ZyXEL 660H User's Manual
Contents
1. see Figure 14 If you have multiple public IP addresses then you may use full feature mapping types see the User s Guide for more details NAT supports five types of IP port mapping They are 19 Prestige 660H Series Compact Guide 1 One to One One to one mode maps one local IP address to one global IP address Note that port numbers do not change for One to one NAT mapping type 2 Many to One Many to One mode maps multiple local IP addresses to one global IP address 3 Many to Many Overload Many to Many Overload mode maps multiple local IP addresses to shared global IP addresses 4 Many to Many No Overload Many to Many No Overload mode maps each local IP address to unique global IP addresses 5 Server This type allows you to specify inside servers of different services behind the NAT to be accessible to the outside world 5 2 Configuring SUA Server An SUA server set is a list of inside behind NAT on the LAN servers for example web or FTP that you can make visible to the outside world even though SUA makes your whole inside network appear as a single computer to the outside world Step 1 From the main screen click Advanced Setup and then NAT to open the NAT Mode screen Select SUA Only NAT Mode Network Address Translation None SUA Only Edit Details Full Feature Edit Details Figure 14 NAT Mode Step 2 Click Edit Details 20 Prestige 660H Series C2. Encapsulation Gateway IP Address O PPPoA User Name Password O PPPoE Service Name User Name Password Certifications 1 Go to www zyxel com 2 Select your product from the drop down list box on the ZyXEL home page to go to that product s page 3 Select the certification you wish to view from this page Prestige 660H Series Compact Guide 2 Hardware 2 1 Rear Panel Connections oB Ge re mon mor POWER seur N 10 100 Figure 1 Prestige Rear Panel Connections Table 1 Prestige Rear Panel escription LABEL DESCRII TION Ee Connect to a telephone jack using the included phone wire Connect to a computer external hub using an Ethernet cable 1 4 POWER Connect to a power source using the power adaptor for your region Use only the included power adaptor After you ve made the connections connect the power adaptor to a power supply and push in the power button to turn on the Prestige The PWRISYS LED blinks while performing system testing and then turns steady on if the testing is successful A LAN LED turns on if a LAN port is properly connected Prestige 660H Series Compact Guide Table 1 Prestige Rear Panel Description LABEL DESCRII TION You only need to use this button if you ve forgotten the Prestige s password It returns the Prestige to the factory defaults password is 1234 LAN IP address 192 168 1 1 etc see your User s Guide for details 2 2 T
3. You may reorder your rules using this function Select the rule you want to move The ordering of your rules is important as rules are applied in turn To Rule Select the number you want to move the rule to Number Move Click Move to move the rule Follow these directions to create a new rule Step 1 Step 2 In the Summary screen click a rule s index number The Edit Rule screen opens In the Available Services text box select the services you want Customize ports for services not predefined by the Prestige by clicking the Edit 25 Prestige 660H Series Compact Guide Available Service buttons For a comprehensive list of port numbers and services visit the IANA Internet Assigned Number Authority web site Step 3 Configure the Source Address and Destination Address for the rule Firewall LAN to WAN Edit Rule 1 Source Address AHHH Source IP Address Hit Any SrcAdd SrcEdit SrcDelete Destination Address AHHH Destination IP Address AHAHAE Any DestAdd DestEdit DestDelete Service Available Services Selected Services AIM NEW CQ T CP 51930 AUTH TCP 113 BGPITCP 179 lt lt gt BOOTP_CLIENT UDP 68 BOOTP_SERVER UDP 67 gt Edit Available Service Action for Matched Packets Forward Log None z T Alert Back Apply Cancel Delete Figure 19 Creating Editing A Firewall Rule The following table describe
4. to Internet Set 2 Internetto Local Network Set CAUTION If Firewall Enabled is not checked all the existing firewall security policies and firewall functions will be disabled Back Cancel Figure 17 Enabling the Firewall 5 5 Procedure for Configuring Firewall Rules From the main screen click Advanced Setup Firewall and then Rule Summary for either local network to Internet rules or Internet to local network rules to open the Summary screen 23 Prestige 660H Series Compact Guide Firewall LAN to WAN Rule Summary The default action for packets not matching following rules Forward M Default Permit Log Source IP Destination IP n oO z 8 Action Log ION ie i IND Ko 10 i 0 ddddddddidi Rules Reorder Move rule number 1 to rule number 1 x Move 4 daddddddda dddddadddda Back Apply Cancel Figure 18 Rule Summary The following table describes the labels in this screen Table 4 Rule Summ iry LABEL DESCF PTION The default Should packets that do not match the following rules be blocked or action for forwarded Make your choice from the drop down list box Note that packets not block means the firewall silently discards the packet matching following rules Default Permit Log Click this check box to log all matched rules in the Access Control Lis
5. 00 Wireless PCMCIA M gt Add Remove Properties Primary Network Logon Client for Microsoft Networks Eile and Print Sharing Description TCP IP is the protocol you use to connect to the Internet and area networks cm 1CPnP Properties er Bindings Advanced Netios DNS Configuration Gateway WINS Configuration IP Address An IP address can be automatically assigned to this computer If your network does not automatically assign IP addresses ask your network administrator for an address and then type it in the space below Specify an IP address IP Address F EN Subnet Mask IV Detect connection to network media Prestige 660H Series Compact Guide T 8 9 1 Click the DNS Configuration tab aixi Bindings Advanced NeBos If you do not know your DNS DNS Configuration Gateway WINS Configuration IP Address information select Disable DNS ig If you k DNS inf l BB i If you know your information select AR P Enable DNS and type the information in Zu the fields below you may not need to fill DNS Server Search Order them all in a Aa Cane Click the Gateway tab axl Bindings Advanced Neos If you do not know your gateway s IP DNS Configuration Gateway WINS Configuration IP Address a remove previously installed The et oat ted aay it detit pees t wil b
6. NTERNET ACCESS SOLUTION eis Wizard Setup Advanced Setup Advanced Setup Wizard Setup Password System Status LAN DHCP Table WAN Diagnostic Maintenance NAT Firmware i i Dynamic DNS Navigation panel Tine And Date Logout Firewall Content Filter Remote Management UPnP LOGOUT Tear BW Manager Figure 5 Web Configurator Site Map Screen The Prestige automatically times out after five minutes of inactivity Simply log back into the Prestige if this happens to you 4 2 Common Screen Command Buttons The following table shows common command buttons found on many web configurator screens Back Click Back to return to the previous screen Apply Click Apply to save your changes back to the Prestige Reset Cancel Click Reset or Cancel to begin configuring this screen afresh 4 3 Internet Access Using the Wizard Use the Wizard Setup screens to configure your system for Internet access settings and fill in the fields with the information in the Internet Account Information table Your ISP may have already configured some of the fields in the wizard screens for you Step 1 Inthe Site Map screen click Wizard Setup to display the first wizard screen 13 Prestige 660H Series Compact Guide From the Mode drop down list box select Routing default if your ISP allows multiple computers to share an Internet Wizard Setup ISP Parameters for Internet Access nn Four account Other
7. Prestige 660H Series ADSL 2 2 Gateway Compact Guide Version 3 40 QT April 2004 ZyXEL Unleash Networking Power Prestige 660H Series Compact Guide Table of Contents 1 Introducing the Prestige esersonssnessessorsnnesnensernnnsnnesnensessnnsnnennensesnnnsnssnnennensnsnunsnnennnn 3 2 Hardware nn ssGescessesbaseosouscsedesvassassessedesvenoscvasens 4 2 1 Rear Panel Connections i 2 2 The Front Panel LEDS eiin e aha A E ASEE a 5 3 Setting Up Your Computer s IP Address uessersorsonesnensersonsnnesnensersnesnnsnnesnensersansnnenne 6 3 1 Windows 9 VIIME rt i nn Ran a NEE Oy ih 6 3 2 Windows 2000 NT XR u ueslstigenebsst te sense 9 3 3 Checking Updating Your Computer s IP Address 10 3 4 Testing the Connection to the Prestige nenn 10 4 Configuring Your Prestige scsccscssssssesssssecesessessesssseseesssesssscessesseseessseeseess 11 4 1 Accessing Your Prestige Via Web Configurator uceenenseneensennensnnnen 11 4 2 Common Screen Command Buttons ueenseensenseeseeseensennennnnnenne nenne 13 4 3 Internet Access Using the Wizard cneenenensneeensenseneenneense nennen 13 4 4 Test Your Internet Connection u222444242 2er eneenseenneenneeenee nennen nennen 19 5 Advanced Configuration sersosssussnseseesoesnnssnnessensnsnnssnnesnensesnunsnnsnnennensessonsnnenensennane 19 5 1 Network Address Translation Overview uncnsenesensenseeseensennennn
8. already set up to assign your computer an IP address Use this section to set up your computer to receive an IP address or assign it a static IP address in the 192 168 1 2 to 192 168 1 254 range with a subnet mask of 255 255 255 0 This is necessary to ensure that your computer can communicate with your Prestige Your computer must have an Ethernet card and TCP IP installed TCP IP should already be installed on computers using Windows NT 2000 XP Macintosh OS 7 and later operating systems 3 1 Windows 95 98 Me 1 Click Start Settings Control Panel and double click the Network icon to open the Network window Prestige 660H Series Compact Guide The Network window Configuration tab displays a list of installed components You need a network adapter the TCP IP protocol and Client for Microsoft Networks In the Network window Configuration tab select your network adapter s TCP IP entry and click Properties Click the IP Address tab If your IP address is dynamic select Obtain an IP address automatically If you have a static IP address select Specify an IP address and type your information into the IP Address and Subnet Mask fields LT ix Configuration identification Access Control The following network components are installed P ZyAIR 100 Wireless PCMCIA a I NDISWAN gt lt nothing gt Y TCP IP gt Accton EN1207D TX PCI Fast Ethemet Adaptd TCP IP gt Dial Up Adapter TCP IP gt ZyAIR 1
9. d IP address in the text box below Select Connect on Demand when you don t want the connection up all the time and specify an idle time out period in seconds in the Max Idle Timeout field Select Nailed Up Connection when you want your connection up all the time The Prestige will try to bring up the connection automatically if it is disconnected From the Network Address Translation drop down list box select SUA Only Full Feature or None Refer to the Network Address Translation section for more information Wizard Setup iSP Parameters for internet Access IP Address 0 0 0 0 Network Address Translation SUA Only x Back Next Figure 8 Internet Connection with RFC 1483 Enter the IP address given by your ISP in the IP Address field The IP Address field is not available for bridge mode Refer to Figure 7 for description of the Network Address Translation field 15 Prestige 660H Series Compact Guide Wizard Setup iSP Parameters for internet Access IP Address Obtain an IP Address Automtically Static IP Address IP Address 0 1 Subnet Mask 0 0 0 0 ENET ENCAP Gateway 0 0 0 0 Network Address Translation SUA Only gt Figure 9 Internet Connection with ENET ENCAP Wizard Setup ISP Parameters for Internet Access User Name Password IP Address Obtain an IP Address Automtically Static IP Address O 0 L Connection Con
10. esensennn nenn 19 5 2 Configuring SUA Server cccccccccccessessseseceseesseseseseesecaaeeseeeecesecsaeeaeeeeeesecnaeeaeeeeeeaeens 20 3 3 Firewall OVERVIEW ic er os fceasdacetees teases isbadhbad stacaseane wie eee dadoed naladapdeasd vcagnes tenses Neen 22 5 4 Enabling the Firewall sisccssccccccscicicsacnccsavscvacscssies cuseasteanscievicbestevaeasd sebaatteanvacscctecds 23 5 5 Procedure for Configuring Firewall Rules unenenenseneensenneennennen 23 5 6 Configuring Source and Destination Addresses ceseneneneenen 27 6 Troubleshooting scssccssscscssscsssrsesssssscessersessessssessessessesesessensesseseeseessssesseseeseese 29 Prestige 660H Series Compact Guide 1 Introducing the Prestige The Prestige 660H ADSL 2 2 Gateway is the ideal all in one device for small networks connecting to the Internet via ADSL Key features of the Prestige include NAT content filter and firewall See your User s Guide for more details on all Prestige features You should have an Internet account already set up and have been given most of the following information INTERNET ACCOUNT INFORMATION Your device s WAN IP Address if given DNS Server IP Address if given Primary Secondary Virtual Path Identifier VPI Virtual Channel Identifier VCI Multiplexing VC based or LLC based Ove O LLC Encapsulation choose one below Q RFC 1483 O ENETENCAP Ethernet
11. ess LAN IP Address LAN Subnet Mask DHCP DHCP Server Client IP Pool Stating Address Size of Client IP Pool Primary DNS Server Secondary DNS Server 172 21 4 114 255 255 0 0 ON x 192 168 1 33 32 0 0 0 0 0 0 0 0 Enter the IP address of your Prestige in dotted decimal notation in the LAN IP Address field For example 192 168 1 1 factory default If you change the Prestige s LAN IP address you must use the new IP address if you want to access the web configurator again Enter a subnet mask in dotted decimal Back Finish notation in the LAN Subnet Mask field Figure 12 Wizard LAN Configuration From the DHCP Server drop down list box select ON to allow your Prestige to assign IP addresses an IP default gateway and DNS servers to computer systems that support the DHCP client Select OFF to disable DHCP server When DHCP server is used set the following items Specify the first of the contiguous addresses in the IP address pool in the Client IP Pool Starting Address field Specify the size or count of the IP address pool in the Size of Client IP Pool field Enter the IP address es of the DNS server s in the Primary DNS Server and or Secondary DNS Server fields Step 5 The Prestige automatically tests the connection to the computer s connected to the LAN ports To test the connection from the Prestige to the ISP click Start Diagnose Otherwise click Return to Ma
12. gateways Bis en list wil order in whic If you have a gateway IP address type it in the New gateway field and click Add Ne cae a Installed gateways Click OK to save and close the TCP IP Properties window Click OK to close the Network window Insert the Windows CD if prompted Turn on your Prestige and restart your computer when prompted Verifying Your Computer s IP Address Click Start and then Run Prestige 660H Series Compact Guide In the Run window type winipcfg and then Configuration window Select your network adapter You should see mask and default gateway 3 2 Windows 2000 NT XP 1 click OK to open the IP your computer s IP address subnet In Windows XP click start Control Panel In Windows 2000 NT click Start Settings Control Panel In Windows XP click Network Connections In Windows 2000 NT click Network and Dial up Connections Right click Local Area Connection and then Select Internet Protocol TCP IP under the Properties The Internet Protocol TCP IP Properties screen opens the General tab in Windows XP To have your computer assigned a dynamic IP address click Obtain an IP address automatically If you know your DNS sever IP address es type them in the Preferred DNS server and or Alternate DNS server fields To configure a static IP address click Use the following IP Address and fill in the IP address choose one from192 168 1 2 t
13. gement Terminal configuration 4 1 Accessing Your Prestige Via Web Configurator Step 1 Launch your web browser Enter 192 168 1 1 as the web site address File Edit view Favorites Tools Help Web site address sack gt amp A A search GFavorites History Be E Address 192 168 1 1 ia Figure 3 Entering Prestige LAN IP Address in Internet Explorer Step 2 An Enter Network Password window displays Enter the user name admin is the default password 1234 is the default and click OK 11 Prestige 660H Series Compact Guide Enter Network Password 2 x D gt Please type your user name and password Site 192 168 1 1 Realm Prestige 660H 61 Default user name User Name Password 7 Save this password in your password list Cancel Figure 4 Web Configurator Password Screen Step 3 You should now see the web configurator Site Map screen gt Click Wizard Setup to begin a series of screens to configure your Prestige for the first time gt Clicka link under Advanced Setup to configure advanced Prestige features Click a link under Maintenance to see Prestige performance statistics upload firmware and back up restore or upload a configuration file gt Click Logout in the navigation panel when you have finished a Prestige management session 12 Prestige 660H Series Compact Guide ZyXEL TOTAL I
14. he Front Panel LEDs ZyXEL Prestige 600 series LAN PWR SYS 1 2 4 DSL ACT Figure 2 Front Panel Refer to the following table for more detailed LED descriptions Table 2 Front Panel LED Description LED COLOR STATUS DESCRIPTION PWR SYS Green On The Prestige is receiving power and functioning properly Blinking The Prestige is rebooting Red On Power to the Prestige is too low Off The system is not ready or has malfunctioned LAN 1 4 Green On The Prestige has a successful 10Mb Ethernet connection Blinking The Prestige is sending receiving data Amber On The Prestige has a successful 100Mb Ethernet connection Blinking The Prestige is sending receiving data Prestige 660H Series Compact Guide Table 2 Front Panel LED Description LED COLOR STATUS DESCRIPTION Off The LAN is not connected DSL ACT Green Fast The Prestige is sending receiving non PPP data Blinking Slow The Prestige is initializing the DSL line Blinking On The system is ready but is not sending receiving non PPP data Amber On The connection to the PPPoE server is up Blinking The Prestige is sending receiving PPP data Off The DSL link is down 3 Setting Up Your Computer s IP Address Skip this section if your computer is already set up to accept a dynamic IP address This is the default for most new computers The Prestige is
15. in Menu to go back to the Site Map screen 18 Prestige 660H Series Compact Guide Wizard Setup ISP Parameters for Internet Access Your DSL Gateway is now configured Your device is capable of testing your DSL service The individual tests are listed below Click Start Diagnose button if you want to test otherwise click Return to Main Menu button LAN connections Test your Ethernet Connection PASS WAN connections Test ADSL synchronization Pass Test ADSL ATM OAM loopback test PASS Start Diagnose Return to Main Menu Figure 13 Wizard Screen 4 4 4 Test Your Internet Connection Launch your web browser and navigate to www zyxel com Internet access is just the beginning Refer to the User s Guide for more detailed information on the complete range of Prestige features If you cannot access the Internet open the web configurator again to confirm that the Internet settings you configured in the Wizard Setup are correct 5 Advanced Configuration This section shows how to configure some of the advanced features of the Prestige 5 1 Network Address Translation Overview NAT Network Address Translation NAT RFC 1631 is the translation of the IP address of a host in a packet For example the source address of an outgoing packet used within one network is changed to a different IP address known within another network If you have a single public IP address then select SUA Only in the NAT Mode screen
16. mand Prompt window type ipconfig and then press ENTER to verify that your computer s IP address is in the correct range 192 168 1 2 to 192 168 1 254 with subnet mask 255 255 255 0 This is necessary in order to communicate with the Prestige Refer to your User s Guide for detailed IP address configuration for other Windows and Macintosh computer operating systems 3 4 Testing the Connection to the Prestige 1 2 Click Start All Programs Accessories and then Command Prompt In the Command Prompt window type ping followed by a space and the IP address of the Prestige 192 168 1 1 is the default Press ENTER and the following screen displays 10 Prestige 660H Series Compact Guide C gt ping 192 168 1 1 Pinging 192 168 1 1 with 32 bytes of data Reply from 192 168 1 1 bytes 32 time 10ms TTL 254 Reply from 192 168 1 1 bytes 32 time lt l0ms TTL 254 Reply from 192 168 1 1 bytes 32 time lt l0ms TTL 254 Reply from 192 168 1 1 bytes 32 time lt l0ms TTL 254 Ping statistics for 192 168 1 1 Packets Sent 4 Received 4 Lost 0 0 loss Approximate round trip times in milli seconds Minimum Oms Maximum 10ms Average 2ms Your computer can now communicate with the Prestige using the LAN port 4 Configuring Your Prestige This Compact Guide shows you how to use the web configurator only See your User s Guide for background information on all Prestige features and SMT System Mana
17. nect on Demand Max Idle Timeout D Secs Nailed Up Connection Network Address Translation SUA Only Figure 10 Internet Connection with PPPoA In the ENET ENCAP Gateway field enter the gateway IP address given by your ISP Refer to Figure 7 for other field descriptions Refer to Figure 7 for field descriptions The IP Address and Network Address Translation fields are not available for bridge mode 16 Prestige 660H Series Compact Guide Step 3 Verify the settings in the screen shown next To change the LAN information on the Prestige click Change LAN Configurations Otherwise click Save Settings to save the configuration and skip to step 5 Wizard Setup ISP Parameters for internet Access WAN Information Mode Routing Encapsulation PPPoE Mutiplexing LLC VPIVCI 835 Service Name User Name user isp ch Password IP Address Obtain an IP Address Automatically NAT SUA Only Connect on Demand Max Idle Timeout 1500 Secs LAN Information IP Address 192 168 1 1 IP Mask 255 255 255 0 DHCP ON Client IP Pool Stating Address 192 168 1 33 Size of Client IP Pool 32 Change LAN Configuration Save Settings Figure 11 Wizard Screen 3 Step 4 If you want to change your Prestige LAN settings click Change LAN Configuration to display the screen as shown next 17 Prestige 660H Series Compact Guide Wizard Setup ISP Parameters for internet Acc
18. o 192 168 1 254 Subnet mask 255 255 255 0 and Default gateway 192 168 1 1 fields click Properties General tab in Win XP and click Internet Protocol TCP IP Properties PR General Altemate Configuration You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address Obtain DNS server address automatically Use the following DNS server addresses Then enter your DNS server IP address es in the Preferred DNS server and or Alternate DNS server fields If you have more than two DNS servers click configure them using Add Advanced the DNS tab and then Prestige 660H Series Compact Guide Click Advanced Remove any previously Advanced TCP IP Settings installed gateways in the IP Settings tab IP Setings ons WINS Options and click OK to go back to the Internet IP addresses Protocol TCP IP Properties screen IP address Subnet mask DHCP Enabled Click OK to close the Internet Protocol TCP IP Properties window Click OK to close the Local Area abe Connection Properties window Suenay ienie Add 7 Automatic metric Cancel 3 3 Checking Updating Your Computer s IP Address 1 In the computer click Start All Programs Accessories and then Command Prompt In the Com
19. o an appropriate power source Check all cable connections If the LEDs still do not turn on you may have a hardware problem In this case you should contact your local vendor Cannot access the Prestige from the LAN Check the cable connection between the Prestige and your computer or hub Refer to the Rear Panel Connections section for details Ping the Prestige from a computer on the LAN Make sure your computer Ethernet adapter is installed and functioning properly Cannot ping any computer on the LAN If the LAN LEDs are all off check the cable connections between the Prestige and your computers on the LAN Verify that the IP address subnet mask of the Prestige and the LAN computers are in the same IP address range Cannot get a WAN IP address from the ISP The WAN IP is provided after the ISP verifies the MAC address host name or user ID Find out the verification method used by your ISP and configure the corresponding fields If the ISP checks the user ID check your service type user name and password in the WAN Setup screen Cannot access the Internet Verify the Internet connection settings in the WAN Setup screen Make sure you entered the correct user name and password 29
20. ompact Guide NAT Edit SUA NAT Server Set Start Port No End Port No IP Address 1 All ports All ports pooo ha po pooo 3 fo RD Bass a bo o foooo w A 5 pP Ro EE c bp ooo 9 eo fo pooo 0 fo p poo fo bp poo The following table describes the labels in this screen Figure 15 SUA NAT Server Table 3 SUA NAT Server LABEL DESCRIPTION Start Port Type a port number in this field To forward only one port type the port No number again in the End Port field To forward a series of ports type the start port number here and the end port number in the End Port field End Port Type a port number in this field To forward only one port type the port No number in the Start Port field above and then type it again in this field To forward a series of ports type the last port number in a series that begins with the port number in the Start Port field above IP Enter the inside IP address of the server here Address 21 Prestige 660H Series Compact Guide 5 3 Firewall Overview The Prestige firewall is a stateful inspection firewall and is designed to protect against Denial of Service attacks when activated The Prestige s purpose is to allow a private Local Area Network LAN to be securely connected to the Internet The Prestige can be used to prevent theft destruction and modification of data as well as log events
21. s To add a new source or destination address click SreAdd or DestAdd from the previous screen To edit an existing source or destination address select it from the box and click SreEdit or DestEdit from the previous screen Either action displays the following screen 27 Prestige 660H Series Compact Guide Firewall LAN to WAN Rule IP Config Address Type Start IP Address End IP Address Subnet Mask Subnet Address gt 0 0 0 0 0 0 0 0 0 0 0 0 Apply Cancel Figure 20 Adding Editing Source and Destination Addresses The following table describes the labels in this screen Table 6 Adding Editing Source and Destination Addresses LABEL DESCF PTION Address Type Do you want your rule to apply to packets with a particular single IP address a range of IP addresses e g 192 168 1 10 to 192 169 1 50 a subnet or any IP address Select an option from the drop down list box Start IP Enter the single IP address or the starting IP address in a range Address here End IP Enter the ending IP address in a range here Address Subnet Mask Enter the subnet mask here if applicable 28 Prestige 660H Series Compact Guide 6 Troubleshooting Table 7 Troubleshoc ing PROBLEM CORRECTIVE ACTION None of the LEDs turn on when you turn on the Prestige Make sure that you have the correct power adaptor connected to the Prestige and plugged in t
22. s the labels in this screen 26 Prestige 660H Series Compact Guide Table 5 Creating Editing A F rewall Rule LABEL DESCF PTION Source Address Click SrcAdd to add a new address SrcEdit to edit an existing one or SrcDelete to delete one Please see the next section for more information on adding and editing source addresses Destination Click DestAdd to add a new address DestEdit to edit an existing Address one or DestDelete to delete one Please see the following section on adding and editing destination addresses Services Available Highlight a service from the Available Services box on the left then Selected click gt gt to add it to the Selected Services box on the right To Services remove a service highlight it in the Selected Services box on the right then click lt lt Edit Available Click this button to go to the list of available services Service Action for Should packets that match this rule be blocked or forwarded Make Matched your choice from the drop down list box Note that Block means the Packets firewall silently discards the packet Log This field determines if a log is created for packets that match the rule don t match the rule both or no log is created Alert Check the Alert check box to determine that this rule generates an alert when the rule is matched Delete Click Delete to remove this rule 5 6 Configuring Source and Destination Addresse
23. t ACL default set 24 Prestige 660H Series Compact Guide Table 4 Rule Summ ry LABEL DESCF PTION The following read only fields summarize the rules you have created that apply to traffic traveling in the selected packet direction The firewall rules that you configure summarized below take priority over the general firewall action settings above No This is your firewall rule number The ordering of your rules is important as rules are applied in turn The Move field below allows you to reorder your rules Source IP This drop down list box displays the source addresses or ranges of addresses to which this firewall rule applies Please note that a blank source or destination address is equivalent to Any Destination IP This drop down list box displays the destination addresses or ranges of addresses to which this firewall rule applies Please note that a blank source or destination address is equivalent to Any Service This drop down list box displays the services to which this firewall rule applies Please note that a blank service type is equivalent to Any Action This is the specified action for that rule either Block or Forward Note that Block means the firewall silently discards the packet Log This field shows you if a log is created for packets that match the rule Match don t match the rule Not Match both Both or no log is created None Rules Reorder
24. which may be important to the security of your network The Prestige also has packet filtering capabilities When activated the firewall allows all traffic to the Internet that originates from the LAN and blocks all traffic to the LAN that originates from the Internet In other words the Prestige will Allow all sessions originating from the LAN to the WAN Deny all sessions originating from the WAN to the LAN LAN to WAN rules are local network to Internet firewall rules The default is to forward all traffic from your local network to the Internet The following figure illustrates a Prestige firewall application ernennen Denial of Service Attacks Pi ww nr Figure 16 Prestige Firewall Application 22 Prestige 660H Series Compact Guide 5 4 Enabling the Firewall From the main screen click Advanced Setup Firewall and then Config to open the screen as shown Enable or activate the firewall by selecting the Enable Firewall check box as seen in the following screen Firewall Configuration Config M Firewall Enabled The firewall protects against Denial of Service DOS attacks when itis active The default Policy sets 1 allow all sessions originating from theLocal Network to the Internet and 2 deny all sessions originating from the Internet to the Local Network You may define addtional Policy rules or modify existing ones but please exercise extreme caution in doing so 1 Local Network
25. wise select Bridge Select the encapsulation type your ISP Encapsulation PPPoA z uses from the Encapsulation drop down list box Choices vary depending on what Multiplex cz you select in the Mode field Virtual Circuit ID Select the multiplexing method used by VPI 8 your ISP from the Multiplex drop down vci C list box Enter the correct Virtual Path Identifier VPI and Virtual Channel Identifier VCI numbers supplied by your ISP in the VPI and VCI fields These fields may already be configured Figure 6 Wizard Screen 1 Click Next Step 2 The second wizard screen varies depending on what mode and encapsulation type you use All screens shown are with routing mode Configure the fields and click Next to continue 14 Prestige 660H Series Compact Guide Wizard Setup ISP Parameters for Internet Access Service Name User Name Password IP Address Obtain an IP Address Automtically Static IP Address oor Connection Connect on Demand Max Idle Timeout Secs Nailed Up Connection Network Address Translation SUA Only z Figure 7 Internet Connection with PPPoE If your ISP provides the name of your PPPoE service provider enter it in the Service Name field Enter the user name and password exactly as your ISP assigned them Select Obtain an IP Address Automatically if you have a dynamic IP address otherwise select Static IP Address and type your ISP assigne
Download Pdf Manuals
Related Search