ZyXEL Router Prestige 334 User Manual

							Prestige 334 User’s Guide
Chapter 23 Remote Node Configuration 230
23.4  Remote Node Filter
Move the cursor to the field Edit Filter Sets in menu 11.1, and then press [SPACE BAR] to 
set the value to Ye s. Press [ENTER] to open Menu 11.5 - Remote Node Filter. 
Use menu 11.5 to specify the filter set(s) to apply to the incoming and outgoing traffic between 
this remote node and the Prestige to prevent certain packets from triggering calls. You can 
specify up to 4 filter sets separated by commas, for example, 1, 5, 9, 12, in each filter field. 
Note that spaces are accepted in this field. For more information on defining the filters, please 
refer to the Filters chapter. For PPPoE or PPTP encapsulation, you have the additional option 
of specifying remote node call filter sets.
MetricEnter a number from 1 to 15 to set this route’s priority among the Prestige’s routes 
(see the Metric section in the WAN and Dial Backup Setup chapter) The smaller the 
number, the higher priority the route has.
PrivateThis field is valid only for PPTP/PPPoE encapsulation. This parameter determines if 
the Prestige will include the route to this remote node in its RIP broadcasts. If set to 
Ye s, this route is kept private and not included in RIP broadcast. If No, the route to 
this remote node will be propagated to other hosts through RIP broadcasts.
RIP DirectionPress [SPACE BAR] and then [ENTER] to select the RIP direction from Both/ None/
In Only/Out Only. See the LAN Setup chapter for more information on RIP. The 
default for RIP on the WAN side is None. It is recommended that you do not change 
this setting.
Ve r s i o nPress [SPACE BAR] and then [ENTER] to select the RIP version from RIP-1/RIP-2B/
RIP-2M or None.
MulticastIGMP (Internet Group Multicast Protocol) is a network-layer protocol used to 
establish membership in a Multicast group. The Prestige supports both IGMP version 
1 (IGMP-v1) and version 2 (IGMP-v2). Press [SPACE BAR] to enable IP Multicasting 
or select None to disable it. See the LAN Setup chapter for more information on this 
feature.
Once you have completed filling in Menu 11.3 Remote Node Network Layer Options, press [ENTER] 
at the message “Press ENTER to Confirm...” to save your configuration and return to menu 11, or press 
[ESC] at any time to cancel.
Table 77   Remote Node Network Layer Options
FIELDDESCRIPTION 
						

							Prestige 334 User’s Guide
231 Chapter 23 Remote Node Configuration
Figure 106   Menu 11.5: Remote Node Filter (Ethernet Encapsulation)
Figure 107   Menu 11.5: Remote Node Filter (PPPoE or PPTP Encapsulation)
23.4.1  Traffic Redirect Setup
Configure parameters that determine when the Prestige will forward WAN traffic to the 
backup gateway using Menu 11.6 — Traffic Redirect Setup. 
Menu 11.5 - Remote Node Filter
       Input Filter Sets:
       protocol filters=
        device filters=
       Output Filter Sets:
         protocol filters=
         device filters=
Enter here to CONFIRM or ESC to CANCEL:
Menu 11.5 - Remote Node Filter
     Input Filter Sets:
       protocol filters=
       device filters=
     Output Filter Sets:
       protocol filters=
       device filters=
     Call Filter Sets:
       protocol filters=
       device filters=
Enter here to CONFIRM or ESC to CANCEL: 
						

							Prestige 334 User’s Guide
Chapter 23 Remote Node Configuration 232
Figure 108    Menu 11.6: Traffic Redirect Setup
The following table describes the fields in this screen.
         
                     Menu 11.6 - Traffic Redirect Setup
               Active= Yes
               Configuration:
                 Backup Gateway IP Address= 0.0.0.0
                 Metric= 15
                 Check WAN IP Address= 0.0.0.0
                   Fail Tolerance= 2
                   Period(sec)= 5
                   Timeout(sec)= 3
                Press ENTER to Confirm or ESC to Cancel:
Table 78   Menu 11.6: Traffic Redirect Setup
FIELDDESCRIPTION
ActivePress [SPACE BAR] and select Ye s (to enable) or No (to disable) traffic redirect 
setup. The default is No.
Configuration:
Backup 
Gateway IP 
AddressEnter the IP address of your backup gateway in dotted decimal notation.
The Prestige automatically forwards traffic to this IP address if the Prestige’s Internet 
connection terminates. 
MetricEnter a number from 1 to 15 to set this route’s priority among the Prestige’s routes 
(see the Metric section in the WAN and Dial Backup Setup chapter) The smaller the 
number, the higher priority the route has.
Check WAN IP 
AddressEnter the IP address of a reliable nearby computer (for example, your ISP’s DNS 
server address) to test your Prestige’s WAN accessibility. 
The Prestige uses the default gateway IP address if you do not enter an IP address 
here.
If you are using PPTP or PPPoE Encapsulation, enter “0.0.0.0” to configure the 
Prestige to check the PVC (Permanent Virtual Circuit) or PPTP tunnel. 
Fail ToleranceEnter the number of times your Prestige may attempt and fail to connect to the 
Internet before traffic is forwarded to the backup gateway. Two to five is usually a 
good number.
Period (sec)Enter the time interval (in seconds) between WAN connection checks. Five to 60 is 
usually a good number.
Timeout (sec)Enter the number of seconds the Prestige waits for a ping response from the IP 
Address in the Check WAN IP Address field before it times out. The number in this 
field should be less than the number in the Period field. Three to 50 is usually a good 
number.
The WAN connection is considered “down” after the Prestige times out the number of 
times specified in the Fail To l e r a n c e field. 
When you have completed this menu, press [ENTER] at the prompt “Press [ENTER] to confirm or 
[ESC] to cancel” to save your configuration or press [ESC] to cancel and go back to the previous screen 
						

							Prestige 334 User’s Guide
233 Chapter 23 Remote Node Configuration 
						

							Prestige 334 User’s Guide
Chapter 24 Static Route Setup 234
CHAPTER24
Static Route Setup
This chapter shows how to setup IP static routes.
24.1  IP Static Route Setup
To configure an IP static route, use Menu 12 – Static Routing Setup (shown next).
Figure 109   Menu 12 IP Static Route Setup 
Now, type the route number of a static route you want to configure.
 Menu 12 - IP Static Route Setup
        1. ________
        2. ________
        3. ________
        4. ________
        5. ________
        6. ________
        7. ________
        8. ________
Enter selection number: 
						

							Prestige 334 User’s Guide
235 Chapter 24 Static Route Setup
Figure 110   Menu12.1 Edit IP Static Route
The following table describes the fields for Menu 12.1 – Edit IP Static Route Setup.
Menu 12.1 - Edit IP Static Route
         Route #: 1
         Route Name= ?
         Active= No
         Destination IP Address= ?
         IP Subnet Mask= ?
         Gateway IP Address= ?
         Metric= 2
         Private= No
Press ENTER to Confirm or ESC to Cancel:
Table 79   Menu12.1 Edit IP Static Route
FIELDDESCRIPTION
Route #This is the index number of the static route that you chose in menu 12.1.
Route NameType a descriptive name for this route. This is for identification purpose only.
ActiveThis field allows you to activate/deactivate this static route.
Destination IP AddressThis parameter specifies the IP network address of the final destination. 
Routing is always based on network number. If you need to specify a route to 
a single host, use a subnet mask of 255.255.255.255 in the subnet mask field 
to force the network number to be identical to the host ID.
IP Subnet MaskType the subnet mask for this destination. Follow the discussion on IP 
Subnet Mask in this manual.
Gateway IP AddressType the IP address of the gateway. The gateway is an immediate neighbor 
of your Prestige that will forward the packet to the destination. On the LAN, 
the gateway must be a router on the same segment as your Prestige; over 
WAN, the gateway must be the IP address of one of the remote nodes.
Metric Metric represents the “cost” of transmission for routing purposes. IP routing 
uses hop count as the measurement of cost, with a minimum of 1 for directly 
connected networks. Type a number that approximates the cost for this link. 
The number need not be precise, but it must be between 1 and 15. In 
practice, 2 or 3 is usually a good number.
PrivateThis parameter determines if the Prestige will include the route to this remote 
node in its RIP broadcasts. If set to Ye s, this route is kept private and is not 
included in RIP broadcasts. If No, the route to this remote node will be 
propagated to other hosts through RIP broadcasts.
When you have completed this menu, press [ENTER] at the prompt “Press ENTER to confirm or ESC 
to cancel” to save your configuration or press [ESC] to cancel and go back to the previous screen. 
						

							Prestige 334 User’s Guide
Chapter 25 Network Address Translation (NAT) 236
CHAPTER25
Network Address Translation
(NAT)
This chapter discusses how to configure NAT on the Prestige.
25.1  Using NAT
25.1.1  SUA (Single User Account) Versus NAT
SUA (Single User Account) is a ZyNOS implementation of a subset of NAT that supports two 
types of mapping, Many-to-One and Server. See section Address Mapping Sets for a 
detailed description of the NAT set for SUA. The Prestige also supports Full Feature NAT to 
map multiple global IP addresses to multiple private LAN IP addresses of clients or servers 
using mapping types.
25.2  Applying NAT
You apply NAT via menus 4 or 11.3 as displayed next. The next figure shows you how to 
apply NAT for Internet access in menu 4. Enter 4 from the main menu to go to Menu 4 - 
Internet Access Setup.
Note: You must create a firewall rule in addition to setting up 
SUA/NAT, to allow traffic from the WAN to be forwarded 
through the Prestige
Note: Choose SUA Only if you have just one public WAN IP 
address for your Prestige.
Note: Choose Full Feature if you have multiple public WAN IP 
addresses for your Prestige. 
						

							Prestige 334 User’s Guide
237 Chapter 25 Network Address Translation (NAT)
Figure 111   Menu 4 Applying NAT for Internet Access
The following figure shows how you apply NAT to the remote node in menu 11.1. 
1Enter 11 from the main menu.
2When menu 11 appears, as shown in the following figure, type the number of the remote 
node that you want to configure.
3Move the cursor to the Edit IP field, press [SPACE BAR] to select Ye s and then press 
[ENTER] to bring up Menu 11.3 - Remote Node Network Layer Options.
                           Menu 4 - Internet Access Setup
               ISPs Name= MyISP
               Encapsulation= Ethernet
                 Service Type= Standard
                 My Login= N/A
                 My Password= N/A
                 Retype to Confirm= N/A
                 Login Server= N/A
                 Relogin Every (min)=  N/A
               IP Address Assignment= Dynamic
                 IP Address= N/A
                 IP Subnet Mask= N/A
                 Gateway IP Address= N/A
               Network Address Translation= SUA Only
                Press ENTER to Confirm or ESC to Cancel: 
						

							Prestige 334 User’s Guide
Chapter 25 Network Address Translation (NAT) 238
Figure 112   Menu 11.3 Applying NAT to the Remote Node
The following table describes the options for Network Address Translation.
25.3  NAT Setup
Use the address mapping sets menus and submenus to create the mapping table used to assign 
global addresses to computers on the LAN. Set 255 is used for SUA. When you select Full 
Feature in menu 4 or 11.3, the SMT will use Set 1. When you select SUA Only, the SMT 
will use the pre-configured Set 255 (read only).
The server set is a list of LAN servers mapped to external ports. To use this set, a server rule 
must be set up inside the NAT address mapping set. Please see the section on port forwarding 
in the chapter on NAT web configurator screens for further information on these menus. To 
configure NAT, enter 15 from the main menu to bring up the following screen. 
               Menu 11.3 - Remote Node Network Layer Options
            IP Address Assignment= Dynamic
            IP Address= N/A
            IP Subnet Mask= N/A
            Gateway IP Addr= N/A
            Network Address Translation= SUA Only
            Metric= 1
            Private= N/A
            RIP Direction= None
              Version= N/A
            Multicast= None
                 Enter here to CONFIRM or ESC to CANCEL:
Table 80   Applying NAT in Menus 4 & 11.3
FIELDDESCRIPTION
NATPress [SPACE BAR] and then [ENTER] to select Full Feature if you have multiple 
public WAN IP addresses for your Prestige.  The SMT uses the address mapping set 
that you configure and enter in the Address Mapping Set field (menu 15.1 - see 
section ).
Select None to disable NAT.
When you select SUA Only, the SMT uses Address Mapping Set 255 (menu 15.1 - see 
section ). Choose SUA Only if you have just one public WAN IP address for your 
Prestige. 
						

							Prestige 334 User’s Guide
239 Chapter 25 Network Address Translation (NAT)
Figure 113   Menu 15 NAT Setup
25.3.1  Address Mapping Sets 
Enter 1 to bring up Menu 15.1 — Address Mapping Sets.
Figure 114   Menu 15.1 Address Mapping Sets
Enter 255 to display the next screen (see  the SUA (Single User Account) Versus NAT section ). 
The fields in this menu cannot be changed.
Menu 15 - NAT Setup
           1. Address Mapping Sets
           2. Port Forwarding Setup
           3. Trigger Port Setup
Enter Menu Selection Number:
     Menu 15.1 - Address Mapping Sets
             1. NAT_SET
           255. SUA (read only)
     Enter Menu Selection Number: