Summary of the content on the page No. 1
P-2302HW SERIES
VoIP Station Gateway
(With Lifeline/ DECT/ USB)
Support Notes
Version 3.60
Aug. 2006
Summary of the content on the page No. 2
Prestige 2302 Support Notes INDEX Application Notes.........................................................................................................5 General Application Notes.....................................................................................5 Internet Connection........................................................................................5 Setup the Prestige as a DHCP Relay............................................................10 Configure
Summary of the content on the page No. 3
Prestige 2302 Support Notes What is the difference between NAT and SUA?..........................................83 How many network users does SUA/NAT support?....................................83 What are Device and Protocol filters? .........................................................84 Why can't I configure device or protocol filters? ........................................84 Product FAQ .......................................................................................
Summary of the content on the page No. 4
Prestige 2302 Support Notes Does the Prestige support DDNS wildcard?................................................93 Can VPN tunnels still work on a Prestige using SUA? ...............................93 How do I set up my Prestige to route IPsec packets over SUA? .................93 VoIP FAQ .............................................................................................................93 What is Voice over IP?............................................................
Summary of the content on the page No. 5
Prestige 2302 Support Notes Application Notes General Application Notes Internet Connection The following figure shows a typical Internet access application using the Prestige. Before accessing the Internet in an office environment, you must configure the Prestige as outlined below. • Before you begin • Setting up Your Windows Computer • Setting up the Prestige router • Troubleshooting • Before you begin The following lists the default settings on the Prestige. 1. IP
Summary of the content on the page No. 6
Prestige 2302 Support Notes • If you have only one computer, connect the computer to the LAN port on the Prestige using a crossover Ethernet cable (red). • If you have more than one computer, you must use a hub or switch to connect the computers to the LAN port on the Prestige using a straight-though Ethernet cable. 2. TCP/IP Installation You must first install TCP/IP software on each computer before you can use it for Internet access. If you have already installed TCP/IP, go to th
Summary of the content on the page No. 7
Prestige 2302 Support Notes If you have a Single User Account (SUA), follow the procedure to configure the Prestige. You can use a web browser (such as IE) to access the embedded web server on the Prestige for device management. Before you can log into the web management interface, make sure that there is no one logging into the Prestige through Telnet or the console port. 1. Accessing the Prestige Web Management Interface Open your web browser (such as IE) and enter the LAN IP add
Summary of the content on the page No. 8
Prestige 2302 Support Notes 3. Use the WIZARD SETUP screens to configure Internet access settings on the Prestige. 8 All contents copyright (c) 2005 ZyXEL Communications Corporation.
Summary of the content on the page No. 9
Prestige 2302 Support Notes The Internet access configuration screen varies depending on the Internet connection type you select. The following figure shows an example screen for PPPoE connection type. In the next wizard screen, select Get dynamically from your ISP if the ISP assigns you an IP address dynamically, otherwise select Use Fixed IP address and enter the static IP address given by ISP in the MY 9 All contents copyright (c) 2005 ZyXEL Communications Corporation.
Summary of the content on the page No. 10
Prestige 2302 Support Notes WAN IP Address field. Setup the Prestige as a DHCP Relay • What is DHCP Relay? DHCP (Dynamic Host Configuration Protocol) allows a network device to obtain IP settings from a server. You can configure the P-2602 as a DHCP server or DHCP relay. 10 All contents copyright (c) 2005 ZyXEL Communications Corporation.
Summary of the content on the page No. 11
Prestige 2302 Support Notes When the P-2602 is configured as a DHCP server, it assigns IP address to clients on the LAN. When the P-2602 acts as a DHCP relay, it forwards client DHCP requests to the DHCP server and forwards the responds from the DHCP server to the DHCP clients. The following figure shows an example. • Setup the Prestige as a DHCP Client 1. In SMT menu 3.2, select Relay in the DHCP field and enter the IP address of the DHCP server in the DHCP Server Address field.
Summary of the content on the page No. 12
Prestige 2302 Support Notes Configure an Internal Server Behind the Prestige • Introduction SUA makes your LAN appear as a single machine to the outside world. However, you can make a server (such as a web server, FTP server or mail server) behind the ZyXEL device assessable/visible to the outside world. A server behind the ZyXEL device cannot be set to be a DHCP client. That is, the server must use a fixed IP address so outside users can access the server using the static
Summary of the content on the page No. 13
Prestige 2302 Support Notes • The following figure shows a configuration example to allow public access to an internal Web server. • The following table lists some common service port numbers. Service Port Number FTP 21 Telnet 23 SMTP 25 DNS (Domain Name Server) 53 www-http (Web) 80 13 All contents copyright (c) 2005 ZyXEL Communications Corporation.
Summary of the content on the page No. 14
Prestige 2302 Support Notes Configure a PPTP server Behind SUA • Introduction PPTP is a tunneling protocol defined by the PPTP forum that allows PPP packets to be encapsulated within Internet Protocol (IP) packets and forwarded over any IP network, including the Internet itself. In order to run the Windows 9x PPTP client, you must be able to establish an IP connection with a tunnel server such as the Windows NT Server 4.0 Remote Access Server. Windows Dial-Up Networking uses th
Summary of the content on the page No. 15
Prestige 2302 Support Notes The PPTP is already supported in Windows NT and Windows 98. For Windows 95, a software upgrade with Dial-Up Networking 1.2 is required. • Configuration This application note explains how to establish a PPTP connection to a remote private network on the Prestige with SUA enabled. In ZyNOS, all PPTP packets are forwarded to the internal PPTP Server (Windows NT server) behind SUA. . You must specify the PPTP port number in SMT menu 15 for the Prestige to
Summary of the content on the page No. 16
Prestige 2302 Support Notes In Dial-up Networking, create a secure VPN connection through the Prestige (using the WAN IP address) and enter the correct user name and password to log into the Windows NT RAS server. Set the Prestige that connects to the ISP as the Internet gateway. o Prestige Setup • Before establishing a VPN connection from the PPTP client (Windows 9x) to the PPTP server (Windows NT server), you must first connect the Prestige to the ISP for Internet access. •
Summary of the content on the page No. 17
Prestige 2302 Support Notes Once the connection is up, you can establish a secure VPN connection from the PPTP client to the ISP. The default gateway is then used to route the traffic between the PPTP client and the server. However, before you can establish a secure VPN connection from the PPTP client to the PPTP server, you need to know the WAN IP address of the Prestige with the SUA feature enabled. Depending on your Internet account type and ISP, the Prestige WAN IP address is ei
Summary of the content on the page No. 18
Prestige 2302 Support Notes • Filter Structure The Prestige allows you to configure up to twelve filter sets with six rules in each set (for a total of 72 filter rules on the Prestige). You can apply up to four filter sets on a port to block packets that match the rules. Since you can configure up to six filter rules in a set, you can apply up to 24 filter rules on a port. The following figure shows the logic flow of a filter rule on the Prestige. 18 All contents copyright (c)
Summary of the content on the page No. 19
Prestige 2302 Support Notes • Filter Types and SUA You can configure two filter rule categories: device and protocol. The Generic filter rules belong to the device category; they act on the raw data from/to LAN and WAN. The IP and IPX filter rules belong to the protocol category; they act on the IP and IPX packets. TCP/IP filters are applied before SUA address translation on outgoing traffic to the WAN and after SUA address translation on incoming traffic from the WAN. This allows t
Summary of the content on the page No. 20
Prestige 2302 Support Notes Generic and TCP/IP (and IPX) filter rules are in different filter sets. You can only activate one type of filter rules on the Prestige. The SMT automatically detects and prevents you from activating two filter types at the same time. If you configure a Generic and a TCP/IP filter rule (as shown in the following figures) and try to activate them at the same time, the 'Protocol and device filter rules cannot be active together' error message displays. Me
