ZyXEL Communications 5 Series - Figure 210 SECURITY > VPN > VPN Rules (IKE)

To Next Page

To Previous Page

Chapter 19 IPSec VPN

ZyWALL 5/35/70 Series User’s Guide

362

Use this screen to configure a VPN gateway policy. The gateway policy identifies the IPSec

routers at either end of a VPN tunnel (My ZyWALL and Remote Gateway) and specifies the

authentication, encryption and other settings needed to negotiate a phase 1 IKE SA.

Figure 210 SECURITY > VPN > VPN Rules (IKE) > Edit Gateway Policy

Main Page

About this User's Guide3
Document Conventions4
Safety Warnings6
Contents Overview9
- Table of Contents9
Table of Contents11
List of Figures29
List of Tables41
Introduction49
PART I Introduction49
Chapter 1 Getting to Know Your Zywall51
- Zywall Internet Security Appliance Overview51
- Zywall Features51
- Applications for the Zywall52
- Ways to Manage the Zywall54
- Good Habits for Managing the Zywall54
Chapter 2 Hardware Installation55
- General Installation Instructions55
- Desktop Installation55
- Rack-Mounted Installation Requirements56
- Figure 4 Attaching Rubber Feet56
- Rack-Mounted Installation57
- Figure 5 Attaching Mounting Brackets and Screws57
- Figure 6 Rack Mounting57
- Card, WLAN Card and Zywall Turbo Card Installation58
- Figure 7 WLAN Card Installation58
- Front Panel Lights59
- Figure 8 Zywall 70 Front Panel59
- Figure 9 Zywall 35 Front Panel59
- Figure 10 Zywall 5 Front Panel59
- Table 2 Front Panel Lights59
Chapter 3 Introducing the Web Configurator61
- Web Configurator Overview61
- Accessing the Zywall Web Configurator61
- Figure 11 Change Password Screen62
- Figure 12 Replace Certificate Screen62
- Resetting the Zywall63
- Navigating the Zywall Web Configurator64
- Wizard Setup87
Chapter 4 Wizard Setup87
- Wizard Setup Overview87
- Figure 22 Wizard Setup Welcome87
- Internet Access88
  - ISP Parameters88
  - Figure 23 ISP Parameters: Ethernet Encapsulation88
  - Table 13 ISP Parameters: Ethernet Encapsulation88
  - Figure 24 ISP Parameters: Pppoe Encapsulation89
  - Table 14 ISP Parameters: Pppoe Encapsulation90
  - Figure 25 ISP Parameters: PPTP Encapsulation91
  - Table 15 ISP Parameters: PPTP Encapsulation91
  - Internet Access Wizard: Second Screen92
  - Figure 26 Internet Access Wizard: Second Screen92
  - Internet Access Wizard: Registration93
  - Figure 27 Internet Access Setup Complete93
  - Figure 28 Internet Access Wizard: Registration93
  - Internet Access Wizard: Status94
  - Figure 29 Internet Access Wizard: Registration in Progress94
  - Table 16 Internet Access Wizard: Registration94
  - Internet Access Wizard: Service Activation95
  - Figure 30 Internet Access Wizard: Status95
  - Figure 31 Internet Access Wizard: Registration Failed95
  - Figure 32 Internet Access Wizard: Registered Device95
- VPN Wizard Gateway Setting96
- Figure 33 Internet Access Wizard: Activated Services96
- Figure 34 VPN Wizard: Gateway Setting96
- Table 17 VPN Wizard: Gateway Setting96
- VPN Wizard Network Setting97
- Figure 35 VPN Wizard: Network Setting98
- Table 18 VPN Wizard: Network Setting98
- VPN Wizard IKE Tunnel Setting (IKE Phase 1)99
- Figure 36 VPN Wizard: IKE Tunnel Setting99
- VPN Wizard Ipsec Setting (IKE Phase 2)100
- Table 19 VPN Wizard: IKE Tunnel Setting100
- Figure 37 VPN Wizard: Ipsec Setting101
- Table 20 VPN Wizard: Ipsec Setting101
- VPN Wizard Status Summary102
- Figure 38 VPN Wizard: VPN Status102
- Table 21 VPN Wizard: VPN Status103
- VPN Wizard Setup Complete104
- Anti-Spam Wizard: Email Server Location Setting104
- Figure 39 VPN Wizard Setup Complete104
- Anti-Spam Wizard: Direction Recommendations105
- Figure 40 Anti-Spam Wizard: Email Server Location Setting105
- Table 22 Anti-Spam Wizard: Email Server Location Setting105
- Anti-Spam Wizard: Direction Configuration106
- Figure 41 Anti-Spam Wizard: Direction Recommendations106
- Figure 42 Anti-Spam Wizard: Direction Configuration107
- Table 23 Anti-Spam Wizard: Direction Configuration107
- Anti-Spam Wizard: Setup Complete108
- Figure 43 Anti-Spam Wizard: Setup Complete108
Chapter 5 Tutorials109
- Dynamic VPN Rule Configuration109
- Security Settings for VPN Traffic119
- Firewall Rule for VPN Example122
- How to Set up a 3G WAN Connection130
- Configuring Load Balancing132
- Figure 67 Tutorial: Home132
- Configuring Content Filtering133
Chapter 6 Registration Screens141
- Overview141
  - What You Can Do in the Registration Screens141
  - What You Need to Know about Registration141
- The Registration Screen142
- Figure 79 REGISTRATION > Registration143
- Table 25 REGISTRATION > Registration143
- The Service Screen144
- Figure 80 REGISTRATION > Registration: Registered Device144
- Figure 81 REGISTRATION > Service145
- Table 26 REGISTRATION > Service145
Network147
Part II: Network147
- LAN Screens149
Chapter 7 LAN Screens149
- Overview149
- The LAN Screen152
- Figure 83 NETWORK > LAN153
- Table 27 NETWORK > LAN153
- The LAN Static DHCP Screen155
- The LAN IP Alias Screen156
- Figure 84 NETWORK > LAN > Static DHCP156
- Table 28 NETWORK > LAN > Static DHCP156
- Figure 85 Physical Network & Partitioned Logical Networks157
- Figure 86 NETWORK > LAN > IP Alias157
- The LAN Port Roles Screen158
- Table 29 NETWORK > LAN > IP Alias158
- Figure 87 NETWORK > LAN > Port Roles159
- Figure 88 Port Roles Change Complete159
- Table 30 NETWORK > LAN > Port Roles159
- Bridge Screens161
Chapter 8 Bridge Screens161
- Overview161
- The Bridge Screen163
- Figure 92 NETWORK > Bridge163
- Table 31 NETWORK > Bridge163
- The Bridge Port Roles Screen164
- Figure 93 NETWORK > Bridge > Port Roles165
- Figure 94 Port Roles Change Complete165
- Table 32 NETWORK > Bridge > Port Roles165
- Bridge Technical Reference166
- Table 33 STP Path Costs166
- Table 34 STP Port States167
- WAN Screens169
Chapter 9 WAN Screens169
- Overview169
- The General Screen172
- The WAN1 and WAN2 Screen182
- The 3G (WAN2) Screen192
- Figure 108 NETWORK > WAN > 3G (WAN 2)194
- Table 45 NETWORK > WAN > 3G (WAN 2)194
- The Traffic Redirect Screen197
- Figure 109 Traffic Redirect WAN Setup197
- Configuring the Traffic Redirect Screen198
- Figure 110 Traffic Redirect LAN Setup198
- Figure 111 NETWORK > WAN > Traffic Redirect198
- Table 46 NETWORK > WAN > Traffic Redirect198
- The Dial Backup Screen199
- WAN Technical Reference204
- Table 49 2G, 2.5G, 2.75G, 3G and 3.5G Wireless Technologies204
- DMZ Screens207
Chapter 10 DMZ Screens207
- Overview207
- The DMZ Screen210
- Figure 116 DMZ Private and Public Address Example210
- Figure 117 NETWORK > DMZ211
- Table 50 NETWORK > DMZ211
- The Static DHCP Screen213
- The IP Alias Screen214
- Figure 118 NETWORK > DMZ > Static DHCP214
- Table 51 NETWORK > DMZ > Static DHCP214
- Figure 119 NETWORK > DMZ > IP Alias215
- Table 52 NETWORK > DMZ > IP Alias215
- The DMZ Port Roles Screen216
- Figure 120 NETWORK > DMZ > Port Roles216
- Table 53 NETWORK > DMZ > Port Roles216
- WLAN Screens219
Chapter 11 WLAN Screens219
- Overview219
- The WLAN Screen220
- Figure 122 NETWORK > WLAN221
- Table 54 NETWORK > WLAN221
- WLAN Static DHCP223
- WLAN IP Alias224
- Figure 123 NETWORK > WLAN > Static DHCP224
- Table 55 NETWORK > WLAN > Static DHCP224
- Figure 124 NETWORK > WLAN > IP Alias225
- Table 56 NETWORK > WLAN > IP Alias225
- WLAN Port Roles226
- Figure 125 WLAN Port Role Example226
- Figure 126 NETWORK > WLAN > Port Roles227
- Figure 127 NETWORK > WLAN > Port Roles: Change Complete227
- Table 57 NETWORK > WLAN > Port Roles227
Chapter 12 Wireless Screens229
- Overview229
- Wireless Card232
- MAC Filter243
- Figure 138 WIRELESS > Wi-Fi > MAC Filter243
- Table 66 WIRELESS > Wi-Fi > MAC Filter243
- Technical Reference244
- Figure 139 EAP Authentication245
- Figure 140 WPA-PSK Authentication246
- Figure 141 WPA with RADIUS Application Example247
Security249
Part III: Security249
- Firewall Screens251
Chapter 13 Firewall Screens251
- Overview251
  - Figure 142 Default Firewall Action251
  - Before You Begin252
  - What You Can Do Using the Firewall Screens252
  - What You Need to Know about the Zywall Firewall252
- Firewall Rules Example252
- Figure 143 Blocking All LAN to WAN IRC Traffic Example253
- Table 67 Blocking All LAN to WAN IRC Traffic Example253
- The Firewall Default Rule Screen254
- Figure 144 Limited LAN to WAN IRC Traffic Example254
- Table 68 Limited LAN to WAN IRC Traffic Example254
- Figure 145 SECURITY > FIREWALL > Default Rule (Router Mode)255
- Table 69 SECURITY > FIREWALL > Default Rule (Router Mode)255
- The Firewall Default Rule (Bridge Mode) Screen256
- Figure 146 SECURITY > FIREWALL > Default Rule (Bridge Mode)257
- Table 70 SECURITY > FIREWALL > Default Rule (Bridge Mode)257
- The Firewall Rule Summary Screen259
  - Figure 147 SECURITY > FIREWALL > Rule Summary259
  - Table 71 SECURITY > FIREWALL > Rule Summary259
  - The Firewall Edit Rule Screen260
  - Figure 148 SECURITY > FIREWALL > Rule Summary > Edit261
  - Table 72 SECURITY > FIREWALL > Rule Summary > Edit262
- The Anti-Probing Screen263
- Figure 149 SECURITY > FIREWALL > Anti-Probing263
- The Firewall Thresholds Screen264
- Figure 150 SECURITY > FIREWALL > Threshold264
- Table 73 SECURITY > FIREWALL > Anti-Probing264
- Table 74 SECURITY > FIREWALL > Threshold265
- The Firewall Services Screen266
  - Figure 151 SECURITY > FIREWALL > Service266
  - Table 75 SECURITY > FIREWALL > Service266
  - Figure 152 SECURITY > FIREWALL > Service > Add267
  - Table 76 SECURITY > FIREWALL > Service > Add267
  - The Firewall Edit Custom Service Screen267
  - Figure 153 My Service Firewall Rule Example: Service268
  - Figure 154 My Service Firewall Rule Example: Edit Custom Service268
  - My Service Firewall Rule Example268
  - Figure 155 My Service Firewall Rule Example: Rule Summary269
  - Figure 156 My Service Firewall Rule Example: Rule Edit269
  - Figure 157 My Service Firewall Rule Example: Rule Configuration270
- Technical Reference271
- Figure 158 My Service Firewall Rule Example: Rule Summary271
- Figure 159 from LAN to VPN Example273
- Figure 160 from VPN to LAN Example273
- Figure 161 from VPN to VPN Example274
- Figure 162 Using IP Alias to Solve the Triangle Route Problem275
- Figure 163 Three-Way Handshake275
- Security Considerations276
Chapter 14 Intrusion Detection and Prevention (IDP) Screens277
- Overview277
- The General Setup Screen279
- Figure 166 SECURITY > IDP > General279
- Table 77 SECURITY > IDP > General Setup280
- The Signatures Screen281
- The Anomaly Screen289
- Figure 171 Signature Query by Attribute289
- Figure 172 SECURITY > IDP > Anomaly290
- Table 83 SECURITY > IDP > Anomaly290
- The Update Screen291
- The Backup and Restore Screen293
- Technical Reference294
Chapter 15 Anti-Virus Screens299
- Overview299
- The General Screen301
- Figure 176 SECURITY > ANTI-VIRUS > General302
- Table 85 SECURITY > ANTI-VIRUS > General302
- The Signature Screen303
- The Update Screen306
- The Backup and Restore Screen309
- Figure 181 SECURITY > ANTI-VIRUS > Backup and Restore309
- Technical Reference310
- Table 87 Common Computer Virus Types310
Chapter 16 Anti-Spam Screens313
- Overview313
- The General Screen315
- Figure 183 SECURITY > ANTI-SPAM > General316
- Table 88 SECURITY > ANTI-SPAM > General316
- The External DB Screen318
- Figure 184 SECURITY > ANTI-SPAM > External DB319
- Table 89 SECURITY > ANTI-SPAM > External DB319
- The Lists Screen320
- Figure 185 SECURITY > ANTI-SPAM > Lists321
- Table 90 SECURITY > ANTI-SPAM > Lists321
- Anti-Spam Lists Edit Screen322
- Figure 186 SECURITY > ANTI-SPAM > Lists > Edit322
- Table 91 SECURITY > ANTI-SPAM > Lists > Edit323
- Technical Reference324
  - Spamcontent Engine325
  - Spamtricks Engine325
Chapter 17 Content Filtering Screens327
- Overview327
  - What You Can Do in the Content Filtering Screens327
  - What You Need to Know about Content Filtering327
- General Screen328
- Figure 187 Content Filtering Lookup Procedure328
- Figure 188 SECURITY > CONTENT FILTER > General329
- Table 92 SECURITY > CONTENT FILTER > General329
- The Policy Screen331
- Figure 189 SECURITY > CONTENT FILTER > Policy331
- Content Filter Policy: General332
- Table 93 SECURITY > CONTENT FILTER > Policy332
- Figure 190 SECURITY > CONTENT FILTER > Policy > General333
- Table 94 SECURITY > CONTENT FILTER > Policy > General333
- Content Filter Policy: External Database334
- Figure 191 SECURITY > CONTENT FILTER > Policy > External Database334
- Table 95 SECURITY > CONTENT FILTER > Policy > External Database335
- Content Filter Policy: Customization341
- Figure 192 SECURITY > CONTENT FILTER > Policy > Customization341
- Content Filter Policy: Schedule342
- Table 96 SECURITY > CONTENT FILTER > Policy > Customization342
- Content Filter Object343
- Figure 193 SECURITY > CONTENT FILTER > Policy > Schedule343
- Table 97 SECURITY > CONTENT FILTER > Policy > Schedule343
- Figure 194 SECURITY > CONTENT FILTER > Object344
- Table 98 SECURITY > CONTENT FILTER > Object345
- Content Filtering Cache346
- Figure 195 SECURITY > CONTENT FILTER > Cache346
- Table 99 SECURITY > CONTENT FILTER > Cache346
Chapter 18 Content Filtering Reports349
- Overview349
- Checking Content Filtering Activation349
- Viewing Content Filtering Reports349
- Figure 196 Myzyxel.com: Login350
- Figure 197 Myzyxel.com: Welcome350
- Figure 198 Myzyxel.com: Service Management351
- Figure 199 Blue Coat: Login351
- Figure 200 Content Filtering Reports Main Screen352
- Figure 201 Blue Coat: Report Home352
- Figure 202 Global Report Screen Example353
- Web Site Submission354
- Figure 203 Requested Urls Example354
- Figure 204 Web Page Review Process Screen355
- Ipsec VPN357
Chapter 19 Ipsec VPN357
- Overview357
  - What You Can Do in the Ipsec VPN Screens357
  - Figure 205 VPN: Example357
  - What You Need to Know about Ipsec VPN358
  - Figure 206 VPN: IKE SA and Ipsec SA358
  - Figure 207 Gateway and Network Policies359
  - Figure 208 Ipsec Fields Summary359
- The VPN Rules (IKE) Screen360
- Figure 209 SECURITY > VPN > VPN Rules (IKE)360
- Table 100 SECURITY > VPN > VPN Rules (IKE)360
- The VPN Rules (IKE) Gateway Policy Edit Screen361
- Figure 210 SECURITY > VPN > VPN Rules (IKE) > Edit Gateway Policy362
- Table 101 SECURITY > VPN > VPN Rules (IKE) > Edit Gateway Policy363
- The Network Policy Edit Screen367
- Figure 211 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy368
- Table 102 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy369
- The Network Policy Edit: Port Forwarding Screen372
- Figure 212 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy > Port Forwarding373
- Table 103 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy > Port Forwarding373
- The Network Policy Move Screen374
- Figure 213 SECURITY > VPN > VPN Rules (IKE) > Move Network Policy374
- Table 104 SECURITY > VPN > VPN Rules (IKE) > Move Network Policy374
- The VPN Rules (Manual) Screen375
- Figure 214 SECURITY > VPN > VPN Rules (Manual)375
- Table 105 SECURITY > VPN > VPN Rules (Manual)375
- The VPN Rules (Manual): Edit Screen376
- Figure 215 SECURITY > VPN > VPN Rules (Manual) > Edit376
- Table 106 SECURITY > VPN > VPN Rules (Manual) > Edit377
- The VPN SA Monitor Screen379
- The VPN Global Setting Screen379
- Figure 216 SECURITY > VPN > SA Monitor379
- Table 107 SECURITY > VPN > SA Monitor379
- Figure 217 Overlap in a Dynamic VPN Rule380
- Figure 218 Overlap in IP Alias and VPN Remote Networks381
- Figure 219 SECURITY > VPN > Global Setting381
- Table 108 SECURITY > VPN > Global Setting381
- Telecommuter Vpn/Ipsec Examples382
  - Telecommuters Sharing One VPN Rule Example383
  - Telecommuters Using Unique VPN Rules Example383
  - Figure 220 Telecommuters Sharing One VPN Rule Example383
  - Table 109 Telecommuters Sharing One VPN Rule Example383
  - Figure 221 Telecommuters Using Unique VPN Rules Example384
  - Table 110 Telecommuters Using Unique VPN Rules Example384
- VPN and Remote Management385
- Hub-And-Spoke VPN385
  - Figure 222 VPN for Remote Management Example385
  - Figure 223 VPN Topologies386
  - Hub-And-Spoke VPN Example386
  - Figure 224 Hub-And-Spoke VPN Example387
  - Hub-And-Spoke Example VPN Rule Addresses387
  - Hub-And-Spoke VPN Requirements and Suggestions387
- Ipsec VPN Background Information388
  - Figure 225 IKE SA: Main Negotiation Mode, Steps 1 - 2: IKE SA Proposal388
  - Figure 226 IKE SA: Main Negotiation Mode, Steps 3 - 4: DH Key Exchange389
  - Figure 227 IKE SA: Main Negotiation Mode, Steps 5 - 6: Authentication389
  - Table 111 VPN Example: Matching ID Type and Content390
  - Table 112 VPN Example: Mismatching ID Type and Content390
  - Figure 228 VPN/NAT Example392
  - Figure 229 Virtual Mapping of Local and Remote Network IP Addresses394
  - Figure 230 VPN: Transport and Tunnel Mode Encapsulation394
  - Ipsec Sa Proposal and Perfect Forward Secrecy395
  - Ipsec Sa Using Manual Keys395
  - Additional Ipsec Vpn Topics396
- Figure 231 Ipsec High Availability397
Chapter 20 Certificates399
- Overview399
  - What You Can Do in the Certificate Screens399
  - What You Need to Know about Certificates399
  - Verifying a Certificate400
  - Figure 232 Certificates on Your Computer400
- The My Certificates Screen401
  - Figure 233 Certificate Details401
  - Figure 234 SECURITY > CERTIFICATES > My Certificates402
  - Table 113 SECURITY > CERTIFICATES > My Certificates402
  - The My Certificate Details Screen403
  - Figure 235 SECURITY > CERTIFICATES > My Certificates > Details404
  - Table 114 SECURITY > CERTIFICATES > My Certificates > Details404
- The My Certificate Export Screen406
- Figure 236 SECURITY > CERTIFICATES > My Certificates > Export406
- Table 115 SECURITY > CERTIFICATES > My Certificates > Export406
- The My Certificate Import Screen407
  - Using the My Certificate Import Screen407
  - Figure 237 SECURITY > CERTIFICATES > My Certificates > Import408
  - Figure 238 SECURITY > CERTIFICATES > My Certificates > Import: PKCS#12408
  - Table 116 SECURITY > CERTIFICATES > My Certificates > Import408
  - Table 117 SECURITY > CERTIFICATES > My Certificates > Import: PKCS#12408
- The My Certificate Create Screen409
- Figure 239 SECURITY > CERTIFICATES > My Certificates > Create (Basic)409
- Figure 240 SECURITY > CERTIFICATES > My Certificates > Create (Advanced)410
- Table 118 SECURITY > CERTIFICATES > My Certificates > Create410
- The Trusted Cas Screen413
- Figure 241 SECURITY > CERTIFICATES > Trusted Cas414
- Table 119 SECURITY > CERTIFICATES > Trusted Cas414
- The Trusted CA Details Screen415
- Figure 242 SECURITY > CERTIFICATES > Trusted Cas > Details416
- Table 120 SECURITY > CERTIFICATES > Trusted Cas > Details416
- The Trusted CA Import Screen418
- The Trusted Remote Hosts Screen419
- Figure 243 SECURITY > CERTIFICATES > Trusted Cas > Import419
- Table 121 SECURITY > CERTIFICATES > Trusted Cas Import419
- Figure 244 SECURITY > CERTIFICATES > Trusted Remote Hosts420
- Table 122 SECURITY > CERTIFICATES > Trusted Remote Hosts420
- The Trusted Remote Hosts Import Screen421
- Figure 245 SECURITY > CERTIFICATES > Trusted Remote Hosts > Import421
- Table 123 SECURITY > CERTIFICATES > Trusted Remote Hosts > Import421
- The Trusted Remote Host Certificate Details Screen422
- Figure 246 SECURITY > CERTIFICATES > Trusted Remote Hosts > Details422
- Table 124 SECURITY > CERTIFICATES > Trusted Remote Hosts > Details423
- The Directory Servers Screen424
- Figure 247 SECURITY > CERTIFICATES > Directory Servers424
- The Directory Server Add or Edit Screen425
- Figure 248 SECURITY > CERTIFICATES > Directory Server > Add425
- Table 125 SECURITY > CERTIFICATES > Directory Servers425
- Table 126 SECURITY > CERTIFICATES > Directory Server > Add426
Chapter 21 Authentication Server Screens427
- Overview427
  - What You Can Do in the Authentication Server Screens427
  - What You Need to Know about Authentication Server427
- The Local User Database Screen428
- Figure 249 SECURITY > AUTH SERVER > Local User Database429
- The RADIUS Screen430
- Figure 250 SECURITY > AUTH SERVER > RADIUS430
- Table 127 SECURITY > AUTH SERVER > Local User Database430
- Table 128 SECURITY > AUTH SERVER > RADIUS430
Advanced433
Chapter 22 Network Address Translation (NAT)435
- Overview435
- The NAT Overview Screen436
- Table 129 NAT Mapping Types436
- Figure 251 ADVANCED > NAT > NAT Overview437
- Table 130 ADVANCED > NAT > NAT Overview437
- The NAT Address Mapping Screen438
- The Port Forwarding Screen441
- The Port Triggering Screen445
- Technical Reference447
- Figure 259 NAT Overview448
- Figure 260 NAT Application with IP Alias449
- Figure 261 Port Restricted Cone NAT Example450
- Static Route Screens451
Chapter 23 Static Route Screens451
- Overview451
  - What You Can Do in the Static Route Screens451
  - Figure 262 Example of Static Routing Topology451
- The IP Static Route Screen452
Chapter 24 Policy Route Screens457
- Overview457
  - What You Can Do in the Policy Route Screens457
  - What You Need to Know about Policy Route457
- The Policy Route Summary Screen458
Chapter 25 Bandwidth Management Screens465
- Overview465
- The Summary Screen467
- The Class Setup Screen471
- Table 144 Fairness-Based Allotment of Unused and Unbudgeted Bandwidth Example471
- Figure 269 ADVANCED > BW MGMT > Class Setup472
- Table 145 ADVANCED > BW MGMT > Class Setup472
- Bandwidth Manager Class Configuration473
- Bandwidth Management Statistics477
- Figure 271 ADVANCED > BW MGMT > Class Setup > Statistics477
- The Monitor Screen478
- Figure 272 ADVANCED > BW MGMT > Monitor478
Chapter 26 DNS Screens479
- Overview479
  - What You Can Do in the DNS Screens479
  - What You Need to Know about DNS479
- The System Screen481
- The DNS Cache Screen485
- Figure 277 ADVANCED > DNS > Cache486
- The DHCP Screen487
- Figure 278 ADVANCED > DNS > DHCP487
- The DDNS Screen488
- Configuring the Dynamic DNS Screen489
- Figure 279 ADVANCED > DNS > DDNS489
Chapter 27 Remote Management Screens491
- Overview491
  - What You Can Do in the Remote Management Screens491
  - Figure 280 Secure and Insecure Remote Management from the WAN491
  - What You Need to Know about Remote Management492
- HTTPS Example493
  - Internet Explorer Warning Messages493
  - Netscape Navigator Warning Messages493
  - Figure 281 Security Alert Dialog Box (Internet Explorer)493
  - Avoiding the Browser Warning Messages494
  - Figure 282 Security Certificate 1 (Netscape)494
  - Figure 283 Security Certificate 2 (Netscape)494
  - Login Screen495
  - Figure 284 Example: Lock Denoting a Secure Connection495
  - Figure 285 Replace Certificate495
  - Enrolling and Importing SSL Client Certificates (Example)496
  - Figure 286 Device-Specific Certificate496
  - Figure 287 Common Zywall Certificate496
  - Installing the Ca's Certificate (Example)497
  - Figure 288 Zywall Trusted CA Screen497
  - Installing Your Personal Certificate(S) (Example)498
  - Figure 289 CA Certificate Example498
  - Figure 290 Personal Certificate Import Wizard 1499
  - Figure 291 Personal Certificate Import Wizard 2499
  - Figure 292 Personal Certificate Import Wizard 3500
  - Figure 293 Personal Certificate Import Wizard 4500
  - Using a Certificate When Accessing the Zywall (Example)501
  - Figure 294 Personal Certificate Import Wizard 5501
  - Figure 295 Personal Certificate Import Wizard 6501
  - Figure 296 Access the Zywall Via HTTPS501
  - Secure Telnet Using SSH Examples502
  - Figure 297 SSL Client Authentication502
  - Figure 298 Secure Web Configurator Login Screen502
  - Figure 299 SSH Example 1: Store Host Key503
  - Figure 300 SSH Example 2: Test503
  - Figure 301 SSH Example 2: Log in503
- The WWW Screen504
- Figure 302 Secure FTP: Firmware Upload Example504
- Configuring the WWW Screen505
- Figure 303 HTTPS Implementation505
- Figure 304 ADVANCED > REMOTE MGMT > WWW506
- Table 149 ADVANCED > REMOTE MGMT > WWW506
- The SSH Screen507
- Configuring the SSH Screen507
- Figure 305 SSH Communication over the WAN Example507
- The Telnet Screen508
- Figure 306 ADVANCED > REMOTE MGMT > SSH508
- Table 150 ADVANCED > REMOTE MGMT > SSH508
- The FTP Screen509
- Figure 307 ADVANCED > REMOTE MGMT > Telnet509
- Table 151 ADVANCED > REMOTE MGMT > Telnet509
- The SNMP Screen510
  - Figure 308 ADVANCED > REMOTE MGMT > FTP510
  - Table 152 ADVANCED > REMOTE MGMT > FTP510
  - Figure 309 SNMP Management Model511
  - Configuring the SNMP Screen512
  - Figure 310 ADVANCED > REMOTE MGMT > SNMP512
  - Table 153 SNMP Traps512
- The DNS Screen513
- Table 154 ADVANCED > REMOTE MGMT > SNMP513
- The CNM Screen514
- Configuring the CNM Screen514
- Figure 311 ADVANCED > REMOTE MGMT > DNS514
- Table 155 ADVANCED > REMOTE MGMT > DNS514
- Figure 312 ADVANCED > REMOTE MGMT > CNM515
- Table 156 ADVANCED > REMOTE MGMT > CNM515
- Remote Management Technical Reference516
- Figure 313 How SSH Works516
Chapter 28 Upnp Screens519
- Overview519
  - What You Can Do in the Upnp Screens519
  - What You Need to Know about Upnp519
- Upnp Examples520
  - Installing Upnp in Windows Example520
  - Using Upnp in Windows XP Example522
- The Upnp Screen526
- Figure 314 ADVANCED > Upnp526
- Table 157 ADVANCED > Upnp526
- The Ports Screen527
- Figure 315 ADVANCED > Upnp > Ports527
- Table 158 ADVANCED > Upnp > Ports527
Chapter 29 Custom Application Screen529
- Overview529
  - What You Can Do in the Custom Application Screen529
  - What You Need to Know about Custom Application529
- The Custom Application Screen529
- Figure 316 ADVANCED > Custom APP530
- Table 159 ADVANCED > Custom APP530
- ALG Screen531
Chapter 30 ALG Screen531
- Overview531
- Figure 319 H.323 Calls from the WAN with Multiple Outgoing Calls534
- Figure 320 SIP ALG Example535
- The ALG Screen535
- Figure 321 ADVANCED > ALG536
- Table 160 ADVANCED > ALG536
Reports, Logs and Maintenance537
Part V: Reports, Logs and Maintenance537
Chapter 31 Reports Screens539
- Overview539
  - What You Can Do in the Reports Screens539
- The Traffic Statistics Screen539
  - Figure 322 REPORTS > Traffic Statistics540
  - Table 161 REPORTS > Traffic Statistics540
  - Viewing Web Site Hits541
  - Figure 323 REPORTS > Traffic Statistics: Web Site Hits Example542
  - Table 162 REPORTS > Traffic Statistics: Web Site Hits Report542
  - Viewing Host IP Address542
  - Figure 324 REPORTS > Traffic Statistics: Host IP Address Example543
  - Table 163 REPORTS > Traffic Statistics: Host IP Address543
  - Viewing Protocol/Port543
  - Figure 325 REPORTS > Traffic Statistics: Protocol/Port Example544
  - Table 164 REPORTS > Traffic Statistics: Protocol/ Port544
  - System Reports Specifications545
- The IDP Screen545
- Figure 326 REPORTS > IDP545
- Table 165 Report Specifications545
- Table 166 REPORTS > IDP546
- The Anti-Virus Screen547
- Figure 327 REPORTS > IDP > Source547
- Figure 328 REPORTS > IDP > Destination547
- Figure 329 REPORTS > Anti-Virus547
- Figure 330 REPORTS > Anti-Virus > Source548
- Table 167 REPORTS > Anti-Virus548
- The Anti-Spam Screen549
- Figure 331 REPORTS > Anti-Virus > Destination549
- Figure 332 REPORTS > Anti-Spam549
- Table 168 REPORTS > Anti-Spam549
- The E-Mail Report Screen551
- Figure 333 REPORTS > Anti-Spam > Source551
- Figure 334 REPORTS > Anti-Spam > Score Distribution551
- Figure 335 REPORTS > E-Mail Report552
- Table 169 REPORTS > E-Mail Report552
Chapter 32 Logs Screens555
- Overview555
  - What You Can Do in the Log Screens555
  - What You Need to Know about Logs555
- The View Log Screen555
  - Log Description Example556
  - Figure 336 LOGS > View Log556
  - Table 170 LOGS > View Log556
  - About the Certificate Not Trusted Log557
  - Table 171 Log Description Example557
- The Log Settings Screen558
- Figure 337 Myzyxel.com: Download Center558
- Figure 338 Myzyxel.com: Certificate Download558
- Figure 339 LOGS > Log Settings559
- Table 172 LOGS > Log Settings559
- Technical Reference561
- Table 173 System Maintenance Logs561
- Table 174 System Error Logs563
- Table 175 Access Control Logs563
- Table 176 TCP Reset Logs564
- Table 177 Packet Filter Logs565
- Table 178 ICMP Logs565
- Table 179 CDR Logs566
- Table 180 PPP Logs566
- Table 181 3G Logs566
- Table 182 Upnp Logs567
- Table 183 Content Filtering Logs568
- Table 184 Attack Logs568
- Table 185 Remote Management Logs570
- Table 186 Wireless Logs570
- Table 187 Ipsec Logs571
- Table 188 IKE Logs571
- Table 189 PKI Logs574
- Table 190 802.1X Logs576
- Table 191 ACL Setting Notes577
- Table 192 ICMP Notes578
- Table 193 IDP Logs579
- Table 194 AV Logs579
- Table 195 as Logs581
- Table 196 Syslog Logs583
- Table 197 RFC-2408 ISAKMP Payload Types584
Chapter 33 Maintenance Screens585
- Overview585
  - What You Can Do in the Maintenance Screens585
- The General Setup Screen585
- The Password Screen586
- Figure 340 MAINTENANCE > General Setup586
- Table 198 MAINTENANCE > General Setup586
- The Time and Date Screen587
  - Figure 341 MAINTENANCE > Password587
  - Table 199 MAINTENANCE > Password587
  - Figure 342 MAINTENANCE > Time and Date588
  - Table 200 MAINTENANCE > Time and Date588
  - Figure 343 Synchronization in Process590
  - Figure 344 Synchronization Is Successful590
  - Time Server Synchronization Example590
- The Device Mode Screen591
- Figure 345 Synchronization Fail591
- Table 201 MAC-Address-To-Port Mapping Table591
- Configuring the Device Mode Screen (Router)592
- Configuring the Device Mode Screen (Bridge)593
- Figure 346 MAINTENANCE > Device Mode (Router Mode)593
- Table 202 MAINTENANCE > Device Mode (Router Mode)593
- Figure 347 MAINTENANCE > Device Mode (Bridge Mode)594
- Table 203 MAINTENANCE > Device Mode (Bridge Mode)594
- The F/W Upload Screen595
- Figure 348 MAINTENANCE > Firmware Upload595
- Table 204 MAINTENANCE > Firmware Upload595
- Figure 349 Firmware Upload in Process596
- Figure 350 Network Temporarily Disconnected596
- Figure 351 Firmware Upload Error596
- The Backup and Restore Screen597
- Figure 352 MAINTENANCE > Backup and Restore597
- Table 205 Restore Configuration597
- Figure 353 Configuration Upload Successful598
- Figure 354 Network Temporarily Disconnected598
- Figure 355 Configuration Upload Error598
- The Restart Screen599
- The Diagnostics Screen599
- Figure 356 Reset Warning Message599
- Figure 357 MAINTENANCE > Restart599
- Figure 358 MAINTENANCE > Diagnostics600
- Table 206 MAINTENANCE > Diagnostics600
Smt603
Part VI: SMT603
Chapter 34 Introducing the SMT605
- Introduction to the SMT605
- Accessing the SMT Via the Console Port605
  - Initial Screen605
  - Entering the Password606
- Navigating the SMT Interface606
- Changing the System Password610
- Resetting the Zywall611
- Figure 363 Menu 23: System Password611
Chapter 35 SMT Menu 1 - General Setup613
- Introduction to General Setup613
- Configuring General Setup613
Chapter 36 WAN and Dial Backup Setup619
- Introduction to WAN and Dial Backup Setup619
- WAN Setup619
- Figure 369 MAC Address Cloning in WAN Setup619
- Dial Backup620
Chapter 37 LAN Setup633
- Introduction to LAN Setup633
- Accessing the LAN Menus633
- LAN Port Filter Setup633
- Figure 378 Menu 3: LAN Setup633
- TCP/IP and DHCP Ethernet Setup Menu634
- Internet Access639
Chapter 38 Internet Access639
- Introduction to Internet Access Setup639
- Ethernet Encapsulation639
- Figure 383 Menu 4: Internet Access Setup (Ethernet)640
- Table 227 Menu 4: Internet Access Setup (Ethernet)640
- Configuring the PPTP Client641
- Configuring the Pppoe Client642
- Figure 384 Internet Access Setup (PPTP)642
- Table 228 New Fields in Menu 4 (PPTP) Screen642
- Basic Setup Complete643
- Figure 385 Internet Access Setup (Pppoe)643
- Table 229 New Fields in Menu 4 (Pppoe) Screen643
Chapter 39645
- DMZ Setup645
Chapter 40 Route Setup649
- Configuring Route Setup649
- Route Assessment649
- Figure 391 Menu 6: Route Setup649
- Figure 392 Menu 6.1: Route Assessment649
- Traffic Redirect650
- Figure 393 Menu 6.2: Traffic Redirect650
- Table 230 Menu 6.1: Route Assessment650
- Table 231 Menu 6.2: Traffic Redirect650
- Route Failover651
- Figure 394 Menu 6.3: Route Failover651
- Table 232 Menu 6.3: Route Failover651
- Wireless Setup653
Chapter 41 Wireless Setup653
- Wireless LAN Setup653
- TCP/IP Setup656
Chapter 42 Remote Node Setup659
- Introduction to Remote Node Setup659
- Figure 400 Menu 11: Remote Node Setup659
- Remote Node Profile Setup660
- Edit IP664
- Figure 403 Menu 11.1: Remote Node Profile for PPTP Encapsulation664
- Table 237 Menu 11.1: Remote Node Profile for PPTP Encapsulation664
- Figure 404 Menu 11.1.2: Remote Node Network Layer Options for Ethernet Encapsulation665
- Table 238 Remote Node Network Layer Options Menu Fields665
- Remote Node Filter666
- Figure 405 Menu 11.1.4: Remote Node Filter (Ethernet Encapsulation)667
- Figure 406 Menu 11.1.4: Remote Node Filter (Pppoe or PPTP Encapsulation)667
- IP Static Route Setup669
Chapter 43 IP Static Route Setup669
- Figure 407 Menu 12: IP Static Route Setup670
Chapter 44 Network Address Translation (NAT)674
- Figure 409 Menu 4: Applying NAT for Internet Access674
Chapter 45 Introducing the Zywall Firewall693
- Using Zywall SMT Menus693
- Filter Configuration695
Chapter 46 Filter Configuration695
- Introduction to Filters695
- Configuring a Filter Set698
- Example Filter704
- Figure 443 Telnet Filter Example704
- Figure 444 Example Filter: Menu 21.1.3.1705
- Figure 445 Example Filter Rules Summary: Menu 21.1.3705
- Filter Types and NAT706
- Firewall Versus Filters706
- Applying a Filter707
- SNMP Configuration711
Chapter 47 SNMP Configuration711
- Figure 450 Menu 22: SNMP Configuration711
Chapter 48 System Information & Diagnosis713
- Introduction to System Status713
- System Status713
- Figure 451 Menu 24: System Maintenance713
- Figure 452 Menu 24.1: System Maintenance: Status714
- Table 252 System Maintenance: Status Menu Fields714
- System Information and Console Port Speed715
- Log and Trace717
- Diagnostic722
Chapter 49 Firmware and Configuration File Maintenance725
- Introduction725
- Filename Conventions725
- Firmware and Configuration File Maintenance726
- Backup Configuration726
- Restore Configuration730
- Uploading Firmware and Configuration Files733
Chapter 50 System Maintenance Menus 8 to 10739
- Command Interpreter Mode739
- Figure 481 Command Mode in Menu 24739
- Call Control Support740
- Time and Date Setting742
- Figure 485 Menu 24: System Maintenance742
- Figure 486 Menu 24.10 System Maintenance: Time and Date Setting743
- Table 261 Menu 24.10 System Maintenance: Time and Date Setting743
Chapter 51 Remote Management745
- Figure 487 Menu 24.11 - Remote Management Control746
Chapter 52 IP Policy Routing749
- IP Routing Policy Summary749
- Figure 488 Menu 25: Sample IP Routing Policy Summary749
- Table 263 Menu 25: Sample IP Routing Policy Summary749
- IP Routing Policy Setup750
- IP Policy Routing Example753
- Figure 490 Menu 25.1.1: IP Routing Policy Setup753
- Table 266 Menu 25.1.1: IP Routing Policy Setup753
- Figure 491 Example of IP Policy Routing754
- Figure 492 IP Routing Policy Example 1754
- Figure 493 IP Routing Policy Example 2755
- Call Scheduling757
Chapter 53 Call Scheduling757
- Introduction to Call Scheduling757
- Figure 494 Schedule Setup757
- Figure 495 Schedule Set Setup758
- Table 267 Schedule Set Setup758
- Figure 496 Applying Schedule Set(S) to a Remote Node (Pppoe)759
- Figure 497 Applying Schedule Set(S) to a Remote Node (PPTP)760
Part VII: Troubleshooting and Product Specifications761
- Troubleshooting763
Troubleshooting and Product Specifications761
Chapter 54 Troubleshooting763
- Power, Hardware Connections, and Leds763
- Zywall Access and Login764
- Internet Access766
- Wireless Router/Ap Troubleshooting767
- Upnp768
Chapter 55 Product Specifications769
- Table 268 Hardware Specifications769
Part VIII: Appendices and Index779
Appendices and Index779
Appendix A Removing and Installing a Fuse781
Appendix A Removing and Installing a Fuse782
Appendix B Common Services783
- Table 283 Commonly Used Services783
Appendix C Wireless Lans787
- Figure 499 Peer-To-Peer Communication in an Ad-Hoc Network787
- Figure 500 Basic Service Set788
- Figure 501 Infrastructure WLAN789
- Figure 502 RTS/CTS790
- Table 284 IEEE 802.11G791
- Table 285 Wireless Security Levels792
- Types of Eap Authentication793
Appendix D Windows 98 Se/Me Requirements for Anti-Virus Message Display801
- Figure 505 Windows 98 SE: Winpopup801
- Figure 506 Windows 98 SE: Program Task Bar802
- Figure 507 Windows 98 SE: Task Bar Properties802
- Figure 508 Windows 98 SE: Startup803
- Figure 509 Windows 98 SE: Startup: Create Shortcut803
- Figure 510 Windows 98 SE: Startup: Select a Title for the Program804
- Figure 511 Windows 98 SE: Startup: Shortcut804
Appendix E Legal Information805
Appendix E Legal Information806
- Zyxel Limited Warranty807
Appendix F Customer Support809
Appendix F Customer Support810
Index815

ZyXEL Communications 5 Series - Figure 210 SECURITY > VPN > VPN Rules (IKE) > Edit Gateway Policy

Table of Contents

Related product manuals