported currently on ZyXEL appliance. [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 143 With encryption, VPN guarantees the confid entiality of the original user data. Cost 1). Cut long distance phone charges Because users typically dial the thei r local ISP for VPN, thus, long dist ance phone charge is reduced than making a[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 144 provides cryptographic security servi ces. These services allow for authen tication, integrity, access control, and confidentiality. IPSec allows for the inf o rmation ex changed between remote sites to be encrypted and verified. You can [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 145 What is Pre-Shared Key? A pre-shared key identifies a communicating pa rty during a phase 1 IKE negotiation. It is called 'Pre-shared' because you have to share it with an o ther party before you can communicate with them over a[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 146 E-mail support@zyxel.com.tw Please note that, in Prestige, if "DNS" or "E-mail" type is choosen, you can still use a random string as the content, such as "this_is_Prestige". It's not neccessary to follo[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 147 What VPN protocols are supported by Prestige? All Prestige series support ESP (protoco l number 50) and AH (protocol number 51). What types of encryption does Prestige VPN support? Prestige supports 56-bit DES and 168-bit 3DES and AES. Wh[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 148 172.16.0.0 - 172.31.255.255 (these address ranges are reserv ed by internet standard for private LAN numberings behind NA T devices). It is usually a static IP so that we can pre-configure it in Prestige for making VPN connections. If it [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 149 • W indows 2000, W indows XP IPSec Will ZyXEL support Secure Remote Management? Yes, we will support it and we are working on it currently. Does Prestige VPN support NetBIOS broadcast? The current 3.50 firmware releas e does not support[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 150 If I have NA T router between tw o VPN gateways, and I would like to use IP type as Phase 1 ID, what should I know? We presume your environment may look like this,[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 151 VPN client: 10.1.33.33 NAT router WAN IP: 202.132.154.2 Prestige WAN: 202.132.154.3 Since the VPN client is behind a NAT router, it must have a private IP address in most case. Th is may cause the VPN client to send it's pr ivate IP [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 152 Can Prestige behave as a NA T router s upporting IPSec passthrough and an IPSec gateway simultaneously? No, Prestige can't support them simultaneously. You need to cho ose either one. If Prestige is to support IPSec passthrough, you [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 153 LAN hardware, overall installation expenses and life-cycle costs can be significantly lower . Long-term cost benefits are greatest in dynamic environm ents requiring frequent m oves and changes. e. Scalability: W ireless LAN systems can b[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 154 What is 802.11b ? 802.1 1b is the first revision of 802.1 1 standard allowing data rates up to 1 1 Mbps in the 2.4GHz ISM band. Also known as 802.1 1 High-Rate and W i -Fi. 802.1 1b onl y uses DSSS, the maximum speed of 1 1Mbps has fallba[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 155 What is Wi-Fi ? The W i-Fi logo signifies that a pro duct is interoperable with wireless networking equipment from other vendors. A W i-Fi logo product has been tested and certified by the W ireless Ethernet Compatibility Alliance (WECA).[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 156 Solution : 1.Minimizing the number of walls and ceilings 2.Antenna is positioned for best reception 3.Keep W LAN products away from electrical devices, eg: microwaves, monitors , electric motors,…, etc. 4. Add additional APs if necessar[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 157 bit-pattern at the sending station into a higher data rate bit sequ ence using a "chipping" code. The chipping code (also known as processing gain) introduces redundancy which allows data recovery if certain bit errors occur dur[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 158 How do I secure the data across an Access Point's radio link ? Enable W ired Equivalency Protocol (WEP) or W i-Fi Protected Access (WP A) to encrypt the payload of packets sent across a radio link. What is WEP ? W ired Equivalent Pri[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 159 WEP is turned on. The SSID goes over the air in cl ear text. This makes obtaining the SSID easy by snif fing 802.1 1 wireless traf fic. By turning off the broadcast of SSID, can someone still sniff the SSID ? Many APs by default have broa[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 160 users' access to IEEE 802 networks such as Ethe rnet (IEEE 802.3) and W ireless LAN (IEEE 802.11). For IEEE 802.1 1 WLAN, IEEE 802.1x authentication can be based on username/password or digital certificate. What is the difference bet[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 161 What is WPA-PSK? WP A-PSK (W i-Fi Protected Access Pre- Shared Key) can be used if user do not have a Radius server but still want to benefit from it. B ecause WP A-PSK only requires a single password to be entered on wireless AP/gateway [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 162 Online Trace 1. Trace LAN packet 2. Trace WAN packet 1. Trace LAN packet 1.1 Disable to capture the WAN packet by entering: sys trcp channel enet1 none 1.2 Enable to capture the LAN packet by entering: sys trcp channel enet0 bothway 1.3 E[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 163 Frame Type: T CP 192.168.1.2: 1116->192.31.7. 130:80 Ethernet He ader: Destinati on MAC Addr = 00A0C5921311 Source MA C Addr = 0080C84CEA63 Network T ype = 0x0800 (TCP/ IP) IP Header: IP Versio n = 4 Header Le ngth = 20 Type of S ervic[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 164 0000: 00 A0 C5 92 13 11 00 80-C8 4C EA 63 08 00 45 00 . ........L.c..E. 0010: 00 30 33 0B 40 00 80 06-3E 71 C0 A8 01 02 C0 1F . 03.@...>q...... 0020: 07 82 04 5C 00 50 00 BD-15 A7 00 00 00 00 70 02 . ...P........p. 0030: 20 00 BE C3 0[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 165 Checksum = 0xF877 (6360 7) Urgent Pt r = 0x0000 (0) Options = 0000: 02 04 05 B4 RAW DATA: 0000: 00 80 C8 4C EA 63 00 A0-C5 92 13 11 08 00 45 00 . ..L.c........E. 0010: 00 2C 57 F3 40 00 ED 06-AC 8C C0 1F 07 82 C0 A8 . ,W.@........... 0020[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 166 Destinati on Port = 0x0050 (80) Sequence Number = 0x00BD15A8 ( 12391848) Ack Numbe r = 0x4AD1B580 ( 1255257472) Header Le ngth = 20 Flags = 0x10 (.A.... ) Window Si ze = 0x2238 (8760 ) Checksum = 0xE8ED (5962 9) Urgent Pt r = 0x0000 (0) T[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 167 2 12373.94 0 ENET1-T[0062] TCP 202.132.15 5.97:10261->192 .31.7.130:80 3 12374.93 0 ENET1-R[0064] TCP 192.31.7.1 30:80->202.132. 155.97:10261 4 12374.94 0 ENET1-T[0054] TCP 202.132.15 5.97:10261->192 .31.7.130:80 5 12374.94 0 ENE[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 168 Header Le ngth = 20 Flags = 0x19 (.AP..F ) Window Si ze = 0xFAF0 (6424 0) Checksum = 0x3735 (1413 3) Urgent Pt r = 0x0000 (0) TCP Data: ( Length=1127, Ca ptured=42) 0000: DF 33 AF 62 58 37 52 3D-79 99 A5 3C 2B 59 E2 78 . 3.bX7R=y..<+Y.[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 169 Time to L ive = 0x7F (127) Protocol = 0x06 (TCP) Header Ch ecksum = 0x543C (2156 4) Source IP = 0xCA849B61 ( 202.132.155.97) Destinati on IP = 0xC01F0782 ( 192.31.7.130) TCP Header: Source Po rt = 0x281E (1027 0) Destinati on Port = 0x005[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 170 Total Len gth = 0x0028 (40) Idetifica tion = 0x7B0C (3150 0) Flags = 0x02 Fragment Offset = 0x00 Time to L ive = 0x7F (127) Protocol = 0x06 (TCP) Header Ch ecksum = 0x533C (2130 8) Source IP = 0xCA849B61 ( 202.132.155.97) Destinati on IP [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 171 1. Trace LAN packet 1.1 Disable to capture the WAN packet by entering: sys trcp channel enet1 none 1.2 Enable to capture the LAN packet by entering: sys trcp channel enet0 bothway 1.3 Enable the trace log by entering: sys trcp sw on &[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 172 Ethernet He ader: Destinati on MAC Addr = 0080C84CEA63 Source MA C Addr = 00A0C5921311 Network T ype = 0x0800 (TCP/ IP) IP Header: IP Versio n = 4 Header Le ngth = 20 Type of S ervice = 0x00 (0) Total Len gth = 0x002C (44) Idetifica tion [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 173 0010: 00 2C 7F 02 40 00 ED 06-85 7D C0 1F 07 82 C0 A8 . ,..@....}...... 0020: 01 02 00 50 04 4F D9 1B-18 26 00 AA 40 5F 60 12 . ..P.O...&..@_`. 0030: FA F0 DC EF 00 00 02 04-05 B4 . ..... .... Prestige> 2. Trace WAN packet 1.1 Disa[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 174 Source MA C Addr = 00A0C5591284 Network T ype = 0x0800 (TCP/ IP) IP Header: IP Versio n = 4 Header Le ngth = 20 Type of S ervice = 0x00 (0) Total Len gth = 0x00E5 (229) Idetifica tion = 0xE93B (5970 7) Flags = 0x02 Fragment Offset = 0x00 [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 175 0010: 00 E5 E9 3B 40 00 F0 06-6E 15 CC D9 00 02 CA 84 . ..;@...n....... 0020: 9B 61 00 50 28 26 4D 71-3D 8A 00 C8 C0 15 50 18 . a.P(&Mq=.....P. 0030: 22 38 AB 57 00 00 48 54-54 50 2F 31 2E 31 20 33 " 8.W..HTTP/1.1 3 0040: 30 34 2[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 176 Window Si ze = 0x1E87 (7815 ) Checksum = 0x4374 (1726 8) Urgent Pt r = 0x0000 (0) TCP Data: ( Length=357, Cap tured=42) 0000: 47 45 54 20 2F 70 69 63-74 75 72 65 73 2F 6D 61 G ET /pictures/ma 0010: 67 61 7A 69 6E 65 5F 6C-6F 67 6F 2F 62 6[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 177  poe debug 1 (turn on pppoe debug)  dev dial 1 (dial remote node 1) 5. After all, if the Prestige crashes and you can do nothing, please send the above log back to us. 6. If the Prestige crashes and you are able to enter commands, p[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 178 service-name telstra service-name bpa service-name iprimus service-name pacificinternet service-name integrationisp service-name bpa-dev service-name bpa-sif service-name telstrarna service-name gpmsystems service-name cmux service-name l[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 179 e5bdc020: 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ed 2b ...b...f...j...n e5bdc030: 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ed 2b ...b...f...j...n e5bdc040: 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ed 2b ...b...f...j...n e5bdc050: 00 [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 180 The Prestige packet trace records and analyzes packets running on LAN and WAN interfaces. It is designed for users with technical backgrounds who are interested in the deta i l s o f t h e p a c k e t f l o w o n L A N o r W A N e n d o f[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 181 ras> sys trcp channel enet0 bothway ras> sys trcp sw on ras> sys trcl sw on ras> sys trcd brief 0 11880 .160 ENET0-R[00 62] TCP 192.168 .1.2:1108->192. 31.7.130:80 1 11883 .100 ENET0-R[00 62] TCP 192.168 .1.2:1108->192. [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 182 Source IP = 0xC0A80102 ( 192.168.1.2) Destinati on IP = 0xC01F0782 ( 192.31.7.130) TCP Header: Source Po rt = 0x045C (1116 ) Destinati on Port = 0x0050 (80) Sequence Number = 0x00BD15A7 ( 12391847) Ack Numbe r = 0x00000000 ( 0) Header Le [...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 183 Idetifica tion = 0x57F3 (2251 5) Flags = 0x02 Fragment Offset = 0x00 Time to L ive = 0xED (237) Protocol = 0x06 (TCP) Header Ch ecksum = 0xAC8C (4417 2) Source IP = 0xC01F0782 ( 192.31.7.130) Destinati on IP = 0xC0A80102 ( 192.168.1.2) TC[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 184 Network T ype = 0x0800 (TCP/ IP) IP Header: IP Versio n = 4 Header Le ngth = 20 Type of S ervice = 0x00 (0) Total Len gth = 0x0028 (40) Idetifica tion = 0x350B (1357 9) Flags = 0x02 Fragment Offset = 0x00 Time to L ive = 0x80 (128) Protoc[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 185 0030: 22 38 E8 ED 00 00 20 20-20 20 20 20 " 8.... 2. Trace WAN packet 1.1 Disable the capture of the LAN packet by entering: sys trcp chan nel enet0 none 1.2 Enable to capture the WAN packet by entering: sys trcp channel mpoa00 bothw[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 186 Flags = 0x02 Fragment Offset = 0x00 Time to L ive = 0xEE (238) Protocol = 0x06 (TCP) Header Ch ecksum = 0xA9AB (4343 5) Source IP = 0xC01F0782 ( 192.31.7.130) Destinati on IP = 0xCA849B61 ( 202.132.155.97) TCP Header: Source Po rt = 0x005[...]

Pr estige 2802HW(L)-Ix Support Notes All contents c opyright (c ) 2007 Zy XEL Comm unications Cor poration. 187 1. Trace LAN packet 2. Trace WAN packet 1. Trace LAN packet 1.1 Disable the capture of the WAN packet by entering: sys trcp chan nel mpoa00 none 1.2 Enable the capture of the LAN packet by entering: sys trcp channe l enet0 bothway 1.3 Ena[...]