ZyXEL Communications 310 - Page 280

ZyXEL Communications 310

562 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

Chapter 19 Firewall

ZyWALL 110/310/1100 Series User’s Guide

280

The rule for the CEO must come before the rule that blocks all LAN1 to WAN IRC traffic. If the rule

that blocks all LAN1 to WAN IRC traffic came first, the CEO’s IRC traffic would match that rule and

the ZyWALL would drop it and not check any other firewall rules.

Table of Contents

default chapter3
- Table of Contents3
Chapter 1 Introduction17
- Overview17
- Management Overview19
- Web Configurator20
- Web Configurator Access20
- Web Configurator Screens Overview21
- Site Map22
- Navigation Panel25
- Configuration Menu26
- Tables and Lists28
- Installation Setup Wizard33
- Installation Setup Wizard Screens33
- Internet Access Setup - WAN Interface33
- Internet Access: Ethernet34
- Internet Access: Pppoe34
- Internet Access: PPTP35
- ISP Parameters35
- Internet Access - Finish36
- Hardware Introduction37
- Default Zones, Interfaces, and Ports37
Chapter 3 Hardware Introduction37
- Stopping the Zywall38
- Rack-Mounting38
- Wall-Mounting39
- Front Panel Leds39
- Rear Panels41
Chapter 4 Quick Setup Wizards43
- Quick Setup Overview43
- WAN Interface Quick Setup43
- Choose an Ethernet Interface44
- Select WAN Type44
- Configure WAN Settings45
- WAN and ISP Connection Settings45
- Quick Setup Interface Wizard: Summary47
- VPN Setup Wizard48
- Welcome48
- VPN Setup Wizard: Wizard Type49
- VPN Express Wizard - Scenario50
- VPN Express Wizard - Configuration51
- VPN Express Wizard - Summary51
- VPN Express Wizard - Finish52
- VPN Advanced Wizard - Scenario53
- VPN Advanced Wizard - Phase 1 Settings54
- VPN Advanced Wizard - Phase 256
- VPN Advanced Wizard - Summary57
- VPN Advanced Wizard - Finish57
- VPN Settings for Configuration Provisioning Wizard: Wizard Type58
- Configuration Provisioning Express Wizard - VPN Settings59
- Configuration Provisioning VPN Express Wizard - Configuration60
- VPN Settings for Configuration Provisioning Express Wizard - Summary61
- VPN Settings for Configuration Provisioning Express Wizard - Finish62
- VPN Settings for Configuration Provisioning Advanced Wizard - Scenario63
- VPN Settings for Configuration Provisioning Advanced Wizard - Phase 1 Settings64
- VPN Settings for Configuration Provisioning Advanced Wizard - Phase 265
- VPN Settings for Configuration Provisioning Advanced Wizard - Summary66
- VPN Settings for Configuration Provisioning Advanced Wizard- Finish66
Chapter 5 Dashboard69
- Overview69
- What You Can Do in this Chapter69
- The Dashboard Screen69
- The CPU Usage Screen74
- The Memory Usage Screen75
- The Active Sessions Screen75
- The VPN Status Screen76
- The DHCP Table Screen77
- The Number of Login Users Screen78
Chapter 6 Monitor79
- Overview79
- What You Can Do in this Chapter79
- The Port Statistics Screen80
- The Port Statistics Graph Screen81
- Interface Status Screen82
- The Traffic Statistics Screen86
- The Session Monitor Screen89
- The DDNS Status Screen91
- IP/MAC Binding Monitor91
- The Login Users Screen92
- Cellular Status Screen93
- More Information95
- USB Storage Screen96
- The Ipsec Monitor Screen97
- Regular Expressions in Searching Ipsec Sas98
- The SSL Connection Monitor Screen99
- The L2TP over Ipsec Session Monitor Screen99
- Log Screen100
- Interfaces103
- Interface Overview103
- What You Can Do in this Chapter103
- What You Need to Know103
Chapter 7 Interfaces103
- Relationships between Interfaces105
- What You Need to Do First108
- Port Role Screen108
- Ethernet Summary Screen109
- Ethernet Edit110
- Object References122
- Add/Edit Dhcpv6 Request/Release Options123
- Add/Edit DHCP Extended Options124
- PPP Interfaces125
- PPP Interface Summary126
- PPP Interface Add or Edit127
- Cellular Configuration Screen (3G)132
- Cellular Add/Edit Screen134
- Tunnel Interfaces140
- Configuring a Tunnel142
- Tunnel Add or Edit Screen143
- VLAN Interfaces147
- VLAN Summary Screen148
- VLAN Add/Edit150
- Bridge Interfaces159
- Bridge Summary160
- Bridge Add/Edit162
- Virtual Interfaces170
- Virtual Interfaces Add/Edit171
- Interface Technical Reference172
Chapter 8 Trunk177
- Overview177
- What You Can Do in this Chapter177
- What You Need to Know177
- The Trunk Summary Screen180
- Configuring a User-Defined Trunk181
- Configuring the System Default Trunk183
- Policy and Static Routes187
- Policy and Static Routes Overview187
- What You Can Do in this Chapter187
- What You Need to Know188
- Policy Route Screen189
- Policy Route Edit Screen191
- IP Static Route Screen195
- Static Route Add/Edit Screen196
- Policy Routing Technical Reference197
- Routing Protocols199
- Routing Protocols Overview199
- What You Can Do in this Chapter199
- What You Need to Know199
- The RIP Screen199
Chapter 10 Routing Protocols199
- The OSPF Screen201
- Configuring the OSPF Screen204
- OSPF Area Add/Edit Screen206
- Virtual Link Add/Edit Screen208
- Routing Protocol Technical Reference208
- Zones211
- Zones Overview211
- What You Can Do in this Chapter211
- What You Need to Know211
Chapter 11 Zones211
- The Zone Screen212
- Zone Edit213
Chapter 12 DDNS215
- DDNS Overview215
- What You Can Do in this Chapter215
- What You Need to Know215
- The DDNS Screen216
- The Dynamic DNS Add/Edit Screen217
Chapter 13 NAT221
- NAT Overview221
- What You Can Do in this Chapter221
- What You Need to Know221
- The NAT Screen222
- The NAT Add/Edit Screen223
- NAT Technical Reference225
Chapter 14 HTTP Redirect229
- Overview229
- What You Can Do in this Chapter229
- What You Need to Know229
- The HTTP Redirect Screen230
- The HTTP Redirect Edit Screen231
Chapter 15 ALG233
- ALG Overview233
- What You Can Do in this Chapter233
- What You Need to Know233
- Before You Begin236
- The ALG Screen236
- ALG Technical Reference238
Chapter 16 IP/MAC Binding241
- IP/MAC Binding Overview241
- What You Can Do in this Chapter241
- What You Need to Know241
- IP/MAC Binding Summary242
- IP/MAC Binding Edit242
- Static DHCP Edit243
- IP/MAC Binding Exempt List244
- Inbound Load Balancing247
- Inbound Load Balancing Overview247
- What You Can Do in this Chapter247
- The Inbound LB Screen248
- The Inbound LB Add/Edit Screen249
- The Inbound LB Member Add/Edit Screen251
- Authentication Policy253
- Overview253
- What You Can Do in this Chapter253
- What You Need to Know253
- Authentication Policy Screen254
- Creating/Editing an Authentication Policy256
- User-Aware Access Control Example258
- Set up User Accounts258
- Set up User Groups259
- Set up User Authentication Using the RADIUS Server259
- User Group Authentication Using the RADIUS Server261
Chapter 19 Firewall265
- Overview265
- What You Can Do in this Chapter265
- What You Need to Know265
- The Firewall Screen268
- Configuring the Firewall Screen268
- The Firewall Add/Edit Screen272
- The Session Limit Screen273
- The Session Limit Add/Edit Screen275
- Firewall Rule Configuration Example276
- Firewall Rule Example Applications278
- Ipsec VPN281
- Virtual Private Networks (VPN) Overview281
- What You Can Do in this Chapter282
- What You Need to Know283
- Before You Begin284
- The VPN Connection Screen285
- The VPN Connection Add/Edit (IKE) Screen286
- The VPN Connection Add/Edit Manual Key Screen292
- The VPN Gateway Screen294
- The VPN Gateway Add/Edit Screen295
- VPN Concentrator301
- VPN Concentrator Requirements and Suggestions302
- VPN Concentrator Screen302
- The VPN Concentrator Add/Edit Screen302
- Zywall Ipsec VPN Client Configuration Provisioning303
- Ipsec VPN Background Information305
- Ssl Vpn317
- Overview317
- What You Can Do in this Chapter317
- What You Need to Know317
- The SSL Access Privilege Screen318
- The SSL Access Policy Add/Edit Screen319
- The SSL Global Setting Screen322
- How to Upload a Custom Logo323
- SSL VPN Example324
- SSL User Screens327
- Overview327
- What You Need to Know327
- Remote SSL User Login328
- The SSL VPN User Screens331
- Bookmarking the Zywall332
- Logging out of the SSL VPN User Screens333
- SSL User Application Screen333
- SSL User File Sharing334
- The Main File Sharing Screen334
- Opening a File or Folder335
- Downloading a File336
- Saving a File336
- Creating a New Folder337
- Renaming a File or Folder337
- Deleting a File or Folder338
- Uploading a File338
- Zywall Secuextender341
- The Zywall Secuextender Icon341
- Status341
Chapter 23 Zywall Secuextender341
- View Log342
- Suspend and Resume the Connection343
- Stop the Connection343
- Uninstalling the Zywall Secuextender343
- L2Tp Vpn345
- Overview345
- What You Can Do in this Chapter345
- What You Need to Know345
- L2TP VPN Screen347
Chapter 25 Bandwidth Management349
- Overview349
- What You Can Do in this Chapter349
- What You Need to Know349
- The Bandwidth Management Screen353
- The Bandwidth Management Add/Edit Screen355
Chapter 26 Device HA359
- Overview359
- What You Can Do in this Chapter359
- What You Need to Know359
- Before You Begin360
- Device HA General360
- The Active-Passive Mode Screen361
- Configuring Active-Passive Mode Device HA363
- Configuring an Active-Passive Mode Monitored Interface365
- Device HA Technical Reference366
Chapter 27 User/Group371
- Overview371
- What You Can Do in this Chapter371
- What You Need to Know371
- User Summary Screen373
- User Add/Edit Screen374
- User Group Summary Screen376
- Group Add/Edit Screen377
- The User/Group Setting Screen378
- Default User Authentication Timeout Settings Edit Screens380
- User Aware Login Example381
- User /Group Technical Reference382
- Addresses384
- Overview384
- What You Can Do in this Chapter384
- What You Need to Know384
- Address Summary Screen384
Chapter 28 Addresses384
- Ipv4 Address Add/Edit Screen386
- Ipv6 Address Add/Edit Screen387
- Address Group Summary Screen388
- Address Group Add/Edit Screen389
Chapter 29 Services390
- Overview390
- What You Can Do in this Chapter390
- What You Need to Know390
- The Service Summary Screen391
- The Service Add/Edit Screen392
- The Service Group Summary Screen393
- The Service Group Add/Edit Screen394
- Schedules396
- Overview396
- What You Can Do in this Chapter396
- What You Need to Know396
Chapter 30 Schedules396
- The Schedule Summary Screen397
- The One-Time Schedule Add/Edit Screen398
- The Recurring Schedule Add/Edit Screen399
Chapter 31 AAA Server400
- Overview400
- Directory Service (AD/LDAP)400
- RADIUS Server400
- Asas401
- What You Can Do in this Chapter401
- What You Need to Know401
- Active Directory or LDAP Server Summary403
- Adding an Active Directory or LDAP Server403
- RADIUS Server Summary406
- Adding a RADIUS Server406
- Authentication Method409
- Overview409
- What You Can Do in this Chapter409
- Before You Begin409
- Example: Selecting a VPN Authentication Method409
Chapter 32 Authentication Method409
- Authentication Method Objects410
- Creating an Authentication Method Object410
- Certificates413
- Overview413
- What You Can Do in this Chapter413
- What You Need to Know413
Chapter 33 Certificates413
- Verifying a Certificate415
- The My Certificates Screen416
- The My Certificates Add Screen417
- The My Certificates Edit Screen419
- The My Certificates Import Screen422
- The Trusted Certificates Screen423
- The Trusted Certificates Edit Screen424
- The Trusted Certificates Import Screen427
- Certificates Technical Reference428
- ISP Accounts429
- Overview429
- What You Can Do in this Chapter429
- ISP Account Summary429
Chapter 34 ISP Accounts429
- ISP Account Edit430
Chapter 35 SSL Application432
- Overview432
- What You Can Do in this Chapter432
- What You Need to Know432
- Example: Specifying a Web Site for Access433
- The SSL Application Screen434
- Creating/Editing an SSL Application Object435
- Dhcpv6438
- Overview438
- What You Can Do in this Chapter438
- The Dhcpv6 Request Screen438
Chapter 36 Dhcpv6438
- Dhcpv6 Request Add/Edit Screen439
- The Dhcpv6 Lease Screen439
- Dhcpv6 Lease Add/Edit Screen440
- System443
- Overview443
- What You Can Do in this Chapter443
- Host Name444
- USB Storage444
- Date and Time445
- Pre-Defined NTP Time Servers List448
- Time Server Synchronization448
- Console Port Speed449
- DNS Overview450
- DNS Server Address Assignment450
- Configuring the DNS Screen450
- Address Record452
- PTR Record452
- Adding an Address/Ptr Record453
- Domain Zone Forwarder453
- Adding a Domain Zone Forwarder453
- MX Record454
- Adding a MX Record454
- Adding a DNS Service Control Rule455
- WWW Overview456
- Service Access Limitations456
- System Timeout456
- Https456
- Configuring WWW Service Control457
- Service Control Rules460
- Customizing the WWW Login Page461
- HTTPS Example465
- Ssh472
- How SSH Works473
- SSH Implementation on the Zywall474
- Requirements for Using SSH474
- Configuring SSH474
- Secure Telnet Using SSH Examples475
- Telnet476
- Configuring Telnet476
- Ftp478
- Configuring FTP478
- Snmp479
- Supported Mibs480
- SNMP Traps481
- Configuring SNMP481
- Language Screen483
- Ipv6 Screen483
- Log and Report485
- Overview485
- What You Can Do in this Chapter485
- Email Daily Report485
- Log Setting Screens487
- Log Setting Summary487
- Edit System Log Settings489
- Edit Log on USB Storage Setting491
- Edit Remote Server Log Settings493
- Log Category Settings Screen495
- File Manager499
- Overview499
- What You Can Do in this Chapter499
- What You Need to Know499
Chapter 39 File Manager499
- Comments in Configuration Files or Shell Scripts500
- Command Mode500
- The Configuration File Screen501
- The Firmware Package Screen505
- The Shell Script Screen507
- Diagnostics510
- Overview510
- What You Can Do in this Chapter510
- The Diagnostic Screen510
Chapter 40 Diagnostics510
- The Diagnostics Files Screen511
- The Packet Capture Screen512
- The Packet Capture Files Screen514
- Core Dump Screen515
- Core Dump Files Screen516
- The System Log Screen516
- Packet Flow Explore518
- Overview518
- What You Can Do in this Chapter518
- The Routing Status Screen518
- The SNAT Status Screen522
Chapter 42 Reboot525
- Overview525
- What You Need to Know525
- The Reboot Screen525
- Shutdown526
- Overview526
- What You Need to Know526
- The Shutdown Screen526
Chapter 43 Shutdown526
Chapter 44 Troubleshooting527
- Resetting the Zywall535
- Getting more Troubleshooting Help536
Appendix A Legal Information537
- Index541

Related product manuals

ZyXEL Communications ZyWALL 310

Preview: ZyXEL Communications ZYWALL 35

ZyXEL Communications ZYWALL 35

Preview: ZyXEL Communications USG60

ZyXEL Communications USG60

Preview: ZyXEL Communications USG40

ZyXEL Communications USG40

Preview: ZyXEL Communications ZyWall

ZyXEL Communications ZyWall

ZyXEL Communications USG210

ZyXEL Communications VPN Series

Preview: ZyXEL Communications ZyWall 110

ZyXEL Communications ZyWall 110

Preview: ZyXEL Communications ZyWALL 1100

ZyXEL Communications ZyWALL 1100

Preview: ZyWALL 2 Plus

Preview: ZyWALL USG-Series

ZyWALL USG-Series

Preview: ZyWall ATP series

ZyWall ATP series