zhone router znid admin

8/10/2019 Zhone Router ZNID Admin

1/266

zNID Administration and Configuration

Guide

For software version 1.1.0

January 2008

Document Part Number: 830-01703-04


2/266

Zhone Technologies

@Zhone Way

7001 Oakport Street

Oakland, CA 94621

USA

510.777.7000

www.zhone.com

[email protected]

COPYRIGHT 20002008 Zhone Technologies, Inc. All rights reserved.

This publication is protected by copyright law. No part of this publication may

be copied, distributed, displayed, modified, transmitted, stored in a retrieval

system, or translated without express written permission from Zhone

Technologies, Inc.

Acculink, ADSL/R, Bitstorm, Comsphere, DSL the Easy Way, ETC,Etherloop, FrameSaver, GranDSLAM, GrandVIEW, Hotwire, the Hotwire

logo, iMarc, Jetstream, MVL, NextEDGE, Net to Net Technologies,

OpenLane, Paradyne, the Paradyne logo, Performance Wizard, ReachDSL,

StormPort, and TruePut are registered trademarks of Zhone Technologies, Inc.

BAN, Connect to Success, GigMux, Hotwire Connected, JetFusion,

JetVision, MALC, MicroBurst, PacketSurfer, Quick Channel, Raptor, Reverse

Gateway, SLMS, Spectrum Manager, StormTracker, Z-Edge, Zhone, ZMS,

and the Zhone logo are trademarks of Zhone Technologies, Inc.

All other products names or service marks mentioned herein are the

trademarks, trade names and service names of their respective owners.

Zhone Technologies makes no representation or warranties with respect to the

contents hereof and specifically disclaims any implied warranties of

merchantability, noninfringement, or fitness for a particular purpose. Further,

Zhone Technologies reserves the right to revise this publication and to make

changes from time to time in the contents hereof without obligation of Zhone

Technologies to notify any person of such revision or changes.
http://www.zhone.com/mailto:[email protected]:[email protected]://www.zhone.com/


3/266

zNID Administration and Configuration Guide 3

CONTENTS

About This Guide 5Style and notation conventions...................................................................................5

Technical Support.........................................................................................................8Service Requirements...................................................................................................8

Chapter 4 Getting Started ........................................................................................................9

Chapter 5 Web-based Management ...................................................................................13

Left Sidebar.............................................................................................................15

Chapter 6 Network Connections .........................................................................................17

The Connection Wizard.............................................................................................19Ethernet Gateway....................................................................................................19Network Types........................................................................................................21

Point-to-Point Protocol over Ethernet (PPPoE)......................................................42

Ethernet Connection................................................................................................47Dynamic Host Configuration Protocol (DHCP).....................................................48WAN-LAN Bridge..................................................................................................50

Virtual LAN Interface (VLAN) ................................................................................57

Chapter 7 Secur ity .....................................................................................................................71

Access Control ............................................................................................................75

DMZ Host ....................................................................................................................84

Port Triggering ............................................................................................................85

Network Address Translation (NAT) ......................................................................92

Configuration...............................................................................................................92Using NAT/NAPT.................................................................................................. 96Defining NAT/NAPT Rules ...................................................................................98Advanced Filtering................................................................................................104Security Log..........................................................................................................108Applying Corporate-Grade Security.....................................................................113


4/266

4 zNID Administration and Configuation Guide

Chapter 8 Voice Over IP ........................................................................................................117

Physical Setup ...........................................................................................................117

IP Telephony .............................................................................................................117Dialing Parameters................................................................................................118Signaling Protocol.................................................................................................118Quality of Service .................................................................................................119Phone Features......................................................................................................123Codecs...................................................................................................................125RTCP.....................................................................................................................128

Chapter 9 Quality of Service ...............................................................................................131

General .......................................................................................................................133

Chapter 10 Advanced ...............................................................................................................159

GPON zNID ONU Information ..............................................................................164

Configuration File.....................................................................................................170Customer Factory default......................................................................................170Universal Plug and Play........................................................................................180Firmware Upgrade ................................................................................................185Firmware Restore..................................................................................................203Fast Path ...............................................................................................................204Secure Socket Layer VPN ....................................................................................206

Chapter 11 System Monitoring .............................................................................................249

Monitoring Connections..........................................................................................249

Traffic Statistics ........................................................................................................249

System Log ................................................................................................................250

System Up Time .......................................................................................................251

Chapter 12 zNID TR-069 Commands .................................................................................253

Choosing TR-069 Interface.....................................................................................253

TR-069 Commands...................................................................................................254

SNMP Management .................................................................................................255

Chapter 13 Glossary .................................................................................................................257


5/266

zNID Administration and Configuation Guide 5

ABOUTTHISGUIDE

This guide is intended for use by installation technicians, system

administrators, and network administrators. It explains how to configure the

zNID.

Style and notation conventionsThe following conventions are used in this document to alert users to

information that is instructional, warns of potential damage to system

equipment or data, and warns of potential injury or death. Carefully read and

follow the instructions included in this document.

Caution: A caution alerts users to conditions or actions that could

damage equipment or data.

Note: A note provides important supplemental or amplified

information.

Tip: A tip provides additional information that enables users to more

readily complete their tasks.

WARNING! A warning alerts users to conditions or actions that

could lead to injury or death.

WARNING! A warning with this icon alerts users to conditions or

actions that could lead to injury caused by a laser.

Related documentation

Refer to the following publication for additional information:

zNID Hardware Installation Guideexplains how to install the zNID.

zNID Quick Installation Guideprovides a quick overview of the zNID

installation


6/266


Refer to the release notes for software installation information and for

changes in features and functionality of the product (if any).

Acronyms

The following acronyms are related to Zhone products and may appearthroughout this manual:

Table 1: Acronyms and their descr iptions

Acronym Descr iption

ADSL Asymmetrical digital subscriber line

ARP Address resolution protocol

ATM Asynchronous Transfer Mode

BAN Broadband Access Node

CID Channel identifier

DSL Digital subscriber line

EFM Ethernet in the First Mile

SHDSL Symmetric high-bit-rate digital subscriber line

IAD Integrated access device

MALC Multi-access line concentrator

MIB Management information bases

MTAC Metallic Test Access Card

MTAC-FC Metallic Test Access Card with fan controller

PBX Private branch exchange

POTS Plain old telephone service

RIP Routing Information Protocol

SDSL Symmetric digital subscriber line

SHDSL Symmetric high-bit-rate digital subscriber line

SLMS Single Line Multi-Service

SNMP Simple Network Management Protocol

TFTP Trivial File Transfer Protocol

VCI Virtual channel identifier

VCL Virtual channel link


7/266

Contacting Global Service and Support



Contact Global Service and Support (GSS) if you have any questions about

this or other Zhone products. Before contacting GSS, make sure you have the

following information:

Zhone product you are using

System configuration

Software version running on the system

Description of the issue

Technical support

If you require assistance with the installation or operation of your product, or

if you want to return a product for repair under warranty, contact GSS. The

contact information is as follows:

If you purchased the product from an authorized dealer, distributor, Value

Added Reseller (VAR), or third party, contact that supplier for technical

assistance and warranty support.

Service requirements

If the product malfunctions, all repairs must be performed by the

manufacturer or a Zhone-authorized agent. It is the responsibility of users

requiring service to report the need for service to GSS.

VPI Virtual path identifier

ZMS Zhone Management System

Table 1: Acronyms and their descr iptions

Acronym Descr iption

E-mail [email protected]

Telephone (North America) 877-ZHONE20

Telephone (International) 510-777-7133

Internet www.zhone.com/support
mailto:[email protected]://www.zhone.com/supporthttp://www.zhone.com/supportmailto:[email protected]


8/266



Contact Global Service and Support (GSS) if you have any questions about

this or other Zhone products. Before contacting GSS, make sure you have the

following information:

Zhone product you are using

System configuration

Software version running on the system

Description of the issue

Technical Support

If you require assistance with the installation or operation of your product, or

if you want to return a product for repair under warranty, contact GSS. The

contact information is as follows:

If you purchased the product from an authorized dealer, distributor, Value

Added Reseller (VAR), or third party, contact that supplier for technicalassistance and warranty support.

Service RequirementsIf the product malfunctions, all repairs must be performed by the

manufacturer or a Zhone-authorized agent. It is the responsibility of users

requiring service to report the need for service to GSS.

E-mail [email protected]

Telephone (North America) 877-ZHONE20

Telephone (International) 510-777-7133

Internet www.zhone.com/support
mailto:[email protected]://www.zhone.com/supporthttp://www.zhone.com/supportmailto:[email protected]


9/266


GETTINGSTARTED

Connecting your computer or home network to the gateway is a simple

procedure, varying slightly depending on your operating system.

The setup is designed to seamlessly integrate the zNID with your computer or

home network. Moreover, zero-configuration is attained when taking

advantage of Universal Plug-and-Play support in Windows XP. The Windows

default network settings dictate that in most cases the setup procedure

described below will be unnecessary. For example, the default DHCP setting

in Windows 2000 is client, requiring no further modification.However, it is advised to follow the setup procedure described below to verify

that all communication parameters are valid and that the physical cable

connections are correct.

zNID Setup

The basic setup procedure consists of three consecutive configuration stages:

1. Setting up LAN and WAN connections

2. PC network configuration

3. zNID configuration

Stage 1 - Setting up LAN and WAN Connections

LAN Connection

Your connection to the Internet is determined by the type of gateway that you

have. Please consult the zNID Installation Guide for details on how to connect

copper wires or fiber to the zNIDs WAN interface.

WAN ConnectionYour connection to the Internet is determined by the type of gateway that you

have. If your gateway has a built-in DSL modem, connect its DSL socket to

the wall socket using a telephone cable. Consult your modem documentation

regarding specific cables necessary for connection. Mention GPON and AE.


10/266

Getting Started


Stage 2 - PC Network Configuration

Each network interface on the PC should either be configured with a statically

defined IP address and DNS address, or should be instructed to automatically

obtain an IP address using the Network DHCP server. The zNID provides a

DHCP server on its LAN and it is recommended to configure your LAN to

obtain its IP and DNS server IPs automatically.

This configuration principle is identical but performed differently on each

operating system.

The figure below displays the TCP/IP Properties dialog box as it appears in

Windows XP. Following are TCP/IP

Figure 1: IP and DNS Configuration

Windows XP

1. Access Network Connections from the Control Panel.

2. Right-click the Ethernet connection icon, and select Properties.

3. Under the General tab, select the Internet Protocol (TCP/IP) component,

and press the Properties button.

4. The Internet Protocol (TCP/IP) properties window will be displayed.

(a) Select the Obtain an IP address automatically radio button.


11/266

zNID Setup


(b) Select the Obtain DNS server address automatically radio button.

(c) Click OK to save the settings.

Windows 2000/98/Me

1. Access Network and Dialing Connections from the Control Panel.

2. Right-click the Ethernet connections icon, and select Properties to

display the connections properties.

3. Select the Internet Protocol (TCP/IP) component, and press the

Properties button.

4. The Internet Protocol (TCP/IP) properties will be displayed.

(a) Select the Obtain an IP address automatically radio button.

(b) Select the Obtain DNS server address automatically radio button.

Windows NT

1. Access Network from the Control Panel to display the network control

panel.

2. From the Protocol tab, select the Internet Protocol (TCP/IP) component,

and press the Properties button.

3. From the IP Address tab select the Obtain an IP address automatically

radio button.

4. From the DNS tab, verify that no DNS server is defined in the DNS

Service Search Order box and no suffix is defined in the Domain Suffix

Search Order box.

Linux

1. Login into the system as a super-user, by entering `su at the prompt.

2. Type ifconfig to display the network devices and allocated IPs.

3. Type pump -i , where is the network device name.

4. Type ifconfig again to view the new allocated IP address.

5. Make sure no firewall is active on device .

Addit ional Network Configuration

The zNID does not require further configuration in order to start working.

After the setup described in this chapter, you can immediately start using your

gateway to:

Share a broadband connection among multiple users (HTTP, FTP, Telnet,

NetMeeting) and between all of the computers connected to your home

network.


12/266

Getting Started


Build a home network by connecting additional PCs and network devices to

the gateway.

Control network parameters, including DHCP, DNS and WAN settings.

View network status, traffic statistics, system log and more.

Allow access from the Internet to games and other services provided by

computers in the home network.

Prohibit computers in the home network from accessing selected services on

the Internet.

Block access to specific Internet Web sites from your home network.

Advanced users can fully configure and control the zNID via the Web-based

management.

Figure 2: Security General

Adding Computers to Network

Multiple computers can be connected directly to the gateway without

requiring a hub or a switch.


13/266


WEB-BASEDMANAGEMENT

Accessing the Web-based Management

This chapter describes the zNID Web-based management (WBM) which

allows you to control various zNID system parameters, using a user-friendly

graphical interface. The Web-based management includes a connection

wizard, a graphic network map, multiple sessions, authentication data kept on

gateway, multiple user support, multilingual support, a connection diagnostics

screen and more.

To access the Web-based management:

If your computer is runn ing an operating sys tem that supports

UPnP, such Windows XP, you can easily add the computer to your

home network and access the Web-based management directly

from within.

1. Launch a Web-browser on a PC in the LAN.

2. Type the gateways IP address or name as provided with your gateway in

the address bar (Internet Explorer) or location bar (Netscape Navigator). The

default IP address is 192.168.1.1, and default name is http://zNID.home.

3. Enter your username and password to log on to the WBM. For securityreasons, you should change these settings after the initial login. The default

user name is admin, and the default password is zhone for administration

rights, and the default user name is user and the default password is

password for limited user rights. A read only user is also pre-configured

with a user name of user read and a password of password.

Your session will automatically t ime-out after a few minutes of

inactiv ity. If you try to operate the Web- based management after

the session has expired the Login screen will appear and you will

have to re- enter your user name and password before

proceeding. This feature helps to prevent unauthorized users

from accessing the web-based management and changing the

gateways settings.

Your Home Network Map

To view your network map, press the Network Map View button located at

the top of the left sidebar of the WBM screen. The Network Map screen will

appear.


14/266

Web-based Management


Figure 3: The Network Map

The network map depicts the various network elements, such as the Internet

connection, firewall, gateway, internal network interface and local network

computers and peripherals.

The following explains the meaning of different network map symbols:

Represents the Internet

Represents your Ethernet Wide Area Network

(WAN) connection. Click this icon to configure the WAN interface.

Represents the gateways Firewall. The height of the wall corresponds to

the security level currently selected: Minimum, Typical or Maximum. Click

this icon to configure security settings.

If the zNID is equipped with multiple LAN devices (other than bridges) thenthe home network will use the following icons to indicate the interface used

for connecting the PC.

Represents an Ethernet Local Area Network (LAN) connection.

Click this icon to configure network parameters for the Ethernet LAN device.


15/266

Your Home Network Map


Represents a bridge connected in the home network. Click this icon to

view the bridges underlying devices.

Represents a computer (host) connected in the home network. Each computer

connected to the network appears below the network symbol of the network

through which it is connected. Click an icon to view network information for

the corresponding computer.

The zNIDs standard network map displays devices that the zNID recognized

and granted a DHCP lease.

Left Sidebar

The Web-based management screens have been grouped into several subject

areas and may be accessed by clicking the appropriate icon in the left sidebar.

The subject areas are:

Network Map: Display the Network Map

Network Connections:Create and configure networks connections

Security:Configure the Firewall and regulate communications between the

Internet and the home network

Voice Over IP:Use the zNIDs Voice over IP to place and receive calls over

the Internet using a standard telephone set

QoS:Use the zNIDs Quality of Service to provide better service to selected

network traffic

Advanced:Control system parameters (DHCP server, DNS) and perform

administrative functions, including changing password, setting date & time

and upgrading the system

System Monitoring:View network status, traffic statistics and the system log

Logout:Log out from the zNID

Managing Tables

Tables are structures used throughout the Web-based management. They

handle user-defined entries relating to elements such as network connections,

local servers, restrictions and configurable parameters. The principles

outlined in this section apply to all tables in the Web-based management.


16/266

Web-based Management


Figure 4: Typical Table Structure

Each row defines an entry in the table. The following buttons located in the

Action column enable adding, editing, deleting and moving table entries:

Use the Add action icon to add a row to the table.

Use the Edit action icon to edit a row in the table.

Use the Remove action icon to remove a row from the table.

Use the Move Up action icon to move a row one step up in the table.

Use the Move Down action icon to move a row one step down in the

table.


17/266


NETWORKCONNECTIONS

The zNID supports various network connections, both physical and logical.

The Network Connections screen enables you to configure the various

parameters of your physical connections, the LAN and WAN, and create new

connections, using tunneling protocols over existing connections, such as PPP

and VPN. When clicking the Network Connections icon on the sidebar for

the first time, the following typical screen will appear:

Figure 5: Network Connections - Basic

Press the Advanced button to expand the screen and display all connection

entries.


18/266

Network Connections


Figure 6: Network Connections - Advanced

This chapter describes the different network connections available with the

zNID in their order of appearance in the Network Connections screen, as well

as the connection types that you can create using the Connection Wizard.

Note: Some of the connections described herein may not be

available with certain versions.

The zNIDs default network connections are:

LAN - Creating a home/SOHO network

LAN Bridge

LAN Ethernet

WAN - Internet Connection

WAN Ethernet

The logical network connections available with the zNID are:

WAN - Internet Connection

Point-to-Point Protocol over Ethernet

Ethernet Connection

Dynamic Host Configuration Protocol

Manual IP Address Configuration

Determine Protocol Type Automatically

WAN-LAN Bridge

Advanced Connections

Network Bridging


19/266

The Connection Wizard


VLAN Interface


The logical network connections can be easily created using the Connection

Wizard. This wizard is consisted of a series of Web-based managementscreens, intuitively structured to gather all the information needed to create a

logical connection.

Ethernet Gateway

In order to create a connection on an Ethernet gateway using the wizard, click

the New Connection link in the Network Connections screen. The

Connection Wizard screen will appear.

Figure 7: Connection Wizard

This screen presents you with the main connection types. Each option that you

choose will lead you to further options in a tree-like formation, adding moreinformation with each step and narrowing down the parameters towards the

desired network connection.


20/266

Network Connections


Figure 8: Advanced Connection Wizard Screen

The tree formation of this section is depicted below.


21/266



Figure 9: Advanced Connection Wizard Tree

Network Types

Every network connection in the zNID can be configured as one of three

types: WAN, LAN or DMZ. This provides high flexibility and increased

functionality.

For example, you may define that a LAN Ethernet connection on the zNID

will operate as a WAN network. This means that all hosts in this LAN will be

referred to as WAN computers, both by computers outside the zNID and by

the zNID itself. WAN and firewall rules may be applied, such as on any other

WAN network.

Another example, is that a network connection can be defined as a DMZ

(Demilitarized) network. Although the network is physically inside the zNID,

it will function as an unsecured, independent network, for which the zNID

merely acts as a router.


22/266

Network Connections


One of these three network types is defined in each connections

configuration screen, in the Network combo-box, as depicted in the

following sections.

DMZ Network

When defining a network connection as a DMZ network, you must also:

Remove the connection from under a bridge, if that is the case.

Change the connections routing mode to Route, in the Routing section

of the configuration screen.

Add a routing rule on your external gateway (which may be with your ISP)

informing of the DMZ network behind the zNID.

LAN Bridge

The LAN bridge connection is used to combine several LAN devices under

one virtual network.Please note, that when a bridge is removed, its formerly underlying devices

inherit the bridges DHCP settings. For example, the removal of a bridge that

is configured as DHCP client, automatically configures the LAN devices

formerly constituting the bridge as DHCP clients, with the exact DHCP client

configuration.

Creation with the Connection Wizard

To configure an existing bridge or create a new one, perform the following

steps:

1. Click the New Connection link in the Network Connections screen. TheConnection Wizard screen will appear.

2. Select the Advanced Connection radio button and click Next. The

Advanced Connection screen will appear.

3. Select the Network Bridging radio button and click Next. The Bridge

Options screen will appear.


23/266



Figure 10: Bridge Options

4. Select whether to configure an existing bridge (this option will only appear

if a bridge exists) or to add a new one:

(a) Configure Existing Bridge

Select this option and click Next. The Network Bridging screen will appear

allowing you to add new connections or remove existing ones, by checking orunchecking their respective check boxes.


24/266

Network Connections


Figure 11: Network Bridging

For example, checking the WAN check box will create a LAN-WAN bridge.

(b) Add a New Bridge

Select this option and click Next. A different Network Bridging screen will

appear allowing you to add a bridge over the unbridged connections, bychecking their respective check boxes.



25/266



Important notes:

The same connections cannot be shared by two bridges.

A bridge cannot be bridged.

Bridged connections will lose their IP settings.

5. Click Next. The Connection Summary screen will appear correspondingto your changes.

Figure 13: Connection Summary - Configure Existing Bridge

6. Check the Edit the Newly Created Connection check box if you wish to

be routed to the new connections configuration screen after clicking Finish.

7. Click Finish to save the settings.

The new bridge will be added to the network connections list, and will be

configurable like any other bridge.

General

The top part of the configuration window displays general communication

parameters. It is recommended not to change the default values in this screen

unless you are familiar with the networking concepts they represent. Since

your gateway is configured to operate with the default values, no parameter

modification is necessary. You can configure the following general

connection settings:


26/266

Network Connections


Schedule By default, the connection will always be active. However, you can

configure scheduler rules in order to define time segments during which the

connection may be active. Once a scheduler rule(s) is defined, this field

changes to a combo box, allowing you to choose between the available rules.

To learn how to configure scheduler rules.

NetworkSelect whether the parameters you are configuring relate to a WAN,

LAN or DMZ connection, by selecting the connection type from the

combo-box. For more information.

Physical AddressThe physical address of the network card used for your

network. Some cards allow you to change this address.

MTUMTU is the Maximum Transmission Unit. It specifies the largest packet

size permitted for Internet transmission. The default setting, Manual, allows

you to enter the largest packet size that will be transmitted. The recommended

size is 1492.

You should leave this value in the 1200 to 1500 range. To have the gateway

select the best MTU for your Internet connection, select Automatic.

Figure 14: General Bridge Settings

Internet Protocol

Select one of the following Internet Protocol options from the Internet

Protocol drop down menu:

No IP Address

Obtain an IP Address Automatically

Use the Following IP Address

Please note that according to the selection you make in the Internet Protocol

drop down menu, the screen will refresh and display relevant configuration

settings.

No IP AddressSelect No IP Address if you require that this connection will

have no IP address. This can be useful if this connection is under a bridge.


27/266



Figure 15: Internet Protocol Settings No IP Address

Use the Following IP AddressThe LAN connection is usually configured

using a permanent (static) IP address. Your service provider should provideyou with this address, and subnet mask.

Figure 16: Internet Protocol Settings Static IP

Bridge Settings

The bridge section allows you to specify the LAN devices that you would like

to join under the network bridge. Click the Edit icon on the VLAN column

to assign the network connections to specific Virtual LANS.

Select the STP check box to enable the Spanning Tree Protocol on the

device. You should use this to ensure that there are no loops in your network

configuration, and apply these settings in case your network consists of

multiple switches, or other bridges apart from those created by the gateway.

Figure 17: LAN Bridge Settings


28/266

Network Connections


IP Address Distribution

The IP Address Distribution section allows you to configure the gateways

Dynamic Host Configuration Protocol (DHCP) server parameters. The DHCP

automatically assigns IP addresses to network PCs. If you enable this feature,

make sure that you also configure your network PCs as DHCP clients.

Select one of the following options from the IP Address Distribution

combo-box:

DHCP Server

Start IP AddressThe first IP address that may be assigned to a LAN host.

Since the gateways default IP address is 192.168.1.1, this address must be

192.168.1.2 or greater.

End IP AddressThe last IP address in the range that can be used to

automatically assign IP addresses to LAN hosts.

Subnet MaskA mask used to determine to what subnet an IP address

belongs. An example of a subnet mask value is 255.255.0.0.Lease Time In MinutesEach device will be assigned an IP address by the

DHCP server for a this amount of time, when it connects to the network.

When the lease expires the server will determine if the computer has

disconnected from the network. If it has, the server may reassign this IP

address to a newly-connected computer. This feature ensures that IP addresses

that are not in use will become available for other computers on the network.

Provide Host Name If Not Specified by ClientIf the DHCP client does not

have a host name, the gateway will automatically assign one.

Figure 18: IP Address Distr ibution DHCP Server

DHCP Relay

Your gateway can act as a DHCP relay in case you would like to dynamically

assign IP addresses from a DHCP server other than your gateways DHCP

server. Note that when selecting this option you must also change the zNIDs

WAN to work in routing mode.


29/266



1. After selecting DHCP Relay from the drop down menu, a New IP

Address link will appear:

Figure 19: IP Address Distr ibution - DHCP Relay

Click the New IP Address link. The DHCP Relay Server Address screen

will appear:

Figure 20: DHCP Relay Server Address

2. Specify the IP address of the DHCP server.

3. Click OK to save the settings.

Disabled

Select Disabled from the combo-box if you would like to statically assign IP

addresses to your network computers.

Figure 21: IP Address Distribution - Disable DHCP

Routing

You can choose to setup your gateway to use static or dynamic routing.Dynamic routing automatically adjusts how packets travel on the network,

whereas static routing specifies a fixed routing path to neighboring

destinations.

Routing Select Advanced or Basic routing.

Routing ModeSelect one of the following routing modes:


30/266

Network Connections


Route Use route mode if you want your gateway to function as a routerbetween two networks.

NAPTNetwork Address and Port Translation (NAPT) refers to networkaddress translation involving the mapping of port numbers, allowingmultiple machines to share a single IP address. Use NAPT if your LANencompasses multiple devices, a topology that necessitates port

translation in addition to address translation.

Device MetricThe device metric is a value used by the gateway to determine

whether one route is superior to another, considering parameters such as

bandwidth, delay, and more.

Default RouteSelect this check box to define this device as a the default

route.

Routing Information Protocol (RIP)Select this check box to enable the

Routing Information Protocol (RIP). RIP determines a route based on the

smallest hop count between source and destination. When RIP is enabled,

select the following:

Listen to RIP messages - select None, RIPv1, RIPv2 or RIPv1/2.

Send RIP messages - select None, RIPv1, RIPv2-broadcast or

RIPv2-multicast.

Multicast - IGMP Proxy InternalIGMP proxy enables the system to issue

IGMP host messages on behalf of hosts that the system discovered through

standard IGMP interfaces. IGMP proxy enables the routing of multicast

packets according to the IGMP requests of LAN devices asking to join

multicast groups. Select the Multicast IGMP Proxy Internal check-box to

enable this feature.

Routing TableAllows you to add or modify routes when this device is active.

Use the New Route button to add a route or edit existing routes.

Figure 22: Advanced Routing Properties


31/266



Internet Connection Firewall

Your gateways firewall helps protect your computer by preventing

unauthorized users from gaining access to it through a network such as the

Internet. The firewall can be activated per network connection.

To enable the firewall on this network connection, select the Enabled check

box.

Figure 23: Internet Connection Firewall

Additional IP Addresses

You can add alias names (additional IP addresses) to the gateway by clicking

the New IP Address link. This enables you to access the gateway using thesealiases in addition to the 192.168.1.1 and the http://zNID.home.

Figure 24: Additional IP addresses

LAN Ethernet

A LAN Ethernet connection connects computers to the zNID using Ethernet

cables, either directly or via network hubs and switches.

Figure 25: LAN Ethernet properties


32/266

Network Connections


Clicking the Settings button at the bottom-right of the connections

Properties window, will open its Configuration window:

Figure 26: LAN Ethernet Configuration

General



unless you are familiar with the networking concepts they represent. Sinceyour gateway is configured to operate with the default values, no parameter



ScheduleBy default, the connection will always be active. However, you can






combo-box.

Physical AddressThe physical address of the network card used for your



33/266



MTUMTU is the Maximum Transmission Unit. It specifies the largest packet

size permitted for Internet transmission. The default setting, Manual, allows

you to enter the largest packet size that will be transmitted. The recommended

size, is 1492. You should leave this value in the 1200 to 1500 range. To have

the gateway select the best MTU for your Internet connection, select

Automatic.

Internet Protocol



No IP Address





settings.

No IP AddressSelect No IP Address if you require that this connection will

have no IP address. This can be useful if this connection is under a bridge.


Use the Following IP AddressThe LAN connection is usually configured

using a permanent (static) IP address. Your service provider should provide

you with this address, and subnet mask.








34/266

Network Connections



combo-box:

DHCP Server

Start IP AddressThe first IP address that may be assigned to a LAN host.


192.168.1.2 or greater.

End IP AddressThe last IP address in the range that can be used to


Subnet MaskA mask used to determine to what subnet an IP address

belongs. An example of a subnet mask value is 255.255.0.0.

Lease Time In MinutesEach device will be assigned an IP address by the





that are not in use will become available for other computers on the network.Provide Host Name If Not Specified by ClientIf the DHCP client does not

have a host name, the gateway will automatically assign one for him.


DHCP Relay








Click the New IP Address link. The DHCP Relay Server Address screen

will appear:


35/266





3. Click OK to save the settings. Disabled


addresses to your network computers.

Figure 29. IP Address Distribution - Disable DHCP

Routing

You can choose to setup your gateway to use static or dynamic routing.

Dynamic routing automatically adjusts how packets travel on the network,


destinations.

RoutingSelect Advanced or Basic routing.

Routing ModeSelect one of the following routing modes:

RouteUse route mode if you want your gateway to function as a routerbetween two networks.

NAPTNetwork Address and Port Translation (NAPT) refers to network

address translation involving the mapping of port numbers, allowingmultiple machines to share a single IP address. Use NAPT if your LANencompasses multiple devices, a topology that necessitates porttranslation in addition to address translation.

Device MetricThe device metric is a value used by the gateway to determine

whether one route is superior to another, considering parameters such as

bandwidth, delay, and more.


36/266

Network Connections


Default RouteSelect this check box to define this device as a the default

route.

Multicast - IGMP Proxy InternalIGMP proxy enables the system to issue






Routing TableAllows you to add or modify routes when this device is active.

Use the New Route button to add a route or edit existing routes.



Your gateways firewall helps protect your computer by preventingunauthorized users from gaining access to it through a network such as the



box.




the New IP Address link. This enables you to access the gateway using these

aliases in addition to the 192.168.1.1 and the http://zNID.home.

Figure 34: Additional IP Addresses


37/266



General





modification is necessary. You can configure the following generalconnection settings:

ScheduleBy default, the connection will always be active. However, you can






combo-box. The physical address of the network card used for your network.

Some cards allow you to change this address.

Clone MACAllows you to copy the current MAC address of your PC to theMAC address of this device.

MTU MTU is the Maximum Transmission Unit. It specifies the largest packet

size permitted for Internet transmission. In the default setting, Automatic, the

gateway selects the best MTU for your Internet connection. In case you

change to manual, you can enter the largest packet size, you should leave this

value in the 1200 to 1500 range.

Figure 35: 100 WAN Ethernet properties


38/266

Network Connections


Figure 36: WAN Ethernet configu ration

Internet Protocol Settings



No IP Address Obtain an IP Address Automatically




settings.


39/266



No IP Address Select No IP Address if you require that your gateway have

no IP address. This can be useful if you are working in an environment where

you are not connected to other networks, such as the Internet.

Figure 35. Internet Protocol Settings No IP Address

Obtain an IP Address Automatically Your WAN connection is configured

by default to act as a DHCP client. You should keep this configuration in case

your service provider supports DHCP, or if you are connecting using a

dynamic IP address.

The server that assigns the gateway with an IP address, also assigns a subnet

mask. You can override the dynamically assigned subnet mask by selecting

the Override Subnet Mask and specifying your own mask instead.

You can press the Release button to release the current leased IP address.Once the address has been released, the button text changes to Renew. Use

the Renew button to renew the leased IP address.

Figure 37: Internet Protocol Settings Automatic IP

Use the Following IP Address Your WAN connection can be configured


you with this IP address, subnet mask and the default gateway IP address.



40/266

Network Connections


DNS Server

Domain Name System (DNS) is the method by which website or domain

names are translated into IP addresses. You can configure the connection to

automatically obtain a DNS server address, or specify such an address

manually, according to the information provided by your ISP.

To configure the connection to automatically obtain a DNS server address,

select Obtain DNS Server Address Automatically from the DNS Server

drop down menu.

Figure 39: Automatic DNS Settings

To manually configure DNS server addresses, select Use the Following DNS

Server Addresses from the DNS Server drop down menu. Specify up to twodifferent DNS server address, one primary, another secondary.

Figure 40: DNS Settings

Routing




destinations.


Routing Mode Select one of the following routing modes:


NAPT Network Address and Port Translation (NAPT) refers to networkaddress translation involving the mapping of port numbers, allowingmultiple machines to share a single IP address. Use NAPT if your LANencompasses multiple devices, a topology that necessitates porttranslation in addition to address translation.

Device Metric The device metric is a value used by the gateway to

determine whether one route is superior to another, considering parameters

such as bandwidth, delay, and more.


41/266



Default Route Select this check box to define this device as a the default

route.

Multicast - IGMP Proxy Internal IGMP proxy enables the system to issue






Routing Table Allows you to add or modify routes when this device is

active. Use the New Route button to add a route or edit existing routes.







box.







42/266

Network Connections


Figure 43: Additional IP Addresses

Point-to-Point Protocol over Ethernet (PPPoE)

Point-to-Point Protocol over Ethernet (PPPoE) relies on two widely accepted

standards, PPP and Ethernet. PPPoE enables your home network PCs that

communicate on an Ethernet network to exchange information with PCs on

the Internet. PPPoE supports the protocol layers and authentication widely

used in PPP and enables a point-to-point connection to be established in the

normally multipoint architecture of Ethernet. A discovery process in PPPoE

determines the Ethernet MAC address of the remote device in order to

establish a session.

Creation with the Connection WizardTo create a new PPPoE connection, perform the following steps:

1. Click the New Connection link in the Network Connections screen. The


2. Select the Internet Connection radio button and click Next. The Internet

Connection screen will appear.

Figure 44: Point-to-Point Protocol over Ethernet

4. Enter the username and password provided by your Internet Service

Provider (ISP), and click Next. The Connection Summary screen will

appear.


43/266



Figure 45: Connection Summary




The new PPPoE connection will be added to the network connections list, and

will be configurable like any other connection.

General

Schedule By default, the connection will always be active. However, youcan configure scheduler rules in order to define time segments during which

the connection may be active. Once a scheduler rule(s) is defined, this field


Network Select whether the parameters you are configuring relate to a

WAN, LAN or DMZ connection, by selecting the connection type from the

combo-box.

MTU MTU is the Maximum Transmission Unit. It specifies the largest

packet size permitted for Internet transmission. The default setting, Manual,

allows you to enter the largest packet size that will be transmitted. The

recommended size, is 1492. You should leave this value in the 1200 to 1500

range.To have the gateway select the best MTU for your Internet connection, select

Automatic.

Underlying Connection Specify the underlying connection above which the

protocol will be initiated.


44/266

Network Connections


Figure 46: General PPPoE Settings

Internet Protocol







settings.

Obtain an IP Address Automatically Your PPP connection is configured

by default to obtain an IP automatically. You should change this configuration

in case your service provider requires it.





Use the Following IP Address Your WAN connection can be configuredusing a permanent (static) IP address. Your service provider should provide



45/266




DNS Server

Domain Name System (DNS) is the method by which website or domain

names are translated into IP addresses. You can configure the connection to





drop down menu.


To manually configure DNS server addresses, select Use the Following DNSServer Addresses from the DNS Server drop down menu. Specify up to two

different DNS server address, one primary, another secondary.


Routing




destinations.



46/266

Network Connections









route.




packets according to the IGMP requests of LAN devices asking to joinmulticast groups. Select the Multicast IGMP Proxy Internal check-box to










box.


47/266




Ethernet Connection

The Ethernet connection wizard utility is one of the three methods used to

configure the physical WAN Ethernet connection. It is the most basic method,

intended for connections that do not require user name and password in order

to connect to the Internet.

To configure a new Ethernet connection, perform the following steps:

1. Click the New Connection link in the Network Connections screen.

The Connection Wizard screen will appear.

2. Select the Internet Connection radio button and click Next.

The Internet Connection screen will appear.

3. Select the External Cable Modem radio button and click Next.

The Internet Cable Modem Connection screen will appear.

Figure 53: Internet Cable Modem Connection


48/266

Network Connections


4. Select the Ethernet Connection radio button and click Next.

The Connection Summary screen will appear.





The WAN Ethernet connection will be configured accordingly.

Dynamic Host Configuration Protocol (DHCP)

The Dynamic Host Configuration Protocol (DHCP) connection wizard utility

is one of the three methods used to configure the physical WAN Ethernet

connection. It is a dynamic negotiation method, where the client obtains an IP

address automatically from the service provider when connecting to the

Internet.

To configure a new DHCP connection, perform the following steps:



2. Select the Internet Connection radio button and click Next. The Internet


3. Select the Ethernet Connection radio button and click Next. The Ethernet



49/266



Figure 55: Ethernet Connection

4. Select the Dynamic Negotiation (DHCP) radio button and click Next. The

Connection Summary screen will appear.


5. Check the Edit the Newly Created Connection check box if you wish tobe routed to the new connections configuration screen after clicking Finish.


The WAN Ethernet connection will be configured to obtain an IP address

using a DHCP.


50/266

Network Connections


WAN-LAN Bridge

WAN bridge creates a bridge over WAN and LAN devices. This way

computers on the zNID LAN side can get IP addresses that are known on the

WAN side.


To configure an existing bridge or create a new one, perform the following

steps:



2. Select the Advanced Connection radio button and click Next.

The Advanced Connection screen will appear.

3. Select the Network Bridging radio button and click Next.

The Bridge Options screen will appear.

Figure 57: Bridge Options

4. Select whether to configure an existing bridge (this option will only appear

if a bridge exists) or to add a new one:

(a) Configure Existing Bridge

Select this option and click Next.


51/266



The Network Bridging screen will appear allowing you to add new

connections or remove existing ones, by checking or unchecking their

respective check boxes.


For example, checking the WAN check box will create a LAN-WAN bridge.

(b) Add a New Bridge

Select this option and click Next. A different Network Bridging screen will

appear allowing you to add a bridge over the unbridged connections, by

checking their respective check boxes.


Important notes:

The same connections cannot be shared by two bridges.

A bridge cannot be bridged.

Bridged connections will lose their IP settings.

5. Click Next.


52/266

Network Connections


The Connection Summary screen will appear, corresponding to your

changes.

Figure 60: Connection Summary - Configure Existing Bridge




The new bridge will be added to the network connections list, and will be

configurable like any other bridge.

GeneralThe top part of the configuration window displays general communication






Schedule By default, the connection will always be active. However, you

can configure scheduler rules in order to define time segments during which





combo-box.

Physical Address The physical address of the network card used for your


Clone MAC Allows you to copy the current MAC address of your PC to the

MAC address of this device.


53/266



MTU MTU is the Maximum Transmission Unit. It specifies the largest

packet size permitted for Internet transmission. In the default setting,

Automatic, the gateway selects the best MTU for your Internet connection. In

case you change to manual, you can enter the largest packet size, you should

leave this value in the 1200 to 1500 range.

Figure 61: General WAN Bridge Settings

Internet Protocol Settings



No IP Address





settings.

No IP Address Select No IP Address if you require that your gateway have

no IP address. This can be useful if you are working in an environment where


Figure 61. Internet Protocol Settings No IP Address




dynamic IP address.


54/266

Network Connections





You can press the Release button to release the current leased IP address.

Once the address has been released, the button text changes to Renew. Use


Figure 62. Internet Protocol Settings Automatic IP





Bridge Settings

The bridge section allows you to specify the LAN and WAN devices that you

would like to join under the network bridge. Click the Edit icon on the

VLAN column to assign the network connections to specific Virtual LANS.

Select the STP check box to enable the Spanning Tree Protocol on the

device. You should use this to ensure that there are no loops in your network

configuration, and apply these settings in case your network consists of

multiple switches, or other bridges apart from those created by the gateway.


55/266



Figure 63: Bridge Settings

DNS Server

Domain Name System (DNS) is the method by which website or domainnames are translated into IP addresses. You can configure the connection to





drop down menu.


To manually configure DNS server addresses, select Use the Following DNS

Server Addresses from the DNS Server drop-down menu. Specify up to

two different DNS server address, one primary, another secondary.



56/266

Network Connections


Routing




destinations.






determine whether one route is superior to another, considering parameterssuch as bandwidth, delay, and more.


route.











57/266

Virtual LAN Interface (VLAN)







box.






Figure 69. Additional IP Addresses


The zNID allows you to create Virtual LAN (VLAN) interfaces in order to

connect to external virtual networks.


To create a new VLAN interface, perform the following steps:



2. Select the Advanced Connection radio button and click Next. The

Advanced Connection screen will appear.

3. Select the VLAN Interface radio button and click Next. The VLAN

Interface screen will appear.


58/266

Network Connections


Figure 68: VLAN Interface

4. Select the underlying device for this interface. The combo box will displaythe zNIDs Ethernet connections.

5. Enter a value that will serve as the VLAN ID, and click Next. The

Connection Summary screen will appear.





The new VLAN interface will be added to the network connections list, and

will be configurable like any other connection.


59/266



General





modification is necessary. You can configure the following generalconnection settings:

Schedule By default, the connection will always be active. However, you

can configure scheduler rules in order to define time segments during which





combo-box.

Physical Address The physical address of the network card used for your

network. Some cards allow you to change this address.Clone MAC Allows you to copy the current MAC address of your PC tothe MAC address of this device.

MTU MTU is the Maximum Transmission Unit. It specifies the largestpacket size permitted for Internet transmission. In the default setting,Automatic, the gateway selects the best MTU for your Internetconnection. In case you change to manual, you can enter the largestpacket size, you should leave this value in the 1200 to 1500 range.

Underlying Connection The Ethernet device that the connection is

implemented over.

Internet ProtocolSelect one of the following Internet Protocol options from the Internet


No IP Address





settings.

No IP Address Select No IP Address if you require that your gateway haveno IP address. This can be useful if you are working in an environment where




60/266

Network Connections





dynamic IP address.




You can press the Release button to release the current leased IP address.

Once the address has been released, the button text changes to Renew. Use













combo-box:

DHCP Server


61/266



Start IP Address The first IP address that may be assigned to a LAN host.


192.168.1.2 or greater.

End IP Address The last IP address in the range that can be used to


Subnet Mask A mask used to determine to what subnet an IP addressbelongs. An example of a subnet mask value is 255.255.0.0.

Lease Time In Minutes Each device will be assigned an IP address by the





that are not in use will become available for other computers on the network.

Provide Host Name If Not Specified by Client If the DHCP client does not

have a host name, the gateway will automatically assign one for him.


DHCP Relay






62/266

Network Connections





Click the New IP Address link.

The DHCP Relay Server Address screen will appear:



3. Click OK to save the settings.

Disabled


addresses to your network computers.

Figure 76: IP Address Distribution - Disable DHCP

Routing




destinations.



63/266










route.




packets according to the IGMP requests of LAN devices asking to joinmulticast groups. Select the Multicast IGMP Proxy Internal check-box to



active. Use the Ne

zhone router znid admin

Documents