ZyXEL Communications 310 - Page 316

ZyXEL Communications 310

562 pages

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

Chapter 20 IPSec VPN

ZyWALL 110/310/1100 Series User’s Guide

316

Table of Contents

default chapter3
- Table of Contents3
Chapter 1 Introduction17
- Overview17
- Management Overview19
- Web Configurator20
- Web Configurator Access20
- Web Configurator Screens Overview21
- Site Map22
- Navigation Panel25
- Configuration Menu26
- Tables and Lists28
- Installation Setup Wizard33
- Installation Setup Wizard Screens33
- Internet Access Setup - WAN Interface33
- Internet Access: Ethernet34
- Internet Access: Pppoe34
- Internet Access: PPTP35
- ISP Parameters35
- Internet Access - Finish36
- Hardware Introduction37
- Default Zones, Interfaces, and Ports37
Chapter 3 Hardware Introduction37
- Stopping the Zywall38
- Rack-Mounting38
- Wall-Mounting39
- Front Panel Leds39
- Rear Panels41
Chapter 4 Quick Setup Wizards43
- Quick Setup Overview43
- WAN Interface Quick Setup43
- Choose an Ethernet Interface44
- Select WAN Type44
- Configure WAN Settings45
- WAN and ISP Connection Settings45
- Quick Setup Interface Wizard: Summary47
- VPN Setup Wizard48
- Welcome48
- VPN Setup Wizard: Wizard Type49
- VPN Express Wizard - Scenario50
- VPN Express Wizard - Configuration51
- VPN Express Wizard - Summary51
- VPN Express Wizard - Finish52
- VPN Advanced Wizard - Scenario53
- VPN Advanced Wizard - Phase 1 Settings54
- VPN Advanced Wizard - Phase 256
- VPN Advanced Wizard - Summary57
- VPN Advanced Wizard - Finish57
- VPN Settings for Configuration Provisioning Wizard: Wizard Type58
- Configuration Provisioning Express Wizard - VPN Settings59
- Configuration Provisioning VPN Express Wizard - Configuration60
- VPN Settings for Configuration Provisioning Express Wizard - Summary61
- VPN Settings for Configuration Provisioning Express Wizard - Finish62
- VPN Settings for Configuration Provisioning Advanced Wizard - Scenario63
- VPN Settings for Configuration Provisioning Advanced Wizard - Phase 1 Settings64
- VPN Settings for Configuration Provisioning Advanced Wizard - Phase 265
- VPN Settings for Configuration Provisioning Advanced Wizard - Summary66
- VPN Settings for Configuration Provisioning Advanced Wizard- Finish66
Chapter 5 Dashboard69
- Overview69
- What You Can Do in this Chapter69
- The Dashboard Screen69
- The CPU Usage Screen74
- The Memory Usage Screen75
- The Active Sessions Screen75
- The VPN Status Screen76
- The DHCP Table Screen77
- The Number of Login Users Screen78
Chapter 6 Monitor79
- Overview79
- What You Can Do in this Chapter79
- The Port Statistics Screen80
- The Port Statistics Graph Screen81
- Interface Status Screen82
- The Traffic Statistics Screen86
- The Session Monitor Screen89
- The DDNS Status Screen91
- IP/MAC Binding Monitor91
- The Login Users Screen92
- Cellular Status Screen93
- More Information95
- USB Storage Screen96
- The Ipsec Monitor Screen97
- Regular Expressions in Searching Ipsec Sas98
- The SSL Connection Monitor Screen99
- The L2TP over Ipsec Session Monitor Screen99
- Log Screen100
- Interfaces103
- Interface Overview103
- What You Can Do in this Chapter103
- What You Need to Know103
Chapter 7 Interfaces103
- Relationships between Interfaces105
- What You Need to Do First108
- Port Role Screen108
- Ethernet Summary Screen109
- Ethernet Edit110
- Object References122
- Add/Edit Dhcpv6 Request/Release Options123
- Add/Edit DHCP Extended Options124
- PPP Interfaces125
- PPP Interface Summary126
- PPP Interface Add or Edit127
- Cellular Configuration Screen (3G)132
- Cellular Add/Edit Screen134
- Tunnel Interfaces140
- Configuring a Tunnel142
- Tunnel Add or Edit Screen143
- VLAN Interfaces147
- VLAN Summary Screen148
- VLAN Add/Edit150
- Bridge Interfaces159
- Bridge Summary160
- Bridge Add/Edit162
- Virtual Interfaces170
- Virtual Interfaces Add/Edit171
- Interface Technical Reference172
Chapter 8 Trunk177
- Overview177
- What You Can Do in this Chapter177
- What You Need to Know177
- The Trunk Summary Screen180
- Configuring a User-Defined Trunk181
- Configuring the System Default Trunk183
- Policy and Static Routes187
- Policy and Static Routes Overview187
- What You Can Do in this Chapter187
- What You Need to Know188
- Policy Route Screen189
- Policy Route Edit Screen191
- IP Static Route Screen195
- Static Route Add/Edit Screen196
- Policy Routing Technical Reference197
- Routing Protocols199
- Routing Protocols Overview199
- What You Can Do in this Chapter199
- What You Need to Know199
- The RIP Screen199
Chapter 10 Routing Protocols199
- The OSPF Screen201
- Configuring the OSPF Screen204
- OSPF Area Add/Edit Screen206
- Virtual Link Add/Edit Screen208
- Routing Protocol Technical Reference208
- Zones211
- Zones Overview211
- What You Can Do in this Chapter211
- What You Need to Know211
Chapter 11 Zones211
- The Zone Screen212
- Zone Edit213
Chapter 12 DDNS215
- DDNS Overview215
- What You Can Do in this Chapter215
- What You Need to Know215
- The DDNS Screen216
- The Dynamic DNS Add/Edit Screen217
Chapter 13 NAT221
- NAT Overview221
- What You Can Do in this Chapter221
- What You Need to Know221
- The NAT Screen222
- The NAT Add/Edit Screen223
- NAT Technical Reference225
Chapter 14 HTTP Redirect229
- Overview229
- What You Can Do in this Chapter229
- What You Need to Know229
- The HTTP Redirect Screen230
- The HTTP Redirect Edit Screen231
Chapter 15 ALG233
- ALG Overview233
- What You Can Do in this Chapter233
- What You Need to Know233
- Before You Begin236
- The ALG Screen236
- ALG Technical Reference238
Chapter 16 IP/MAC Binding241
- IP/MAC Binding Overview241
- What You Can Do in this Chapter241
- What You Need to Know241
- IP/MAC Binding Summary242
- IP/MAC Binding Edit242
- Static DHCP Edit243
- IP/MAC Binding Exempt List244
- Inbound Load Balancing247
- Inbound Load Balancing Overview247
- What You Can Do in this Chapter247
- The Inbound LB Screen248
- The Inbound LB Add/Edit Screen249
- The Inbound LB Member Add/Edit Screen251
- Authentication Policy253
- Overview253
- What You Can Do in this Chapter253
- What You Need to Know253
- Authentication Policy Screen254
- Creating/Editing an Authentication Policy256
- User-Aware Access Control Example258
- Set up User Accounts258
- Set up User Groups259
- Set up User Authentication Using the RADIUS Server259
- User Group Authentication Using the RADIUS Server261
Chapter 19 Firewall265
- Overview265
- What You Can Do in this Chapter265
- What You Need to Know265
- The Firewall Screen268
- Configuring the Firewall Screen268
- The Firewall Add/Edit Screen272
- The Session Limit Screen273
- The Session Limit Add/Edit Screen275
- Firewall Rule Configuration Example276
- Firewall Rule Example Applications278
- Ipsec VPN281
- Virtual Private Networks (VPN) Overview281
- What You Can Do in this Chapter282
- What You Need to Know283
- Before You Begin284
- The VPN Connection Screen285
- The VPN Connection Add/Edit (IKE) Screen286
- The VPN Connection Add/Edit Manual Key Screen292
- The VPN Gateway Screen294
- The VPN Gateway Add/Edit Screen295
- VPN Concentrator301
- VPN Concentrator Requirements and Suggestions302
- VPN Concentrator Screen302
- The VPN Concentrator Add/Edit Screen302
- Zywall Ipsec VPN Client Configuration Provisioning303
- Ipsec VPN Background Information305
- Ssl Vpn317
- Overview317
- What You Can Do in this Chapter317
- What You Need to Know317
- The SSL Access Privilege Screen318
- The SSL Access Policy Add/Edit Screen319
- The SSL Global Setting Screen322
- How to Upload a Custom Logo323
- SSL VPN Example324
- SSL User Screens327
- Overview327
- What You Need to Know327
- Remote SSL User Login328
- The SSL VPN User Screens331
- Bookmarking the Zywall332
- Logging out of the SSL VPN User Screens333
- SSL User Application Screen333
- SSL User File Sharing334
- The Main File Sharing Screen334
- Opening a File or Folder335
- Downloading a File336
- Saving a File336
- Creating a New Folder337
- Renaming a File or Folder337
- Deleting a File or Folder338
- Uploading a File338
- Zywall Secuextender341
- The Zywall Secuextender Icon341
- Status341
Chapter 23 Zywall Secuextender341
- View Log342
- Suspend and Resume the Connection343
- Stop the Connection343
- Uninstalling the Zywall Secuextender343
- L2Tp Vpn345
- Overview345
- What You Can Do in this Chapter345
- What You Need to Know345
- L2TP VPN Screen347
Chapter 25 Bandwidth Management349
- Overview349
- What You Can Do in this Chapter349
- What You Need to Know349
- The Bandwidth Management Screen353
- The Bandwidth Management Add/Edit Screen355
Chapter 26 Device HA359
- Overview359
- What You Can Do in this Chapter359
- What You Need to Know359
- Before You Begin360
- Device HA General360
- The Active-Passive Mode Screen361
- Configuring Active-Passive Mode Device HA363
- Configuring an Active-Passive Mode Monitored Interface365
- Device HA Technical Reference366
Chapter 27 User/Group371
- Overview371
- What You Can Do in this Chapter371
- What You Need to Know371
- User Summary Screen373
- User Add/Edit Screen374
- User Group Summary Screen376
- Group Add/Edit Screen377
- The User/Group Setting Screen378
- Default User Authentication Timeout Settings Edit Screens380
- User Aware Login Example381
- User /Group Technical Reference382
- Addresses384
- Overview384
- What You Can Do in this Chapter384
- What You Need to Know384
- Address Summary Screen384
Chapter 28 Addresses384
- Ipv4 Address Add/Edit Screen386
- Ipv6 Address Add/Edit Screen387
- Address Group Summary Screen388
- Address Group Add/Edit Screen389
Chapter 29 Services390
- Overview390
- What You Can Do in this Chapter390
- What You Need to Know390
- The Service Summary Screen391
- The Service Add/Edit Screen392
- The Service Group Summary Screen393
- The Service Group Add/Edit Screen394
- Schedules396
- Overview396
- What You Can Do in this Chapter396
- What You Need to Know396
Chapter 30 Schedules396
- The Schedule Summary Screen397
- The One-Time Schedule Add/Edit Screen398
- The Recurring Schedule Add/Edit Screen399
Chapter 31 AAA Server400
- Overview400
- Directory Service (AD/LDAP)400
- RADIUS Server400
- Asas401
- What You Can Do in this Chapter401
- What You Need to Know401
- Active Directory or LDAP Server Summary403
- Adding an Active Directory or LDAP Server403
- RADIUS Server Summary406
- Adding a RADIUS Server406
- Authentication Method409
- Overview409
- What You Can Do in this Chapter409
- Before You Begin409
- Example: Selecting a VPN Authentication Method409
Chapter 32 Authentication Method409
- Authentication Method Objects410
- Creating an Authentication Method Object410
- Certificates413
- Overview413
- What You Can Do in this Chapter413
- What You Need to Know413
Chapter 33 Certificates413
- Verifying a Certificate415
- The My Certificates Screen416
- The My Certificates Add Screen417
- The My Certificates Edit Screen419
- The My Certificates Import Screen422
- The Trusted Certificates Screen423
- The Trusted Certificates Edit Screen424
- The Trusted Certificates Import Screen427
- Certificates Technical Reference428
- ISP Accounts429
- Overview429
- What You Can Do in this Chapter429
- ISP Account Summary429
Chapter 34 ISP Accounts429
- ISP Account Edit430
Chapter 35 SSL Application432
- Overview432
- What You Can Do in this Chapter432
- What You Need to Know432
- Example: Specifying a Web Site for Access433
- The SSL Application Screen434
- Creating/Editing an SSL Application Object435
- Dhcpv6438
- Overview438
- What You Can Do in this Chapter438
- The Dhcpv6 Request Screen438
Chapter 36 Dhcpv6438
- Dhcpv6 Request Add/Edit Screen439
- The Dhcpv6 Lease Screen439
- Dhcpv6 Lease Add/Edit Screen440
- System443
- Overview443
- What You Can Do in this Chapter443
- Host Name444
- USB Storage444
- Date and Time445
- Pre-Defined NTP Time Servers List448
- Time Server Synchronization448
- Console Port Speed449
- DNS Overview450
- DNS Server Address Assignment450
- Configuring the DNS Screen450
- Address Record452
- PTR Record452
- Adding an Address/Ptr Record453
- Domain Zone Forwarder453
- Adding a Domain Zone Forwarder453
- MX Record454
- Adding a MX Record454
- Adding a DNS Service Control Rule455
- WWW Overview456
- Service Access Limitations456
- System Timeout456
- Https456
- Configuring WWW Service Control457
- Service Control Rules460
- Customizing the WWW Login Page461
- HTTPS Example465
- Ssh472
- How SSH Works473
- SSH Implementation on the Zywall474
- Requirements for Using SSH474
- Configuring SSH474
- Secure Telnet Using SSH Examples475
- Telnet476
- Configuring Telnet476
- Ftp478
- Configuring FTP478
- Snmp479
- Supported Mibs480
- SNMP Traps481
- Configuring SNMP481
- Language Screen483
- Ipv6 Screen483
- Log and Report485
- Overview485
- What You Can Do in this Chapter485
- Email Daily Report485
- Log Setting Screens487
- Log Setting Summary487
- Edit System Log Settings489
- Edit Log on USB Storage Setting491
- Edit Remote Server Log Settings493
- Log Category Settings Screen495
- File Manager499
- Overview499
- What You Can Do in this Chapter499
- What You Need to Know499
Chapter 39 File Manager499
- Comments in Configuration Files or Shell Scripts500
- Command Mode500
- The Configuration File Screen501
- The Firmware Package Screen505
- The Shell Script Screen507
- Diagnostics510
- Overview510
- What You Can Do in this Chapter510
- The Diagnostic Screen510
Chapter 40 Diagnostics510
- The Diagnostics Files Screen511
- The Packet Capture Screen512
- The Packet Capture Files Screen514
- Core Dump Screen515
- Core Dump Files Screen516
- The System Log Screen516
- Packet Flow Explore518
- Overview518
- What You Can Do in this Chapter518
- The Routing Status Screen518
- The SNAT Status Screen522
Chapter 42 Reboot525
- Overview525
- What You Need to Know525
- The Reboot Screen525
- Shutdown526
- Overview526
- What You Need to Know526
- The Shutdown Screen526
Chapter 43 Shutdown526
Chapter 44 Troubleshooting527
- Resetting the Zywall535
- Getting more Troubleshooting Help536
Appendix A Legal Information537
- Index541

Related product manuals

ZyXEL Communications ZyWALL 310

Preview: ZyXEL Communications ZYWALL 35

ZyXEL Communications ZYWALL 35

Preview: ZyXEL Communications USG60

ZyXEL Communications USG60

Preview: ZyXEL Communications USG40

ZyXEL Communications USG40

Preview: ZyXEL Communications ZyWall

ZyXEL Communications ZyWall

ZyXEL Communications USG210

ZyXEL Communications VPN Series

Preview: ZyXEL Communications ZyWall 110

ZyXEL Communications ZyWall 110

Preview: ZyXEL Communications ZyWALL 1100

ZyXEL Communications ZyWALL 1100

Preview: ZyWALL 2 Plus

Preview: ZyWALL USG-Series

ZyWALL USG-Series

Preview: ZyWall ATP series

ZyWall ATP series