ZyXEL Router Prestige 334 User Manual

							Prestige 334 User’s Guide
Chapter 22 Internet Access220
22.3  Configuring the PPTP Client
To configure a PPTP client, you must configure the My Login and Password fields for a PPP 
connection and the PPTP parameters for a PPTP connection. 
After configuring My Login and Password for PPP connection, press [SPACE BAR] and 
then [ENTER] in the Encapsulation field in Menu 4 -Internet Access Setup to choose 
PPTP as your encapsulation option. This brings up the following screen.
Gateway IP AddressEnter the gateway IP address associated with your static IP.
Network Address 
TranslationNetwork Address Translation (NAT) allows the translation of an Internet 
protocol address used within one network (for example a private IP address 
used in a local network) to a different IP address known within another 
network (for example a public IP address used on the Internet). 
Choose None to disable NAT.
Choose SUA Only if you have a single public IP address. SUA (Single User 
Account) is a subset of NAT that supports two types of mapping: Many-to-
One and Server. 
Choose Full Feature if you have multiple public IP addresses. Full Feature 
mapping types include: One-to-One, Many-to-One (SUA/PAT), Many-to-
Many Overload, Many- One-to-One and Server. When you select Full 
Feature you must configure at least one address mapping set!
Please see the NAT chapter for a more detailed discussion on the Network 
Address Translation feature. 
When you have completed this menu, press [ENTER] at the prompt “Press ENTER to Confirm…” to 
save your configuration, or press [ESC] at any time to cancel.
Table 71   Internet Access Setup  (Ethernet
Note: The Prestige supports only one PPTP server connection at any 
given time 
						

							Prestige 334 User’s Guide
221Chapter 22 Internet Access
Figure 100   Internet Access Setup (PPTP) 
The following table contains instructions about the new fields when you choose PPTP in the 
Encapsulation field in menu 4.
22.4  Configuring the PPPoE Client
If you enable PPPoE in menu 4, you will see the next screen. For more information on PPPoE, 
please see the appendix.
Menu 4 - Internet Access Setup
       ISPs Name= MyISP
       Encapsulation= PPTP
         Service Type= N/A
         My Login=
         My Password= ********
         Retype to Confirm= ********
         Idle Timeout= 100
       IP Address Assignment= Dynamic
         IP Address= N/A
         IP Subnet Mask= N/A
         Gateway IP Address= N/A
       Network Address Translation= SUA Only
Press ENTER to Confirm or ESC to Cancel:
Table 72   New Fields in Menu 4 (PPTP) Screen
FIELDDESCRIPTION
EncapsulationPress [SPACE BAR] and then press [ENTER] to choose PPTP. The encapsulation 
method influences your choices for the IP Address field.
Idle TimeoutThis value specifies the time, in seconds, that elapses before the Prestige 
automatically disconnects from the PPTP server. 
						

							Prestige 334 User’s Guide
Chapter 22 Internet Access222
Figure 101   Internet Access Setup (PPPoE)
The following table contains instructions about the new fields when you choose PPPoE in the 
Encapsulation field in menu 4.
If you need a PPPoE service name to identify and reach the PPPoE server, please go to menu 
11 and enter the PPPoE service name provided to you in the Service Name field.
22.5  Basic Setup Complete
Well done! You have successfully connected, installed and set up your Prestige to operate on 
your network as well as access the Internet. 
You may deactivate the firewall in menu 21.2 or via the Prestige embedded web configurator. 
You may also define additional firewall rules or modify existing ones but please exercise 
extreme caution in doing so. See the chapters on firewall for more information on the firewall.
                     Menu 4 - Internet Access Setup
            ISPs Name= MyISP
            Encapsulation= PPPoE
              Service Type= N/A
              My Login=
              My Password= ********
              Retype to Confirm= ********
              Idle Timeout= 100
            IP Address Assignment= Dynamic
              IP Address= N/A
              IP Subnet Mask= N/A
              Gateway IP Address= N/A
            Network Address Translation= SUA Only
         Press ENTER to Confirm or ESC to Cancel:
Table 73   New Fields in Menu 4 (PPPoE) screen
FIELDDESCRIPTION
EncapsulationPress [SPACE BAR] and then press [ENTER] to choose PPPoE. The 
encapsulation method influences your choices in the IP Address field.
Idle TimeoutThis value specifies the time in seconds that elapses before the Prestige 
automatically disconnects from the PPPoE server.
Note: When the firewall is activated, the default policy allows all 
communications to the Internet that originate from the LAN, and 
blocks all traffic to the LAN that originates from the Internet. 
						

							Prestige 334 User’s Guide
223Chapter 22 Internet Access 
						

							Prestige 334 User’s Guide
Chapter 23 Remote Node Configuration 224
CHAPTER23
Remote Node Configuration
This chapter covers remote node configuration.
23.1  Introduction to Remote Node Setup
A remote node is required for placing calls to a remote gateway. A remote node represents 
both the remote gateway and the network behind it across a WAN connection. Note that when 
you use menu 4 to set up Internet access, you are actually configuring a remote node. The 
following describes how to configure Menu 11.1 Remote Node Profile, Menu 11.3 - Remote 
Node Network Layer Options, Menu 11.5 - Remote Node Filter and Menu 11.6 - Traffic 
Redirect Setup.
23.2  Remote Node Profile Setup
From the main menu, select menu option 11 to open Menu 11 Remote Node Profile (shown 
below). 
The following explains how to configure the remote node profile menu.
23.2.1  Ethernet Encapsulation
There are two variations of menu 11 depending on whether you choose Ethernet 
Encapsulation or PPPoE Encapsulation. You must choose the Ethernet option when the 
WAN port is used as a regular Ethernet. The first menu 11.1 screen you see is for Ethernet 
encapsulation shown next.  
						

							Prestige 334 User’s Guide
225 Chapter 23 Remote Node Configuration
Figure 102   Menu 11.1 Remote Node Profile for Ethernet Encapsulation
The following table describes the fields in this menu.
                       Menu 11.1 - Remote Node Profile
   Rem Node Name= MyISP                 Route= IP
   Active= Yes
   Encapsulation= Ethernet              Edit IP= No
   Service Type= Standard               Session Options:
   Service Name= N/A                      Edit Filter Sets= No
   Outgoing:
     My Login= N/A
     My Password= N/A                   Edit Traffic Redirect= No
     Retype to Confirm= N/A
     Server= N/A
     Relogin Every (min)=  N/A
                  Press ENTER to Confirm or ESC to Cancel:
Table 74   Menu 11.1 Remote Node Profile for Ethernet Encapsulation
FIELDDESCRIPTION
Rem Node NameEnter a descriptive name for the remote node. This field can be up to eight 
characters. 
ActivePress [SPACE BAR] and then [ENTER] to select Ye s (activate remote node) or 
No (deactivate remote node).
EncapsulationEthernet is the default encapsulation. Press [SPACE BAR] and then [ENTER] to 
change to PPPoE or PPTP encapsulation. 
Service TypePress [SPACE BAR] and then [ENTER] to select from Standard, RR-Toshiba 
(RoadRunner Toshiba authentication method), RR-Manager (RoadRunner 
Manager authentication method), RR-Telstra or Telia Login. Choose one of the 
RoadRunner methods if your ISP is Time Warners RoadRunner; otherwise 
choose Standard.
Outgoing
My LoginThis field is applicable for PPPoE encapsulation only. Enter the login name 
assigned by your ISP when the Prestige calls this remote node. Some ISPs 
append this field to the Service Name field above (e.g., jim@poellc) to access the 
PPPoE server. 
 My PasswordEnter the password assigned by your ISP when the Prestige calls this remote 
node. Valid for PPPoE encapsulation only. 
Retype to ConfirmType your password again to make sure that you have entered it correctly.
ServerThis field is valid only when RoadRunner is selected in the Service Type field. 
The Prestige will find the RoadRunner Server IP automatically if this field is left 
blank. If it does not, then you must enter the authentication server IP address 
here.
Relogin Every 
(min) This field is available when you select Telia Login in the Service Type field.
The Telia server logs the Prestige out if the Prestige does not log in periodically. 
Type the number of minutes from 1 to 59 (30 recommended) for the Prestige to 
wait between logins.
RouteThis field refers to the protocol that will be routed by your Prestige – IP is the only 
option for the Prestige. 
						

							Prestige 334 User’s Guide
Chapter 23 Remote Node Configuration 226
23.2.2  PPPoE Encapsulation
The Prestige supports PPPoE (Point-to-Point Protocol over Ethernet). You can only use 
PPPoE encapsulation when you’re using the Prestige with a DSL modem as the WAN device. 
If you change the Encapsulation to PPPoE, then you will see the next screen. Please see the 
appendix for more information on PPPoE.
Figure 103   Menu 11.1 Remote Node Profile for PPPoE Encapsulation
23.2.2.1  Outgoing Authentication Protocol
Generally speaking, you should employ the strongest authentication protocol possible, for 
obvious reasons. However, some vendor’s implementation includes a specific authentication 
protocol in the user profile. It will disconnect if the negotiated protocol is different from that in 
the user profile, even when the negotiated protocol is stronger than specified. If you encounter 
a case where the peer disconnects right after a successful authentication, please make sure that 
you specify the correct authentication protocol when connecting to such an implementation.
Edit IPThis field leads to a “hidden” menu. Press [SPACE BAR] to select Ye s and press 
[ENTER] to go to Menu 11.3 - Remote Node Network Layer Options.
Session Options
 Edit Filter SetsThis field leads to another “hidden” menu. Use  [SPACE BAR] to select Ye s and 
press [ENTER] to open menu 11.5 to edit the filter sets. See the Remote Node 
Filter section for more details.
Edit Traffic 
RedirectPress [SPACE BAR] to select Ye s or No. 
Select Ye s  and press [ENTER] to configure Menu 11.6 Traffic Redirect Setup. 
Select No (default) if you do not want to configure this feature.
Once you have configured this menu, press [ENTER] at the message “Press ENTER to Confirm...” to 
save your configuration, or press [ESC] at any time to cancel.
Table 74   Menu 11.1 Remote Node Profile for Ethernet Encapsulation
FIELDDESCRIPTION
                       Menu 11.1 - Remote Node Profile
   Rem Node Name= MyISP                 Route= IP
   Active= Yes
   Encapsulation= PPPoE                 Edit IP= No
   Service Type= Standard               Telco Option:
   Service Name=                          Allocated Budget(min)= 0
   Outgoing:                              Period(hr)= 0
     My Login=                            Schedules=
     My Password= ********                Nailed-Up Connection= No
     Retype to Confirm= ********
     Authen= CHAP/PAP
                                        Session Options:
                                          Edit Filter Sets= No
                                          Idle Timeout(sec)= 100
                                        Edit Traffic Redirect= No
                  Press ENTER to Confirm or ESC to Cancel: 
						

							Prestige 334 User’s Guide
227 Chapter 23 Remote Node Configuration
23.2.2.2  Nailed-Up Connection
A nailed-up connection is a dial-up line where the connection is always up regardless of traffic 
demand. The Prestige does two things when you specify a nailed-up connection. The first is 
that idle timeout is disabled. The second is that the Prestige will try to bring up the connection 
when turned on and whenever the connection is down. A nailed-up connection can be very 
expensive for obvious reasons. 
Do not specify a nailed-up connection unless your telephone company offers flat-rate service 
or you need a constant connection and the cost is of no concern.
The following table describes the fields not already described in Table 74 .
23.2.3  PPTP Encapsulation
If you change the Encapsulation to PPTP in menu 11.1, then you will see the next screen. 
Please see the appendix for information on PPTP.
Table 75   Fields in Menu 11.1 (PPPoE Encapsulation Specific)
FIELDDESCRIPTION
Service NameIf you are using PPPoE encapsulation, then type the name of your PPPoE service 
here. Only valid with PPPoE encapsulation.
AuthenThis field sets the authentication protocol used for outgoing calls.
Options for this field are:
•CHAP/PA P - Your Prestige will accept either CHAP or PA P when requested by 
this remote node.
•CHAP- accept CHAP only. 
•PA P- accept PAP only. 
Telco Option
Allocated BudgetThe field sets a ceiling for outgoing call time for this remote node. The default for 
this field is 0 meaning no budget control. 
Period(hr)This field is the time period that the budget should be reset. For example, if we are 
allowed to call this remote node for a maximum of 10 minutes every hour, then the 
Allocated Budget is (10 minutes) and the Period(hr) is 1 (hour).
SchedulesYou can apply up to four schedule sets here. For more details please refer to the 
Call Schedule Setup chapter.
Nailed-Up 
ConnectionThis field specifies if you want to make the connection to this remote node a nailed-
up connection. More details are given earlier in this section.
Session Options
Idle TimeoutType the length of idle time (when there is no traffic from the Prestige to the remote 
node) in seconds that can elapse before the Prestige automatically disconnects the 
PPPoE connection. This option only applies when the Prestige initiates the call. 
						

							Prestige 334 User’s Guide
Chapter 23 Remote Node Configuration 228
Figure 104   Menu 11.1 Remote Node Profile for PPTP Encapsulation
The next table shows how to configure fields in menu 11.1 not previously discussed.
23.3  Edit IP
Move the cursor to the Edit IP field in menu 11.1, then press [SPACE BAR] to select Ye s. 
Press [ENTER]
 to open Menu 11.3 - Remote Node Network Layer Options. 
                     Menu 11.1 - Remote Node Profile
   Rem Node Name= MyISP                 Route= IP
   Active= Yes
                                        Apply Alias= None
   Encapsulation= PPTP                  Edit IP= No
   Service Type= Standard               Telco Option:
   Service Name= N/A                      Allocated Budget(min)= 0
   Outgoing:                              Period(hr)= 0
     My Login=                            Schedules=
     My Password= ********                Nailed-Up Connection= No
     Retype to Confirm= ********
     Authen= CHAP/PAP
   PPTP:                                Session Options:
     My IP Addr=                          Edit Filter Sets= No
     My IP Mask=                          Idle Timeout(sec)= 100
     Server IP Addr=
     Connection ID/Name=                Edit Traffic Redirect= No
                Press ENTER to Confirm or ESC to Cancel:
Table 76   Menu 11.1 Remote Node Profile for PPTP Encapsulation
FIELDDESCRIPTION
EncapsulationPress [SPACE BAR] and then [ENTER] to select PPTP. You must also go to menu 
11.3 to check the IP Address setting once you have selected the encapsulation 
method. 
My IP AddrEnter the IP address of the WAN Ethernet port. 
My IP MaskEnter the subnet mask of the WAN Ethernet port. 
Server IP AddrEnter the IP address of the ANT modem. 
Connection ID/
NameEnter the connection ID or connection name in the ANT. It must follow the “c:id” and 
“n:name” format.
This field is optional and depends on the requirements of your DSL modem. 
						

							Prestige 334 User’s Guide
229 Chapter 23 Remote Node Configuration
Figure 105   Menu 11.3 Remote Node Network Layer Options for Ethernet Encapsulation
This menu displays the My WAN Addr field for PPPoE and PPTP encapsulations and 
Gateway IP Addr field for Ethernet encapsulation.  The following table describes the fields 
in this menu.
 Menu 11.3 - Remote Node Network Layer Options
             IP Address Assignment= Dynamic
             IP Address= N/A
             IP Subnet Mask= N/A
             Gateway IP Addr= N/A
             Network Address Translation= SUA Only
             Metric= 1
             Private= N/A
             RIP Direction= None
               Version= N/A
             Multicast= None
  Enter here to CONFIRM or ESC to CANCEL:
Table 77   Remote Node Network Layer Options
FIELDDESCRIPTION
IP Address 
AssignmentIf your ISP did not assign you an explicit IP address, press [SPACE BAR] and then 
[ENTER] to select Dynamic; otherwise select Static and enter the IP address & 
subnet mask in the following fields.
(Rem) IP 
AddressIf you have a static IP Assignment, enter the IP address assigned to you by your ISP.
(Rem) IP 
Subnet MaskIf you have a static IP Assignment, enter the subnet mask assigned to you.
Gateway IP 
AddrThis field is applicable to Ethernet encapsulation only. Enter the gateway IP address 
assigned to you if you are using a static IP address.
My WAN AddrThis field is applicable to PPPoE and PPTP encapsulations only. Some 
implementations, especially the UNIX derivatives, require the WAN link to have a 
separate IP network number from the LAN and each end must have a unique 
address within the WAN network number. If this is the case, enter the IP address 
assigned to the WAN port of your Prestige.
Note that this is the address assigned to your local Prestige, not the remote router.
Network 
Address 
TranslationNetwork Address Translation (NAT) allows the translation of an Internet protocol 
address used within one network (for example a private IP address used in a local 
network) to a different IP address known within another network (for example a public 
IP address used on the Internet). 
Choose None to disable NAT.
Choose SUA Only if you have a single public IP address. SUA (Single User Account) 
is a subset of NAT that supports two types of mapping: Many-to-One and Server. 
Choose Full Feature if you have multiple public IP addresses. Full Feature mapping 
types include: One-to-One, Many-to-One ( S U A / PAT ) ,  Many-to-Many Overload, 
Many- One-to-One and Server. When you select Full Feature you must configure at 
least one address mapping set! 
See the NAT chapter for a full discussion on this feature.